Dark Reading: Attacks/Breaches
Law Firm for Ford, Pfizer, Exxon Discloses Ransomware Attack

Campbell Conroy & O'Neil reports the attack affected personal data including Social Security numbers, passport numbers, and payment card data for some individuals.

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
MANSPIDER - Spider Entire Networks For Juicy Files Sitting On SMB Shares. Search Filenames Or File Content - Regex Supported!

http://4.bp.blogspot.com/-1VejID09mE8/YOfZjjCEplI/AAAAAAAAizQ/MOsQC5GieQguI-NBPVTJKHy6DaWSa7CywCK4BGAYYCw/w640-h348/MANSPIDER_2-741248.png Crawl SMB shares for juicy information. File content searching + regex is supported!http://2.bp.blogspot.com/-GwxIwSE3Uqg/YOfZiJjAkCI/AAAAAAAAizI/PYVJTu7judo4GoJtp0OZzOuBvCX2jenVgCK4BGAYYCw/w640-h360/MANSPIDER_1-736157.gif File types supported:* PDF* DOCX* XLSX* PPTX* any text-based format
* and many more!! MAN-SPIDER will crawl every share on every target system. If provided creds don't work, it will fall back to "guest", then to a null session.http://4.bp.blogspot.com/-1VejID09mE8/YOfZjjCEplI/AAAAAAAAizQ/MOsQC5GieQguI-NBPVTJKHy6DaWSa7CywCK4BGAYYCw/w640-h348/MANSPIDER_2-741248.png Installation:(Optional) Install these dependencies to add additional file parsing capability: # for images (png, jpeg)
$ sudo apt install tesseract tesseract-data-eng

# for legacy document support (.doc)
$ sudo apt install antiword Install manspider (please be patient, this can take a while): $ pip install pipx
$ pipx install man-spider Example #1: Search the network for filenames that may contain credsNOTE: matching files are automatically downloaded into $HOME/.manspider/loot! (-n to disable)

login logon cred -d evilcorp -u bob -p Passw0rd ">$ manspider 192.168.0.0/24 -f passw user admin account network login logon cred -d evilcorp -u bob -p Passw0rd Example #2: Search for XLSX files containing "password"$ manspider share.evilcorp.local -c password -e xlsx -d evilcorp -u bob -p Passw0rd Example #3: Search for interesting file extensions$ manspider share.evilcorp.local -e bat com vbs ps1 psd1 psm1 pem key rsa pub reg txt cfg conf config -d evilcorp -u bob -p Passw0rd Example #4: Search for finance-related filesThis example searches financy-sounding directories for filenames containing 5 or more consecutive numbers (e.g. 000202006.EFT)

swift -f '[0-9]{5,}' -d evilcorp -u bob -p Passw0rd ">$ manspider share.evilcorp.local --dirnames bank financ payable payment reconcil remit voucher vendor eft swift -f '[0-9]{5,}' -d evilcorp -u bob -p Passw0rd Example #5: Search for certificates$ manspider share.evilcorp.local -e pfx p12 pkcs12 pem key crt cer csr jks keystore key keys der -d evilcorp -u bob -p Passw0rd Usage Tip #1:You can run multiple instances of manspider at one time. This is useful when one instance is already running, and you want to search what it's downloaded (similar to grep -R). To do this, specify the keyword lootas the target, which will search the downloaded files in $HOME/.manspider/loot. Usage Tip #2:Reasonable defaults help prevent unwanted scenarios like getting stuck on a single target. All of these can be overridden:

* default spider depth: 10 (override with -m)
* default max filesize: 10MB (override with -s)
* default threads: 5 (override with -t)
* shares excluded: C$, IPC$, ADMIN$, PRINT$(override with --exclude-sharenames) Usage Tip #3:Manspider accepts any combination of the following as targets:

* IPs
* hostnames
* subnets (CIDR format)
* files containing any of the above
* local folders containing files

For example, you could specify any or all of these:

* 192.168.1.250* share.evilcorp.local* 192.168.1.0/24* smb_hosts.txt* loot(to [...]

