KitPloit - PenTest Tools!
JWTweak - Detects The Algorithm Of Input JWT Token And Provide Options To Generate The New JWT Token Based On The User Selected Algorithm

http://2.bp.blogspot.com/-S9mf3uuIgnQ/YOJWdZCw-BI/AAAAAAAAf7U/ek0rmiAbbTYBFHPpF8d5JLEmc3NR48h-QCK4BGAYYCw/w640-h330/JWTweak_3-799635.png

With the global increase in JSON Web Token (JWT) usage, the attack surface has also increased significantly. Having said that, this utility is designed with the aim to generate the new JWT token with little or no time which would help security enthusiasts to find security flaws in JWT implementation. This tool is designed to automate the process of modifying the JWT algorithm of input JWT Token and then generate the new JWT based on the new algorithm.
Requirements

* Python 3 (tested and working fine in python-3.7.7/Kali and python-3.8.2/Windows 10)
* pip3 install pycryptodomex

Features

* Detects the algorithm of the input JWT Token
* Base64 decode the input JWT Token
* Generate new JWT by changing the algorithm of the input JWT to 'none'
* Generate new JWT by changing the algorithm of the input JWT to 'HS256'
* Generate new JWT by changing the algorithm of the input JWT to 'HS384'
* Generate new JWT by changing the algorithm of the input JWT to 'HS512'
* Generate new JWT by changing the algorithm of the input JWT to 'RS256'
* Generate new JWT by changing the algorithm of the input JWT to 'RS384'
* Generate new JWT by changing the algorithm of the input JWT to 'RS512'

Download Link

JWTweak.py
Author

Rishu Ranjan
Download JWTweak

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Csaw18 — get it : Buffer overflow to redirect the return flow

https://cdn-images-1.medium.com/max/600/1*oFyL9FsN-EzUpOV0EyOd7g.png
In this writeup, we will be solving the csaw18 get it challenge. Here, we will overwrite the return address to redirect the flow of the…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Get started to learn Hacking skills on TryHackMe | Pre Security Path.

https://cdn-images-1.medium.com/max/1200/1*TA60JrTHm4nrpWpw0J-xeg.jpeg
Overview of Pre Security on TryHackMe.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
HIRE A HACKER

I am the technical expert at dark web hackers.

Continue reading on Medium »

JWTweak - Detects The Algorithm Of Input JWT Token And Provide Options To Generate The New JWT Token Based On The User Selected Algorithm

With the global increase in JSON Web Token (JWT) usage, the attack surface has also increased significantly. Having said that, this utility is designed with the aim to generate the new JWT token with little or no time which would help security enthusiasts to find security flaws in JWT implementation. This tool is designed to automate the process of modifying the JWT algorithm of input JWT Token and then generate the new JWT based on the new algorithm. Requirements Python 3 (tested and working fine in python-3.7.7/Kali and python-3.8.2/Windows 10) pip3 install pycryptodomex Features Detects the algorithm of the input JWT Token Base64 decode the input JWT Token Generate new JWT by changing the algorithm of the input JWT to 'none' Generate new JWT by changing the algorithm of the input JWT to 'HS256' Generate new JWT by changing the algorithm of the input JWT to 'HS384' Generate new JWT by changing the algorithm of the input JWT to 'HS512' Generate new JWT by changing the algorithm of the input JWT to 'RS256' Generate new JWT by changing the algorithm of the input JWT to 'RS384' Generate new JWT by changing the algorithm of the input JWT to 'RS512' Download Link JWTweak.py Author Rishu Ranjan Download JWTweak
Read more...

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Lost connection

Hi so I’m trying to find a person who had blocked me on an app. They did not block me out of malice; they are suicidal and I’m genuinely concerned. I’m trying to find his other social media accounts but I know nothing about him other than his name is Jose. Someone please help..

submitted by /u/carlyanna15
[link] [comments]

hacking: security in practice
How to find out an adress from picture of someones roof

So i was on twitter the other day and i saw someone dox someone else's adress.

