hacking: security in practice
[Question] How to inject DLL library to Unity game on Linux?
Today, I decided to get into game hacking but I'm stuck at one problem for hours.
There are many excellent DLL injectors for Windows OS, but I couldn't find a single injector that works on Linux. The game is built on unity and is not running on an emulation layer (aka wine).
submitted by /u/developomp
[link] [comments]
[Question] How to inject DLL library to Unity game on Linux?
Today, I decided to get into game hacking but I'm stuck at one problem for hours.
There are many excellent DLL injectors for Windows OS, but I couldn't find a single injector that works on Linux. The game is built on unity and is not running on an emulation layer (aka wine).
submitted by /u/developomp
[link] [comments]
reddit
[Question] How to inject DLL library to Unity game on Linux?
Today, I decided to get into game hacking but I'm stuck at one problem for hours. There are many excellent DLL injectors for Windows OS, but I...
Is Immunity CANVAS still a thing?
https://www.reddit.com/r/Pentesting/comments/p891a2/is_immunity_canvas_still_a_thing/
<!-- SC_OFF -->Hi, I was looking for network exploitation tools and I found CANVAS but I can't find much information. So I just wanted to know if it's still adopted by pentesters? <!-- SC_ON --> submitted by /u/Shylamo (https://www.reddit.com/user/Shylamo)
[link] (https://www.reddit.com/r/Pentesting/comments/p891a2/is_immunity_canvas_still_a_thing/) [comments] (https://www.reddit.com/r/Pentesting/comments/p891a2/is_immunity_canvas_still_a_thing/)
https://www.reddit.com/r/Pentesting/comments/p891a2/is_immunity_canvas_still_a_thing/
<!-- SC_OFF -->Hi, I was looking for network exploitation tools and I found CANVAS but I can't find much information. So I just wanted to know if it's still adopted by pentesters? <!-- SC_ON --> submitted by /u/Shylamo (https://www.reddit.com/user/Shylamo)
[link] (https://www.reddit.com/r/Pentesting/comments/p891a2/is_immunity_canvas_still_a_thing/) [comments] (https://www.reddit.com/r/Pentesting/comments/p891a2/is_immunity_canvas_still_a_thing/)
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Biggest Hacking in the digital currency world see the amount — Knowledge World
https://cdn-images-1.medium.com/max/1280/1*fwTE1NYf4j7Ba9_HoyqXmQ.jpeg
The biggest event in the age of digital currency. The hackers found 800 million in security, which is Rs 44,52,32,10,000, after finding…
Continue reading on Medium »
Biggest Hacking in the digital currency world see the amount — Knowledge World
https://cdn-images-1.medium.com/max/1280/1*fwTE1NYf4j7Ba9_HoyqXmQ.jpeg
The biggest event in the age of digital currency. The hackers found 800 million in security, which is Rs 44,52,32,10,000, after finding…
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
How To Fix a Hacked Android Phone?
https://cdn-images-1.medium.com/max/780/1*EKTxys2-4pfOFUYZv_O4rA.jpeg
Today we will discuss how to fix if your Android phone is hacked. Smartphones are smart but sometimes hackers are better smart so they can…
Continue reading on Medium »
How To Fix a Hacked Android Phone?
https://cdn-images-1.medium.com/max/780/1*EKTxys2-4pfOFUYZv_O4rA.jpeg
Today we will discuss how to fix if your Android phone is hacked. Smartphones are smart but sometimes hackers are better smart so they can…
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Binary Exploitation Basics — Int Limits & Buffer Overflow
https://cdn-images-1.medium.com/max/633/0*7IkVudGaw9JcoxBH.png
It’s been a while. I’ve been practicing and delving more into the CTF world. Hacking capture the flag events help you not only to…
Continue reading on Medium »
Binary Exploitation Basics — Int Limits & Buffer Overflow
https://cdn-images-1.medium.com/max/633/0*7IkVudGaw9JcoxBH.png
It’s been a while. I’ve been practicing and delving more into the CTF world. Hacking capture the flag events help you not only to…
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Find valid employees names and emails for phishing assessments and osint
https://cdn-images-1.medium.com/max/2245/1*RtGLPvsIz8K3pRuBSod0Ug.png
Greetings, we are going to take a look at an LinkedIn enumeration tool called crosslinked.
