scrcpy --tcpip=192.168.1.1:5555If adb TCP/IP mode is disabled on the device (or if you don't know the IP address), connect the device over USB, then run:scrcpy --tcpip # without argumentsIt will automatically find the device IP address, enable TCP/IP mode, then connect to the device before starting.ManualAlternatively, it is possible to enable the TCP/IP connection manually using adb:Plug the device into a USB port on your computer.Connect the device to the same Wi-Fi network as your computer.Get your device IP address, in Settings → About phone → Status, or by executing this command:adb shell ip route | awk '{print $9}'Enable adb over TCP/IP on your device: adb tcpip 5555.Unplug your device.Connect to your device: adb connect DEVICE_IP:5555 (replace DEVICE_IPwith the device IP address you found).Run scrcpy as usual.Since Android 11, a Wireless debugging option (https://developer.android.com/studio/command-line/adb#connect-to-a-device-over-wi-fi-android-11+) allows to bypass having to physically connect your device directly to your computer.If the connection randomly drops, run your scrcpy command to reconnect. If it says there are no devices/emulators found, try running adb connect DEVICE_IP:5555 again, and then scrcpy as usual. If it still says there are none found, try running adb disconnect, and then run those two commands again.It may be useful to decrease the bit-rate and the resolution:scrcpy --bit-rate 2M --max-size 800
scrcpy -b2M -m800 # short versionMulti-devicesIf several devices are listed in adb devices, you can specify the serial:scrcpy --serial 0123456789abcdef
scrcpy -s 0123456789abcdef # short versionThe serial may also be provided via the environment variable ANDROID_SERIAL(also used by adb).If the device is connected over TCP/IP:scrcpy --serial 192.168.0.1:5555
scrcpy -s 192.168.0.1:5555 # short versionIf only one device is connected via either USB or TCP/IP, it is possible to select it automatically:# Select the only device connected via USB
scrcpy -d # like adb -d
scrcpy --select-usb # long version

# Select the only device connected via TCP/IP
scrcpy -e # like adb -e
scrcpy --select-tcpip # long versionYou can start several instances of scrcpy for several devices.Autostart on device connectionYou could use AutoAdb (https://github.com/rom1v/autoadb):autoadb scrcpy -s '{}'TunnelsTo connect to a remote device, it is possible to connect a local adb client to a remote adb server (provided they use the same version of the adbprotocol).Remote ADB serverTo connect to a remote adb server, make the server listen on all interfaces:adb kill-server
adb -a nodaemon server start
# keep this openWarning: all communications between clients and the adb server are unencrypted.Suppose that this server is accessible at 192.168.1.2. Then, from another terminal, run scrcpy:# in bash
export ADB_SERVER_SOCKET=tcp:192.168.1.2:5037
scrcpy --tunnel-host=192.168.1.2:: in cmd
set ADB_SERVER_SOCKET=tcp:192.168.1.2:5037
scrcpy --tunnel-host=192.168.1.2# in PowerShell
$env:ADB_SERVER_SOCKET = 'tcp:192.168.1.2:5037'
scrcpy --tunnel-host=192.168.1.2By default, scrcpy uses the local port used for adb forward tunnel establishment (typically 27183, see --port). It is also possible to force a different tunnel port (it may be useful in more complex situations, when more redirections are involved):scrcpy --tunnel-port=1234
SSH tunnelTo communicate with a remote adb server securely, it is preferable to use an SSH tunnel.First, make sure the adb server is running on the remote computer:adb start-serverThen, establish an SSH tunnel: remote 5037 # local 27183 <-- remote 27183 ssh -CN -L5038:localhost:5037 -R27183:localhost:27183 your_remote_computer # keep this open" dir="auto"># local 5038 --> remote 5037
# local 27183 <-- remote 27183
ssh -CN -L5038:localhost:5037 -R27183:localhost:27183 your_remote_computer
# keep this openFrom another terminal, run scrcpy:# in bash
export ADB_SERVER_SOCKET=tcp:localhost:5038

