Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
I am tired of this and ran out of passwords. how is this happening?

Before, it was my Apex Legends account where someone played with a hack and got me baned, I have emailed the support team abot it and they where chill about it and revoked the bane. It felt as if they were used to this.

Then, my Facebook account and Instagram account THREE times.

Every account I mentioned has a different password! And my passwords are strong!

Then it was my Twitch account. And now just 1 hour ago it was my Steam account!

All in a span of a year or so.

What's going? How are they getting my username/email and password of my my accounts!?

I rarely sing up to any site, I no longer pirate, it was ages ago since the last time I pirated something.

I don't know anyone into hacking nor I gave any of those accounts' password to any of my friends.

The loog in attempts are from USA, India and China... Last one is from China and I have their ip and city.

submitted by /u/DominatingWind
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

I am tired of this and ran out of passwords. how is this happening?

Before, it was my Apex Legends account where someone played with a hack and got me baned, I have emailed the support team abot it and they where...

10 viewsedited 12:53

hacking: security in practice
Trying to understand if pdf brute forcing on a website works

Would john the ripper work if you entered a web page other then a directory path?
The password is simple from 000 - 999
example 421.

submitted by /u/OtacMomo
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Trying to understand if pdf brute forcing on a website works : r/hacking

2.6M subscribers in the hacking community. A subreddit dedicated to hacking and hackers. Constructive collaboration and learning about exploits…

12 viewsedited 12:53

Hacking Articles Tips Tricks Videos Tutorials

13 views12:53

Hacking Articles Tips Tricks Videos Tutorials

Photo

hacking: security in practice
Introduction to RCE Exploitation (webinar)

https://external-preview.redd.it/yTO3QAmhtE9MgVV9XR3WAxZzsbPuDXxrchaMh4rrFhY.jpg?width=320&crop=smart&auto=webp&s=5ea5aafa4950526fdb348a0e3ec3fc5e1651f350 submitted by /u/B4n4n4B0x
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

r/hacking on Reddit: Introduction to RCE Exploitation (webinar)

Posted by u/B4n4n4B0x - 5 votes and 1 comment

16 viewsedited 12:53

Hacking Articles Tips Tricks Videos Tutorials

15 views14:11

Hacking Articles Tips Tricks Videos Tutorials

Photo

Black Hat Ethical Hacking
Offensive Security Tool: linWinPwn

Offensive Security Tool: linWinPwnPost Views: 34 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/09/Patreon.png Subscribe to Patreon to watch this episode.
Reading Time: 4 Minutes linWinPwnlinWinPwn is a bash script written by lefayjey that automates several Active Directory Enumeration and Vulnerability checks. The script uses several tools such as: impacket, bloodhound, crackmapexec, ldapdomaindump, lsassy, smbmap, kerbrute, adidnsdump, certipy, and others. Red Teams find this tool particularly useful when you have access to an Active Directory environment for a limited time only and wish to automate the enumeration process and efficiently collect evidence. In addition, linWinPwn can replace the use of enumeration tools on Windows to reduce the number of created artifacts and bypass certain Anti-Virus or EDRs. This can be achieved by performing remote dynamic port forwarding through the creation of an SSH tunnel from the Windows host (e.g., VDI machine or workstation or laptop) to a remote Linux machine (e.g., Pentest laptop or VPS), and running linWinPwn with proxychains.

On the Windows host, run using PowerShell: ssh kali@<linux_machine -R 1080 -NCqfhttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/11/SS1.png proxychains ./linWinPwn.sh -t <domain_controller_ipSee Also: So you want to be a hacker? Complete Offensive Security and Ethical Hacking Course SetupGit clone the repository and make the script executable git clone https://github.com/lefayjey/linWinPwncd linWinPwn; chmod +x linWinPwn.shInstall requirements on Kali machines using the install.sh script chmod +x install.shsudo ./install.shOn non-Kali machines, run the install_nonkali.sh script instead chmod +x install_nonkali.shsudo ./install_nonkali.shIf you’re having DNS issues or time sync errors, run the configure.sh script with -d for DNS update and -n for NTP sync

https://www.blackhatethicalhacking.com/wp-content/uploads/2022/11/SS2.png chmod +x configure.shsudo ./configure.sh -t -d -nTrending: Offensive Security Tool: Mangle
Trending: Recon Tool: Maigret UsageModulesThe linWinPwn script contains 6 modules that can be used either separately or simultaneously.

Default: interactive – Open interactive menu to run checks separately
./linWinPwn.sh -t Domain_Controller_IP> [-d AD_domain> -u AD_user> -p AD_password_or_hash[LM:NT]_or_kerbticket[./krb5cc_ticket]> -o output_dir>]
User modules: ad_enum,kerberos,scan_shares,vuln_checks,mssql_enum

./linWinPwn.sh -t Domain_Controller_IP> [-d AD_domain> -u AD_user> -p AD_password_or_hash[LM:NT]_or_kerbticket[./krb5cc_ticket]> -o output_dir>] -M user

All modules: ad_enum,kerberos,scan_shares,vuln_checks,mssql_enum,pwd_dump
./linWinPwn.sh -t Domain_Controller_IP> [-d AD_domain> -u AD_user> -p AD_password_or_hash[LM:NT]_or_kerbticket[./krb5cc_ticket]> -o output_dir>] -M all

Module ad_enum: Active Directory Enumeration
./linWinPwn.sh -t Domain_Controller_IP> [-d AD_domain> -u AD_user> -p AD_password_or_hash[LM:NT]_or_kerbticket[./krb5cc_ticket]> -o output_dir>] -M ad_enum

Module kerberos: Kerberos Based Attacks
./linWinPwn.sh -t Domain_Controller_IP> [-d AD_domain> -u AD_user> -p AD_password_or_hash[LM:NT]_or_kerbticket[./krb5cc_ticket]> -o output_dir>] -M kerberos

Module scan_shares: Network Shares Scan
./linWinPwn.sh -t Domain_Controller_IP> [-d AD_domain> -u AD_user> -p AD_password_or_hash[LM:NT]_or_kerbticket[./krb5cc_ticket]> -o output_dir>] -M scan_shares

Module vuln_checks: Vulnerability Checks
./linWinPwn.sh -t Domain_Controller_IP> [-d AD_domain> -u AD_user> -p AD_password_or_hash[LM:NT]_or_kerbticket[./krb5cc_ticket]> -o o[...]

20 views14:13

About

Blog

Apps

Platform