Noob here: How do you go about Capturing the flag on an onion address.
https://www.reddit.com/r/Pentesting/comments/10v0okw/noob_here_how_do_you_go_about_capturing_the_flag/
submitted by /u/irah007 (https://www.reddit.com/user/irah007)
[link] (https://www.reddit.com/r/Pentesting/comments/10v0okw/noob_here_how_do_you_go_about_capturing_the_flag/) [comments] (https://www.reddit.com/r/Pentesting/comments/10v0okw/noob_here_how_do_you_go_about_capturing_the_flag/)
https://www.reddit.com/r/Pentesting/comments/10v0okw/noob_here_how_do_you_go_about_capturing_the_flag/
submitted by /u/irah007 (https://www.reddit.com/user/irah007)
[link] (https://www.reddit.com/r/Pentesting/comments/10v0okw/noob_here_how_do_you_go_about_capturing_the_flag/) [comments] (https://www.reddit.com/r/Pentesting/comments/10v0okw/noob_here_how_do_you_go_about_capturing_the_flag/)
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Is cyber security jobs in high demand?
https://cdn-images-1.medium.com/max/800/1*JFxEom087d6QaGYXYEtkRQ.jpeg
Cybersecurity jobs are in high demand, and this trend is expected to continue for the foreseeable future. The rise of technology and the…
Continue reading on Medium »
Is cyber security jobs in high demand?
https://cdn-images-1.medium.com/max/800/1*JFxEom087d6QaGYXYEtkRQ.jpeg
Cybersecurity jobs are in high demand, and this trend is expected to continue for the foreseeable future. The rise of technology and the…
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Certified Ethical Hacker CEHv12 Certification Training
https://cdn-images-1.medium.com/max/768/1*Gv_mePRk9xB6J7pryTSaUA.jpeg
Technology is constantly evolving, and new security threats are always emerging. To combat these threats, organizations have to ensure…
Continue reading on Medium »
Certified Ethical Hacker CEHv12 Certification Training
https://cdn-images-1.medium.com/max/768/1*Gv_mePRk9xB6J7pryTSaUA.jpeg
Technology is constantly evolving, and new security threats are always emerging. To combat these threats, organizations have to ensure…
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Why Work from Home When You Can Work from Spa?
https://cdn-images-1.medium.com/max/800/1*zhHaKo44aptYCxDL4kynOg.jpeg
The Benefits of Heat, Touch, and Nudity for Creativity
Continue reading on Age of Awareness »
Why Work from Home When You Can Work from Spa?
https://cdn-images-1.medium.com/max/800/1*zhHaKo44aptYCxDL4kynOg.jpeg
The Benefits of Heat, Touch, and Nudity for Creativity
Continue reading on Age of Awareness »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Black Hat Ethical Hacking
Royal Ransomware Targets Linux Devices
Royal Ransomware Targets Linux DevicesPost Views: 1 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/12/Patreon.png Subscribe to Patreon to watch this episode.
Reading Time: 3 Minutes Targeting Vmware ESXi virtual machinesRoyal Ransomware is the latest ransomware operation to support the encryption of Linux devices, specifically targeting VMware ESXi virtual machines.
The Linux Royal Ransomware variant was discovered by the Equinix Threat Analysis Center and is executed using the command line.
It comes with support for multiple flags that allow the ransomware operators to control the encryption process. The ransomware appends the “.royal_u” extension to encrypted files on the VM.
https://www.bleepstatic.com/images/news/u/1109292/2023/Royal_Ransomware_ESXi_detections_VT.png
Detection score on VirusTotal
See Also: So you want to be a hacker? Offensive Security, Bug Bounty Courses What is Royal Ransomware?Royal Ransomware is a private operation comprised of threat actors who previously worked with the Conti ransomware operation.
The gang demands ransom payments ranging from $250,000 to tens of millions after encrypting their targets’ enterprise network systems.
In December, the US Department of Health and Human Services warned of Royal ransomware attacks targeting organizations in the healthcare sector. The shift towards targeting ESXi virtual machines aligns with a trend where enterprises have transitioned to VMs for improved device management and efficient resource handling.
https://www.bleepstatic.com/images/news/u/1109292/2023/Royal_Ransomware_submissions_IDR.png Royal ransomware submissions (ID Ransomware)
Trending: Major Cyber Attacks of 2022
Trending: Recon Tool: ScopeHunter Thousands of VMware ESXi servers reached EOF in October last yearTens of thousands of VMware ESXi servers exposed on the Internet reached end-of-life in October and are now only receiving technical support, exposing them to ransomware attacks.
