π©π©~πα΄α΄α΄α΄Κ πα΄α΄α΄ΚΙͺα΄Κ~πͺπͺ
Kanalga Telegramβda oβtish
β αααααΆαααα·ααααΆααα»ααααα β αα·αααΆααααα’αααΎ Hack αααααααΎαα αααΆαααα
Ko'proq ko'rsatishMa'lumot yo'q
Obunachilar
Ma'lumot yo'q24 soatlar
Ma'lumot yo'q7 kun
-930 kun
Postlar arxiv
Hacker ααΌαα
ααααΎαα·ααΈααΆαααααα
αααΎαααΎααααΈαααα
α αα·ααααααααααα
αα»ααααααΆααααα αΆαα 6 αα·ααΈααΆαααααα
ααααααΆαααΌα
ααΆ:
1. Reconnaissance (ααΆααααΎαα’ααααα)
αααααΆααααΆααααΆαααααΌαααα Hacker ααααΎαα·ααΈααΆαααααααΌα
ααΆ:
Passive Reconnaissance (αααΎαα’αααααα’αα·αααααΆα) β αα·ααααααΎααααα½αααααΎαα
ααααα
ααααααΎ Google Dorking, OSINT, WHOIS, αα·α Social Engineeringα
Active Reconnaissance (αααΎαα’ααααααα·αααααΆα) β ααααΎααΆααααα
αααααα½ααα
ααααα
αααααααΎ Tools ααΌα
ααΆ Nmap, Shodan, αα·α Metasploitα
2. Scanning (ααΆαααααααααααααα)
Hacker ααααΎααΆααααααααΎααααΈααααααααΆαα’αααΈ IP Address, Open Ports, αα·α Vulnerabilitiesα Tools αααααααΎααΆα:
Nmap β αααααΆαα Scan Open Ports αα·α Services
Nessus β αααααΆαα Vulnerability Scanning
Wireshark β αααααΆαα Packet Sniffing
3. Enumeration (ααΆαααααΎααααααΆααααααααΆα)
αααααΆααααΈααααΎα Services αα·α Ports αα
ααΎαααααααα Hacker α’αΆα
ααααΎααΆααΎααααΈααααααααΆααααα’α·ααααααα:
Brute Force Attack β ααΎααααΈααααααα Username αα·α Password
SNMP Enumeration β ααΎααααΈααΆαααααααααΆαα’αααΈ Network
SMTP Enumeration β ααΎααααΈααα’αΆααααααΆαα’ααΈααα αα·α User Accounts
4. Gaining Access (ααΆαα
αΌααααααααα)
αααααΆααααΈααΆαααααααΆαααα’ Hacker α’αΆα
ααααΎαα·ααΈααΆαααααααΌα
ααΆ:
Exploiting Vulnerabilities β ααααΎ Exploit Kits ααΌα
ααΆ Metasploit
Phishing Attacks β αααααα±αα Target αααααααΆααααααααΆαα
Man-in-the-Middle (MITM) Attacks β α
αΆαααααα·αααααααααα»α Network
5. Maintaining Access (ααΆααααααΆααΆαα
αΌααααααααα)
αααααΆααααΈ Hacker α
αΌαααΆα ααααααα·ααααα·αα·ααΈααΆαααααααΌα
ααΆ:
Backdoors β ααΎααααΈα
αΌαααΆαααΏααα
αααααααα
Rootkits β ααΎααααΈααΆαααααααααΆααααα½α
Privilege Escalation β ααΎααααΈααααΆαααΆ Administrator
6. Covering Tracks (ααΆαααααααααΆα)
Hacker ααΉαααΆαααααααααΆααααααααα½α ααα:
Clearing Logs β αα»αααααααΆααααα»α System Logs
Encrypting Malicious Traffic β ααΎααααΈαα»αα±αα IPS/IDS α
αΆααααΆα
Disabling Security Measures β ααΎααααΈαα»αα±ααααααααααααααΎα
Posts By @BunthyHacking Contact @Cyber_Tips_ScriptKiddie
ααααα·αααΎααΆαααΆααααααΆα α¬ααΆαααΆαααα’αααΈααΆαααΆααααα αΆααααα’αΆα
ααΆαααΎααααΆααααααααΆαα·ααΆααα
ααααα»ααΆ ααΌα
