Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
[ CheatEngine] Tutorials
https://cdn-images-1.medium.com/max/670/1*w6gV8oRfpO4mNF7hDj4Dew.png
How does the Cheat Engine works ?
Continue reading on Medium »
[ CheatEngine] Tutorials
https://cdn-images-1.medium.com/max/670/1*w6gV8oRfpO4mNF7hDj4Dew.png
How does the Cheat Engine works ?
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
BugBounty: Account Takeover via Facebook Oauth
https://cdn-images-1.medium.com/max/623/1*czlq6hgDVUUYydHLVp9LzQ.png
Hi everyone, hope you all are doing good. I have not posted for a while because of my college exams and stuffs. So in this post, we are…
Continue reading on Medium »
BugBounty: Account Takeover via Facebook Oauth
https://cdn-images-1.medium.com/max/623/1*czlq6hgDVUUYydHLVp9LzQ.png
Hi everyone, hope you all are doing good. I have not posted for a while because of my college exams and stuffs. So in this post, we are…
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Facebook information gathering tool
https://cdn-images-1.medium.com/max/800/1*esG02VvkzslNDyM56wB1mg.jpeg
FBI is a precise Facebook account data gathering tool, in which all sensitive data can be effectively accumulated even though the…
Continue reading on Geek Culture »
Facebook information gathering tool
https://cdn-images-1.medium.com/max/800/1*esG02VvkzslNDyM56wB1mg.jpeg
FBI is a precise Facebook account data gathering tool, in which all sensitive data can be effectively accumulated even though the…
Continue reading on Geek Culture »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Cyber Security Interview Questions Part-1
https://cdn-images-1.medium.com/max/1920/1*uxo3PsS1mKhLr2s8BSemkA.png
Precontext: These are the most common interview questions asked to hacktify cyber security students for different job roles like security…
Continue reading on Medium »
Cyber Security Interview Questions Part-1
https://cdn-images-1.medium.com/max/1920/1*uxo3PsS1mKhLr2s8BSemkA.png
Precontext: These are the most common interview questions asked to hacktify cyber security students for different job roles like security…
Continue reading on Medium »
Deep Web
What are either some interesting webforums , comunities or just all around interesting websites on the deep web?
I am mainly just looking for something that could replicate the excitement of using the internet in its early days or like being in some kind of elite.
Also on a sidenote, is it possible to get in trouble if i go to websites that sell drugs or guns or something if i never actually buy anything or do anything illegal myself, or i should avoid them altogether? I like the feeling of being able to get illegal stuff if i want to but i really dont want to appear sketchy.
submitted by /u/lil-fil
[link] [comments]
➖ Sent by @TheFeedReaderBot ➖
___________________________
@hacking_Attack
@Hacking_Video
What are either some interesting webforums , comunities or just all around interesting websites on the deep web?
I am mainly just looking for something that could replicate the excitement of using the internet in its early days or like being in some kind of elite.
Also on a sidenote, is it possible to get in trouble if i go to websites that sell drugs or guns or something if i never actually buy anything or do anything illegal myself, or i should avoid them altogether? I like the feeling of being able to get illegal stuff if i want to but i really dont want to appear sketchy.
submitted by /u/lil-fil
[link] [comments]
➖ Sent by @TheFeedReaderBot ➖
___________________________
@hacking_Attack
@Hacking_Video
reddit
What are either some interesting webforums , comunities or just...
I am mainly just looking for something that could replicate the excitement of using the internet in its early days or like being in some kind of...
