Jump to content

INFOTRACE

Active Members
  • Posts

    306
  • Joined

  • Last visited

  • Days Won

    6

Posts posted by INFOTRACE

  1. 29 minutes ago, Forkish said:

    *twangy voice* shiiiiiittt, this stuff is all open source. You can do anything you want withh it. It just takes knowledge and energy. The hak5 teem made it easy for people like me who panic trying to set up SSH keys on more than one device. If you’ve got the know_how to create your own droplet server forwarded to your own server via vpn/ssh/forward-ported/tech-lingo then you can do it. Roll your own FW for the hak5 stuff; tweak it; break it; fix it ans break it again. That’s the beauty to this open sourced/hak5 stuff. 

    Now if the complaint is that they don’t make it easy for you. Lacking the features to click a few buttons and bam, you’ve got a folder served to the web behind proxies and double encryption encapsulated tunnels.. Well, as my Pappy used to say, ‘Git good’.

     

    Nice 'twangy voice' 😆

  2. On 8/3/2019 at 2:59 PM, ofog-p1 said:
    If Gmail is not 2step verification and registered on the phone, Require  tap "yes /Number "  when logging in?

    Sorry ofog-p1,

    Not sure what you are asking. Could your rephrase the question buddy and I will see if I can assist 🤓

    Cheers 😎

  3. 1 hour ago, Hazy said:

    Hi, Would anyone at HAK5 consider working with a UK retailer?  

    Hi Hazy,

    Quite a few guys have been asking the same question. I think that it will be eBay or Amazon. Both have limited stock in terms of what you can purchase. So, field kits are available but not as bulk items, and if you take the exchange rate for the items on Hak5 shop vs UK sellers you will pay more. 

    Hak5 ship to the UK, but, and it is a big BUT, you may have to pay extra costs for customs (not sure).

    Hope this helps in some way buddy.

    Cheers 😎

    • Like 1
  4. 48 minutes ago, Ron SwartzAnon said:

    Lmao. Breaking stuff is the best part.

    Thank you for your reply.

    Why Is there no option to host it on your own servers? No matter who's info it is, if it's under me and my responsibility I want full control over it.

     

    Yeah, total control you say🙃.........I don't think it can be done. If you use the internet to store/transfer data, or use a cloud/dongle to store data, then it is reasonable to suggest that third parties will be involved, and everyone once a piece of business/control (IMO). 😃

    Cheers 😎

  5. 53 minutes ago, Forkish said:

    If I were to trust any one in this thread, it would be this guy.

    Forkish, 

    I could not agree more. He is always on the money when it comes to providing excellent advice and guidance at many different levels. Over 1,400 posts🔥🔥🔥, I am sure he knows what he is talking about. He certainly has enlightened me during the perusal of his posts. To be fair, there are many great guys on here and Hak5 are never short of getting back to you with specific details if and when needed.

    Cheers 😎

    • Like 1
  6. 50 minutes ago, Forkish said:

    I can understand the point of view. I don’t use most cloud services because I don’t want my stuff used for their own business purposes.  Hak5 though touts itself as a purveyor of white hat products. With that in mind, in theory, none of the information is yours to begin with. It’s all your clients. leading to the fact that they will have signed paperwork explaining your (your pen testing business’) privacy policy and data retention policy which would (should) cover those issues. If I were to ever use these products on anything other than myself (wife still gets angry I break the wifi at least twice a week), I’d be happy as a clam keeping other peoples stuff on the cloud to make my job easier. I believe that’s the angle anyways.

    Hi Ron,

    Great points raised and with clarity. We cannot have everything and short of creating your own product to provide yourself with the services, I am sorry to say that the status quo remains.

    I, for one, am a great Hak5 fan and can see the need to be linked in with the guys, as the benefits of updates and research for new products continuously going on, I think they provide an excellent service and worth every penny (IMO). 

    Twice a week you say, breaking the wifi, my goodness that really is going some 🤓  

    Cheers 😎 

  7. 1 minute ago, Ron SwartzAnon said:

    Good point's.

    More or less I was attempting to be gentle about my question but more to the point... What's the underlying purpose to this design? Why did they design it to where you will be dependent on there server's? I believe everthing is done with an underlying purpose and usually with companies it's monetary.

    Non of this will keep me from buying or using there products or "service" but it would be nice to know all I could about how It all work's and why?

    It would be nice to know what they do with your information and if they keep dump file's. 

    Do you truly own the device you buy or is this like Microsoft that leads you to believe you own your computer when in reality each update takes it over bit by bit. Next thing you know you have to pay yo use something that was previously free.

