Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
What is the best hacker book for a beginner?
https://cdn-images-1.medium.com/max/602/0*LbdY8q0P6RG_HVq3
Skills Required to be a Hacker
Continue reading on Medium »
What is the best hacker book for a beginner?
https://cdn-images-1.medium.com/max/602/0*LbdY8q0P6RG_HVq3
Skills Required to be a Hacker
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Skills Required to be a Hacker
https://cdn-images-1.medium.com/max/602/0*LbdY8q0P6RG_HVq3
Hacking is one of the hottest professions in this decade, but don’t make it an easy task. You must have a deep knowledge of computer…
Continue reading on Medium »
Skills Required to be a Hacker
https://cdn-images-1.medium.com/max/602/0*LbdY8q0P6RG_HVq3
Hacking is one of the hottest professions in this decade, but don’t make it an easy task. You must have a deep knowledge of computer…
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Owasp Top 10 | TryHackMe Writeup
https://cdn-images-1.medium.com/max/1680/1*tlCU2JIj1WWF73cqRU2qrw.png
In this blog, we’ll be exploring the solutions to the questions in this room as well as learning how we can utilize the Owasp top 10 web…
Continue reading on Medium »
Owasp Top 10 | TryHackMe Writeup
https://cdn-images-1.medium.com/max/1680/1*tlCU2JIj1WWF73cqRU2qrw.png
In this blog, we’ll be exploring the solutions to the questions in this room as well as learning how we can utilize the Owasp top 10 web…
Continue reading on Medium »
Forwarded from Torrent Leaks
Free Course Site
The Complete PHP MySQL Professional Course with 5 Projects
https://freecoursesite.com/wp-content/uploads/2018/02/1171966_8af1_6.jpg
Learn PHP MYSQL by building 5 Projects including PHP Regular Expressions & CMS | Become a Full Stack Back-End Developer. What Will I Learn? All PHP Fundamentals and Building Blocks with practical implementation in Projects Form Validation with most Secure way using Regular Expressions Making web pages dynamic with the variety of PHP Techniques Employee […]
The post The Complete PHP MySQL Professional Course with 5 Projects appeared first on Free Course Site.
The Complete PHP MySQL Professional Course with 5 Projects
https://freecoursesite.com/wp-content/uploads/2018/02/1171966_8af1_6.jpg
Learn PHP MYSQL by building 5 Projects including PHP Regular Expressions & CMS | Become a Full Stack Back-End Developer. What Will I Learn? All PHP Fundamentals and Building Blocks with practical implementation in Projects Form Validation with most Secure way using Regular Expressions Making web pages dynamic with the variety of PHP Techniques Employee […]
The post The Complete PHP MySQL Professional Course with 5 Projects appeared first on Free Course Site.
Howbto be a better pentester?
https://www.reddit.com/r/Pentesting/comments/ndlkvm/howbto_be_a_better_pentester/
<!-- SC_OFF -->I have been learning pentesting for about a year now,reading books taking courses etc. But mostly I always learn how to use a tools. It doesnt seem to be very challenging. Mostly I learn do some passiv amd active enumeration start nmap than run nessus or burp to check for vulnerabiliti and finally exploiting them with metasploit. I feel like that I would need to learn way more to become a pentester ofc also some languages. So is there something I am missing? <!-- SC_ON --> submitted by /u/linuxition (https://www.reddit.com/user/linuxition)
[link] (https://www.reddit.com/r/Pentesting/comments/ndlkvm/howbto_be_a_better_pentester/) [comments] (https://www.reddit.com/r/Pentesting/comments/ndlkvm/howbto_be_a_better_pentester/)
https://www.reddit.com/r/Pentesting/comments/ndlkvm/howbto_be_a_better_pentester/
