Get Premium Account

Hacking websites through Kali Linux
Attention! Information for research, training, or auditing. Use for mercenary purposes is punishable by law. And also it is the author's theme!

Chntpw: Reset and bypass the Windows password
chntpw is a utility for viewing some information and changing user passwords in the Windows NT/2000, XP, Vista, 7 SAM user database file, usually located in \WINDOWS\system32\config\SAM in the Windows file system. In Kali Linux, it is already installed natively.

TheFatRat: Massive Exploit Tool
Thefatrat is a massive tool that allows you to bypass most antivirus programs.

A simple tool for creating a backdoor to bypass AV and an easy tool for a post-exploitation attack, such as a browser attack, DLL.

This tool compiles malware with a popular payload, and then the compiled malware can be run on Windows, Android, Mac.

How to bypass the restriction of Internet distribution, change the TTL
It will be about how to distribute unlimited Internet (MTS Unlimited, for example).

I think it's a long time to explain what TTL is, you don't need to, who is interested, you can Google it like that.

Creating malicious QR codes to hack phones and other devices
Installing QRGen
First we need to download the repository from github.

Hacking routers and finding their location
Keep in mind, illegal entry is punishable by law.The channel is not responsible

First we need the RouterScan program:

Fsociety - framework for hacker
Greetings, dear reader! Today we will talk about the Fsociety framework. This framework contains all the tools used in the notorious Mr. Robot series. The framework structure consists of a huge set of tools for conducting penetration testing sorted by categories from information collection to post-operation. The advantage of Fsociety is that it can be run on Windows, Linux and Android. For the framework to work, you need to have Python 2.7.

How mobile operators analyze our data
Mobile operators receive a lot of data and metadata, from which you can learn a lot about the life of a single subscriber. And having understood how this data is processed and stored, you will be able to track the entire chain of information passing from the call to debiting money. If we talk about the internal intruder model, then the possibilities are even more enormous, because data protection is not included in the tasks of the mobile operator's pre-billing systems at all.

Digital Security Memo
In connection with the expansion of the fronts of information and cyber warfare, we decided to write a small memo-educational program on digital security and the main vectors of attack on Internet users. It will also be useful when the crisis is resolved.

Fundamentals of information security
Each of us has heard a lot about the concept of "information security" (IS), but for most these words remain an empty sound. For the vast majority of those who have an idea about information security, its basic principles are a sealed secret and only a few professionals can tell what information security is. Practitioners will not learn anything new, but it will be useful for "ordinary people".

Information security
Information protection
Wikipedia
The practice of preventing unauthorized access, use, disclosure, distortion, modification, research, recording or destruction of information. This universal concept applies regardless of the form that data can take. The main task of information security is the balanced protection of confidentiality, integrity and availability of data, taking into account the expediency of application and without any damage to the productivity of the organization. This is achieved mainly through a multi-stage risk management process, which allows identifying fixed assets and intangible assets, sources of threats, vulnerabilities, potential impact and risk management capabilities.

Social engineering
In one of the last articles, we discussed the changes in social engineering scenarios that the global COVID-19 pandemic provoked. Of course, it is impossible to consider all the subtleties within the framework of one publication, so today we will continue our conversation and tell you about the features of the attacker's physical penetration into the company's territory. It would not be superfluous to remind once again about the security measures that everyone should take in order not to become an unwitting victim.

Is clean and secure code a myth or a reality?
Each programming language is designed with different operating systems, platforms, coding styles and intended use in mind. We usually hear about Python, PHP, Ruby, jаvascript, Java, C, C++ and C#, as well as more modern versions of them, such as Rust, Swift, Hack and many others.

Digital epidemics
The first computer viruses appeared back in the 1970s. They were conceived as harmless and more like games, the purpose of which was to distribute the program to the largest number of players. The participant whose program will make more copies of its own and fill the computers of others faster was declared the winner.

From Prototype Pollution to RCE on ZeroNight X
As part of this article, we will look at the vulnerability of Prototype Pollution on the client and AST-injection on the server and what their joint operation can lead to, as well as how they were embedded for training in the “Hack To Be Hired” competition on ZeroNights X from the Digital Security Academy.