Hacking Articles Tips Tricks Videos Tutorials
468 subscribers
66.3K photos
15 videos
157 files
133K links
Exploit
Pentesting
Hacking
Red Team
Blue Team
Kali Linux
Bug Bounty
Black Hat
Cyber security etc

@Hacking_Video
@Hacking_attack
Download Telegram
hacking: security in practice
OSCP priv esc suggestions?

So I've currently failed the OSCP twice. Both times are due to priv esc issues sucking up most of the time.

In my last two attempts I've had initial access to boxes within 30 mins. I just immediately get stuck of priv esc because of the sheer amount of bloat.

I rely a little too much on automated tools honestly. Got any advice to get better at this skill?

submitted by /u/thehunter699
[link] [comments]
hacking: security in practice
MFP Breach dumps?

Hey all

Don't suppose anyone has seen where to find the MyFitnessPal breach dump?

Have had a wander around some of the usual places.. Telegram etc. No luck.

Thanks :)

submitted by /u/MightBeMouse
[link] [comments]
hacking: security in practice
Asking for advice.

For roughly 4 months or so, there has been a person in my college making duplicate instagram accounts of professors and students that have prominent presences there to ruin their reputations, reputation is important in my part of the world. This person is now impersonating a third person, a student which is also my friend. Usually the police would take care of this but it has been several months with no development and i am setting out to collect evidence, find out this persons identity to report it to the authorities and this only.

i am not asking for help, i am just asking for advice on how to approach this situation as this is not within my domain of knowledge or experience. If anyone can tell me about any tools i could use, methods i could approach, courses of action or absolutely anything i would greatly appreciate it.



Edit - they are now sending phishing links to extract money somehow



submitted by /u/hawkyonreddit
[link] [comments]
APCLdr - Payload Loader With Evasion Features

Payload Loader With Evasion Features. Features: no crt functions imported indirect syscalls using HellHall api hashing using CRC32 hashing algorithm payload encryption using rc4 - payload is saved in .rsrc Payload injection using APC calls - alertable thread Payload execution using APC - alertable thread Execution delation using MsgWaitForMultipleObjects - edit this the total size is 8kb + the payload size compatible with LLVM (clang-cl) Option Usage: Use Builder to update the PayloadFile.pf file, that'll be the encrypted payload to be saved in the .rsrc section of the loader Compile as x64 Release Debugging: Change Linker>SubSystem from /SUBSYSTEM:WINDOWS to /SUBSYSTEM:CONSOLE Set the loader in debug mode (uncomment this) build as release as well Thanks For: https://www.x86matthew.com/view_post?id=writeprocessmemory_apc https://github.com/vxunderground/VX-API Tested with cobalt strike && Havoc on windows 10 Download APCLdr
Read more...