Hot Null Byte How-Tos
![iOS 18 Tips, Tricks, How-Tos, News](https://img.wonderhowto.com/img/15/56/63854300537190/0/ios-18-secrets-revealed.600x696.jpg)
![](https://img.wonderhowto.com/img/29/47/63669380829045/0/hacking-macos-perform-situational-awareness-attacks-part-1-using-system-profiler-arp.1280x600.jpg)
Hacking macOS: How to Perform Situational Awareness Attacks, Part 1 (Using System Profiler & ARP)
The first few minutes after gaining access to a MacBook are critical — but where do we begin? Using tools built into macOS, we can develop an in-depth understanding of running background processes, detect antivirus software, locate sensitive files, and fingerprint other devices on the network. All of this can be done without installing additional software or modifying any files.
![](https://img.wonderhowto.com/img/24/45/63668864750947/0/hacking-macos-perform-privilege-escalation-part-1-file-permissions-abuse.1280x600.jpg)
Hacking macOS: How to Perform Privilege Escalation, Part 1 (File Permissions Abuse)
In most macOS hacks, a non-root terminal is used to create a backdoor into the device. A lot of damage can be done as a low-privileged user, but it has its limitations. Think twice before granting a file permission to execute — an attacker might be able to convert your harmless scripts into persistent root backdoors.
![](https://img.wonderhowto.com/img/38/36/63667693230810/0/hacking-macos-sniff-passwords-mac-real-time-part-2-packet-analysis.1280x600.jpg)
Hacking macOS: How to Sniff Passwords on a Mac in Real Time, Part 2 (Packet Analysis)
Most users don't realize how much valuable data is in their network traffic. With a few simple tools, an attacker can quickly pick out cookies, passwords, and DNS queries from a macOS device as it covertly streams the victim's network traffic to the attacker's system. Here, we will cover two methods for analyzing packets flowing from a Mac.
![](https://img.wonderhowto.com/img/04/83/63667485292781/0/use-maltego-monitor-twitter-for-disinformation-campaigns.1280x600.jpg)
How To: Use Maltego to Monitor Twitter for Disinformation Campaigns
Russian cyber disinformation campaigns have many missions, but one of particular interest is using technology to monitor, influence, and disrupt online communications surrounding culturally sensitive topics or protests. The ability to watch these events, and even filter positive or negative tweets to amplify, gives rise to the ability to execute a number of disinformation campaigns.
![](https://img.wonderhowto.com/img/17/82/63665019561825/0/hack-wpa2-wi-fi-passwords-using-jedi-mind-tricks-usb-dead-drops.1280x600.jpg)
How To: Hack WPA2 Wi-Fi Passwords Using Jedi Mind Tricks (& USB Dead Drops)
The latest Star Wars movie, Solo: A Star Wars Story, has grossed almost $350 million worldwide during its first month in theaters. This is a good opportunity to discuss how hackers can use media hype (in this case, Hollywood movie hype) to disarm an unsuspecting Windows user into inserting an evil USB stick into their computer.
![](https://img.wonderhowto.com/img/47/59/63664356530504/0/hacking-macos-dump-passwords-stored-firefox-browsers-remotely.1280x600.jpg)
Hacking macOS: How to Dump Passwords Stored in Firefox Browsers Remotely
Passwords and data stored in web browsers are extremely valuable to hackers. If not for financial gain, black hat hackers may still leak your passwords and personal information for amusement. Never undervalue what you're worth to a hacker.
![](https://img.wonderhowto.com/img/96/67/63663697034191/0/hacking-macos-secretly-livestream-someones-macbook-screen-remotely.1280x600.jpg)
Hacking macOS: How to Secretly Livestream Someone's MacBook Screen Remotely
It's possible to stream a MacBook's entire computer screen without using Apple's Screen Sharing application and without opening any ports on the target device. A hacker with low user privileges on the backdoored Mac may be able to view a victim's every move in real time no matter where they are.
![](https://img.wonderhowto.com/img/31/06/63662761396660/0/sql-injection-101-avoid-detection-bypass-defenses.1280x600.jpg)
SQL Injection 101: How to Avoid Detection & Bypass Defenses
It is often said that the best hackers remain unknown, and the greatest attacks are left undiscovered, but it's hard for an up-and-coming penetration tester or white hat to learn anything unless one of those factors is actually known or discovered. But the end goal here in our SQL injection lessons is to make that statement as true as possible for us when performing our hacks.
![](https://img.wonderhowto.com/img/18/58/63662338989819/0/hacking-macos-install-persistent-empire-backdoor-macbook.1280x600.jpg)
Hacking macOS: How to Install a Persistent Empire Backdoor on a MacBook
After backdooring a MacBook not protected by FileVault or using a fake PDF to gain remote access, an attacker may wish to upgrade their Netcat shell to something more fully featured. While a root shell allows attackers to remotely modify most files on the MacBook, Empire features some useful post-exploitation modules which make hacking Macs very easy.
