Hacking Articles Tips Tricks Videos Tutorials
Photo
hacking: security in practice
Chinese Authorities Arrest Hackers Behind Mozi IoT Botnet Attacks
https://external-preview.redd.it/c_REsGFwAb6NIoXw_rZF3GvITM56pSkVV_HjutWX4a0.jpg?width=640&crop=smart&auto=webp&s=2a261779a903bcf4ee396a430f6431cf00559591 submitted by /u/CodePerfect
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
Chinese Authorities Arrest Hackers Behind Mozi IoT Botnet Attacks
https://external-preview.redd.it/c_REsGFwAb6NIoXw_rZF3GvITM56pSkVV_HjutWX4a0.jpg?width=640&crop=smart&auto=webp&s=2a261779a903bcf4ee396a430f6431cf00559591 submitted by /u/CodePerfect
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
Chinese Authorities Arrest Hackers Behind Mozi IoT Botnet Attacks
Posted in r/hacking by u/CodePerfect • 4 points and 0 comments
hacking: security in practice
How does injecting malware in the GPU's VRAM work?
I've started learning about cybersecurity a few weeks ago, and I've just read an article talking about a new hacking method that consists of injecting malware in the GPU's VRAM (so anti-viruses don't detect it). How is that possible though? I thought that the VRAM was erased when turning off the computer. The article also mentioned that there is a proof of concept explaining how this method works, but I haven't found anything. If someone knows anything about this, please let me know, thanks in advance :)
submitted by /u/FerdinandoPH
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
How does injecting malware in the GPU's VRAM work?
I've started learning about cybersecurity a few weeks ago, and I've just read an article talking about a new hacking method that consists of injecting malware in the GPU's VRAM (so anti-viruses don't detect it). How is that possible though? I thought that the VRAM was erased when turning off the computer. The article also mentioned that there is a proof of concept explaining how this method works, but I haven't found anything. If someone knows anything about this, please let me know, thanks in advance :)
submitted by /u/FerdinandoPH
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
How does injecting malware in the GPU's VRAM work?
I've started learning about cybersecurity a few weeks ago, and I've just read an article talking about a new hacking method that consists of...
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
CHECK. me if you can
https://cdn-images-1.medium.com/max/2600/1*t3UUWa37g370dfRqQ2cqeg.png
On September 2 and 3, CHECK. users can take a ride in a Porsche Taycan, but only if they can catch it.
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
CHECK. me if you can
https://cdn-images-1.medium.com/max/2600/1*t3UUWa37g370dfRqQ2cqeg.png
On September 2 and 3, CHECK. users can take a ride in a Porsche Taycan, but only if they can catch it.
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
CHECK. me if you can
On September 2 and 3, CHECK. users can take a ride in a Porsche Taycan, but only if they can catch it.
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Remote hacking flaw in Fortinets Fortiweb WAF
https://cdn-images-1.medium.com/max/960/0*C35kDzn3L7fO-kaB
“When solving problems, dig at the roots instead of just hacking at the leaves.”
Continue reading on rootissh »
___________________________
@hacking_Attack
@Hacking_Video
Remote hacking flaw in Fortinets Fortiweb WAF
https://cdn-images-1.medium.com/max/960/0*C35kDzn3L7fO-kaB
“When solving problems, dig at the roots instead of just hacking at the leaves.”
Continue reading on rootissh »
___________________________
@hacking_Attack
@Hacking_Video
Medium
Remote hacking flaw in Fortinets Fortiweb WAF
“When solving problems, dig at the roots instead of just hacking at the leaves.”
Hacking Articles Tips Tricks Videos Tutorials
Photo
Black Hat Ethical Hacking
Bluetooth Bugs Open Billions of Devices to DoS, Code Execution
https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Bluetooth Bugs Open Billions of Devices to DoS, Code ExecutionPost Views: 70
Reading Time: 2 Minutes
Researchers have disclosed a group of 16 different vulnerabilities collectively dubbed BrakTooth, which impact billions of devices that rely on Bluetooth Classic (BT) for communication.
According to an academic paper from the University of Singapore, the bugs are found in the closed commercial BT stack used by at least 1,400 embedded chip components, that can lead to a host of attack types – mainly denial of service (DoS) via firmware crashes (the term “brak” is actually Norwegian for “crash”). One of the bugs can also lead to arbitrary code execution (ACE).
