Hacking on Medium
Operationalizing and Improving Cybersecurity Posture

Cybersecurity posture, also known as security posture, is the strength possessed by an organization to mitigate threats. A strong security…

Continue reading on Medium »

Hacking on Medium
Window 10 Administrator privilege escalation.

https://cdn-images-1.medium.com/max/1214/1*oKje8M6QHbbWRKKAqTcYuw.png
Hi the day was going typical and I was doing practice for my pen testing and an learn a way haw to exploit the windows system.

Continue reading on Medium »

Hacking on Medium
CSC CTF 2021 — Flag Shop (Reverse Engineering Android)(Smali Patch) #1

https://cdn-images-1.medium.com/max/600/1*-WdH9aSLgRBDYmv8aXhy0Q.gif
Pada kali ini saya sebagai penulis akan membahas salah satu soal yang terdapat pada CTF CSC 2021. Soal ini merupakan soal bertipe Reverse…

Continue reading on Medium »

Hacking on Medium
Lame HTB Writeup

https://cdn-images-1.medium.com/max/1312/1*6i8evcn64xH5jnkrkUv3Bw.png
Hi everyone, this is my writeup for box “Lame” found on HackTheBox .

Continue reading on Medium »

Hacking on Medium
How to fix WordPress redirect hacks

https://cdn-images-1.medium.com/max/1280/1*UtLRdzqUJQC5l_HQqJvX5Q.jpeg
WordPress redirect hack is one of the common types of hacks, happens on WordPress. But it causes more severe side effects to your website.

Continue reading on Medium »

An attempt to escalate a low-impact hidden input XSS
https://officialaimm.medium.com/an-attempt-to-escalate-a-low-impact-hidden-input-xss-9f4b9c88f19c?source=rss------bug_bounty-5

IntroductionContinue reading on Medium » (https://officialaimm.medium.com/an-attempt-to-escalate-a-low-impact-hidden-input-xss-9f4b9c88f19c?source=rss------bug_bounty-5)

Heappy - A Happy Heap Editor To Support Your Exploitation Process

Heappy is an editor based on gdb/gef that helps you to handle the heap during your exploitation development. The project should be considered a didactic tool useful to understand the evolution of the heap during the process life cycle. It has been created to simplify the study of the most common heap exploitation techniques and to support you to solve some binary exploitation CTFs related to this fantastic topic.Main features This is what Heappy implements:✅ take heap snapshots and compare them each other✅ recognize immediately type and fields of heap bins✅ search and edit heap values by decimal, hex or string✅ find yourself with the panoramic view of the heap status✅ take notes about a cell in the comment column✅ enjoy the light and dark modeGetting Started These instructions will help you to install and run Heappy fastly. Prerequisites If you don't have it, install GEF in GDB: wget -q -O- https://github.com/hugsy/gef/raw/master/scripts/gef.sh | sh md5(gef.sh): eb053864d050048cb001c80c79fde7b5 Installing Install Node.js and npm: apt updatesudo apt install nodejs npm Download and install Heappy: git clone https://github.com/gand3lf/heappycd heappy/npm install Load the server inside GDB: gef➤ source /my/path/heappy/server/heappy.py It is suggested to run the Heappy GUI after that the target heap has been initialized. For example: gef➤ break maingef➤ run From another terminal launch the GUI: cd /my/path/heappy/npm start Have fun!  Not yet implemented  32-bit addresses support (coming soon)  multiple heaps support  gdb checkpoint integrationDownload Heappy
Read more...

hacking: security in practice
what is your favorite Subdomain scanner?

been using some tool but any suggestion would be cool

submitted by /u/riotsun
[link] [comments]

Easter egg for pentest
https://www.reddit.com/r/Pentesting/comments/o9jz04/easter_egg_for_pentest/

<!-- SC_OFF -->Our company will have a pentest audit in the next week. Any idea of a good easter egg for them to find and brighten their day? <!-- SC_ON --> submitted by /u/Dark_Horse1995 (https://www.reddit.com/user/Dark_Horse1995)
[link] (https://www.reddit.com/r/Pentesting/comments/o9jz04/easter_egg_for_pentest/) [comments] (https://www.reddit.com/r/Pentesting/comments/o9jz04/easter_egg_for_pentest/)

Heappy - A Happy Heap Editor To Support Your Exploitation Process
http://www.kitploit.com/2021/06/heappy-happy-heap-editor-to-support.html

Heappy is an editor based on gdb/gef that helps you to handle the heap during your exploitation (https://www.kitploit.com/search/label/Exploitation) development.
The project should be considered a didactic tool useful to understand the evolution of the heap during the process life cycle. It has been created to simplify (https://www.kitploit.com/search/label/Simplify) the study of the most common heap exploitation techniques and to support you to solve some binary exploitation (https://www.kitploit.com/search/label/Binary%20Exploitation) CTFs related to this fantastic topic.
Main features
This is what Heappy implements:
✅ take heap snapshots and compare them each other✅ recognize immediately type and fields of heap bins✅ search and edit heap values by decimal, hex or string✅ find yourself with the panoramic view of the heap status✅ take notes about a cell in the comment column✅ enjoy the light and dark mode
Getting Started
These instructions will help you to install and run Heappy fastly.
Prerequisites
If you don't have it, install GEF in GDB: wget -q -O- https://github.com/hugsy/gef/raw/master/scripts/gef.sh | sh
md5(gef.sh): eb053864d050048cb001c80c79fde7b5
Installing
Install Node.js (https://www.kitploit.com/search/label/Node.js) and npm: apt update
sudo apt install nodejs npm
Download and install Heappy: git clone https://github.com/gand3lf/heappy
cd heappy/
npm install
Load the server inside GDB: gef➤ source /my/path/heappy/server/heappy.py
It is suggested to run the Heappy GUI after that the target heap has been initialized.
For example: gef➤ break main
gef➤ run
From another terminal launch the GUI: cd /my/path/heappy/
npm start
Have fun! 
Not yet implemented
 32-bit addresses support (coming soon)
 multiple heaps support
 gdb checkpoint integration

Download Heappy (https://github.com/gand3lf/heappy)

Kali Linux Tutorials
Rustcat : Netcat Alternative

Rustcat is a port listener that can be used for different purposes.It is basically like netcat but with fewer options. Why Use Rustcat? Serves it purpose of listening to ports Has command history It is easy to use Supports udp Uses colors Installation Debian wget https://github.com/robiot/rustcat/releases/latest/download/rustcat_amd64.debsudo apt install ./rustcat_amd64.deb Arch git clone https://aur.archlinux.org/rustcat.gitcd rustcatmakepkg -si […]

The post Rustcat : Netcat Alternative appeared first on Kali Linux Tutorials.