Hacking on Medium
Lame HTB Writeup

https://cdn-images-1.medium.com/max/1312/1*6i8evcn64xH5jnkrkUv3Bw.png
Hi everyone, this is my writeup for box “Lame” found on HackTheBox .

Continue reading on Medium »

Hacking on Medium
How to fix WordPress redirect hacks

https://cdn-images-1.medium.com/max/1280/1*UtLRdzqUJQC5l_HQqJvX5Q.jpeg
WordPress redirect hack is one of the common types of hacks, happens on WordPress. But it causes more severe side effects to your website.

Continue reading on Medium »

An attempt to escalate a low-impact hidden input XSS
https://officialaimm.medium.com/an-attempt-to-escalate-a-low-impact-hidden-input-xss-9f4b9c88f19c?source=rss------bug_bounty-5

IntroductionContinue reading on Medium » (https://officialaimm.medium.com/an-attempt-to-escalate-a-low-impact-hidden-input-xss-9f4b9c88f19c?source=rss------bug_bounty-5)

Heappy - A Happy Heap Editor To Support Your Exploitation Process

Heappy is an editor based on gdb/gef that helps you to handle the heap during your exploitation development. The project should be considered a didactic tool useful to understand the evolution of the heap during the process life cycle. It has been created to simplify the study of the most common heap exploitation techniques and to support you to solve some binary exploitation CTFs related to this fantastic topic.Main features This is what Heappy implements:✅ take heap snapshots and compare them each other✅ recognize immediately type and fields of heap bins✅ search and edit heap values by decimal, hex or string✅ find yourself with the panoramic view of the heap status✅ take notes about a cell in the comment column✅ enjoy the light and dark modeGetting Started These instructions will help you to install and run Heappy fastly. Prerequisites If you don't have it, install GEF in GDB: wget -q -O- https://github.com/hugsy/gef/raw/master/scripts/gef.sh | sh md5(gef.sh): eb053864d050048cb001c80c79fde7b5 Installing Install Node.js and npm: apt updatesudo apt install nodejs npm Download and install Heappy: git clone https://github.com/gand3lf/heappycd heappy/npm install Load the server inside GDB: gef➤ source /my/path/heappy/server/heappy.py It is suggested to run the Heappy GUI after that the target heap has been initialized. For example: gef➤ break maingef➤ run From another terminal launch the GUI: cd /my/path/heappy/npm start Have fun!  Not yet implemented  32-bit addresses support (coming soon)  multiple heaps support  gdb checkpoint integrationDownload Heappy
Read more...

hacking: security in practice
what is your favorite Subdomain scanner?

been using some tool but any suggestion would be cool

submitted by /u/riotsun
[link] [comments]

Easter egg for pentest
https://www.reddit.com/r/Pentesting/comments/o9jz04/easter_egg_for_pentest/

<!-- SC_OFF -->Our company will have a pentest audit in the next week. Any idea of a good easter egg for them to find and brighten their day? <!-- SC_ON --> submitted by /u/Dark_Horse1995 (https://www.reddit.com/user/Dark_Horse1995)
[link] (https://www.reddit.com/r/Pentesting/comments/o9jz04/easter_egg_for_pentest/) [comments] (https://www.reddit.com/r/Pentesting/comments/o9jz04/easter_egg_for_pentest/)

Heappy - A Happy Heap Editor To Support Your Exploitation Process
http://www.kitploit.com/2021/06/heappy-happy-heap-editor-to-support.html

Heappy is an editor based on gdb/gef that helps you to handle the heap during your exploitation (https://www.kitploit.com/search/label/Exploitation) development.
The project should be considered a didactic tool useful to understand the evolution of the heap during the process life cycle. It has been created to simplify (https://www.kitploit.com/search/label/Simplify) the study of the most common heap exploitation techniques and to support you to solve some binary exploitation (https://www.kitploit.com/search/label/Binary%20Exploitation) CTFs related to this fantastic topic.
Main features
This is what Heappy implements:
✅ take heap snapshots and compare them each other✅ recognize immediately type and fields of heap bins✅ search and edit heap values by decimal, hex or string✅ find yourself with the panoramic view of the heap status✅ take notes about a cell in the comment column✅ enjoy the light and dark mode
Getting Started
These instructions will help you to install and run Heappy fastly.
Prerequisites
If you don't have it, install GEF in GDB: wget -q -O- https://github.com/hugsy/gef/raw/master/scripts/gef.sh | sh
md5(gef.sh): eb053864d050048cb001c80c79fde7b5
Installing
Install Node.js (https://www.kitploit.com/search/label/Node.js) and npm: apt update
sudo apt install nodejs npm
Download and install Heappy: git clone https://github.com/gand3lf/heappy
cd heappy/
npm install
Load the server inside GDB: gef➤ source /my/path/heappy/server/heappy.py
It is suggested to run the Heappy GUI after that the target heap has been initialized.
For example: gef➤ break main
gef➤ run
From another terminal launch the GUI: cd /my/path/heappy/
npm start
Have fun! 
Not yet implemented
 32-bit addresses support (coming soon)
 multiple heaps support
 gdb checkpoint integration

