[ πππ£πππ€ππ π₯ππ§π©π£ππ§ ] α΅αΆ αΆ β±αΆβ±α΅Λ‘ inc. COMPANY
Ir al canal en Telegram
No.1 Security Learning Platform in Telugu states wingcodepartner inc. COMPANY
Mostrar mΓ‘s9 554
Suscriptores
Sin datos24 horas
-337 dΓas
-11830 dΓas
Archivo de publicaciones
π° Types of hacking π°
πβπ¨When we execute an ethical hacking is necessary to establish its scope to develop a
realistic schedule of work and to deliver the economic proposal to the client. To determine
the project extent we need to know at least three basic elements: the type of hacking that
we will conduct, the modality and the additional services that customers would like to
include with the contracted service.
β¬οΈDepending on where we execute the penetration testing, an ethical hacking can be
external or internal.β¬οΈ
β«οΈExternal pentesting β«οΈ
π¦ This type of hacking is done from the Internet against the clientβs public network
infrastructure; that is, on those computers in the organization that are exposed to the
Internet because they provide a public service. Example of public hosts: router, firewall,
web server, mail server, name server, etc.β¨
β«οΈInternal pentesting β«οΈ
π¦ As the name suggests, this type of hacking is executed from the customerβs
internal network, from the point of view of a company employee, consultant, or business
associate that has access to the corporate network.
In this type of penetration test we often find more security holes than its external
counterpart, because many system administrators are concerned about protecting the
network perimeter and underestimate the internal attackers. The latter is a mistake, since
studies show that the majority of successful attacks come from inside the company. To cite
an example, in a survey conducted on computer security to a group of businessmen in the
UK, when they were asked βwho the attackers areβ, these figures were obtained: 25%
external, 75% internalβ¨
β«οΈHacking modalities β«οΈ
π¦ Depending on the information that the customer provides to the consultant, an
ethical hacking service could be executed in one of three modes: black-box, gray-box or
white-box. The method chosen will affect the cost and duration of the penetration testing
audit, since the lesser the information received, the greater the time in research invested by
the auditor. β¨
β«οΈBlack box hacking β«οΈ
π¦ This mode is applicable to external testing only. It is called so because the client
only gives the name of the company to the consultant, so the auditor starts with no
information, the infrastructure of the organization is a βblack boxβ.
While this type of audit is considered more realistic, since the external attacker
who chooses an X victim has no further information to start that the name of the
organization that is going to attack, it is also true that it requires a greater investment of
time and therefore the cost incurred is higher too. Additionally, it should be noted that the
ethical hacker - unlike the cracker - does not have all the time in the world to perform
penetration testing, so the preliminary analysis cannot extend beyond what is possible in
practical terms because of cost/time/benefit. β¨
β«οΈGray box hacking β«οΈ
π¦ This method is often used synonymously to refer to internal pentestings.
Nevertheless, some auditors also called gray-box-hacking an external test in which the
client provides limited information on public computers to be audited. Example: a list of
data such as IP address and type/function of the equipment (router, web-server, firewall,
etc.). When the term is applied to internal testing, it is given that name because the
consultant receives the same access that an employee would have like having his laptop
connected to the internal network and the NIC configured properly (IP address, subnet
mask, gateway and DNS server); but does not obtain additional information such as:
username/password to join a domain, the existence of related subnets, etc. β¨
Maturity comes with the damage not the years
__________is a tool that can hide processes from the process list,can hide files,registry entries,and intercept keystrokes.
For 15k + bot users we are uploading a new content
Evaraina LLB chesthunara chesthe okasari message cheyyara please
@wingcode_owner
Good morning to everyone β
Knowledge is power.
Information is liberating.
Education is the premise of progress, in every society,
in every family.β€οΈβ€οΈ
I want to train personal team hackers , who are ready for this life time travelling with me
Who are ready message me
@wingcode_owner
What is your hacking level ?
Ok let's come to this group if not getting sleep
https://t.me/+s3fwi1felxE1MWRl
Evarikaina boring ga undha
1400+ HackerOne Reports.pdf6.71 KB
500 votes vasthe π content share chestha lekunte le π
script kavala ?
import crypt
def testPass(cryptPass):
salt = cryptPass[0:2]
dictFile = open('dictionary.txt', 'r')
for word in dictFile.readlines():
word = word.strip('\n')
cryptWord = crypt.crypt(word, salt)
if cryptWord == cryptPass:
print('[+] Found Password: '+ word + '\n')
return
print('[-] Password Not Found.\n')
return
def main():
passFile = open('passwords.txt')
for line in passFile.readlines():
if ':' in line:
user = line.split(':')[0]
cryptPass = line.split(':')[1].strip(' ')
print('[*] Cracking Password For: ' + user)
testPass(cryptPass)
if name == 'main':
main()
