HackerOne

Demo of creating Hidden Mail Service over TOR:

https://youtu.be/E2x5CmjPXPw

More information can be found in:
https://mstajbakhsh.ir/creating-hidden-mail-service/

YouTube

Installing and Configure Hidden Mail Service over TOR

Demo of installing and configuring a hidden email service behind TOR anonymity network using hMailServer. Additionally it is shown that using Thunderbird (the email client), users can access the hidden email server and communicate over it.

More information…

108 viewsMir Saman Tajbakhsh, 12:47

HackerOne

https://research.checkpoint.com/black-hat-2019-whatsapp-protocol-decryption-for-chat-manipulation-and-more/

Check Point Research

Black Hat 2019 – WhatsApp Protocol Decryption for Chat Manipulation and More - Check Point Research

Research By: Dikla Barda, Roman Zaikin and Oded Vanunu According to sources, WhatsApp, the Facebook-owned messaging application has over 1.5 billion users in over 180 countries. The average user checks WhatsApp more than 23 times per day. And, the number…

1.72K viewsپدرخوانده, 20:41

HackerOne

Vulnerabilities in 5G

1) A protocol vulnerability in 4G and 5G specification that allows the fake base station to steal information about the device and mount identification attacks
2) Implementation vulnerability in cellular network operator equipment that can be exploited during a device registration phase
3) A protocol vulnerability that affects the battery life of low-powered devices
https://infosec.sintef.no/en/informasjonssikkerhet/2019/08/new-vulnerabilities-in-5g-security-architecture-countermeasures/

infosec.sintef.no

New vulnerabilities in 5G Security Architecture & Countermeasures (Part 1)

The 5G network promises to transform industries and our digital society by providing enhanced capacity, higher data rates, increased battery life for machine-type devices, higher availability and reduced power consumptions. In a way, 5G will act as a vehicle…

1.91K viewsپدرخوانده, 09:18

HackerOne

https://medium.com/@valeriyshevchenko/two-easy-rce-in-atlassian-products-e8480eacdc7f
#BugBounty
#VulnDisc

Medium

Two Easy RCE in Atlassian Products

It was a long time from my last article. It was so many interesting results in my work. Seems that it's right time to share my knowledge…

2.28K viewsAmir kiani, 11:22

HackerOne

https://portswigger.net/blog/http-desync-attacks-request-smuggling-reborn

PortSwigger Research

HTTP Desync Attacks: Request Smuggling Reborn

2.02K viewsAmir kiani, 03:12

HackerOne

Forwarded from CTF Community | Hints

Automated Detection of Web Application Firewall

https://github.com/EnableSecurity/wafw00f
#web
#Pentest
@ctfplay

GitHub

GitHub - EnableSecurity/wafw00f: WAFW00F allows one to identify and fingerprint Web Application Firewall (WAF) products protecting…

WAFW00F allows one to identify and fingerprint Web Application Firewall (WAF) products protecting a website. - EnableSecurity/wafw00f

82 viewsپدرخوانده, 22:37

HackerOne

http://www.hcon.in/

2.4K viewsMir Saman Tajbakhsh, 04:34

HackerOne

https://research.checkpoint.com/black-hat-2019-whatsapp-protocol-decryption-for-chat-manipulation-and-more/

https://github.com/romanzaikin/BurpExtension-WhatsApp-Decryption-CheckPoint

Check Point Research

Black Hat 2019 – WhatsApp Protocol Decryption for Chat Manipulation and More - Check Point Research

2K viewsپدرخوانده, 17:25

HackerOne

https://medium.com/@valeriyshevchenko/jenkins-rce-poc-or-simple-pre-auth-remote-code-execution-on-the-server-d18b868a77cb

#BugBounty
#writeup

Medium

Jenkins RCE PoC or simple pre-auth remote code execution on the Server.

Once upon a time, a friend of mine asked me a question — "Do you know any fresh RCE for the Jenkins environment ?". I was informed already…

2.1K viewsAmir kiani, edited 07:13

HackerOne

Instagram Added to Facebook Data-Abuse Bounty Program

Social media giant also launches invitation-only bug bounty program for 'Checkout on Instagram'.

