< Back to JetLib.com

hacking

« Expand/Collapse

492 items tagged "hacking"

Skip to page: 1 2

September 22, 2019
22:59
exe2powershell – Convert EXE to BAT Files
» ‎ Darknet

exe2powershell is used to convert EXE to BAT files, the previously well known tool for this was exe2bat, this is a version for modern Windows.

This will convert any binary file (*.exe) to a BAT file, the resulting BAT file contains only echo commands followed by a PowerShell command to re-create the original binary file.

This kind of tool can be useful during a pen-test when you want to trigger a shell without any upload feature.

Read the rest of exe2powershell – Convert EXE to BAT Files now! Only available at Darknet.

Tags: windows hacking
August 27, 2019
23:11
Stardox – Github Stargazers Information Gathering Tool
» ‎ Darknet

Stardox is a Python-based GitHub stargazers information gathering tool, it scrapes Github for information and displays them in a list tree view. It can be used for collecting information about your or someone else’s repository stargazers details.

GitHub allows visitors to star a repo to bookmark it for later perusal. Stars represent a casual interest in a repo, and when enough of them accumulate, it’s natural to wonder what’s driving interest.

Read the rest of Stardox – Github Stargazers Information Gathering Tool now! Only available at Darknet.

Tags: hacking Tools
August 23, 2019
8:08
ZigDiggity – ZigBee Hacking Toolkit
» ‎ Darknet

ZigDiggity a ZigBee Hacking Toolkit is a Python-based IoT (Internet of Things) penetration testing framework targeting the ZigBee smart home protocol.

ZigBee continues to grow in popularity as a method for providing simple wireless communication between devices (i.e. low power/traffic, short distance), & can be found in a variety of consumer products that range from smart home automation to healthcare. Security concerns introduced by these systems are just as diverse and plentiful, underscoring a need for quality assessment tools.

Read the rest of ZigDiggity – ZigBee Hacking Toolkit now! Only available at Darknet.

Tags: Hardware hacking
July 26, 2019
16:47
RandIP – Network Mapper To Find Servers
» ‎ Darknet
RandIP is a nim-based network mapper application that generates random IP addresses and uses sockets to test whether the connection is valid or not with additional tests for Telnet and SSH.

RandIP – Network Mapper Features
- HTTP and HTTPS enumeration
- Python enumeration exploits
- SSH enumeration exploits
- Logger and error-code handler
- SSH and Telnet Timeouts to prevent blocking
- SSH Enumerations work in tandem
You can download RandIP here:

randip-master.zip

Or read more here.

Read the rest of RandIP – Network Mapper To Find Servers now! Only available at Darknet.

Tags: networking hacking
June 30, 2019
23:35
Slurp – Amazon AWS S3 Bucket Enumerator
» ‎ Darknet

Slurp is a blackbox/whitebox S3 bucket enumerator written in Go that can use a permutations list to scan from an external perspective or an AWS API to scan internally.

There are two modes that this tool operates at; blackbox and whitebox mode. Whitebox mode (or internal) is significantly faster than blackbox (external) mode.

Blackbox (external)

In this mode, you are using the permutations list to conduct scans.

Read the rest of Slurp – Amazon AWS S3 Bucket Enumerator now! Only available at Darknet.

Tags: hacking Tools
June 27, 2019
8:47
US Government Cyber Security Still Inadequate
» ‎ Darknet

Surprise, surprise, surprise – an internal audit of the US Government cyber security situation has uncovered widespread weaknesses, legacy systems and poor adoption of cyber controls and tooling.

US Government security has often been called into question but we’d hope in 2019 it would have gotten better and at least everyone would have adopted the anti-virus solution introduced in 2013..

A committee report (PDF) examining a decade of internal audits this week concluded that outdated systems, unpatched software, and weak data protection are so widespread that it’s clear American bureaucrats fail to meet even basic security requirements.

Read the rest of US Government Cyber Security Still Inadequate now! Only available at Darknet.

Tags: hacking news
June 24, 2019
7:52
BloodHound – Hacking Active Directory Trust Relationships
» ‎ Darknet

BloodHound is for hacking active directory trust relationships and it uses graph theory to reveal the hidden and often unintended relationships within an Active Directory environment.

Attackers can use BloodHound to easily identify highly complex attack paths that would otherwise be impossible to quickly identify. Defenders can use it to identify and eliminate those same attack paths. Both blue and red teams can use BloodHound to easily gain a deeper understanding of privilege relationships in an Active Directory environment.

Read the rest of BloodHound – Hacking Active Directory Trust Relationships now! Only available at Darknet.

Tags: hacking Tools
April 30, 2019
1:06
SecLists – Usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells
» ‎ Darknet
SecLists is the security tester’s companion. It’s a collection of multiple types of lists used during security assessments, collected in one place.

List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

The goal is to enable a security tester to pull this repository onto a new testing box and have access to every type of list that may be needed.

Contents of SecLists

Each section has tonnes of content including the below:
- Discovery lists (DNS, SNMP, Web content)
- Fuzzing Payloads (Databases, LFI, SQLi, XSS)
- Password lists (Common credentials, cracked hashes, honeypot captures, leaked lists)
- Data Pattern lists
- Payload files (Zip bombs, flash, images)
- Username lists (Honeypot captures)
- Web shells
Install SecLists

Zip

wget -c https://github.com/danielmiessler/SecLists/archive/master.zip -O SecList.zip \
&& unzip SecList.zip \
&& rm -f SecList.zip

Git (Small)

git clone --depth 1 https://github.com/danielmiessler/SecLists.git

Git (Complete)

git clone git@github.com:danielmiessler/SecLists.git

You can access all the lists here:

https://github.com/danielmiessler/SecLists

Read the rest of SecLists – Usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells now! Only available at Darknet.

Tags: hacking Tools
February 24, 2019
19:50
GoBuster – Directory/File & DNS Busting Tool in Go
» ‎ Darknet
GoBuster is a Go-based tool used to brute-force URIs (directories and files) in web sites and DNS subdomains (with wildcard support) – essentially a directory/file & DNS busting tool.

The author built YET ANOTHER directory and DNS brute forcing tool because he wanted..
- … something that didn’t have a fat Java GUI (console FTW).
- … to build something that just worked on the command line.
- … something that did not do recursive brute force.
Read the rest of GoBuster – Directory/File & DNS Busting Tool in Go now! Only available at Darknet.

Tags: hacking Tools
February 03, 2019
21:52
BDFProxy – Patch Binaries via MiTM – BackdoorFactory + mitmproxy
» ‎ Darknet

BDFProxy allows you to patch binaries via MiTM with The Backdoor Factory combined with mitmproxy enabling on the fly patching of binary downloads (software updates for example) from vendors that don’t validate data integrity.

The Backdoor Factory allows you to patch binaries with shell-code so combining that with mitmproxy, which is a Python proxy-server that can catch HTTP, change traffic on the fly, replay traffic, decode and render primitive data types – gives you BDFProxy.

Read the rest of BDFProxy – Patch Binaries via MiTM – BackdoorFactory + mitmproxy now! Only available at Darknet.

Tags: hacking Tools
January 19, 2019
23:26
Domained – Multi Tool Subdomain Enumeration
» ‎ Darknet
Domained is a multi tool subdomain enumeration tool that uses several subdomain enumeration tools and wordlists to create a unique list of subdomains that are passed to EyeWitness for reporting.

This produces categorized screenshots, server response headers and signature based default credential checking. It is written in Python heavily leveraging Recon-ng.

Domains Subdomain Enumeration Tools Leveraged

Subdomain Enumeraton Tools:
- Sublist3r
- enumall
- Knock
- Subbrute
- massdns
- Recon-ng
- Amass
- SubFinder
Reporting + Wordlists:
- EyeWitness
- SecList (DNS Recon List)
- LevelUp All.txt Subdomain List
Domained Subdomain Enumeration Tool Usage

--install/--upgrade Both do the same function – install all prerequisite tools
--vpn Check if you are on VPN (update with your provider)
--quick Use ONLY Amass and SubFinder
--bruteall Bruteforce with JHaddix All.txt List instead of SecList
--fresh Delete old data from output folder
--notify Send Pushover or Gmail Notifications
--active EyeWitness Active Scan
--noeyewitness No Eyewitness
-d The domain you want to preform recon on
-b Bruteforce with subbrute/massdns and SecList wordlist
-s n Only HTTPs domains
-p Add port 8080 for HTTP and 8443 for HTTPS

Subdomain Enumeration Examples

First Steps are to install required Python modules and tools:

sudo pip install -r ./ext/requirements.txt
sudo python domained.py --install

Example 1 – Uses subdomain example.com (Sublist3r (+subbrute), enumall, Knock, Amass, and SubFinder)

python domained.py -d example.com

Example 2: – Uses subdomain example.com with seclist subdomain list bruteforcing (massdns, subbrute, Sublist3r, Amass, enumall, and SubFinder), adds ports 8443/8080 and checks if on VPN

python domained.py -d example.com -b -p --vpn

Example 3: – Uses subdomain example.com with large-all.txt bruteforcing (massdns, subbrute, Sublist3r, Amass, enumall and SubFinder)

python domained.py -d example.com -b --bruteall

Example 4: – Uses subdomain example.com and only Amass and SubFinder

python domained.py -d example.com --quick

Example 5: – Uses subdomain example.com, only Amass and SubFinder and notification

python domained.py -d example.com --quick --notify

Example 6: – Uses subdomain example.com with no EyeWitness

python domained.py -d example.com --noeyewitness

Note: --bruteall must be used with the -b flag

You can download Domained here:

domained-master.zip

Or read more here.

Read the rest of Domained – Multi Tool Subdomain Enumeration now! Only available at Darknet.

Tags: hacking Tools
December 16, 2018
12:17
Gerix WiFi Cracker – Wireless 802.11 Hacking Tool With GUI
» ‎ Darknet

Gerix WiFi cracker is an easy to use Wireless 802.11 Hacking Tool with a GUI, it was originally made to run on BackTrack and this version has been updated for Kali (2018.1).

To get it up and running make sure you do:

apt-get install qt4-dev-tools

Running Gerix Wireless 802.11 Hacking Tool

$ python gerix.py

You can download Gerix here:

gerix-wifi-cracker-master.zip

Or read more here.

Read the rest of Gerix WiFi Cracker – Wireless 802.11 Hacking Tool With GUI now! Only available at Darknet.

Tags: Wireless hacking
November 23, 2018
5:47
WepAttack – WLAN 802.11 WEP Key Hacking Tool
» ‎ Darknet

WepAttack is a WLAN open source Linux WEP key hacking tool for breaking 802.11 WEP keys using a wordlist based dictionary attack.

This tool is based on an active dictionary attack that tests millions of words to find the right key. Only one packet is required to start an attack.

What is a WEP Key?

Wired Equivalent Privacy (WEP) is a security algorithm for IEEE 802.11 wireless networks. Introduced as part of the original 802.11 standard ratified in 1997, its intention was to provide data confidentiality comparable to that of a traditional wired network.[1] WEP, recognizable by its key of 10 or 26 hexadecimal digits (40 or 104 bits), was at one time widely in use and was often the first security choice presented to users by router configuration tools.

Read the rest of WepAttack – WLAN 802.11 WEP Key Hacking Tool now! Only available at Darknet.

Tags: Wireless hacking
October 29, 2018
8:38
CTFR – Abuse Certificate Transparency Logs For HTTPS Subdomains
» ‎ Darknet

CTFR is a Python-based tool to Abuse Certificate Transparency Logs to get subdomains from a HTTPS website in a few seconds.

You missed AXFR technique didn’t you? (Open DNS zone transfers), so how does it work? CTFR does not use dictionary attack or brute-force attacks, it just helps you to abuse Certificate Transparency Logs.

What is Certificate Transparency?

Google’s Certificate Transparency project fixes several structural flaws in the SSL certificate system, which is the main cryptographic system that underlies all HTTPS connections.

Read the rest of CTFR – Abuse Certificate Transparency Logs For HTTPS Subdomains now! Only available at Darknet.

Tags: hacking Tools
October 15, 2018
7:17
CHIPSEC – Platform Security Assessment Framework For Firmware Hacking
» ‎ Darknet

CHIPSEC is a platform security assessment framework for PCs including hardware, system firmware (BIOS/UEFI), and platform components for firmware hacking.

It includes a security test suite, tools for accessing various low-level interfaces, and forensic capabilities. It can be run on Windows, Linux, Mac OS X and UEFI shell.

You can use CHIPSEC to find vulnerabilities in firmware, hypervisors and hardware configuration, explore low-level system assets and even detect firmware implants.

Read the rest of CHIPSEC – Platform Security Assessment Framework For Firmware Hacking now! Only available at Darknet.

Tags: Hardware hacking
October 08, 2018
8:17
HTTrack – Website Downloader Copier & Site Ripper Download
» ‎ Darknet

HTTrack is a free and easy-to-use offline browser utility which acts as a website downloader and a site ripper for copying websites and downloading them for offline viewing.

HTTrack Website Downloader & Site Ripper

HTTrack allows you to download a World Wide Web site from the Internet to a local directory, building recursively all directories, getting all the HTML, images, and other files from the server to your computer.

HTTrack arranges the original site’s relative link-structure, which allows you to simply open a page of the “mirrored” website in your browser, and you can browse the site from link to link as if you were viewing it online.

Read the rest of HTTrack – Website Downloader Copier & Site Ripper Download now! Only available at Darknet.

Tags: hacking news
October 04, 2018
3:12
sshLooter – Script To Steal SSH Passwords
» ‎ Darknet

sshLooter is a Python script using a PAM module to steal SSH passwords by logging the password and notifying the admin of the script via Telegram when a user logs in rather than via strace which is not so reliable.

It also comes with an installation script install.sh to install all dependencies on a target host machine.

ssHLooter was inspired to steal SSH passwords via another script using Python to implement a PAM module to log failed attempts, the author just had to change the location where passwords were logged.

Read the rest of sshLooter – Script To Steal SSH Passwords now! Only available at Darknet.

Tags: hacking Tools
August 29, 2018
23:09
Intercepter-NG – Android App For Hacking
» ‎ Darknet

Intercepter-NG is a multi functional network toolkit including an Android app for hacking, the main purpose is to recover interesting data from the network stream and perform different kinds of MiTM attacks.

Specifically referring to Intercepter-NG Console Edition which works on a range of systems including NT, Linux, BSD, MacOSX, IOS and Android.

