Hacking on Medium
DLL Injector Malware Development C++ Tool

https://cdn-images-1.medium.com/max/1920/0*SIZVuzEC_y6Yk14s.png
Welcome to my new article! Today, I am thrilled to share with you a powerful tool that I have created using C++. This tool allows you to…

Continue reading on Medium »

Unveiling the Hidden Pathways: Exploring the 403 Bypass Technique and Effective Remediation…
https://medium.com/@qaafqasim/unveiling-the-hidden-pathways-exploring-the-403-bypass-technique-and-effective-remediation-8cbd4f0546a5?source=rss------bug_bounty-5

403 Bypass Technique: The 403 Bypass technique involves attempting to access a restricted resource by modifying the request and header…Continue reading on Medium » (https://medium.com/@qaafqasim/unveiling-the-hidden-pathways-exploring-the-403-bypass-technique-and-effective-remediation-8cbd4f0546a5?source=rss------bug_bounty-5)

LinkedInDumper - Tool To Dump Company Employees From LinkedIn API
http://www.kitploit.com/2023/06/linkedindumper-tool-to-dump-company.html

Python 3 script to dump company employees from LinkedIn API Description LinkedInDumper is a Python 3 (https://www.kitploit.com/search/label/Python%203) script that dumps employee data from the LinkedIn social networking (https://www.kitploit.com/search/label/Networking) platform. The results contain firstname, lastname, position (title), location and a user's profile link. Only 2 API calls are required to retrieve all employees if the company does not have more than 10 employees. Otherwise, we have to paginate through the API results. With the --email-format CLI flag one can define a Python string format to auto generate email addresses based on the retrieved first and last name.
Requirements LinkedInDumper talks with the unofficial LinkedIn Voyager API, which requires authentication. Therefore, you must have a valid LinkedIn user account. To keep it simple, LinkedInDumper just expects a cookie (https://www.kitploit.com/search/label/Cookie) value provided by you. Doing it this way, even 2FA protected accounts are supported. Furthermore, you are tasked to provide a LinkedIn company URL to dump employees from. Retrieving LinkedIn Cookie Sign into www.linkedin.com (http://www.linkedin.com/) and retrieve your li_at session cookie value e.g. via developer tools Specify the cookie value either persistently in the python script's variable li_at or temporarily during runtime via the CLI flag --cookie Retrieving LinkedIn Company URL Search your target company on Google Search or directly on LinkedIn The LinkedIn company URL should look something like this: https://www.linkedin.com/company/apple Usage usage: linkedindumper.py [-h] --url [--cookie ] [--quiet] [--include-private-profiles] [--email-format EMAIL_FORMAT]

options:
-h, --help show this help message and exit
--url A LinkedIn company url - https://www.linkedin.com/company/
--cookie LinkedIn 'li_at' session cookie
--quiet Show employee results only
--include-private-profiles
Show private accounts too
--email-format Python string format for emails; for example:
[1] john.doe@example.com > '{0}.{1}@example.com'
[2] j.doe@example.com > '{0[0]}.{1}@example.com'
[3] jdoe@example.com > '{0[0]}{1}@example.com'
[4] doe@example.com > '{1}@example.com'
[5] john@example.com > '{0}@example.com'
[6] jd@example.com > '{0[0]}{1[0]}@example.com'
Example 1 - Docker Run docker run --rm l4rm4nd/linkedindumper:latest --url 'https://www.linkedin.com/company/apple' --cookie --email-format '{0}.{1}@apple.de'
Example 2 - Native Python # install dependencies
pip install -r requirements.txt

