submitted by /u/dinobyt3s (https://www.reddit.com/user/dinobyt3s)
[link] (https://medium.com/tenable-techblog/more-macos-installer-flaws-c868d9067eb3) [comments] (https://www.reddit.com/r/Pentesting/comments/nrd0h0/more_macos_installers_flaws_for_postexploitation/)

___________________________
@hacking_Attack
@Hacking_Video

Introduction to NMap (beginner friendly)
https://www.reddit.com/r/Pentesting/comments/nrd42w/introduction_to_nmap_beginner_friendly/

submitted by /u/_CryptoCat23 (https://www.reddit.com/user/_CryptoCat23)
[link] (https://www.youtube.com/watch?v=8RhCnOhQlGc) [comments] (https://www.reddit.com/r/Pentesting/comments/nrd42w/introduction_to_nmap_beginner_friendly/)

403Fuzzer - Fuzz 403/401Ing Endpoints For Bypasses

Fuzz 403ing endpoints for bypasses Follow on twitter! @intrudir This tool will check the endpoint with a couple of headers such as X-Forwarded-For It will also apply different payloads typically used in dir traversals, path normalization etc. to each endpoint on the path. e.g. /%2e/test/test2 /test/%2e/test2 /test;/test2/Usage usage: 403fuzzer.py -h -u URL -m {GET,POST,PUT,PATCH} -d DATA\_PARAMS -c COOKIES -H HEADER -p PROXY -hc HC -hl HL -sf --save SAVE -sh -suuse this script to fuzz endpoints that return a 401/403optional arguments: -h, --help show this help message and exit -u URL, --url URL Specify the target URL -m {GET,POST,PUT,PATCH}, --method {GET,POST,PUT,PATCH} Specify the HTTP method/verb -d DATA_PARAMS, --data DATA_PARAMS Specify data to send with the request. -c COOKIES, --cookies COOKIES Specify cookies to use in requests. (e.g., --cookies "cookie1=blah; cookie2=blah") -H HEADER, --header HEADER Add headers to your request (e.g., --header "Accept: application/json" --header "Host: example.com" -p PROXY, --proxy PROXY Specify a proxy to use fo r requests (e.g., http://127.0.0.1:8080) -hc HC Hide response code from output, single or comma separated -hl HL Hide response length from output, single or comma separated -sf, --smart Enable the smart filter --save SAVE Saves stuff to a file when you get your specified response code -sh, --skip-headers Skip testing bypass headers -su, --skip-urls Skip testing path payloads Basic examples python3 403fuzzer.py -u http://example.com/test1/test2/test3/forbidden.html Specify cookies to use in requests: (minus the cookie header name) Examples: --cookies "cookie1=blah"-c "cookie1=blah; cookie2=blah" Specify a method/verb and body data to send 403fuzzer.py -u https://example.com -m POST -d "param1=blah¶m2=blah2"403fuzzer.py -u https://example.com -m PUT -d "param1=blah¶m2=blah2" Specify custom headers to use with every request Maybe you need to add some kind of auth header like Authorization: bearer Specify -H "header: value" for each additional header you'd like to add: 403fuzzer.py -u https://example.com -H "Some-Header: blah" -H "Authorization: Bearer 1234567" Specify a proxy to use Useful if you wanna proxy through Burp 403fuzzer.py -u https://example.com --proxy http://127.0.0.1:8080 Skip sending header payloads or url payloads # skip sending headers payloads403fuzzer.py -u https://example.com -sh403fuzzer.py -u https://example.com --skip-headers# Skip sending path normailization payloads403fuzzer.py -u https://example.com -su403fuzzer.py -u https://example.com --skip-urls Hide response code/length Provide comma delimited lists without spaces. Examples: # Hide response codes403fuzzer.py -u https://example.com -hc 403,404,400 # Hide response lengths of 638403fuzzer.py -u https://example.com -hl 638 Smart filter feature! Based on response code and length. If it sees a response 8 times or more it will automatically mute it. repeats are changeable in the code until I add an option to specify it in flag NOTE: Can't be used simultaneously with -hc or -hl (yet) # toggle smart filter on403fuzzer.py -u https://example.com --smart Save requests for matching response code Will save to a file named saved.txt Useful for later inspection # save requests where the response code matched 200403fuzzer.py -u https://example.com --save 200 TODO: Add other methods/verbs for bypass, e.g. POST requests Maybe add an output file option for 200 OKs Looking for ideas. Ping me on twitter! @intrudir Download 403Fuzzer
Read more...

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
The Colonial Pipeline Attack Is Your Boardroom Wake-Up Call

Why business leaders must adopt a risk-led approach to cybersecurity.

