Hacking on Medium
10 Best Ethical Hacking Courses Online

https://cdn-images-1.medium.com/max/2600/0*OEi3VMiamWq1xAbp
It’s no secret that hackers come in all sorts of colors: white, gray, black, and everything in between when it comes to cybersecurity…

Continue reading on Quick Code »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Windows Privilege Escalation on the Cyberclopaedia!

https://external-preview.redd.it/s2n6_ZBytWcdr63uSQrBe_W8VtllUTDRxBtW968LMCk.jpg?width=640&crop=smart&auto=webp&s=c932c8660e4f919fb4682e12df6cfad46984bc43 submitted by /u/cr0mll
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Bluetooth on phone makes it vulnerable. But what can the hacker control through Bluetooth?

I know for a pro it’s easy to get into a phone with Bluetooth on. But how much control do you have with Bluetooth access? I mean I know about the listening to others calls or music etc.. but can you control the phone, like say change a channel on an online radio app, or a song? How much control do you have…..

submitted by /u/OG_anunoby3
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Is it legal to hack a BIOS?

More information:

I have a somewhat old Samsung X520 (yes Windows 7!) x64 capable laptop which otherwise works well BUT due to some ridiculously short sighted manufacturer it won't support bigger than 4GB DDR3 which makes using it with another more useful OS a problem.

It also has issues with SSDs, presumably because the BIOS is expecting the drive to take a finite amount of time to spin up so having it ready immediately makes it not detect the drive unless you go into standby then immediately back into the BIOS.

Tried it with 2+4, 4+4,1x8 etc and it won't POST (black screen) but seems that voltage in this case isn't the problem as both 1.5V and 1.35V modules work.

I've also tried imaging the SPD to an identical but double density module and also no luck.

Now I've checked and the chipset supports >16GB so theoretically this would be something in the BIOS.

The next model up supports this, as do pretty much every other (ie R520) model using the Core 2 CPUs.

I have another 90% working (faulty centre USB) board if this gets messed up, as well as hex image of the chip(s) in case something goes bad.

Someone informed me that its not legal to modify a BIOS even on a decade old long obsolete machine, but there's a good reason in this case.

Have an even older EM64T netbook which has a 2GB limit (single DDR3) of much the same type.

submitted by /u/Conundrum1859
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Mobile Application Security Course In Singapore

https://cdn-images-1.medium.com/max/600/1*WgYXz6a__adEblbJHVxpaQ.jpeg
The technology is booming at par and every individual or business is proactively coming via a proper mobile application so that they can…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Hacking Web-Server Using Images …

https://cdn-images-1.medium.com/max/1200/0*Xx6MorSwnqwyH8W7.jpg
So you must be wondering how is this possible to compromise a web server using an image ???

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
CTF (Capture The Flag) কি ?

https://cdn-images-1.medium.com/max/1000/1*lp_h0MxIEacYIqKlKRYvsA.jpeg
Capture The Flag – হলো কম্পিউটার নিরাপত্তার প্রতিযোগীতা যেখানে বিভিন্ন ধরনে সমস্যা সমাধান করে Flag খুঁজে বের করতে হয় এবং Flag Submit করতে…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Blog03: BFTP — Spotify full acount takeover

https://cdn-images-1.medium.com/max/2362/1*VRO3eCYzQR9E-0m1FsnuLQ.png
Hi Folks !

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Экономика целевого взлома

https://cdn-images-1.medium.com/max/2600/1*VCOsjBzIK3Tba2EanuP2dA.png
“Основная формула взлома”

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Stealing data using PING

In Red Teaming exercise once we are inside the internal network of our target, we try to avoid our presence from the network security…Continue reading on System Weakness »
Read more...

Stealing data using PING
https://systemweakness.com/stealing-data-using-ping-ee7fc3d74171?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

In Red Teaming exercise once we are inside the internal network of our target, we try to avoid our presence from the network security…Continue reading on System Weakness » (https://systemweakness.com/stealing-data-using-ping-ee7fc3d74171?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
Wodat - Windows Oracle Database Attack Toolkit

https://blogger.googleusercontent.com/img/a/AVvXsEjWBsK1FDSGn29qobntdhLkUloSryP8erp2XFXgrlfw_84qfz1V6L0KVQM0fNDmXwW_WbgKFs_WBatpPUg7Rw98tb5shHXlJDPN8Gi912Y0Qutes-XeR2_ZT-zOtl1EAwExW6R48oajvOpmImcN07WYpBin1IrSTJJHIpgnZFir3vQgIr0oDUGF4dR6VQ=w640-h258 Simple port of the popular Oracle Database Attack Tool (ODAT) (https://github.com/quentinhardy/odat) to C# .Net Framework. Credit to https://github.com/quentinhardy/odat as lots of the functionality are ported from his code.

