So, most all of us know the case about Google Street View cars recording a lot of data that was there for the taking floating around all of our neighborhoods, as they drove up and down all the streets to get … Continue reading
Today, I am going to talk about a wonderful tool called Scapy. This tool enables the user to capture, build and send packets out into a network crafted to their own specifications. There are many possibilities when using such a … Continue reading
Introduction WhatWeb identifies websites. Its goal is to answer the question, “What is that Website?”. WhatWeb recognizes web technologies including content management systems (CMS), blogging platforms, statistic/analytics packages, JavaScript libraries, web servers, and embedded devices. WhatWeb has over 900 plugins, … Continue reading
Today, we are going to take a $40 computer and make a hack-machine out of it! Materials Needed Raspberry Pi Computer: I cannot believe how great the Raspberry Pi computer is! It is truly Ridiculous! This little $40 circuit board … Continue reading
Prerequisite: Your Galaxy S4 must be Rooted! This will enable the internal system wifi tethering on your settings menu. This is for Samsung Galaxy S4 on Sprint. Do at your own risk. You are about to replace your Services Jar … Continue reading
What happens when you double-click on a BAT file? Or, you run the BAT file from your commandeered cmd prompt? It pops up and runs! Now, we can’t be having the user see this, can we? A hacker also sometimes … Continue reading
Hypertext transfer protocol (HTTP) is the core communications protocol used to access the World Wide Web and is used by all of today’s web applications. It is a simple protocol that was originally developed for retrieving static text-based resources. It has since been … Continue reading
INTRODUCTION If you want to gather information about a target’s DNS, you should probably use a tool like dnsdict6 to help you to enumerate many of the details which are not easily apparent for your average user or websurfer. With dnsdict6 you … Continue reading
Introduction This is a Web Application Firewall Detection Tool. The tool was written by – Sandro Gauci And G. Henrique. It will help you detect the WAF ( Web Application Firewall ) behind the any domain. Wiffit (Wafw00f ) can … Continue reading
Veil is an awesome tool developed by Chris Truncer @ChrisTruncer, Mike Wright @TheMightyShiv and The Grayhound @the_grayhound specifically designed for Kali Linux with the goal of: Bypass common AV solutions used. Get the payloads from Metasploit framework, and get the … Continue reading
LazyKali is an awesome script written in bash shell. It can automate the whole update and install new tools in your hack repository. As the name suggests, you can get all the updates on Kali Linux and your repositories in … Continue reading
“KARMA is a set of tools for assessing the security of wireless clients at multiple layers. Wireless sniffing tools discover clients and their preferred/trusted networks by passively listening for 802.11 Probe Request frames. From there, individual clients can be targeted … Continue reading
Before we start hacking, let’s familiarize ourselves with Metasploit so that when I use certain terms, we all understand them to mean the same thing. When first looking at the Metasploit Framework, it can be a bit overwhelming with the … Continue reading
The WiFi Pineapple Mark V is the latest generation wireless network auditing tool from Hak5. With its custom, purpose built hardware and software, the WiFi Pineapple enable users to quickly and easily deploy advanced attacks using our intuitive web interface. … Continue reading
While web servers, database servers, and file servers have garnered increased protection, the client-side remains extremely vulnerable, and there is much to teach. This time, we’ll look at inserting a listener (rootkit) inside a PDF file, exploiting a vulnerability in … Continue reading
As web server and OS’s have become hardened and living behind significant perimeter defenses, hackers have migrated to the easiest route to the pot of gold. This is through the often unpatched, unhardened client-side system with little in the way … Continue reading
Once again, a Microsoft operating system has a new zero-day exploit. That should not come as any earth-shattering news, since Microsoft’s Windows operating system has had numerous vulnerabilities and exploits over the years, exposing all of us that use their … Continue reading
One of the most time-consuming, but necessary, activities in hacking is reconnaissance. Before we can hack a system, we need to know what operating system it’s running, what ports are open, what services are running, and hopefully, what applications are … Continue reading
Many of you have probably heard of a man-in-the-middle attack and wondered how difficult an attack like that would be. For those of you who’ve never heard of one, it’s simply where we, the hacker, place ourselves between the target … Continue reading
The database is the hacker’s “pot-of-gold,” as it contains information that is very valuable to both the business and the hacker. In this, the second of my series on hacking databases, we’re on the “hunt” for Microsoft’s SQL Server. Although … Continue reading
