In the above video, I demonstrate how easy it is to manually change your MAC address, but what even is a MAC address? A MAC address is a unique identifier given to the Network Interface Controller. of a computer. Unlike IP addresses, they don't change when you change your IP with a VPN. This can be problematic because you can still be tracked by your MAC address if someone is determined enough to find out who you are. No worries though, as you can see, it's really not that hard to change your MAC!
Why Change Your MAC?
Most people probably shouldn't even try to change their MAC address, there is really no point in it unless you either really value your privacy, or you are a hacker of some sort. For hackers though, changing your MAC address can give you more access to a Network that they wouldn't normally have if they were to change MAC to a MAC on the network (known as MAC spoofing). Not only can you get more access, but it makes it easier to escalate your privileges easier than if you didn't spoof your MAC. Just remember that unless you have explicit permission to hack a network, it is ILLEGAL to do so!
Process of Changing Your MAC
In the video, I demonstrate very clearly how to change your MAC address manually, but there are also programs that are already written that can change your MAC address for you, instead of you having to enter the commands on the command line every time that you want to change your MAC. You can find a lot of MAC changing programs on Github. For example, here is a Github repository of a MAC changer you can use to manipulate your own MAC!
Takeaway
The takeaway of this post is that, in reality, most people will never have to change their MAC, or even want to for that matter, but for hackers, changing their MAC addresses can provide them with easier access to whatever network they are trying to hack and possibly allow them to escalate their privileges or transverse the network easier.
Simple Vulnerability Scanning with Nmap for Beginners
First off, what is Nmap? In simple terms, Nmap is a port-scanner and light-weight vulnerability scanner used for OSINT/Information Gathering by hackers, ethical hackers, and bug bounty hunters. You can use it to identify open ports, services that are running on those ports, operating system detection, and much much more.
Click here to learn more about Nmap
In the above video clip, I demonstrated how a basic Nmap scan is performed. All you have to do on Debian based distributions like Kali Linux, Debian, and Parrot Security OS is open your command line and type the simple command I typed above:
nmap (website/IP address)
This will scan whatever website, or IP address you want to scan and display the open ports on it.
Nmap scans can be as simple or as complex as you want to make them but some of my favorite commands and most useful commands that I use every day are:
-sV scans for the services running on the target website/IP
-O scans for the Operating System running on the target
--script=vulners for vulnerability scanning with NSE
-oA Outputs scans in 3 different forms
--top-ports scans the top (n) ports you specify after command
If you want to find a list of all the commands you can use with Nmap just type "nmap" in the command prompt. It will list everything that you can use in your scan.
For more information on using Nmap as a vulnerability scanner, check out this link on using the Nmap Scripting Engine (NSE)
Top 3 Free Amazing Must Watch Courses and Tutorials on Object-Oriented Python
What is Object-Oriented Python Programming?
So if you’re reading this, I am going to assume that you already know how to program with Python 3 at least up to variables, mathematics operators, and have a good understanding of loops. I also have some understanding at least of what you can do with Object-Oriented Python, but for those of you who don’t, Object-Oriented Python is about using classes, objects, and methods to develop programs. A good example of a class is as such:
You can use these terminal colors by calling the classes as such:
Calling a method is easy! Here is a simple example:
As you can see, this block of code simply printed out my name, Zayden! So now I’m assuming you have a general understanding! Don’t worry, I’m about to share with you some really cool tutorials/classes that are completely free that can teach you all about OOP!
1. Udemy’s Python OOP : Object Oriented Programming in Python course, that is COMPLETELY free:
It is 2hrs and 22 minutes long and is taught by Deepali Srivastava and goes into great, easy-to-understand detail about what OOP is and will get you going with a great understanding of this aspect of programming! It goes into creating classes and objects, magic methods, inheritance and polymorphism, and much more!
Some of the things you will learn are:
A good understanding of Object Oriented features of Python
Object Oriented Python features implementation
Writing Classes and Creation of Objects
Inheritance and Polymorphism with examples
Data hiding, Class variables, Class Methods, Static Methods
Property, MRO, super() with examples
2. Youtube’s Tech With Tim’s Python Object Oriented Programming (OOP) — For Beginners
This tutorial is designed for beginner python programmers and will give you a strong foundation in object oriented principles. Tech With Tim is a great Youtuber to learn from as he covers multiple areas of Python programming!
Who knows, he might just become your favorite Youtuber!