LDAP password hunter
https://www.reddit.com/r/redteamsec/comments/ow0qwm/ldap_password_hunter/
<!-- SC_OFF -->LDAP Password Hunter Hello Everyone, just wanted to share a small project i've been working for RT activities. I've been noticing that due to legacy services requirements or just bad security practices password are world-readable in the LDAP database by any user who is able to authenticate. LDAP Password Hunter is a tool which wraps features of getTGT.py (Impacket) and ldapsearch in order to look up for password stored in LDAP database. Impacket getTGT.py script is used in order to authenticate the domain account used for enumeration and save its TGT kerberos ticket. TGT ticket is then exported in KRB5CCNAME variable which is used by ldapsearch script to authenticate and obtain TGS kerberos tickets for each domain/DC LDAP-Password-Hunter is ran for. Basing on the CN=Schema,CN=Configuration export results a custom list of attributes is built and filtered in order to identify a big query which might contains interesting results. I do think it might be interesting for both the blue and the red guys, even in a continuous attacker mode perspective and monitoring purposes. https://github.com/oldboy21/LDAP-Password-Hunter Please check that out, looking for helpful comments! Cheers <!-- SC_ON --> submitted by /u/oldboy21 (https://www.reddit.com/user/oldboy21)
[link] (https://www.reddit.com/r/redteamsec/comments/ow0qwm/ldap_password_hunter/) [comments] (https://www.reddit.com/r/redteamsec/comments/ow0qwm/ldap_password_hunter/)
https://www.reddit.com/r/redteamsec/comments/ow0qwm/ldap_password_hunter/
<!-- SC_OFF -->LDAP Password Hunter Hello Everyone, just wanted to share a small project i've been working for RT activities. I've been noticing that due to legacy services requirements or just bad security practices password are world-readable in the LDAP database by any user who is able to authenticate. LDAP Password Hunter is a tool which wraps features of getTGT.py (Impacket) and ldapsearch in order to look up for password stored in LDAP database. Impacket getTGT.py script is used in order to authenticate the domain account used for enumeration and save its TGT kerberos ticket. TGT ticket is then exported in KRB5CCNAME variable which is used by ldapsearch script to authenticate and obtain TGS kerberos tickets for each domain/DC LDAP-Password-Hunter is ran for. Basing on the CN=Schema,CN=Configuration export results a custom list of attributes is built and filtered in order to identify a big query which might contains interesting results. I do think it might be interesting for both the blue and the red guys, even in a continuous attacker mode perspective and monitoring purposes. https://github.com/oldboy21/LDAP-Password-Hunter Please check that out, looking for helpful comments! Cheers <!-- SC_ON --> submitted by /u/oldboy21 (https://www.reddit.com/user/oldboy21)
[link] (https://www.reddit.com/r/redteamsec/comments/ow0qwm/ldap_password_hunter/) [comments] (https://www.reddit.com/r/redteamsec/comments/ow0qwm/ldap_password_hunter/)
tsharkVM - Tshark + ELK Analytics Virtual Machine
http://www.kitploit.com/2021/08/tsharkvm-tshark-elk-analytics-virtual.html
http://www.kitploit.com/2021/08/tsharkvm-tshark-elk-analytics-virtual.html
This project builds virtual machine (https://www.kitploit.com/search/label/Virtual%20Machine) which can be used for analytics of tshark -T ek (ndjson) output. The virtual appliance is built using vagrant, which builds Debian 10 with pre-installed and pre-configured ELK stack. After the VM is up, the process is simple: decoded pcaps (tshark -T ek output / ndjson) are sent over TCP/17570 to the VM ELK stack in VM will process and index the data Kibana is running in VM and can be accessed on http://127.0.0.1:15601/app/kibana#/dashboards
Instuctions to build VM from Ubuntu desktop
Clone source code
git clone https://github.com/H21lab/tsharkVM.git
Build tshark VM
virtualbox vagrant bash ./build.sh ">sudo apt update
sudo apt install tshark virtualbox vagrant
bash ./build.sh
Upload pcaps to VM
/dev/tcp/localhost/17570 "># copy your pcaps into ./Trace
# run following script
bash upload_pcaps.sh
# or use tshark directly towards 127.0.0.1 17570/tcp
tshark -r trace.pcapng -x -T ek > /dev/tcp/localhost/17570
Open Kibana with browser
firefox http://127.0.0.1:15601/app/kibana#/dashboards Open Main Dashboard and increase time window to e.g. last 100 years to see there the sample pcaps.
Instuctions to build VM from Ubuntu desktop
Clone source code
git clone https://github.com/H21lab/tsharkVM.git
Build tshark VM
virtualbox vagrant bash ./build.sh ">sudo apt update
sudo apt install tshark virtualbox vagrant
bash ./build.sh
Upload pcaps to VM
/dev/tcp/localhost/17570 "># copy your pcaps into ./Trace
# run following script
bash upload_pcaps.sh
# or use tshark directly towards 127.0.0.1 17570/tcp
tshark -r trace.pcapng -x -T ek > /dev/tcp/localhost/17570
Open Kibana with browser
firefox http://127.0.0.1:15601/app/kibana#/dashboards Open Main Dashboard and increase time window to e.g. last 100 years to see there the sample pcaps.
