hacking: security in practice
File upload filter

Hi guys, need some info. For pen-testing purposes, I have been trying to upload a php shell but there is a filter which only allows jpg files. I tried all the techniques (double extension, hex numbers) but it won’t work. It is a server side filter. Please advice, thanks.

submitted by /u/Air_Direct
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Anyone ever utilise Visual Studio for making payloads?

I saw this article online where basically a person makes a simple msfvenom reverse shell payload in C. Imports it into Visual Studio and uses a random template and exports it as an exe. Keep in mind I'm not much of a coder especially in C so bear with me. In any case does anyone else make payloads like this? If had a small amount of success using this method. Bypassing Avast, BitDefender, Ad-Aware, eScan, McAfee and a few others with which I hadn't had much luck before. Never sadly managed to get 64 bit payloads working because of my poor knowledge of C and Visual Studio, if anyone else managed to get some where with theese methods I'd love to hear your thoughts and experiences. Thanks!

Edit: Here's the article by the way, https://www.virtuesecurity.com/evading-antivirus-with-better-meterpreter-payloads/

submitted by /u/_Lukisha_
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
SGXRay - Automating Vulnerability Detection for SGX Apps

http://4.bp.blogspot.com/-4hgPuw86v5E/YRYFUSia88I/AAAAAAAAp2I/1hDgGwME-_QAyKbtCFgVppG-UveAKynmQCK4BGAYYCw/w640-h248/sgxray_1_sgxray-796717.png Intel SGX protects isolated application logic and sensitive data inside an enclave with hardware-based memory encryption. To use such hardware-based security mechanism requires a strict programming model on memory usage， with complex APIs in and out the enclave boundary. Enclave developers are required to apply careful programming practices to ensure enclave security, especially when dealing with data flowing across the enclave's trusted boundary. Trusted boundary violations can further cause memory corruption and are exploitable by attackers to retrieve and manipulate protected data. Currently, no publicly available tools can effectively detect such issues for real-world enclaves.
SGXRay is an automated reasoning tool based on the SMACK verifier that automatically detects SGX enclave bugs rooting from violations of trusted boundaries. It recompiles a given enclave code and starts the analysis from a user-specified enclave function entry. After the analysis, it either finds an invalid pointer handling inside an SGX software stack such as deferencing unchecked pointer inside an enclave, invalid memory deallocation, and TOCTOU bugs, or prove the absense of such bugs up to a user-specified loop and recursion bound.

Currently, SGXRay SGX applications built on two SGX SDKs: Intel SGX SDK and openenclave SDK. Users can opt in SDK code for a more thorough analysis. Getting StartedFor a quick start, please follow a step-by-step tutorial on using SGXRay over one of the demo examples here.

The following figure demonstrates the workflow of SGXRay. http://4.bp.blogspot.com/-4hgPuw86v5E/YRYFUSia88I/AAAAAAAAp2I/1hDgGwME-_QAyKbtCFgVppG-UveAKynmQCK4BGAYYCw/w640-h248/sgxray_1_sgxray-796717.png Running SGXRay is a two-step process. The first step is to obtain an LLVM IR file for the application. The second step is to invoke SGXRay CLI for verification.

For the first step, we provide two Docker images for each SDK, respectively. docker pull baiduxlab/sgx-ray-frontend-intel
docker pull baiduxlab/sgx-ray-frontend-oeThe detailed instructions to run the first step can be found here.

For the second step, we also provide a Docker image. docker pull baiduxlab/sgx-ray-distro:latestThe detailed instructions to run the second step can be found here. Docker BuildWe provide a Dockerfile that builds the image for the verification step. git clone https://github.com/baiduxlab/sgxray.git && cd sgxray
docker build . -t sgx-ray-distro-local --build-arg hostuid=$UID -f Dockerfiles/Dockerfile-CLISuccessful build should produce an image named sgx-ray-distro-localwhich has an user userwith the same user id as the host account. DocumentationsDetailed documentations of SGXRay can be found as follows.

* LLVM IR Generation
* Verification Download Sgxray

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
O xss ocorre quando o invasor é capaz de injetar um script, geralmente em JavaScript, em páginas…

https://cdn-images-1.medium.com/max/1200/1*SrIDxNj1SlSl4rcEkqaehQ.png
Xss refletido, já ouviu falar sobre XSS?