The Windows version is the one with the most powerful feature-set, but the Android app is fairly handy too.

Read the rest of Intercepter-NG – Android App For Hacking now! Only available at Darknet.

Tags: hacking Tools
August 20, 2018
0:49
dcipher – Online Hash Cracking Using Rainbow & Lookup Tables
» ‎ Darknet

dcipher is a JavaScript-based online hash cracking tool to decipher hashes using online rainbow & lookup table attack services.

The capacity to programmatically crack passwords is also a function of the number of possible passwords per second which can be checked. If a hash of the target password is available to the attacker, this number can be in the billions or trillions per second, since an offline attack is possible.

In this case dcipher uses online hash checking services, which have extremely large Rainbow Table sets of pre-computed hashes, to rapidly find hash collisions.

Read the rest of dcipher – Online Hash Cracking Using Rainbow & Lookup Tables now! Only available at Darknet.

Tags: hacking Tools
August 06, 2018
2:30
Cangibrina – Admin Dashboard Finder Tool
» ‎ Darknet
Cangibrina is a Python-based multi platform admin dashboard finder tool which aims to obtain the location of website dashboards by using brute-force, wordlists, Google, Nmap and robots.txt.

It is multi-threaded, supports modifying your user agent, using a TOR proxy, custom dorks, Nmap integration and can use both DuckDuckGo and Google.

Cangibrina Admin Dashboard Finder Requirements
- Python 2.7
- mechanize
- PySocks
- beautifulsoup4
- html5lib
- Nmap
- TOR
Cangibrina Usage to Find Admin Dashboards

usage: cangibrina.py [-h] -u U [-w W] [-t T] [-v] [--ext EXT] [--user-agent]
[--tor] [--search] [--dork DORK] [--nmap [NMAP]]

Fast and powerful admin finder

optional arguments:
-h, --help show this help message and exit
-u U target site
-w W set wordlist (default: wl_medium)
-t T set threads number (default: 5)
-v enable verbose
--ext EXT filter path by target extension
--user-agent modify user-agent
--sub-domain search for sub domains instead of directories
--tor set TOR proxy
--search use google and duckduckgo to search
--dork DORK set custom dork
--nmap [NMAP] use nmap to scan ports and services

There are other specific tools in this area like WPScan for WordPress and DruPwn for Drupal – and in those cases the dashboard URLs are already known.

Read the rest of Cangibrina – Admin Dashboard Finder Tool now! Only available at Darknet.

Tags: hacking Tools
July 30, 2018
9:08
Enumall – Subdomain Discovery Using Recon-ng & AltDNS
» ‎ Darknet

Enumall is a Python-based tool that helps you do subdomain discovery using only one command by combining the abilities of Recon-ng and AltDNS.

This gives you the ability to run multiple domains within the same session. The tool only has one module that needs an API key (/api/google_site) find instructions for that on the recon-ng wiki.

Setting up Enumall for Subdomain Discovery

Install recon-ng from Source, clone the Recon-ng repository:

git clone https://LaNMaSteR53@bitbucket.org/LaNMaSteR53/recon-ng.git

Change into the Recon-ng directory:

cd recon-ng

Install dependencies:

pip install -r REQUIREMENTS

Link the installation directory to /usr/share/recon-ng

ln -s /$recon-ng_path /usr/share/recon-ng

Optionally (highly recommended) download:

– AltDNS
– A good subdomain bruteforce list (example here)

Create the config.py file and specify the path to Recon-ng and AltDNS as it showed in config_sample.py.

Read the rest of Enumall – Subdomain Discovery Using Recon-ng & AltDNS now! Only available at Darknet.

Tags: networking hacking
July 21, 2018
2:25
RidRelay – SMB Relay Attack For Username Enumeration
» ‎ Darknet
RidRelay is a Python-based tool to enumerate usernames on a domain where you have no credentials by using a SMB Relay Attack with low privileges.

How RidRelay SMB Relay Attack Works

RidRelay combines the SMB Relay attack, common lsarpc based queries and RID cycling to get a list of domain usernames. It takes these steps:
1. Spins up an SMB server and waits for an incoming SMB connection
2. The incoming credentials are relayed to a specified target, creating a connection with the context of the relayed user
3. Queries are made down the SMB connection to the lsarpc pipe to get the list of domain usernames.
Read the rest of RidRelay – SMB Relay Attack For Username Enumeration now! Only available at Darknet.

Tags: hacking Tools
July 07, 2018
12:11
NetBScanner – NetBIOS Network Scanner
» ‎ Darknet
NetBScanner is a NetBIOS network scanner tool that scans all computers in the IP addresses range you choose, using the NetBIOS protocol.

For every computer located by this NetBIOS scanner, the following information is displayed:
- IP Address
- Computer Name
- Workgroup or Domain
- MAC Address
- Network adapter manufacturer (from MAC address).
NetBScanner also shows whether a computer is a Master Browser.

Read the rest of NetBScanner – NetBIOS Network Scanner now! Only available at Darknet.

Tags: hacking Tools
June 24, 2018
0:30
Powershell-RAT – Gmail Exfiltration RAT
» ‎ Darknet

Powershell-RAT is a Python-based Gmail exfiltration RAT that can be used a Windows backdoor to send screenshots or other data as an e-mail attachment.

This RAT will help you during red team engagements to backdoor any Windows machines. It tracks the user activity using screen capture and sends the information to an attacker as an e-mail attachment.

It claims to not need Administrator access and is not currently detected by Anti-virus software.

Read the rest of Powershell-RAT – Gmail Exfiltration RAT now! Only available at Darknet.

Tags: hacking Tools
June 18, 2018
8:34
airgeddon – Wireless Security Auditing Script
» ‎ Darknet
Airgeddon is a Bash powered multi-use Wireless Security Auditing Script for Linux systems with an extremely extensive feature list.

Airgeddon Wireless Security Auditing Features
- Interface mode switcher (Monitor-Managed) keeping selection even on interface name changing
- DoS over wireless networks using different methods. “DoS Pursuit mode” available to avoid AP channel hopping (available also on DoS performed on Evil Twin attacks)
- Full support for 2.4Ghz and 5Ghz band
- Assisted Handshake file capturing
- Cleaning and optimizing Handshake captured files
- Offline password decrypting on WPA/WPA2 captured files (dictionary, bruteforce and rule based) based on aircrack, crunch and hashcat tools.
Read the rest of airgeddon – Wireless Security Auditing Script now! Only available at Darknet.

Tags: hacking Tools
May 18, 2018
15:03
CloudFrunt – Identify Misconfigured CloudFront Domains
» ‎ Darknet

CloudFrunt is a Python-based tool for identifying misconfigured CloudFront domains, it uses DNS and looks for CNAMEs which may be allowed to be associated with CloudFront distributions. This effectively allows for domain hijacking.

How CloudFrunt Works For Misconfigured CloudFront

CloudFront is a Content Delivery Network (CDN) provided by Amazon Web Services (AWS). CloudFront users create “distributions” that serve content from specific sources (an S3 bucket, for example).

Each CloudFront distribution has a unique endpoint for users to point their DNS records to (ex.

Read the rest of CloudFrunt – Identify Misconfigured CloudFront Domains now! Only available at Darknet.

Tags: hacking Tools
May 10, 2018
3:25
Airbash – Fully Automated WPA PSK Handshake Capture Script
» ‎ Darknet

Airbash is a POSIX-compliant, fully automated WPA PSK handshake capture script aimed at penetration testing. It is compatible with Bash and Android Shell (tested on Kali Linux and Cyanogenmod 10.2) and uses aircrack-ng to scan for clients that are currently connected to access points (AP).

Those clients are then deauthenticated in order to capture the handshake when attempting to reconnect to the AP. Verification of a captured handshake is done using aircrack-ng.

Read the rest of Airbash – Fully Automated WPA PSK Handshake Capture Script now! Only available at Darknet.

Tags: hacking Tools
May 05, 2018
2:13
XXEinjector – Automatic XXE Injection Tool For Exploitation
» ‎ Darknet

XXEinjector is a Ruby-based XXE Injection Tool that automates retrieving files using direct and out of band methods. Directory listing only works in Java applications and the brute forcing method needs to be used for other applications.

Usage of XXEinjector XXE Injection Tool

XXEinjector actually has a LOT of options, so do have a look through to see how you can best leverage this type of attack. Obviously Ruby is a prequisite to run the tool.

Read the rest of XXEinjector – Automatic XXE Injection Tool For Exploitation now! Only available at Darknet.

Tags: hacking Tools
May 03, 2018
9:51
Yahoo! Fined 35 Million USD For Late Disclosure Of Hack
» ‎ Darknet

Ah Yahoo! in trouble again, this time the news is Yahoo! fined for 35 million USD by the SEC for the 2 years delayed disclosure of the massive hack, we actually reported on the incident in 2016 when it became public – Massive Yahoo Hack – 500 Million Accounts Compromised.

Yahoo! has been having a rocky time for quite a few years now and just recently has sold Flickr to SmugMug for an undisclosed amount, I hope that at least helps pay off some of the fine.

Read the rest of Yahoo! Fined 35 Million USD For Late Disclosure Of Hack now! Only available at Darknet.

Tags: hacking news
May 01, 2018
8:36
Drupwn – Drupal Enumeration Tool & Security Scanner
» ‎ Darknet
Drupwn is a Python-based Drupal Enumeration Tool that also includes an exploit mode, which can check for and exploit relevant CVEs.

Drupwn Drupal Enumeration Tool Hacking Features

Drupwn can be run, using two separate modes which are enum and exploit. The enum mode allows performing enumerations whereas the exploit mode allows checking and exploiting CVEs.

Enum mode
- User enumeration
- Node enumeration
- Default files enumeration
- Module enumeration
- Theme enumeration
- Cookies support
- User-Agent support
- Basic authentication support
- Request delay
- Enumeration range
- Logging
Exploit mode
- Vulnerability checker
- CVE exploiter
For scanning Drupal sites there is also:

– Droopescan – Plugin Based CMS Security Scanner

You can download Drupwn here:

drupwn-master.zip

Or read more here.

Read the rest of Drupwn – Drupal Enumeration Tool & Security Scanner now! Only available at Darknet.

Tags: hacking Tools
April 28, 2018
11:31
MyEtherWallet DNS Hack Causes 17 Million USD User Loss
» ‎ Darknet

Big news in the crypto scene this week was that the MyEtherWallet DNS Hack that occured managed to collect about $17 Million USD worth of Ethereum in just a few hours.

The hack itself could have been MUCH bigger as it actually involved compromising 1300 Amazon AWS Route 53 DNS IP addresses, fortunately though only MEW was targetted resulting in the damage being contained in the cryptosphere (as far as we know anyway).

Read the rest of MyEtherWallet DNS Hack Causes 17 Million USD User Loss now! Only available at Darknet.

Tags: hacking news
April 23, 2018
10:08
StaCoAn – Mobile App Static Analysis Tool
» ‎ Darknet
StaCoAn is a cross-platform tool which aids developers, bug bounty hunters and ethical hackers performing mobile app static analysis on the code of the application for both native Android and iOS applications.

This tool will look for interesting lines in the code which can contain:
- Hardcoded credentials
- API keys
- URL’s of API’s
- Decryption keys
- Major coding mistakes
This tool was created with a big focus on usability and graphical guidance in the user interface.

Read the rest of StaCoAn – Mobile App Static Analysis Tool now! Only available at Darknet.

Tags: hacking Tools
April 16, 2018
10:48
snallygaster – Scan For Secret Files On HTTP Servers
» ‎ Darknet

snallygaster is a Python-based tool that can help you to scan for secret files on HTTP servers, files that are accessible that shouldn’t be public and can pose a security risk.

Typical examples include publicly accessible git repositories, backup files potentially containing passwords or database dumps. In addition it contains a few checks for other security vulnerabilities.

snallygaster HTTP Secret File Scanner Features

This is an overview of the tests provided by snallygaster.

Read the rest of snallygaster – Scan For Secret Files On HTTP Servers now! Only available at Darknet.

Tags: hacking Tools
March 25, 2018
8:34
Cambridge Analytica Facebook Data Scandal
» ‎ Darknet

One of the biggest stories of the year so far has been the scandal surrounding Cambridge Analytica that came out after a Channel 4 expose that demonstrated the depths they are willing to go to profile voters, manipulate elections and much more.

It’s kicking off in the UK and the US and Mark Zuckerberg has had to come out publically and apologise about the involvement of Facebook.

This goes deep with ties to elections and political activities in Malaysia, Mexico, Brazil, Australia and Kenya.

Read the rest of Cambridge Analytica Facebook Data Scandal now! Only available at Darknet.

Tags: hacking news
March 19, 2018
1:19
GetAltName – Discover Sub-Domains From SSL Certificates
» ‎ Darknet
GetAltName it’s a little script to discover sub-domains that can extract Subject Alt Names for SSL Certificates directly from HTTPS websites which can provide you with DNS names or virtual servers.

It’s useful in a discovery phase of a pen-testing assessment, this tool can provide you with more information about your target and scope.

Features of GetAltName to Discover Sub-Domains
- Strips wildcards and www’s
- Returns a unique list (no duplicates)
- Works on verified and self-signed certs
- Domain matching system
- Filtering for main domains and TLDs
- Gets additional sub-domains from crt.sh
- Outputs to clipboard
GetAltName Subdomain Exctraction Tool Usage

You can output to a text file and also copy the output to your clipboard as a List or a Single line string, which is useful if you’re trying to make a quick scan with Nmap or other tools.

Read the rest of GetAltName – Discover Sub-Domains From SSL Certificates now! Only available at Darknet.

Tags: hacking Tools
March 13, 2018
7:32
Memcrashed – Memcached DDoS Exploit Tool
» ‎ Darknet

Memcrashed is a Memcached DDoS exploit tool written in Python that allows you to send forged UDP packets to a list of Memcached servers obtained from Shodan.

This is related to the recent record-breaking Memcached DDoS attacks that are likely to plague 2018 with over 100,000 vulnerable Memcached servers showing up in Shodan.

What is Memcached?

Memcached is an in-memory key-value store for small chunks of arbitrary data (strings, objects) from results of database calls, API calls, or page rendering.

Read the rest of Memcrashed – Memcached DDoS Exploit Tool now! Only available at Darknet.

