Hacking on Medium
Analyzing the obsure Ebay hack

https://cdn-images-1.medium.com/max/2600/0*41vNDn7UChjY9c6S
Did you know? Ebay makes up over 6% of the 50,000+ fake login pages over the Internet!

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
No Ransom Was Paid By The Haven To Un-Encrypt This Story

https://cdn-images-1.medium.com/max/2600/0*AEXLHciWPkZSbAGa
We’re not weaklings! We did it ourselves!

Continue reading on The Haven »

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
3klCon - Automation Recon Tool Which Works With Large And Medium Scope

https://1.bp.blogspot.com/-zz0wJD6cm10/YJgbPLLo7KI/AAAAAAAAWIM/yRFr8IQHxUAAbjjm_PE_VjiHpjGV5s_qwCNcBGAsYHQ/w640-h362/3klCon_1_Welcome.png
Full Automation Recon tool which works with Small and Medium scopes.

ّIt's recommended to use it on VPS, it'll discover secrets and searching for vulnerabilities

So, Welcome and let's deep into it
Updates

Version 1.1, what's new? (Very Recommended)

1. Fixing multiple issues with the used tools.
2. Upgrading to python3
3. Editing the tool's methedology, you can check it there :)
4. Editing the selected tools, change some and use more tools
5. Editing some processes to be as a user option like directory bruteforcing and port scan

Installation instructions

1. Befor ANY installation instruction: You MUST be the ROOT user

$ su -

Because some of tools and dependencies will need the root permission

2. Install required tools (You MUST run it even if you install the used tools)

chmod +x install_tools.sh

./install_tools.sh

3. Running tool (Preferred to use python2 not python3)

python 3klcon.py -t target.com

4. Check that you already installed the last version of GO because some tools require to be updated!

Notes

[+] If you face any problem at the installation process, check that:
1. You logged in as ROOT user not normal user
2. Check that you installed the GO language and this path is exist /root/go/bin

[+] It will take almost 5 ~ 6 hours running if your target is a medium. So, be Patient or use VPS and sleep while running :)

[+] It will collect all the result into one directory with your target name

[+] Some of tools may need your reaction like entering your GitHub's 2FA or username, password, etc.

Tools useds

1. Subfinder
2. Assetfinder
3. Altdns
4. Dirsearch
5. Httpx
6. Waybackurls
7. Gau
8. Git-hound
9. Gitdorks.sh
10. Naabu
11. Gf
12. Gf-templetes
13. Nuclei
14. Nuclei-templets
15. Subjack
16. Port_scan.sh

Stay in touch

LinkedIn | Blog | Twitter
Download 3klCon

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Colonial Pipeline paid 75 Bitcoin, or roughly $5 million, to hackers.

https://external-preview.redd.it/9kkmRDmzYbrtgowzkNk85OWEsMgv9euuGCNN8nZPq00.jpg?width=640&crop=smart&auto=webp&s=8705a3b2254ed049cbac4e120529152285a7d229 submitted by /u/Reelix
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
hashcat - lost keepass db password

Hi guys,

So I am in need to crack a keepass database of mine of which I have forgotten the password. I know the first 30 characters of the password but have forgotten the last 3-4 digit variation on it.

I assume something like parsing the known 30 characters into hashcat and wildcarding the last 4 characters would do the job but I wanted to know if this was possible and would be interested to know if anyone knew the cmd to run off of the bat.

I have a 1080ti and an rtx 3090 in my rig so figure it should make short work off it, but looking for advice.

Thanks for your time in advance.

submitted by /u/Anon_Ron
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Daemon/Service Exploitation

https://cdn-images-1.medium.com/max/974/0*j431lKlDhhvoPr7_
Daemons are processes that run in the background and are automatically started at boot time. Daemons are generally started up with higher…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Unquoted Service Paths

An unquoted service path is when the path binary is not enclosed in quotes. I will go into detail why this can be a problem.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Attacking NFS Shares

NFS stands for Network File System and provides a way to mount remote file systems as if they were local to the system. The NFS service…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
HACK MY SCHOOL

https://cdn-images-1.medium.com/max/819/1*VYIXfuHr9xmNoXTyeeZmjA.png
Introduction

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Colonial Pipeline…Not So Fast…

https://cdn-images-1.medium.com/max/992/1*fDKsqr_bDvhALOu4IUjkRg.jpeg
On May 7th, 2021 Colonial Pipeline suffered a ransomware attack. Unable to access or trust its data network, the company that transports…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Best Android Hacking Apps| Top 23

https://cdn-images-1.medium.com/max/600/0*rT4wIC24DVbjCmu8
“Best Android Hacking Apps and tools” The learning approaches are also evolving as creativity progressively develops. Your Android phones…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video