<!-- SC_OFF -->I have been learning pentesting for about a year now,reading books taking courses etc. But mostly I always learn how to use a tools. It doesnt seem to be very challenging. Mostly I learn do some passiv amd active enumeration start nmap than run nessus or burp to check for vulnerabiliti and finally exploiting them with metasploit. I feel like that I would need to learn way more to become a pentester ofc also some languages. So is there something I am missing? <!-- SC_ON --> submitted by /u/linuxition (https://www.reddit.com/user/linuxition)
[link] (https://www.reddit.com/r/Pentesting/comments/ndlkvm/howbto_be_a_better_pentester/) [comments] (https://www.reddit.com/r/Pentesting/comments/ndlkvm/howbto_be_a_better_pentester/)
How to prevent more than 200 million users from using Google services
https://omar0x01.medium.com/how-to-prevent-more-than-200-million-users-from-using-google-services-136b3b8e221f?source=rss------bug_bounty-5
Note: all bugs in this write-up still exist, and you can reproduce them in https://community.appsheet.comContinue reading on Medium » (https://omar0x01.medium.com/how-to-prevent-more-than-200-million-users-from-using-google-services-136b3b8e221f?source=rss------bug_bounty-5)
___________________________
@hacking_Attack
@Hacking_Video
https://omar0x01.medium.com/how-to-prevent-more-than-200-million-users-from-using-google-services-136b3b8e221f?source=rss------bug_bounty-5
Note: all bugs in this write-up still exist, and you can reproduce them in https://community.appsheet.comContinue reading on Medium » (https://omar0x01.medium.com/how-to-prevent-more-than-200-million-users-from-using-google-services-136b3b8e221f?source=rss------bug_bounty-5)
___________________________
@hacking_Attack
@Hacking_Video
Medium
How to prevent more than 200 million users from using Google services
Note: all bugs in this write-up still exist, and you can reproduce them in https://community.appsheet.com
How to prevent more than 200 million users from using Google services
Note: all bugs in this write-up still exist, and you can reproduce them in https://community.appsheet.comContinue reading on Medium »
Read more...
Note: all bugs in this write-up still exist, and you can reproduce them in https://community.appsheet.comContinue reading on Medium »
Read more...
Hacking Articles Tips Tricks Videos Tutorials
Photo
Kali Linux Tutorials
Duplicut : Remove Duplicates From MASSIVE Wordlist, Without Sorting It
Duplicut is a modern password wordlist creation usually implies concatenating multiple data sources. Ideally, most probable passwords should stand at start of the wordlist, so most common passwords are cracked instantly. With existing dedupe tools you are forced to choose if you prefer to preserve the order OR handle massive wordlists. Unfortunately, wordlist creation requires both: So i wrote duplicut in highly […]
The post Duplicut : Remove Duplicates From MASSIVE Wordlist, Without Sorting It appeared first on Kali Linux Tutorials.
___________________________
@hacking_Attack
@Hacking_Video
Duplicut : Remove Duplicates From MASSIVE Wordlist, Without Sorting It
Duplicut is a modern password wordlist creation usually implies concatenating multiple data sources. Ideally, most probable passwords should stand at start of the wordlist, so most common passwords are cracked instantly. With existing dedupe tools you are forced to choose if you prefer to preserve the order OR handle massive wordlists. Unfortunately, wordlist creation requires both: So i wrote duplicut in highly […]
The post Duplicut : Remove Duplicates From MASSIVE Wordlist, Without Sorting It appeared first on Kali Linux Tutorials.
___________________________
@hacking_Attack
@Hacking_Video
Kali Linux Tutorials
Duplicut : Remove Duplicates From MASSIVE Wordlist, Without Sorting It.