Tags: hacking Tools
March 07, 2018
10:33
Memcached DDoS Attacks Will Be BIG In 2018
» ‎ Darknet

So after the massive DDoS attack trend in 2016 it seems like 2018 is going to the year of the Memcached DDoS amplification attack with so many insecure Memcached servers available on the public Internet.

Unfortunately, it looks like a problem that won’t easily go away as there are so many publically exposed, poorly configured Memcached servers online (estimated to be over 100,000).

Honestly, Github handled the 1.3Tbps attack like a champ with only 10 minutes downtime although they did deflect it by moving traffic to Akamai.

Read the rest of Memcached DDoS Attacks Will Be BIG In 2018 now! Only available at Darknet.

Tags: hacking news
March 03, 2018
7:49
XSStrike – Advanced XSS Fuzzer & Exploitation Suite
» ‎ Darknet
XSStrike is an advanced XSS detection suite, which contains a powerful XSS fuzzer and provides zero false positive results using fuzzy matching. XSStrike is the first XSS scanner to generate its own payloads.

It is also built in an intelligent enough manner to detect and break out of various contexts.

Features of XSStrike XSS Fuzzer & Hacking Tool

XSStrike has:
- Powerful fuzzing engine
- Context breaking technology
- Intelligent payload generation
- GET & POST method support
- Cookie Support
- WAF Fingerprinting
- Handcrafted payloads for filter and WAF evasion
- Hidden parameter discovery
- Accurate results via levenshtein distance algorithm
There are various other XSS security related tools you can check out like:

– XSSYA v2.0 Released – XSS Vulnerability Confirmation Tool
– xssless – An Automated XSS Payload Generator Written In Python
– XSSer v1.0 – Cross Site Scripter Framework

You can download XSStrike here:

XSStrike-master.zip

Or read more here.

Read the rest of XSStrike – Advanced XSS Fuzzer & Exploitation Suite now! Only available at Darknet.

Tags: hacking Tools
February 26, 2018
12:53
Quickjack – Advanced Clickjacking & Frame Slicing Attack Tool
» ‎ Darknet

Quickjack is an intuitive, point-and-click tool for performing advanced and covert clickjacking and frame slicing attacks. It also allows you to easily perform clickjacking, or steal “clicks” from users on many websites, forcing the user to unknowingly click buttons or links (for example the Facebook Like button) using their own cookies.

Quickjack By placing the auto-generated code on any site, you can obtain thousands of clicks quickly from different users, or perform targeted attacks by luring a victim to a specific URL.

Read the rest of Quickjack – Advanced Clickjacking & Frame Slicing Attack Tool now! Only available at Darknet.

Tags: hacking Tools
February 12, 2018
1:59
BootStomp – Find Android Bootloader Vulnerabilities
» ‎ Darknet

BootStomp is a Python-based tool, with Docker support that helps you find two different classes of Android bootloader vulnerabilities and bugs. It looks for memory corruption and state storage vulnerabilities.

Note that BootStomp works with boot-loaders compiled for ARM architectures (32 and 64 bits both) and that results might slightly vary depending on angr and Z3’s versions. This is because of the time angr takes to analyze basic blocks and to Z3’s expression concretization results.

Read the rest of BootStomp – Find Android Bootloader Vulnerabilities now! Only available at Darknet.

Tags: hacking Tools
February 06, 2018
9:07
altdns – Subdomain Recon Tool With Permutation Generation
» ‎ Darknet

Altdns is a Subdomain Recon Tool in Python that allows for the discovery of subdomains that conform to patterns. The tool takes in words that could be present in subdomains under a domain (such as test, dev, staging) as well as takes in a list of subdomains that you know of.

From these two lists that are provided as input to altdns, the tool then generates a massive output of “altered” or “mutated” potential subdomains that could be present.

Read the rest of altdns – Subdomain Recon Tool With Permutation Generation now! Only available at Darknet.

Tags: hacking Tools
February 03, 2018
3:54
0-Day Flash Vulnerability Exploited In The Wild
» ‎ Darknet

So another 0-Day Flash Vulnerability is being exploited in the Wild, a previously unknown flaw which has been labelled CVE-2018-4878 and it affects 28.0.0.137 and earlier versions for both Windows and Mac (the desktop runtime) and for basically everything in the Chrome Flash Player (Windows, Mac, Linux and Chrome OS).

The full Adobe Security Advisory can be found here:

– Security Advisory for Flash Player | APSA18-01

Adobe warned on Thursday that attackers are exploiting a previously unknown security hole in its Flash Player software to break into Microsoft Windows computers.

Read the rest of 0-Day Flash Vulnerability Exploited In The Wild now! Only available at Darknet.

Tags: hacking news

December 22, 2012
3:11
Windows Hacking For Newbies
» ‎ Packet Storm Security Recent Files

This is a brief whitepaper discussing hacking Microsoft Windows. Written in Turkish.
Tags: newbies hacking windows hacking-microsoft whitepaper microsoft-windows

3:11
Windows Hacking For Newbies
» ‎ Packet Storm Security Misc. Files

This is a brief whitepaper discussing hacking Microsoft Windows. Written in Turkish.
Tags: newbies hacking windows hacking-microsoft whitepaper microsoft-windows

December 16, 2012
14:22
[Audio] Hacking and Train Spotting
» ‎ SecDocs

Authors: Stephen Cobb
Tags: hacking
Event: DEFCON 4

Tags: audio hacking train stephen-cobb

December 13, 2012
8:01
Hacking Bazaar ExploitHub Gets Hacked, Database Leaked
» ‎ Packet Storm Security Headlines

Hacking Bazaar ExploitHub Gets Hacked, Database Leaked
Tags: exploithub hacking bazaar

December 12, 2012
6:01
Raspberry Pi Hacking, Commando Style
» ‎ Hack a Day

If you’re lacking useful equipment for your Raspberry Pi hacking adventure, such as an HDMI monitor or power supply, this handy write-up will show you how to continue your hacking. All you’ll need is a laptop, the Raspberry Pi itself, an SD card, and an Ethernet and micro-USB cable. As noted in the article, it’s [...]
Tags: raspberry hacking commando commando-style sd-card raspberry

December 07, 2012
21:28
[Audio] The Party's Over: Why Hacking Sucks
» ‎ SecDocs

Authors: Stephen Cobb
Tags: hacking
Event: DEFCON 3

Tags: audio hacking party stephen-cobb
December 05, 2012
10:20
[Slides] Hacking Windows Vista Security
» ‎ SecDocs

Authors: Dan Griffin
Tags: Windows Vista
Event: CanSecWest 2008

Tags: vista hacking windows dan-griffin-tags security-authors hacking-windows griffin

November 30, 2012
7:10
Global Hacking Network Declares Internet War On Syria
» ‎ Packet Storm Security Headlines

Global Hacking Network Declares Internet War On Syria
Tags: global hacking network syria internet-war
November 29, 2012
8:12
$25K Upgrade Could Have Prevented Hacking, Panel Told
» ‎ Packet Storm Security Headlines

$25K Upgrade Could Have Prevented Hacking, Panel Told
Tags: hacking panel told k-upgrade

November 28, 2012
14:01
Hacking BodyBugg fitness sensors to get around subscription fee
» ‎ Hack a Day

This arm cuff is a sensor package which logs data whenever you’re wearing it. It records accelerometer data, skin temperature, and galvanic skin response. That data can then be analyzed to arrive at figures like calories burned. But… The company behind the device seems to have included a way to keep the cash flowing. Once [...]
Tags: skin bodybugg hacking galvanic-skin-response sensor-package skin-temperature security hacks

8:48
[Slides] RFIDIOts!!! RFID Hacking without a Soldering Iron (... or a Patent Attorney :)
» ‎ SecDocs

Authors: Adam Laurie
Tags: RFID
Event: CanSecWest 2007

Tags: rfidiots hacking rfid adam-laurie-tags adam-laurie patent-attorney soldering-iron
November 26, 2012
21:41
[Slides] Nmap Hacking
» ‎ SecDocs

Authors: Fyodor
Tags: scanning
Event: CanSecWest 2005

Tags: nmap authors hacking fyodor-tags fyodor slides

November 21, 2012
8:05
Haley Admits Hacking Errors; Revenue Director Steps Down
» ‎ Packet Storm Security Headlines

Haley Admits Hacking Errors; Revenue Director Steps Down
Tags: errors revenue hacking director-steps haley-admits

November 20, 2012
21:38
[Audio] The European Hacking Community and 'Scene'
» ‎ SecDocs

Tags: social
Event: DEFCON 2

Tags: audio european hacking
15:33
[Audio] Mark Will Talk About Hacking Cellular Phones
» ‎ SecDocs

Authors: Mark Lottor
Tags: phone
Event: DEFCON 2

Tags: audio talk hacking mark-lottor mark-will cellular-phones
November 14, 2012
6:20
[Slides] Hacking Windows Internals
» ‎ SecDocs

Authors: Cesar Cerrudo
Tags: Windows internals
Event: CanSecWest 2005

Tags: hacking internals windows cesar-cerrudo hacking-windows slides

November 12, 2012
18:15
Global Hacking Attempts Will Hit 1 Billion By The End Of The Year
» ‎ Packet Storm Security Headlines

Global Hacking Attempts Will Hit 1 Billion By The End Of The Year
Tags: global hacking end 1-billion attempts

November 03, 2012
10:14
[Slides] iPhone and iPad Hacking
» ‎ SecDocs

Authors: Ilja van Sprundel
Tags: iPhone
Event: CanSecWest 2011

Tags: hacking iphone ipad slides

9:02
Threat From Hacking Attack Gets More Serious
» ‎ Packet Storm Security Headlines

Threat From Hacking Attack Gets More Serious
Tags: threat attack hacking
October 30, 2012
19:37
Researchers Inventory Hacking Supermarkets
» ‎ Packet Storm Security Headlines

Researchers Inventory Hacking Supermarkets
Tags: inventory hacking researchers supermarkets

October 29, 2012
22:53
[Slides] HDMI - Hacking Displays Made Interesting
» ‎ SecDocs

Authors: Andy Davis
Tags: HDMI
Event: CanSecWest 2012

Tags: hdmi hacking displays andy-davis-tags andy-davis slides
October 24, 2012
21:47
[Video] Zero Tool Hacking
» ‎ SecDocs

Authors: Nils Magnus
Tags: penetration testing
Event: Chaos Communication Congress 19th (19C3) 2002
Abstract: Hacking used to be an art; one may get the impression that this turned recently in other questions of, say how many toolz you have and which systems you own. Within our presentation we will demonstrate hacking approaches with little or even no tools at all. Given a reasonable number of standard operating system utilities, much information about a network can be obtained and several hacks deem possible. This is no presenation of cutting-edge techniques, most of the approaches have been possible since many years/for a long time. However, we will not explain what TCP/IP means or how to calculate a netmask. Targetetd to an audience that knows what networking is all about but wishes to see more obfruscated means of using well-known utilities. During the hands-on session we will explain and demonstrate how we can draw maps of segments with traceroute, how to identify filtered hosts with ping and arp, how to do IP spoofing and segment invasion with ifconfig or how to get some more reliable information about a webserver. We conclude with a discussion of the feasibility of this approach, identify useful tools that can be of effective help and name those which mainly keep you stupid whilst they do not do any better.
Tags: video hacking information nils-magnus-tags chaos-communication-congress edge-techniques presenation
October 23, 2012
21:55
[Audio] Zero Tool Hacking
» ‎ SecDocs

Authors: Nils Magnus
Tags: penetration testing
Event: Chaos Communication Congress 19th (19C3) 2002
Abstract: Hacking used to be an art; one may get the impression that this turned recently in other questions of, say how many toolz you have and which systems you own. Within our presentation we will demonstrate hacking approaches with little or even no tools at all. Given a reasonable number of standard operating system utilities, much information about a network can be obtained and several hacks deem possible. This is no presenation of cutting-edge techniques, most of the approaches have been possible since many years/for a long time. However, we will not explain what TCP/IP means or how to calculate a netmask. Targetetd to an audience that knows what networking is all about but wishes to see more obfruscated means of using well-known utilities. During the hands-on session we will explain and demonstrate how we can draw maps of segments with traceroute, how to identify filtered hosts with ping and arp, how to do IP spoofing and segment invasion with ifconfig or how to get some more reliable information about a webserver. We conclude with a discussion of the feasibility of this approach, identify useful tools that can be of effective help and name those which mainly keep you stupid whilst they do not do any better.
Tags: audio hacking information nils-magnus-tags chaos-communication-congress edge-techniques presenation

12:01
Hacking Facebook to remove the social value facade
» ‎ Hack a Day

We see [Ben Grosser's] point that all the metrics found on the Facebook user interface make the experience somewhat of a game to see if you can better your high score. He thinks this detracts from the mission of having social interactions that themselves have a value. So he set out to remove the ‘scores’ from [...]
Tags: facebook value hacking bengrosser high-score social-interactions firefox hacks
October 19, 2012
5:01
Hacking Beer Cans for Fun and Publicity
» ‎ Hack a Day

Although beer is generally a good way to get people to come to your trade show booth, [Robofun.ru] decided to put a new spin on things. Instead of (or possibly in addition to) giving out beer, they decided to turn 40 Staropramen beer cans into a keyboard. This was done using an Arduino hooked up [...]
Tags: hacking cans beer beer-cans trade-show-booth arduino hacks

October 15, 2012
2:01
Web-Sorrow v1.48 – Version Detection, CMS Identification, Enumeration & Server Scanning Tool
» ‎ Darknet

Web-Sorrow is a PERL based tool for misconfiguration, version detection, enumeration, and server information scanning. It’s entirely focused on enumeration and collecting information about a target server. Web-Sorrow is a “safe to run” program, meaning it is not designed to be an exploit or perform any harmful attacks....

Read the full post at darknet.org.uk
Tags: server enumeration sorrow read target-server darknet tool-web hacking Tools

October 03, 2012
9:41
[Audio] Hacking Linux-Powered Devices
» ‎ SecDocs

Authors: Stefan Arentz
Tags: embedded Linux
Event: Chaos Communication Congress 21th (21C3) 2004
Abstract: More and more devices like wireless access points, personal network storage servers or satellite decoders are powered by Linux. Some vendors are even publicly distributing the (base) source code for their products. This session will show the details of embedded Linux and how you can change these devices to your own needs.
Tags: audio hacking linux stefan-arentz network-storage-servers chaos-communication-congress satellite-decoders

October 02, 2012
2:47
Hackers Break Into White House Military Network
» ‎ Darknet

It’s been a while, but hey I’m back! So here’s a news story that caught my eye today – it’s been a while since we’ve reported on a Spear Phishing attack, and guess what? Yes, last time it was also perpetrated by Chinese, but it was targeting Google’s Gmail. Targeted Phishing Attacks Carried Out On...

