Deep Web
Help a new slut?

I’d love to find a owner/master/pimp can someone please help me? Please pm for more details.

submitted by /u/Jam254
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Pstf2 - Passive Security Tools Fingerprinting Framework
http://www.kitploit.com/2021/07/pstf2-passive-security-tools.html

___________________________
@hacking_Attack
@Hacking_Video

Have you ever wanted a simple, easy and stealth bypass for multiple classes of security products? pstf^2 (pronounced pstf-square) is an implementation of an HTTP server capable of passive browser fingerprinting - and it might just be the thing you are looking for. When attackers try to deliver a payload over the internet they need to overcome multiple tools capable of scanning incoming links. Email filters, scanning engines and even submission to sandbox over URL - all can be bypassed once pstf2 detects them in a passive fashion. Once detected, the tool allows to differentiate between security services and potential victims and deliver either a malicious or benign response. This tool was released during BlackHat (https://www.kitploit.com/search/label/BlackHat) EU 2020: https://www.blackhat.com/eu-20/arsenal/schedule/#pstf2-link-scanners-evasion-made-easy-21763 Details about the research (https://www.kitploit.com/search/label/Research) are available in this blog post: https://blogs.akamai.com/sitr/2020/12/evading-link-scanning-security-services-with-passive-fingerprinting.html
How it Works?
The real question is - how link scanners work? Inspecting a malicious link is an action involving web client sending an HTTP GET request. Each vendor uses a different in-house implementation - most trying to mimic a real user interaction to some extent. pstf^2 is a simple python-based HTTP servers which applies well-known bot detection tactics to determine whether an incoming request is from an automated (https://www.kitploit.com/search/label/Automated) security tool. The server's operator can customize responses, e.g. - if a scanner is detected redirect to Google otherwise send malicious content. Below are the main tactics implemented as part of pstf^2:
Application Layer

Obsolete User Agents
Security tools try to hide as legitimate clients, impersonating real browsers, nevertheless - usually this is not the case. It is common to see tools which are not maintained properly using fake user-agent headers for browser versions which are a decade old. pstf^2 allows you to set a minimal threshold for what you consider as a real non-obsolete version.
General HTTP Anomalies
There are many types of odd implementations the tool is capable of detecting. A couple of examples which were presented in the BlackHat talk were: Leaving a via: header which disclosed the nature of the virtual host used for sandboxing. referer: header which suggested that the link was reached from Google, e.g. referer: google.com/search?q=specific.site.com. in the scenarios we tested it made no sense since this product scans emails and when someone clicks an email (not from a web interface) this header is absent.
Link, Network and Transportation Layer

Correlation
Multiple TCP parameters can imply either a specific OS version or a specific flavour. Some clients spoof the user-agent header but are running on top of an OS different than the one they declare.
MTU Values
Clients hosted on specific cloud providers networks have MTU different than the standard value of 1500 bytes.
ASN
In some cases the request is sent from an ASN associated explicitly with a specific security vendor. In others the request's origin is a cloud hosting provider, while not incriminating a specific vendor it is unlikely to be a typical user.
DNS PTR Records
In rare cases the client's IP address has a PTR record, associating it with URL related to a security vendor.
Setting up pstf^2

Using Docker
Assuming you have Docker already installed, it is as simple as that: docker-compose up

Manual Deployment
In case you wish to avoid Docker, follow these steps.
Satisfy Python Requirements
run: pip install requirements.txt
This will install any external Python modules required.
Getting p0f

___________________________
@hacking_Attack
@Hacking_Video

Before deploying pstf^2, download and install p0f. It is currently available at: https://lcamtuf.coredump.cx/p0f3/ Now, properly configure lib/servers/server_config.yml to point at the correct path, i.e.: p0f_config:
# change your username at the very least, remember to change in both paths
p0f_bin_path: '/Users/$your_user_name/$more_folders/web_fp/p0f-3.09b/p0f'
p0f_fp_path: '/Users/$your_user_name/$more_folders/web_fp/p0f-3.09b/p0f.fp'
iface: 'lo0'
p0f_named_socket: '/tmp/p0f_socket'
Also verify that iface is the same interface running your Python HTTP server. In the above example it is the loopback interface.
Running pstf^2
Once requirements (https://www.kitploit.com/search/label/Requirements) are satisfied, run: python driver.py
You may use any of the following flags: --p0f_bin_path P0F_BIN_PATH
--p0f_fp_path P0F_FP_PATH
--p0f_iface P0F_IFACE
All are used for adjusting parameters related to p0f: the binary itself, the fingerprinting file and the interface we use which defaults to eth0. You should see output similar to the following: 2020-04-15 17:37:06,896 - pstf2_logger - INFO - Starting p0f...
2020-04-15 17:37:06,896 - pstf2_logger - INFO - Running command:
/Users/gbitensk/work/web_fp/p0f-3.09b/p0f -i lo0 -s /tmp/p0f_socket -f /Users/gbitensk/work/web_fp/p0f-3.09b/p0f.fp
2020-04-15 17:37:06,898 - pstf2_logger - INFO - p0f started!
2020-04-15 17:37:06,898 - pstf2_logger - INFO - Starting HTTP server...
2020-04-15 17:37:06,898 - pstf2_logger - INFO - HTTP server started!
2020-04-15 17:37:06,899 - pstf2_logger - INFO - If you wish to terminate the server press CTRL+C