![](https://img.wonderhowto.com/img/08/78/63661040606760/0/hacking-windows-10-intercept-decrypt-windows-passwords-local-network.1280x600.jpg)
Hacking Windows 10: How to Intercept & Decrypt Windows Passwords on a Local Network
Hashes containing login passwords are transmitted between Windows computers on local Wi-Fi networks. By intercepting and decrypting these hashes using Responder and John the Ripper, respectively, we can learn a target's login credentials which can be later used to gain physical access to their computer.
![](https://img.wonderhowto.com/img/41/52/63658344418613/0/hacking-windows-10-find-sensitive-deleted-files-remotely.1280x600.jpg)
Hacking Windows 10: How to Find Sensitive & 'Deleted' Files Remotely
Deleted bank statements and private photos are still within an attacker's grasp, so don't think that emptying your recycling bin is enough to keep your files from coming back to life. It's possible for a hacker to recover compromising files and images from a backdoored computer completely without the victim's knowledge.
![](https://img.wonderhowto.com/img/89/09/63657759260933/0/hacking-windows-10-break-into-somebodys-computer-without-password-exploiting-system.1280x600.jpg)
Hacking Windows 10: How to Break into Somebody's Computer Without a Password (Exploiting the System)
After a hacker has configured Metasploit on a remote private server, created a resource script for automation, and created a simple payload, he or she can begin the process of remotely controlling someone's Windows 10 computer with just a few moments of physical access — even if the computer is off.
![](https://img.wonderhowto.com/img/83/76/63648373555482/0/use-vnc-remotely-access-your-raspberry-pi-from-other-devices.1280x600.jpg)
How To: Use VNC to Remotely Access Your Raspberry Pi from Other Devices
With Virtual Network Computing, you don't need to carry a spare keyboard, mouse, or monitor to use your headless computer's full graphical user interface (GUI). Instead, you can connect remotely to it through any available computer or smartphone.
![](https://img.wonderhowto.com/img/48/08/63643609934753/0/use-usb-rubber-ducky-disable-antivirus-software-install-ransomware.1280x600.jpg)
How To: Use the USB Rubber Ducky to Disable Antivirus Software & Install Ransomware
Ransomware is software that encrypts a victim's entire hard drive, blocking access to their files unless they pay a ransom to the attacker to get the decryption key. In this tutorial, you'll learn how easy it is to use the USB Rubber Ducky, which is disguised as an ordinary flash drive, to deploy ransomware on a victim's computer within seconds. With an attack that only takes a moment, you'll need to know how to defend yourself.
![](https://img.wonderhowto.com/img/77/53/63642585691449/0/null-byte-null-space-labs-present-wi-fi-hacking-mitm-attacks-usb-rubber-ducky.1280x600.jpg)
How To: Null Byte & Null Space Labs Present: Wi-Fi Hacking, MITM Attacks & the USB Rubber Ducky
Null Byte users have often requested video content, but the question has always been what format would best serve our community. This week, we partnered with Null Space Labs, a hackerspace in Los Angeles, to test the waters by hosting a series of talks on ethical hacking for students in Pasadena Computer Science Club. We invited students and Null Byte writers to deliver talks on Wi-Fi hacking, MITM attacks, and rogue devices like the USB Rubber Ducky.
![](https://img.wonderhowto.com/img/03/70/63640510929316/0/use-virtual-burner-phone-protect-your-identity-security.1280x600.jpg)
How To: Use a Virtual Burner Phone to Protect Your Identity & Security
Every time you make a call or send a text, you're giving the recipient your phone number. This can be quite the security vulnerability, opening yourself up to scammers, spammers, and the feds. In this how-to, we'll look at what a burner phone is, why you might want one, and how to get started using a free second phone number on your regular smartphone.
![](https://img.wonderhowto.com/img/74/29/63639194488253/0/attack-vulnerable-practice-computer-guide-from-scan-shell.1280x600.jpg)
How To: Attack a Vulnerable Practice Computer: A Guide from Scan to Shell
In my previous article, we learned how to generate a vulnerable virtual machine using SecGen to safely and legally practice hacking. In this tutorial, we will put it all together, and learn how to actually hack our practice VM. This will provide some insight into the methodology behind an actual attack and demonstrate the proper way to practice on a VM.
![](https://img.wonderhowto.com/img/60/43/63639086765260/0/use-secgen-generate-random-vulnerable-machine.1280x600.jpg)
How To: Use SecGen to Generate a Random Vulnerable Machine
Recently, I ran across SecGen, a project which allows a user to create random vulnerable machines. I absolutely love vulnerable machines, since a vulnerable VM is a safe and legal way to practice hacking tactics, test out new tools, and exercise your puzzle-solving skills.