Read the full post at darknet.org.uk
Tags: while hackers phishing read military-network darknet google General hacking

September 17, 2012
3:11
Hacking Android For Fun And Profit
» ‎ Packet Storm Security Recent Files

This is a brief whitepaper with examples and information on hacking the Android platform from Google.
Tags: hacking android fun google whitepaper

3:11
Hacking Android For Fun And Profit
» ‎ Packet Storm Security Misc. Files

This is a brief whitepaper with examples and information on hacking the Android platform from Google.
Tags: hacking android fun google whitepaper

September 08, 2012
12:01
Hacking a floating RGB LED decorative ball
» ‎ Hack a Day

Knowing that I’m always happy to get something new and glowy, my wife brought home a cheap “floating pool light” that she found on sale for roughly $10. This is a large white floating ball that has LEDs inside and cycles through different colors. Meant to be put into a pool for neat effects, we [...]
Tags: hacking pool ball floating-pool-light neat-effects different-colors Ask hackaday
September 06, 2012
7:00
Hacking dog collars to save money on batteries.
» ‎ Hack a Day

[Lou] sent in this amazingly simple hack that has been saving him money on special batteries for his dog collar. He uses an invisible fence system which gives the dog a shock if it passes beyond certain markers in his yard. The collars use special batteries so you’re not strapping multiple full sized cells to [...]
Tags: dog money hacking lou fence-system invisible-fence dog-collars home hacks

September 05, 2012
3:36
CrowdRE – Crowdsourced Reverse Engineering Service From CrowdStrike
» ‎ Darknet

Reversing complex software quickly is challenging due to the lack of professional tools that support collaborative analysis. The CrowdRE project aims to fill this gap. Rather than using a live distribution of changes to all clients, which has proven to fail in the past, it leverages from the architecture that is being used with success [...] The...

Read the full post at darknet.org.uk
Tags: crowdsourced crowdre engineering read collaborative-analysis complex-software engineering-service hacking Tools

September 03, 2012
9:01
Hacking your grill for performance and features
» ‎ Hack a Day

Summer is winding down, which means that sales will be beginning on grills at stores all over the place. For those that enjoy the outdoor cooking experience, a nice new grill is always tempting. If you’re anything like me though, it can be hard to justify the expense. All you need is some fire right? [...]
Tags: place hacking performance summer outdoor-cooking grills home hacks

August 31, 2012
21:50
[Video] The School of Hacking Art
» ‎ SecDocs

Authors: Ilya V. Vasilyev
Tags: hacking
Event: Chaos Communication Camp 2007
Abstract: At the beginning of 90s Soviet (now Russian) hackerdom begin to experience same problems, as everywhere. Journalists became to blame computer fandom in virtually every crime they could imagine. At 1996, I have found just another solution by opening the School of Hacking Art very like karate-do Schools. In Germany there was TV Show "Die Hackerschule. Galileo. ProSieben. November, 13, 2000, 19:30 about the School. Also here is something in German, check it: http://web.archive.org/web/20050218210212/hscool.net/about/article2.html The event will be a free-style seminar. The basic idea: What have already been done, what should be done. The history of hacking education, relations/communications with government, business, media, etc. Strength and weakness of this way. Some examples of educational technologies from Russia, that are helpful to the whole underground. Q&A session.
Tags: school hacking art ilya-v.-vasilyev germany russia chaos-communication-camp education-relations schools-in-germany
21:50
[Slides] The School of Hacking Art
» ‎ SecDocs

Authors: Ilya V. Vasilyev
Tags: hacking
Event: Chaos Communication Camp 2007
Abstract: At the beginning of 90s Soviet (now Russian) hackerdom begin to experience same problems, as everywhere. Journalists became to blame computer fandom in virtually every crime they could imagine. At 1996, I have found just another solution by opening the School of Hacking Art very like karate-do Schools. In Germany there was TV Show "Die Hackerschule. Galileo. ProSieben. November, 13, 2000, 19:30 about the School. Also here is something in German, check it: http://web.archive.org/web/20050218210212/hscool.net/about/article2.html The event will be a free-style seminar. The basic idea: What have already been done, what should be done. The history of hacking education, relations/communications with government, business, media, etc. Strength and weakness of this way. Some examples of educational technologies from Russia, that are helpful to the whole underground. Q&A session.
Tags: school hacking art ilya-v.-vasilyev germany russia chaos-communication-camp education-relations schools-in-germany
13:24
[Video] Hacking the Bionic Man
» ‎ SecDocs

Authors: Gadi Evron
Tags: hacking
Event: Chaos Communication Camp 2007
Abstract: In this lecture we will discuss how security issues may impact the future, which may be confused with science fiction. Already today we find cyber-implants of different kinds embedded within the human machine. As security professionals we know there is no such things as perfect code, and security solutions are far from perfect. What will we be facing in 2040, and how might we defend ourselves - if at all.
Tags: video security hacking chaos-communication-camp perfect-code bionic-man

August 29, 2012
5:55
1 Million Accounts Leaked From Banks, Government Agencies & Consultancy Firms
» ‎ Darknet

Seems like some hactivists have been working hard, 1 million accounsts were leaked over the weekend from some pretty serious sources by the group Team GhostShell – who are affiliated with Anonymous. It seems like these weren’t particularly complex or technically adept multi-layer attacks, they were carried out via the most common...

Read the full post at darknet.org.uk
Tags: darknet group-team government-agencies database hacking
August 27, 2012
8:08
XMPPloit – A Tool to Attack XMPP Connections
» ‎ Darknet

XMPPloit is a command-line tool to attack XMPP connections, allowing the attacker to place a gateway between the client and the server and perform different attacks on the client stream. The tool exploit implements vulnerabilities at the client & server side utilizing the XMPP protocol. The main goal is that all the process is transparently...

Read the full post at darknet.org.uk
Tags: xmpp client tool read command-line-tool darknet main-goal hacking Tools

August 08, 2012
6:00
Hacking laser tag and building custom guns
» ‎ Hack a Day

As [Brad] over at the LVL1 hackerspace watched his friend build a Laser tag/tazer mashup for Makerfaire Detroit 2012, he noticed these new laser tag guns were really cool. These Light Strike guns have an impressive array of electronics for a $30 toy, but there was still much to be desired. [Brad] decided to reverse engineer [...]
Tags: laser hacking tag brad detroit tag-guns custom-guns impressive-array toy hacks
August 01, 2012
13:01
Hacking the computer interface of a Ford Focus Mk2
» ‎ Hack a Day

You can do some neat stuff to the way your Ford Focus Mk2 works, but first you have to gain access to the data system. If you know some Russian, and don’t mind a bit of dongle rewiring, this guide will have you hacking the car’s CAN bus in no time. It was written by [...]
Tags: ford hacking computer ford-forcus computer-interface ford-focus transportation hacks

July 29, 2012
9:57
Coders Sought For Island Hacking
» ‎ Packet Storm Security Headlines

Coders Sought For Island Hacking
Tags: for hacking coders island

8:01
Book Review: The Dangers of Computer Hacking
» ‎ Hack a Day

Years and years ago, someone gave me this book as a gift. [John Knittel], a co-author thought I might find it amusing. The book, titled The Dangers of Computer Hacking, is a grade school level breakdown of, well, computer hacking and the dangers thereof. At the time, I thought it was rather fun and amusing. [...]
Tags: computer hacking book john-knittel computer-hacking co-author reviews

July 23, 2012
1:45
Hcon Security Testing Framework (HconSTF) v0.4 – Fire Base
» ‎ Darknet

HconSTF is an Open Source Penetration Testing Framework based on different browser technologies, Which helps any security professional to assists in the Penetration testing or vulnerability scanning assessment. It contains webtools which are capable of carrying out XSS attacks, SQL Injection, siXSS, CSRF, Trace XSS, RFI, LFI, etc. It could prove...

Read the full post at darknet.org.uk

Tags: testing framework security read fire-base browser-technologies darknet hacking Tools

July 10, 2012
21:47
[Video] Hacking in the age of declining everything
» ‎ SecDocs

Tags: hacking
Event: Chaos Communication Congress 24th (24C3) 2007
Abstract: It is thought by many that the world may be facing Peaks in fossil fuel production and catastrophic climate change. These huge problems put into question the Industrial Civilisation and call for, at the very least, massive changes to society if humanity is to survive. Do hackers have a role to play in a post transition society? What sort of things should hackers know and prepare for in such a future?
Tags: video hacking society chaos-communication-congress fossil-fuel-production industrial-civilisation
21:47
[Audio] Hacking in the age of declining everything
» ‎ SecDocs

Tags: hacking
Event: Chaos Communication Congress 24th (24C3) 2007
Abstract: It is thought by many that the world may be facing Peaks in fossil fuel production and catastrophic climate change. These huge problems put into question the Industrial Civilisation and call for, at the very least, massive changes to society if humanity is to survive. Do hackers have a role to play in a post transition society? What sort of things should hackers know and prepare for in such a future?
Tags: audio hacking society chaos-communication-congress fossil-fuel-production industrial-civilisation
July 07, 2012
21:56
[Slides] Hacking ideologies, part 2: Open Source, a capitalist movement
» ‎ SecDocs

Tags: hacking
Event: Chaos Communication Congress 24th (24C3) 2007
Abstract: The Open Source initiative re-interpreted Free Software to include it into the neo-liberal ideology and the capitalist economy - whose aims are contrary to the FS starting axioms/freedoms. This platform will focus on ideological and political aspects of this. It will also suggest FS recovery strategies.
Tags: hacking open source chaos-communication-congress open-source-initiative capitalist-economy

July 03, 2012
14:23
Hacking IPv6 Networks Training Slides
» ‎ Packet Storm Security Recent Files

These slides are from the Hacking IPv6 Networks Training provided by SI6 networks at Hack In Paris (HIP) 2012.
Tags: networks hacking ipv paris ipv6-networks slides hack

14:23
Hacking IPv6 Networks Training Slides
» ‎ Packet Storm Security Misc. Files

These slides are from the Hacking IPv6 Networks Training provided by SI6 networks at Hack In Paris (HIP) 2012.
Tags: networks hacking ipv paris ipv6-networks slides hack

July 02, 2012
21:44
[Slides] C64-DTV Hacking
» ‎ SecDocs

Authors: Peter Fuhrmann
Tags: games
Event: Chaos Communication Congress 24th (24C3) 2007
Abstract: The C64-DTV is a remake of the classic homecomputer sold as a joystick-contained videogame. The talk gives an overview about the structure of the DTV, and shows different hardware and software modifications that can be done.
Tags: authors dtv hacking peter-fuhrmann chaos-communication-congress software-modifications fuhrmann
June 30, 2012
21:57
[Slides] Hacking SCADA
» ‎ SecDocs

Authors: Alessio L. R. Pennasilico Raoul Chiesa
Tags: SCADA
Event: Chaos Communication Congress 24th (24C3) 2007
Abstract: SCADA acronym stand for “Supervisory Control And Data Acquisition”, and it's related to industrial automation inside critical infrastructures. This talk will introduce the audience to SCADA environments and its totally different security approaches, outlining the main key differences with typical IT Security best practices. We will analyze a real world case study related to industry. We will describe the most common security mistakes and some of the direct consequences of such mistakes to a production environment. In addition, attendees will be shown a video of real SCADA machines reacting to these attacks in the most “interesting” of ways! :)
Tags: security hacking scada raoul-chiesa l.-r.-pennasilico chaos-communication-congress supervisory-control-and-data-acquisition

June 28, 2012
11:37
The Mole v0.3 Released For Download – Automatic SQL Injection Exploitation Tool
» ‎ Darknet

The Mole is an automatic SQL Injection exploitation tool. All you need to do is provide a vulnerable URL and a valid string on the site you are testing and The Mole will detect the injection and exploit it, either by using the union technique or a boolean query based technique. We did mention The [...]

Read the full post at darknet.org.uk

Tags: injection mole sql read sql-injection boolean-query darknet database hacking

June 23, 2012
21:27
[Video] Hacking ICANN
» ‎ SecDocs

Tags: network management
Event: Chaos Communication Congress 24th (24C3) 2007
Abstract: The Internet Corporation for Assigned Names and Numbers (ICANN) needs to include users in its policy making: We propose and discuss tactics to hack the individual into the system.
Tags: video icann hacking chaos-communication-congress internet-corporation-for-assigned-names-and-numbers management-event
21:27
[Audio] Hacking ICANN
» ‎ SecDocs

Tags: network management
Event: Chaos Communication Congress 24th (24C3) 2007
Abstract: The Internet Corporation for Assigned Names and Numbers (ICANN) needs to include users in its policy making: We propose and discuss tactics to hack the individual into the system.
Tags: audio icann hacking chaos-communication-congress internet-corporation-for-assigned-names-and-numbers management-event

June 19, 2012
11:01
Hacking together two shop vacuums
» ‎ Hack a Day

Unfortunately the result of hacking together two shop vacuums isn’t a double-power monstrosity. This is actually the story of combining broken and substandard parts into one usable machine. The guys at the Shackspace originally bought a cheap shop vacuum whose motor gave up the ghost way too quickly. The replacement had only a tiny container for [...]
Tags: hacking result shop usable-machine shop-vacuum shop-vacuums Hackerspaces

June 12, 2012
2:23
MySQL 1 Liner Hack Gives Root Access Without Password
» ‎ Darknet

The latest news that has hit the streets is the occurence of the easiest hack ever, if you have local shell access (any user privelege level) and you can connect to MySQL – you can get root access to MySQL within a few seconds. I tried this yesterday on one of my servers on Ubuntu [...]

