About

The author
I am Anthony, student in computer and software engineering. I first got my hands on cyber security some years ago, with Raspberry Pi and its support for Kali Linux. I then decided to start working on small projects and thought it would be great to share them with others.

The goal of Hacker Handle
As I wanted to keep track of my progress in penetration testing, I thought it would be a great idea to create a website. This would allow me to share my knowledge and discoveries with people who are interested in cyber security.


Copyrights and credits

  • All posts are written by the sole author of this blog ("author").
  • All images belong to the author, unless stated otherwise.
  • Packages, suites, and software used in research and cited in the blog are not the author's work nor property, unless stated otherwise.
  • Credits to David Libeau for the font of the website title.

Content use policy
You can use my content as long as you link my blog URL.

Ethical notice and Legal disclaimer

The field of cyber security, specifically penetration testing, involves great amounts of responsibilities. Any person who performs tasks such as those described on this website should be well aware of the ethical standards required. Should a reader of this blog want to recreate the author's work, they must bear in mind the most important rules: always work on one's own equipment, or if using someone else's is inevitable, always have explicit authorization; be aware of the local laws and regulations on penetration testing and always abide by them; never use one's knowledge for malicious or harmful intents. 
This blog is for educational purposes only. As stated above, all demonstrations are done on the author's own devices, without harm or damage to any third party whatsoever. The author cannot be held liable, accountable, or responsible for any misuse or abuse by readers.

Comments

Post a Comment

Share your thoughts! Leave a comment here

Popular posts from this blog

Pixie-Dust Wifi Attack: Theory & Practice

Image
In the series of wifi hacking, I have already covered WPA handshake capture and social engineering . In this post I present to you yet another attack using a novel approach for gaining access to a network: it is based on the WPS protocol and is known as the Pixie-Dust attack. You will find a step-by-step guide after a short explanation of the theory behind the security flaw hereby discussed.
Read more

Getting started in scripting

Image
Perhaps the most important skill a hacker should master is programming. This is what makes the true difference between "hackers" and "script kiddies". The latter lacks the knowledge to write his own script: he rather uses programs made by others to attack his target. In contrast, a worthy hacker builds his own program tailored to his needs in order to exploit a specific vulnerability. Does that mean that a hacker never uses material written by others? Of course not. As most of the exploits (i.e. scripts that exploit a flaw) written by/for the Linux community are open-source, hackers often reverse-engineer these programs to understand how they work and potentially modify them to suit their own needs. What's more, when building his own script, a hacker very often integrates some tool from a fellow hacker. This is precisely how malware evolves on a daily basis: a programmer uses his know-how to combine multiple exploits in an effective way. Writing your firs
Read more

How to capture a WPA handshake

Image
There are different methods for getting unauthorized access to a Wifi network. I will try to cover several ones, but in this post I will focus on capturing a WPA handshake for a subsequent dictionary or brute-force attack. Requirements Before getting started make sure you have the following: Raspberry Pi 3 running Kali Linux ( tutorial here ) Monitor-mode and Packet-injection capable wifi adapter PC Decent internet connection We'll be using the wifi adapter with the Raspberry Pi, controlling them with a PC via VNC ( tutorial here ). What is a WPA handshake? In simple words, a WPA handshake is used to authenticate a user with an AP (Access Point). To illustrate things, think of it as a literal handshake: if the client presents his hand but the AP doesn't, the handshake can't happen and authentication thus fails. Because the engineering behind a WPA handshake is not the main purpose of this guide, let's dive into our work. Discovering the target AP Th
Read more