Hacking on Medium
Behind the SMS Bombing Application

https://cdn-images-1.medium.com/max/685/1*Q6ARUdzs9Tcyr902W5gazA.png
Almost everyone has used or has been a victim of SMS/Call bombing attacks.

Continue reading on InfoSec Write-ups »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
A Step-By-Step Guide to Crack Wifi Password with Python

https://cdn-images-1.medium.com/max/1124/1*hLJ5eL7JMzZNbQfPxcnQ1A.png
This article aims to guide curious ones like you, techy or non-techy gaining easy wifi access anywhere you go with python. Let’s dive in…

Continue reading on Level Up Coding »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
To defeat cyberattackers you need to get to know them better

https://cdn-images-1.medium.com/max/1200/1*o9Dbp8GiKb4ZKa4GoOuwZg.jpeg
While it may not involve bombs and bullets, you’re at war with cyberattackers. The best way to defeat them is to know how they’ll attack.

Continue reading on Nerd For Tech »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
TryHackMe writeup: BadByte

https://cdn-images-1.medium.com/max/966/0*U3rvar97WQdWSQaD.png
That lassie with the dragon tattoo took a bad byte — but nothing more than she can chew ;-)

Continue reading on InfoSec Write-ups »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Home Grown Red Team: From Workstation To Domain Controller With Havoc C2 and Microsoft EDR

https://cdn-images-1.medium.com/max/1796/1*MvUlJbYwJ-lN2ss0z7O2LQ.png
Welcome back! In this blog entry we’ll be facing off with Microsoft’s Defender For Endpoint EDR once again to see if we can go from a low…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How to get the password of a registered WIFI

https://cdn-images-1.medium.com/max/1118/1*-TwSMiY1g4iI3aiz2nRsXw.png
Sometimes is useful to get the password of a wifi when you have already enter on your device. Is you put the password once, this data is…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

EvilTree - A Remake Of The Classic "Tree" Command With The Additional Feature Of Searching For User Provided Keywords/Regex In Files, Highlighting Those That Contain Matche
http://www.kitploit.com/2022/11/eviltree-remake-of-classic-tree-command.html

___________________________
@hacking_Attack
@Hacking_Video

A standalone python3 remake of the classic "tree" command with the additional feature of searching for user provided keywords/regex in files, highlighting those that contain matches. Created for two main reasons: While searching for secrets (https://www.kitploit.com/search/label/Secrets) in files of nested directory (https://www.kitploit.com/search/label/Directory) structures, being able to visualize which files contain user provided keywords/regex patterns and where those files are located in the hierarchy of folders, provides a significant advantage. "tree" is an amazing tool for analyzing directory structures. It's really handy to have a standalone alternative of the command for post-exploitation (https://www.kitploit.com/search/label/Post-Exploitation) enumeration (https://www.kitploit.com/search/label/Enumeration) as it is not pre-installed on every linux distro and is kind of limited on Windows (compared to the UNIX version).
Usage Examples Example #1: Running a regex that essentially matches strings similar to: password = something against /var/www

___________________________
@hacking_Attack
@Hacking_Video

Example #2: Using comma separated keywords instead of regex:

___________________________
@hacking_Attack
@Hacking_Video

Disclaimer: Only tested on Windows 10 (https://www.kitploit.com/search/label/Windows%2010) Pro. Further Options & Usage Tips Notable features: Regex -x search actually returns a unique list of all matched patterns in a file. Be careful when combining it with -v (--verbose), try to be specific and limit the length of chars to match. You can search keywords/regex in binary files as well by providing option -b. You can use this tool as the classic "tree" command if you do not provide keywords -k and regex -x values. This is useful in case you have gained a limited shell on a machine and want to have "tree" with colored output to look around. There's a list variable filetype_blacklist in eviltree.py which can be used to exclude certain file extensions from content search. By default, it excludes the following: gz, zip, tar, rar, 7z, bz2, xz, deb, img, iso, vmdk, dll, ovf, ova. A quite useful feature is the -i (--interesting-only) option. It instructs eviltree to list only files with matching keywords/regex content, significantly reducing the output length:

___________________________
@hacking_Attack
@Hacking_Video

Useful keywords/regex patterns Regex to look for passwords: -x ".{0,3}passw.{0,3}[=]{1}.{0,18}" Keywords to look for sensitive info: -k passw,db_,admin,account,user,token

Download Eviltree (https://github.com/t3l3machus/eviltree)

___________________________
@hacking_Attack
@Hacking_Video