hacking: security in practice
View Private Tiktoks

Does anybody know an exploit to view the TikTok’s of private users? Thanks for any help!
[link] [comments]

certs and skills for pentester?
https://www.reddit.com/r/Pentesting/comments/zks7km/certs_and_skills_for_pentester/

<!-- SC_OFF -->I have sec+ and ceh, anything else I should learn and obtain ? <!-- SC_ON --> submitted by /u/Entire-Flight-8938 (https://www.reddit.com/user/Entire-Flight-8938)
[link] (https://www.reddit.com/r/Pentesting/comments/zks7km/certs_and_skills_for_pentester/) [comments] (https://www.reddit.com/r/Pentesting/comments/zks7km/certs_and_skills_for_pentester/)

Kali Linux Tutorials
Scscanner : Tool To Read Website Status Code Response From The Lists

Scscanner is tool to read website status code response from the lists. This tool have ability to filter only spesific status code, and save the result to a file.

Feature

* Slight dependency. This tool only need curl to be installed
* Multi-processing. Scanning will be more faster with multi-processing
* Filter status code. If you want only spesific status code (ex: 200) from the list, this tool will help you

Usage

┌──(miku㉿nakano)-[~/scscanner]
└─$ bash scscanner.sh

scscanner – Massive Status
Code Scanner Codename : EVA02

Example: bash scscanner.sh -l domain.txt -t 30 options:
-l Files contain lists of domain.
-t Adjust multi process. Default is 15
-f Filter status code.
-o Save to file.
-h Print this Help.

Adjust multi-process

bash scscanner.sh -l domain.txt -t 30

Using status code filter

bash scscanner.sh -l domain.txt -f 200

Using status code filter and save to file.

bash scscanner.sh -l domain.txt -f 200 -o result.txt

Screenshot
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgL8M4YCEGp0q-SNXkQZvEioyZ7l0QZs-MtrC9QqBbPtqjfQ8YLMxqhGMZ6axCy0nIS_ByQKFd0dSm5342Mw8mzn5IvHcJozmFYvOdLm8QzL0ZIT-R64noUmuSyU9UibFjXEjs7t4UJixE__XBLTQ0XU1CZuoX-_qYCJiAa9_YcKBbWRumwZ_oZCz_I/s708/scscanner.png https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi-WsZE5OjxkBx212AR1j52C4gYdL9Ho4uGM2RrEn1WtQO3luOxWNpoR-Q3mHt7bEYSbgJHm2afjqaI8_Sb_zYoninC1cM-Yxohz4GBnF6NdnfS0iZIXPpqM4g0PAgBqjD7miphIj1ZdE9RZaUfRY5BhD35CwW9yQBCsxRk3JAE72DEu7kbA8_P5HBe/s708/scscanner1.png
To Do List

* Add multi-processing
* Add filter status code options
* Add save to file options
* Get title from page

Feel free to contribute if you want to improve this tools.
Click Here To Download

Hacking server using SSTI

These days we mostly witness website with more of dynamic content than the static content. There are several ways to achieve the mentioned…Continue reading on Medium »
Read more...

Hacking on Medium
Solución — OhSINT [THM]

https://cdn-images-1.medium.com/max/612/1*uPx3VU6eZZo-kNDPgRFIgQ.png
Este CTF es muy distinto a los que venimos haciendo, ya que se enfoca en la recolección de información y no en obtener acceso a un…

Continue reading on Medium »

Hacking on Medium
Simplified Hacking - Criando Phishing de Websites e de Emails

https://cdn-images-1.medium.com/max/800/1*XOLDhVMP1dOgB33Uu9ynlA.jpeg
Quando navegamos pela internet, é muito comum encontrarmos diversos tipos de ameaças referentes a segurança de nossos dados, não é a toa…

Continue reading on Medium »

Hacking on Medium
HACKING Jeff [TryHackMe]: CTF CHALLENGE

https://cdn-images-1.medium.com/max/941/1*nyO6zJUybTfFnysx8zbo_g.png
Howdy, Player! Monday is a terrific day to hack into a web server. Today, a friend has set up a simple web server that has two hidden…

Continue reading on Medium »

Hacking on Medium
Find Out a WhatsApp Cheater

https://cdn-images-1.medium.com/max/1080/1*kdDm0ZVTEopUjdYsZOSHxQ.jpeg
Is your spouse acting weird lately? Do you find yourself lying in bed at night and doubting his fidelity or catching glimpses of WhatsApp…

Continue reading on Medium »

Codecepticon - .NET Application That Allows You To Obfuscate C#, VBA/VB6 (Macros), And PowerShell Source Code
http://www.kitploit.com/2022/12/codecepticon-net-application-that.html

Codecepticon is a .NET application that allows you to obfuscate C#, VBA/VB6 (macros), and PowerShell (https://www.kitploit.com/search/label/PowerShell) source code, and is developed for offensive security engagements such as Red/Purple Teams. What separates Codecepticon from other obfuscators is that it targets the source code rather than the compiled executables, and was developed specifically for AV/EDR evasion. Codecepticon allows you to obfuscate and rewrite code, but also provides features such as rewriting the command line as well.
Read This First ! Before we begin ! This documentation is on how to install and use Codecepticon only. Compilation, usage, and support for tools like Rubeus and SharpHound will not be provided. Refer to each project's repo separately for more information. Codecepticon is actively developed/tested in VS2022, but it should work in VS2019 as well. Any tickets/issues created for VS2019 and below, will not be investigated unless the issue is reproducible in VS2022. So please use the latest and greatest VS2022. The following packages MUST be v3.9.0, as newer versions have the following issue which is still open: dotnet/roslyn#58463 (https://github.com/dotnet/roslyn/issues/58463) Microsoft.CodeAnalysis.CSharp.Workspaces Microsoft.CodeAnalysis.Workspaces.MSBuild Codecepticon checks the version of these packages on runtime and will inform you if the version is different to v3.9.0. It cannot be stressed this enough: always test your obfuscated code (https://www.kitploit.com/search/label/Obfuscated%20Code) locally first. Prerequisites Visual Studio Pro/Community 2022

Roslyn Compiler

Open and Compile Open Codecepticon, wait until all NuGet packages are downloaded and then build the solution. Using Codecepticon There are two ways to use Codecepticon, either by putting all arguments in the command line or by passing a single XML configuration file. Due to the high level of supported customisations, It's not recommended manually going through --help output to try and figure out which parameters to use and how. Use CommandLineGenerator.html (https://github.com/Accenture/Codecepticon/blob/main/CommandLineGenerator.html) and generate your command quickly: