Nazi Hackers

AtlRedskull 2017-07-01 14:44:44 UTC #1

Any security tech types here that enjoy doing CTF events or working on challenges! Talking about the latest malware and hacks! I was trying to connect w/ other like minded people!

FRB 2017-07-01 19:06:45 UTC #2

I'd definitely be interested in honing my WPA and WEP cracking skills again. Would love to exercise my web security skills, since I know only a little about internet exploits.

mikemikev 2017-07-01 19:09:03 UTC #3

I've cracked WEP with aircrack. Don't know how to crack WPA.

3rdRicht 2017-07-01 20:22:47 UTC #4

How about a beginners guide to hacking, for defensive purposes more than anything.

Say, whites wanted to start their own YouTube site or pro white site. Protection is a must.

AtlRedskull 2017-07-02 13:03:21 UTC #5

Yea wpa is a alot harder then wep but it is kinda the same as wep using aircrack It is all about getting a handshake and then brute forcing it.
Here is a list that gives an idea of some of the common password schemes for various routers.
https://hashcat.net/forum/thread-6170.html
Course if your lucky they have changed it to something easy to crack. I had a neighbor have his pass as iloveu2.
Which I used the password list rockyou it should come with kali linux now in /usr/share/wordlists folder.
edit: typos

AtlRedskull 2017-07-02 17:03:49 UTC #6

Good question. I have to see where the others setup there streams. I guess the best way is to use the free resources till they get shutdown and have a way to share where they are located if they are shutdown.
I have experience running large server environments using opensource tools. So If whitetube is wanted. We could setup funding and get it rolling

my_struggle 2017-07-03 23:58:03 UTC #7

Anyone want to put together a starter tutorial for hashcat and/or aircrackng, or have any solid, direct resources for getting started?

I'd like to learn how to use hashcat, but haven't had the chance to invest the time. I've briefly tried john (john the ripper) before, but hashcat seemed (I tried experimenting with it recently, but didn't even get started) significantly more complicated.

kShad0w3d 2017-07-05 00:29:08 UTC #8

I am interested. I've been programming as a hobby for a good few years, and have always had an interest in hacking. Love to get involved in some CTF's, and discussions.

RooftopSniper 2017-07-05 05:22:47 UTC #9

Would be awesome if Weev ran an "ethical hacking" school.

AtlRedskull 2017-07-05 23:55:13 UTC #10

Cool. Once i get work caught up from the holidays. We can decide on what to do.

kShad0w3d 2017-07-06 02:29:31 UTC #11

Forewarned: The only CTF stuff I've worked on has been through Overthewire.
Let me know when you're clear and ready.
I'm gonna look into discord when I get back to shore(I've always just used IRC for chatting to folks).

AtlRedskull 2017-07-07 20:43:02 UTC #12

This site http://archive.is/rlpwq has some free servers to try stuff on. I haven't had a chance to log in . but heard you download an ovpn file and have free reign on some lab machines.

EDIT: change the link to an archive. is link. So the referer isn't showing the stormer!

RobotHitler 2017-07-07 20:48:57 UTC #13

Is weev even really a hacker? The at&t thing he did wasnt even really a hack.

putinpepe 2017-07-07 23:07:37 UTC #14

I've been programming for years, but I've never done a CTF. Let me know if you guys want to do an easy CTF together or something. I don't know how that works.

my_struggle 2017-07-07 23:20:26 UTC #15

What's a real "hack" then?

RobotHitler 2017-07-07 23:26:06 UTC #16

OK it was a real hack by definition but it wasn't impressive. He simply added numbers to the url.

my_struggle 2017-07-07 23:30:13 UTC #17

The simplest is the most elegant/impressive. Would you prefer he did more to achieve the same thing?

putinpepe 2017-07-07 23:38:39 UTC #18

If what Weev did wasn't a "real" hack, then at&t didn't have "real" security. What is debatable in the legal sense, which is all history at this point, is what you are "allowed" to access, but anyway there are tons of vulnerable websites and network services out there. I think I saw some article recently that someone trivially gained commit access to some double digit percent of all node packages.

RobotHitler 2017-07-07 23:43:54 UTC #19

Its just so overhyped.

my_struggle 2017-07-07 23:46:41 UTC #20

Yeah. Exactly. He changed a number to a public URL and went to jail for it. Who's really at fault?

A lot of "hacking" ends up in these sort of ethical dilemmas. Many times it's just some script kiddie that doesn't really know any better that gets caught.