Intigriti — XSS Challenge 0621

XSS via WebAssemblyContinue reading on InfoSec Write-ups »
Read more...

Deep Web
*** Scam Site? ***

i darkwebofficial.com legit, or a scam trying to troll clearnet ppl? Thnx.

submitted by /u/Gestan
[link] [comments]

hacking: security in practice
What is this?

I found it in my google drive, it says I downloaded it lastnight but I didn't....

https://drive.google.com/file/d/1wadspFWwhnarbPCv5LTEir5FaCowj4__/view?usp=sharing

submitted by /u/leadonornot
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Mac System Report

Hi, this is more general advice as I possibly might have become victim to a security hack on my MacBook. I have the before hack system report and a fresh install of a clean system report. Are there any specific programs or files I should be looking at in the “possibly affected” Mac system report? What would be some of the weird file names etc. (as a point I remember opening the Mac terminal and seeing a weird username). I have done a quick scan through it to compare the old and new and can’t really see anything obvious. Thanks.

submitted by /u/megaboobz
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
INTERNET EXTORTION: Why is ‘ransomware’ on the rise?

https://cdn-images-1.medium.com/max/1920/1*NCc53EKYMd-gai19BgxSIQ.png
I’m sure you’ve heard of ransomware…

Continue reading on Medium »

hacking: security in practice
Log into router settings without redirecting to Mediacom control panel.

Anyone know how to do this on a hitron router/modem combo?

I don’t have physical access to the modem. It’s my stepdads and my family is on vacation.

submitted by /u/1NightWolf
[link] [comments]

hacking: security in practice
Podcast/Webseries

Hello everyone, I have never been on the deepweb, and I don't plan on it... I am starting a podcast, or web-story thing, with my friend All about the deep web, hacking, true scary stories, etc Preferably with pictures or videos. If anyone would like to share with me, please DM me, don't comment on the thread, as I would like to have a private conversation with people.

Thanks :)

submitted by /u/GOD_OF_THUNDER1726
[link] [comments]

hacking: security in practice
Suspicious log in attempt from place I bought airplane tickets to..

This is so weird

I recently bought airplane tickets to Kyiv, Ukraine on my current email address. Then someone logged into my old instagram account on my old email account that is not anyway associated with my current email. The IP associated with that log in is Kyiv, Ukraine...

How would that be possible? I don't get how the IP log in was in Kyiv , the same place I am heading to.

submitted by /u/Tom1l1
[link] [comments]

Kali Linux Tutorials
PPLdump : Dump The Memory Of A PPL With A Userland Exploit

PPLdump implements a userland exploit that was initially discussed by James Forshaw (a.k.a. @tiraniddo) – in this blog post – for dumping the memory of any PPL as an administrator. I wrote two blog posts about this tool. The first part is about Protected Processes concepts while the second one dicusses the bypass technique itself. Blog post part #1: Do You Really Know […]

The post PPLdump : Dump The Memory Of A PPL With A Userland Exploit appeared first on Kali Linux Tutorials.

hacking: security in practice
RPC Enumeration | Active Directory | Only for educational purposes!

NOTE: Only for educational purposes!

Hello Everyone!

Hope you all are doing great, In this video, I will show you how you can enumerate RPC to gain useful and important information about the target domain controller such as users, groups and so on! Hope you enjoy the video! Stay safe! Take care!

https://www.youtube.com/watch?v=FULONmrl3jo

submitted by /u/Vedant-Bhalgama
[link] [comments]

hacking: security in practice
How to change your public ip address without contacting isp?

I noticed that all of my devices connected to the same wifi network have the same ip when I look for “whats my ip” on google. I went into my router setting and I noticed that I can change my LAN ip (192.168.x.x)

But when I go to WAN settings I see the same ip address that I see on google on all my devices. I tried to change it from my router setting but it seems to be set in stone. All of this was done from my web browser on windows but I can use tools on kali as well I just dont know which ones.

submitted by /u/Matrix10011
[link] [comments]

About socat, a tool for listening to and connecting to shells on a remote machine after exploitation
https://www.reddit.com/r/Pentesting/comments/o9gk3j/about_socat_a_tool_for_listening_to_and/

<!-- SC_OFF -->I am currently studying syntax of socat tool. Here's a command :- socat TCP-L:(port) - (This is what we type on attacking machine for establishing a listener on it while using a reverse shell) I am confused with -L option here after tcp, i looked it up in man pages of socat and it say its a flag for lockfile.. And i am confused as to what file locking really is..and how is it related to socat in its syntax? <!-- SC_ON --> submitted by /u/Global_Negotiation_3 (https://www.reddit.com/user/Global_Negotiation_3)
[link] (https://www.reddit.com/r/Pentesting/comments/o9gk3j/about_socat_a_tool_for_listening_to_and/) [comments] (https://www.reddit.com/r/Pentesting/comments/o9gk3j/about_socat_a_tool_for_listening_to_and/)

Black Hat Ethical Hacking
Cisco ASA Bug Now Actively Exploited as PoC Drops

https://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Cisco ASA Bug Now Actively Exploited as PoC DropsPost Views: 113
Reading Time: 1 Minute
Researchers have dropped a proof-of-concept (PoC) exploit on Twitter for a known cross-site scripting (XSS) vulnerability in the Cisco Adaptive Security Appliance (ASA).
Researchers at Positive Technologies published the PoC for the bug (CVE-2020-3580) on Thursday. One of the researchers there, Mikhail Klyuchnikov, noted that there were a heap of researchers now chasing after an exploit for the bug, which he termed “low-hanging” fruit.
https://s.w.org/images/core/emoji/13.0.1/72x72/1f381.png PoC for XSS in Cisco ASA (CVE-2020-3580)

POST /+CSCOE+/saml/sp/acs?tgname=a HTTP/1.1
Host: ciscoASA.local
Content-Type: application/x-www-form-urlencoded
Content-Length: 44
SAMLResponse="><svg pic.twitter.com/c53MKSK9bg


— PT SWARM (@ptswarm) June 24, 2021
Meanwhile, Tenable researchers published an alert about the PoC, noting that it has started to see cyberattacks using the vulnerability on targets in the wild.