python3 linkedindumper.py --url 'https://www.linkedin.com/company/apple' --cookie --email-format '{0}.{1}@apple.de'
Outputs The script will return employee data as semi-colon separated values (like CSV): ██▓ ██▓ ███▄ █ ██ ▄█▀▓█████ ▓█████▄ ██▓ ███▄ █ ▓█████▄ █ ██ ███▄ ▄███▓ ██▓███ ▓█████ ██▀███
▓██▒ ▓██▒ ██ ▀█ █ ██▄█▒ ▓█ ▀ ▒██▀ ██▌▓██▒ ██ ▀█ █ ▒██▀ ██▌ ██ ▓██▒▓██▒▀█& #9600; ██▒▓██░ ██▒▓█ ▀ ▓██ ▒ ██▒
▒██░ ▒██▒▓██ ▀█ ██▒▓███▄░ ▒███ ░██ █▌▒██▒▓██ ▀█ ██▒░██ █▌▓██ ▒██░▓██ ▓██░▓██░ ██▓▒▒███ ▓██ ░▄█ ▒
▒██░ ░██░▓██▒ ▐▌██▒▓██ █▄ ▒▓█ ▄ ░▓█▄ ▌&# 9617;██░▓██▒ ▐▌██▒░▓█▄ ▌▓▓█ ░██░▒██ ▒██ ▒██▄█▓▒ ▒▒▓█ ▄ ▒██▀▀█▄
░██████▒░██░▒██░ ▓██░▒██▒ █▄░▒████▒░▒████▓ ░██░▒██░ ▓██░░▒████▓ ▒▒█████▓ ▒██▒ ░██▒▒██▒ ░ ░░▒████& #9618;░██▓ ▒██▒
░ ▒░▓ ░░▓ ░ ▒░ ▒ ▒ ▒ ▒▒ ▓▒░░ ▒░ ░ ▒▒▓ ▒ ░▓ ░ ▒░ ▒ ▒ ▒▒▓ ▒ ░▒▓▒ ▒ ▒ ░ ▒░ ░ ░▒▓▒░ ░ ░░░ ▒░ ░░ ▒▓ ░▒▓░
░ ░ ▒ ░ ▒ ░░ ░░ ░ ▒░░ ░▒ ▒░ ░ ░ ░ ░ ▒ ▒ ▒ ░░ ░░ ░ ▒░ ░ ▒ ▒ ░░▒░ ░ ░ ░ ░ ░░▒ ░ ░ ░ ░ ░▒ ░ ▒░
░ ░ ▒ ░ ░ ░ ░ ░ ░░ ░ ░ ░ ░ ░ ▒ ░ ░ ░ ░ ░ ░ ░ ░░░ ░ ░ ░ ░ ░░ ░ ░░ ░

░ ░ ░ ░ ░ ░ ░ ░ ░ ░ ░ ░ ░ ░ ░ ░ ░
░ ░ ░ by LRVT

[i] Company Name: apple
[i] Company X-ID: 162479
[i] LN Employees: 1000 employees found
[i] Dumping (https://www.kitploit.com/search/label/Dumping) Date: 17/10/2022 13:55:06
[i] Email Format: {0}.{1}@apple.de
Firstname;Lastname;Email;Position;Gender;Location;Profile
Katrin;Honauer;katrin.honauer@apple.com;Software Engineer at Apple;N/A;Heidelberg;https://www.linkedin.com/in/katrin-honauer
Raymond;Chen;raymond.chen@apple.com;Recruiting at Apple;N/A;Austin, Texas Metropolitan Area;https://www.linkedin.com/in/raytherecruiter

[i] Successfully crawled 2 unique apple employee(s). Hurray ^_-
Limitations LinkedIn will allow only the first 1,000 search results to be returned when harvesting contact information. You may also need a LinkedIn premium account when you reached the maximum allowed queries for visiting profiles with your freemium LinkedIn account. Furthermore, not all employee profiles are public. The results vary depending on your used LinkedIn account and whether you are befriended with some employees of the company to crawl or not. Therefore, it is sometimes not possible to retrieve the firstname, lastname and profile url of some employee accounts. The script will not display such profiles, as they contain default values such as "LinkedIn" as firstname and "Member" in the lastname. If you want to include such private profiles, please use the CLI flag --include-private-profiles. Although some accounts may be private, we can obtain the position (title) as well as the location of such accounts. Only firstname, lastname and profile URL are hidden for private LinkedIn accounts. Finally, LinkedIn users are free to name their profile. An account name can therefore consist of various things such as saluations, abbreviations, emojis, middle names etc. I tried my best to remove some nonsense. However, this is not a complete solution to the general problem. Note that we are not using the official LinkedIn API. This script gathers information from the "unofficial" Voyager API.

Download LinkedInDumper (https://github.com/l4rm4nd/LinkedInDumper)

The differences between the same-site and the same-origin :
https://micr0.medium.com/the-differences-between-the-same-site-and-the-same-origin-120aef17564?source=rss------bug_bounty-5

Hi, I will talk about the differences between the same-site and the same-origin First let’s know the site and the origin? the definition…Continue reading on Medium » (https://micr0.medium.com/the-differences-between-the-same-site-and-the-same-origin-120aef17564?source=rss------bug_bounty-5)

Dark Reading: Attacks/Breaches
The Case for a Federal Cyber-Insurance Backstop

By stepping in to provide aid, the federal government could help protect companies, insurers, and the economy from the impact of a widespread, catastrophic cyberattack.