Terminate the server by pressing Ctrl+C, it will kill both the HTTP and p0f instances. You should see something similar too: 2020-04-15 17:37:48,263 - pstf2_logger - INFO - HTTP server stopped!
2020-04-15 17:37:48,263 - pstf2_logger - INFO - Killing p0f...
2020-04-15 17:37:48,263 - pstf2_logger - INFO - p0f killed!
2020-04-15 17:37:48,263 - pstf2_logger - INFO - exiting...
Note that setting a DNS record pointing a URL to point at your server is beyond the scope of pstf^2 and at your own responsibility.
Payload Management
pstf^2 has default payloads which are defined within server_config.yml and can be customized with ease.
Benign Response
There are two modes, switched by altering the rickroll_mode variable for either YES or NO. If it is enabled the security tool will be redirected to a YouTube page with the famous Rickrolling movie (https://en.wikipedia.org/wiki/Rickrolling), otherwise it will serve a string defined in the same YAML file.
Malicious Response
By default - "malicious" response was set to the EICAR standard testing string (https://www.eicar.org/?page_id=3950).
Why is pstf^2 Public?
I opted for publicly releasing this tool as an open source project since: Malicious links are being used by bad guys on daily basis, in large scale. Security tools are not good enough, some of the methods illustrated by pstf^2 are abused in-the-wild. As part of the tool's construction it was tested against 15 different products, all failed. While I did responsibly disclose details about the attack we still have a long way to go and my expectations is that by making the tool public we will raise the awareness to those tactics which are already being abused by "bad guys".
Special Thanks
@Den1al (https://github.com/Den1al) for providing advice when building this tool specifically, and writing Python properly in general as well as assisting in creating it as a Docker image.

Download Pstf2 (https://github.com/G4lB1t/pstf2)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
[Theorical question] Hacking Vigik

Hi

I was interested into getting your opinion on a thought that I had just today. I'm a security / hacking fan but I don't think that I could say that I have a very strong knowledge about it -just as a disclamer.

Weeks ago, I started wondering about how hackable are vigik locks at the entrace of nearly all Paris' buildings. I thought that -as pretty much everything around us in this city- it was poorly secured and that I'd be able to find a universal pass even on ebay. Turns out that I was wrong and, to this day, apparently no one has successfully hacked it or at least the most that we can read on the internet is that tech experts think that it'll be hacked in the next years.

There actually are universal pass for the mail, electricity and internet workers but each key has its own data and it becomes outdated every two days. Then you have to update it with vigik professionnal tools.

So I thought that leaks and stolent hardware would be easy to find and it seems that I was wrong about it. Then I finally came to the conclusion that in order to always have a valid pass, you'd need to have a friend who works in the mentionned fields and that he'd have to copy and send his key every two days to you with the help of his smartphone. Dead end : I don't have any friend working in these compagnies.

I really thought that this quest was over and that there wasn't any possible turnaround left.

And finally, today, I got randomly stroke by an idea : what if you just don't ask the mailman ? What if he has everything you need in his pocket and by this I mean the Vigik key AND the mean to copy and deliver it to you without implying any action on his side ? Most of post employees obviously will put their keys and their phone at a close distance. So what you basically need isn't to hack vigik but hack a phone with a silent nfc cloner.

That's pretty wicked, indeed. But in fact you don't even need to infect a phone. What if, just as card stealers, I'd 3D-print a fake vigik badge reader that'd be slightly bigger than the original, put it onto a real vigik device at the entrace of a building and create some kind of "man-in-the-middle-ish" device that'd send every scanned-badge's key on my phone ?

