Hacking Articles Tips Tricks Videos Tutorials
471 subscribers
66K photos
15 videos
157 files
132K links
Exploit
Pentesting
Hacking
Red Team
Blue Team
Kali Linux
Bug Bounty
Black Hat
Cyber security etc

@Hacking_Video
@Hacking_attack
Download Telegram
Deep Web
Deepweb is kinda boring

I've been using Deepweb for a few weeks and I gotta be honest it's kinda boring. At first it was cool to look at the different types of websites but after like an hour it became pretty lame. Maybe this is just me.

submitted by /u/Lancestorm03
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video
hacking: security in practice
What is the best use for the system described here.

Please assume that I have a way to develop hack-proof algorithmic code.

The system consists of:

1. a compiler which takes c language code and compiles it to binary code for execution
2. a binary code executable module which executes the binary code

Even if I give you the C++ source code for the compiler and for the binary code executable module, you still won't be able to navigate the binary code and force the encoded algorithm to do anything other than what it is designed to do by the source which was originally compiled.

Given all of this, what is/are the best use(s) for this system?

----------------------------------------------

My thoughts are that this can be the foundation for new types of crypto currency / smart contract systems, but I'm looking for your feedback.

Think of this as a generalization of the basic idea behind crypto currencies:

1. I hold a private key
2. I can prove to you that I hold it without giving you access to it

Now this becomes:

1. I hold a bit (potentially a large amount) of algorithmic code which does something specific
2. I can prove to you that the code does what I say it does while denying you the ability to change its behavior in any way

Bear in mind that the whole point of Ethereum is to be able to run binary code which can't be hacked.

submitted by /u/cryptocomicon
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video
hacking: security in practice
3 days in and loving it !

This is an update from my previews post: https://www.reddit.com/r/hacking/comments/n6i2l4/this_is_how_i_am_starting/

TL;DR: At the end of the post

Hack The Box Academy

The first day I was very hyped up, sign up for HTB academy and started with their introductory modules.

Intro to academy was the first module, was great and personally humbling. It made me realize that I miss the basic technical vocabular knowledge. I can tell that not being native English speaker is going to slow me down but google is my best friend and every language issue I have can be solved with a quick search.

I then moved to Learning Process and it was honestly one of the best modules I have ever seen in any training I have ever done. I believe something like that should be the introduction to every course. As someone that never spent much effort at school this was a very educational read. 100% recommended.

Next was Web Request and here comes trouble. I like the idea of a web browser VM but for me was super lagghy also the version of tools like Burp was different from the one on the course slides. That should not be a big issue for most but for a complete beginner like me It create confusion. In fact, I got stuck on a burp exercise. I spent a few hours of tries and some googling but failed to proceed. Was quite frustrating but kept trying. I have also made a personal kali VM to try if the lag was the issue but nothing. I tried also contacting someone on Discord but no luck. I decided that I really wanted to finish the module but still not spend all day on that so planned to study elsewhere until I was ready to take on the challenge again, with better knowledge.

2 cool tools I discover thanks to HTB academy.

Tool to take smart notes. https://www.giuspen.com/cherrytree/

Just a screenshot tool but the best I have tried so far. https://github.com/flameshot-org/flameshot/releases

TryHackMe

I was looking for alternative resources and found TryHackMe. This website is seriously great and really feel like a better version of HTB Academy or at least in my personal case. Is difficult to give a fair review as a super noob but my experience was more enjoyable in THM.

I did the Introductory Researching and Linux fundamentals 1, 2 and 3 and boy they are good! The VM works with no lag and the videos attached to Linux fundamentals are a superb addiction to the already great modules. Overall website is engaging, and the badge/streak system is really motivating. Got a membership and decided that I will stick with this one.

Overall learning experience.

It was great. The number of resources and knowledge is overwhelming, structured courses really helps you follow a clear path. I have gone through a lot of material and I feel I am not going to remember everything, but the training teaches you on how to find the knowledge you are missing.

What I am studying gives me the same feeling that videogames (Eve online) gave me, I cannot stop thinking about it. I leave the house and I keep thinking about the thinks I have learned and the future challenges, it is just 3 days but does feels really addictive and I like that.

The process can be frustrating at times but when this happen a break and a newly motivated mindset is often the answer. I am still disappointed by my inability to finish the HTB module, but I will stick with THM but one day I will go back and smash that.

Next Steps

TryHackMe every day! I like the streak Idea and aiming for 30 days and hopefully finish the complete beginner module around that mark but not in a rush. I am looking for a long-term goal and for the moment my eyes are on CompTIA Pentest+. I am not giving a fixed time to that goal but if it was in 1-year time I will be happy, not sure if realistic, but I will do some research.

Excited fo[...]

___________________________
@hacking_Attack
@Hacking_Video
Hacking Articles Tips Tricks Videos Tutorials
hacking: security in practice 3 days in and loving it ! This is an update from my previews post: https://www.reddit.com/r/hacking/comments/n6i2l4/this_is_how_i_am_starting/ TL;DR: At the end of the post Hack The Box Academy The first day I was very hyped…
r the future

Much love

Grumpez.