Read the full post at darknet.org.uk

Tags: access root mysql read darknet occurence hack database hacking

June 03, 2012
21:28
[Audio] Crafting and Hacking: Separated at Birth
» ‎ SecDocs

Tags: hacking
Event: Chaos Communication Congress 25th (25C3) 2008
Abstract: What do hackers have in common with crafters? Lots. While crafting is more often about string and glue than bits and electrons, crafters often feel the same need to create things and manipulate materials into something new. The roots of computing are intertwined with craft around the invention of the Jaquard punchcard loom. We'll look at where the two scenes have gone since then, and what we can gain by reconnecting the hacker world with its softer, more decorative cousin.
Tags: audio hacking crafting chaos-communication-congress hacker-world jaquard

May 22, 2012
3:10
Nmap 6 Released For Download – Free Network Discovery & Security Auditing Tool
» ‎ Darknet

It’s been a while since the last major release of Nmap, the last time we reported on it was when Nmap v5.20 was Released (February 2010). The latest major version has just been released, version 6 – and is now available for download! For the two people on the planet who don’t know – Nmap [...]

Read the full post at darknet.org.uk

Tags: download nmap released read network-discovery darknet version-6 hacking Tools

May 18, 2012
7:18
UK Prosecutions For Hacking Appear To Be Dropping
» ‎ Packet Storm Security Headlines

UK Prosecutions For Hacking Appear To Be Dropping
Tags: prosecutions appear hacking
May 17, 2012
10:24
UK-Based Hacking Doubled In First Quarter Of 2012
» ‎ Packet Storm Security Headlines

UK-Based Hacking Doubled In First Quarter Of 2012
Tags: hacking uk-based quarter first-quarter

May 14, 2012
1:30
CODENAME: Samurai Skills – Real World Penetration Testing Training
» ‎ Darknet

Introduction Yes, there’s another new kid on the block when it comes to penetration testing training, this course is known as CODENAME: Samurai Skills by Ninja-Sec. I’m not going to go and compare this to any other course out there as I think there’s a place for all of them, and they all have pros [...]

Read the full post at darknet.org.uk

Tags: samurai penetration codename read new-kid-on-the-block kid-on-the-block darknet General hacking

May 13, 2012
10:01
Hacking magnets into your skin
» ‎ Hack a Day

[Dave] loved his iPod nano so much that he implanted 4 magnets in his arm to hold it. Ok, go ahead and shout “fanboy” at your screen and say something snide about apples products or lament the poor working conditions at foxconn. Got it out of your system? Cool. Actually, if we had to guess, [...]
Tags: skin ipod hacking dave snide working-conditions lament misc hacks
May 12, 2012
13:17
Hacking the Kingston Wi-Drive
» ‎ Hack a Day

[Andrew] got his hands on a Kingston Wi-Drive, and being the responsible Hackaday reader he is, spent the better part of a weekend figuring out how to get root on this shiny new toy The Kingston Wi-Drive is a small battery-powered Flash drive with a wi-fi adapter in a small, compact case. Even though Kingston is going [...]
Tags: hackaday hacking drive andrew kingston kingston-wi shiny-new-toy compact-case Hardware

May 08, 2012
3:36
Basic Fuzzing Framework (BFF) From CERT – Linux & Mac OSX Fuzzer Tool
» ‎ Darknet

The CERT Basic Fuzzing Framework (BFF) is a software testing tool that finds defects in applications that run on the Linux and Mac OS X platforms. BFF performs mutational fuzzing on software that consumes file input. (Mutational fuzzing is the act of taking well-formed input data and corrupting it in various ways, looking for cases [...]

Read the full post at darknet.org.uk

Tags: bff basic fuzzing mac-os read software-testing-tool mac-os-x linux-mac hacking Tools

April 26, 2012
8:20
Hacking And Intellectual Property Theft Presage The New Cold War
» ‎ Packet Storm Security Headlines

Hacking And Intellectual Property Theft Presage The New Cold War
Tags: intellectual property hacking intellectual-property-theft cold-war

April 25, 2012
12:01
Hacking the trampofoil to be pedal powered
» ‎ Hack a Day

We’ve seen a few different versions of the “trampofoil” before. That’s the contraption that utilizes a hydrofoil and human power to scoot you across the water above the surface. It is somewhat difficult to explain, so just check out the first video after the break to see how the original works. Today, we stumbled upon [...]
Tags: contraption hacking trampofoil original-works transportation hacks

April 18, 2012
3:44
NfSpy – ID-spoofing NFS Client Tool – Mount NFS Shares Without Account
» ‎ Darknet

We wrote about this tool originally last year – NfSpy – ID-spoofing NFS Client – Falsify NFS Credentials – and a new version just came out! NfSpy has just been updated to support NFSv3, a more efficient and widespread protocol than the previous NFSv2. NfSpy is a FUSE filesystem written in Python that automatically changes [...]

Read the full post at darknet.org.uk

Tags: client nfspy id-spoofing read mount-nfs client-tool darknet hacking Tools

April 17, 2012
16:09
15 Year Old Arrested For Hacking 259 Companies
» ‎ Packet Storm Security Headlines

15 Year Old Arrested For Hacking 259 Companies
Tags: old hacking year

April 12, 2012
11:32
web-sorrow – Remote Web Security Scanner (Enumeration/Version Detection etc)
» ‎ Darknet

web-sorrow is a PERL based tool used for checking a Web server for misconfiguration, version detection, enumeration, and server information. It is NOT a vulnerability scanner, inspection proxy, DDoS tool or an exploitation framework. Current Functionality -S – stands for standard. a set of Standard tests and includes: indexing of directories...

Read the full post at darknet.org.uk

Tags: enumeration web scanner read vulnerability-scanner security-scanner darknet hacking Tools
April 02, 2012
3:45
GooDork – Command Line Google Dorking/Hacking Tool
» ‎ Darknet

GooDork is a simple python script designed to allow you to leverage the power of Google Dorking straight from the comfort of your command line. There was a GUI tool we discussed a while back similar to this – Goolag – GUI Tool for Google Hacking. GooDork offers powerful use of Google’s search directives, by [...]

Read the full post at darknet.org.uk

Tags: google goodork tool read search-directives python-script gui-tool hacking Tools

April 01, 2012
4:11
VOIP Hacking
» ‎ Packet Storm Security Recent Files

This is a short whitepaper on VOIP hacking. It more or less just goes over setting up Asterisk and using VOIP.
Tags: whitepaper hacking voip

4:11
VOIP Hacking
» ‎ Packet Storm Security Misc. Files

This is a short whitepaper on VOIP hacking. It more or less just goes over setting up Asterisk and using VOIP.
Tags: whitepaper hacking voip

March 22, 2012
23:34
LulzSec Hacking Return Planned For April Fools' Day
» ‎ Packet Storm Security Headlines

LulzSec Hacking Return Planned For April Fools' Day
Tags: lulzsec return hacking april-fools-day

March 21, 2012
3:00
eLearnSecurity Launches Newly Updated & Refreshed Penetration Testing Professional Training v2
» ‎ Darknet

Introduction It’s been a while since we’ve mentioned this course, of course since we mentioned it back in May 2010 – eLearnSecurity – Online Penetration Testing Training – eLearnSecurity has been making continuous improvements to the course-ware and the subject matter. But now in 2012, it’s time for them to release...

Read the full post at darknet.org.uk

Tags: testing penetration elearnsecurity read continuous-improvements darknet professional-training General hacking

March 19, 2012
13:36
Hacking the green goose for fun and profit
» ‎ Hack a Day

[Troy] recently got his hands on a greengoose starter kit and like any HAD reader would do, proceeded to probe it mercilessly. The greengoose appears to be some sort of location-tracking device which reports back to a server on the position and location of radio transmitters relative to it. [Troy] managed to not only get [...]
Tags: goose greengoose hacking troy green-goose starter-kit radio gps hacks

March 08, 2012
8:08
Chrome Falls In First Five Minutes Of Hacking Contest
» ‎ Packet Storm Security Headlines

Chrome Falls In First Five Minutes Of Hacking Contest
Tags: chrome hacking falls first-five-minutes

March 07, 2012
10:47
Goofile v1.5 – Search For A Specific File Type In A Given Domain.
» ‎ Darknet

Use this tool to search for a specific file type in a given domain – inspired by TheHarvester. Usage ./goofile.py -d test.com -f txt -d: domain to search -f: filetype (ex. pdf) Written in Python and tested on 2.5 and 2.7. Please submit any bug reports or requests to the author. You can download Goofile [...]

Read the full post at darknet.org.uk

Tags: file domain goofile read d-test darknet filetype hacking Tools
February 28, 2012
9:16
MagicTree v1.1 Released For Download – Pen-Testing Productivity Tool
» ‎ Darknet

If you aren’t aware (yes we wrote about MagicTree v1.0) what MagicTree is.. Think of it this way, have you ever spent ages trying to find the results of a particular portscan you were sure you did? Or grepping through a bunch of files looking for data for a particular host or service? Or copy-pasting [...]

Read the full post at darknet.org.uk

Tags: download magictree released read productivity-tool portscan darknet General hacking

February 21, 2012
12:01
Hacking together a color changing water wall
» ‎ Hack a Day

[BadWolf's] girlfriend wanted him to build her a lamp for Christmas and he didn’t disappoint. What he came up with is a water-filled color changing lamp with bubbles for added interest. See for yourself in the clip after the jump. The color changing properties are easily taken care of by some waterproof RGB LED strips. [...]
Tags: lamp hacking color badwolf added-interest water-wall led hacks

February 18, 2012
21:39
[Video] Hacking in a Foreign Language: A Network Security Guide to Russia (and Beyond)
» ‎ SecDocs

Authors: Kenneth Geers
Tags: exploiting
Event: DEFCON 13

Tags: video hacking foreign kenneth-geers russia geers security-guide foreign-language
21:39
[Slides] Hacking in a Foreign Language: A Network Security Guide to Russia (and Beyond)
» ‎ SecDocs

Authors: Kenneth Geers
Tags: exploiting
Event: DEFCON 13

Tags: language hacking foreign kenneth-geers russia geers security-guide foreign-language
February 17, 2012
21:51
[Audio] Hacking in a Foreign Language: A Network Security Guide to Russia (and Beyond)
» ‎ SecDocs

Authors: Kenneth Geers
Tags: exploiting
Event: DEFCON 13

Tags: audio hacking foreign kenneth-geers russia geers security-guide foreign-language
21:51
[Video] Hacking Nmap
» ‎ SecDocs

Authors: Fyodor
Tags: scanning
Event: DEFCON 13

Tags: video nmap hacking fyodor-tags fyodor
21:51
[Audio] Hacking Nmap
» ‎ SecDocs

Authors: Fyodor
Tags: scanning
Event: DEFCON 13

Tags: nmap audio hacking fyodor-tags fyodor

18:38
Gammarays Jailed For Hacking Facebook
» ‎ Packet Storm Security Headlines

Gammarays Jailed For Hacking Facebook
Tags: gammarays hacking jailed facebook

11:36
Hacking an AC outlet timer for project use
» ‎ Hack a Day

[Karl] needed a programmable real-time clock for one of his projects. He considered adding an RTC chip, LCD screen, and some buttons for use with a microcontroller. That’s not necessarily hard, but it takes time and can be considered a project in itself. Instead, he headed to the hardware store to look for a cheap [...]
Tags: use hacking project karl real-time-clock ac-outlet microcontroller clock hacks

February 15, 2012
11:41
xSQLScanner – Database Password Cracker & Security Audit Tool For MS-SQL & MySQL
» ‎ Darknet

xSQL Scanner is a advanced SQL audit tool that allows users to find weak passwords and vulnerabilities on MS-SQL and MySQL database servers. The objective of xSQLScanner is to assist the Security Analyst or Penetration Tester in auditing the security of MS-SQL and MySQL database servers. Features Test for weak password fast; Test for wear/user...

Read the full post at darknet.org.uk

Tags: ms-sql database security read mysql-database-servers audit-tool database hacking

February 01, 2012
8:14
The US And China Are Behind Nearly 40 Percent Of Global Hacking
» ‎ Packet Storm Security Headlines

The US And China Are Behind Nearly 40 Percent Of Global Hacking
Tags: global percent hacking china

January 31, 2012
7:29
theHarvester – Gather E-mail Accounts, Subdomains, Hosts, Employee Names – Information Gathering Tool
» ‎ Darknet

theHarvester is a tool to gather emails, subdomains, hosts, employee names, open ports and banners from different public sources like search engines, PGP key servers and SHODAN computer database. This tools is intended to help Penetration testers in the early stages of the project It’s a really simple tool, but very effective. The sources...

Read the full post at darknet.org.uk

Tags: penetration-testers mail-accounts open-ports hacking Tools

January 27, 2012
17:07
Students Busted For Hacking Computers, Changing Grades
» ‎ Packet Storm Security Headlines

Students Busted For Hacking Computers, Changing Grades
Tags: grades busted hacking hacking-computers

January 21, 2012
21:48
[Audio] Owning the Fanboys: Hacking Mac OSX
» ‎ SecDocs

Authors: Charlie Miller
Tags: Mac OS X
Event: Black Hat Asia 2008

Tags: fanboys audio hacking x-event mac-os mac-osx charlie-miller asia mac-os-x hacking-mac
21:48
[Slides] Owning the Fanboys: Hacking Mac OSX
» ‎ SecDocs

Authors: Charlie Miller
Tags: Mac OS X
Event: Black Hat Asia 2008

Tags: fanboys authors hacking x-event mac-os mac-osx charlie-miller asia mac-os-x hacking-mac
January 14, 2012
21:34
[Slides] Hacking fingerprint Scanners - Why Microsoft's Fingerprint Reader Is Not a Security Feature
» ‎ SecDocs

Authors: Mikko Kiviharju
Tags: biometric
Event: Black Hat EU 2006

Tags: scanners hacking fingerprint fingerprint-scanners fingerprint-reader feature-authors

January 09, 2012
9:38
Arachni v0.4 Released – High-Performance (Open Source) Web Application Security Scanner Framework
» ‎ Darknet

Arachni is a high-performance (Open Source) Web Application Security Scanner Framework written in Ruby. This version includes lots of goodies, including: A new light-weight RPC implementation (No more XMLRPC) High Performance Grid (HPG) — Combines the resources of multiple nodes for lightning-fast scans Updated WebUI to provide access to HPG...

