Beyond the good ol' LaunchAgents - 5 - Pluggable Authentication Modules (PAM)
https://www.reddit.com/r/redteamsec/comments/maim6p/beyond_the_good_ol_launchagents_5_pluggable/

submitted by /u/dmchell (https://www.reddit.com/user/dmchell)
[link] (https://theevilbit.github.io/beyond/beyond_0005/) [comments] (https://www.reddit.com/r/redteamsec/comments/maim6p/beyond_the_good_ol_launchagents_5_pluggable/)

[BUG BOUNTY] IDOR — Sensitive Data Exposure (IOS Application)

بسم الله الرحمن الرحيمContinue reading on Medium »
Read more...

Kali Linux Tutorials
Rafel Rat : Android Rat Written In Java

Rafel is Remote Access Tool Used to Control Victims Using WebPanel With More Advance Features. Main Features Admin Permission Add App To White List Looks Like Browser Runs In Background Even App is Closed(May not work on some Devices) Accessibility Feature Support Android v5 – v10 No Port Forwarding Needed Acquire Wakelock Fully Undetectable Prerequisites […]

The post Rafel Rat : Android Rat Written In Java appeared first on Kali Linux Tutorials.

Kali Linux Tutorials
Darkdump : Search The Deep Web Straight From Your Terminal

Darkdump is a simple script written in Python3.9 in which it allows users to enter a search term (query) in the command line and darkdump will pull all the deep web sites relating to that query. Darkdump wraps up the darksearch.io API. Installation git clone https://github.com/josh0xA/darkdumpcd darkdumppython3 -m pip install -r requirements.txtpython3 darkdump.py --help Usage […]

The post Darkdump : Search The Deep Web Straight From Your Terminal appeared first on Kali Linux Tutorials.

[BUG BOUNTY] IDOR — Sensitive Data Exposure (IOS Application)
https://helmay.medium.com/bug-bounty-idor-sensitive-data-exposure-ios-application-ba80c93887a9?source=rss------bug_bounty-5

بسم الله الرحمن الرحيمContinue reading on Medium » (https://helmay.medium.com/bug-bounty-idor-sensitive-data-exposure-ios-application-ba80c93887a9?source=rss------bug_bounty-5)

Hacking on Medium
¡Mamá, quiero ser hacker! II — De-ICE 1.100

https://cdn-images-1.medium.com/max/640/1*4jBfaPjK8s5Ht12_gH4Htw.png
Después de la primera parte tenemos una plataforma Kali lista para hackear, y ahora lo que necesitamos es algo que hackear.

Continue reading on Medium »

Hacking on Medium
Sql Injection By Developing a custom gadget chain For Java Deserialization

https://cdn-images-1.medium.com/max/728/1*9So3YNlyQvmZdZtrIrDRTA.png
How insecure deserialization can lead to some critical vulnerabilities, by chaining gadget’s attacker can achieve some dangerous features.

Continue reading on Medium »

Hacking on Medium
DD-WRT and Router Vulnerabilities

https://cdn-images-1.medium.com/max/2600/1*UmCz83yIr-biyuekbdiLoA.png
DD-WRT is a Linux-based alternative OpenSource firmware suitable for a great variety of WLAN routers and embedded systems. This firmware…

Continue reading on SSD Secure Disclosure »

bypassing faceliveness
https://www.reddit.com/r/Pentesting/comments/mal5hf/bypassing_faceliveness/

<!-- SC_OFF -->so i have been asked to test an android app that uses actant to do faceliveness is there a way to bypass face liveness i tried doing it by puttng the phone in front of a video in my laptop and i failed to bypass it os there a way to do it? <!-- SC_ON --> submitted by /u/abdalla_97 (https://www.reddit.com/user/abdalla_97)
[link] (https://www.reddit.com/r/Pentesting/comments/mal5hf/bypassing_faceliveness/) [comments] (https://www.reddit.com/r/Pentesting/comments/mal5hf/bypassing_faceliveness/)