___________________________
@hacking_Attack
@Hacking_Video

scrcpy:: in cmd
set ADB_SERVER_SOCKET=tcp:localhost:5038
scrcpy# in PowerShell
$env:ADB_SERVER_SOCKET = 'tcp:localhost:5038'
scrcpyTo avoid enabling remote port forwarding, you could force a forward connection instead (notice the -L instead of -R): remote 5037 # local 27183 --> remote 27183 ssh -CN -L5038:localhost:5037 -L27183:localhost:27183 your_remote_computer # keep this open" dir="auto"># local 5038 --> remote 5037
# local 27183 --> remote 27183
ssh -CN -L5038:localhost:5037 -L27183:localhost:27183 your_remote_computer
# keep this openFrom another terminal, run scrcpy:# in bash
export ADB_SERVER_SOCKET=tcp:localhost:5038
scrcpy --force-adb-forward:: in cmd
set ADB_SERVER_SOCKET=tcp:localhost:5038
scrcpy --force-adb-forward# in PowerShell
$env:ADB_SERVER_SOCKET = 'tcp:localhost:5038'
scrcpy --force-adb-forwardLike for wireless connections, it may be useful to reduce quality:scrcpy -b2M -m800 --max-fps 15
Window configurationTitleBy default, the window title is the device model. It can be changed:scrcpy --window-title 'My device'Position and sizeThe initial window position and size may be specified:scrcpy --window-x 100 --window-y 100 --window-width 800 --window-height 600BorderlessTo disable window decorations:scrcpy --window-borderlessAlways on topTo keep the scrcpy window always on top:scrcpy --always-on-topFullscreenThe app may be started directly in fullscreen:scrcpy --fullscreen
scrcpy -f # short versionFullscreen can then be toggled dynamically with MOD+f.RotationThe window may be rotated:scrcpy --rotation 1Possible values:0: no rotation1: 90 degrees counterclockwise2: 180 degrees3: 90 degrees clockwiseThe rotation can also be changed dynamically with MOD+←(left) and MOD+→ (right).Note that scrcpy manages 3 different rotations:MOD+r requests the device to switch between portrait and landscape (the current running app may refuse, if it does not support the requested orientation).--lock-video-orientation changes the mirroring orientation (the orientation of the video sent from the device to the computer). This affects the recording.--rotation (or MOD+←/MOD+→) rotates only the window content. This affects only the display, not the recording.Other mirroring optionsRead-onlyTo disable controls (everything which can interact with the device: input keys, mouse events, drag&drop files):scrcpy --no-control
scrcpy -nDisplayIf several displays are available, it is possible to select the display to mirror:scrcpy --display 1The list of display ids can be retrieved by:adb shell dumpsys display # search "mDisplayId=" in the outputThe secondary display may only be controlled if the device runs at least Android 10 (otherwise it is mirrored as read-only).Stay awakeTo prevent the device from sleeping after a delay when the device is plugged in:scrcpy --stay-awake
scrcpy -wThe initial state is restored when scrcpy is closed.Turn screen offIt is possible to turn the device screen off while mirroring on start with a command-line option:scrcpy --turn-screen-off
scrcpy -SOr by pressing MOD+o at any time.To turn it back on, press MOD+Shift+o.On Android, the POWER button always turns the screen on. For convenience, if POWER is sent via scrcpy (via right-click or MOD+p), it will force to turn the screen off after a small delay (on a best effort basis). The physical POWER button will still cause the screen to be turned on.It can also be useful to prevent the device from sleeping:scrcpy --turn-screen-off --stay-awake
scrcpy -SwPower off on closeTo turn the device screen off when closing scrcpy:scrcpy --power-off-on-closePower on on startBy default, on start, the device is powered on.To prevent this behavior:scrcpy --no-power-onShow touchesFor presentations, it may be useful to show physical touches (on the physical device).Android provides this feature in Developers options.Scrcpy provides an option to enable this feature on start and restore the initial value on exit:scrcpy --show-touches

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Sandbox Scryer : Tool For Producing Threat Hunting And Intelligence Data From Public Sandbox Detonation Output

The Sandbox Scryer is an open-source tool for producing threat hunting and intelligence data from public sandbox detonation output The tool leverages the MITRE ATT&CK Framework to organize and prioritize findings, assisting in the assembly of IOCs, understanding attack movement and in threat hunting By allowing researchers to send thousands of samples to a sandbox for building a profile that can be used with the ATT&CK technique, the Sandbox Scryer delivers an unprecedented ability to solve use cases at scale.