Instagram users aware of a third-party application developer misusing their personal data can now report the activity to the company and potentially earn a reward for it.

Facebook, which owns Instagram, on Monday expanded its Data Abuse Bounty program to Instagram in a continuing effort to crack down on application developers and other third parties that are misusing user data on the company's social media platforms.
https://www.darkreading.com/vulnerabilities---threats/instagram-added-to-facebook-data-abuse-bounty-program/d/d-id/1335569

Dark Reading

Instagram Added to Facebook Data-Abuse Bounty Program

Social media giant also launches invitation-only bug bounty program for 'Checkout on Instagram'.

2.01K viewsپدرخوانده, 10:53

HackerOne

Exfiltration through FTP using OOB XXE

Upload accepts .xlsx files --> Unzip sample .xlsx file -> add payload in workbook.xml/[Content_Types].xml after xml declaration --> DTD file send data via ftp://remote-ip/%data --> run ftp server using xxe-ftp-server.rb --> /etc/passwd

Via: https://twitter.com/_ayoubfathi_/status/1164536885244583941

2.56K viewsپدرخوانده, 14:23

HackerOne

GAME OVER: Detecting and Stopping an APT41 Operation
https://www.fireeye.com/blog/threat-research/2019/08/game-over-detecting-and-stopping-an-apt41-operation.html

Mandiant

GAME OVER: Detecting and Stopping an APT41 Operation | Mandiant

2.46K viewsپدرخوانده, 18:03

HackerOne

https://googleprojectzero.blogspot.com/2019/08/a-very-deep-dive-into-ios-exploit.html?m=1

Blogspot

A very deep dive into iOS Exploit chains found in the wild

Posted by Ian Beer, Project Zero Project Zero’s mission is to make 0-day hard. We often work with other companies to find and report se...

2.16K viewsپدرخوانده, 15:07

HackerOne

Price For Mobile Exploits

2.03K viewsAmir kiani, edited 19:20

HackerOne

https://medium.com/@valeriyshevchenko/critical-vulnerabilities-in-pulse-secure-and-fortinet-ssl-vpns-in-the-wild-internet-3991ea9e6481

Medium

Critical vulnerabilities in Pulse Secure and Fortinet SSL VPNs in the Wild Internet

Infiltrating Corporate Intranet like Banks, Governments, Airports became possible with vulnerable SSL VPN clients.

2.75K viewsAmir kiani, 19:22

HackerOne

https://www.zerodayinitiative.com/advisories/ZDI-19-780/

Zerodayinitiative

ZDI-19-780

(0Day) Google Android v4l2 Double Free Privilege Escalation Vulnerability

1.98K viewsAmir kiani, 09:39

HackerOne

Forwarded from P0SCon

Abstracts are received. After evaluating the abstracts and arranging travel and resistance, the details of speakers will be announced.

P0SCon2019

📆 12 Oct 2019

Register for P0SCon2019:

🇮🇷 ::Iranian Citizens::
https://evnd.co/w3uRC

🇺🇳::Non-Iranian Citizens::
Contact: p0scon@uut.ac.ir

http://poscon.ir

@P0SCon

100 viewsMir Saman Tajbakhsh, 05:45

HackerOne

https://medium.com/@sean.greathouse/a-blueprint-for-stopping-ddos-attacks-forever-using-tokenized-fields-in-tcp-or-ipv6-packets-b1de90682f1e

Medium

A Blueprint for Stopping DDoS Attacks Using “Tokenized” Fields in TCP or IPv6 Packets.

The goal of this article is to convince you there is a way to prevent SYN Flood DDoS attacks, spoofed source IP’s, and port scanning once…

2.22K viewsAmir kiani, 12:37

HackerOne

https://www.freecodecamp.org/news/lets-enhance-how-we-found-rogerkver-s-1000-wallet-obfuscated-private-key-8514e74a5433/

freeCodeCamp.org

Let’s Enhance! How we found @rogerkver’s $1,000 wallet obfuscated private key

By Michel Sassano Before we even start: We do not know the journalists who recorded the interview and we do not know Roger Ver. Anyone who had access to this video could have retrieved the private key. We could have simply named this post “How great ...