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
TryHackMe Write-up: Wonderland

https://cdn-images-1.medium.com/max/1962/1*9V-jvoi3s4M88OmI8FiCFA.png
Dificultad: Media

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

building pentesting as services platform
https://www.reddit.com/r/Pentesting/comments/p6gns5/building_pentesting_as_services_platform/

i am building pen testing as service platform to be sold to pen testing firms or enterprise that has internal teams #### some features: it makes it easy to collaborate between team members sharing notes ,files make it easy to collaborate between client or product teams and pen testing teams at real time instead of waiting for finishing of pentest Can be intgereted with other ticket system like jira,service now ..etc can generate the default docx report also has some embedded frameworks checklists tracking performance of pentesters Like point system #### i have some questions: what will be fair price for that ? what features may i need to add ? submitted by /u/MarsupialNew3737 (https://www.reddit.com/user/MarsupialNew3737)
[link] (https://www.reddit.com/r/Pentesting/comments/p6gns5/building_pentesting_as_services_platform/) [comments] (https://www.reddit.com/r/Pentesting/comments/p6gns5/building_pentesting_as_services_platform/)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Advice writing a hacktivist novel

The basic background for this story is that a patient abuse scandal happened at a mental hospital in 2011, because of a power-hungry director who basically said "implement all these totalitarian/authoritarian policies to enable my power-trip or you're all fired!" After a patient escaped and went to the police, the director was locked up and the hospital shut down. One ex-volunteer mental health technician was dissatisfied with this, because she felt measures hadn't been taken to prevent a similar incident from happening in the future.

One way or another, the volunteer becomes part of a hacktivist group. In 2023, their latest "op" is essentially a "revolt" against the social injustices that led to the abuses in 2011: put together a vid calling out biases and such that kept people from seeing the pre-abuse red flags; then hack into a TV studio or something and broadcast the video during the hospital's televised (or perhaps livestreamed) reopening-under-morally-sound-management. What skills or specialties (social engineering, exploit-finding, phishing, botnet-creation, etc.) would they need to pull that off?

On a side note, where could they meet up online? Are there any cyberspace analogues to speakeasies or other forms of "secret hideout"?

submitted by /u/Pony13
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Android — Pentesting de Aplicaciones

https://cdn-images-1.medium.com/max/1564/1*3Tp93EEmmMl4OevEMB7SeA.png
Hace poco tuve la oportunidad de crear un curso sobre pentesting de aplicaciones android.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Vulnhub — HackathonCTF-2 Write-up

https://cdn-images-1.medium.com/max/606/1*T8cOgkRLQnbW9xR313JNng.png
This is a write-up of the HackathonCTF-2 virtual machine challenge by @Markme_1. The challenge was completed in Aug 2021.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

SIEM (Security and Event Management)
https://parsan26.medium.com/siem-security-and-event-management-519fee18fcff?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Security Information and Event Management (SIEM) is performed in four stages. Data is accumulated in the form of logs and threat…Continue reading on Medium » (https://parsan26.medium.com/siem-security-and-event-management-519fee18fcff?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Open Ports on Home Network

Hey guys,

for the last week i am trying to improve the overall security of my network, devices and accounts.

While doing so i tried to analyse my home network. I scanned my network using " nmap -sT ipAddr " I used the public IP Address i found on my router interface.

I scanned via phone app Termux on mobile network.

The scan results were shocking. Except a few ports, every single one is open.

How can this be?

I got a cable router/modem from my ISP, no bridge mode with another router ( i am looking forward to change this in the near future).

Did i really scan my network at all or did i somehow scanned or got redirected to some ISP network stuff?

I can't believe that there are so many ports open, since this would be a massive vulnerability.

submitted by /u/DeSpTG
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Hiding IP with metasploit

Hello! Recently I have been getting back into hacking, and became curious about android phones. I am using msfvenom(specifically the reverse tcp exploit for android) and was wondering if there is anyway to hide my IP address short of paying for a foreign Virtual Machine. Any help would be appreciated. Thank you!

submitted by /u/manifest_destiny_2
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video