Continue reading on Medium »
Find valid employees names and emails for phishing assessments and osint
https://cdn-images-1.medium.com/max/2245/1*RtGLPvsIz8K3pRuBSod0Ug.png
Greetings, we are going to take a look at an LinkedIn enumeration tool called crosslinked.
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
¿Una VPN sirve para que no entren virus?
https://cdn-images-1.medium.com/max/1599/0*omFfKmpdg_N3nwvy
PUBLICADO EN 20 AGOSTO, 2021POR EHACKING
Continue reading on Medium »
¿Una VPN sirve para que no entren virus?
https://cdn-images-1.medium.com/max/1599/0*omFfKmpdg_N3nwvy
PUBLICADO EN 20 AGOSTO, 2021POR EHACKING
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking Articles|Raj Chandel's Blog
MSSQL for Pentester: Command Execution with xp_cmdshell
This article is in collection with the other two articles that we wrote about MSSQL Server and its Penetration Testing. In this article, we will be discovering and exploiting the security aspects of the xp_cmdshell functionality. Table of Content<o:p· Introduction<o:po What is xp_cmdshell?<o:p
· Enabling xp_cmdshell<o:po Manually (GUI)<o:p
o sqsh<o:p
o mssqlclient.py<o:p
o Metasploit<o:p
· Exploiting xp_cmdshell: <o:po Metasploit<o:p
o Netcat<o:p
o Crackmapexec<o:p
o Nmap<o:p
o PowerUpSQL<o:p
· Conclusion<o:pIntroduction<o:pAll the demonstrations in this article will be presented on the MSSQL Server. To get the MS-SQL server set up, you can refer to our article: Penetration Testing Lab Setup: MS-SQL. We previously touched on the exploitation of the xp_cmdshell Functionality with the help of the Metasploit module: exploit/windows/mssql/mssql_payload in our article: MSSQL Penetration Testing with Metasploit. Although in that article we couldn’t explain the background of the xp_cmdshell functionality and its security aspect.<o:p What is xp_cmdshell?<o:pAccording to the Official Microsoft Documentations, xp_cmdshell is functionality that spawns a Windows command shell and passes in a string for execution. Any output that is generated by it is shown in the format of rows of text. To simplify, we can say that it allows the database administrators to access and execute any external process directly from the SQL Server. The implementation of the xp_cmdshell can be traced back to SQL Server 6.5. It was designed so that the developers can use the SQL queries with the system command to automate various tasks that would require additional programming and working. Now that we have some knowledge about the xp_cmdshell, we can see how it can be enabled on an SQL server.<o:p Enabling xp_cmdshell: Manually (GUI)<o:pThe functionality of xp_cmdshell is disabled by default. To use it we need to enable it. It requires a higher privilege to enable on an SQL server. In the demonstration below, we are using the credentials of the SA user to log in on the SQL Server. <o:p https://1.bp.blogspot.com/-jZmEwGQj7NY/YR_oHES71XI/AAAAAAAAyOM/nL-DR9z8Pm4W0H2Le_pi3jMgK6f4cErUACLcBGAsYHQ/s16000/1.png Now that we have the SQL instance running as Administrator, we need to access the Object Explorer section. Here, we have the SQL Server Instance, we right-click on the instance to find a drop-down menu. We need to choose the “Facets” option from this menu as demonstrated below. <o:p https://1.bp.blogspot.com/-jp6EO8S8Ptg/YR_oOiAwMjI/AAAAAAAAyOQ/6o7rwysTcZA3JDVVOCUo6lAP6fTGwi-nwCLcBGAsYHQ/s16000/2.png Clicking on the Facets option will open a new window. It will have a field with the various types of facets available. We need to choose the Surface Area Configuration facets from the drop-down menu as shown in the image below.<o:p https://1.bp.blogspot.com/-WTi7O9cEQE4/YR_oS7Cz5UI/AAAAAAAAyOU/TW97GiaeRY0SZC9RNFBAcKywAXgWuxcowCLcBGAsYHQ/s16000/3.png After choosing the surface area configuration facet. We can see that we have the XPCmdShellEnabled option set as false.<o:p https://1.bp.blogspot.com/-5c_Rmigopgw/YR_oWlNppRI/AAAAAAAAyOc/B2-atvcJppsaj3Gec8yP00U2kBoxNfzBQCLcBGAsYHQ/s16000/4.png Clicking on the XP command shell option, we change its value from false to true as shown in the figure below. This was the demonstration of how to enable XP command shell using the graphical user interface on a Windows MSSQL Server.<o:p https://1.bp.blogspot.com/-jKZoS1vbwjU/YR_oa0uBz6I/AAAAAAAAyOg/KpLCEWf3WCg6YkvvsVf-6eYVhB_XeJCVgCLcBGAsYHQ/s16000/5.png Enabling xp_cmdshell: sqsh<o:pNext, w[...]