SSH to VM
cd ./VM
vagrant ssh
Delete VM
cd ./VM
vagrant destroy default
Start VM
cd ./VM
vagrant up
Stop VM
cd ./VM
vagrant halt
SSH into VM and check if ELK is running correctly
cd ./VM
vagrant ssh
sudo systemctl status kibana.service
sudo systemctl status elasticsearch.service
sudo systemctl status logstash.service
Elasticsearch mapping template
In the project is included simple Elasticseacrh mapping template generated for the frame,eth,ip,udp,tcp,dhcp protocols. To handle additional protocols efficiently it can be required to update the mapping template in the following way: ./Kibana/custom_tshark_mapping.json # 2. Deduplicate and post-process the mapping to fit current Elasticsearch version ruby ./Public/process_tshark_mapping_json.rb # 3. Upload file to vagrant VM cd VM vagrant upload ../Kibana/custom_tshark_mapping_deduplicated.json /home/vagrant/tsharkVM/Kibana/custom_tshark_mapping_deduplicated.json cd .. # 4. Connect to VM and upload template in the Elasticsearch cd VM vagrant ssh cd tsharkVM/Kibana curl -X PUT "localhost:9200/_index_template/packets_template" -H 'Content-Type: application/json' -d@custom_tshark_mapping_deduplicated.json "># 1. Create custom mapping, by selecting required protocols
tshark -G elastic-mapping --elastic-mapping-filter frame,eth,ip,udp,tcp,dns > ./Kibana/custom_tshark_mapping.json
# 2. Deduplicate and post-process the mapping to fit current Elasticsearch version
ruby ./Public/process_tshark_mapping_json.rb
# 3. Upload file to vagrant VM
cd VM
vagrant upload ../Kibana/custom_tshark_mapping_deduplicated.json /home/vagrant/tsharkVM/Kibana/custom_tshark_mapping_deduplicated.json
cd ..
# 4. Connect to VM and upload template in the Elasticsearch
cd VM
vagrant ssh
cd tsharkVM/Kibana
curl -X PUT "localhost:9200/_index_template/packets_template" -H 'Content-Type: application/json' -d@custom_tshark_mapping_deduplicated.json
Alternative can be using the dynamic mapping. See template ./Kibana/template_tshark_mapping_dynamic.json. And consider setting the numeric_detection parameter true/false depending on the mapping requirements (https://www.kitploit.com/search/label/Requirements) and pcaps used. Upload the template into Elasticsearch in similar way as described above.
Limitations
tshark -G elastic-mapping --elastic-mapping-filter mapping could be outdated, it is not following properly the Elasticsearch changes and the output can be duplicated. The manual configuration and post-processing of the mapping template is required. Program is distributed (https://www.kitploit.com/search/label/Distributed) in the hope that it will be useful, but WITHOUT ANY WARRANTY.
License
The default license of source codes provided inside this project is the Apache License v2.0. Additionally refer to individual licenses and terms of used of installed software (see licenses for Wireshark, Elastic and other).
Attribution
Special thanks to people who helped with the Wireshark development or otherwise contributed to this work: Anders Broman Alexis La Goutte (https://twitter.com/alagoutte) Christoph Wurm Dario Lombardo (https://twitter.com/crondaemon1) Vic Hargrave (https://twitter.com/vichargrave) Example pcap in ./Traces subfolder was downloaded from https://wiki.wireshark.org/SampleCaptures Created by Martin Kacer Copyright 2021 H21 lab, All right reserved, https://www.h21lab.com (https://www.h21lab.com/)
Download tsharkVM (https://github.com/H21lab/tsharkVM)
cd ./VM
vagrant ssh
Delete VM
cd ./VM
vagrant destroy default
Start VM
cd ./VM
vagrant up
Stop VM
cd ./VM
vagrant halt
SSH into VM and check if ELK is running correctly
cd ./VM
vagrant ssh
sudo systemctl status kibana.service
sudo systemctl status elasticsearch.service
sudo systemctl status logstash.service
Elasticsearch mapping template
In the project is included simple Elasticseacrh mapping template generated for the frame,eth,ip,udp,tcp,dhcp protocols. To handle additional protocols efficiently it can be required to update the mapping template in the following way: ./Kibana/custom_tshark_mapping.json # 2. Deduplicate and post-process the mapping to fit current Elasticsearch version ruby ./Public/process_tshark_mapping_json.rb # 3. Upload file to vagrant VM cd VM vagrant upload ../Kibana/custom_tshark_mapping_deduplicated.json /home/vagrant/tsharkVM/Kibana/custom_tshark_mapping_deduplicated.json cd .. # 4. Connect to VM and upload template in the Elasticsearch cd VM vagrant ssh cd tsharkVM/Kibana curl -X PUT "localhost:9200/_index_template/packets_template" -H 'Content-Type: application/json' -d@custom_tshark_mapping_deduplicated.json "># 1. Create custom mapping, by selecting required protocols
tshark -G elastic-mapping --elastic-mapping-filter frame,eth,ip,udp,tcp,dns > ./Kibana/custom_tshark_mapping.json
# 2. Deduplicate and post-process the mapping to fit current Elasticsearch version
ruby ./Public/process_tshark_mapping_json.rb
# 3. Upload file to vagrant VM
cd VM
vagrant upload ../Kibana/custom_tshark_mapping_deduplicated.json /home/vagrant/tsharkVM/Kibana/custom_tshark_mapping_deduplicated.json
cd ..
