hacking: security in practice
Linux distro recommendations

Hello guys sorry if this question is often asked or if im in the wrong sub. So, i started learning pentesting a few weeks ago. Im currently using a Thinkpad x395 on W10 and i run Vms on it. I want to change my os to linux but i dont really know which distro. I want something clean with a desktop environment (Mac os style), capable of running Multiple Vms. I was looking into pop so is it a good thing ? should i stay on w10 ? Thanks guys

submitted by /u/Sayzito
[link] [comments]

hacking: security in practice
Does anyone know how to decrypt a PPVM file?

I recently saw a youtube tutorial in which he decrypts a password protected video file. When asked about his ppvm decryptor software, he said it's for his personal use only and he has no plans making the software public. This is the video. If any one knows how to crack a ppvm file please let us know.

submitted by /u/Strong_Muffin1433
[link] [comments]

hacking: security in practice
Here's a fast tool for checking domains to see if they are behind Cloudflare, based on five criteria: SSL issuer, IP and 3 headers.

https://external-preview.redd.it/yrmI-E0-vU5f3UwfQQRSqgYnNyuHu3YijIuMNqAwtis.jpg?width=640&crop=smart&auto=webp&s=fedfe6e4e15411dff9eaefe0500caf78a761b47f submitted by /u/agaliullin
[link] [comments]

hacking: security in practice
How to Create a Virtual Hacking Lab

https://external-preview.redd.it/oNd2ms62J_jfPOBzYZueSNQ-QbAQHGwVpWpT2gG2qBU.jpg?width=640&crop=smart&auto=webp&s=712fb7ae9f62d8c6256c2c4c8a324f5040b42510 submitted by /u/nick313
[link] [comments]

hacking: security in practice
Cracking A Password Prompt In EXE From ~2001

I was curious if anyone could help guide me on potentially uncovering the admin tools password of a program called Serials 2000. Versions 7.0b or even better, 7.1 (though they could be same pass for all i know). I have the software. I am guessing many of you know what it was for. I am interested in this purely for nostalgia sake. I know the admin password for previous versions and have all the tools that were made to not need access to that menu but I just want to know it. This ware was a huge part of my teen computing years lol.

I have minimal programming knowledge but I have messed around with decompiling it with IDA and trying stuff with memory and debugging with Olly. But I honestly know very little about what I am doing. I have seen the dialog using Resource Hacker but I want to experience using it. I have reached out to some of the crew members from that software's golden era but either have not received replies or the person did not know or remember it at this point.

I also believe the code is obfuscated or encrypted to some degree but am not certain of this.

If reverse engineering is not the solution or too difficult or impossible due to possible obfuscation or encryption is there a brute force tool that would work well with a password prompt that would need a actions taken between each password try? Like it would need to OK the error box after failed attempt then do File -> Administration Tools and then enter another pass and hit enter again. So I guess something like a macro that can pull words from a dictionary file like rockyou or something? I don't know. Any help or advice is greatly appreciated. Thank you for taking the time to read.

Edit: exe is 32bit windows executable. unknown language/compiler...

submitted by /u/GroundbreakingEar450
[link] [comments]

hacking: security in practice
Revisiting Heaven's Gate with Lumma Stealer

https://external-preview.redd.it/qv0ttx2ckLobZq7AwLeX64YhxT0JHeQTiqfpngWVBIw.jpg?width=320&crop=smart&auto=webp&s=da38a0f357ed33a9b9c5cff9f6a10e968927ac9d submitted by /u/CyberMasterV
[link] [comments]

hacking: security in practice
Bought 1984.hosting domain and hosting, but when I click on Administer Wordpress it takes me to page that says 404 Not found. What should I do?

So I bought hosting and domain from 1984.hosting but when on their dashboard I am clicking on Wordpress option it’s taking me to page that says 404 not found, and doesn’t open the Wordpress.

Please help

submitted by /u/wolfme1997
[link] [comments]

Dark Reading: Attacks/Breaches
Stop Blaming the End User for Security Risk

Don't count on securing end users for system security. Instead, focus on better securing the systems — make them closed by default and build with a security-first approach.

Privilege Escalation via Broken Authentication: A Story of $$$

Hi Fellow Hunters, Hope you are doing well and taking care of your health, this side V3D. I want to write a quick write-up with my friends…Continue reading on Medium »
Read more...

Hacking on Medium
Unveiling Windows Forensics: A Comprehensive Five-Part Article Series for Cybersecurity and DFIR…

https://cdn-images-1.medium.com/max/2600/0*dABhP81pDfl5q7s0
The Importance of Windows Forensic Analysis for Cybersecurity and DFIR Professionals

Continue reading on Medium »

Hacking on Medium
Using the ATtiny85 as makeshift Rubber Ducky

Have you ever heard of a Rubber Ducky? No, it’s not a toy.

Continue reading on Medium »