TL;DR: 3 days in and enjoying the process. Got stuck on HTB academy and moved to TryHackMe. Feels more suited for me. I am feeling motivated and a bit addicted to the challenges set by the learning modules. Frustrating at times but a good mind set and google generally fix it. Aiming for a 30 days streak and finish Complete Beginner path.

submitted by /u/Grumpez [link] [comments]

___________________________
@hacking_Attack
@Hacking_Video
A Powerful Penetration Tool For Automating Penetration Tasks Such As Local Privilege Escalation, Enumeration, Exfiltration and More... Use Or Build Automation Modules To Speed Up Your Cyber Security Life

Setup
git clone https://github.com/Skiller9090/Lucifer.git
cd Lucifer
pip install -r requirements.txt
python main.py --help If you want the cutting edge changes add -b dev to the end of git clone https://github.com/Skiller9090/Lucifer.git
Commands
Command Description help Displays This Menu name Shows name of current shell id Displays current shell's id show Shows options or modules based on input, EX: show options Shows a list of variable/options already set set Sets a variable or option, EX: set set_vars Auto sets need variables for loaded module description Displays description of the module loaded auto_vars Displays is auto_vars is True or False for current shell change_auto_vars Changes the auto_var options for one shell, all shells (https://www.kitploit.com/search/label/Shells) or future shells reindex Re-indexes all modules, allows for dynamic (https://www.kitploit.com/search/label/Dynamic) additions of modules use Move into a module, EX: use run Runs the current module, can also use exploit to do the same spawn_shell Spawns a alternative shell open_shell Open a shell by id EX: open_shell show_shells Show all shell ids and attached name set_name Sets current shells name EX: set_name set_name_id Set a shells name by id EX: set_name_id clear Clear screen close Kills current input into opened shell reset Resets Everything exit Exits the program, can also use quit to do the same
Command Use
No-Arg Commands
help - to display help menu name - shows name of current shell id - shows current shell id options - shows a table of set options/vars set_vars - automatically sets vars needed for the loaded module (default defined in a module) description - show description of current loaded module auto_vars - displays current setting of auto_vars (auto_vars if true will automatically run set_vars on module load) run - runs the module with the current options, exploit works the same spawn_shell - spawns a new Shell instance show_shells - shows all open shells ids and names clear - clears the terminal/console screen close - kills the input to current shell reset - resets everything (not implemented) exit - quits the program Arg Commands
show - displays a list of set options or modules depending on argument. set - sets a variable/option change_auto_vars : - can be true or false (t or f) (-t or -f) : -g = global - sets for all shells spawned -n = new - sets this option for future shell spawns -i = inclusive - no matter what, set current shell to use : - path to module : -R - Override cache (reload dynamically) open_shell - opens a shell by its id set_name - set the name of the current shell set_name_id - set the name of the shell specified by
Using Java
Lucifer allows for Python and Java code to work side by side through the use of LMI.Java extension. For this to work you will need to install jpype1, to do this run the following command in your python environment:
pip install jpype1
>From here you are free to interact with LMI.Java.compiler and LMI.Java.luciferJVM which allows you to call java functions and instantiate java classes through python, more documentation of this will be created later on, on the lucifer wiki.
Examples

Settings Variables

___________________________
@hacking_Attack
@Hacking_Video
Running Module

___________________________
@hacking_Attack
@Hacking_Video
Settings

___________________________
@hacking_Attack
@Hacking_Video
Versioning
The standard of versioning on this project is:
MAJOR.MINOR.PATCH.STAGE.BUILD

Major:
incremented when either there has been a significant amount of new features since the start of the major or if there is a change which is so big that is can cause compatibility issues (Major of 0 if very unstable Could cause incompatibility issues
Minor:
incremented when a new feature or feature-set is added to the project should not cause incompatibility errors due to only additions made
Patch:
incremented on bugfixes or if feature is so small that it is worth incrementing minor very low risk of incompatibility error
Stage:
The stage of current MAJOR.MINOR.PATCH BUILD, either alpha, beta, release candidate or release Indicates how far through development the new MAJOR.MINOR.PATCH is Stage number to name translation: 0 => beta (b) 1 => alpha (a) 2 => release candidate (rc) 3 => release (r)
Build:
this should be incremented on every change made to the code, even on a one character change This version structure can be stored and displayed in a few ways: The best way to store the data within code is via a tuple such as: (Major, Minor, Patch, Stage, Build) Example is: (1, 4, 1, 2, 331) The long display would be: {stage} {major}.{minor}.{patch} Build {build} Example is: Alpha 1.4.1 Build 331 The short display would be: {major}.{minor}.{patch}{stage}{build} Example is: 1.4.1a331

Download Lucifer (https://github.com/Skiller9090/Lucifer)

___________________________
@hacking_Attack
@Hacking_Video