Hacking on Medium
Hacking Dutch Government-Broken Authentication To Full Website Takeover (P1)

https://cdn-images-1.medium.com/max/666/0*1EEPt3hX6AWothFI
Hey guys ,

Continue reading on System Weakness »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
OWASP Amaas — In Depth Network Mapping And Asset Discovery

https://cdn-images-1.medium.com/max/602/0*8LhIi2o1mkB0VEAY.jpg
Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Exploiting Insecure Elasticsearch Cluster

https://cdn-images-1.medium.com/max/1072/1*KPEvwcH9jgqF6HkCveFY-Q.jpeg
🙋‍♂️Introduction

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
New RansomExx Ransomware Variant Rewritten in the Rust Programming Language

https://cdn-images-1.medium.com/max/602/0*K6pS9PcBWj4TUVmd.png
Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Reset password of different user

https://cdn-images-1.medium.com/max/2600/1*8pBvC9V2Sw6DhQqWSqPd-w.jpeg
Broken User Authentication

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Retrieving user files from locked PC

For someone with no knowledge of "hacking" nor advanced PC knowledge, I have tried everything I have been able to find from google searches.

I have an HP laptop running Windows 10 as well as an external hard drive I am attempting to copy/move the laptop's user files to.

I have attempted booting in troubleshooter and entering command prompt, but this requires a password to the user account (locked)

I have attempted booting into safe mode with command prompt, however this also requires a user login.

I have searched through bios and any other start menu I can access to no avail.

Is it simply not possible to achieve this without altering the state of the PC?

I have read read guides on how to obtain results using an OS booted from disks or USB drives but would this alter the state of the laptop when they are removed? And would this even give me access to the original files?

submitted by /u/xDearDeathx
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
is netcut bad for your wifi?

dont know much about computers or wifi.

I've been made aware you can use netcut for exploits in games, but I'm concerned it will make my wifi slow or other issues. I dont live alone so I dont want to interfere with other people's devices and wifi living here. Just my playstation.

Does it affect wifi or will it affect other people's devices whatsoever?

to be clear, I DONT want it to interfere with anyone else, only on my playstation.

submitted by /u/throwaway26272728
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Magnetic Strip Card Cloning

I live in a college dorm where you need to use your student id which has a 3 track magnetic strip on it to unlock the door followed with a pin. I purchased a MSR605X and cloned my card perfectly fine using the raw data to read and write onto a new card, however a friend who lives in a different dorm and wanted their id cloned, but their id had "No Data" on track 3, which I isolated as the track that the door uses by using mine to test it. When I tried copying and pasting to a blank card it didnt work. Am i doing something wrong or can their track 3 be encripted for whatever reason, and is there a work around. Thanks

submitted by /u/Mr_KingConn
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Any Idea compiling Loose/Loose

Is it possible to compile Loose/Loose on Ubuntu(Windows is also fine)

Because I am just curious of this game and want to play it on my Ubuntu 20.04 in a Virtual machine.

http://loselose.net/

submitted by /u/Ubuntu_user_001
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
MSMAP - Memory WebShell Generator

___________________________
@hacking_Attack
@Hacking_Video

MSMAP - Memory WebShell Generator
http://www.kitploit.com/2022/11/msmap-memory-webshell-generator.html

___________________________
@hacking_Attack
@Hacking_Video

Msmap is a Memory WebShell Generator. Compatible with various Containers, Components, Encoder, WebShell / Proxy / Killer and Management (https://www.kitploit.com/search/label/Management) Clients. 简体中文 (https://github.com/hosch3n/msmap/blob/main/README_CN.md)The idea behind I (https://hosch3n.github.io/2022/08/08/Msmap%E5%86%85%E5%AD%98%E9%A9%AC%E7%94%9F%E6%88%90%E6%A1%86%E6%9E%B6%EF%BC%88%E4%B8%80%EF%BC%89/), The idea behind II (https://hosch3n.github.io/2022/08/09/Msmap%E5%86%85%E5%AD%98%E9%A9%AC%E7%94%9F%E6%88%90%E6%A1%86%E6%9E%B6%EF%BC%88%E4%BA%8C%EF%BC%89/)

