Questions tagged [black-hat]

Black hat hacking is the act of using computer security hacking for illegal means, usually to compromise high value computer systems. It is the opposite of white hat hacking.

Filter by
Sorted by
Tagged with
58
votes
8answers
3k views

What are the career paths in the (illegal) computer security field?

As a whitehat pentester I often wonder about the darkside. I see myself working in the office, and imagine that there is someone just like me in China or Romania or in their parent's basement that ...
38
votes
5answers
9k views

Is demanding a “donation” before disclosing vulnerabilities black hat behavior? [closed]

We have been contacted by an "independent security researcher" through the Open Bug Bounty project. First communications were quite OK, and he disclosed the vulnerability found. We patched the hole ...
37
votes
3answers
32k views

How do hacking groups register domains remaining anonymous?

Let's take lulzsec as an example; they registered lulzsecurity.com. There are two problems that I don't understand how they solved: They had to pay for it. Tracking down money is generally much ...
29
votes
9answers
9k views

How can an administrator secure against a 0day before patches are available?

I'm working on a thesis about the security hacker community. When a 0day is published, how can an administrator secure his application/website between the time the 0day is published and the patch is ...
12
votes
3answers
1k views

How much money does it take to equip a fully funded black hat team? How much money to defend against such a team?

Richard Bejtlich wrote in July 2009 the following: "I submit that for $1 million per year an adversary could fund a Western-salaried black hat team that could penetrate and persist in roughly any ...
10
votes
2answers
366 views

Why is FireSheep such a big deal?

We've had WireShark and other tools for a long time before. Why does everybody make such a big deal about FireSheep?
9
votes
3answers
546 views

How do researchers “gain control of an attacking PC” and not themselves be considered attackers / criminals?

In reference to this Network Computing Report article titled "'Operation Shady Rat' Perpetrated Five Years Of Long-Term Attacks On Government, Enterprises" The Cliff's Notes to the article is thus: ...
8
votes
3answers
800 views

How is “anonymous” getting ahold of all these plain-text passwords

In the last several months there have been several publicized data breaches and public website defacements done by several different hacking groups (which the media loves to group under a single ...
8
votes
3answers
2k views

What does a court need to successfully prosecute a hacker? Please cite previous cases if possible [closed]

Once a business decides it is worthwhile to persue legal action against the attacker, what information and processes should be followed so that: Integrity of the investigation is maintained The ...
7
votes
3answers
4k views

Why aren't ransomware deployers arrested? [closed]

Why aren't people who use ransomware to extort money from people arrested? Using ransomware is illegal, presumably. The idea that Bitcoin is anonymous is a myth. Given this, it seems like they ...
5
votes
5answers
3k views

what is the best keylogger for security uses? [closed]

Today we were robbed. A thief come to our home at night and stole some stuff including my brother's laptop. I think that the right thing to do is to download a keylogger on my PC, just in case... I ...
3
votes
1answer
198 views

Mentioned On A Blog By A “Hacker” - Should I Care?

Some (insert noun here) who seems to be a black hat hacker thinks that I am his #1 enemy and has posted some of my information on his blog. He is mad because I am advertising for others. The ...
3
votes
2answers
3k views

How Is It Possible For Hackers To “Dig Up The Dirt” On People?

Like the title says, I was wondering how its possible for hackers to "dig up the dirt" and get peoples personal information such as address, credit cards, bank accounts, social insurance number, etc? ...
3
votes
0answers
467 views

What reason would you use the decoy scan option for Nmap?

I'm confused as to why you would use the -D option for Nmap. Is there any 'white hat' reason for using it? Or is it used particularly for malicious purposes?
2
votes
3answers
1k views

How is it possible that anonymous members still post on Twitter but aren't busted? [duplicate]

Possible Duplicate: Why is it difficult to catch "Anonymous" or "Lulzsec" (groups)? I think that something that Anonymous & other hacking groups do, is illegal and they ...
2
votes
2answers
2k views

How much are 0-days worth? [closed]

I got discussing this topic with someone recently and we couldn't reach a consensus so I thought I should ask here. There are commonly thrown around figures regarding the cost of buying a remotely-...
2
votes
0answers
231 views

OpenPGP smartcards compromised by blackhat 2015 simcard hack?

This blackhat was a new sidechannel attack in the SIM-card AES encryption announced. I am currently using the OpenPGP smart/SIM-card version 2.1 to store my PGP-private keys, which is the same model ...
1
vote
0answers
62 views

how to create random request time delay in sqlmap?

How can i configure sql-map to try payloads at random time delay? as an example time between first and second request can be 0.10s and second and third might 0.25 and so on. i know there is --delay ...
0
votes
1answer
272 views

Penetration Testing Methodologies

I have some issues regarding the concept of black, grey and white hat. Where and in what penetration testing methodology I can find the black, grey or white hat concept definition?
0
votes
2answers
219 views

Do the 'bad guys' create honeypots?

I know companies, governments, and other organizations create honeypots (ex: SQLi pages, Open Access Points, Open Ports, etc.) to lure in the bad guys. Are there any examples of the bad guys creating ...
0
votes
0answers
55 views

Could someone compare basic anonymity vs basic computer hacker anonymity? [duplicate]

So, let's say one just doesn't want the government/corporations to know what they are doing online. Let's say, for example, that they just don't trust the NSA, FBI, Google, etc. So what are the steps ...
-2
votes
2answers
282 views

I developed a very disruptive program with major implications. What next? [closed]

Long story short and without giving away too many details, I and my business partner came up with an idea for a program. It essentially bypasses the monetization feature of another piece of software ...