Read the full post at darknet.org.uk

Tags: web-application-security open-source-web security-scanner hacking Tools

January 06, 2012
21:49
[Slides] Hacking Intranet Websites from the Outside "JavaScript malware just got a lot more dangerous"
» ‎ SecDocs

Authors: Jeremiah Grossman
Tags: web application malware Javascript
Event: Black Hat USA 2006

Tags: malware javascript hacking jeremiah-grossman usa intranet-websites black-hat
January 03, 2012
21:49
[Slides] Hacking VoIP Exposed
» ‎ SecDocs

Authors: David Endler Mark Collier
Tags: VoIP
Event: Black Hat USA 2006

Tags: voip hacking exposed mark-collier david-endler usa endler black-hat

5:55
Brown Emails Targeted In Hacking Attack
» ‎ Packet Storm Security Headlines

Brown Emails Targeted In Hacking Attack
Tags: attack hacking targeted brown-emails
January 01, 2012
8:26
2011 Reg Roundup: Hacking Hacks, Spying Apps And An End To Einstein?
» ‎ Packet Storm Security Headlines

2011 Reg Roundup: Hacking Hacks, Spying Apps And An End To Einstein?
Tags: hacks hacking spying reg-roundup roundup einstein

4:22
Patator – Multi Purpose Brute Forcing Tool
» ‎ Darknet

Patator is a multi-purpose brute-forcer, with a modular design and a flexible usage. Basically the author got tired of using Medusa, Hydra, ncrack, metasploit auxiliary modules, nmap NSE scripts and the like because: They either do not work or are not reliable (false negatives several times in the past) They are slow (not multi-threaded or [...]

Read the full post at darknet.org.uk

Tags: purpose patator multi read brute-forcer auxiliary-modules flexible-usage hacking Tools

December 28, 2011
21:38
[Paper] Bluetooth Hacking - Full Disclosure
» ‎ SecDocs

Authors: Adam Laurie Marcel Holtmann Martin Herfurt
Tags: bluetooth
Event: Black Hat EU 2005

Tags: hacking bluetooth paper martin-herfurt adam-laurie-marcel-holtmann marcel-holtmann adam-laurie full-disclosure
21:38
[Slides] Bluetooth Hacking - Full Disclosure
» ‎ SecDocs

Authors: Adam Laurie Marcel Holtmann Martin Herfurt
Tags: bluetooth
Event: Black Hat EU 2005

Tags: hacking full bluetooth martin-herfurt adam-laurie-marcel-holtmann marcel-holtmann adam-laurie full-disclosure
12:42
[Slides] Hacking in a Foreign Language: A Network Security Guide to Russia
» ‎ SecDocs

Authors: Kenneth Geers
Tags: network
Event: Black Hat EU 2005

Tags: hacking network foreign kenneth-geers russia geers black-hat security-guide
December 26, 2011
21:34
[Slides] Hacking Windows Internals
» ‎ SecDocs

Authors: Cesar Cerrudo
Tags: Windows exploiting
Event: Black Hat EU 2005

Tags: hacking internals windows cesar-cerrudo hacking-windows black-hat slides
21:34
[Slides] Hacking PGP
» ‎ SecDocs

Authors: Jon Callas
Tags: cryptography
Event: Black Hat EU 2005

Tags: authors hacking pgp jon-callas black-hat slides
December 22, 2011
21:53
[Slides] Google Hacking for Penetration Testers
» ‎ SecDocs

Authors: Johnny Long
Tags: intelligence
Event: Black Hat USA 2005

Tags: google penetration hacking johnny-long usa penetration-testers black-hat
December 21, 2011
21:30
[Slides] Hacking in a Foreign Language
» ‎ SecDocs

Authors: Kenneth Geers
Tags: hacking
Event: Black Hat USA 2005

Tags: language hacking foreign kenneth-geers usa geers black-hat foreign-language

December 20, 2011
11:31
Armitage - Hacking Made Easy Part 1
» ‎ Packet Storm Security Recent Files

This is a whitepaper called Armitage - Hacking Made Easy Part 1. It covers using the Armitage GUI for Metasploit when performing pentesting.
Tags: easy hacking armitage metasploit whitepaper

11:31
Armitage - Hacking Made Easy Part 1
» ‎ Packet Storm Security Misc. Files

This is a whitepaper called Armitage - Hacking Made Easy Part 1. It covers using the Armitage GUI for Metasploit when performing pentesting.
Tags: easy hacking armitage metasploit whitepaper

December 19, 2011
13:00
Bugtraq: Slides of our "Hacking IPv6 Networks" training at DEEPSEC 2011
» ‎ SecurityFocus Vulnerabilities

Slides of our "Hacking IPv6 Networks" training at DEEPSEC 2011
Tags: networks hacking ipv ipv6-networks slides

12:01
Hacking old server hardware for new home use
» ‎ Hack a Day

[Arnuschky] was looking for a network storage solution that included redundancy. He could have gone with a new NAS box, but didn’t want to shell out full price. Instead, he picked up a Dell PowerEdge 2800 and hacked it for SATA drives and quiet operation. It’s not surprising that this hardware can be had second-hand [...]
Tags: server hacking Hardware dell-poweredge dell-poweredge-2800 network-storage storage-solution pcs hacks

11:12
MySQLPasswordAuditor – Free MySQL Audit/Password Recovery & Cracking Tool
» ‎ Darknet

MysqlPasswordAuditor is the FREE Mysql password recovery and auditing software. Mysql is one of the popular and powerful database software used by most of the web based and server side applications. If you have ever lost or forgotten your Mysql database password then MysqlPasswordAuditor can help in recovering it easily. It can also help you [...]

Read the full post at darknet.org.uk

Tags: password mysqlpasswordauditor mysql read server-side-applications auditing-software mysql-password database hacking

December 17, 2011
5:38
[Slides] Hacking in a Foreign Language: A Network Security Guide to Russia (and Beyond)
» ‎ SecDocs

Authors: Kenneth Geers
Tags: malware cybercrime
Event: Black Hat Asia 2005

Tags: language hacking foreign kenneth-geers asia russia geers black-hat security-guide

December 09, 2011
14:59
Four Romanians Charged With Hacking 150 Subway Shops
» ‎ Packet Storm Security Headlines

Four Romanians Charged With Hacking 150 Subway Shops
Tags: romanians hacking charged subway

December 07, 2011
8:09
Hacking iOS Devices
» ‎ Packet Storm Security Recent Files

Whitepaper called Hacking Dispositivos iOS. It demonstrates how dangerous it is to be connected to a wireless network with an iOS device that has OpenSSH enabled. Written in Spanish.
Tags: ios hacking whitepaper wireless-network

8:09
Hacking iOS Devices
» ‎ Packet Storm Security Misc. Files

Whitepaper called Hacking Dispositivos iOS. It demonstrates how dangerous it is to be connected to a wireless network with an iOS device that has OpenSSH enabled. Written in Spanish.
Tags: ios hacking whitepaper wireless-network

December 01, 2011
8:50
The Mole – Automatic SQL Injection SQLi Exploitation Tool
» ‎ Darknet

The Mole is an automatic SQL Injection exploitation tool. Only by providing a vulnerable URL and a valid string on the site it can detect the injection and exploit it, either by using the union technique or a boolean query based technique. Features Support for injections using Mysql, SQL Server, Postgres and Oracle databases. Command [...]

Read the full post at darknet.org.uk

Tags: injection mole sql read oracle-databases sql-injection boolean-query database hacking

November 29, 2011
20:09
StoryBoard Quick 6 Stack Buffer Overflow
» ‎ Packet Storm Security Recent Files

StoryBoard Quick version 6 suffers from a file format stack buffer overflow. This was demonstrated at Ruxcon 2011 in the Hacking Hollywood talk. Included in this archive are the advisory, a proof of concept and a Metasploit module.
Tags: talk hacking ruxcon hollywood storyboard-quick stack-buffer buffer-overflow
17:46
Hacking Hollywood Presentation Slides
» ‎ Packet Storm Security Recent Files

These are the slides from the Hacking Hollywood presentation given at Ruxcon 2011. It documents vulnerabilities that the researcher discovered in various pieces of software in use by large Hollywood studios. Be sure to check out the related files for this presentation as there are multiple proof of concept exploits and advisories.
Tags: hacking presentation ruxcon hollywood presentation-slides proof-of-concept hollywood-studios

17:46
Hacking Hollywood Presentation Slides
» ‎ Packet Storm Security Misc. Files

These are the slides from the Hacking Hollywood presentation given at Ruxcon 2011. It documents vulnerabilities that the researcher discovered in various pieces of software in use by large Hollywood studios. Be sure to check out the related files for this presentation as there are multiple proof of concept exploits and advisories.
Tags: hacking presentation ruxcon hollywood presentation-slides proof-of-concept hollywood-studios

16:11
United Nations Agency 'Hacking Attack' Investigated
» ‎ Packet Storm Security Headlines

United Nations Agency 'Hacking Attack' Investigated
Tags: agency united hacking united-nations-agency united-nations

November 27, 2011
11:22
[Slides] Hacking Without Re-inventing the Wheel
» ‎ SecDocs

Authors: Justin Clarke Nitesh Dhanjani
Tags: hacking
Event: Black Hat USA 2004

Tags: wheel hacking re-inventing justin-clarke-nitesh usa nitesh-dhanjani justin-clarke black-hat

November 25, 2011
1:45
VoIP Hopper 2.01 Released – IP Phone VLAN Hopping Tool
» ‎ Darknet

VoIP Hopper is a GPLv3 licensed security tool, written in C, that rapidly runs a VLAN Hop into the Voice VLAN on specific ethernet switches. VoIP Hopper does this by mimicking the behavior of an IP Phone, in Cisco, Avaya, and Nortel environments. This requires two important steps in order for the tool to traverse [...]

Read the full post at darknet.org.uk

Tags: voip vlan hopper read ethernet-switches licensed-security security-tool hacking Tools

November 24, 2011
21:48
[Slides] One-Way SQL Hacking: Futility of Firewalls in Web Hacking
» ‎ SecDocs

Authors: Jacco van Tuijl
Tags: SQL injection
Event: Black Hat Windows Security 2002

Tags: one hacking sql one-way web-hacking security-2002 black-hat

November 23, 2011
0:30
X-Scan by XFocus – Basic Free Network Vulnerability Scanner
» ‎ Darknet

X-Scan is a general scanner for scanning network vulnerabilities for specific IP address range or stand-alone computer by multi-threading method, plug-ins are supported. This is an old tool (last update in 2005), but some people still find it useful and there are certain situations where it can be useful (especially in those jurassic companies...

Read the full post at darknet.org.uk

Tags: network scanner x-scan read network-vulnerability-scanner ip-address-range scanner-x hacking Tools

November 22, 2011
7:47
Oracle Web Hacking Part II
» ‎ Carnal0wnage

Part II of the articles based on my Hacking Oracle Web Applications talk was posted on EthicalHacker.net today. Head over there to check it out.

Oracle Web Hacking Part II

Oracle Web Hacking Part I
Tags: oracle hacking web oracle-web web-hacking web-application Pentesting

November 21, 2011
7:32
Inside The Mysterious US Satellite Hacking Case
» ‎ Packet Storm Security Headlines

Inside The Mysterious US Satellite Hacking Case
Tags: mysterious hacking satellite

6:15
sqlsus 0.7.1 Released – MySQL Injection & Takeover Tool
» ‎ Darknet

sqlsus is an open source MySQL injection and takeover tool, written in perl. Via a command line interface, you can retrieve the database(s) structure, inject your own SQL queries (even complex ones), download files from the web server, crawl the website for writable directories, upload and control a backdoor, clone the database(s), and much...

Read the full post at darknet.org.uk

Tags: injection takeover mysql read command-line-interface darknet backdoor database hacking

November 19, 2011
21:44
[Slides] Hacking Layer 2
» ‎ SecDocs

Authors: Sean Convery
Tags: network
Event: Black Hat USA 2002

Tags: authors hacking layer sean-convery usa convery black-hat slides

November 17, 2011
11:58
GoLISMERO – Web Application Mapping Tool
» ‎ Darknet

GoLISMERO helps you to map a web application, displaying the results in a readable format for security auditors and also prepares the results for integration with other web hacking tools as w3af, wfuzz, netcat, nikto, etc. Features Map a web aplication. Show all links and forms params as confortable format. Save results with some formats: [...]

Read the full post at darknet.org.uk

Tags: application web golismero read security-auditors web-hacking mapping-tool hacking Tools

November 14, 2011
22:03
US Anti-Hacking Law Turns Computer Users Into Criminals
» ‎ Packet Storm Security Headlines

US Anti-Hacking Law Turns Computer Users Into Criminals
Tags: anti law hacking computer-users criminals

14:00
Bugtraq: [Announcement] ClubHack 2011 Hacking and Security Conference
» ‎ SecurityFocus Vulnerabilities

[Announcement] ClubHack 2011 Hacking and Security Conference
Tags: announcement hacking clubhack conference-announcement security-conference

9:37
w3af v1.1 Released For Download – Web Application Attack & Audit Framework
» ‎ Darknet

w3af is a Web Application Attack and Audit Framework. The project’s goal is to create a framework to find and exploit web application vulnerabilities that is easy to use and extend. The w3af core and it’s plugins are fully written in python. The project has more than 130 plugins, which check for SQL injection, cross [...]

