Seems like alot of notorious ransomware groups are essentially buying access through stolen credentials.

How are people obtaining creds though?

I’m assuming things like dictionary attacks against public facing servers are a very unlikely method. But maybe I’m wrong.

haveibeenpwned databases with cracking maybe?

Anyone with actual experience with Blackhat care to share some light?

I am 24.

It’s a weird question. Yesterday, I wasn’t able to put shoelaces into a shoe. My kid brother who’s 9 did it easily. Despite telling me, I couldn’t do it. I can’t change my tyre despite trying. It’s like brain doesn’t work.

During job, I wasn’t able to change pins in a stapler or use coffee machine. It’s like not I don’t try but I can’t figure stuff out. I am slow and problem solving skills or imagination is non existent.

I have interest in hacking. Fascinated by reverse engineering, 0 day exploits, kernel, scripting, AI, drones, hardware, malwares and messing around with computers.

Can I be a good hacker still?

I have an app I have to log in with within a certain radius. Want to spoof it so it thinks I’m there. Thoughts? The app is called Sling.

Hi

I have a device which is controlled from a smart phone application via a password-free WPA connection.

I’d like to intercept the traffic between my smart phone and the device and see if I can write an API to control the device without the developers application

The device sets up a WPA wireless network without a password and hands out a single IP – any additional connections do not receive an IP.

I was able to connect a laptop to the device and nmap it. it only has tcp/50007 open

I was considering setting up a MITM device which uses one NIC to connect to the device and another to mock the WPA connection. I should then be able to Wireshark or tcpdump the traffic to/from the device

Before I embark on building a raspberry pi with the wifi devices – is there a better way? Is there a reliable way to intercept the password-less WPA traffic directly between the application and device?

Maybe a cheap rooted android device running the app would be easiest?