___________________________
@hacking_Attack
@Hacking_Video

Function Dynamic Menu Automatic (https://www.kitploit.com/search/label/Automatic) Compilation Generate Script Lite Mode Graphical InterfaceContainerJava Tomcat7 Tomcat8 Tomcat9 Tomcat10 Resin3 Resin4 WebSphere GlassFish WebLogic JBoss Spring Netty JVM*.NET IISPHPPython*: Default support for Linux Tomcat 8/9, more versions can be adapted according to the advanced guide.WebShell / Proxy / KillerWebShell CMD / SH AntSword JSPJS Behinder GodzillaNo need for modularityProxy: Neo-reGeorg, wsproxyKiller: java-memshell-scanner, ASP.NET-Memshell-ScannerDecoder / Decryptor (https://www.kitploit.com/search/label/Decryptor) / HasherDecoder Base64 HexDecryptor XOR RC4 AES128 AES256 RSAHasher MD5 SHA128 SHA256 Usagegit clone git@github.com:hosch3n/msmap.git
cd msmap
python generator.py[Warning] MUST set a unique password, Options are case sensitive.AdvancedEdit config/environment.py# Auto Compile
auto_build = True

# Base64 Encode Class File
b64_class = True

# Generate Script File
generate_script = True

# Compiler Absolute Path
java_compiler_path = r"~/jdk1.6.0_04/bin/javac"
dotnet_compiler_path = r"C:\Windows\Microsoft.NET\Framework\v2.0.50727\csc.exe"Edit gist/java/container/tomcat/servlet.py// Servlet Path Pattern
private static String pattern = "*.xml";If an encryption (https://www.kitploit.com/search/label/Encryption) encoder is used in WsFilter, the password needs to be the same as the path (eg /passwd)gist/java/container/jdk/javax.py with lib/servlet-api.jar can be replaced depending on the target container.pip3 install pyperclip to support automatic copying to clipboard.Example CMD / SHCommand with Base64 Encoder | Inject Tomcat Valvepython generator.py Java Tomcat Valve Base64 CMD passwd
AntSwordType JSP with default Encoder | Inject Tomcat Valvepython generator.py Java Tomcat Valve RAW AntSword passwdType JSP with aes_128_ecb_pkcs7_padding_md5 (https://github.com/hosch3n/msmap/blob/main/extend/AntSword/encoder/aes_128_ecb_pkcs7_padding_md5.js) Encoder | Inject Tomcat Listenerpython generator.py Java Tomcat Listener AES128 AntSword passwdType JSP with rc_4_sha256 (https://github.com/hosch3n/msmap/blob/main/extend/AntSword/encoder/rc_4_sha256.js) Encoder | Inject Tomcat Servletpython generator.py Java Tomcat Servlet RC4 AntSword passwdType JSP with xor_md5 (https://github.com/hosch3n/msmap/blob/main/extend/AntSword/encoder/xor_md5.js) Encoder | AgentFiless Inject HttpServletpython generator.py Java JDK JavaX XOR AntSword passwdType JSPJS with aes_128_ecb_pkcs7_padding_md5 (https://github.com/hosch3n/msmap/blob/main/extend/AntSword/encoder/aes_128_ecb_pkcs7_padding_md5.js) Encoder | Inject Tomcat WsFilterpython generator.py Java Tomcat WsFilter AES128 JSPJS passwd BehinderType default_aes | Inject Tomcat Valvepython generator.py Java Tomcat Valve AES128 Behinder rebeyondType default_xor_base64 | Inject Spring Interceptorpython generator.py Java Spring Interceptor XOR Behinder rebeyond
GodzillaType JAVA_AES_BASE64 | Inject Tomcat Valvepython generator.py Java Tomcat Valve AES128 Godzilla superidolType JAVA_AES_BASE64 | AgentFiless Inject HttpServletpython generator.py Java JDK JavaX AES128 Godzilla superidolKnown issue (https://github.com/BeichenDream/Godzilla/issues/76) ReferenceGodzillaMemoryShellProject (https://github.com/BeichenDream/GodzillaMemoryShellProject)AntSword-JSP-Template (https://github.com/AntSwordProject/AntSword-JSP-Template)As-Exploits memshell_manage (https://github.com/yzddmr6/As-Exploits/tree/master/core/memshell_manage)Behinder (https://github.com/rebeyond/Behinder) | wsMemShell (https://github.com/veo/wsMemShell) | ysomap (https://github.com/wh1t3p1g/ysomap)

Download Msmap (https://github.com/hosch3n/msmap)

___________________________
@hacking_Attack
@Hacking_Video