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
MANSPIDER - Spider Entire Networks For Juicy Files Sitting On SMB Shares. Search Filenames Or File Content - Regex Supported!

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
CyberTalent — Exploiting Shellshock (CVE-2014–6271) on a Remote Server(Inside Lab)

https://cdn-images-1.medium.com/max/1200/1*gruWm7TwnL-qT3Psk7HtPg.png
Inside is a machine on Cyber talent that is rated as a medium machine. It presents a shellshock vulnerability that allows remote code…

Continue reading on InfoSec Write-ups »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
I’m putting a WiFi router into a wall charger (Part 2)

https://cdn-images-1.medium.com/max/729/1*u3yE6cNDZBADh--L5eUThQ.png
This is the third part of a blog about putting a WiFi router into a phone charger; (see part zero here, see part one here) and feel free…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
find phone owner from picture

Is there a way to find a unique ID (sim or phone) from a picture's metadata? The picture in question is from an iPhone and in .jpg format. Thanks !

submitted by /u/dmc1oh1
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
I think my pc is part of a botnet. Can I remove myself?

Please help

submitted by /u/Dropex-
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Using MitmProxy for passwords

I have MitmProxy configured successfully. Where in the HTTPS traffic can I find a client’s credentials. For example, their Facebook login

submitted by /u/Thanstor
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How to Generate an Evil QR Code with Excel Sheets

https://cdn-images-1.medium.com/max/1600/0*LZukYgzn-TyCvWSX
Hello and welcome to my first article.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Tunneling my traffic through a TCP connection (or other solutions)

Hello, some time ago I got through an issue with my ISP where all websites would be very slow, throttled by the ISP, but when I run a Speedtest, it shows that I have a speed of 70Mbps, which in no way can be real when I can't even play YouTube videos.

So, I knew they were throttling every website that is not Speedtest, so I thought of an idea, I set up an OpenVPN server and set the http-proxy Host(SNI) to www.speedtest.net, so that all websites would be treated as Speedtest, and this actually worked. I got my full speed on the other websites that were being throttled.

Later, they seem to have patched that, it no longer gives me full speed on all websites, except that Speedtest still has the full speed working. I am not sure how it is being whitelisted right now, but using Fiddler I was able to tell that the Speedtest's test are downloading from a Speedtest host on port 8080. So, I opened a TCP connection using netcat, to that host on the specified port, and sent the DOWNLOADcommand, and this connection was unthrottled too! I was able to download through that TCP connection with my full speed.

But the thing is, through this TCP connection, I could only download random/temp data for the Speedtest, nothing that I want (aka: not browsing), which is useless.

I was wondering if there was some way that I could tunnel my traffic through a TCP connection started through netcat (or any other tool that can do this thing), so that I am browsing through an unthrottled connection = full speed to all websites.

Or if there was any other thing I could do to trick them into thinking I'm running a speedtest/connecting to their Speedtest servers so that I can get my full speed.

Thank you so much in advance.

submitted by /u/HakounaMatataGuy
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Working with magstripes

I recently got a magstripe reader, I’m trying to understand how the data is processed, when the card is swiped. When reading the output of the raw data (which is hex)I’m seeing characters (after converting to ascii) such as: Thorn, Shift-out, or even exponents. I’m a little stumped on where to go from here just need a push in the right direction.

submitted by /u/R3aPer_21
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Two Union ministers, Rahul Gandhi, Prashant Kishor on Pegasus list: Report

https://cdn-images-1.medium.com/max/2000/1*VeIMDiFdxKTYPt_Vy0q47Q.jpeg
Congress member Rahul Gandhu, former election commissioner Ashok Lavasa, recently-appointed railways, communications and IT minister…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video