ααΆααΈαααα»α HACKER α¬αααα»αα αααααααα ααααΆαααααΆααααααααα½αααααΌαααΆααα·ααΆαααΆααα½α
ααΆααααα
ααΎααααΈααΆαααΆαααααααααααααααΆααα·ααααΆ (IT) αα·ααα·ααααααααααΆααα
αα·ααΆαααΆααα»ααααα·ααΆα IT ααΎααααΈααΆαααΆαααΈααΆαααΆααααα αΆα
1. αααααΉααα»ααααα·ααΆαααααα ααααα αα·ααααααααα IT
ααααΎ Security Audit ααΎααααΈαα·αα·αααααα α»ααααα»ααααααααα ITα
α’αΆααααα (update) αα·ααα·αα
ααααααα»ααααα·ααΆα (patch vulnerabilities)α
ααααΎααααΆαα Web Application Firewall (WAF) ααΎααααΈααΆαααΆαααΈ DDoS αα·α SQL Injectionα
2. ααΆαααΆαααααααΆαα’αΆαα·ααΆαααααα
α
ααααα αα·αα’αα»αααααααααΆααα Access Control ααΎααααΈαααααΆααααΆααααΆα’αΆα
α
αΌαααααΎααααααΆαααααΆααα
α
αα
αΆαααααΎ data backup αα·αααΆααααααΎααααααααααααααα (disaster recovery site)α
3. αααααΉαα’ααααααααΆα αα·αααΆαα
αΌαααααΎαααααααα
ααααΎ Multi-Factor Authentication (MFA) ααΎααααΈαααααΆαα·ααΆαα
ααΆαααααΌαααΆααααααααΆααααΆαααα
αΆα (password rotation policy)α
4. αααααΆαααΆαααΆααααα αΆαααΆαα’ααΈαααΊαα·α (Phishing & Social Engineering)
αααααα’ααααααααα»ααααα·αα’αααΈααΆααα½α
ααααααΆαααΆαα’ααΈαααα αα·ααααααΆααααααα
αα·αααΆααααααααΆαα (password reset) αα
ααΎααααΈααααΆααα ααΎααααΈααααααααΆαα
αΌαααααΎααααΆααα’ααΈαααααΈα
5. ααααΆαααααα αα·αααΆαααΆααα
ααααα½αααΆααααααααα½αααααΌαααΆα CSIRT (Computer Security Incident Response Team) ααΎααααΈαααααααΆαααΌαα’αΆααααα ααα»ααααΌααα
αα
αααααα
ααααα·αααΎααΆαααΆαααΆααααα αΆα ααααΌαααΆαααΆααααα
α’αΆααααΆαα (NIPTICT, MPTC, Police Cybercrime Unit) ααΎααααΈααααΆαααααΆαα
ααΎα’αααΈαα
ααΆααΆαααααΆαααα ααα
αααααΈαααα»α HACKER?
DDoS Attacks β ααΆααααα αΆαααΎααααΈααααΎα±ααααα ααααααααααΆαα·ααΆααα·αα’αΆα
ααααΎααΆαα
Website Defacement β ααααααααΆαα·ααΆαααα»αααα αααααα
Data Breach β αα½α
αα·ααααααααΆααα·αααααααααααΆαα·ααΆαα
Phishing & Malware Attacks β αααααααααα’αααααααΎα²αααααα
αΌαααααααΆαααααΆαα α¬αααα
αΌαααααααα
αααα»αααααααααα
ααΎααααΆααααααααΆαα·ααΆααα½αααααΎα’αααΈαααααα?
αααααΎα Cybersecurity Task Force ααΎααααΈααΆαααΆααα·αααΆαααΆαααΆαααΆααααα αΆαα
ααααΎ AI-based Threat Detection ααΎααααΈααααααααα·αααΆααΆααααΆαααΆααααα αΆαααΆαα’ααΈαααΊαα·αα
ααΆααααααΆαααααα·ααααα· Incident Response Plan ααΎααΆαααΆαααΆααααα αΆαα
Posts By @BunthyHacking
The Blackhat Hacking Course π
Course Content: -
1)Data Breach Investigation Investigations
2)What Does A Hacker Do?
3)Data Hiding Secrets: Secure Your Data
4)How Facebook Is Being Hacked?
5)Filing A Complaint In Fbi
6)Concept Of Virus, Worms, Trojans, Bots(zombies).
