Hacking Articles Tips Tricks Videos Tutorials

SQL injection — Entendendo a vulnerabilidade na prática

Continue reading on Medium »
Read more...

5 views22:14

5 views22:23

Hacking Articles Tips Tricks Videos Tutorials

Dark Reading: Attacks/Breaches
Chinese APT Groups Continue to Pound Away on Pulse Secure VPNs

Security vendor says it has observed threat groups using a set of 16 tools specifically designed to attack Pulse Secure devices since April 2020.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading

Chinese APT Groups Continue to Pound Away on Pulse Secure VPNs

Security vendor says it has observed threat groups using a set of 16 tools specifically designed to attack Pulse Secure devices since April 2020.

6 viewsedited 22:23

Hacking Articles Tips Tricks Videos Tutorials

Automating Burpsuite -1 | Capturing CSRF Token Via Macro
https://infosecwriteups.com/automating-burpsuite-1-capturing-csrf-token-via-macro-ef2f85565f75?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Medium

Automating Burpsuite -1 | Capturing CSRF Token Via Macro

Using Burp’s Session Handling Rules with anti-CSRF Tokens

6 viewsedited 22:25

Hacking Articles Tips Tricks Videos Tutorials

6 views22:25

Hacking Articles Tips Tricks Videos Tutorials

Using Burp’s Session Handling Rules with anti-CSRF TokensContinue reading on InfoSec Write-ups » (https://infosecwriteups.com/automating-burpsuite-1-capturing-csrf-token-via-macro-ef2f85565f75?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Medium

Automating Burpsuite -1 | Capturing CSRF Token Via Macro

Using Burp’s Session Handling Rules with anti-CSRF Tokens

12 viewsedited 22:25

Hacking Articles Tips Tricks Videos Tutorials

SQL injection — Entendendo a vulnerabilidade na prática
https://igorlealvitorio.medium.com/sql-injection-entendendo-a-vulnerabilidade-na-pr%C3%A1tica-62a41d4489bf?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Medium

SQL injection — Entendendo a vulnerabilidade na prática

SQL injection ou injeção SQL é uma vulnerabilidade de segurança que da permissão a um invasor de fazer consultas no banco de dados de uma aplicação, oque pode ser usado para ter acesso a informações…

6 viewsedited 22:26

Hacking Articles Tips Tricks Videos Tutorials

5 views22:26

Hacking Articles Tips Tricks Videos Tutorials

Continue reading on Medium » (https://igorlealvitorio.medium.com/sql-injection-entendendo-a-vulnerabilidade-na-pr%C3%A1tica-62a41d4489bf?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Medium

SQL injection — Entendendo a vulnerabilidade na prática

5 viewsedited 22:26

Hacking Articles Tips Tricks Videos Tutorials

HookDump - Security Product Hook Detection
http://www.kitploit.com/2021/05/hookdump-security-product-hook-detection.html

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest & Hacking Tools

HookDump - Security Product Hook Detection

4 viewsedited 22:27

Hacking Articles Tips Tricks Videos Tutorials

4 views22:27

Hacking Articles Tips Tricks Videos Tutorials

EDR function hook dumping Please refer to the Zeroperil blog post for more information https://zeroperil.co.uk/hookdump/
Building source
In order to build this you will need Visual Studio 2019 (community edition is fine) and CMake. The batch file Configure.bat will create two build directories with Visual Studio solutions. The project may build with MinGW with the correct CMake command line, this is untested YMMV. There is a dependency on zydis disassembler, so be sure to update the sub-modules in git before configuring the project. There is a 32bit and 64bit project, you may find that EDR's hook different functions in 32/64 bit so building and running both executables may provide more complete results
Notes
Some EDRs replace the WOW stub in the TEB structure (specifically Wow32Reserved) in order to hook system calls for 32 bit binaries. In this case you may see zero hooks since no jump instructions are present in NTDLL. Most likley you will see hooks in the x64 version as the syscall instruction is used for system calls instead of a WOW stub We have noted that Windows Defender (https://www.kitploit.com/search/label/Windows%20Defender) does not use any user mode hooks This tool is designed to be run as a standard user, elevation is not required
Hook Types Detected

JMP
A jump instruction has been patched into the function to redirect execution flow
WOW
Detection of the WOW64 syscall stub being hooked, which allows filtering of all system calls
EAT
The address in the export address table does not match the address in the export address table in the copy on disc
GPA
GetProcAddress hook, an experimental feature, this is only output in verbose mode, when the result of GetProcAddress does not match the manually resolved function address. YYMV with this and some care should be taken (https://www.kitploit.com/search/label/Taken) to verify the results.
Verification
The only way to truly verify the correct working of the program is to check in a debugger (https://www.kitploit.com/search/label/Debugger) if hooks are present. If you are getting a zero hooks result and are expecting to see something different, then first verify this in a debugger and please get in touch.

Download HookDump (https://github.com/zeroperil/HookDump)

___________________________
@hacking_Attack
@Hacking_Video

ZeroPeril Ltd

ZeroPeril Ltd Cyber Security

ZeroPeril Ltd is a cyber security company skilled in delivering software, malware analysis and training

4 viewsedited 22:27

Hacking Articles Tips Tricks Videos Tutorials

4 views22:29

Hacking Articles Tips Tricks Videos Tutorials

4 views22:29

Hacking Articles Tips Tricks Videos Tutorials

Photo

Hacking on Medium
ByPass CTF 2021 Write-up

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Medium