MacMaster is a versatile command line (https://www.kitploit.com/search/label/Command%20Line) tool designed to change the MAC address of network interfaces on your system. It provides a simple yet powerful solution for network anonymity (https://www.kitploit.com/search/label/Anonymity) and testing. Features Custom MAC Address: Set a specific MAC address to your network interface. Random MAC Address: Generate and set a random MAC address. Reset to Original: Reset the MAC address to its original hardware (https://www.kitploit.com/search/label/Hardware) value. Custom OUI: Set a custom Organizationally Unique Identifier (https://www.kitploit.com/search/label/Identifier) (OUI) for the MAC address. Version Information: Easily check the version of MacMaster you are using.
Installation MacMaster requires Python 3.6 or later. Clone the repository: $ git clone https://github.com/HalilDeniz/MacMaster.git Navigate to the cloned directory: cd MacMaster Install the package: $ python setup.py install Usage $ macmaster --help
usage: macmaster [-h] [--interface INTERFACE] [--version]
[--random | --newmac NEWMAC | --customoui CUSTOMOUI | --reset]

MacMaster: Mac Address Changer

options:
-h, --help show this help message and exit
--interface INTERFACE, -i INTERFACE
Network interface to change MAC address
--version, -V Show the version of the program
--random, -r Set a random MAC address
--newmac NEWMAC, -nm NEWMAC
Set a specific MAC address
--customoui CUSTOMOUI, -co CUSTOMOUI
Set a custom OUI for the MAC address
--reset, -rs Reset MAC address to the original value Arguments --interface, -i: Specify the network interface. --random, -r: Set a random MAC address. --newmac, -nm: Set a specific MAC address. --customoui, -co: Set a custom OUI for the MAC address. --reset, -rs: Reset MAC address to the original value. --version, -V: Show the version of the program. Set a specific MAC address: $ macmaster.py -i eth0 -nm 00:11:22:33:44:55 Set a random MAC address: $ macmaster.py -i eth0 -r Reset MAC address to its original value: $ macmaster.py -i eth0 -rs Set a custom OUI: $ macmaster.py -i eth0 -co 08:00:27 Show program version: $ macmaster.py -V Replace eth0 with your desired network interface. Note You must run this script as root or use sudo to run this script for it to work properly. This is because changing a MAC address requires root privileges. Contributing Contributions are welcome! To contribute to MacMaster, follow these steps: Fork the repository. Create a new branch for your feature or bug fix. Make your changes and commit them. Push your changes to your forked repository. Open a pull request in the main repository. Contact For any inquiries or further information, you can reach me through the following channels: Contact Linktr :Halil Deniz (https://linktr.ee/halildeniz) LinkedIn : Halil İbrahim Deniz (https://www.linkedin.com/in/halil-ibrahim-deniz/) TryHackMe : halilovic (https://tryhackme.com/p/halilovic) Instagram : deniz.halil333 (https://www.instagram.com/deniz.halil333/) YouTube : HalilDeniz (https://www.youtube.com/c/HalilDeniz) Email: halildeniz313@gmail.com (mailto:halildeniz313@gmail.com)

Download MacMaster (https://github.com/HalilDeniz/MacMaster)

Mastering Web Application Security: Defending Against Injections and Broken Access Control

Web Application Security encompasses a diverse array of security measures aimed at ensuring the proper functioning of a web application…Continue reading on Medium »
Read more...

Mastering Web Application Security: Defending Against Injections and Broken Access Control
https://medium.com/@moldovanzsombor/mastering-web-application-security-defending-against-injections-and-broken-access-control-34161cbefc8f?source=rss------bug_bounty-5

Web Application Security encompasses a diverse array of security measures aimed at ensuring the proper functioning of a web application…Continue reading on Medium » (https://medium.com/@moldovanzsombor/mastering-web-application-security-defending-against-injections-and-broken-access-control-34161cbefc8f?source=rss------bug_bounty-5)

Go Witness Install Guide…
https://medium.com/@psychomong/go-witness-install-guide-a62d96be30b0?source=rss------bug_bounty-5

Welcome Back Psychomong PeopleContinue reading on Medium » (https://medium.com/@psychomong/go-witness-install-guide-a62d96be30b0?source=rss------bug_bounty-5)

ParagonsDAO’s Bug Bounty Program
https://medium.com/paragonsdao/paragonsdaos-bug-bounty-program-8cfb82f786c0?source=rss------bug_bounty-5

At ParagonsDAO, we constantly strive for excellence and industry standardswhen it comes to ensuring protocol security.Continue reading on ParagonsDAO » (https://medium.com/paragonsdao/paragonsdaos-bug-bounty-program-8cfb82f786c0?source=rss------bug_bounty-5)

This Tool Helps Me To Find The Origin IP Address
https://ajaksecurity.medium.com/this-tool-helps-me-to-find-the-origin-ip-address-d9c2abceafb2?source=rss------bug_bounty-5

Hi, Ajak Amico! Welcome back to another blog. Today I will show you how to find the origin IP address using An automated tool.Continue reading on Medium » (https://ajaksecurity.medium.com/this-tool-helps-me-to-find-the-origin-ip-address-d9c2abceafb2?source=rss------bug_bounty-5)

Go Witness Install Guide…

Welcome Back Psychomong PeopleContinue reading on Medium »
Read more...