A new ransomware strain known as ESXiArgs was used to scan for and encrypt unpatched servers in a massive campaign targeting ESXi devices worldwide. Over 100 servers worldwide were compromised in just a few hours.
Trending: QNAP NAS Devices at Risk of Remote Malicious Code Injection Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?
If you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com
Source: bleepingcomputer.com Source Link https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Merch.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/02/Images-for-the-News-posts-6-300x150.png Cisco IOx Vulnerability Exploited in Command Injection AttacksFebruary 3, 2023
* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/02/Images-for-the-News-posts-5-300x150.png HeadCrab: The Stealthy Malware Infiltrating Redis Servers for CryptominingFebruary 2, 2023
* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/02/Images-for-the-News-posts-4-300x150.png Sh1mmer: A New Exploit Enables Unenrollment of Enterprise-Managed ChromebooksFebruary 1, 2023
* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/01/Images-for-the-News-posts-11-300x150.png QNAP NAS Devices at Risk of Remote Malicious Code InjectionJanuary 31, 2023
https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/OffSec-Course.png Offensive Security & Ethical Hacking CourseBegin the learning curve of hacking now!
The post Royal Ransomware Targets Linux Devices first appeared on Black Hat Ethical Hacking.
Royal Ransomware Targets Linux Devices
Royal Ransomware Targets Linux DevicesPost Views: 1 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/12/Patreon.png Subscribe to Patreon to watch this episode.
Reading Time: 3 Minutes Targeting Vmware ESXi virtual machinesRoyal Ransomware is the latest ransomware operation to support the encryption of Linux devices, specifically targeting VMware ESXi virtual machines.
The Linux Royal Ransomware variant was discovered by the Equinix Threat Analysis Center and is executed using the command line.
It comes with support for multiple flags that allow the ransomware operators to control the encryption process. The ransomware appends the “.royal_u” extension to encrypted files on the VM.
https://www.bleepstatic.com/images/news/u/1109292/2023/Royal_Ransomware_ESXi_detections_VT.png
Detection score on VirusTotal
See Also: So you want to be a hacker? Offensive Security, Bug Bounty Courses What is Royal Ransomware?Royal Ransomware is a private operation comprised of threat actors who previously worked with the Conti ransomware operation.
The gang demands ransom payments ranging from $250,000 to tens of millions after encrypting their targets’ enterprise network systems.
In December, the US Department of Health and Human Services warned of Royal ransomware attacks targeting organizations in the healthcare sector. The shift towards targeting ESXi virtual machines aligns with a trend where enterprises have transitioned to VMs for improved device management and efficient resource handling.
https://www.bleepstatic.com/images/news/u/1109292/2023/Royal_Ransomware_submissions_IDR.png Royal ransomware submissions (ID Ransomware)
Trending: Major Cyber Attacks of 2022
Trending: Recon Tool: ScopeHunter Thousands of VMware ESXi servers reached EOF in October last yearTens of thousands of VMware ESXi servers exposed on the Internet reached end-of-life in October and are now only receiving technical support, exposing them to ransomware attacks.
A new ransomware strain known as ESXiArgs was used to scan for and encrypt unpatched servers in a massive campaign targeting ESXi devices worldwide. Over 100 servers worldwide were compromised in just a few hours.
Trending: QNAP NAS Devices at Risk of Remote Malicious Code Injection Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?
If you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com
Source: bleepingcomputer.com Source Link https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Merch.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/02/Images-for-the-News-posts-6-300x150.png Cisco IOx Vulnerability Exploited in Command Injection AttacksFebruary 3, 2023
* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/02/Images-for-the-News-posts-5-300x150.png HeadCrab: The Stealthy Malware Infiltrating Redis Servers for CryptominingFebruary 2, 2023
* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/02/Images-for-the-News-posts-4-300x150.png Sh1mmer: A New Exploit Enables Unenrollment of Enterprise-Managed ChromebooksFebruary 1, 2023
* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/01/Images-for-the-News-posts-11-300x150.png QNAP NAS Devices at Risk of Remote Malicious Code InjectionJanuary 31, 2023
https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/OffSec-Course.png Offensive Security & Ethical Hacking CourseBegin the learning curve of hacking now!
The post Royal Ransomware Targets Linux Devices first appeared on Black Hat Ethical Hacking.
Scheduling Recon Scripts with Docker
Cronjobs are useful for scheduling tasks to run automatically at a specified time or interval. In this tutorial, we’ll go over how to set…Continue reading on InfoSec Write-ups »
Read more...