Modern password wordlist creation usually implies concatenating multiple data sources. Most probable passwords should stand at start of the wordlist
Red-Kube - Red Team K8S Adversary Emulation Based On Kubectl
Red Kube is a collection of kubectl commands written to evaluate the security posture of Kubernetes clusters from the attacker's perspective. The commands are either passive for data collection and information disclosure or active for performing real actions that affect the cluster. The commands are mapped to MITRE ATT&CK Tactics to help get a sense of where we have most of our gaps and prioritize our findings. The current version is wrapped with a python orchestration module to run several commands in one run based on different scenarios or tactics. Please use with care as some commands are active and actively deploy new containers or change the role-based access control configuration. Warning: You should NOT use red-kube commands on a Kubernetes cluster that you don't own!Prerequisites: python3 requirements pip3 install -r requirements.txt kubectl (Ubuntu / Debian) sudo apt-get updatesudo apt-get install -y apt-transport-https ca-certificates curlsudo curl -fsSLo /usr/share/keyrings/kubernetes-archive-keyring.gpg https://packages.cloud.google.com/apt/doc/apt-key.gpgecho "deb signed-by=/usr/share/keyrings/kubernetes-archive-keyring.gpg https://apt.kubernetes.io/ kubernetes-xenial main" | sudo tee /etc/apt/sources.list.d/kubernetes.listsudo apt-get updatesudo apt-get install -y kubectl kubectl (Red Hat based) cat < /etc/yum.repos.d/kubernetes.repokubernetesname=Kubernetesbaseurl=https://packages.cloud.google.com/yum/repos/kubernetes-el7-x86_64enabled=1gpgcheck=1repo_gpgcheck=1gpgkey=https://packages.cloud.google.com/yum/doc/yum-key.gpg https://packages.cloud.google.com/yum/doc/rpm-package-key.gpgEOFyum install -y kubectl jq sudo apt-get update -ysudo apt-get install -y jq Usage usage: python3 main.py -h --mode active/passive/all --tactic TACTIC\_NAME --show\_tactics --cleanuprequired arguments:--mode run kubectl commands which are active / passive / all modes--tactic choose tacticother arguments:-h --help show this help message and exit--show_tactics show all tactics Commands by MITRE ATT&CK Tactics Tactic Count Reconnaissance 2 Initial Access 0 Execution 0 Persistence 2 Privilege Escalation 4 Defense Evasion 1 Credential Access 8 Discovery 15 Lateral Movement 0 Collection 1 Command and Control 2 Exfiltration 1 Impact 0 Webinars 1 First Workshop with Lab01 and Lab02 Webinar Link 2 Second Workshop with Lab03 and Lab04 Webinar Link Presentations BlackHat Asia 2021 Q&A Why choosing kubectl and not using the kubernetes api in python? When performing red team assessments and adversary emulations, the quick manipulations and tweaks for the tools used in the arsenal are critical. The ability to run such assessments and combine the k8s attack techniques based on kubectl and powerful Linux commands reduces the time and effort significantly. Contact Us This research was held by Lightspin's Security Research Team. For more information, contact us at support@lightspin.io. Download Red-Kube
Read more...
___________________________
@hacking_Attack
@Hacking_Video
Red Kube is a collection of kubectl commands written to evaluate the security posture of Kubernetes clusters from the attacker's perspective. The commands are either passive for data collection and information disclosure or active for performing real actions that affect the cluster. The commands are mapped to MITRE ATT&CK Tactics to help get a sense of where we have most of our gaps and prioritize our findings. The current version is wrapped with a python orchestration module to run several commands in one run based on different scenarios or tactics. Please use with care as some commands are active and actively deploy new containers or change the role-based access control configuration. Warning: You should NOT use red-kube commands on a Kubernetes cluster that you don't own!Prerequisites: python3 requirements pip3 install -r requirements.txt kubectl (Ubuntu / Debian) sudo apt-get updatesudo apt-get install -y apt-transport-https ca-certificates curlsudo curl -fsSLo /usr/share/keyrings/kubernetes-archive-keyring.gpg https://packages.cloud.google.com/apt/doc/apt-key.gpgecho "deb signed-by=/usr/share/keyrings/kubernetes-archive-keyring.gpg https://apt.kubernetes.io/ kubernetes-xenial