The victim had previously tweeted out a picture of a sunset or something and you could see his neighbours roof. the guy took that photo and did something with it and posted a screenshot of the victims house and even highlighted the points which gave away it was indeed the victims house.

now i have two questions:
1. How did he do that? How can i do that? (dont really want to dox someone, but i want to protect myself)

1. How do i protect myself from that and how much information does one need for this method?

submitted by /u/Multi27
[link] [comments]

hacking: security in practice
Cool Swag for Hackers!

do someone have experience with this shop? https://myhackertech.com/?ref=C0D3R3DSecurity

submitted by /u/Pol8y
[link] [comments]

JWTweak - Detects The Algorithm Of Input JWT Token And Provide Options To Generate The New JWT Token Based On The User Selected Algorithm
http://www.kitploit.com/2021/07/jwtweak-detects-algorithm-of-input-jwt.html

___________________________
@hacking_Attack
@Hacking_Video

With the global increase in JSON (https://www.kitploit.com/search/label/JSON) Web Token (JWT) usage, the attack surface has also increased significantly. Having said that, this utility is designed with the aim to generate the new JWT (https://www.kitploit.com/search/label/JWT) token with little or no time which would help security enthusiasts to find security flaws in JWT implementation. This tool is designed to automate the process of modifying the JWT algorithm of input JWT Token (https://www.kitploit.com/search/label/JWT%20Token) and then generate the new JWT based on the new algorithm.
Requirements
Python 3 (tested and working fine in python-3.7.7/Kali and python-3.8.2/Windows 10) pip3 install pycryptodomex
Features
Detects the algorithm of the input JWT Token Base64 decode (https://www.kitploit.com/search/label/Decode) the input JWT Token Generate new JWT by changing the algorithm of the input JWT to 'none' Generate new JWT by changing the algorithm of the input JWT to 'HS256' Generate new JWT by changing the algorithm of the input JWT to 'HS384' Generate new JWT by changing the algorithm of the input JWT to 'HS512' Generate new JWT by changing the algorithm of the input JWT to 'RS256' Generate new JWT by changing the algorithm of the input JWT to 'RS384' Generate new JWT by changing the algorithm of the input JWT to 'RS512'
Download Link
JWTweak.py (https://rishuranjanofficial.github.io/JWTweak/JWTweak.py)
Author
Rishu Ranjan

Download JWTweak (https://github.com/rishuranjanofficial/JWTweak)

___________________________
@hacking_Attack
@Hacking_Video

Our Secrets file is encoded with SOPs and the key holder bricked their laptop. Is it possible to recover it and get our charitable communities app running again?
https://www.reddit.com/r/Pentesting/comments/oi5fzh/our_secrets_file_is_encoded_with_sops_and_the_key/

You can see the SOPs file with its keys here: https://github.com/focallocal/fl-maps/blob/master/deployment/.sops.yaml Unfortunately we're trying to recover from a bug that shut our homelessness platform down. I temporarily changed a user password on our database to give someone access to solve the bug.. which i think they succeeded at, not realising that the User password was encrypted in the SOPs file we can't access. I've reached out to all former key holders but it looks like we've lost access completely (its a volunteer community and people come and go often). So the site is probably fixed, but i've broken it by changing the password our React app was using and the secrets file is inaccessible. Can anyone help, or suggest a way to get the app running again? submitted by /u/roamingandy (https://www.reddit.com/user/roamingandy)
[link] (https://www.reddit.com/r/Pentesting/comments/oi5fzh/our_secrets_file_is_encoded_with_sops_and_the_key/) [comments] (https://www.reddit.com/r/Pentesting/comments/oi5fzh/our_secrets_file_is_encoded_with_sops_and_the_key/)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
dostackbufferoverflowgood: buffer overflow shellcoding

https://cdn-images-1.medium.com/max/1644/1*3hs5I9aoxA3uSHGVSaJwIA.png
Hi. This is the third writeup on my buffer overflow series. In this writeup, we will exploit buffer overflow and achieve remote code…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video