Cronjobs are useful for scheduling tasks to run automatically at a specified time or interval. In this tutorial, we’ll go over how to set…Continue reading on InfoSec Write-ups »
Read more...
Deep Web
It’s coming
So we know it’s hard to get a market place which is stable and basically not going to screw you over.
Well that time is now.
We will be launching a multivendor site with a full escrow service. This will be the same for all vendors for order. Potential for fast release BUT this will be down to your past trading.
24/7 customer service. You won’t have to wait days for a reply it will be within a few hours
PGP as always your going to need your PGP to order and send secure chats.
We WONT be looking for help. All team members are trusted.
More updates coming
Welcome to the new way of Market Places
All the best from the team at
EURO MARKET
submitted by /u/obnoxiousheadset
[link] [comments]
It’s coming
So we know it’s hard to get a market place which is stable and basically not going to screw you over.
Well that time is now.
We will be launching a multivendor site with a full escrow service. This will be the same for all vendors for order. Potential for fast release BUT this will be down to your past trading.
24/7 customer service. You won’t have to wait days for a reply it will be within a few hours
PGP as always your going to need your PGP to order and send secure chats.
We WONT be looking for help. All team members are trusted.
More updates coming
Welcome to the new way of Market Places
All the best from the team at
EURO MARKET
submitted by /u/obnoxiousheadset
[link] [comments]
Reddit
r/deepweb - It’s coming
Posted in the deepweb community.
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking Articles Tips Tricks Videos Tutorials
Photo
hacking: security in practice
I'm gonna re-image and flash literally everything
Hi all,
So, my computers have been a lil whacky for about a month. Not just my PCs but my internet connection too. Bit of background I work in infosec, on the defensive side of things, as a 1st/2nd line SOC Analyst. I do a lil bit of engineering too.
So, it all seemed to start about a month ago. I'm chatting with someone on reddit. We're vibing getting along, but somewhere down the line he all but confesses to me that he's full on black hat. I was new to reddit, had made an 'anonymous' account (yeah righttt), but I shit myself. At this point we had exchanged lengthy conversation and images of various things. Nothing sexual if that's what you may think, reddit is as funny old place, just cool stuff. We had also moved the convo over to discord. It's dawning on me that my opsec had been absolutely pants, and that I had given this person more than enough to go on to begin to piece the puzzle of who I am together, not least of which my IP address, and exact geo location and mobile models and possibly PC models and OS's in the EXIF data for the images and stuff I've sent. It's also dawned on me that he could have sent malicious files, that I've opened naively.
Then it dawned on me that a couple hours or so into our conversation my internet connection had started playing up. Like it was being seriously overworked, busy. This had then been a consistent nuisance the whole time.
It's also dawned on me that my 'anonymous' profiles are not as anonymous as I would have liked, and that there are links between those and my legitimate accounts, here and there.
Both my laptop and my desktop, running Mint, have slowly but surely deteriorated over this time. They crash and they crash more often, and are often otherwise very sluggish and slow. Checking the system monitor doesn't show anything untoward, very low level usage of some modest resources. I know that many malicious programs can hide their use of resources, though. My laptop is BURNING through the battery when it's on, and also itself. It gets unbelievably hot.
Internet connection has been very poor and patchy. I have a half gig fibre connection and it is usually very reliable. I can tell when it's being hammered, because the percentage connection strength will drop significantly. It has been almost consistently lower than it should have been, and very low at times. It's only me in the house at the moment, and I'm rarely streaming things. Just on reddit and also various other curiosity quenching ventures.
To begin with my web browsers (alternate etween firefox and brave) were remembering things they shouldn't be. History and authentication info and the likes. Then, as is the case now, they're gone amnesic.They don't seem to be remembering anything.
[EDIT: Also, firefox warned me that an admins made changes to it's settings, a policy called 'DisableAppUpdate and the value was true. Looking online ppl are saying oh no worries your organisation will have don it for you! My machines are not managed by an organisaiton, as far as I'm aware. However is it the case that 'root' could be the admin/organisation in a similar scenario?
My instagram account has been locked up and won't allow any real actions to be taken. It just sayd: 'Try again later. Whe restrict certain activity to protect our community.' Which is kinda weird, since I rarely use it. I'm thinking maybe someone has tried brute forcing it and ended up locking it up.
I've done some basic checks on the machines to see who is logged on and what processes are running etc but not found anything concerning. Done some virus scans with CLamAV and such but again, nothing untoward.