The tool is intended for cybersecurity professionals who are interested in threat hunting and attack analysis leveraging sandbox output data. The Sandbox Scryer tool currently consumes output from the free and public Hybrid Analysis malware analysis service helping analysts expedite and scale threat hunting. Repository contents[root] version.txt – Current tool version LICENSE – Defines license for source and other contents README.md – This file

[root\bin] \Linux – Pre-build binaries for running tool in Linux. Currently supports: Ubuntu x64 \MacOS – Pre-build binaries for running tool in MacOS. Currently supports: OSX 10.15 x64 \Windows – Pre-build binaries for running tool in Windows. Currently supports: Win10 x64

[root\presentation_video] Sandbox_Scryer__BlackHat_Presentation_and_demo.mp4 – Video walking through slide deck and showing demo of tool

[root\screenshots_and_videos] Various backing screenshots

[root\scripts] Parse_report_set.* – Windows PowerShell and DOS Command Window batch file scripts that invoke tool to parse each HA Sandbox report summary in test set Collate_Results.* – Windows PowerShell and DOS Command Window batch file scripts that invoke tool to collate data from parsing report summaries and generate a MITRE Navigator layer file

[root\slides] BlackHat_Arsenal_2022__Sandbox_Scryer__BH_template.pdf – PDF export of slides used to present the Sandbox Scryer at Black Hat 2022

[root\src] Sandbox_Scryer – Folder with source for Sandbox Scryer tool (in c#) and Visual Studio 2019 solution file

[root\test_data] (SHA256 filenames).json – Report summaries from submissions to Hybrid Analysis enterprise-attack__062322.json – MITRE CTI data TopAttackTechniques__High__060922.json – Top MITRE ATT&CK techniques generated with the MITRE calculator. Used to rank techniques for generating heat map in MITRE Navigator

[root\test_output] (SHA256)_report__summary_Error_Log.txt – Errors (if any) encountered while parsing report summary for SHA256 included in name (SHA256)_report__summary_Hits__Complete_List.png – Graphic showing tecniques noted while parsing report summary for SHA256 included in name (SHA256)_report__summary_MITRE_Attck_Hits.csv – For collation step, techniques and tactics with select metadata from parsing report summary for SHA256 included in name (SHA256)_report__summary_MITRE_Attck_Hits.txt – More human-readable form of .csv file. Includes ranking data of noted techniques

\collated_data collated_080122_MITRE_Attck_Heatmap.json – Layer file for import into MITRE Navigator OperationThe Sandbox Scryer is intended to be invoked as a command-line tool, to facilitate scripting

Operation consists of two steps:

* Parsing, where a specified report summary is parsed to extract the output noted earlier
* Collation, where the data from the set of parsing results from the parsing step is collated to produce a Navigator layer file

Invocation examples:

* Parsing
* Collation

If the parameter “-h” is specified, the built-in help is displayed as shown here Sandbox_Scryer.exe -h
Options:
-h Display command-line options
-i Input filepath
-ita Input filepath - MITRE report for top techniques
-o Output folder path
-ft Type of file to submit
-nam[...]

___________________________
@hacking_Attack
@Hacking_Video

e Name to use with output
-sb_name Identifier of sandbox to use (default: ha)
-api_key API key to use with submission to sandbox
-env_id Environment ID to use with submission to sandbox
-inc_sub Include sub-techniques in graphical output (default is to not include)
-mitre_data Filepath for mitre cti data to parse (to populate att&ck techniques)
-cmd Command
Options:
parse Process report file from prior sandbox submission
Uses -i, -ita, -o, -name, -inc_sub, -sig_data parameters
col Collates report data from prior sandbox submissions
Uses -i (treated as folder path), -ita, -o, -name, -inc_sub, -mitre_data parameters
Once the Navigator layer file is produced, it may be loaded into the Navigator for viewing via https://mitre-attack.github.io/attack-navigator/

Within the Navigator, techniques noted in the sandbox report summaries are highlighted and shown with increased heat based on a combined scoring of the technique ranking and the count of hits on the technique in the sandbox report summaries. Howevering of techniques will show select metadata. Click Here To Download

___________________________
@hacking_Attack
@Hacking_Video

Mt Pelerin Double Transaction Bugfix Review
https://medium.com/immunefi/mt-pelerin-double-transaction-bugfix-review-503838db3d70?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