main" | sudo tee /etc/apt/sources.list.d/kubernetes.listsudo apt-get updatesudo apt-get install -y kubectl kubectl (Red Hat based) cat < /etc/yum.repos.d/kubernetes.repokubernetesname=Kubernetesbaseurl=https://packages.cloud.google.com/yum/repos/kubernetes-el7-x86_64enabled=1gpgcheck=1repo_gpgcheck=1gpgkey=https://packages.cloud.google.com/yum/doc/yum-key.gpg https://packages.cloud.google.com/yum/doc/rpm-package-key.gpgEOFyum install -y kubectl jq sudo apt-get update -ysudo apt-get install -y jq Usage usage: python3 main.py -h --mode active/passive/all --tactic TACTIC\_NAME --show\_tactics --cleanuprequired arguments:--mode run kubectl commands which are active / passive / all modes--tactic choose tacticother arguments:-h --help show this help message and exit--show_tactics show all tactics Commands by MITRE ATT&CK Tactics Tactic Count Reconnaissance 2 Initial Access 0 Execution 0 Persistence 2 Privilege Escalation 4 Defense Evasion 1 Credential Access 8 Discovery 15 Lateral Movement 0 Collection 1 Command and Control 2 Exfiltration 1 Impact 0 Webinars 1 First Workshop with Lab01 and Lab02 Webinar Link 2 Second Workshop with Lab03 and Lab04 Webinar Link Presentations BlackHat Asia 2021 Q&A Why choosing kubectl and not using the kubernetes api in python? When performing red team assessments and adversary emulations, the quick manipulations and tweaks for the tools used in the arsenal are critical. The ability to run such assessments and combine the k8s attack techniques based on kubectl and powerful Linux commands reduces the time and effort significantly. Contact Us This research was held by Lightspin's Security Research Team. For more information, contact us at support@lightspin.io. Download Red-Kube
Read more...
___________________________
@hacking_Attack
@Hacking_Video
Hacking Articles Tips Tricks Videos Tutorials
Photo
KitPloit - PenTest Tools!
Red-Kube - Red Team K8S Adversary Emulation Based On Kubectl
https://1.bp.blogspot.com/-tlThzaGqk70/YJhYhLfRkwI/AAAAAAAAWKQ/yY9iirGTQUYvt1PmgMk6-bCI4wrjCmwZQCNcBGAsYHQ/w400-h400/red-kube_1_redcube.png Red Kube is a collection of kubectl commands written to evaluate the security posture of Kubernetes clusters from the attacker's perspective.
The commands are either passive for data collection and information disclosure or active for performing real actions that affect the cluster.
The commands are mapped to MITRE ATT&CK Tactics to help get a sense of where we have most of our gaps and prioritize our findings.
The current version is wrapped with a python orchestration module to run several commands in one run based on different scenarios or tactics.
Please use with care as some commands are active and actively deploy new containers or change the role-based access control configuration.
Warning: You should NOT use red-kube commands on a Kubernetes cluster that you don't own! Prerequisites:python3 requirements
2 Second Workshop with Lab03 and Lab04 Webinar Link PresentationsBlackHat Asia 2021 Q&AWhy choosing kubectl and not using the kubernetes api in python?
When performing red team assessments and adversary emulations, the quick manipulations and tweaks for the tools used in the arsenal are critical.
The ability to run such assessments and combine the k8s attack techniques based on kubectl and powerful Linux commands reduces the time and effort significantly. Contact UsThis research was held by Lightspin's Security Research Team. For more information, contact us at support@lightspin.io. Download Red-Kube
Red-Kube - Red Team K8S Adversary Emulation Based On Kubectl
https://1.bp.blogspot.com/-tlThzaGqk70/YJhYhLfRkwI/AAAAAAAAWKQ/yY9iirGTQUYvt1PmgMk6-bCI4wrjCmwZQCNcBGAsYHQ/w400-h400/red-kube_1_redcube.png Red Kube is a collection of kubectl commands written to evaluate the security posture of Kubernetes clusters from the attacker's perspective.
The commands are either passive for data collection and information disclosure or active for performing real actions that affect the cluster.
The commands are mapped to MITRE ATT&CK Tactics to help get a sense of where we have most of our gaps and prioritize our findings.
The current version is wrapped with a python orchestration module to run several commands in one run based on different scenarios or tactics.
Please use with care as some commands are active and actively deploy new containers or change the role-based access control configuration.
