Hacking on Medium
What are some life hacks that everyone should know?

Are you tired of feeling like you’re constantly spinning your wheels and not getting anywhere in life? Do you ever feel like there simply…

Continue reading on Medium »

Hacking on Medium
“Hacker’s Roadmap: Navigating the Path to Mastery”

https://cdn-images-1.medium.com/max/2600/1*Bp8n6B1lqT3oa8zMv0r8KA.jpeg
Before I begin, I must stress the importance of using your hacking skills ethically and responsibly. Hacking can be a powerful tool for…

Continue reading on Medium »

Hacking on Medium
“The Ethical Hacker: A Tale of Perseverance and Passion”

https://cdn-images-1.medium.com/max/2600/1*miEgoTLPUacF26RnLyZM8A.jpeg
Once upon a time, in a small town in the middle of nowhere, there lived a young boy named Tom. Tom was always fascinated by technology and…

Continue reading on Medium »

Hacking on Medium
Hire Hacker Brings the Best Ethical Hackers Online

Hire Hacker’s Hacking Service is designed to meet the needs of various clients, from small businesses to large corporations. The company’s…

Continue reading on Medium »

hacking: security in practice
Pool on the roof - March 13, 2023

Have a no0b question? New to hacking? Looking for a script? Need help with your github project? Something wrong with your payload? Stuck on a CTF or bug bounty?

This is a weekly recurring post to make friends with other hackers, ask questions, and get any type of help you may need.

Make sure to read our wiki as it's full of resources for you.

Keep all beginner questions in this weekly stickied post.

submitted by /u/AutoModerator
[link] [comments]

Black Hat Ethical Hacking
GoBruteforcer: New Golang-based Botnet Malware Scans for and Infects Web Servers

GoBruteforcer: New Golang-based Botnet Malware Scans for and Infects Web ServersPost Views: 47 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/12/Patreon.png Subscribe to Patreon to watch this episode.
Reading Time: 3 Minutes How GoBruteforcer works and what devices it targetsCybersecurity researchers have uncovered a new Golang-based botnet malware called GoBruteforcer that targets web servers running phpMyAdmin, MySQL, FTP, and Postgres services. The malware has been identified by Palo Alto Networks’ Unit 42, and it is compatible with x86, x64, and ARM architectures. GoBruteforcer uses brute force tactics to gain access to vulnerable *nix devices by exploiting weak or default passwords.

The malware scans for phpMyAdmin, MySQL, FTP, and Postgres services on each targeted IP address. Once it detects an open port accepting connections, it attempts to log in using hard-coded credentials. GoBruteforcer deploys an IRC bot on compromised phpMyAdmin systems or a PHP web shell on servers running other targeted services, enabling it to reach out to its command-and-control server for further instructions.
See Also: So you want to be a hacker? Offensive Security, Bug Bounty Courses GoBruteforcer’s ongoing development and potential for future attacksGoBruteforcer uses a multiscan module to find potential victims within a Classless Inter-Domain Routing (CIDR), giving it a broad range of targets to infiltrate networks. Rather than targeting a single IP, the malware uses CIDR block scanning to access a diverse range of hosts on various IP addresses, increasing the reach of the attack.

Unit42 warns that GoBruteforcer is likely under active development, with its operators expected to adapt their tactics and the malware’s capabilities for targeting web servers and staying ahead of security defenses. The malware has already been seen deploying various types of malware as payloads, including coinminers.
Trending: Major Cyber Attacks of 2022
Trending: Offensive Security Tool: CrackQL The need to be up-to-date with the latest security measuresThe discovery of GoBruteforcer highlights the importance of strong passwords and regular security audits to prevent malicious attacks on web servers. It also underscores the need for organizations to remain vigilant and up-to-date with the latest security measures to protect against evolving threats.
Trending: Proof-of-concept for critical Microsoft Word vulnerability published
Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?

If you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com
Source: bleepingcomputer.com Source Link https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Merch.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Images-for-the-News-posts-2-1-300x150.png AT&T Data Breach: 9 Million Customers Affected by Marketing Vendor HackMarch 10, 2023
* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Images-for-the-News-posts-1-1-300x150.png Bitwarden Autofill Feature Can Expose Passwords to Malicious AttackersMarch 9, 2023
* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Images-for-the-News-posts-300x150.png Sharp Panda Strikes Again: Advanced Tactics in Latest Espionage CampaignMarch 8, 2023
* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Images-for-[...]

the-News-posts-5-300x150.png Proof-of-concept for critical Microsoft Word vulnerability publishedMarch 7, 2023 https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/OffSec-Course.png Offensive Security & Ethical Hacking CourseBegin the learning curve of hacking now! https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Solutions.png Information Security SolutionsFind out how Pentesting Services can help you.
The post GoBruteforcer: New Golang-based Botnet Malware Scans for and Infects Web Servers first appeared on Black Hat Ethical Hacking.

How I Earned $150 for Reporting a Security Flaw

Hey everyone!Continue reading on Medium »
Read more...

Kali Linux Tutorials
Reverseip_Py : Domain Parser For IPAddress.com Reverse IP Lookup

Reverseip_py is a Domain parser for IPAddress.com Reverse IP Lookup.

Written in Python 3.



What is Reverse IP?

Reverse IP refers to the process of looking up all the domain names that are hosted on a particular IP address. This can be useful for a variety of reasons, such as identifying all the websites that are hosted on a shared hosting server or finding out which websites are hosted on the same IP address as a particular website.



Requirements

* beautifulsoup4
* requests
* urllib3

Tested on Debian with Python 3.10.8



Install Requirements
pip3 install -r requirements.txt


How to Use

Help Menu
python3 reverseip.py -h
usage: reverseip.py [-h] [-t target.com]

options:
-h, --help show this help message and exit
-t target.com, --target target.com
Target domain or IP
Reverse IP
python3 reverseip.py -t google.com
Disclaimer

Any actions and or activities related to the material contained within this tool is solely your responsibility.The misuse of the information in this tool can result in criminal charges brought against the persons in question.

Note: modifications, changes, or changes to this code can be accepted, however, every public release that uses this code must be approved by author of this tool (yuyudhn).
Click Here To Download

Exploiting Paypal Payment Gateway Results In Free Shopping

Hello everyone, I’m Aswin ,Security Researcher from Kerala,India.Continue reading on Medium »
Read more...

Mastering Google Dorks: Top Search Queries Every Hacker Should Know

As the world becomes more reliant on technology, it’s no surprise that cyber attacks are on the rise. Hackers are constantly finding new…Continue reading on Medium »
Read more...

How to Choose Your Pentest Partner

Starting this Article from the linesContinue reading on Medium »
Read more...

Hacking on Medium
OneNote — Malware Delivery

TLDR — OneNote has recently been abused significantly to deliver malware onto unsuspecting victims as it begins to gain popularity in…

Continue reading on Medium »