    Thank you, and your comments are great as well. 

    It will be interesting to see how it all goes.

    Have a great rest of the day........oh and thanks for being gentle😊

    Cheers 😎

  8. On 6/30/2019 at 5:38 PM, _0NiTy said:

    Whatever cellular device you have, your question may be answered on xda-developers site.

    Like b0n3z said above, unlocking the bootloader is your first step to rooting a device, if the manufacturer even allows you to.

    Hi,

    Yes have to agree that XDA is a good site for advice. OEM unlock, USB debug and bootloader, but it will depend on the device. Oreo 8.0 and 8.1 (improved camera specs etc.), is quite straightforward with Magisk (IMO)🤓

    Cheers 😎  

  9. On 6/28/2019 at 1:31 AM, b0N3z said:

    get a tetra, the nano is a smaller version of the mark 5 with a new interface.  Tetra has the power and the radios, its an upgrade for sure.

    Hi,

    So, I take it that the rumours on the new Pine Nano being released are unfounded😊

    Cheers 😎

  10. 10 hours ago, Ron SwartzAnon said:

    Forgive me for feeling suspicious but I trust no one, especially companies and governments.

    I'm new to Hak5 and I've read through a lot of the sight and I see a recurring theme. "Hosted on our server's" like it's a good thing.

     It may be I guess but the untrusting part of my brian (95%) is saying that seems strange. Why would they still want you tied to there server's year's after you obtained there products.

     Why can't you use these item's without the umbilical cord attached? Or did i miss something that says you don't need there server's to use your products?

    How do I know that your server's aren't collecting data from our target's for later use or putting clients at risk if your server's get compromised?

    Go ahead and call me paranoid but I'll be standing when many fall's.

    Hi Ron,

    Nice post😎 You raise some good points. I think that in the digital world everything and everyone using it will leave a trace. No different to this post, but, I do get your views. If no computer data existed there would still be data. When born a certificate is created and the birth recorded; when registering with doctor/GP/dentist etc., records are created and whether that is done the old fashioned way or digitally in today's world. 

    So, I guess if you are worried about using the devices and leaving a trace, well, I think you could go off grid, but that will not delete the digital footprint that you have already left. From mobile/cell devices to wifi/internet you will always leave a forensic trail, but that can be masked/TOR/Proxy etc., then you might feel better, but you still need to go through Hack5.......as you pointed out.

    Hope this helps in some way😎

    PS. Nothing wrong with being paranoid😈

  11. Hi Guys,

    Having rooted the nexus 6p (again), downloaded the latest version of NetHunter for the android device, I was wondering if anyone else is using it without problems?

    Cheers 😎  

  12. 8 hours ago, madvideos said:

    btw, I highly suggest you download it like I did. It's a fairly large file though. It is a keeper in my private stash folder 🙂

    Hi madvideos,

    Just seen your bit on downloading it......excellent idea buddy. That way I can watch it on anytime I feel like updating my knowledge. Btw, I too have a 'stash folder' ☺️

    Cheers 😎

    • Like 1
  13. 8 hours ago, madvideos said:

    Not sure if this was posted in the many pages, fantastic resources you all posted, thank you!! 

    This was just released/posted a few days ago on the tube, it's no lie, it is a 15 hour no commercials video and is extremely helpful to the new and old, I am about 6 hours in and with each part I find myself googling more about that specific topic and going deeper so really I have spent far more than that. He even has the homework folders on github. I am loving it!

     

    even though he somehow packed this all in that time space is incredible, though it takes serious effort on my part to extend my learning beyond the video. This guy really knows wtf he is doing and I never knew you could get paid finding damn bugs in a website!!

    Enjoy!

     

    Excellent.......and I totally agree........I watched the first 58 minutes and found it really informative.........the guy really knows his stuff and with no adverts!

    Cheers 😎

    PS. I also signed up to his pages, both the youtube and his own site.......waiting for my first email newsletter!

  14. On 4/19/2019 at 8:37 AM, Rkiver said:

    No.

    Hacking in and of itself is just using something for a purpose it was not originally designed for.

    99% of all your technology are because someone looked at something and said "What else can we make it do?"

    Some people are paid by companies to hack into them, to test their systems, that is called Penetration Testing.

    Some people hack at home, on their own equipment, to see what else they  can make it do.

    And yes, some act  illegally too.

    That explains a great deal, thanks 😎

  15. On 5/21/2006 at 4:19 AM, comcipher said:

    For all the people who are new at this whole “computer†thing and don’t really understand what hacking is all about and where to begin, I offer up these links to some great places to start learning.