I could just be being totally paranoid but I'm going to wipe evrything and reainstall clean images anwyay.
If you have any thougts on this I've love to hear them!
Amd let me know you need any logs and such to assist.
Many thanks in advance, Comparison Own3335
submitted by /u/ComparisonOwn3335 [link] [comments]
I'm gonna re-image and flash literally everything
Hi all,
So, my computers have been a lil whacky for about a month. Not just my PCs but my internet connection too. Bit of background I work in infosec, on the defensive side of things, as a 1st/2nd line SOC Analyst. I do a lil bit of engineering too.
So, it all seemed to start about a month ago. I'm chatting with someone on reddit. We're vibing getting along, but somewhere down the line he all but confesses to me that he's full on black hat. I was new to reddit, had made an 'anonymous' account (yeah righttt), but I shit myself. At this point we had exchanged lengthy conversation and images of various things. Nothing sexual if that's what you may think, reddit is as funny old place, just cool stuff. We had also moved the convo over to discord. It's dawning on me that my opsec had been absolutely pants, and that I had given this person more than enough to go on to begin to piece the puzzle of who I am together, not least of which my IP address, and exact geo location and mobile models and possibly PC models and OS's in the EXIF data for the images and stuff I've sent. It's also dawned on me that he could have sent malicious files, that I've opened naively.
Then it dawned on me that a couple hours or so into our conversation my internet connection had started playing up. Like it was being seriously overworked, busy. This had then been a consistent nuisance the whole time.
It's also dawned on me that my 'anonymous' profiles are not as anonymous as I would have liked, and that there are links between those and my legitimate accounts, here and there.
Both my laptop and my desktop, running Mint, have slowly but surely deteriorated over this time. They crash and they crash more often, and are often otherwise very sluggish and slow. Checking the system monitor doesn't show anything untoward, very low level usage of some modest resources. I know that many malicious programs can hide their use of resources, though. My laptop is BURNING through the battery when it's on, and also itself. It gets unbelievably hot.
Internet connection has been very poor and patchy. I have a half gig fibre connection and it is usually very reliable. I can tell when it's being hammered, because the percentage connection strength will drop significantly. It has been almost consistently lower than it should have been, and very low at times. It's only me in the house at the moment, and I'm rarely streaming things. Just on reddit and also various other curiosity quenching ventures.
To begin with my web browsers (alternate etween firefox and brave) were remembering things they shouldn't be. History and authentication info and the likes. Then, as is the case now, they're gone amnesic.They don't seem to be remembering anything.
[EDIT: Also, firefox warned me that an admins made changes to it's settings, a policy called 'DisableAppUpdate and the value was true. Looking online ppl are saying oh no worries your organisation will have don it for you! My machines are not managed by an organisaiton, as far as I'm aware. However is it the case that 'root' could be the admin/organisation in a similar scenario?
My instagram account has been locked up and won't allow any real actions to be taken. It just sayd: 'Try again later. Whe restrict certain activity to protect our community.' Which is kinda weird, since I rarely use it. I'm thinking maybe someone has tried brute forcing it and ended up locking it up.
I've done some basic checks on the machines to see who is logged on and what processes are running etc but not found anything concerning. Done some virus scans with CLamAV and such but again, nothing untoward.
I could just be being totally paranoid but I'm going to wipe evrything and reainstall clean images anwyay.
If you have any thougts on this I've love to hear them!
Amd let me know you need any logs and such to assist.
Many thanks in advance, Comparison Own3335
submitted by /u/ComparisonOwn3335 [link] [comments]
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking Articles Tips Tricks Videos Tutorials
Photo
hacking: security in practice
Pool on the roof - February 06, 2023
Have a no0b question? New to hacking? Looking for a script? Need help with your github project? Something wrong with your payload? Stuck on a CTF or bug bounty?
This is a weekly recurring post to make friends with other hackers, ask questions, and get any type of help you may need.
Make sure to read our wiki as it's full of resources for you.
Keep all beginner questions in this weekly stickied post.
submitted by /u/AutoModerator
[link] [comments]
Pool on the roof - February 06, 2023
Have a no0b question? New to hacking? Looking for a script? Need help with your github project? Something wrong with your payload? Stuck on a CTF or bug bounty?
This is a weekly recurring post to make friends with other hackers, ask questions, and get any type of help you may need.
Make sure to read our wiki as it's full of resources for you.
Keep all beginner questions in this weekly stickied post.
submitted by /u/AutoModerator
[link] [comments]
Hacking Articles Tips Tricks Videos Tutorials
Photo