MSSQL for Pentester: Command Execution with xp_cmdshell
This article is in collection with the other two articles that we wrote about MSSQL Server and its Penetration Testing. In this article, we will be discovering and exploiting the security aspects of the xp_cmdshell functionality. Table of Content<o:p· Introduction<o:po What is xp_cmdshell?<o:p
· Enabling xp_cmdshell<o:po Manually (GUI)<o:p
o sqsh<o:p
o mssqlclient.py<o:p
o Metasploit<o:p
· Exploiting xp_cmdshell: <o:po Metasploit<o:p
o Netcat<o:p
o Crackmapexec<o:p
o Nmap<o:p
o PowerUpSQL<o:p
· Conclusion<o:pIntroduction<o:pAll the demonstrations in this article will be presented on the MSSQL Server. To get the MS-SQL server set up, you can refer to our article: Penetration Testing Lab Setup: MS-SQL. We previously touched on the exploitation of the xp_cmdshell Functionality with the help of the Metasploit module: exploit/windows/mssql/mssql_payload in our article: MSSQL Penetration Testing with Metasploit. Although in that article we couldn’t explain the background of the xp_cmdshell functionality and its security aspect.<o:p What is xp_cmdshell?<o:pAccording to the Official Microsoft Documentations, xp_cmdshell is functionality that spawns a Windows command shell and passes in a string for execution. Any output that is generated by it is shown in the format of rows of text. To simplify, we can say that it allows the database administrators to access and execute any external process directly from the SQL Server. The implementation of the xp_cmdshell can be traced back to SQL Server 6.5. It was designed so that the developers can use the SQL queries with the system command to automate various tasks that would require additional programming and working. Now that we have some knowledge about the xp_cmdshell, we can see how it can be enabled on an SQL server.<o:p Enabling xp_cmdshell: Manually (GUI)<o:pThe functionality of xp_cmdshell is disabled by default. To use it we need to enable it. It requires a higher privilege to enable on an SQL server. In the demonstration below, we are using the credentials of the SA user to log in on the SQL Server. <o:p https://1.bp.blogspot.com/-jZmEwGQj7NY/YR_oHES71XI/AAAAAAAAyOM/nL-DR9z8Pm4W0H2Le_pi3jMgK6f4cErUACLcBGAsYHQ/s16000/1.png Now that we have the SQL instance running as Administrator, we need to access the Object Explorer section. Here, we have the SQL Server Instance, we right-click on the instance to find a drop-down menu. We need to choose the “Facets” option from this menu as demonstrated below. <o:p https://1.bp.blogspot.com/-jp6EO8S8Ptg/YR_oOiAwMjI/AAAAAAAAyOQ/6o7rwysTcZA3JDVVOCUo6lAP6fTGwi-nwCLcBGAsYHQ/s16000/2.png Clicking on the Facets option will open a new window. It will have a field with the various types of facets available. We need to choose the Surface Area Configuration facets from the drop-down menu as shown in the image below.<o:p https://1.bp.blogspot.com/-WTi7O9cEQE4/YR_oS7Cz5UI/AAAAAAAAyOU/TW97GiaeRY0SZC9RNFBAcKywAXgWuxcowCLcBGAsYHQ/s16000/3.png After choosing the surface area configuration facet. We can see that we have the XPCmdShellEnabled option set as false.<o:p https://1.bp.blogspot.com/-5c_Rmigopgw/YR_oWlNppRI/AAAAAAAAyOc/B2-atvcJppsaj3Gec8yP00U2kBoxNfzBQCLcBGAsYHQ/s16000/4.png Clicking on the XP command shell option, we change its value from false to true as shown in the figure below. This was the demonstration of how to enable XP command shell using the graphical user interface on a Windows MSSQL Server.<o:p https://1.bp.blogspot.com/-jKZoS1vbwjU/YR_oa0uBz6I/AAAAAAAAyOg/KpLCEWf3WCg6YkvvsVf-6eYVhB_XeJCVgCLcBGAsYHQ/s16000/5.png Enabling xp_cmdshell: sqsh<o:pNext, w[...]