hacking: security in practice
For the love of G-D

Those who are getting into security please think about human error/laziness. @2am I just went into a company that's considered strategic to our national infrastructure the kiosk was locked up. Asked employee of they can reset it they didn't know how. I do, she said ok fix it Totally unsecured kiosk with wifi card Lan and yes open usb ports. In 3 minutes I could own this machine it's on their network. Few hours the site few months the company.. maybe it's a 12 billion dollar company.. zero day buffer overflows nothing compares to forgetting about the human factor

submitted by /u/Safe-Application-144
[link] [comments]

hacking: security in practice
Unleash the Power of Python for Ethical Hacking: A Must-Read eBook for Aspiring Hackers

https://external-preview.redd.it/uVW-CcJfBd8na7XDYasAkAd6_UxHu07fJVrHV13FFUo.jpg?width=640&crop=smart&auto=webp&s=0387319b699c97cfaa07dcbc64b69b5484322182 submitted by /u/glum-platimium
[link] [comments]

Tricks and Tips to Bypass reCAPTCHA

before learning how to bypass recaptcha you need to know what is recaptchaContinue reading on Medium »
Read more...

Hacking on Medium
A Comprehensive Guide to Protecting Your Applications from XXE Vulnerabilities | 2023

https://cdn-images-1.medium.com/max/600/0*_QRlF1GrzvCxW8CM.png
Understanding XML External Entity (XXE) Attacks: Working Principle, Exploitation, and Prevention Techniques | Karthikeyan Nagaraj

Continue reading on Medium »

Hacking on Medium
Tricks and Tips to Bypass reCAPTCHA

https://cdn-images-1.medium.com/max/663/1*2YZ6Y35_l-m1EqzJ4ArYSg.png
before learning how to bypass recaptcha you need to know what is recaptcha

Continue reading on Medium »

Hacking on Medium
WMIC: Risks, Threats, and Detection Techniques

WMIC (Windows Management Instrumentation Command-line) is a powerful tool used for system administration in Windows operating systems…

Continue reading on Medium »

Hacking on Medium
The Amygdala: Your gateway to a bad decision and a criminals secret weapon

https://cdn-images-1.medium.com/max/600/1*N0aM3mirzNObKDQzi8kmQg.png
Ever look back at a bad decision and think……”Why on earth did that happen?” It can be as simple as a dodgy link you clicked on (while…

Continue reading on Medium »

Hacking on Medium
how hackers use chrome to hack?, and how to avoid them

https://cdn-images-1.medium.com/max/624/0*lXZQvQcAwK_aIxFr
Hackers can use Google Chrome to hack your computer by exploiting vulnerabilities in the browser or by tricking you into installing…

Continue reading on Medium »

Help MAKE Cardano Interoperable! Cardano Bridge Public Bug Bounty is LIVE!

Help test the Cardano Bridge and earn up to 10,000 $ADA and $WAN.Continue reading on Wanchain »
Read more...

A Comprehensive Guide to Protecting Your Applications from XXE Vulnerabilities | 2023

Understanding XML External Entity (XXE) Attacks: Working Principle, Exploitation, and Prevention Techniques | Karthikeyan NagarajContinue reading on Medium »
Read more...

KitPloit - PenTest Tools!
Wa-Tunnel - Tunneling Internet Traffic Over Whatsapp

https://blogger.googleusercontent.com/img/a/AVvXsEiG9XbOWByeWV3nnRBtj_KMeHuI3OkF4PffiaOiHCNYFLsdQkiY242rNSSQIEBZidPYNUiEQ_sPv9osmHThZY2QrctARAgXLExhMv3yloXFtVz8J_m6YTfUEynf4D0FGomXggej5-mQoeFdzePIlMsYLCR1sfr2LHtSlKWPr_H7iYikl_UpM4U6gXaJhw=w640-h360 This is a Baileys based piece of code that lets you tunnel TCP data through two Whatsapp accounts.

This can be usable in different situations, for example network carriers that give unlimited whatsapp data or airplanes where you also get unlimited social network data.

It's using Baileys since it's a WS based multi-device whatsapp library and therefore could be used in android in the future, using Termux for example.

The idea is to use it with a proxy setup on the server like this: [Client (restricted access) -> Whatsapp -> Server -> Proxy -> Internet]

Apologizes in advance since Javascript it's not one of my primary coding languages :/

Use only for educational purpose. How does it work?It sends TCP network packages through WhatsApp text and file messages, depending on the amount of characters it splits them into different text messages or files.

To not get timed out by WhatsApp by default it's limited at 20k characters per message, at the moment it's hardcoded in wasocket.js. I have done multiple tests and anything below that may get you banned for sending too many messages and any above 80k may timeout.

If a network package is over the limit (20k chars by default) it will be sent as a file if enabled. Also if multiple network packages are cached it will use the same cryteria.

File messages are sent as binary files, TCP responses are concatenated with a delimiter and compressed using brotli to reduce data usage.

It caches TCP socket responses to group them and send the maximum amount of data in a message therefore reducing the amount of messages, improving the speed and reducing the probability of getting banned. Performance improvementsBefore: (without files and no response caching) curl -x localhost:12345 https://www.youtube.com
- 50-80 messages
- 30-40 seconds After: (with files and response caching) curl -x localhost:12345 https://www.youtube.com
- 6-8 messages
- 7-15 seconds In case you are not allowed to send files use the --disable-filesflag when starting the server and client to disable this functionality. Why?I got the idea While travelling through South America network data on carriers is usually restricted to not many GBs but WhatsApp is usually unlimited, I tried to create this library since I didn't find any usable at the date. SetupYou must have access to two Whatsapp accounts, one for the server and one for the client. You can forward a local port or use an external proxy. Server sideClone the repository on your server and install node dependencies.

1. cd path/to/wa-tunnel2. npm installThen you can start the server with the following command where port is the proxy port and host is the proxy host you want to forward. And number is the client WhatsApp number with the country code alltogether and without +. npm run server host port number You can use a local proxy server like follows: npm run server localhost 3128 12345678901 Or you can use a normal proxy server like follows: npm run server 192.168.0.1 3128 12345678901 Client SideClone the repository on your server and install node dependencies.

1. cd path/to/wa-tunnel2. npm installThen you can start the server with the following command where port is the local port where you will connect and number is the server WhatsApp number with the country code alltogether and without +. npm run client port number For example npm run client 8080 1234567890 UsageThe [...]