# 4. Connect to VM and upload template in the Elasticsearch
cd VM
vagrant ssh
cd tsharkVM/Kibana
curl -X PUT "localhost:9200/_index_template/packets_template" -H 'Content-Type: application/json' -d@custom_tshark_mapping_deduplicated.json
Alternative can be using the dynamic mapping. See template ./Kibana/template_tshark_mapping_dynamic.json. And consider setting the numeric_detection parameter true/false depending on the mapping requirements (https://www.kitploit.com/search/label/Requirements) and pcaps used. Upload the template into Elasticsearch in similar way as described above.
Limitations
tshark -G elastic-mapping --elastic-mapping-filter mapping could be outdated, it is not following properly the Elasticsearch changes and the output can be duplicated. The manual configuration and post-processing of the mapping template is required. Program is distributed (https://www.kitploit.com/search/label/Distributed) in the hope that it will be useful, but WITHOUT ANY WARRANTY.
License
The default license of source codes provided inside this project is the Apache License v2.0. Additionally refer to individual licenses and terms of used of installed software (see licenses for Wireshark, Elastic and other).
Attribution
Special thanks to people who helped with the Wireshark development or otherwise contributed to this work: Anders Broman Alexis La Goutte (https://twitter.com/alagoutte) Christoph Wurm Dario Lombardo (https://twitter.com/crondaemon1) Vic Hargrave (https://twitter.com/vichargrave) Example pcap in ./Traces subfolder was downloaded from https://wiki.wireshark.org/SampleCaptures Created by Martin Kacer Copyright 2021 H21 lab, All right reserved, https://www.h21lab.com (https://www.h21lab.com/)
Download tsharkVM (https://github.com/H21lab/tsharkVM)
CVE-2020–15823: Server-Side Request Forgery (SSRF) in JetBrains YouTrack
https://mitmlab.com/cve-2020-15823-server-side-request-forgery-ssrf-in-jetbrains-youtrack-74543a86a248?source=rss------bug_bounty-5
___________________________
@hacking_Attack
@Hacking_Video
https://mitmlab.com/cve-2020-15823-server-side-request-forgery-ssrf-in-jetbrains-youtrack-74543a86a248?source=rss------bug_bounty-5
___________________________
@hacking_Attack
@Hacking_Video
Medium
CVE-2020–15823: Server-Side Request Forgery (SSRF) in JetBrains YouTrack
More than a year ago I discovered a misconfiguration that leads to SSRF in YouTrack, and here are detailed steps on how I did it.
More than a year ago I discovered a misconfiguration that leads to SSRF in YouTrack, and here are detailed steps on how I did it.Continue reading on mitmLab » (https://mitmlab.com/cve-2020-15823-server-side-request-forgery-ssrf-in-jetbrains-youtrack-74543a86a248?source=rss------bug_bounty-5)
___________________________
@hacking_Attack
@Hacking_Video
___________________________
@hacking_Attack
@Hacking_Video
Medium
CVE-2020–15823: Server-Side Request Forgery (SSRF) in JetBrains YouTrack
More than a year ago I discovered a misconfiguration that leads to SSRF in YouTrack, and here are detailed steps on how I did it.