![](https://img.wonderhowto.com/img/79/60/63633054754464/0/social-engineering-use-persuasion-compromise-human-target.1280x600.jpg)
Social Engineering: How to Use Persuasion to Compromise a Human Target
Social engineering makes headlines because human behavior is often the weakest link of even well-defended targets. Automated social engineering tools can help reclusive hackers touch these techniques, but the study of how to hack human interactions in person is often ignored. Today, we will examine how to use subtle, hard to detect persuasion techniques to compromise a human target.
![](https://img.wonderhowto.com/img/40/77/63611787926355/0/mac-for-hackers-install-iterm2-using-terminal.1280x600.jpg)
Mac for Hackers: How to Install iTerm2 Using the Terminal
Now that we've talked about encryption and managing your passwords, let's continue this series on getting your Mac ready for hacking by turning our attention to the terminal.
![](https://img.wonderhowto.com/img/29/17/63598529543668/0/make-python-basic-unix-password-cracker.1280x600.jpg)
How To: Make a Python Basic Unix Password Cracker!
Greetings fellow students! I'm currently reading a book called "Violent Python: A Cookbook for Hackers, Forensic Analysts, Penetration Testers and Security Engineers"
![](https://img.wonderhowto.com/img/89/66/63595920620839/0/hack-like-pro-digital-forensics-for-aspiring-hacker-part-16-extracting-exif-data-from-image-files.1280x600.jpg)
Hack Like a Pro: Digital Forensics for the Aspiring Hacker, Part 16 (Extracting EXIF Data from Image Files)
Welcome back, my greenhorn hackers! In many cases when a computer, phone, or mobile device is seized for evidence, the system will have graphic images that might be used as evidence. Obviously, in some cases these graphic images may be the evidence such as in child pornography cases. In other situations, the graphic images may tell us something about where and when the suspect was somewhere specific.
![](https://img.wonderhowto.com/img/01/31/63594500284803/0/disable-anti-virus-services-after-got-meterpreter-session-remote-pc.1280x600.jpg)
How To: Disable Anti Virus Services After Got Meterpreter Session on Remote PC.
Hello Friends … My name is Suresh Senarathna and this is my first “How-To” post,
![](https://img.wonderhowto.com/img/65/88/63594352795767/0/hack-like-pro-snort-ids-for-aspiring-hacker-part-2-setting-up-basic-configuration.1280x600.jpg)
Hack Like a Pro: Snort IDS for the Aspiring Hacker, Part 2 (Setting Up the Basic Configuration)
Welcome back, my tenderfoot hackers! As you should know from before, Snort is the most widely deployed intrusion detection system (IDS) in the world, and every hacker and IT security professional should be familiar with it. Hackers need to understand it for evasion, and IT security professionals to prevent intrusions. So a basic understanding of this ubiquitous IDS is crucial.
Decrypting [Part 1]: How to Decrypt Caeser Encrypted Texts
In this Tutorial I will show you how you can use the frequency of letters to decrypt the famous Caesar cipher. I hope it is easy to understand and helpful for getting in touch with basic cryptanalysis. If you find any mistakes or have questions feel free to ask me. Finally I ask you to give me feedback which I will take into account for the next part.
![](https://img.wonderhowto.com/img/81/74/63593219463234/0/hack-like-pro-metasploit-for-aspiring-hacker-part-13-web-delivery-for-windows.1280x600.jpg)
Hack Like a Pro: Metasploit for the Aspiring Hacker, Part 13 (Web Delivery for Windows)
Welcome back, my hacker novitiates! In the previous part of this series, we looked at how to use Metasploit's web delivery exploit to create a script to connect to a UNIX, Linux, or OS X machine using Python. Many members of the Null Byte community have asked me, "Can we do the same for a Windows systems?" The answer is YES!
![](https://img.wonderhowto.com/img/61/16/63590792894017/0/bypass-uac-using-dll-hijacking.1280x600.jpg)
How To: Bypass UAC Using DLL Hijacking
This tutorial was written with Windows 7 in mind, but the principle applies to all versions starting from 7.
![](https://img.wonderhowto.com/img/12/07/63590724971376/0/hack-like-pro-evade-av-software-with-shellter.1280x600.jpg)
Hack Like a Pro: How to Evade AV Software with Shellter
Welcome back, my tenderfoot hackers! One key area on the minds of all hackers is how to evade security devices such as an intrusion detection system (IDS) or antivirus (AV) software. This is not an issue if you create your own zero-day exploit, or capture someone else's zero-day. However, if you are using someone else's exploit or payload, such as one from Metasploit or Exploit-DB, the security devices are likely to detect it and spoil all your fun.