Posts By @BunthyHacking
π© Blackhat ALIENS presents all in one hacking course free for you guys π©
π Carding full course
π Android Hacking
π Call spoofing
π Wifi Hacking
π Money making Trick
π Amazon carding
π Hacking E-books
π Password:
Blackhatop
Posts By @BunthyHacking
Black Hat Python Programming for Hackers and Pentesters
New Sophisticated Linux-Backdoor Attacking OT Systems Exploiting 0-Day RCE
https://cybersecuritynews.com/new-sophisticated-linux-backdoor-attacking-ot-systems/#google_vignette
Python Ethical Hacking Tutorial
1. Basic Network Scanner
import socket
def network_scanner(target, start_port, end_port):
print(f"Scanning {target} from port {start_port} to {end_port}")
for port in range(start_port, end_port+1):
try:
with socket.socket(socket.AF_INET, socket.SOCK_STREAM) as s:
s.settimeout(0.5)
result = s.connect_ex((target, port))
if result == 0:
print(f"Port {port}: OPEN")
except KeyboardInterrupt:
print("\nScan stopped by user")
exit()
except Exception as e:
print(f"Error scanning port {port}: {e}")
# Usage
network_scanner("127.0.0.1", 20, 80)4 reasons your next home automation controller should be an ESP8266 (and not a Pi)
Top 5 Termux Tools for Ethical Hacking
Here are the top 5 Termux tools to start ethical hacking!
Brief Overview of the Tools
Nmap β A tool to scan networks, find open ports, and detect devices connected to a network. Metasploit β A powerful framework for testing and exploiting system vulnerabilities. Hydra β A password-cracking tool used to test the strength of login credentials. Wireshark β A graphical interface tool for analyzing network traffic, like Wireshark for mobile. SQLmap β A tool to find and exploit database vulnerabilities through SQL injection.These tools are great for ethical hacking and cybersecurity tasks in Termux.
Share For More https://t.me/ZeroTermuxZ
Top 20 Termux Commands
If you are a beginner, then learning the Termux commands will help you to use Termux easily and efficiently. Below is a list of the top 20 Termux commands to start your Linux journey.Share For More https://t.me/ZeroTermuxZ
Posts By @BunthyHacking
works on android and windows . you can change the shell code to your needs
Chrome-Android-and-Windows-0day-RCE-.zip8.32 KB
Threat Actors trying to figure out what kind of piece of shit they're targeting (it's using PowerPC architecture, 256kb of RAM, and 12mb of harddrive storage)
π Evilginx Phishlet Developer Masterclass (2025) π
β
Learn a systematic process of creating, debugging, and programming Evilginx phishlets from scratch. Learn to analyze authentication flows, bypass MFA protections, troubleshoot errors, and deploy advanced reverse-proxy phishing techniques in 2025.
π€Content :
π£Intro to Modern Phishing in 2025
π£Evilginx Phishlets Documentation Review
π£Basics of Programming in YAML
π£Infrastructure & Tools Setup
π£Application Network Traffic Analysis 101
π£User Authentication 101 β Understanding Cookies, Auth Tokens, Session Management, Token Architecture, and Implementation Methods
π£Web Authentication & Reverse Engineering
π£What We've Learned So Far
π£Building a Custom Phishlet 1 β Hands-On Tutorial for Building and Deploying a Custom Phishlet
π£Comparing Authentication System Security
π£Phishlet Lab 2 (Part A) β Network Traffic Interception, Session Token Extraction, and Phishlet Architecture Development
π£Phishlet Lab 2 (Part B) β Configuring Subfilter Logic, Authentication Flow Validation, and Deployment Optimization
π£Debugging and Troubleshoot Phishlets
π£Going Live & Avoiding the Spam Inbox
π£Defending Against Modern Reverse-Proxy Phishing β Mitigation Strategies for Modern Attacks
π£Understanding Evilginx Pro β Puppeteer, EvilPuppet, Advanced Features, Access Guidelines, and Other Considerations
π£TMUX Tutorial β What It Is, How to Install and Use It with Evilginx
π£Anonymous Infrastructure & VPN Integration - Secure Deployment and Off-Shore Hosting
π£Bonus Resources β Custom Phishlets, Tool Kits, Email Templates, Course Files, Materials, Streams & Webinars
π£Conclusion & Next Steps
β All Quizes, Text files and Resources included.
π₯
Never doubt the quality of a service, before you haven't seen it.
Looks like there is a demand for Telegram RCE exploit
https://techcrunch.com/2025/03/21/russian-zero-day-seller-is-offering-up-to-4-million-for-telegram-exploits/