Read the full post at darknet.org.uk

Tags: framework application web read audit-framework darknet web-application database hacking

November 10, 2011
21:41
[Slides] Web Hacking Part 1 & 2
» ‎ SecDocs

Authors: Saumil Shah
Tags: web application
Event: Black Hat Windows Security 2001

Tags: part hacking web shah-tags web-hacking security-2001 black-hat
21:41
[Slides] Web Hacking Part 1 Hacking Exposed: E-commerce
» ‎ SecDocs

Authors: Saumil Shah
Tags: web application
Event: Black Hat Windows Security 2001

Tags: part hacking web shah-tags web-hacking security-2001 black-hat

7:46
Phone Hacking: James Murdoch Accuses Myler And Crone
» ‎ Packet Storm Security Headlines

Phone Hacking: James Murdoch Accuses Myler And Crone
Tags: and myler hacking james-murdoch-accuses james-murdoch phone-hacking

November 09, 2011
10:01
Hacking a VS200 Food Sealer
» ‎ Hack a Day

This food sealer just wasn’t cutting it for [Tinkering Engineer], so he decided to do something about it. The issue with this sealer was that it didn’t have a mode where it could simply seal bags without pulling a vacuum on it. Going through the whole process takes a reported 40 seconds in order to [...]
Tags: hacking food sealer food-sealer vacuum engineer cooking hacks

November 07, 2011
21:30
[Slides] Web Hacking
» ‎ SecDocs

Authors: Saumil Shah
Tags: web application
Event: Black Hat Asia 2001

Tags: authors hacking web shah-tags asia web-hacking black-hat web-application

7:39
Hacking Embedded Devices For Fun And Profit
» ‎ Packet Storm Security Exploits

These are slides from a talk called Hacking Embedded Devices for Fun and Profit. It uses Sky Broadband as a case study.
Tags: hacking profit fun sky-broadband case-study slides broadband

7:39
Hacking Embedded Devices For Fun And Profit
» ‎ Packet Storm Security Recent Files

These are slides from a talk called Hacking Embedded Devices for Fun and Profit. It uses Sky Broadband as a case study.
Tags: hacking profit fun sky-broadband case-study slides broadband

7:39
Hacking Embedded Devices For Fun And Profit
» ‎ Packet Storm Security Misc. Files

These are slides from a talk called Hacking Embedded Devices for Fun and Profit. It uses Sky Broadband as a case study.
Tags: hacking profit fun sky-broadband case-study slides broadband

5:10
Hacking a “magic wand” to remotely control light displays
» ‎ Hack a Day

Hackaday reader [Kieran] volunteers at an outdoor haunted house attraction called the “Disenchanted Forest”. Attendees are lead through the haunted forest by a volunteer, who helps keep everyone on the predetermined trail. The trail is usually lit by small LED fixtures that the group constructed, but the organizers wanted to make the lights more interactive [...]
Tags: hacking trail forest kieran magic-wand disenchanted-forest haunted-forest arduino hacks

November 01, 2011
9:45
DirBuster – Brute Force Directories & Files Names
» ‎ Darknet

DirBuster is another great tool from the OWASP chaps, it’s basically a multi threaded java application designed to brute force directories and files names on web/application servers. Often is the case now of what looks like a web server in a state of default installation is actually not, and has pages and applications hidden within. [...]

Read the full post at darknet.org.uk

Tags: dirbuster application force read web-application-servers files-names darknet hacking Tools

October 31, 2011
22:48
[Slides] How We Beat the 5th Argus Hacking Contest
» ‎ SecDocs

Tags: kernel
Event: Black Hat EU 2001

Tags: argus hacking beat black-hat kernel
October 30, 2011
22:54
[Slides] One-Way SQL Hacking
» ‎ SecDocs

Authors: Saumil Shah
Tags: web application SQL injection
Event: Black Hat EU 2001

Tags: one hacking sql shah-tags one-way black-hat web-application slides

October 28, 2011
7:40
Suspected US Satellite Hacking Attacks: Reaction
» ‎ Packet Storm Security Headlines

Suspected US Satellite Hacking Attacks: Reaction
Tags: suspected hacking satellite
October 26, 2011
18:44
Swedish Password Hacking Scandal Widens
» ‎ Packet Storm Security Headlines

Swedish Password Hacking Scandal Widens
Tags: swedish hacking password scandal

October 22, 2011
11:01
Hacking in Cameroon for profit and entertainment
» ‎ Hack a Day

[Bill Zimmerman] is in Cameroon and has been posting some really interesting articles about life in the central African nation. It comes as no surprise that imported goods can be prohibitively expensive for many of the country’s residents, so building tools and goods is way to improve life and save money. The image above is [...]
Tags: hacking life profit bill-zimmerman central-african cameroon central-african-nation interesting-articles misc hacks

October 17, 2011
15:46
US Military Debated Hacking Libyan Air Defenses
» ‎ Packet Storm Security Headlines

US Military Debated Hacking Libyan Air Defenses
Tags: debated military hacking libyan-air air-defenses

October 12, 2011
7:25
Hacking WebLogic
» ‎ Packet Storm Security Recent Files

Whitepaper called Hacking WebLogic. It gives a brief overview of how to hack a default WebLogic server using a web browser.
Tags: hacking weblogic whitepaper web-browser

7:25
Hacking WebLogic
» ‎ Packet Storm Security Misc. Files

Whitepaper called Hacking WebLogic. It gives a brief overview of how to hack a default WebLogic server using a web browser.
Tags: hacking weblogic whitepaper web-browser

October 06, 2011
1:48
[Slides] International Hacking: When The Cooperation is The Only Cure
» ‎ SecDocs

Authors: Dario Forte
Tags: hacking
Event: Black Hat USA 2003

Tags: international hacking cooperation usa black-hat slides

October 04, 2011
9:27
MagicTree v1.0 Released – Productivity Tool For Penetration Testers
» ‎ Darknet

We wrote about MagicTree back in January of this year when it was first launched – MagicTree – Penetration Tester Productivity Tool . It’s come quite a long way and the authors are happy to announce that MagicTree version 1.0 has been released and is available for download. MagicTree is a productivity tool for penetration [...]

Read the full post at darknet.org.uk

Tags: productivity tool magictree read penetration-testers productivity-tool darknet General hacking

October 02, 2011
9:10
Hacking Your Droid
» ‎ Packet Storm Security Recent Files

This is a set of slides from the talk Hacking Your Droid - Android Malwares.
Tags: droid hacking set slides

9:10
Hacking Your Droid
» ‎ Packet Storm Security Misc. Files

This is a set of slides from the talk Hacking Your Droid - Android Malwares.
Tags: droid hacking set slides

September 29, 2011
13:30
Multi Threaded TCP Port Scanner For Linux & Windows
» ‎ Darknet

This tool is exactly what it says, it’s a Multi Threaded TCP Port Scanner with possibility to scan 65535 TCP ports on an IP address. You can specify how many threads to run and the timeout. It will tell you the MAC address of the target and the service running – works on both Linux [...]

Read the full post at darknet.org.uk

Tags: tcp threaded multi mac read port-scanner tcp-ports linux-windows hacking Tools

10:04
Hacking your car’s multifunction display
» ‎ Hack a Day

[Steve] has an older third generation VW Golf, and as those who have owned one surely know, the beloved VR6 engine is wonderful but finicky. He says that the VR6 is particularly picky when it comes to oil temperature, so his daily routine involves hitting the MFA switch five times upon starting his car to [...]
Tags: multifunction hacking car steve vr6-engine oil-temperature daily-routine attiny hacks

September 28, 2011
15:02
Hacking Your Droid
» ‎ Packet Storm Security Recent Files

A whitepaper on the basics of Android and reverse engineering of Android applications.
Tags: droid hacking android reverse-engineering whitepaper

15:02
Hacking Your Droid
» ‎ Packet Storm Security Misc. Files

A whitepaper on the basics of Android and reverse engineering of Android applications.
Tags: droid hacking android reverse-engineering whitepaper

September 26, 2011
23:02
MySQL.com Compromised & Spreading Malware
» ‎ Darknet

The latest story doing the rounds is that MySQL.com got hacked and was serving malware which put it on the Google malware block list. It appears to be in the clear now though and it’s accessible again via Google. It seems to be a similar case with that of the recent Linux.com and Kernel.org hacks [...]

Read the full post at darknet.org.uk

Tags: malware com mysql read doing-the-rounds darknet google database hacking

September 18, 2011
23:20
Google Hacking para Pentesters
» ‎ Packet Storm Security Recent Files

Whitepaper called Google Hacking para Pentesters - Mas que una busqueda, un conducto de intrusion. Written in Spanish.
Tags: google pentesters hacking whitepaper intrusion

23:20
Google Hacking para Pentesters
» ‎ Packet Storm Security Misc. Files

Whitepaper called Google Hacking para Pentesters - Mas que una busqueda, un conducto de intrusion. Written in Spanish.
Tags: google pentesters hacking whitepaper intrusion

September 16, 2011
10:22
Hacking Wifi Networks On Windows
» ‎ Packet Storm Security Recent Files

This is an e-book called Hacking Wifi Networks On Windows. It primarily focuses on cracking WEP.
Tags: wifi networks hacking e-book

10:22
Hacking Wifi Networks On Windows
» ‎ Packet Storm Security Misc. Files

This is an e-book called Hacking Wifi Networks On Windows. It primarily focuses on cracking WEP.
Tags: wifi networks hacking e-book

2:38
Coliseum Lab By eLearnSecurity – Web Application Security Lab
» ‎ Darknet

Coliseum Labs is a revolutionary new product by eLearnSecurity, it’s a 100% practical training device for people wanting to learn more about penetration testing. Basically Coliseum is a framework which allows students to learn web application security through 100% practical hands on training. With the specially crafted web applications ready...

Read the full post at darknet.org.uk

Tags: lab coliseum web read web-application-security security-lab darknet General hacking
September 15, 2011
9:25
Lilith – Web Application Security Audit Tool
» ‎ Darknet

LiLith is a tool written in Perl to audit web applications. This tool analyses webpages and looks for html form tags , which often refer to dynamic pages that might be subject to SQL injection or other flaws. It works as an ordinary spider and analyses pages, following hyperlinks, injecting special characters that have a [...]

Read the full post at darknet.org.uk

Tags: application web tool lilith read web-application-security audit-tool darknet hacking Tools
September 14, 2011
9:33
WAVSEP – Web Application Vulnerability Scanner Evaluation Project
» ‎ Darknet

The author of WAVSEP (Shay Chen) e-mailed quite some time back about this project, but I have to say I honestly didn’t have time to look at it back then. It popped back up on my radar again when it was mentioned by the author of – Arachni v0.3 – his tool did extremely well [...]

Read the full post at darknet.org.uk

Tags: project wavsep author shay-chen read scanner-evaluation vulnerability-scanner darknet web hacking
August 29, 2011
2:51
WebSurgery – Web Application Security Testing Suite
» ‎ Darknet

WebSurgery is a suite of tools for security testing of web applications. It was designed for security auditors to help them with the web application planning and exploitation. Currently, it uses an efficient, fast and stable Web Crawler, File/Dir Brute forcer, Fuzzer for advanced exploitation of known and unusual vulnerabilities such as SQL...

Read the full post at darknet.org.uk

Tags: websurgery web security read web-application-security security-auditors hacking Tools

August 26, 2011
14:45
Hacking [Steve Jobs]: A retrospective
» ‎ Hack a Day

Provided you haven’t been toiling away in a secret lair somewhere (we’re looking at you [Jack]), odds are you may have seen the news that [Steve Jobs] stepped down as CEO of Apple this past Wednesday. This earth-shattering news even eclipsed that of the East Coast Megaquakeapocalypse. It sent the blogosphere into a tizzy, [...]
Tags: hacking news retrospective steve-jobs apple jack east-coast secret-lair ceo-of-apple iphone hacks

August 24, 2011
9:33
Stealing ATM Pin Numbers Using Thermal Imaging Cameras
» ‎ Darknet

Now this is a really neat bit of hardware hacking, it’s been a while since we’ve reported on any kind of ATM Skimming or ATM Hacking stories. You may remember back in November 2010 – European Banks Seeing New Wave Of ATM Skimming or way back in 2008 when Pro ATM Hacker ‘Chao’ Gives Out [...]

Read the full post at darknet.org.uk

Tags: atm stealing skimming read atm-skimming thermal-imaging-cameras european-banks Hardware hacking
August 22, 2011
7:04
Arachni v3.0 Released – Web Application Security Scanner Framework
» ‎ Darknet

It’s been a while since we last mentioned Arachni, it was back in February – Arachni v0.2.2.1 – Web Application Security Scanner Framework. For those who are not aware, Arachni is a fully automated system which tries to enforce the fire and forget principle. As soon as a scan is started it will not bother [...]

Read the full post at darknet.org.uk

Tags: arachni application web read web-application-security security-scanner darknet hacking Tools

4:04
Hacking A2DP support into an old car stereo
» ‎ Hack a Day

[Roofus] had an older car, and unfortunately his stereo’s cassette player just wasn’t doing it for him. He always wanted to simply get into his car, pull out his cell phone, and have his music ready to play without any fuss. After messing around with all sorts of different tape adapters, he got fed up [...]
Tags: stereo hacking car roofus cassette-player car-stereo cellphones hacks

August 18, 2011
0:55
Hacking Spree Uncovered By $5 Purchase At McDonald's
» ‎ Packet Storm Security Headlines

Hacking Spree Uncovered By $5 Purchase At McDonald's
Tags: spree uncovered hacking mcdonald
August 17, 2011
7:22
Facebook Hacking Case: 25 Year Old Bailed
» ‎ Packet Storm Security Headlines

Facebook Hacking Case: 25 Year Old Bailed
Tags: facebook case hacking

August 09, 2011
8:06
Hacking QR codes for fun and profit
» ‎ Hack a Day

QR codes are everywhere these days, from being printed onto receipts to chiseled into granite tombstones. [Will] came up with a way to modify existing QR codes, and his hack has the potential to cause quite a bit of harmless mischief. [Will]‘s hack involves a little photo editing, transparency film, and some white-out/Liquid Paper/Tippex. After the ‘target’ [...]
Tags: fun hacking profit harmless-mischief transparency-film target cellphones hacks

August 05, 2011
10:52
Introduction To Hacking Basics
» ‎ Packet Storm Security Recent Files

Whitepaper called Introduction To Hacking Basics. Written in Indonesian.
Tags: hacking introduction basics

10:52
Introduction To Hacking Basics
» ‎ Packet Storm Security Misc. Files

Whitepaper called Introduction To Hacking Basics. Written in Indonesian.
Tags: hacking introduction basics

8:50
Shady RAT Hacking Attacks Should Neither Surprise Nor Shock
» ‎ Packet Storm Security Headlines

Shady RAT Hacking Attacks Should Neither Surprise Nor Shock
Tags: rat shady hacking

2:41
Websecurify – Integrated Web Security Testing Environment
» ‎ Darknet

Websecurify is an integrated web security testing environment, which can be used to identify web vulnerabilities by using advanced browser automation, discovery and fuzzing technologies. The platform is designed to perform automated as well as manual vulnerability tests and it is constantly improved and fine-tuned by a team of world class web...

