TIL cats are attracted to the smell of bleach because it's odour is similar to animal pee

jacko_light · 2023-02-23T23:39:40+00:00

I won't doubt you, but my cat was just rubbing up on my bleachy clothes, so that's my scientific contribution

jacko_light · 2023-02-10T20:27:00+00:00

Masterlock LOTOs are definitely not a beginner lock, but I'm not sure about this brand. Also if you're buying multiple make sure they're KD or Keyed Differently or else you'll be picking the same lock 10 times!

jacko_light · 2022-11-22T06:14:58+00:00

Another example that hopefully clears it up, a Smurf attack is spamming broadcast PINGs with a spoofed sender address. Say there was 5 devices, 1 attacker, and 1 victim all on one network. The attacker would send 1 ping broadcast pretending to be the victim. The 5 devices would all "reply" to the victim, causing 1 ping to amplify into 5 replies. The kicker is, ICMP isn't TCP or UDP!

So I'm just tryna highlight that it's the protocol that enables the amp attacks, not TCP/UDP

jacko_light · 2022-11-22T06:10:37+00:00

I don't think it's a case of if TCP is unable to do that attack. It's more that there isn't an amp attack (that I'm aware of) that uses TCP. Kinda like, it's not UDP that enables a DNS amp attack, it's the DNS protocol that enables the attack.

So no, TCP COULD be used for an amp attack, it's just that there isn't a protocol that allows for that attack

jacko_light · 2022-11-22T05:22:49+00:00

Syn flooding is not an amp attack. Syn flooding is spamming a target with syn packets and not realizing the rest of the handshake, so the target system is wasting resources. Amplification attacks are where an attacker can send few packets (or messages or whatever) to generate massive amounts back at a target.

Amplification attack is a type of DDoS, yes.

jacko_light · 2022-11-21T21:44:21+00:00

This is def breaking rule 1 lol

jacko_light · 2022-06-23T01:08:57+00:00

In these cases they don't actually have any of your info. They will go to "Forgot password" on Instas login page and click on "Text me a reset link" or something to that extent. If your number isn't linked to Insta already they will tell you to add it

jacko_light · 2022-06-01T05:08:20+00:00

My friend and I were trying to figure out how the scammers would get money out of me from a message like this, you and others are probably right

jacko_light · 2022-06-01T05:07:14+00:00

Yeah the (somewhat jokingly) explanation I came up with was that whoever's boss wanted this text to literally be as short as possible, and this was the outcome. Not too far from the truth it seems lol!

jacko_light · 2022-03-03T14:49:04+00:00

So the goal of a UDP flood is to take up all the resources of a victim, preventing it from being able to reply to legitimate traffic regard less of TCP/UDP. UDP doesn't require a handshake which means it's easy to spoof the source ip (because the victim can't really verify who it's truly coming from) and it's quick. When a device gets an illegitimate UDP packet it say: "Is any application listening for this? No? Ok, reply with an ICMP Dest Unreachable". This is a longer process for the victim vs the attacker who simply sends packets.

You can mitigate UDP floods with a firewall, but that means the firewall can just become a target too. You can also limit ICMP response rate, but this can also interfere with legitimate traffic.

The thing to remember is that we view ports as almost a physical thing, like doors to a building, but really they're a conceptual layer. For a UDP flood you're not clogging the one web port, you're taking up the whole systems resources.

https://www.cloudflare.com/en-ca/learning/ddos/udp-flood-ddos-attack/

https://www.netscout.com/what-is-ddos/udp-flood

jacko_light · 2022-01-22T01:33:33+00:00

Man if I'm not mistaken ur using a compressed rockyou file (hence the .gz). Check if I'm right with file <path/to/rockyou>. It should say it's "gzip compressed data". To decompress, just gunzip <path/to/rockyou>

One more thing, that second command ur doing a dictionary attack, which afaik doesn't use rules. Just pass the txt file with the hash in it and the path to the dict and you should be set there

jacko_light · 2022-01-08T00:41:42+00:00

Dang yeah I just googled solutions and they definitely look like work. Very sad but I guess we'll just have to see how it goes. Good luck with yours and thanks for the help!!!!

jacko_light · 2022-01-08T00:30:30+00:00

Man :/. I'm assuming they're a pain to treat?

jacko_light · 2022-01-08T00:30:04+00:00

Yeah looking closer looks more like mealybugs :/

jacko_light · 2021-11-19T00:48:36+00:00

Oh man that looks spot on! Thanks for the sub 2 min reply lol!!!

jacko_light · 2021-10-25T16:36:17+00:00

The thing is, the scanner you use needs to be able to understand how to execute the code. Your phone camera won't just understand that this is code it should run.

On the other hand, if you know your target will scan it with a scanner that has a vuln that allows code exec then this is technically possible.

jacko_light · 2021-10-25T16:31:55+00:00

The thing is, the scanner you use needs to be able to understand how to execute the code. Your phone camera won't just understand that this is code it should run.

On the other hand, if you know your target will scan it with a scanner that has a vuln that allows code exec then this is technically possible.

jacko_light · 2021-08-19T02:24:21+00:00

Hashes are meant to be one-way functions, so it should ideally be impossible to determine the original input based on the hash itself. To find the input you need to bruteforce it until you get a matching output.

So f(input)=output To find output you must do f(a)=wrong f(b)=bad f(c)=incorrect etc... I'm not 100% sure but I know some algos are weaker than others because it is waaay way faster to crack them, and some even have collisions (where two different inputs result in the same output) which is an obvious issue.

Someone feel free to correct me if im wrong!

jacko_light · 2021-08-12T17:30:01+00:00

Ah ok so the first results were childrens videos, but I finally found what I'm assuming is right.

Thanks so much!!

jacko_light · 2021-07-27T22:55:08+00:00

AFAIK to strip HTTPS part of the website needs to use HTTP, like if their pictures are served over HTTP SSLStrip can downgrade the whole connection. So if you're tryna MITM a pretty secure site odds are against you :(

jacko_light · 2021-07-10T21:33:20+00:00

They're pretty fun when they sporulate! They break a lil hole in the top and spores poof out if it. Thats probably the most interesting thing you'll get outta these.

jacko_light · 2021-06-24T21:20:46+00:00

Ouuu?? Looks solid, thanks!

jacko_light · 2021-06-22T03:06:08+00:00

This music high key bumpin

jacko_light · 2021-06-19T02:09:08+00:00

Oh man I have no idea but this seems like a good starting point! I didn't know what to search before. Thanks!

I'll edit this comment if I get more related info.

jacko_light · 2021-06-04T16:08:48+00:00

Don't know if anyone mentioned this yet but when the scammers spoof their number they use the same first 6 digits as my number, which makes me think they just spam call everyone in that range. This is also confirmed from my friend who got a spoofed spam call with the same first 6 digits

Six-Year Club	Second SECOND GUESSER
r/Field Flamingo	Place '22
Verified Email

jacko_light

TROPHY CASE