Hacking Articles Tips Tricks Videos Tutorials
468 subscribers
65.7K photos
15 videos
157 files
132K links
Exploit
Pentesting
Hacking
Red Team
Blue Team
Kali Linux
Bug Bounty
Black Hat
Cyber security etc

@Hacking_Video
@Hacking_attack
Download Telegram
CyberSecurity Practice Labs

Continue reading on Medium »
Read more...
make sqlmap show the sql commands that it used to dump the tables
https://www.reddit.com/r/Pentesting/comments/o0yp6b/make_sqlmap_show_the_sql_commands_that_it_used_to/

im a newbie in sql injection and im learning how to use sqlmap. i first harvested the post request from burpsuite and saved it in a file and i passed that file into sqlmap using sqlmap -r -p username after running that and said yes to all the prompts. it said it it was vulnerable to bool based, error-based and and/or time based blind sql injection and it showed me the different sql commands that it used to confrm that next that i did was to use the --dump to get all the contents of the database sqlmap -r -p username --dump after that it showed me the tables that was dumped. im curious whether i can make sqlmap show the sql commands that it used to dump the tables? It would really help me in learning sql injection more thanks submitted by /u/darkalimdor18 (https://www.reddit.com/user/darkalimdor18)
[link] (https://www.reddit.com/r/Pentesting/comments/o0yp6b/make_sqlmap_show_the_sql_commands_that_it_used_to/) [comments] (https://www.reddit.com/r/Pentesting/comments/o0yp6b/make_sqlmap_show_the_sql_commands_that_it_used_to/)

___________________________
@hacking_Attack
@Hacking_Video
Deep Web
Is there a reputable paid service for hosting an onion site for legal purposes?

This is going to sound completely dumb, but is there a reputable paid service that does all the back end hosting for onion sites for legal file hosting?

For things like digital art or software you made and want to share without dealing with pansy's who are too scared to visit the dark web.

submitted by /u/Fuzz_Lord
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video
Hacking Articles Tips Tricks Videos Tutorials
Photo
Black Hat Ethical Hacking
Apple Hurries Patches for Safari Bugs Under Active Attack

https://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Apple Hurries Patches for Safari Bugs Under Active AttackPost Views: 52
Reading Time: 1 Minute
Apple issued two out-of-band security fixes for its Safari web browser, fixing zero-day vulnerabilities that “may have been actively exploited,” according to a Monday security bulletin by the company.
The bugs affect sixth-generation Apple iPhones, iPads and iPod touch model hardware, released between 2013 and 2018.

“Apple is aware of a report that this issue may have been actively exploited,” the company wrote. Technical details of the two bugs, Apple said, will not be released, “until an investigation has occurred and patches or releases are available.”

Both bugs are tied to Apple’s Safari browser and the underlying iOS code, called WebKit, which is responsible for rendering web pages. Apple is crediting the discovery of both bugs (CVE-2021-30761 and CVE-2021-30762) to an anonymous researcher.

The patch, iOS 12.5.4, is available for download.
See Also: RockYou2021: largest password compilation of all time leaked online – 8.4 billion entries Memory Corruption Bug: CVE-2021-30761One of the bugs patched by Apple addresses a “memory corruption issue” and improves the Apple WebKit state management.

“State management refers to the management of the state of one or more user interface controls such as text fields, OK buttons, radio buttons, etc. in a graphical user interface,” according to a technical description of the term.

According to Apple, the patch for the bug, logged as CVE-2012-30761, addresses a bug found in iPhone 5s, iPhone 6, iPhone 6 Plus, iPad Air, iPad mini 2, iPad mini 3, and iPod touch (6th generation). This range of hardware was released between 2013 and 2018.
See Also: Offensive Security Tool: CloudFail Use After Free Flaw: CVE-2021-30762The second flaw was identified as a use-after-free bug, which is a type of memory corruption vulnerability. The bug, tracked as CVE-20121-30762, allows an attacker to execute code on targeted devices. According to Apple, adversaries may be exploiting this flaw on unpatched devices. In its advisory Apple wrote: “Impact: Processed maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.”

Apple added that the “use-after-free issue was addressed with improved memory management.”

“[A] use-after-free is a vulnerability [is] related to incorrect use of dynamic memory during program operation. If after freeing a memory location, a program does not clear the pointer to that memory, an attacker can use the error to hack the program,” according to a Kaspersky description of this type of bug. See Also: Jeff Moss, aka Dark Tangent, the person who founded DEF CON and Black Hat The iOS patch, distributed as a iOS 12.5.4 update, is for the same model hardware as above: iPhone 5s, iPhone 6, iPhone 6 Plus, iPad Air, iPad mini 2, iPad mini 3, and iPod touch (6th generation).

Apple is not releasing any additional details pertaining to these vulneraries.
Source: threatpost.com (Click Link)Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/06/Microsoft-Teams-e1623702241390-90x90.png Microsoft Teams: Very Bad Tabs Could Have Led to BEC1 day ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/06/FIFA-21-90x90.jpg Hackers Steal FIFA 21 Source Code, Tools in EA Breach2 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/06/Untit[...]

___________________________
@hacking_Attack
@Hacking_Video