3. Youtube’s Edureka!’s Learn Object Oriented Programming in Python | Python Training | Edureka | Python Live — 1
Which is a livestream part 1 tutorial for beginners that want to learn Python OOP. It is 26min 35sec long, but goes into great detail with easy, understandable “Code-Along” style learning! As I say, the best way to learn is by DOING!
Some other amazing resources on learning Object-Oriented Python are:
The Official Python Documentation:
Classes — Python 3.9.7 documentation
Classes provide a means of bundling data and functionality together. Creating a new class creates a new type of objects
Python Docs
Coursera:
You can find a lot of good Python programming courses on this site which is one of the leading sites in free online MOOCs. Definitely an awesome site!
Get 50% off certifications here, but is completely free to audit classes!
CodeCademy:
One of the best sites out there for learning to code! They offer so many different ways to learn and so many programming languages and tutorials!
Check them out here
FreeCodeCamp:
This is a 100% free site that offers free certifications in things like Scientific Python, Web Design, Machine Learning, and so much more! They don’t just offer that but also offer a library full of tutorials as well!
Check them out here
Aquatone
By far the best subdomain enumerator I have ever used, I love this tool-set both Aquatone Discover and Aquatone Scan. I would definitely recommend using this tool if you are a bug bounty hunter! Please note that I used the Nmap Scanme site as to avoid doing anything illegal and as you can see it already pulled the nameservers and does some cool stuff like pulling the subdomains and all their IPs and information! I quite often use this in combination with a very powerful program called Photon but for some reason haven’t been able to install Docker on Parrot because of some weird error. Will update as soon as I am able to fix this.Â
New tool I found on Github called the All-In-One Hacking Tool. Pretty legit, I have mainly just been fiddling around with the information gathering part. I haven’t found the whole thing incredibly useful yet, but I like it somewhat.
It has a bunch of different features and if you enjoy a good multi-tool for your penetration testing kit, I would highly recommend at least trying it out. You can find it on Github at
A little about me:
I am a grey-hat hacker, I mainly do bug bounties, but sometimes do a bit of...questionable work albeit never explicitly malicious.
I am a programmer and my primary programming languages are C, C++, and Python 3, Python being my favorite and the language I am most fluent in.Â
I build malware and hacking tools, sometimes for fun, sometimes for curiousity, sometimes to sell for... “educational purposes” albeit I hold NO responsibility for what people do with my software.
I am 28 years old and part of a grey-hat hacking group who also has a few black-hats thrown in the mix for good measure. I am not bias against what other people do, but I have a firm belief in not harming anyone unless they harm you first.
Furthermore, most of the stuff I will be posting on here is just programming stuf, maybe some malware sourcecode, and possibly some penetration testing tools that I have developed or am in the process of developing.
My current projects are:
Building a website for my fiance with Flask, HTML5, Boostrap, and Mongo.
Building a new ransomware.
Getting more familiar with different types of encryption
Learning Tensorflow, Tkinter, PyQt6, and Tensorflow for machine learning.
Currently I am enrolled in:
Intro to Statistics
IBM AI Engineering Certification Classes
IBM Deep Learning
IBM Cyber Security Analyst Certification
Machine Learning with Python
FreeCodeCamp’s Machine Learning with Python
Stuff I’ve recently finished or am interested in collaborating on:
A phone number grabber that geolocates the origin of the number using Google’s phonenumber python package & geolocate package for python.
(Looking to collaborate on this to make it into much more than just a geolocator and more similar to a doxer)
A RAT called DEATHSDOOR which is available on my github for study.
A keylogger that sends logs to email.
A ransomware that needs debugging and finishing called Slenderware (please feel free to inquire about collaboration on this project)
An email bomber called Slenderbomber which needs significant improvements to avoid spam ban.
An email client that I finished with my friend Fazal from Instagram, we just created the GUI for it using Tkinter and it is fully functional! Will upload videos later of the basic program pre-GUI.
A Discord spammer called Yoshibot that is finished but broken due to ASCII errors and all that fun stuff.
A Telegram RAT that uses Telegram as a listener/command prompt (works splendidly!)
Where I am going from here
I am part of the BugCrowd platform and heavily interested in bug bounties.Â
I practice on HackerOne’s CTF and Over the Wire.
Currently about to complete Bandit!
I want to finish my certifications.
I am getting married to my long-time girlfriend in December or March!
I want to learn Javascript, Java, and Batch, along with finishing learning Ruby and Ruby on Rails. I also want to learn JQuery as well.
Thank you for following my Tumblr if you so choose, I will try to put out content regularly along with updates from my Github!
vaporwave
pixelskylines
blakekathryn
theartofmadeline
turnnoffyourmind