Hacking on Medium
DEVEL — HackTheBox WriteUp

https://cdn-images-1.medium.com/max/772/1*FtnoRbnmBu8kAhEUvUba8A.png
This box is a part of TJnull’s list of boxes. I am doing these boxes as a part of my preparation for OSCP. I will be sharing the writeups…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Medium Writers are Getting Spoofed

https://cdn-images-1.medium.com/max/2600/0*38eD1yg2hZ45i2fb
Please do NOT report these folks for abuses. Let them know first.

Continue reading on ILLUMINATION-Curated »

___________________________
@hacking_Attack
@Hacking_Video

Rz-Ghidra - Deep Ghidra Decompiler And Sleigh Disassembler Integration For Rizin

This is an integration of the Ghidra decompiler and Sleigh Disassembler for rizin. It is solely based on the decompiler part of Ghidra, which is written entirely in C++, so Ghidra itself is not required at all and the plugin can be built self-contained. This project was presented, initially for radare2, at r2con 2019 as part of the Cutter talk: https://youtu.be/eHtMiezr7l8?t=950Installing An rz-pm package is available that can easily be installed like: rz-pm -i rz-ghidra This package only installs the rizin part. To use rz-ghidra from cutter, either use a provided pre-built release starting with Cutter 1.9, which bundles rz-ghidra, or follow the build instructions below. Usage Usage: pdg # Native Ghidra decompiler plugin| pdg # Decompile current function with the Ghidra decompiler| pdgd # Dump the debug XML Dump| pdgx # Dump the XML of the current decompiled function| pdgj # Dump the current decompiled function as JSON| pdgo # Decompile current function side by side with offsets| pdgs # Display loaded Sleigh Languages| pdg* # Decompiled code is returned to rizin as comment The following config vars (for the e command) can be used to adjust rz-ghidra's behavior: override auto-detection (e.g. x86:LE:32:default) ghidra.linelen: Max line length ghidra.nl.brace: Newline before opening '{' ghidra.nl.else: Newline before else ghidra.sleighhome: SLEIGHHOME "> ghidra.cmt.cpp: C++ comment style ghidra.cmt.indent: Comment indent ghidra.indent: Indent increment ghidra.lang: Custom Sleigh ID to override auto-detection (e.g. x86:LE:32:default) ghidra.linelen: Max line length ghidra.nl.brace: Newline before opening '{' ghidra.nl.else: Newline before else ghidra.sleighhome: SLEIGHHOME Here, ghidra.sleighhome must point to a directory containing the *.sla, *.lspec, ... files for the architectures that should supported by the decompiler. This is however set up automatically when using the rz-pm package or installing as shown below. Building First, make sure the submodule contained within this repository is fetched and up to date: git submodule initgit submodule update Then, the rizin plugin can be built and installed as follows: mkdir build && cd buildcmake -DCMAKE_INSTALL_PREFIX=~/.local ..makemake install Here, set the CMAKE_INSTALL_PREFIX to a location where rizin can load the plugin from. The install step is necessary for the plugin to work because it includes installing the necessary Sleigh files. To also build the Cutter plugin, pass -DBUILD_CUTTER_PLUGIN=ON -DCUTTER_SOURCE_DIR=/path/to/cutter/source to cmake, for example like this: /my/path> git clone https://github.com/rizinorg/cutter/my/path> # build Cutter, clone rz-ghidra, etc..../my/path/rz-ghidra> mkdir build && cd build/my/path/rz-ghidra/build> cmake -DBUILD_CUTTER_PLUGIN=ON -DCUTTER_SOURCE_DIR=/my/path/cutter -DCMAKE_INSTALL_PREFIX=~/.local ../my/path/rz-ghidra/build> make && make install Versioning and Rizin Compatibility Rizin has a quickly evolving C API so it is necessary to be explicit about which versions of rz-ghidra are compatible with which versions of Rizin: When using Rizin and rz-ghidra from git: rz-ghidra branch dev follows along Rizin branch dev. rz-ghidra branch stable follows along Rizin branch stable. Regarding releases, rz-ghidra is generally released simultaneously with Rizin and often uses the same version numbers (but not guaranteed, do not depend on these numbers!). Also, along with every Rizin release a tag like rz-0.1.2 is created on rz-ghidra, which exactly points to an rz-ghidra release and indicates that this release is compatible with the specified Rizin version. These tags can be used by distribution maintainers to look up how to set up dependencies. Download Rz-Ghidra
Read more...

___________________________
@hacking_Attack
@Hacking_Video

Rz-Ghidra - Deep Ghidra Decompiler And Sleigh Disassembler Integration For Rizin
http://www.kitploit.com/2021/08/rz-ghidra-deep-ghidra-decompiler-and.html