ParagonsDAO’s Bug Bounty Program

At ParagonsDAO, we constantly strive for excellence and industry standardswhen it comes to ensuring protocol security.Continue reading on ParagonsDAO »
Read more...

This Tool Helps Me To Find The Origin IP Address

Hi, Ajak Amico! Welcome back to another blog. Today I will show you how to find the origin IP address using An automated tool.Continue reading on Medium »
Read more...

CyberSecurity Day 01 to 100: DAY 08 | A Comprehensive Guide for Novices and Experts

Navigating the Complex World of Cybersecurity:Continue reading on Medium »
Read more...

CyberSecurity Day 01 to 100: DAY 08 | A Comprehensive Guide for Novices and Experts
https://medium.com/@acs_society/cybersecurity-day-01-to-100-day-08-a-comprehensive-guide-for-novices-and-experts-55d3ef86abbf?source=rss------bug_bounty-5

Navigating the Complex World of Cybersecurity:Continue reading on Medium » (https://medium.com/@acs_society/cybersecurity-day-01-to-100-day-08-a-comprehensive-guide-for-novices-and-experts-55d3ef86abbf?source=rss------bug_bounty-5)

My $750 Privilege Escalation Bug: How I Prevented Unauthorized Role Changes

Explore how I discover a role-changing vulnerability at Private program that allowed users to switch roles without admin privileges and get me paid 750$.This write-up provides the steps to reproduce this surprising bug and its potential impact.Understanding Examlent.com(a pseudonym for the actual platform) Examlent.com is an online job search and career information platform that connects job seekers with employers. It’s designed to help individuals find jobs, gain insights into salaries, and access valuable company information. Talent.com’s mission is to make the job search experience efficient and effective. As part of its services, Talent.com allows users to create accounts with specific roles and privileges, a crucial aspect of maintaining a secure and organized platform. Among these roles, administrators hold a special status, as they have the authority to manage user roles and permissions within the platform.The Bug Discovery: My journey began with an account on Examlet.com, one with standard user privileges, and another with admin privileges. As a responsible bug hunter, I decided to explore the platform, meticulously examining different functionalities. As i found an functionality which allow admin to change the users roles so i think about it what if a low level user can change their permission by themselves. Thats how, stumbled upon a Privilege Escalation bug, a vulnerability that could potentially lead to unauthorized role changes, compromising the platform’s security.Steps to Reproduce: Here’s how I found and reproduced the bug:Create Two Accounts: I created two accounts — one with admin privileges and the other with standard user privileges.Capture the Admin Request: I captured the request made when the admin changed a user’s role.User Privilege Change: I used the standard user account’s cookie or request to change its privilege to admin.The request i used is look like this below request:-POST /employers/settings/ajax/action-update-user.php?country=us&language=en HTTP/1.1Host: in.examlent.comCookie:Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: same-originAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9,hi;q=0.8,pt;q=0.7Connection: closefirstName=user&lastName=user&email=busermail@gmail.com&user=FDRsoKzZEYJjdWUYxETG1iFf-bgI*&privilege=admin 5. I sent the request, and like magic, the standard user became an admin.The Impact: This bug could have significant consequences, including:Unauthorized role changes, leading to unauthorized access.Bypassing security measures designed to ensure only administrators can change user roles.Potential unauthorized takeovers of administrative privileges.The Bounty After responsibly disclosing this vulnerability to Examlet.com, the bug bounty program awarded me a well-deserved $750 bounty. The platform’s security team recognized the severity of the issue and acted swiftly to fix it.Takeaway Always explore the admin-level features and permissions with low-level user accounts. You might uncover critical security flaws that can benefit both you and the platform’s security.Leave some clap if you enjoyed this read, leave your feedback in comment and consider following me for more exciting findings.Find me on Twitter: @a13h1_Thank you everyone Keep Supporting, Keep Clapping, Keep Commenting. My $750 Privilege Escalation Bug: How I Prevented Unauthorized Role Changes was originally published in InfoSec Write-ups on Medium, where people are continuing the conversation by highlighting and responding to this story.
Read more...