Hacking Articles Tips Tricks Videos Tutorials
468 subscribers
65.8K photos
15 videos
157 files
132K links
Exploit
Pentesting
Hacking
Red Team
Blue Team
Kali Linux
Bug Bounty
Black Hat
Cyber security etc

@Hacking_Video
@Hacking_attack
Download Telegram
Hacking Articles Tips Tricks Videos Tutorials
Kali Linux Tutorials Wodat : Windows Oracle Database Attack Toolkit Wodat is a simple port of the popular Oracle Database Attack Tool (ODAT) to C# .Net Framework. Credit to https://github.com/quentinhardy/odat as lots of the functionality are ported from…
nfiguration=Release
Some general notes: The Oracle.ManagedDataAccess.dlllibrary will have to be copied with the binary. I’m looking at ways of embedding it. Todo* Handle SYSDBA and SYSOPER connections
* Implement outstanding modules
* Various validation, error handling code still needs to be done
* Some minor known bugfixes
* Add options to check against built in lists for SID, ServiceNames or common credentials ChangelogVersion 0.1 – Base toolkit and functionality Version 0.2 – Several bugfixes, improved socket connection and added RECON module Click Here To Download
Sent by @TheFeedReaderBot

___________________________
@hacking_Attack
@Hacking_Video
hacking: security in practice
DCSnoop - DNS Cache Snooping Tool

This is now my second post about the DNS Cache Snooping tool I've been making and I have now managed to upload a skeleton of the code on the github page located at https://github.com/benjibrown/DCSnoop. For those wondering, this tools uses nslookup to send a non recursive query to a dns server to determine if a url is cached.

submitted by /u/Ok-Chipmunk4539
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video
hacking: security in practice
Passkeys vs Hardware Token

I just watched the WWDC22 (I know, I'm a bit behind) and the talked about passkeys. I haven't really paid much mind to it until now. So essentially, passkeys are using a public-private key pair (I'm very familiar with this concept and I absolutely love cryptography) and it is as if your phone has a built-in hardware token, such as a YubiKey. Yes, I am aware that hardware tokens, like YubiKeys are primarily for MFA rather than the first (and only) factor when using passkeys.

1. Please correct me if I have any of the above wrong.
2. So are passkeys implemented via software ONLY? Or is there a TPM involved?
3. Do I have a separate public/private key pair for each different account?
4. Apple syncs my private key(s) to their server? Assuming for contingency reasons in case we lose our phone where all those private keys are saved locally. Wouldn't this also pose a vulnerability? Perhaps hackers can centrally target Apple servers for user private keys? What's the standard encryption is being used in transit?

submitted by /u/D1CCP
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video
hacking: security in practice
Have you guys ever used bright security ?

What are your impressions about the product? My company is currently thinking about hiring this product so I really would like to know more about it and if it’s worth the money or there are better options when the subject is using a Dast

submitted by /u/xetoile
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video
hacking: security in practice
Receive spoofed emails?

hello everyone. So basically:

I want to have a email from a custom domain from like [sea_championship@cool-domain.xyz](mailto:sea_championship@cool-domain.xyz)
and be able to RECIEVE and SEND emails. Anyone know something like this?

submitted by /u/Sea_Championship_915
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video