Read the full post at darknet.org.uk

Tags: websecurify web security read world-class-web vulnerability-tests darknet hacking Tools

July 26, 2011
15:56
Hacking IPv6 Networks
» ‎ Packet Storm Security Recent Files

This file contains slides for the "Hacking IPv6 Networks" training provided at Hack in Paris 2011. They contain quite a few insights about IPv6 security, along with a number of practical examples.
Tags: networks hacking ipv paris ipv6-networks hack slides

15:56
Hacking IPv6 Networks
» ‎ Packet Storm Security Misc. Files

This file contains slides for the "Hacking IPv6 Networks" training provided at Hack in Paris 2011. They contain quite a few insights about IPv6 security, along with a number of practical examples.
Tags: networks hacking ipv paris ipv6-networks hack slides

7:13
Hacking Scandal Starts To Spread Beyond News Corp
» ‎ Packet Storm Security Headlines

Hacking Scandal Starts To Spread Beyond News Corp
Tags: hacking starts scandal news-corp

0:44
NfSpy – ID-spoofing NFS Client – Falsify NFS Credentials
» ‎ Darknet

NfSpy is a FUSE filesystem written in Python that automatically changes UID and GID to give you full access to any file on an NFS share. Use it to mount an NFS export and act as the owner of every file and directory. Vulnerability Exploited NFS before version 4 is reliant upon host trust relationships [...]

Read the full post at darknet.org.uk

Tags: nfspy nfs file read nfs-export trust-relationships darknet hacking Tools

July 24, 2011
15:30
Hacking 14 year old Power PC Mac back to life
» ‎ Hack a Day

For a while now I have been battling a dying 2.6Ghz dual core computer, but due to laziness and budget I just let it ride. At first it would occasionally crash in games, then it got to where it would crash during routine activities. After a year of this it would nail 105 degrees C [...]
Tags: year hacking power pc-mac core-computer routine-activities dual-core macs hacks

July 23, 2011
6:45
Phone Hacking Scandal Engulfs Sunday Mirror
» ‎ Packet Storm Security Headlines

Phone Hacking Scandal Engulfs Sunday Mirror
Tags: hacking scandal phone sunday-mirror phone-hacking

July 20, 2011
3:50
Hacking your MacBook Air restore drive to install OSX Lion
» ‎ Hack a Day

[Josh Wright] wrote in with a handy little hack just in time for today’s release of Mac OSX Lion. If you’re not familiar with the new version of the OS, Apple has decided to change things up this time around, completely eliminating physical distribution media. In the event that you need to run a factory [...]
Tags: hacking lion time josh-wright mac-osx physical-distribution distribution-media macs hacks

July 15, 2011
6:37
Rebekah Brooks Quits Over UK Hacking
» ‎ Packet Storm Security Headlines

Rebekah Brooks Quits Over UK Hacking
Tags: hacking quits rebekah-brooks rebekah brooks

2:13
Mantra Security Toolkit 0.6.1 Released – Browser Based Hacking Framework
» ‎ Darknet

Mantra is a collection of free and open source tools integrated into a web browser, which can become handy for students, penetration testers, web application developers,security professionals etc. It is portable, ready-to-run, compact and follows the true spirit of free and open source software. The software is intended to be lite, flexible,...

Read the full post at darknet.org.uk

Tags: mantra browser security read web-application-developers open-source-tools penetration-testers hacking Tools

July 13, 2011
16:58
Vodafone Phone Hacking Scandal
» ‎ Packet Storm Security Exploits

THC (The Hacker's Choice) has been able to turn a Femto Cell into a full blown 3G/UMTC/WCDMA interception device.
Tags: hacking vodafone phone phone-hacking thc

16:58
Vodafone Phone Hacking Scandal
» ‎ Packet Storm Security Recent Files

THC (The Hacker's Choice) has been able to turn a Femto Cell into a full blown 3G/UMTC/WCDMA interception device.
Tags: hacking vodafone phone phone-hacking thc

16:58
Vodafone Phone Hacking Scandal
» ‎ Packet Storm Security Misc. Files

THC (The Hacker's Choice) has been able to turn a Femto Cell into a full blown 3G/UMTC/WCDMA interception device.
Tags: hacking vodafone phone phone-hacking thc

July 12, 2011
2:30
WPScan – WordPress Security/Vulnerability Scanner
» ‎ Darknet

WPScan is a vulnerability scanner which checks the security of WordPress installations using a black box approach (scanning without any prior knowledge of what has been installed etc). Features Username enumeration (from author querystring and location header) Weak password cracking (multithreaded) Version enumeration (from generator meta tag)...

Read the full post at darknet.org.uk

Tags: wordpress wpscan security read vulnerability-scanner security-vulnerability box-approach hacking Tools

July 07, 2011
17:58
News Of The World To Close Amid Hacking Scandal
» ‎ Packet Storm Security Headlines

News Of The World To Close Amid Hacking Scandal
Tags: world hacking close news-of-the-world scandal

16:04
[Paper] Hacking Databases for Owning Your Data
» ‎ SecDocs

Authors: Cesar Cerrudo Esteban Martínez Fayó
Tags: database SQL injection
Event: Black Hat Europe 2007

Tags: hacking databases paper cesar-cerrudo esteban-martnez europe hat-europe database-sql black-hat
16:04
[Slides] Hacking Databases for Owning Your Data
» ‎ SecDocs

Authors: Cesar Cerrudo Esteban Martínez Fayó
Tags: database SQL injection
Event: Black Hat Europe 2007

Tags: hacking data databases cesar-cerrudo esteban-martnez europe hat-europe database-sql black-hat

July 05, 2011
6:22
Vega – Open Source Cross Platform Web-Application Security Assessment Platform
» ‎ Darknet

Vega is an open source platform to test the security of web applications. Vega can help you find and validate SQL Injections, Cross-Site Scripting (XSS), inadvertently disclosed sensitive information, and other vulnerabilities. It is written in Java, GUI based, and runs on Linux, OS X, and Windows. Vega includes an automated scanner for quick...

Read the full post at darknet.org.uk

Tags: platform web source vega read web-application-security-assessment open-source-platform web-application-security hacking Tools
July 01, 2011
1:49
sslsniff v0.7 – SSL Man-In-The-Middle (MITM) Tool
» ‎ Darknet

It’s been a while since the last sslsniff release back in August 2009 with version 0.6 – sslsniff v0.6 Released – SSL MITM Tool. Version 0.7 was finally released earlier in the year in April – so here it is. This tool was originally written to demonstrate and exploit IE’s vulnerability to a specific...

Read the full post at darknet.org.uk

Tags: mitm ssl tool read tool-version darknet hacking Tools
June 27, 2011
11:07
Last Chance To Get 10% Off Penetration Testing – Student Course
» ‎ Darknet

A couple of weeks back we posted about the new course suited to beginners by eLearnSecurity – we also offered an exclusive 10% Discount for Darknet readers – Penetration Testing – Student Course/Training by eLearnSecurity (Get 10% Off Until June 30th!). This is just a reminder that this offer expires in THREE days on June [...]

Read the full post at darknet.org.uk

Tags: testing penetration course read last-chance darknet General hacking

June 26, 2011
0:55
Lawyer: Teenage UK Hacking Suspect Is Autistic
» ‎ Packet Storm Security Headlines

Lawyer: Teenage UK Hacking Suspect Is Autistic
Tags: lawyer teenage hacking

June 23, 2011
8:38
Restricted Citrix Excel Application Escapes
» ‎ Carnal0wnage
SynJunkie has a couple good posts on citrix escapes:

http://synjunkie.blogspot.com/search/label/Citrix

and of course iKat

http://ikat.ha.cked.net/

So recently I had to break out of restricted citrix environment. All I had was Excel 2010 and Word 2010.

I also didnt have a fancy "jump to url" option when I clicked on the title bar and none of the hot keys were working for me. So goal was to get a web broswer or cmd shell.

I was able to create macros though. So first I added the developers ribbon.

Click the visual basic button, and paste in some sweet macro code.

Then you save the file as macro enabled workbook.

Once its saved, you can hit the macro button and run your macro.

and get shell

** To be clear all of this is running remotely on the citrix host.**
The macro code
```
Sub GETSHELL()
'execute EXE file
Shell "CMD /K C:\windows\system32\cmd.exe", vbNormalFocus
End Sub
```
You could also just type a url into excel...

and click it..But that's pretty low tech and not much fun :-)
Again this IE browser is running remotely on the citrix host. From here you can client-side exploit yourself...i.e. java applet exloit... to get your outbound shell.

Tags: citrix cmd macro k-c web-broswer macro-button macro-code hacking

June 21, 2011
12:13
Teenager Arrested In Essex Over LulzSec Hacking Attacks
» ‎ Packet Storm Security Headlines

Teenager Arrested In Essex Over LulzSec Hacking Attacks
Tags: lulzsec teenager hacking essex

June 20, 2011
10:46
Zed Attack Proxy – ZAProxy v1.3.0 Released – Integrated Penetration Testing Tool
» ‎ Darknet

It’s been a while since the last time we wrote about the OWASP ZAP – Zed Attack Proxy for Web Application Penetration Testing, back in October 2010. ZAP is an easy to use integrated penetration testing tool for finding vulnerabilities in web applications. It is designed to be used by people with a wide range [...]

Read the full post at darknet.org.uk

Tags: testing penetration proxy read zed-attack owasp testing-tool darknet hacking Tools
June 15, 2011
1:54
Skipfish 1.94b Released – Active Web Application Security Reconnaissance Tool
» ‎ Darknet

It’s been a while since we last mentioned Skipfish, it was back in March 2010 when they first came out. Skipfish is an active web application security reconnaissance tool. It prepares an interactive sitemap for the targeted site by carrying out a recursive crawl and dictionary-based probes. The resulting map is then annotated with the [...]

Read the full post at darknet.org.uk

Tags: application web skipfish read web-application-security interactive-sitemap darknet hacking Tools

June 12, 2011
13:01
Hacking cakes with LEDs, the sequel!
» ‎ Hack a Day

A few weeks back we ran a piece about the convergence of making and baking in an attempt to create a cake festooned with working LEDs. The moral was that not every creative idea ends in victory, but we applauded the spirit it takes to post one’s goofs for the whole internet to see and [...]
Tags: sequel hacking leds creative-idea goofs convergence arduino hacks
June 09, 2011
10:12
Hacking into your router’s administrative interface
» ‎ Hack a Day

[Arto] recently upgraded his home Internet subscription from an ADSL to VDSL, and with that change received a shiny new ZTE ZXDSL 931WII modem/wireless router. Once he had it installed, he started to go about his normal routine of changing the administrator password, setting up port forwarding, and configuring the wireless security settings…or at least [...]
Tags: interface hacking router zte-zxdsl modem-wireless administrative-interface Hardware

2:35
Penetration Testing – Student Course/Training by eLearnSecurity (Get 10% Off Until June 30th!)
» ‎ Darknet

Introduction You may remember a while back we reviewed the Penetration Testing – Pro course by eLearnSecurity here – eLearnSecurity – Online Penetration Testing Training and we posted about the course update here – Penetration Testing Course Pro 1.1 – New Version & New Module. The latest news is they’ve come out with a...

Read the full post at darknet.org.uk

Tags: testing penetration course read darknet org-uk General hacking
June 08, 2011
4:00
Burp Suite Free Edition v1.4 – Web Application Security Testing Tool
» ‎ Darknet

We love Burp Suite and we have since wayyyy back, the last update we posted was around 18 months ago back in January 2010 – Burp Suite v1.3 Released – Integrated Platform For Attacking Web Applications. For the two people here who don’t know what this tool does, Burp Suite is an integrated platform for [...]

Read the full post at darknet.org.uk

Tags: suite web burp read web-application-security edition-v1 suite-v1 hacking Tools

Skip to page: 1 2

jetlib.sec » Tags » hacking

Feeds

492 items tagged "hacking"

Tags: windows hacking

Tags: hacking Tools

Tags: Hardware hacking

Tags: networking hacking

Tags: hacking Tools

Tags: hacking news

Tags: hacking Tools

Tags: hacking Tools

Tags: hacking Tools

Tags: hacking Tools

Tags: hacking Tools

Tags: Wireless hacking

Tags: Wireless hacking

Tags: hacking Tools

Tags: Hardware hacking

Tags: hacking news

Tags: hacking Tools

Tags: hacking Tools

Tags: hacking Tools

Tags: hacking Tools

Tags: networking hacking

Tags: hacking Tools

Tags: hacking Tools

Tags: hacking Tools

Tags: hacking Tools

Tags: hacking Tools

Tags: hacking Tools

Tags: hacking Tools

Tags: hacking news

Tags: hacking Tools

Tags: hacking news

Tags: hacking Tools

Tags: hacking Tools

Tags: hacking news

Tags: hacking Tools

Tags: hacking Tools

Tags: hacking news

Tags: hacking Tools

Tags: hacking Tools

Tags: hacking Tools

Tags: hacking Tools

Tags: hacking news

Tags: newbies hacking windows hacking-microsoft whitepaper microsoft-windows

Tags: newbies hacking windows hacking-microsoft whitepaper microsoft-windows

Tags: audio hacking train stephen-cobb

Tags: exploithub hacking bazaar

Tags: raspberry hacking commando commando-style sd-card raspberry

Tags: audio hacking party stephen-cobb

Tags: vista hacking windows dan-griffin-tags security-authors hacking-windows griffin

Tags: global hacking network syria internet-war

Tags: hacking panel told k-upgrade

Tags: skin bodybugg hacking galvanic-skin-response sensor-package skin-temperature security hacks

Tags: rfidiots hacking rfid adam-laurie-tags adam-laurie patent-attorney soldering-iron

Tags: nmap authors hacking fyodor-tags fyodor slides

Tags: errors revenue hacking director-steps haley-admits

Tags: audio european hacking

Tags: audio talk hacking mark-lottor mark-will cellular-phones

Tags: hacking internals windows cesar-cerrudo hacking-windows slides

Tags: global hacking end 1-billion attempts

Tags: hacking iphone ipad slides

Tags: threat attack hacking

Tags: inventory hacking researchers supermarkets

Tags: hdmi hacking displays andy-davis-tags andy-davis slides

Tags: video hacking information nils-magnus-tags chaos-communication-congress edge-techniques presenation

Tags: audio hacking information nils-magnus-tags chaos-communication-congress edge-techniques presenation

Tags: facebook value hacking bengrosser high-score social-interactions firefox hacks

Tags: hacking cans beer beer-cans trade-show-booth arduino hacks

Tags: server enumeration sorrow read target-server darknet tool-web hacking Tools

Tags: audio hacking linux stefan-arentz network-storage-servers chaos-communication-congress satellite-decoders

Tags: while hackers phishing read military-network darknet google General hacking

Tags: hacking android fun google whitepaper

Tags: hacking android fun google whitepaper

Tags: hacking pool ball floating-pool-light neat-effects different-colors Ask hackaday