Questions tagged [black-hat]
Black hat hacking is the act of using computer security hacking for illegal means, usually to compromise high value computer systems. It is the opposite of white hat hacking.
25 questions
1
vote
1
answer
150
views
Does black hat always equal illegal? [closed]
I often hear of black-hat hacking discussed as if it was synonymous with illegal hacking. In other words, an act of hacking is black-hat iff it is illegal. Our own tag wiki for black-hat defines it as ...
- 119
-1
votes
4
answers
850
views
Do black hat hackers or even hacktivists use penetration testing tools?
I was reading digital forensics as part of my curriculum and came across some tools used for hacking (ethical hacking aka pentration testing). There is a bunch of tools out there. I was wondering if ...
0
votes
1
answer
794
views
What can my ISP see regarding my VPN tunnel? [duplicate]
I use the free version of proton VPN because it has such a nice interface. From my understanding, when I connect to one of their VPNs located in the US, my information passes through an encrypted ...
- 149
2
votes
0
answers
4k
views
how to create random request time delay in sqlmap?
How can i configure sql-map to try payloads at random time delay?
as an example time between first and second request can be 0.10s and second and third might 0.25 and so on.
i know there is --delay ...
- 21
29
votes
9
answers
10k
views
How can an administrator secure against a 0day before patches are available?
I'm working on a thesis about the security hacker community.
When a 0day is published, how can an administrator secure his application/website between the time the 0day is published and the patch is ...
- 417
3
votes
0
answers
985
views
What reason would you use the decoy scan option for Nmap?
I'm confused as to why you would use the -D option for Nmap. Is there any 'white hat' reason for using it? Or is it used particularly for malicious purposes?
- 171
39
votes
4
answers
11k
views
Is demanding a "donation" before disclosing vulnerabilities black hat behavior? [closed]
We have been contacted by an "independent security researcher" through the Open Bug Bounty project. First communications were quite OK, and he disclosed the vulnerability found. We patched the hole ...
- 7,752
1
vote
2
answers
319
views
Do the 'bad guys' create honeypots?
I know companies, governments, and other organizations create honeypots (ex: SQLi pages, Open Access Points, Open Ports, etc.) to lure in the bad guys. Are there any examples of the bad guys creating ...
- 45
-2
votes
2
answers
373
views
I developed a very disruptive program with major implications. What next? [closed]
Long story short and without giving away too many details, I and my business partner came up with an idea for a program. It essentially bypasses the monetization feature of another piece of software ...
0
votes
1
answer
436
views
Penetration Testing Methodologies
I have some issues regarding the concept of black, grey and white hat.
Where and in what penetration testing methodology I can find the black, grey or white hat concept definition?
- 1,900
7
votes
3
answers
4k
views
Why aren't ransomware deployers arrested? [closed]
Why aren't people who use ransomware to extort money from people arrested?
Using ransomware is illegal, presumably.
The idea that Bitcoin is anonymous is a myth.
Given this, it seems like they ...
- 2,957
2
votes
0
answers
390
views
OpenPGP smartcards compromised by blackhat 2015 simcard hack?
This blackhat was a new sidechannel attack in the SIM-card AES encryption announced.
I am currently using the OpenPGP smart/SIM-card version 2.1 to store my PGP-private keys, which is the same model ...
- 131
0
votes
0
answers
59
views
Could someone compare basic anonymity vs basic computer hacker anonymity? [duplicate]
So, let's say one just doesn't want the government/corporations to know what they are doing online. Let's say, for example, that they just don't trust the NSA, FBI, Google, etc.
So what are the steps ...
- 35
3
votes
1
answer
277
views
Mentioned On A Blog By A "Hacker" - Should I Care?
Some (insert noun here) who seems to be a black hat hacker thinks that I am his #1 enemy and has posted some of my information on his blog. He is mad because I am advertising for others. The ...
- 801
2
votes
2
answers
2k
views
How much are 0-days worth? [closed]
I got discussing this topic with someone recently and we couldn't reach a consensus so I thought I should ask here. There are commonly thrown around figures regarding the cost of buying a remotely-...
- 11.5k
62
votes
8
answers
4k
views
What are the career paths in the (illegal) computer security field?
As a whitehat pentester I often wonder about the darkside. I see myself working in the office, and imagine that there is someone just like me in China or Romania or in their parent's basement that ...
- 47.3k
3
votes
2
answers
5k
views
How Is It Possible For Hackers To "Dig Up The Dirt" On People?
Like the title says, I was wondering how its possible for hackers to "dig up the dirt" and get peoples personal information such as address, credit cards, bank accounts, social insurance number, etc? ...
- 801
40
votes
3
answers
38k
views
How do hacking groups register domains remaining anonymous?
Let's take lulzsec as an example; they registered lulzsecurity.com. There are two problems that I don't understand how they solved:
They had to pay for it. Tracking down money is generally much ...
- 591
5
votes
5
answers
3k
views
what is the best keylogger for security uses? [closed]
Today we were robbed. A thief come to our home at night and stole some stuff including my brother's laptop.
I think that the right thing to do is to download a keylogger on my PC, just in case...
I ...
- 185
2
votes
3
answers
1k
views
How is it possible that anonymous members still post on Twitter but aren't busted? [duplicate]
Possible Duplicate:
Why is it difficult to catch "Anonymous" or "Lulzsec" (groups)?
I think that something that Anonymous & other hacking groups do, is illegal and they ...
- 718
8
votes
3
answers
920
views
How is "anonymous" getting ahold of all these plain-text passwords
In the last several months there have been several publicized data breaches and public website defacements done by several different hacking groups (which the media loves to group under a single ...
- 541
9
votes
3
answers
649
views
How do researchers "gain control of an attacking PC" and not themselves be considered attackers / criminals?
In reference to this Network Computing Report article titled "'Operation Shady Rat' Perpetrated Five Years Of Long-Term Attacks On Government, Enterprises"
The Cliff's Notes to the article is thus: ...
- 305
8
votes
3
answers
3k
views
What does a court need to successfully prosecute a hacker? Please cite previous cases if possible [closed]
Once a business decides it is worthwhile to persue legal action against the attacker, what information and processes should be followed so that:
Integrity of the investigation is maintained
The ...
- 51.1k
10
votes
2
answers
451
views
Why is FireSheep such a big deal?
We've had WireShark and other tools for a long time before. Why does everybody make such a big deal about FireSheep?
- 1,871
12
votes
3
answers
2k
views
How much money does it take to equip a fully funded black hat team? How much money to defend against such a team?
Richard Bejtlich wrote in July 2009 the following:
"I submit that for $1 million per year an adversary could fund a Western-salaried black hat team that could penetrate and persist in roughly any ...
- 13.8k