SummaryContinue reading on Immunefi » (https://medium.com/immunefi/mt-pelerin-double-transaction-bugfix-review-503838db3d70?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

What certs do you need to become a web or app or mobile or cloud pen tester?
https://www.reddit.com/r/Pentesting/comments/z2p031/what_certs_do_you_need_to_become_a_web_or_app_or/

Hi. I would like to know what certs I would need to become either a web/app/mobile/cloud pen tester? submitted by /u/ELIDAL99 (https://www.reddit.com/user/ELIDAL99)
[link] (https://www.reddit.com/r/Pentesting/comments/z2p031/what_certs_do_you_need_to_become_a_web_or_app_or/) [comments] (https://www.reddit.com/r/Pentesting/comments/z2p031/what_certs_do_you_need_to_become_a_web_or_app_or/)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Any Wifi Adapters that allow monitor mode for Mac M1 chips?

Im on the market to find an adapter that works with m1 on kali linux, any recommendations? I saw some mixed feedback. It works for some people and for some it doesn't

submitted by /u/FunnyTman
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How would I decode a XOR Cipher

I've been given a xor Cipher which is a bunch of hexadecimal-looking characters. The Cipher is:

" fa ce fd d3 fa df ed d3 fa ce d3 d3 fa de df d3 fa de df d3 fa de f9 d3 fa ce f9 d3 fa de f1 d3 fa e1 ed d3 f9 ce fd d3 f9 ce fd d3 f9 ce f5 d3 f9 ce fd d3 fa de f9 d3 fa de d3 d3 fa e1 ed d3 f9 ce ed d3 fa de f1 d3 f9 ce f1 d3 fa de ed 89 "

Without giving me the answer, how would I decode this XOR Cipher?

submitted by /u/Lanky_Ad4113
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Despot’s Game [MOD,HACK] [UNLOCKED FULL VERSION]

https://external-preview.redd.it/T9xZIrodPG1lUXpWlzNPvNgxbZknZoHs_EM1MwUkaa4.jpg?width=640&crop=smart&auto=webp&s=d3c64a55ee8d85785a6c13789844cd86e7f714f9 submitted by /u/According-Bag2207
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
TGA Weekly Newsletter [11/23/22]

https://cdn-images-1.medium.com/max/781/1*J9j5Q-jsU9HATIhqH9T4_g.jpeg
Hello! This is The Gray Area’s newsletter for 11/16/22 → 11/23/22, with the most popular posts of this week!

Continue reading on The Gray Area »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How To Spot An Email Scam Quickly

https://cdn-images-1.medium.com/max/800/1*J-qgmlcubX-9ymloIE83rg.jpeg
And what to do if you’ve responded to one

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
THE ANATOMY OF KERBEROS AUTHENTICATION (AD BASICS 0x1)

https://cdn-images-1.medium.com/max/960/0*Ez_CYfU-6HpaG2k5.jpg
Hi! My name is Hashar Mujahid and today we will see how Kerberos authentication works.

Continue reading on InfoSec Write-ups »

___________________________
@hacking_Attack
@Hacking_Video

What does this REALLY mean?
https://www.reddit.com/r/redteamsec/comments/z2o6el/what_does_this_really_mean/

When a candidate has had senior level positions but the recruiter or hiring manager says "We are looking for someone more senior". It comes off like a catch-all for something else they were looking for. What does that really mean? Did the candidate miss "buzzwords"? What does that REALLY mean when the experience literally mirrors the job description and all questions were answered well during the interview (because the interviewer literally said 'you answered all the questions and gave us what we were looking for'). submitted by /u/XulaSLP07 (https://www.reddit.com/user/XulaSLP07)
[link] (https://www.reddit.com/r/redteamsec/comments/z2o6el/what_does_this_really_mean/) [comments] (https://www.reddit.com/r/redteamsec/comments/z2o6el/what_does_this_really_mean/)

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Where Are We Heading With Data Privacy Regulations?

New laws have made the current US privacy landscape increasingly complex.

Top 10 Security Tools for Bug Bounty Hunters

Bug bounty hunting is a career that is known for the heavy use of security tools. These tools help hunters to find weaknesses and…Continue reading on Medium »
Read more...