Continue reading on Medium » (https://securitydonut.medium.com/hacking-a-company-and-able-to-access-1-lakh-customers-personal-details-e195570e86?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Hacking a company and able to Access 1 Lakh customers personal details

Continue reading on Medium »
Read more...

KitPloit - PenTest Tools!
Red-Detector - Scan Your EC2 Instance To Find Its Vulnerabilities Using Vuls.io

https://1.bp.blogspot.com/-hT3eTcoTZK8/YJCarnWaZDI/AAAAAAAAWFw/GiXfXwZg-ywlMofkkHukb_YR04h6Tf32wCNcBGAsYHQ/w640-h484/red-detector_1_red-detector.png Scan your EC2 instance to find its vulnerabilities using Vuls (https://vuls.io/en/).

Audit your EC2 instance to find security misconfigurations using Lynis (https://cisofy.com/solutions/#lynis).

Scan your EC2 instance for signs of a rootkit using Chkrootkit (http://www.chkrootkit.org/). https://1.bp.blogspot.com/-16WsMlo9QUI/YJCay83DX-I/AAAAAAAAWF0/qsssPKatzCogd9et-uUi0Tw1XcixxG0DgCNcBGAsYHQ/w640-h360/red-detector_2_vuls-gif.gif Requirements1. Configured AWS account with the EC2 actions mentioned below. The policy containing these requirements can be found in red-detector-policy.json.

Actions details:
Required action premission Why it is required "AttachVolume" Enables attaching the volume with the taken snapshot to the EC2 instance that is being used for the vulnerabilities scan. "AuthorizeSecurityGroupIngress" Enables attaching security group to the EC2 instance. Contains IP premmisions to ssh port and a random port generated for the scan UI access. "DescribeInstances" Enables access to the clients EC2 instances details. "CreateKeyPair" Enables the creation of a key pair that is being used as the key of the EC2 instance. "CreateTags" Enabled the creation of Tags on the Volume and Snapshot. "DescribeRegions" Enables access to the clients active regions to enable the user select the relevant one for the scan. "RunInstances" Enables the creation of an EC2 instance under the users client. "ReportInstanceStatus" Enables getting the current status of the created EC2 instance to make sure it is running. "DescribeSnapshots" Enables getting the current status of the taken snapshot to make sure it is available. "DescribeImages" Enables querying AMI's to get the latest Ubuntu AMI. "DescribeVolumeStatus" Enables getting the current status of the volume being created. "DescribeVolumes" Enables getting details about a volume. "CreateVolume" Enables the creation of a volume, in order to attach it the taken snapshot and attach it to the EC2 instance used for the vulnerabilities scan. "DescribeAvailabilityZones" Enables access to the clients active availability zones to select one for the created volume that is being attach to the EC2 instance. "DescribeVpcs" Enables getting the clients default vpc. Used for the EC2s security group generation. "CreateSecurityGroup" Enables the creation of a security group that is being attached to the EC2 instance. "CreateSnapshot" Enables taking a snapshot. Used to take a snapshot of the chosen EC2 instance. "DeleteSnapshot" Enables deleting the stale snapshot was created during the process
1. Running EC2 instance - Make sure you know the region and instance id of the EC2 instance you would like to scan. Supported versions:
* Ubuntu: 14, 16, 18, 19, 20
* Debian: 6, 8, 9
* Redhat: 7, 8
* Suse: 12
* Amazon: 2
* Oracle: 8 Installationsudo git clone https://github.com/lightspin-tech/red-detector.git
pip3 install -r requirements.txtUsageInteractivepython3 main.pyCommand argumentsusage: main.py [-h] [--region REGION] [--instance-id INSTANCE_ID] [--keypair KEYPAIR] [--log-level LOG_LEVEL]

optional arguments:
-h, --help show this help message and exit
--region REGION region name
--instance-id INSTANCE_ID EC2 instance id
--keypair KEYPAIR existing key pair name
--log-level LOG_LEVEL log levelFlow1. Run main.py.
2. Region selection: use default region (us-east-1) or select a region. Notice that if the selected region does not contain any EC2 instances you will be asked to choose another region.
3. EC2 inatance-id s[...]

___________________________
@hacking_Attack
@Hacking_Video

election: you will get a list of all EC2 instances ids under your selected region and you will be asked to choose the inatance you would like to scan. Make sure to choose a valide answer (the number left to the desired id).
4. Track the process progress... It takes about 30 minutes.
5. Get a link to your report! Troubleshootingverbouse loggingpython3 main.py --log-level DEBUGscanners databases update process1. connect to the EC2 instance created ssh ubuntu@PUBLICIP -i KEYPAIR.pem2. watch the progress tail /var/log/user-data.logDownload Red-Detector

___________________________
@hacking_Attack
@Hacking_Video

Deep Web
freedom hosting reloaded active now

submitted by /u/WholesomeDude0
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Oil Pipeline Attack and the Effects of Ransomware on ICS/SCADA Entities

https://external-preview.redd.it/ZZc-_BYlBdziSQ8tCN01PCmu76diiFhLyt7fRcuU-N8.jpg?width=640&crop=smart&auto=webp&s=18012d3343f67cee52bcb7a038e3534327507fd4 submitted by /u/Zugswang_
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How to find a email?

Can anyone guide me as to how can find email of an account in web server like Instagram, Facebook, etc. If so please DM me Thank you

submitted by /u/Mr-Invincible3
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How to Protect Myself

My sister’s bf (a CS major) stayed over for a week and after he left, I noticed that on private browser on my personal computer his email auto filled on the PayPal log in. I never let him use or touch my computer, and neither did my sister. I am absolutely certain of this. I don’t even have his contact information. How would his email address auto fill on my computer? Is this kali Linux? Is there a way to screen for if my computer has been hacked so I can prove it? Also, how can I protect myself in the future since he is coming back. Thank you.

submitted by /u/anjelly77
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Tscopy : Tool to parse the NTFS $MFT file to locate and copy specific files

Tscopy is a requirement during an Incident Response (IR) engagement to have the ability to analyze files on the filesystem. Sometimes these files are locked by the operating system (OS) because they are in use, which is particularly frustrating with event logs and registry hives. It allows the user, who is running with administrator privileges, […]

The post Tscopy : Tool to parse the NTFS $MFT file to locate and copy specific files appeared first on Kali Linux Tutorials.

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
HackTheBox — SolidState (Medium) writeup

https://cdn-images-1.medium.com/max/600/1*GwhdFScPqQcy2OS7L-uoIQ.png
Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
10 Ways to Never Get Hacked

https://cdn-images-1.medium.com/max/2600/1*-f7Ksjtk0mlyIE62wO3_JA.jpeg
There are many people on the internet that want your information. Don´t let them have it!

Continue reading on Geek Culture »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Exploiting Business Logic Vulnerability : High Level Logic

https://cdn-images-1.medium.com/max/649/1*8iYnAcSFYCJBYG3SJ9g7fA.png
Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
A red team has created a master key to hack into millions of hotel rooms

https://cdn-images-1.medium.com/max/980/0*BnludDowsdNb7tCj
If you see the VingCard logo on your room key, that’s the system in question.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video