but it is not useable to connect to the database. <o:p

· in this scenario when you run the application the application needs to decrypt the encrypted connection string and that decrypted connection string will be seen in memory.<o:p

<o:p

In both cases, if we can dump the memory of the process, we should be able to find the clear text connection string in memory. When it comes to the DVTA application it comes under scenario 2. It contains a hard-coded connection string but the connection string is encrypted but when the application is being run it has to decrypt the encrypted connection string to be able to communicate with the database.<o:p

Let’s see how we can dump the memory of a specific process. There are multiple ways are present to do this but we are going to use a tool called process hacker.<o:p

You can download the process hacker tool by searching It on the web or you can download it directly from here.<o:p

Process hacker: - https://processhacker.sourceforge.io/downloads.php<o:p

We are going to download the portable binary here <o:p https://1.bp.blogspot.com/-eRWSp7cY5ao/YFi57dRgPcI/AAAAAAAAu5E/cC6Lv4vX_LYiIDb1-vr67tprW-B12E2cQCLcBGAsYHQ/s16000/29.png <o:p

Download and extract it on your working directory. We are going to use a 64bit version of this tool which is x64 but before that open up the DVTA application and log in to the application.<o:p https://1.bp.blogspot.com/--JmN2ZCRPMc/YFi5_YDcQxI/AAAAAAAAu5M/H93SIm0zvYE_GqnODJCuk-NDDxnaRVAxACLcBGAsYHQ/s16000/30.png Now, since we have connected to Vijay’s account this application has made some communication with the database so let’s run the Process hacker.<o:p https://1.bp.blogspot.com/-0RjTbWhARII/YFi6DPx5-nI/AAAAAAAAu5Q/hcaDPc4KxAwYvTb5WRhyO05AIg6q1tAAgCLcBGAsYHQ/s16000/31.png As we can see there are lots of processes. Let’s look for DVTA.exe because DVTA is running on another tab so we should be able to find it here as shown in the below image.<o:p https://1.bp.blogspot.com/-9ywKAKPiNJc/YFi6IENN8UI/AAAAAAAAu5Y/pZ5TIhKXYowQOjmysN0z5eU8kqB68EhuACLcBGAsYHQ/s16000/32.png <o:p

Give a double click to the entry of DVTA.exe and then open its properties.<o:p https://1.bp.blogspot.com/-nS7MQ2s5HZM/YFi6Nsz3h_I/AAAAAAAAu5g/TLZqqy0OEEcjK5LM-h5pV2nmH34p2LTlQCLcBGAsYHQ/s16000/33.png <o:p

After that go to the memory<o:p https://1.bp.blogspot.com/-fu56U30JqpQ/YFi6R-ctpjI/AAAAAAAAu5o/Wc_SErdQTHoRIkwoc3d3CrM2e-FE4gkCwCLcBGAsYHQ/s16000/34.png Click on the strings and then choose “image”and “mapped”.<o:p https://1.bp.blogspot.com/-BBOzaK2SwBw/YFi6WIAct2I/AAAAAAAAu5s/1LrGb6JpaAQnv5KMNBnNd_iY-hCyVTXpwCLcBGAsYHQ/s16000/35.png <o:p

Further, then it should find all the strings in the memory of this process. Now as you can see this is a very long list for us to search through so, what we will do is quickly apply a filter with something very common in the database connection strings. So we will apply the filter with the keyword of “Data source” typically database connection strings contain this word data source.<o:p https://1.bp.blogspot.com/-pqaWvcVQTkQ/YFi6baXj9AI/AAAAAAAAu50/-k2EuNHAj9IZmCZEYHcWmVO_QuNhCdTMACLcBGAsYHQ/s16000/36.png <o:p

After applying the filter, you can see a bunch of entries. As you can see there are multiple database connection strings with the decrypted password inside <o:p https://1.bp.blogspot.com/-NkgBb7jPvBI/YFi6fvBjkmI/AAAAAAAAu58/NtiE2YeufRweukr6NDaWuniLMVe38swcwCLcBGAsYHQ/s16000/37.png <o:p

Now copy that entry and paste it on the notepad. As you can see this is the connection string that contains the “user Id”and the “decrypted password”.<o:p<o:phttps://1.bp.blogspot.com/-Ur7KLeGlP5k/YFi6mVcvpNI/AAAAAAAAu6E/-Jt9BhN-bBojRBQUb5YTwc1P5ZlQTHwBACLcBGAsYHQ/s16000/38.png Now let’s see how we can make use of this particular database connectio[...]

