Search results

  1. Tr0jan_Horse

    MitM Attacks: Hijacking Software Updates Like SolarWinds with evilgrade

    Welcome back, my aspiring cyberwarriors! In this tutorial, we will examine what happens if that update or upgrade is hijacked by a malicious entity. All of our systems, periodically download upgrades and updates trusting that these are coming from the software developer. What if they were not...
  2. Tr0jan_Horse

    Using the Brand New IPv6 Exploit to DoS a Windows System

    Recently, security researchers discovered a critical vulnerability in the Windows IPv6 packet processing system, which was subsequently assigned the identifier CVE-2024-38063. This vulnerability can lead to a denial of service, as well as remote code execution (RCE) via specially crafted IPv6...
  3. Tr0jan_Horse

    Reconnaissance: Scanning and DoSing with Scapy

    Welcome back, my aspiring cyberwarriors! We have explored a number of packet manipulation tools here on Hackers-Arise that can be very effective for network scanning, such as nmap and hping. As you know, almost any packet crafting/manipulation tool can also be used for DoSing...
  4. Tr0jan_Horse

    Wi-Fi Hacking: Creating a Wi-Fi Scanner with Python and Scapy

    Welcome back, my aspiring cyber warriors! Although there are numerous tools to hack Wi-Fi (802.11), to create your own tools you will need to understand the Wi-Fi protocol. In a previous tutorial, I explained the various types of frames in Wi-Fi. Now we will use that information to crate our own...
  5. Tr0jan_Horse

    Python Basics for Hackers, Part 04: How to Find the Exact Location of any IP Address

    As hackers, we instinctively want to know as much as possible. Among this desired information may be the Geo-Location of an IP address. Thankfully for us, our friends over at MaxMind have built a database that’ll do just that! Thing is, if we want to use it, we have to pay. Lucky for us that...
  6. Tr0jan_Horse

    Python Basics for Hackers, Part 05: Creating a Web Site Scraper to Find Potential Passwords

    Creating password lists is a key element of a successful password cracking strategy. In nearly every case, we need to provide a list of potential passwords to the password cracking tool whether it be hashcat, John the Ripper, BurpSuite, cameradar or others (the exception being a true brute force...
  7. Tr0jan_Horse

    Network Forensics: Getting Started With Stratoshark

    For decades, the open-source Wireshark network protocol analyzer has been an essential tool for networking professionals, enabling them to inspect and troubleshoot network traffic through packet analysis. However, as organizations have increasingly shifted workloads to the cloud, they’ve...
  8. Tr0jan_Horse

    Logic Basics for Cybersecurity: One of the Most Under-Rated Skills in Cybersecurity

    Today, let’s sharpen one of your most important weapons: logic. Whether you’re exploiting a system, defending a network, or analyzing malware, clear logical thinking is essential. Let’s break down the basics of logic using real-world cybersecurity examples. What Is Logic in...
  9. Tr0jan_Horse

    Mr Robot Hacks: Building a Deadman’s Switch in Python

    Welcome back, my Mr Robot aficionados! As you know, Mr. Robot is my favorite TV show because of its realistic depiction of hacking. Nearly all of the hacks in the show are real, although the time frame may be compressed (real hacking is not like a TikTok video). In the first season, Elliot’s...
  10. Tr0jan_Horse

    Bypassing Next Generation Firewalls with fragtunnel

    Welcome back, my aspiring cyberwarriors! A firewall is a critical component of network security that acts as a barrier between trusted internal networks and untrusted external networks, such as the Internet. It monitors and controls incoming and outgoing network traffic based on predetermined...
  11. Tr0jan_Horse

    Automated CVE Scanning with CVEScannerV2

    Welcome back, aspiring cyberwarriors! During reconnaissance, our goal is to identify vulnerable services within our target’s network. To streamline this process, CVEScannerV2 was developed – a powerful Nmap script that bridges the gap between network scanning and vulnerability assessment. This...
  12. Tr0jan_Horse

    Cyber Threat Intelligence (CTI) and Network Defenses: Getting Started with CrowdSec

    In the ever-evolving landscape of cybersecurity, new tools and approaches are constantly emerging to combat the growing sophistication of cyber threats. One such innovative solution is CrowdSec, a free and open-source security automation tool that leverages the power of crowdsourcing to detect...
  13. Tr0jan_Horse

    NymVPN. Is This the World’s Most Secure VPN?

    Welcome back, my aspiring cyberwarriors! The landscape of digital privacy continues to evolve as surveillance capabilities expand globally. Our digital footprints are continuously tracked, analyzed, and leveraged by various entities. While traditional privacy tools focus on encrypting the...
  14. Tr0jan_Horse

    SDR (Signals Intelligence) for Hackers: Soon, all Cellphones will be Connected by Satellites

    Welcome back, my aspiring cyberwarriors! In earlier posts here, we have described hacking satellite communication systems. While many might see that type of hacking as very advanced and maybe a bit esoteric, new technologies are about to make satellite communication ubiquitous for everyone...
  15. Tr0jan_Horse

    Physical Security: Hacking Elevators to Gain Physical Access

    Welcome back, my aspiring cyberwarriors! In the area of physical security and red team operations, elevators present an often-overlooked but strategically important vector. While they may seem like mundane infrastructure, elevators are embedded with layers of logic, legacy systems, and...
  16. Tr0jan_Horse

    Android Hacking, Part 04: A Compendium of Android Remote Administration Trojans (RATS)

    Welcome back, my aspiring cyberwarriors! In light of the recent revelations regarding Israel’s NSO group and their cellphone malware known as Pegasus, I thought it would be good time to catalog some of the better-known Remote Access Trojans (RATs) available for the Android OS. This is not meant...
  17. Tr0jan_Horse

    Android Hacking, Part 03: How to Embed a Backdoor into an Android APK

    Welcome back, my fledgling hackers! Mobile devices–smartphones and tablets–are proliferating around the world and slowly overtaking desktop and laptop machines. These mobile devices generally run either the iOS or the Android operating system, with Android comprising the bulk of all mobile...
  18. Tr0jan_Horse

    Android Hacking, Part 02: Setting Up an Android Hacking Lab

    Each and every day, the world is turning to and adopting the smartphone platform as the digital device of choice. People are not only using smartphones for voice communication, but also web services, email, SMS, chatting, social networking, photography, payment services, and so on. There are 2.3...
  19. Tr0jan_Horse

    Cryptography Basics for Hackers, Part 01

    Welcome back, my aspiring cyberwarriors! As cyberwarriors, we are often faced with the hurdle or promise of cryptography and encryption. Every cyber security engineer worth their pocket protector understands that encryption make the hacker/attacker’s task much more difficult. In addition, in...
  20. Tr0jan_Horse

    Android Hacking, Part 01: Android Basics

    Welcome back, my rookie hackers! Before we delve into this much anticipated section on “Hacking Android”, we first need to understand a bit about the Android operating system. The Android operating system was purchased by Google when it acquired a company named curiously enough, Android Inc...
Top Bottom