Search results

😂 How to obfuscate JavaScript without burning down your lab: AST, Babel, plugins In this article, we'll introduce, at a minimum, a cool word, and, if possible, a technique called obfuscation in the context of the JavaScript language. ⚠️ We'll implement mechanisms for hiding algorithms...

🔐 Dostivists and SYN floods | How the DDoS epidemic began. One of the first cases occurred in a laboratory at the University of Illinois, when a student disabled 31 PLATO (Programmed Logic for Automated Teaching Operations) terminals using a simple script—the first e-learning system...

📷 Step-by-Step Infrastructure Penetration Testing | Scanning and Gaining Access This article is entirely devoted to scanning the network infrastructure—the second stage of pentesting, which follows reconnaissance. While reconnaissance involves searching for IP addresses and various...

😂 Cybercrime 2024: The Most High-Profile Cases of the Year 2024 was a significant year for the world of cybersecurity, marked by numerous cyberattacks, data leaks, the emergence of new threat groups, and the discovery of zero-day vulnerabilities. Among the many events, several notable cases...

❗️ MiTM Attack Tool SSLsplit is a tool for man-in-the-middle attacks against SSL/TLS-encrypted network connections. ⚠️ Connections are transparently intercepted via the address translation engine and redirected to SSLsplit. SSLsplit terminates SSL/TLS and initiates new SSL/TLS connections to...

❗️ MiTM Attack Tool SSLsplit is a tool for man-in-the-middle attacks against SSL/TLS-encrypted network connections. ⚠️ Connections are transparently intercepted via the address translation engine and redirected to SSLsplit. SSLsplit terminates SSL/TLS and initiates new SSL/TLS connections to...

🎃 A Complete Guide to OpenSSL OpenSSL is a software library for applications that provide secure communications over computer networks against eavesdropping and authenticate the identity of the user on the other end. Guide Contents: 1. OpenSSL: Usage Guide and Security Audit 2. What is OpenSSL...

😂 Exploit for a critical Windows vulnerability has been published: just one request is enough to destroy any infrastructure A proof-of-concept exploit for a vulnerability in the Windows Lightweight Directory Access Protocol (LDAP), patched in December 2024, was recently published online. The...

👴 Automated Wireless Attack Tool Wifite2 is a tool for auditing encrypted WEP or WPA wireless networks. It uses tools like aircrack-ng, pyrit, reaver, and tshark to conduct the audit. This tool can be configured automatically with just a few arguments. Wifite aims to be a "set it and forget...

🥷 The Whonix Guide Guide Contents: 1. Quick Start with Whonix 2. What is Whonix 3. Which to Choose: Whonix, Tails, Tor Browser… 4. Which Whonix Version to Download 5. How to Install Whonix 6. What is Whonix-Gateway and Whonix-Workstation 7. Whonix Startup Instructions 8. What is the Default...

👁‍🗨 Google tracks you even after you opt out A US federal judge has denied Google's motion to dismiss a class action lawsuit alleging invasion of privacy for users who opted out of having their web and app activity recorded. The lawsuit concerns the Web & App Activity (WAA) settings, which...

🥷 "The Anatomy of Anonymous Attacks" — How Do Anonymous Work? ⚠️ American company Imperva, which develops data security solutions, has published a 17-page report examining the work of the notorious hacktivist group Anonymous. While the report doesn't reveal the dark secrets of the underground...

👩‍💻 Domain Name Permutation Tool dnstwist is a domain name permutation engine for detecting similar domain squatting, phishing attacks, fraud, and corporate espionage. The program will find similar-looking domains that adversaries can use to attack you. Key features of dnstwist: ⏺A wide range...

😩 Thai Scam Mobile: How a Pair of "Tour Guides" Sent 30,000 Phishing SMS Two Chinese citizens suspected of organizing a large-scale SMS fraud scheme have been arrested in Bangkok. — They posed as tour guides and used sophisticated equipment to send fake messages. 🖥 The scheme involved using...