Learn about Linux cronjobs and how to interact with crontab
https://www.reddit.com/r/redteamsec/comments/nreo5h/learn_about_linux_cronjobs_and_how_to_interact/

Many sysadmin use cron jobs for backup or maintenance purposes. But they are not maintained actively and it could become a vulnerable vector to gain a root shell and you can configure it to set up backdoors. Learn more about it https://www.secjuice.com/linux-basics-cron-jobs/ submitted by /u/tbhaxor (https://www.reddit.com/user/tbhaxor)
[link] (https://www.reddit.com/r/redteamsec/comments/nreo5h/learn_about_linux_cronjobs_and_how_to_interact/) [comments] (https://www.reddit.com/r/redteamsec/comments/nreo5h/learn_about_linux_cronjobs_and_how_to_interact/)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How I got hacked

https://cdn-images-1.medium.com/max/2315/1*_lMUYwfBmyn6SktKy_HreQ.jpeg
A short story from my everyday life, about how a small misunderstanding can lead to big difference.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Phone Number OSINT

https://cdn-images-1.medium.com/max/1186/1*uTRl2lUqSEnJ6ERq0vWnWg.png
How to perform phone number osint using some really great tools and websites without spending a single penny on shady websites

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
403Fuzzer - Fuzz 403/401Ing Endpoints For Bypasses

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Learn about Linux cronjobs and how to interact with crontab

Many sysadmin use cron jobs for backup or maintenance purposes. But they are not maintained actively and it could become a vulnerable vector to gain a root shell and you can configure it to set up backdoors.

Learn more about it

https://www.secjuice.com/linux-basics-cron-jobs/

submitted by /u/tbhaxor
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking Articles|Raj Chandel's Blog
Linux Privilege Escalation: Python Library Hijacking

In this article, we will demonstrate another method of Escalating Privileges on Linux-based Devices by exploiting the Python Libraries and scripts. Table of Content· Introduction· Python Script Creation· Method 1 [Write Permissions]o Vulnerability Creation Method 2 [Priority Order]o Vulnerability Creation Method 3 [PYTHONPATH Environment Variable]o Vulnerability Creation ConclusionIn general, whenever an attacker is introduced inside an environment that has python files. The options that the attacker can use to elevate its access are limited. There are 3 methods that we will discover in the article. Some misconfigurations include write permissions, sudo privileges, and editing the Path Variable.Python Script Creation To demonstrate the action of elevating privileges using python scripts, we created a sample script that imports some libraries. In a real-life scenario, this can be general python scripts or projects that a bunch of developers is working on. In a Capture the Flag Scenario, these are easy to find and might contain a script that would be similar to this one. The script imports the webbrowser module and then proceeds to use the open function to run the default web browser on the device to open the hackingarticles web page.nano hack.pyhttps://1.bp.blogspot.com/-ez-BEVvDBjg/YLkCb6zhVZI/AAAAAAAAwS4/jOW8bx2T6GsMTj7xLry83S0JH43D-kJ_gCLcBGAsYHQ/s16000/1.png python3 hack.py Method 1This vulnerability is based on the permissions that are applied to the Module file that our script is importing. When the module file that is being imported has permissions that allow any user to edit, it becomes a vulnerability. In the python script that we created; we have the webbrowser.py module file that is called. When you have an unaltered environment that has all the default permission, it is not an issue but in a development environment, there tends to have some compromises of security over minor convenience. To get a better understanding of what goes in the background, what permissions can lead to a privilege escalation we will first create the vulnerability in our ubuntu environment and then use Kali Linux to exploit this vulnerability. Vulnerability Creation As discussed, in this method the vulnerability is based on the permissions on the module file. To create this vulnerability, we need to locate the module file first. We used the locate command to find it. We see that it is located inside the /usr/lib/python3.8/. This could vary from installation to installation. So, try and locate it in your environment. Then we can see that the permission that is by default on the module file are read, write, execute permissions for owner, execute and read for group and only execute permissions for other. This means unless the user is the root, it cannot edit the file. To create the vulnerability, we changed the [...]

___________________________
@hacking_Attack
@Hacking_Video

Hacking Articles|Raj Chandel's Blog
Linux Privilege Escalation: Python Library Hijacking

___________________________
@hacking_Attack
@Hacking_Video

Install Naabu on Kali Linux
https://medium.com/@sherlock297/install-naabu-on-kali-linux-1264241d40de?source=rss------bug_bounty-5

Naabu : is a port scanning tool.Continue reading on Medium » (https://medium.com/@sherlock297/install-naabu-on-kali-linux-1264241d40de?source=rss------bug_bounty-5)