Kali Linux Tutorials
Diceware Password Generator : Generate High Entropy Passwords

Diceware is a method used to generate cryptographically strong memorable passphrases. This is a python implementation of the diceware password generating algorithm. Inspired after watching this video. Note : This Program Do Not Store Passwords In Any Form And All The Passwords Are Generated Locally Inside You Device. How DPG Generate Passwords? Traditional Diceware uses […]

The post Diceware Password Generator : Generate High Entropy Passwords appeared first on Kali Linux Tutorials.

Hacking on Medium
Brute Force attack on a Web server’s login Page

https://cdn-images-1.medium.com/max/675/1*4nVfy6fjDajGtWxcNBfnMw.png
When i am trying out CTF challenges i.e.: Hack The Box, once i have completed my reconnaissance i,e: nmap, dirb. This is a process i…

Continue reading on Medium »

Hacking on Medium
Vulnerabilidad crítica de RCE encontrada en el software Apache OFBiz ERP: Parchar ahora.

https://cdn-images-1.medium.com/max/957/0*eyp2F-RuXyYKQ2vx
La Apache Software Foundation abordó el viernes una vulnerabilidad de alta gravedad en Apache OFBiz que podría haber permitido que un…

Continue reading on Medium »

Hacking Articles
Thick Client Penetration Testing on DVTA

In the previous article, we have seen some methods to Analyze the Traffic of Thick Client Applications specifically in DVTA. You can take a look at that article by browsing this link: – https://www.hackingarticles.in/thick-client-penetration-testing-traffic-analysis/ In this article, we will perform some attacks to pen-test the application. Table of Content Prerequisites

The post Thick Client Penetration Testing on DVTA appeared first on Hacking Articles.

rustyIron - MobileIron MDM Authentication Tooling
https://www.reddit.com/r/redteamsec/comments/mav7uu/rustyiron_mobileiron_mdm_authentication_tooling/

submitted by /u/emptynebuli (https://www.reddit.com/user/emptynebuli)
[link] (https://github.com/optiv/rustyIron) [comments] (https://www.reddit.com/r/redteamsec/comments/mav7uu/rustyiron_mobileiron_mdm_authentication_tooling/)

hacking: security in practice
What is Zero Trust Model?

https://b.thumbs.redditmedia.com/Ge1Sv7OJ9xdvDbHwnuBXG1lJnm88WBVts9vU2SXizoQ.jpg submitted by /u/umuttosun
[link] [comments]

hacking: security in practice
Acer Faced With Ransom Up To $100 Million After Hackers Breach Network

https://b.thumbs.redditmedia.com/3P8Ou5KLSh_JtIqzLrnTjXpCWzA1TCDkc3k6WF2orUA.jpg submitted by /u/s_kaw
[link] [comments]

hacking: security in practice
Random domain name hijacking at DigitalOcean DNS as easy as ABC

In my line of work, I found an obvious vulnerability in the Digital Ocean panel. I wrote more about it in my blog.

This allows you to bind someone else's domain to your server, which points to the digital ocean but is not bound to the server

If you write a simple WHOIS parser, you can exploit random domains!

I don't understand why the team of Digital Ocean doesn't care about this?

submitted by /u/smeshny
[link] [comments]

hacking: security in practice
It is kaspersky actually bad?

Why some infosec experts on tw say that Kasperky isnt reliable at all?

submitted by /u/sandfoxJ
[link] [comments]

ProxyLogon - PoC Exploit for Microsoft Exchange

PoC Exploit for Microsoft Exchange Launche Original PoC: https://github.com/testanullHow to use: python proxylogon.py <name or IP of server> <user@fqdn> Example: python proxylogon.py primary administrator@lab.local If successful you will be dropped into a webshell. exit or quit to escape from the webshell (or ctrl+c) By default, it will create a file test.aspx. This can be changed. Special Thanks and resources: @Flangvik @Testanull https://www.praetorian.com/blog/reproducing-proxylogon-exploit/ Download ProxyLogon
Read more...