    Please contribute to this thread and I will keep it up to date. Probably should be made sticky.

    News:

    www.digg.com

    www.slashdot.org

    Presentations:

    http://www.lessig.org/freeculture/free.html <-- A speech given talking all about the problems facing culture when dealing with copyright and other digital laws.

    Podcasts:

    http://www.grc.com/SecurityNow.htm <-- This is fantastic for people who are new to the field. If you have the time or motivation, go back and listen to them from day 1, they assume you know very little if anything and hit on all of the major topics in the security field. Fantastic show.

    IPTV Shows:

    http://www.binrev.com/ <-- Produce a good IPTV show and also have forums that are usually helpful.

    http://www.hak5.org <--- Duh....

    Tutorial sites:

    http://www.remote-exploit.org <-- Pretty good resources, some very nice video tutorials on various exploits. Defiantly check out the tutorial section.

    http://www.irongeek.com/ <-- Excellent tutorials/information/articles.

    http://www.antionline.com/ <-- Tutorials, tools and forums full of helpful people.

    Programming Related:

    Teach Yourself C in 21 Days: http://neonatus.net/C/index.html

    Teach Yourself C++ in 21 Days: http://cma.zdnet.com/book/c++/

    The Art of Assembly Language Programming: http://maven.smith.edu/~thiebaut/ArtOfAssembly/artofasm.html

    Microsoft Developers Network: http://msdn.microsoft.com

    ----Web Programming:

    HTML: http://www.w3schools.com

    PHP: http://www.php.net

    ASP.NET: http://www.asp.net/Default.aspx?tabindex=0&tabid=1

    SQL: http://www.mysql.com

    Perl: http://www.perl.com/

    Python: http://www.python.org

    Security Related:

    SecurityFocus: http://www.securityfocus.com/

    Milw0rm: http://www.milw0rm.com

    SecurityForest: http://securityforest.com/wiki/index.php/Main_Page

    Excellent advice. Thank you.

  16. Hi Guys,

    Jailbreaking the Nexus 6p is not without its problems, as there really is a ton of rubbish information out there!

    Followed one chap who was using the same setup, downloaded onto the windows 10, went through the process (debugging USB, Developer, Admin, etc.,) but the OEM decided to switch from on to off and then greyed out. Obviously it was not greyed out before, and now the device is still rooted, still have developer rights, but the OEM is greyed out. 

    The best thing is that it shows that the 'bootloader' needs to be activated, which is where I am stuck at the moment. Tried factory and hard reset, both of which failed to address the issue.

    Any ideas, points, directions will be greatly received.

    Cheers as always 😎 

  17. Just now, digininja said:

    Pick up a Raspberry Pi and decent wifi card and use that. Would be a lot cheaper and much more versatile.

    Bit bulkier but depends on what you are using it for.

    Yes, a bit bulky........have it already (pi3 B+), and working it off Alpha etc., but I need a phone that will not standout and has a good sized screen, but not over 6".

    Working and walking about an office doing pen testing is great for a phone, but not for the pi, as this is used more for outside field work and greater distance is covered with the Alpha. 

    Looking at the  Samsung Galaxy S6 or S7 or something in that range through Nokia or Huawei. Any suggestions (probably not BlackBerry)?

    Cheers again 😎

  18. 1 minute ago, digininja said:

    Once you go out of support for security patches you don't get any more unless something hits that is so bad that the manufacturer deems it worth putting out a special patch.

    Remember, despite the 5x being the most recent, it came out in October 2015 so had 3 years of support.

    Rooting a device generally makes it more vulnerable than less as the apps installed on it can do more damage. I'd stick with what is there and hope nothing is found rather than deliberately introducing more risk with a root.

    Hi Digininja,

    Great advice -  unrooted it is - Thank you.

    I was thinking of getting a Nexus 7 for the Nethunter, but I am still looking at specs on the various ones out there. N900 is a no go for many reasons; battery life being one of the main issues. Any suggestions circa 150 USD to 200 USD?

    Thanks again for your response 😎 

  19. Hi Guys,

    I have read quite a bit about rooted and unrooted Android devices running Nethunter, and thought that this could be of interest:

    Android 9.0 Pie was released on August 6, 2018, but the Nexus 6P and Nexus 5X, Google's most recent Nexus phones, remained on Android 8.1 Oreo. These two devices will continue to get security patches until November 2018, at which point they will have officially reached the end of software support.

    Does this mean that if someone buys one of the devices shown, that it will not be protected if left unrooted? Should they then root the device and crack on with their lives, or does it really matter if using Nethunter?

    Cheers 😎

     

×
×
  • Create New...