* Perform password based attacks e.g. username as password, username list against given password, password list against given username, username:pass combolist.
* Test if a credential/connection string is working against target
* Brute force attacks to discover valid SID/ServiceNames
* Perform discovery of valid TNS listeners against provided target file or CIDR range
* More to come, I hope! https://blogger.googleusercontent.com/img/a/AVvXsEh-qUtg6hZiRmXhSuPE0j6sRLfBD_7vxQ2am_Otpvp1Bc7sFSfEO786ScAr4pc4VDifWpfnO4_uL478IERFg5e99m5Bz8fsK_JwVY-iZ8J_UJttjtu4lGBr7RcbdOR-TlZ6KAurEZLypdqhcTEDzf9i2wKtBmYPytnQWr2iNxraVIwnjiqPN_n4nzEJqg=w640-h152 DisclaimerI take not responsibility for your use of the software. Development is done in my personal capacity and carry no affiliation to my work. UsageThe general command line arguments required are as follow: wodat.exe COMMAND ARGGUMENTS
COMMAND (ALL,BRUTECRED,BRUTESID,BRUTESRV,TEST,DISC)
-server:XXX.XXX.XXX.XXX -port:1520
-sid:AS OR -srv:AS
-user:Peter -pass:Password To test if a specific credential set works. wodat.exe TEST -server:XXX.XXX.XXX.XXX -port:1521 -sid:XE -user:peter -pass:pan See the outline on modules for further usage. The tool will always first check if the TNS listener that is targeted works. ModulesBRUTESIDModule performs wordlist SID guessing attack if not successful will ask for brute force attack. wodat.exe BRUTESID -server:XXX.XXX.XXX.XXX -port:1521 https://blogger.googleusercontent.com/img/a/AVvXsEg43eKBomV61NkSoKLktOxPw-FAxLyu9hU6Th9wc-jWKg3S5w-opvRqyrn36cDFIhFgVopj1WraymEUDM8kTLRmZUhwq_qSq0YbUbNr4YNVtJ9IyRY6Mxej_V9EuAsYqi50tdI1AuMXW9mzwmbW6teTfqgAy61N-97FujyIlVQjkawqGk5E1bGLHpnkjw=w640-h208 BRUTESRVModule performs wordlist ServiceName guessing attack if not successful will ask for brute force attack. wodat.exe BRUTESRV -server:XXX.XXX.XXX.XXX -port:1521 BRUTECREDModule performs wordlist password based attack. The following options exist: A - username:password combolist with no credentials given during arguments
B - username list with password given in arguments
C - password list with username given in arguments
D - username as password with username list provided To perform a basic attack with a given file that has username:password combos. wodat.exe BRUTECRED -server:XXX.XXX.XXX.XXX -port:1521 -sid:XE https://blogger.googleusercontent.com/img/a/AVvXsEjWBsK1FDSGn29qobntdhLkUloSryP8erp2XFXgrlfw_84qfz1V6L0KVQM0fNDmXwW_WbgKFs_WBatpPUg7Rw98tb5shHXlJDPN8Gi912Y0Qutes-XeR2_ZT-zOtl1EAwExW6R48oajvOpmImcN07WYpBin1IrSTJJHIpgnZFir3vQgIr0oDUGF4dR6VQ=w640-h258 TESTModule tests if the given connection string can connect successfully. wodat.exe TEST -server:XXX.XXX.XXX.XXX -port:1521 -sid:XE -user:peter -pass:pan https://blogger.googleusercontent.com/img/a/AVvXsEgrvq_YFeSUaJVxtQ18Ydc40rKS7b1A376N6TX_P_o7E6NtVAQ-xOnfjXd8Gzf-AiqP3a619c70KXkyhH45s_6kyEUH0FoimCp5PwF31Woc_UYbL9n1IlhwHAWPuW2q6RxsxMdAe_GIwL_RAyQPTks_L22d1DSbVOKz9vwnQRlu_YseLS_zkLMlCWycrA=w640-h114 DISCModule will perform discovery against provided CIDR range or file with instances. Note, only instances with valid TNS listeners will be returned. Testing a network range will be much faster as it’s processed in parallel. wodat.exe DISC Instances to test must be formatte[...]

___________________________
@hacking_Attack
@Hacking_Video