Hacking on Medium
Hacking For Ethical Purposes

https://cdn-images-1.medium.com/max/1000/1*ADQamRT9OGkUhA9QKhvHGg.jpeg
Ethical hacking is a crucial practice that involves identifying potential security vulnerabilities in an organization’s infrastructure…

Continue reading on Medium »

Hacking on Medium
The Dark Web and TOR Network: A Closer Look at How It Works.

https://cdn-images-1.medium.com/max/728/1*FnVnYB-MlBv2Jl23Zy970A.jpeg
The Dark Web has been a topic of interest for many years now, as it is home to some of the most controversial and illegal activities on…

Continue reading on Medium »

hacking: security in practice
Does EvilGinx (and tools similar to it) still works?

I'm running Kali 2023 on VMWare.

Thought to try out EvilGinx for the first time to see how it works, and followed instructions on this guide: https://blog.yarsalabs.com/how-easy-is-it-to-set-up-a-facebook-phishing-site/, multiple times now.

I encountered 3 issues:

1. When i open the link (phishlet: facebook) that EvilGinx provides me, the fake login page is nothing like it's modern design -- looks like a page that put together with basic html in a hurry.
2. When i try to login it displays an error message: "Your request couldn't be processed". And it won't redirect to the legit site afterwards.
3. I get my email address that I put in into the login page on the console, but I don't get the random/real password that i put in.

So, does EvilGinx still works properly in 2023?

Thanks.

submitted by /u/KasunL
[link] [comments]

Hacking on Medium
La Importancia del Directorio Activo (AD) en Cyberseguridad.

El Directorio Activo es en si una base de datos y conjunto de servicios que conectan a los usuarios con los recursos de red que necesitan…

Continue reading on Medium »

Hacking on Medium
Talking to a Chip, one Bit at a Time

https://cdn-images-1.medium.com/max/1032/1*nga1Hi0KH5FOayvFjcseIQ.png
A step by step guide (with code)

Continue reading on Medium »

Hacking on Medium
“Ghost Malware”: Infecting a machine with an empty archive file.

https://cdn-images-1.medium.com/max/900/0*HtnucSbFNTpvrhDb
Archive files, such as zip, rar etc. are commonly used to transport malware because they can hide malicious code or files from security…

Continue reading on Medium »

Hacking on Medium
HACK : How to Prevent Audio Leaks?

https://cdn-images-1.medium.com/max/875/0*Hsu0yDo7ZiEsCJBl.png
Covert Eavesdropping or Bugging is very common nowadays, so audio leaks news should not surprise you. It becomes easier to understand once…

Continue reading on Medium »

Pro Tips for Bug Bounty Success: Top 5 Tools to Reach HOF Status

Introduction: Bug bounty hunting has become a popular method for identifying and reporting security vulnerabilities in websites, web…Continue reading on Medium »
Read more...

https://external-preview.redd.it/SNpHjZGmU8Xo6ZkbS95aj61T7IZb7CD9BlP9VF-e-lI.jpg?width=640&crop=smart&auto=webp&s=968fed86197ba1ce2ecef66d5c847c1eb76588ad you can use this tool to to bruteforce instagram accounts using password list or random passwords

the tool is open source and made in python using more than 200 lines of code

i used pyside2(qt) for gui and it came not bad as i expected

i also added a vpn/proxy so if insta blocked your activity you can use it to bypass it

​

a screenshot of tool

https://github.com/hanicraft/InstaBrute

comment what you think about tool

note : im still learning and this tool might not be good as other alternatives so please dont attack me in comments

submitted by /u/mhjhacker1
[link] [comments]

hacking: security in practice
WhatsApp investment scam

2 weeks ago I have been approached on WhatsApp by someone that called me by "mistake" claiming it was looking for a friend. I thought nothing of it and moved on. Shortly after, that person starts doing small chat with me. The number was from Malasya which raises red flags, but I am a curious person so I went along. As a SWE, I like to be up to date with the latest scams but most important of all, I hate these people so much and how they take advantage of people with less knowledge.

So fast forward to a week later, we been talking every day. We exchanged messages, even pictures, audio, and there was never any mention to anything suspicious. I provided wrong information about everything; I basically created a different persona for myself: new name, divorced, worked in a store, etc.

Basically she would share with me pictures of her and her day. She looked very pretty (red flag) and super kind. She lives in Malasya, she bought a house last year, she bought a car. Her English is not perfect but really good. She would tell me a whole bunch of stuff that would make sense. She just looked like a wealthy and beautiful person that was flirting with me after a while.

I started to feel bad about the situation bcs I was lying on everything about me and yet she seemed genuine so I started to believe on her despite all the red flags.

And just when she was about to break me , after nearly a week and a half, the scam starts. She mentions she has an uncle who is the director of some Malasya financial group. Her uncle and her they trade options on Bitcoin according to her.

So the scheme is basically to lure me in to invest on this platform https://fmytex.com. And this is the tricky part: the website looks legit. It looks well made, there's customer support, there's even an app on Apple Store!! I started to search more about the website and there's not much information on the website: not many entries on Google results and no results for YouTube at all. I did find this https://crypto-scammed.com/is-fmytex-a-scam. It seems other people fell for this scam and the author has even lost $2000 in it.

Back to the story, I went along with it. I created a new email, a new account on fmytex, I faked wired transfers and deposited fake funds on it. I believe the scheme is that once you deposit funds into it, you're not able to withdraw them anymore. So I believe by depositing credits, they would then be under her control. The reason I say this is because she asks me for screenshots on my account to provide proof that I transferred. I give her some fake screenshots and she is very confused bcs she doesn't see those credits on her account, I'm supposing. I pretended to deposit $1000.

I also asked screenshots of her account for comparison and I saw she has a portfolio worth over $500k. She is running a very successful scam that may have stolen from a lot of people. This cannot continue and something must be done.

Please help me figure out a solution. I could report this to fraud but I'm not sure if they would do something since I wasn't scammed per se; I didn't fall for it. Tracking her ip is also not possible bcs communication is done via WhatsApp.

I also don't want to cross any legality boundary but is there any way to put a stop to this ? Could I share a link or file (pdf) that would disrupt this business scam?

I also have to say that I'm running out of time because I can't keep my disguise much longer. She's growing suspicious bcs she asks me constant screenshots that at some point I won't be able to provide .

submitted by /u/renatodamast [link] [comments]

hacking: security in practice
Roppers Academy

Basically, I am still learning. I spent a lot of time on THM and HTB and heard of Roppers academy. It seems like a great place to learn but I am unsure if it is worth the time. They claim that courses take several hundred hours so I just wanted to know what you guys think and if it is worth the time investment or generally what experience you made with that site.

Thanks in advance

submitted by /u/FBIAgent469
[link] [comments]