Download Heappy (https://github.com/gand3lf/heappy)

Kali Linux Tutorials
Rustcat : Netcat Alternative

Rustcat is a port listener that can be used for different purposes.It is basically like netcat but with fewer options. Why Use Rustcat? Serves it purpose of listening to ports Has command history It is easy to use Supports udp Uses colors Installation Debian wget https://github.com/robiot/rustcat/releases/latest/download/rustcat_amd64.debsudo apt install ./rustcat_amd64.deb Arch git clone https://aur.archlinux.org/rustcat.gitcd rustcatmakepkg -si […]

The post Rustcat : Netcat Alternative appeared first on Kali Linux Tutorials.

Kali Linux Tutorials
FalconEye : Real-time detection software for Windows process injections

FalconEye is a windows endpoint detection software for real-time process injections. It is a kernel-mode driver that aims to catch process injections as they are happening (real-time). Since FalconEye runs in kernel mode, it provides a stronger and reliable defense against process injection techniques that try to evade various user-mode hooks. You can check our […]

The post FalconEye : Real-time detection software for Windows process injections appeared first on Kali Linux Tutorials.

Kali Linux Tutorials
RdpCacheStitcher : RdpCacheStitcher Is A Tool That Supports Forensic Analysts

RdpCacheStitcher is a tool that supports forensic analysts in reconstructing useful images out of RDP cache bitmaps. Using raw RDP cache tile bitmaps extracted by tools like e.g. ANSSI’s BMC-Tools (https://github.com/ANSSI-FR/bmc-tools) as input, it provides a graphical user interface and several placement heuristics for stitching tiles together so that meaningful images or even full screenshots can be reconstructed. […]

The post RdpCacheStitcher : RdpCacheStitcher Is A Tool That Supports Forensic Analysts appeared first on Kali Linux Tutorials.

KitPloit - PenTest Tools!
Heappy - A Happy Heap Editor To Support Your Exploitation Process

http://2.bp.blogspot.com/-997OcegewTs/YNEeshXoYQI/AAAAAAAAdM8/yN51-8Td_S4KngHVjwjTjOlQcFRpmDDmACK4BGAYYCw/w640-h442/heappy_1-713884.png

Heappy is an editor based on gdb/gef that helps you to handle the heap during your exploitation development.
The project should be considered a didactic tool useful to understand the evolution of the heap during the process life cycle. It has been created to simplify the study of the most common heap exploitation techniques and to support you to solve some binary exploitation CTFs related to this fantastic topic.
Main features

This is what Heappy implements:
✅ take heap snapshots and compare them each other

✅ recognize immediately type and fields of heap bins

✅ search and edit heap values by decimal, hex or string

✅ find yourself with the panoramic view of the heap status

✅ take notes about a cell in the comment column

✅ enjoy the light and dark mode
Getting Started

These instructions will help you to install and run Heappy fastly.

Prerequisites

If you don't have it, install GEF in GDB:

wget -q -O- https://github.com/hugsy/gef/raw/master/scripts/gef.sh | sh


md5(gef.sh): eb053864d050048cb001c80c79fde7b5

Installing

Install Node.js and npm:

apt update
sudo apt install nodejs npm


Download and install Heappy:

git clone https://github.com/gand3lf/heappy
cd heappy/
npm install


Load the server inside GDB:

gef➤ source /my/path/heappy/server/heappy.py


It is suggested to run the Heappy GUI after that the target heap has been initialized.
For example:

gef➤ break main
gef➤ run


From another terminal launch the GUI:

cd /my/path/heappy/
npm start


Have fun!



Not yet implemented

32-bit addresses support (coming soon)


multiple heaps support


gdb checkpoint integration
Download Heappy

hacking: security in practice
Can conversations recorded without my consent be used against me in court?

Sorry I don’t know if this is the right place to ask this but… that’s basically what I want to know. My ex hacked my iPhone and is trying to use recordings he obtained through hacking to get my children taken away

submitted by /u/Rumanda
[link] [comments]