“Tenable has also received a report that attackers are exploiting CVE-2020-3580 in the wild,” according to its Thursday alert. “With this new information, Tenable recommends that organizations prioritize patching CVE-2020-3580.”

And indeed, the PT PoC tweet was met with plenty of “Ooh thanks” and “thank you so much” responses, presumably from would-be hackers.
See Also: New iPhone Bug Breaks Your WiFi: Here’s The Fix
Meanwhile, researchers at WebSec noted that the bug could be exploited for more than XSS:
You could have gotten 2 CVE numbers for this, as this is not just XSS but also CSRF.

— WebSec (@websecnl) June 25, 2021
“Researchers often develop PoCs before reporting a vulnerability to a developer and publishing them allows other researchers to both check their work and potentially dig further and discover other issues,” Claire Tills, senior research engineer at Tenable, told Threatpost. “PoCs can also be used by defenders to develop detections for vulnerabilities. Unfortunately, giving that valuable information to defenders means it can also end up in the hands of attackers.”

Given that a patch has been available for this vulnerability for several months, organizations are able to protect themselves which isn’t the case with 0-day disclosures, she pointed out. “However, unpatched vulnerabilities continue to haunt many organizations,” Tillis added. “The public availability of a PoC is another stark reminder that effective patching is a vital step for organizations to protect themselves.” Real-World Attacks for Cisco ASAThe Cisco ASA is a cybersecurity perimeter-defense appliance that combines firewall, antivirus, intrusion prevention and virtual private network (VPN) capabilities, all meant to stop threats from making it onto corporate networks. A compromise of the device is akin to unlocking the front door of the castle for storming cyberattackers.
See Also: Offensive Security Tool: Pixload
XSS attacks occur when malicious scripts are injected into otherwise benign and trusted websites; any visitors to the compromised websites are thus subject to drive-by attacks.

Successful exploitation in this case means that unauthenticated, remote attackers could “execute arbitrary code within the [ASA] interface and access sensitive, browser-based information,” Tenable added.

Once in, they could modify the device’s configuration, according to Leo Pate, an application security consultant at nVisium.

However, the target would need to be logged into the ASA for the attackers to see any joy. “While th[...]

Black Hat Ethical Hacking
Hacking Stories: Andrian Lamo – The ‘homeless’ Hacker

https://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Hacking Stories: Andrian Lamo – The ‘homeless’ Hackerhttps://www.blackhatethicalhacking.com/wp-content/uploads/2020/11/BECOME-A-PATRON-AND-UNLOCK-EXCLUSIVE-VIDEOS-8-1-300x120.png style="display:block"
data-ad-client="ca-pub-6620833063853657"
data-ad-slot="3193330934"
data-ad-format="auto"
data-full-width-responsive="true">
Post Views: 105
Reading Time: 6  Minutes
Adrian Lamo was a hacker that found new ways to challenge companies to re-think how secure they were. From hacking his way into the most prestigious companies while living out of a backpack to being called a “snitch” from the hacker community, Adrian was a highly controversial figure in the hacking world.
Early Days – Back Story
Adrián Alfonso Lamo Atwood was born in Malden, Massachusetts, U.S, on February 20th, 1981. He attended high school in San Francisco, but he dropped out after many arguments with his teachers. He did not graduate but he received a GED and then studied journalism at the American River College in Carmichael, California.

His computer skills were mainly self-taught. Adrian got his first computer, a Commodore 64 at a young age. He then became interested and familiar with software hacking by experimenting with coding that was used to create the video games that he loved to play.

His hacking journey started by hacking into computer games, creating viruses on floppy disks, and eventually practicing with phone phreaking. He was able to make free long-distance calls by tapping into stranger’s phone lines and finding ways to spoof his calls from the phone companies to go undetected.
First Steps in Hacking
In the mid-90s he started using a simple web browser and explorer the web to find holes in the security of companies.

He was unknowingly driven by the so-called Hacker culture, where individuals enjoy the intellectual challenge of overcoming the limitations of software systems using their creativity to achieve their individual goals. It’s not about how big the companies were or how sensitive the information was, but more about the odds of finding something that was never being found before.

Describing the security of the companies back then, he would say that was not all that challenging to find security holes in their systems. He would try to take the available information resources and arrange them in improbable ways, not spending time to download databases or leak any customer information.

He began exploring the Web by spending countless hours at the Public Library of San Francisco, using their Internet terminals to telnet out to other systems, including the ones that let him use their modems to dial out.
Security holes everywhere, living out of a backpack.
In 1997, AOL introduced one of the first instant messaging services, after ICQ in 1996 and the dot.com bubble was starting to form.  Adrian was watching the explosion of activity on the Internet with a mixture of excitement and worry about the dangers that no one could see.

Living out of a backpack, he would then spend a couple of years traveling the country on a bus, sleeping in abandoned buildings and on friends’ couches while getting online from university libraries and Kinko’s laptop stations.

During this time, he’d been sleeping in an abandoned building underneath Philadelphia’s Ben Franklin Bridge when he discovered security vulnerabilities at Excite@Home, he would inform the executives but no action was taken at first. He would even start helping customers and trying to fix their problems that were reported as helpdesk tickets when the co[...]