___________________________
@hacking_Attack
@Hacking_Video

Installing
An rz-pm package is available that can easily be installed like: rz-pm -i rz-ghidra
This package only installs the rizin part. To use rz-ghidra from cutter, either use a provided pre-built release starting with Cutter 1.9, which bundles rz-ghidra, or follow the build instructions below.
Usage
Usage: pdg # Native Ghidra decompiler plugin
| pdg # Decompile current function with the Ghidra decompiler
| pdgd # Dump the debug XML Dump
| pdgx # Dump the XML of the current decompiled function
| pdgj # Dump the current decompiled function as JSON
| pdgo # Decompile current function side by side with offsets
| pdgs # Display loaded Sleigh Languages
| pdg* # Decompiled code is returned to rizin as comment
The following config vars (for the e command) can be used to adjust rz-ghidra's behavior: override auto-detection (e.g. x86:LE:32:default) ghidra.linelen: Max line length ghidra.nl.brace: Newline before opening '{' ghidra.nl.else: Newline before else ghidra.sleighhome: SLEIGHHOME "> ghidra.cmt.cpp: C++ comment style
ghidra.cmt.indent: Comment indent
ghidra.indent: Indent increment
ghidra.lang: Custom Sleigh ID to override auto-detection (e.g. x86:LE:32:default)
ghidra.linelen: Max line length
ghidra.nl.brace: Newline before opening '{'
ghidra.nl.else: Newline before else
ghidra.sleighhome: SLEIGHHOME
Here, ghidra.sleighhome must point to a directory containing the *.sla, *.lspec, ... files for the architectures that should supported by the decompiler. This is however set up automatically when using the rz-pm package or installing as shown below.
Building
First, make sure the submodule contained within this repository is fetched and up to date: git submodule init
git submodule update
Then, the rizin plugin can be built and installed as follows: mkdir build && cd build
cmake -DCMAKE_INSTALL_PREFIX=~/.local ..
make
make install
Here, set the CMAKE_INSTALL_PREFIX to a location where rizin can load the plugin from. The install step is necessary for the plugin to work because it includes installing the necessary Sleigh files. To also build the Cutter plugin, pass -DBUILD_CUTTER_PLUGIN=ON -DCUTTER_SOURCE_DIR=/path/to/cutter/source to cmake, for example like this: git clone https://github.com/rizinorg/cutter /my/path> # build Cutter, clone rz-ghidra, etc. ... /my/path/rz-ghidra> mkdir build && cd build /my/path/rz-ghidra/build> cmake -DBUILD_CUTTER_PLUGIN=ON -DCUTTER_SOURCE_DIR=/my/path/cutter -DCMAKE_INSTALL_PREFIX=~/.local .. /my/path/rz-ghidra/build> make && make install ">/my/path> git clone https://github.com/rizinorg/cutter
/my/path> # build Cutter, clone rz-ghidra, etc.
...
/my/path/rz-ghidra> mkdir build && cd build
/my/path/rz-ghidra/build> cmake -DBUILD_CUTTER_PLUGIN=ON -DCUTTER_SOURCE_DIR=/my/path/cutter -DCMAKE_INSTALL_PREFIX=~/.local ..
/my/path/rz-ghidra/build> make && make install

Versioning and Rizin Compatibility
Rizin has a quickly evolving C API so it is necessary to be explicit about which versions of rz-ghidra are compatible with which versions of Rizin: When using Rizin and rz-ghidra from git: rz-ghidra branch dev follows along Rizin branch dev. rz-ghidra branch stable follows along Rizin branch stable. Regarding releases, rz-ghidra is generally released simultaneously with Rizin and often uses the same version numbers (but not guaranteed, do not depend on these numbers!). Also, along with every Rizin release a tag like rz-0.1.2 is created on rz-ghidra, which exactly points to an rz-ghidra release and indicates that this release is compatible with the specified Rizin version. These tags can be used by distribution maintainers to look up how to set up dependencies.

___________________________
@hacking_Attack
@Hacking_Video

Download Rz-Ghidra (https://github.com/rizinorg/rz-ghidra)

___________________________
@hacking_Attack
@Hacking_Video

Deep Web
The Cryptocurrency Surveillance Provision Buried in the Infrastructure Bill is a Disaster for Digital Privacy

https://external-preview.redd.it/SrX353ooI4v1m-dy7bPMXm4xw7wCSJyHxSu6iCu0LLs.jpg?width=640&crop=smart&auto=webp&s=99206a36825bdb2cafdaae595e4ef7b57e68784f submitted by /u/Bennyg-
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Apron Network Supports Polygon Ecosystem With Node Service, Bug Bounty Program Continues
https://apron-network.medium.com/apron-network-supports-polygon-ecosystem-with-node-service-bug-bounty-program-continues-9d8183d321ce?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

With the Polygon ecosystem becoming one of the most rapidly expanding sectors, the current dApp on their ecosystem has a rise of demands…Continue reading on Medium » (https://apron-network.medium.com/apron-network-supports-polygon-ecosystem-with-node-service-bug-bounty-program-continues-9d8183d321ce?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Cap-HTB| writeup, HackTheBox
https://infosecwriteups.com/cap-htb-writeup-hackthebox-882bb62bd60b?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

This is my writeup for the ‘Love’ box found on HackTheBoxContinue reading on InfoSec Write-ups » (https://infosecwriteups.com/cap-htb-writeup-hackthebox-882bb62bd60b?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Bypassing Authentication on Arcadyan Routers with CVE-2021–20090 and rooting some Buffalo
https://medium.com/tenable-techblog/bypassing-authentication-on-arcadyan-routers-with-cve-2021-20090-and-rooting-some-buffalo-ea1dd30980c2?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

A walkthrough of my first experience in router hackingContinue reading on Tenable TechBlog » (https://medium.com/tenable-techblog/bypassing-authentication-on-arcadyan-routers-with-cve-2021-20090-and-rooting-some-buffalo-ea1dd30980c2?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Apron Network Supports Polygon Ecosystem With Node Service, Bug Bounty Program Continues

With the Polygon ecosystem becoming one of the most rapidly expanding sectors, the current dApp on their ecosystem has a rise of demands…Continue reading on Medium »
Read more...

Cap-HTB| writeup, HackTheBox

This is my writeup for the ‘Love’ box found on HackTheBoxContinue reading on InfoSec Write-ups »
Read more...