Netmap.Js - Fast Browser-Based Network Discovery Module
http://www.kitploit.com/2021/03/netmapjs-fast-browser-based-network.html

Motivation
I needed a browser-based port scanner (https://www.kitploit.com/search/label/Port%20Scanner) for an idea I was working on. I thought it would be a simple matter of importing an existing module or copy-pasting from another project like BeEF (http://beefproject.com/). Turns out there wasn't a decent ready-to-use npm module and the port_scanner module in BeEF is (at the time of writing) inaccurate, slow and doesn't work on Chromium. netmap.js is therefor a somewhat optimized "ping" sweeper and TCP scanner that works on all modern browsers.
Quickstart

Install
npm install --save netmap.js
Find Live Hosts
Let's figure out the IP address of a website visitor's gateway, starting from a list of likely candidates in a home environment: import NetMap from 'netmap.js'

const netmap = new NetMap()
const hosts = ['192.168.0.1', '192.168.0.254', '192.168.1.1', '192.168.1.254']

netmap.pingSweep(hosts).then(results => {
console.log(results)
}) {
"hosts": [
{ "host": "192.168.0.1", "delta": 1003, "live": false },
{ "host": "192.168.0.254", "delta": 1001, "live": false },
{ "host": "192.168.1.1", "delta": 18, "live": true },
{ "host": "192.168.1.254", "delta": 1002, "live": false }
],
"meta": {}
} Host 192.168.1.1 appears to be live.
Scan TCP Ports
Let's try to find some open TCP ports on a few hosts: import NetMap from 'netmap.js'

const netmap = new NetMap()
const hosts = ['192.168.1.1', '192.168.99.100', 'google.co.uk']
const ports = [80, 443, 8000, 8080, 27017]

netmap.tcpScan(hosts, ports).then(results => {
console.log(results)
}) {
"hosts": [
{
"host": "192.168.1.1",
"control": "22",
"ports": [
{ "port": 443, "delta": 15, "open": false },
{ "port": 8000, "delta": 19, "open": false },
{ "port": 8080, "delta": 21, "open": false },
{ "port": 27017, "delta": 26, "open": false },
{ "port": 80, "delta": 95, "open": true }
]
},
{
"host": "192.168.99.100",
"control": "1001",
"ports": [
{ "port": 8080, "delta": 40, "open": true },
{ "port": 80, "delta": 1001, "open": false },
{ "port": 443, "delta": 1000, "open": false },
{ "port": 8000, "delta": 1004, "open": false },
{ "port": 27017, "delta": 1000, "open": false }
]
},
{
"host": "google.co.uk",
"control": "1001",
"ports": [
{ "port": 443, "delta": 67, "open": true },< br/> { "port": 80, "delta": 159, "open": true },
{ "port": 8000, "delta": 1001, "open": false },
{ "port": 8080, "delta": 1002, "open": false },
{ "port": 27017, "delta": 1000, "open": false }
]
}
],
"meta": {}
} At first the results may seem contradictory. 192.168.1.1 is an embedded Linux machine (a router) on the local network segment, and the only port open is 80. We can see that it took the browser about 5 times longer to error out on 80 compared to the other, closed, ports. 192.168.99.100 is a host-only VM with port 8080 open and google.co.uk is an external host with both 443 and 80 open. In these cases the browser threw an error relatively rapidly on the open ports (https://www.kitploit.com/search/label/Open%20Ports) while the closed ports simply timed out. The Theory (https://github.com/serain/netmap.js#theory) section further down explains when this happens. In order to determine if ports should be tagged as open or closed, netmap.js will scan a "control" port (by default 45000) that is assumed to be closed. The control time is then used to determine the status of other ports. If the ratio delta/control is greater than a set value (default 0.8), the port is assumed to be closed (tl;dr: a difference of more that 20% from the control time means the port is open).
Limitations

Port Blacklists