Hacking Articles Tips Tricks Videos Tutorials
469 subscribers
65.9K photos
15 videos
157 files
132K links
Exploit
Pentesting
Hacking
Red Team
Blue Team
Kali Linux
Bug Bounty
Black Hat
Cyber security etc

@Hacking_Video
@Hacking_attack
Download Telegram
hacking: security in practice
Am I Stupid?

Hi guys. Delete if not allowed or point me in the right direction if it belongs elsewhere! I have a high amount of credit card debt due to personal bad decisions and I posted in another sub about it a while back. Since that day I’ve had someone anonymous reach out to me on Reddit and now on discord with a way to help and I’m not sure how I feel. Not sure if anyone has had experience with something like this or if it feels fishy but in simple terms this person is offering to purchase a malware that takes dormant crypto currency from dormant wallets and transfers them to theirs (or one they set up for me). They then use that crypto to make payments on my credit card accounts and eliminate the debt, after which the crypto will be used for paying off the malware purchase. Everything is telling me it’s fake and I haven’t considered it much but there is a part of me that’s curious. Does this sound possible or fishy and fraud? I’m already in debt, don’t need legal trouble and/or worse financial pain if someone steals access to my accounts.

Thanks in advance.

submitted by /u/DankyBudz31
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video
hacking: security in practice
Is the Emagnet software harmful?

Supposedly it’s used to pull emails and passwords from leaked databases but I don’t know if it’s a reliable source.

submitted by /u/lthorn73
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video
hacking: security in practice
Is their any community for clan system for hackers? like gamers do

Gamers have teams, clans and stuffs where they play, practice, learn together. They try strats, plays custom modes and stuffs. I wonder if there is anything like this but for hackers. No i am not talking about malicious hacking group. White hat hacking to choose a project together try to solve it together like a team.

TBH i don't have any friends with same interest, so it's kinda boring to keep going alone. And I am not seeking for competitive style. Casual, Hobby kinda community. And yes i am a kid.

submitted by /u/muza_xi
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video
hacking: security in practice
Do hackers who use public WiFi can caught very often and how do they get caught?

I'm not asking about people who physically go into a place with public WiFi as there is usually camera footage etc which can be linked.

I listen to darknet diaries podcast and people often get caught from making a mistake which reveals their IP address.

If they purchased a used laptop from someone's house off Craigslist, removed the wireless adapter and camera and purchased an external USB WiFi adapter with extra long range and accessed public WiFi from a distance, say from their house or from their place of work. The computer they used never had any personal logins and no personal data on the computer and they used MAC spoofing software and or TOR. After every session they removed the laptop battery and USB WiFi adapter. What could be used here to track them, no video evidence and no personal data to track them, and if they make a mistake the only IP address that will be revealed is the public WiFI. Or even they could just hack into a weak security router in their neighbourhood. Why don't more hackers and cybercriminals use this method? Do they and they are the criminals that evade the law for longer?

submitted by /u/Invitza
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video
hacking: security in practice
Is this a bad SQL Script?

I'm a complete beginner, and have been tasked to gain access to a database through the website, I managed to do that, but I don't know what I got exactly. I'm looking for some explanations basically.



I have a web page:

User name: _ _ _ _ _ _ _ _ _ Password: _ _ _ _ _ _ _ _

One thing I can do to this webpage is add the following SQL injections:

1. leave the username empty, and move to the password filed.
2. on the password field, input this: ';SELECT * FROM members;'

members is the name of the database.

Anyway, I then submit my past, and view the raw html source (the html script)

in it, I get the names of all the users and there password, but I also see this line:

What does this mean exactly, I know behind the password field is the stuff and I inputted, but what does the line as a whole mean? Is it a username and password verification script? if yes is it weak?

submitted by /u/swiftcoderx
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video
hacking: security in practice
What does ncrack read exactly?

I understand that ftp is an unsafe file transfer protocol, when I run an ncrack on the ftp ip, what's happening? I get different username and password, some of them are right and others are not? my questions are:

Why am I getting failed username and passowrd?

what does ncrack have in relations with ftp?

Here are the commands:
ncrack ftp://192.168.1.3/24
From this I get this:
192.168.1.2/tcp ftp: 'anonymous' '123456' 192.168.1.2/tcp ftp: 'guest' '123456' 192.168.1.2/tcp ftp: 'anonymous' '123456789' 192.168.1.2/tcp ftp: 'anonymous' 'password' 192.168.1.2/tcp ftp: 'anonymous' 'iloveyou' 192.168.1.2/tcp ftp: 'anonymous' 'princess'
What is actually happening here?

Thank you.

submitted by /u/swiftcoderx
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video
hacking: security in practice
How does Parameterised prevent SQL Injections?

I've read that Parameterised can be used to prevent SQL injections, but not sure how, I have a web page where I used sql injections to get access into it like so :

webpage:

username: _ _ _ _ _ _ _

password: _ _ _ _ _ _ _

I got to the password field and Input the following command:
';SELECT * FROM members;'
Some explained to me what this command is doing, it's essentially by passing the username and password and adding a sql injection after them, this is how it looks like on the backend.
select members.id from members where name='' and password='';SELECT * FROM members -->
Now, how would Parameterised Stop this SQL injection?

submitted by /u/swiftcoderx
[link] [comments]
Sent by @TheFeedReaderBot

___________________________
@hacking_Attack
@Hacking_Video