hacking: security in practice
Honda/Acura "Unoriginal Rice Patty" FOB Rob Vulnerability

Click here and checkout the FOB Rob vulnerability documentation. Honda and Acura vehicles' wireless FOBs can be permanently robbed in one go!

submitted by /u/HackingInHeart
[link] [comments]

hacking: security in practice
does a cookie logger seem like the most plausible scenario here?

before context i wanna say that the only possibilites i see here is a somehow a cookie logger or sim swap.

on 03 Aug 1am I received an SMS from my bank that 600eu was attempted to be pulled from my cc through paypal and shortly after they bought 2 copies of a game from a key reseller site which ended up going through. i am thinking they stole the cookies to my outlook email linked to paypal and also to my gmail since there are no login traces and worked their way through paypal with that info. the company from which they made these purchases confirmed that the account was created on the same day using my own gmail account and they also gave me the IP address from where the orders were created from and this is where i think it could have been a sim swap. about a month prior i took my phone for repairs and he had my passcode and all. the IP address was local from an ISP i am aware of (both his and my IPs are static) and the fact that i live in a tiny island it would be a huge coincidence thatthe person who cookie logged me is from the same island. i suppose the same thing could be done if he essentially had a replica of my phone although perhaps less likely. i would like some input from ppl who are more knowledgeable than me especially since the local authorities tried to convince me that i had just clicked on a phishing site or that i was the one who made these purhcases.

submitted by /u/aImondss
[link] [comments]

GCP Inspector | Auditing Publicly Exposed GCP Bucket
https://justm0rph3u5.medium.com/gcp-inspector-auditing-publicly-exposed-gcp-bucket-ac6cad55618c?source=rss------bug_bounty-5

Installation of GCP Inspector and basics about enumerating publicly exposed GCP bucket enumeration.Continue reading on Medium » (https://justm0rph3u5.medium.com/gcp-inspector-auditing-publicly-exposed-gcp-bucket-ac6cad55618c?source=rss------bug_bounty-5)

KitPloit - PenTest Tools!
Doldrums - A Flutter/Dart Reverse Engineering Tool

http://3.bp.blogspot.com/-tTUkIW-TdlE/YP8f9froezI/AAAAAAAAops/NJuPvbe9mJwkOax5FX5yTMCcUaQlsPF4ACK4BGAYYCw/w640-h176/Doldrums_1_logo-783659.png
To flutter: to move in quick, irregular motions, to beat rapidly, to be agitated.
Doldrums: a period of stagnation.

Doldrums is a reverse engineering tool for Flutter apps targetting Android. Concretely, it is a parser and information extractor for the Flutter/Dart Android binary, conventionally named libapp.so, for all Dart version 2.10 releases. When run, it outputs a full dump of all classes present in the isolate snapshot.

The tool is currently in beta, and missing some deserialization routines and class information. If it does not work out-of-the-box, please let me know.
Dependencies

Doldrums requires pyelftools to parse the ELF format. You can install it with

pip3 install pyelftools


Usage

To use, simply run the following command, substituting libapp.sofor the appropriate binary, and outputfor the desired output file. Note that the verbose option only works for Dart snapshot v2.12.

python3 src/main.py [-v] libapp.so output


The expected output is a dump of all classes, in the following format:

class MyApp extends StatelessWidget {
Widget build(DynamicType, DynamicType) {
Code at absolute offset: 0xec85c
}

String myPrint(DynamicType, DynamicType) {
Code at absolute offset: 0xeca80
}
}


The absolute code offset indicates the offset into the libapp.sofile where the native function may be found.

Reading material

For a detailed write-up on the format, please check my blog post.

Related works

darter is a fully implemented and fully tested parser for Dart version 2.5 releases.

Contribute

If you'd like to help the project, consider making a pull request, or donating to

* ADA: DdzFFzCqrhsgHAVMtnep9Uq9iF61oxZ31LWVG3izmT8BH54Jz7C2gUBFcy6VnCkrbVNqrkevQ4wSwK7dfh7YrUfvSd5toKdE9tzZrcaB
* BTC: 33piC5kfTdqFyQ5ionmuJkTDJXsFYdzGdS
* ETH: 0x2bF670503C28B551C80191aeE9F7ACC96e101D9B

Logo by Luis Fonseca.
Download Doldrums

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Cyber Security Interview Questions Part-2

https://cdn-images-1.medium.com/max/1400/0*gBbKtZQAI2iyYLGG.png
Precontext: This is the part 2 of the series of cyber security interview questions. If you haven’t read the first part go here…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
POPCORN — HackTheBox WriteUp

https://cdn-images-1.medium.com/max/771/1*lLX-zSeXBeaGSsCKlIKYNA.png
This box is a part of TJnull’s list of boxes. I am doing these boxes as a part of my preparation for OSCP. I will be sharing the writeups…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
HYBRID HACKER SUMMER CAMP 2021 GUIDE — Part Six: DEFCON 29

https://cdn-images-1.medium.com/max/1058/1*I7gZn2LKvXTzyi7W-pMTCw.jpeg
HYBRID HACKER SUMMER CAMP 2021 GUIDE — Part Six: DEFCON 29

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Iphone

My friends father has passed away recently they want us to go to court to be able to get into his iphone 11 pro max. we’re able to get the phone wiped but still has the password for the apple id password, would it be possible for anyone to get into it we’re open to paying we just really need into the phone so get it all erased so we don’t just have a dead iphone.

submitted by /u/_Percaholic_
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Build a Ventilated Cat Litter Box with Pi Zero

https://cdn-images-1.medium.com/max/2600/1*CdVOyIJnpcE-jt3vLoZpaw.jpeg
It’s hard for one to tie cats, those cute fluffy creatures, with the pungent smell from the waste they produce everyday. These two are my…

Continue reading on Medium »

Hacking on Medium
Installing Kali Linux

https://cdn-images-1.medium.com/max/1600/0*Tv--4Asq3c8mQ3Vl
Getting Started

Continue reading on Medium »

Deep Web
What are some good or popular dark websites for political discussions?

Specifically ones with a strong social democrat or left leaning communities. Any suggestions?

submitted by /u/Jaded195
[link] [comments]

hacking: security in practice
Anydesk

What types of hacking is possible when I connect with other persons PC? I am noob. Could you please show me guidance?

submitted by /u/sazid311
[link] [comments]