hacking: security in practice
Is the Emagnet software harmful?

Supposedly it’s used to pull emails and passwords from leaked databases but I don’t know if it’s a reliable source.

submitted by /u/lthorn73
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Is their any community for clan system for hackers? like gamers do

Gamers have teams, clans and stuffs where they play, practice, learn together. They try strats, plays custom modes and stuffs. I wonder if there is anything like this but for hackers. No i am not talking about malicious hacking group. White hat hacking to choose a project together try to solve it together like a team.

TBH i don't have any friends with same interest, so it's kinda boring to keep going alone. And I am not seeking for competitive style. Casual, Hobby kinda community. And yes i am a kid.

submitted by /u/muza_xi
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

https://preview.redd.it/8nhj40tpnhw91.jpg?width=640&crop=smart&auto=webp&s=aed836b9d0a2b0429457a748d5a9dcf7baaadff0 submitted by /u/DrinkMoreCodeMore
[link] [comments]

hacking: security in practice
Do hackers who use public WiFi can caught very often and how do they get caught?

I'm not asking about people who physically go into a place with public WiFi as there is usually camera footage etc which can be linked.

I listen to darknet diaries podcast and people often get caught from making a mistake which reveals their IP address.

If they purchased a used laptop from someone's house off Craigslist, removed the wireless adapter and camera and purchased an external USB WiFi adapter with extra long range and accessed public WiFi from a distance, say from their house or from their place of work. The computer they used never had any personal logins and no personal data on the computer and they used MAC spoofing software and or TOR. After every session they removed the laptop battery and USB WiFi adapter. What could be used here to track them, no video evidence and no personal data to track them, and if they make a mistake the only IP address that will be revealed is the public WiFI. Or even they could just hack into a weak security router in their neighbourhood. Why don't more hackers and cybercriminals use this method? Do they and they are the criminals that evade the law for longer?

submitted by /u/Invitza
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Is this a bad SQL Script?

I'm a complete beginner, and have been tasked to gain access to a database through the website, I managed to do that, but I don't know what I got exactly. I'm looking for some explanations basically.

​

I have a web page:

User name: _ _ _ _ _ _ _ _ _ Password: _ _ _ _ _ _ _ _

One thing I can do to this webpage is add the following SQL injections:

1. leave the username empty, and move to the password filed.
2. on the password field, input this: ';SELECT * FROM members;'

members is the name of the database.

Anyway, I then submit my past, and view the raw html source (the html script)

in it, I get the names of all the users and there password, but I also see this line:

What does this mean exactly, I know behind the password field is the stuff and I inputted, but what does the line as a whole mean? Is it a username and password verification script? if yes is it weak?

submitted by /u/swiftcoderx
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
What does ncrack read exactly?

I understand that ftp is an unsafe file transfer protocol, when I run an ncrack on the ftp ip, what's happening? I get different username and password, some of them are right and others are not? my questions are:

Why am I getting failed username and passowrd?

what does ncrack have in relations with ftp?

Here are the commands:
ncrack ftp://192.168.1.3/24
From this I get this:
192.168.1.2/tcp ftp: 'anonymous' '123456' 192.168.1.2/tcp ftp: 'guest' '123456' 192.168.1.2/tcp ftp: 'anonymous' '123456789' 192.168.1.2/tcp ftp: 'anonymous' 'password' 192.168.1.2/tcp ftp: 'anonymous' 'iloveyou' 192.168.1.2/tcp ftp: 'anonymous' 'princess'
What is actually happening here?

Thank you.

submitted by /u/swiftcoderx
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Will I get in legal trouble if I purchase I USB rubber ducky?

I live in Australia and have been contemplating purchasing one but don't want to get in any legal trouble or anything if I do end up buying one

submitted by /u/ilikefrogs101_dev
[link] [comments]
➖ Sent by @TheFeedReaderBot ➖

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How does Parameterised prevent SQL Injections?

I've read that Parameterised can be used to prevent SQL injections, but not sure how, I have a web page where I used sql injections to get access into it like so :

webpage:

username: _ _ _ _ _ _ _

password: _ _ _ _ _ _ _

I got to the password field and Input the following command:
';SELECT * FROM members;'
Some explained to me what this command is doing, it's essentially by passing the username and password and adding a sql injection after them, this is how it looks like on the backend.
select members.id from members where name='' and password='';SELECT * FROM members -->
Now, how would Parameterised Stop this SQL injection?

submitted by /u/swiftcoderx
[link] [comments]
➖ Sent by @TheFeedReaderBot ➖

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
What Programming Language Do Hackers Use in 2022?

https://cdn-images-1.medium.com/max/626/0*Dhru4kcRKAGP4xvI.jpg
Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
What can a hacker do with an IP address? How do hackers obtain such confidential information?

https://cdn-images-1.medium.com/max/603/1*QBYqLNZgRazrT8nWD1VY0w.png
What can a hacker do with an IP address?
well, let’s dive straight into the heart of the question.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
$MOO token price increased from $0.018 to 0.65$ when the attacker repeated the cycle

https://cdn-images-1.medium.com/max/1322/1*gXsW2AJL-qUuJEzKOtDWLA.jpeg
Moola is a non-custodial protocol built on the Celo blockchain in which depositors earn compound interest which is paid for by borrowers…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
CTF Journal 14 — Try Hack Me — Upload Vulnerability(2/?)

https://cdn-images-1.medium.com/max/1536/1*H4B5ykeFq-zf4TCkI4Mn0g.png
2022/10/27

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

How to get as good as possible in pentesting in 4 months?
https://www.reddit.com/r/Pentesting/comments/yfiar6/how_to_get_as_good_as_possible_in_pentesting_in_4/

the title is probably cringe but I want to push myself and become as good as possible in pentesting in 4 months. I already have some osdev and webdev exprience, and have recently done some CTFs but I think I should first learn about networking before I start using tools to solve CTFs. So I was thinking of doing LFS, making a network stack for my OS, and reading books about networking/pentesting, and then playing some CTFs. Can you recommend any good books or uni courses? Btw time is not a problem for me submitted by /u/DivideSad9852 (https://www.reddit.com/user/DivideSad9852)
[link] (https://www.reddit.com/r/Pentesting/comments/yfiar6/how_to_get_as_good_as_possible_in_pentesting_in_4/) [comments] (https://www.reddit.com/r/Pentesting/comments/yfiar6/how_to_get_as_good_as_possible_in_pentesting_in_4/)

___________________________
@hacking_Attack
@Hacking_Video

Blind SSRF in Skype (Microsoft)
https://jayateerthag.medium.com/blind-ssrf-in-skype-microsoft-6639f4961052?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Server Side Request Forgery is a vulnerability that allows attacker to make server request to attacker controlled network location/path.Continue reading on Medium » (https://jayateerthag.medium.com/blind-ssrf-in-skype-microsoft-6639f4961052?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Blind SSRF in Skype (Microsoft)

Server Side Request Forgery is a vulnerability that allows attacker to make server request to attacker controlled network location/path.Continue reading on Medium »
Read more...