Dark Reading: Attacks/Breaches
Cisco Touts New AI-Based Security, SSE Features

Cisco laid out its plans for artificial intelligence (AI) and a vision for unified cloud security during Cisco Live 2023.

hacking: security in practice
Brute Force WordPress by using Metasploit Framework

https://external-preview.redd.it/Tjxe2BqrPAtKcsXQOx-j-nnSPYIMn0W3flUHqmdtOqg.jpg?width=320&crop=smart&auto=webp&s=c99fda4cf705166b8d3afbcea122f19a38132604 submitted by /u/Dankshiki
[link] [comments]

hacking: security in practice
Hello, insight on prison hacking?

I'm in a house with cameras, possibly hidden. Hidden audio, kids (mine) Several amps, speakers, cctv things.... Of course it appears like a 70 year old woman's home but she passed away and her son now inhabits it. Spent time in prison. There's a lot more to it but I would like to know what's going on. Something is off. It doesn't feel normal to me. He always knows too much. He said there's no wifi on anymore. He has Bluetooth devices everywhere. Watches that beep placed amongst the house. This dude is so cocky. He claims to not know anything besides basic stuff. He acts like he's stupid. The last woman he had went crazy and took apart all the electronics and cameras supposedly.... I think he was just swapping her out for me. I've been pretty isolated. Lost my job. In some trouble. Now, I think I'm being crazy thinking more is going on. They have little boards with stuff rigged up on them. So I don't know if I'm in the right spot or not.

Question ❓⁉️ Could the cameras be streamed on the blackweb? He has devotees help rig stuff up... I could really use some insight or help on getting to the bottom of this. I ain't tech savvy but I have an idea of what things are and their intended purpose but not a full knowledge based to know what CAN be done with them.

This morning all the cameras that were on the monitor are showing they aren't recording. They usually don't show that. Last night I saw him looking at footage of (I think me) and he wouldn't show it to me. But he told me the camera in the bedroom is broken. I think he took the camera and put a little one inside it. There's charging chords and card readers... Conversion chords HDMI to usb-c type shit.

I'm sorry if I posted in the wrong section.

Edit: Another question which goes to my title 🤦🏼‍♀️ Do people learn this stuff in prison? I've been working with him for 10 years since he got out. He claims he doesn't know how to read. I tried to get his court records but I couldn't. They weren't public. I'm just wondering if he was doing this stuff before or after.

submitted by /u/Crafty-Blackberry-66
[link] [comments]

hacking: security in practice
CVE-2023-34362 is not just SQLi - they reversed it and found full RCE as well...

https://external-preview.redd.it/iBQqoaYDt5AGaIJryU4ocDuCzGu73GUZy49wZNEtqJc.jpg?width=108&crop=smart&auto=webp&s=b1b4092a93cc70b76b927b623126ce800fb11af4 submitted by /u/DrinkMoreCodeMore
[link] [comments]

Cacheblaster - A web cache poisoning DoS tool
https://www.reddit.com/r/Pentesting/comments/143edwx/cacheblaster_a_web_cache_poisoning_dos_tool/

<!-- SC_OFF -->Hey hackers, today I’m introducing a tool - Cacheblaster for testing web cache poisoning DoS attacks. The details of the payload, attack and tool can be found here here: https://github.com/n0mi1k/cacheblaster The attack goes like this: By forcing an error using manipulated HTTP headers forces an error response, and if the server caches it, it will cause a DoS for other users accessing the site as they receive the error response. <!-- SC_ON --> submitted by /u/n0mi1k (https://www.reddit.com/user/n0mi1k)
[link] (https://www.reddit.com/r/Pentesting/comments/143edwx/cacheblaster_a_web_cache_poisoning_dos_tool/) [comments] (https://www.reddit.com/r/Pentesting/comments/143edwx/cacheblaster_a_web_cache_poisoning_dos_tool/)

Information disclosure
https://chanukyapl.medium.com/information-disclosure-3f30d24448cf?source=rss------bug_bounty-5

Check points for Information disclosureContinue reading on Medium » (https://chanukyapl.medium.com/information-disclosure-3f30d24448cf?source=rss------bug_bounty-5)

Path traversal to RCE — Openfire — CVE-2023–32315
https://learningsomecti.medium.com/path-traversal-to-rce-openfire-cve-2023-32315-6a8bf0285fcc?source=rss------bug_bounty-5

The article contains analysis on how remote code execution was achieved from Path traversal vulnerability on Openfire — CVE-2023–32315.Continue reading on Medium » (https://learningsomecti.medium.com/path-traversal-to-rce-openfire-cve-2023-32315-6a8bf0285fcc?source=rss------bug_bounty-5)