![](https://img.wonderhowto.com/img/48/55/63590329123689/0/hackers-advice-tip-choosing-your-path-knowing-where-learn-learn-newbies-please-read.1280x600.jpg)
A Hackers Advice & Tip: Choosing Your Path. Knowing Where to Learn & How to Learn It **Newbies Please Read**
This article is to all the newbies on here wanting to become a hacker. Since I have seen many newbie questions on here, I need to address this.
![](https://img.wonderhowto.com/img/35/05/63588360871277/0/raspberry-pi-metasploit.1280x600.jpg)
Raspberry Pi: Metasploit
Before we dive into the world of frustration, I first would like to thank whoever of the admins and mods made the folder for Raspberry Pi in the How-To's, thank you. Now with that outta the way, this article is about Metasploit on Raspberry Pi (hence the title). I should say that I ran into a error, but I think I figured what the problem is. First of all this is not on Kali Linux, but on a regular Linux OS. With that said let's open up a terminal and begin.
![](https://img.wonderhowto.com/img/66/34/63586911528336/0/build-and-install-kali-nethunter-new-version-supported-android-device-running-android-6-0-1.1280x600.jpg)
How To: Build and Install Kali Nethunter (The New Version) On a Supported Android Device Running Android 6.0.1
Hi guys. Hope you all had a good Christmas , today i have a tutorial for you.
![](https://img.wonderhowto.com/img/80/96/63586177603145/0/security-oriented-c-tutorial-0x08-trip-down-memory-lane.1280x600.jpg)
How To: Security-Oriented C Tutorial 0x08 - A Trip Down Memory Lane
Before I continue with a topic on strings, we first require some fundamental understanding of how memory works, i.e. what it is, how data looks in memory, etc. as this is crucial when we are analyzing vulnerabilities and exploitation. I highly suggest that your mind is clear and focused when reading the following article because it may prove to be confusing. Also, if you do not understand something, please verify all of your doubts, otherwise you may not completely understand when we touch on...
How To: Increase TxPower Kali Sana Linux 2.0
This is for those using Kali Linux 2.0 that need to edit the CRDA values to get the increase in Txpower
![](https://img.wonderhowto.com/img/07/05/63586052977510/0/hack-into-mac-without-password.1280x600.jpg)
How To: Hack into a Mac Without the Password
Hello, my fellow hackers. My name is cl0ck. I am a senior majoring in Computer Engineering with an emphasis is Security. I have been lurking the site for a while now reading and learning from the great minds that reside here. I, too, have some knowledge that I would like to share with all of you. This post actually comes from a personal problem I faced and had to find a solution for. Without further ado, here it is:
![](https://img.wonderhowto.com/img/19/18/63585251931285/0/hack-any-windows-7-8-10-user-password-without-logging.1280x600.jpg)
How To: Hack Any Windows 7/8/10 User Password Without Logging In
Hello! This is my first post on this awesome website! I know that Windows exploits are less common than the more advanced hacks, but I found something I deem pretty cool and figured why not share it with you all. Alright, enough about me, lets begin.
![](https://img.wonderhowto.com/img/73/22/63584832130406/0/make-your-remote-screenshot-captor-python.1280x600.jpg)
How To: Make Your Remote Screenshot Captor(Python)
Hi I am a new member of null byte(although I am reading this website from the beginning) and this is going to be my first post.
![](https://img.wonderhowto.com/img/81/23/63583107622759/0/evil-twin-part-1-setting-up-dhcp-server.1280x600.jpg)
How To: Evil-Twin (Part 1) - Setting Up the Dhcp Server.
Hello again, ***UPDATE: Adding links to the other Two articles****
![](https://img.wonderhowto.com/img/59/42/63582484514913/0/typoguy-explaining-anonymity-hackers-mindset.1280x600.jpg)
TypoGuy Explaining Anonymity: A Hackers Mindset
CEO's of IT companies doesn't know this because they are not a hacker. Only a true hacker can become a successful Security head officer.
How To: Cover Your Tracks After Hacking a Wifi
Greetings null-bytians. Say you have been able to penetrate your neighbour's AP, and of course you had spoofed your MAC address. Now you go on and test to see with excitement if the password really works and the MAC is still spoofed. You login successfully and you browse the web forgetting to check what your current MAC is. Well, if you may do an ifconfig command, you will see that your permanent MAC is being used. Oh!! and guess what, ... your real MAC has been logged. Even though there is t...
![](https://img.wonderhowto.com/img/36/36/63581664606862/0/writing-windows-10-rootkit-part-1.1280x600.jpg)
Writing a Windows 10 Rootkit: Part 1
So this is my methodology for this project of writing a rootkit. Please leave feedback on what is right/wrong. I tried to simplify concepts the best I could however...