And finally, what if having a series of outdated keys collected thanks to my device could help me predict the next one and maybe crack vigik's encryption ?

What do you think ?

Please pardon my eventual english mistakes as I'm a non-native speaker and thanks for sharing your thoughts about this idea.

submitted by /u/gregfdzd
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Can a person get hacked through WhatsApp?

This story has happened to me at least five times now: I match with an Asian girl through online dating (always an Asian girl, though I live in a country where there are no Asian people), we exchange only a few messages and then very quickly she asks to move the conversation to WhatsApp.

When we do she tells me she's lives abroad and had visited my country recently and would be returning a month from now or in the fall or some period. I've had conversations with girls claiming to be in Japan, but with a +44 (UK) country code, then telling me it's because she studied in the UK.

As I say, this has happened about five times now and only once has anything that could potentially get money out of me been brought up. One of these girls mentioned some kind of new cryptocurrency and said how this is an opportune time to get into it, although she didn't press very hard on it and it kind of came up organically.

But anyway, that definitely could have been a scam, but the weird thing is, the other four girls never asked me for any money or personal info beyond my phone number to connect via WhatsApp and that has me worried.

Is there any way a hacker could get anything out of me through connecting with me on WhatsApp?

submitted by /u/themainheadcase
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Pre-Account Takeover by Reversing a Weak Email Verification Token Algorithm

I spoofed access to other people’s email in order to pre-steal user accounts before they are first registered. Here’s how I did it.Continue reading on InfoSec Write-ups »
Read more...

KitPloit - PenTest Tools!
Pstf2 - Passive Security Tools Fingerprinting Framework

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
8 Potential Warning Signs of a Rug Pull

https://cdn-images-1.medium.com/max/2600/1*9uSXnMoR_uyIrWkB378A0w.jpeg
Rug pulls are by far the most common type of fraud in DeFi, and they evolved out of the exit scam ICO craze.

Continue reading on Immunefi »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
POR EHACKING

https://cdn-images-1.medium.com/max/1815/0*Gy5R4t643_sr7Kgr
La seguridad en los sistemas informáticos es un continuo juego del gato y el ratón. Por una parte, las actualizaciones de software cierran…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
What do you think are probably the top 5 how to hack google searches?

I’m just curious based on your personal experience what would you think are probably the most searched how to’s on google for hacking. Secondly, what do you think should be the most important questions for someone to ask themselves?

submitted by /u/james14street
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Possible malware n33d h3lp -_-

So I inserted my usb in a windows xp (pir ated of course) and it turned all the files' names into sime gibberish, some greek letters and other weird shapes, so I think this probably a malware or ransomware or whatever the name is, or maybe it's because I take the usb out of pc without unmount it (probably not but who knows, not me for sure, I'm a noob), well, the windows was in a virtual machine so no other file is affected, plus, I have Linux as main OS so I don't know if it could do something. The thing is, I can't format, open, or rename anything, the names appears only in terminal btw. I need a solution please, one more thing: the informations in the usb aren't important so any solution is welcomed.

submitted by /u/Oy-Mugiwara-ya
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
What’s happening to today’s world?

https://cdn-images-1.medium.com/max/1920/1*71rHsEdTSmt_tQ1kbMj4NQ.png
Isn’t it enough that we’re being forced to live in endless lockdowns? That we’re being deprived of free speech by the likes of Mark…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Deep Web
Why logically would you go on the dark web?

I've been lurking this sub for a few hours, read posts new and old about accidentally clicking a link to cheese pizza or seeing some fucked up shit. I know red rooms obviously aren't real(because I'm above the age of 12) but i don't see the perks or the benefit of browsing the deep web. I mean yeah if you're a junkie looking for hard drugs or a pedo monster looking for, well y'know , but in the place of a normal ish person It just seems like more trouble then it's worth. Genuinely curious btw this isn't a criticism at all I just don't understand.

submitted by /u/colton_was_here
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How do I connect my walkie-talkie to my guard's walkie talkie?

I'm using a Baofeng & the security company is really cheap here, although the guards down have a better walkie talkie than me.

I'm already aware of SDRs & I was thinking if there's a way I could connect in to their walkie talkie with mine?

Thanks in advance for any knowledge of this.

submitted by /u/iBeLikeoof
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Pentesting iOS| Starting With iOS Emulator Corellium & Re-signing IPA

Corellium provided virtual iOS-based devices for individual accounts on our groundbreaking security research platform, CORSEC. Corellium’s…
Read more...