Warning: You should NOT use red-kube commands on a Kubernetes cluster that you don't own! Prerequisites:python3 requirements
pip3 install -r requirements.txtkubectl (Ubuntu / Debian) sudo apt-get update
sudo apt-get install -y apt-transport-https ca-certificates curl
sudo curl -fsSLo /usr/share/keyrings/kubernetes-archive-keyring.gpg https://packages.cloud.google.com/apt/doc/apt-key.gpg
echo "deb [signed-by=/usr/share/keyrings/kubernetes-archive-keyring.gpg] https://apt.kubernetes.io/ kubernetes-xenial main" | sudo tee /etc/apt/sources.list.d/kubernetes.list
sudo apt-get update
sudo apt-get install -y kubectlkubectl (Red Hat based) cat <eof/etc/yum.repos.d/kubernetes.repo
[kubernetes]
name=Kubernetes
baseurl=https://packages.cloud.google.com/yum/repos/kubernetes-el7-x86_64
enabled=1
gpgcheck=1
repo_gpgcheck=1
gpgkey=https://packages.cloud.google.com/yum/doc/yum-key.gpg https://packages.cloud.google.com/yum/doc/rpm-package-key.gpg
EOF
yum install -y kubectljq sudo apt-get update -y
sudo apt-get install -y jqUsageusage: python3 main.py [-h] [--mode active/passive/all] [--tactic TACTIC_NAME] [--show_tactics] [--cleanup]
required arguments:
--mode run kubectl commands which are active / passive / all modes
--tactic choose tactic
other arguments:
-h --help show this help message and exit
--show_tactics show all tactics Commands by MITRE ATT&CK TacticsTactic Count Reconnaissance 2 Initial Access 0 Execution 0 Persistence 2 Privilege Escalation 4 Defense Evasion 1 Credential Access 8 Discovery 15 Lateral Movement 0 Collection 1 Command and Control 2 Exfiltration 1 Impact 0 Webinars1 First Workshop with Lab01 and Lab02 Webinar Link2 Second Workshop with Lab03 and Lab04 Webinar Link PresentationsBlackHat Asia 2021 Q&AWhy choosing kubectl and not using the kubernetes api in python?
When performing red team assessments and adversary emulations, the quick manipulations and tweaks for the tools used in the arsenal are critical.
The ability to run such assessments and combine the k8s attack techniques based on kubectl and powerful Linux commands reduces the time and effort significantly. Contact UsThis research was held by Lightspin's Security Research Team. For more information, contact us at support@lightspin.io. Download Red-Kube
Hacking Articles Tips Tricks Videos Tutorials
Photo
hacking: security in practice
The World Famous Hacker Group Announced The Launch Of Its Own Virtual Currency
https://external-preview.redd.it/9bc6I8q4B0gtsf_8mO6V6Xz3e-gaht0NatGfqz_YI-c.jpg?width=216&crop=smart&auto=webp&s=46d78db61c8538b2f09d279ea3892fd6d563650e submitted by /u/om362
[link] [comments]
The World Famous Hacker Group Announced The Launch Of Its Own Virtual Currency
https://external-preview.redd.it/9bc6I8q4B0gtsf_8mO6V6Xz3e-gaht0NatGfqz_YI-c.jpg?width=216&crop=smart&auto=webp&s=46d78db61c8538b2f09d279ea3892fd6d563650e submitted by /u/om362
[link] [comments]
hacking: security in practice
Cyber Security Analyst Community
Hey all, hope you're having great weekend. Quick poll here, we've had a suggestion by one of our analysts to start up a discord server to discuss malware, conduct analysis, share iocs and anything else we can do to help other analysts or new joiners in the field.
Is this something you'd be interested in?
View Poll
submitted by /u/_Forever_Learning
[link] [comments]
Cyber Security Analyst Community
Hey all, hope you're having great weekend. Quick poll here, we've had a suggestion by one of our analysts to start up a discord server to discuss malware, conduct analysis, share iocs and anything else we can do to help other analysts or new joiners in the field.
Is this something you'd be interested in?
View Poll
submitted by /u/_Forever_Learning
[link] [comments]
reddit
Cyber Security Analyst Community
Hey all, hope you're having great weekend. Quick poll here, we've had a suggestion by one of our analysts to start up a discord server to discuss...