The team analyzed 13 pieces of BT hardware from 11 vendors; so far, there have been 20 CVEs assigned across them; with four vulnerabilities pending CVE assignments from Intel and Qualcomm. Some of the bugs are patched, others are in the process of being patched; but, researchers said in the paper, “it is highly probable that many other products (beyond the ≈1400 entries observed in Bluetooth listing) are affected by BrakTooth,” including BT system-on-chips (SoCs), BT modules or additional BT end products.
See Also: Complete Offensive Security and Ethical Hacking Course Potentially, billions of devices could be affected worldwide, researchers said.
Here’s a table of the 16 bugs:
https://media.threatpost.com/wp-content/uploads/sites/103/2021/09/02135933/BrakTooth.png
Summary of new vulnerabilities and other anomalies found (Vx: Vulnerability, Ax: Non-compliance).
And here’s a list of known affected vendors:
https://media.threatpost.com/wp-content/uploads/sites/103/2021/09/02140009/BrakTook-Vendors.png
Number of product listings with respect to BT SoC.
The researchers uncovered three main attack scenarios for the bugs, the most severe of which results in ACE on internet-of-things (IoT) devices.
See Also: Critical Valve Bug Lets Gamers Add Unlimited Funds to Steam Wallets Arbitrary Code Execution for Smart Home DevicesThe most critical vulnerability (CVE-2021-28139) affects ESP32 SoCs, a series of low-cost, low-power SoC microcontrollers with integrated Wi-Fi and dual-mode Bluetooth, from the vendor Espressif. These are commonly found in IoT appliances used in industry automation, smart-home device, personal fitness gadgets and more.
“A lack of out-of-bounds check in ESP32 BT Library allows the reception of a mutated LMP_feature_response_ext,” according to the paper. “This results in the injection of eight bytes of arbitrary data outside the bounds of Extended Feature Page Table.”
To exploit it, an attacker who knows the firmware layout of a target device can write a known function address (JMP Addr.) to the offset pointed by Features Page field.
Researchers successfully forced ESP32 into erasing data housed in devices’ non-volatile random-access memory (NVRAM), which retains data without applied power. They were also able to disable both BT and Wi-Fi on the device; and most concerningly, control the general-purpose input/output (GPIO) of the device if the attacker knows addresses to attached functions-controlling actuators. GPIO is used to communicate the ON/OFF signals received from connected switches, or the digital readings received from connected sensors, to the CPU.
“This has serious implications if such an attack is applied to Bluetooth-enabled smart home products,” the researchers warned.
See Also: Offensive Security Tool: Starkiller DoSing Laptops & SmartphonesThe second attack scenar[...]
___________________________
@hacking_Attack
@Hacking_Video
Bluetooth Bugs Open Billions of Devices to DoS, Code Execution
https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Bluetooth Bugs Open Billions of Devices to DoS, Code ExecutionPost Views: 70
Reading Time: 2 Minutes
Researchers have disclosed a group of 16 different vulnerabilities collectively dubbed BrakTooth, which impact billions of devices that rely on Bluetooth Classic (BT) for communication.
According to an academic paper from the University of Singapore, the bugs are found in the closed commercial BT stack used by at least 1,400 embedded chip components, that can lead to a host of attack types – mainly denial of service (DoS) via firmware crashes (the term “brak” is actually Norwegian for “crash”). One of the bugs can also lead to arbitrary code execution (ACE).
The team analyzed 13 pieces of BT hardware from 11 vendors; so far, there have been 20 CVEs assigned across them; with four vulnerabilities pending CVE assignments from Intel and Qualcomm. Some of the bugs are patched, others are in the process of being patched; but, researchers said in the paper, “it is highly probable that many other products (beyond the ≈1400 entries observed in Bluetooth listing) are affected by BrakTooth,” including BT system-on-chips (SoCs), BT modules or additional BT end products.
See Also: Complete Offensive Security and Ethical Hacking Course Potentially, billions of devices could be affected worldwide, researchers said.
Here’s a table of the 16 bugs:
https://media.threatpost.com/wp-content/uploads/sites/103/2021/09/02135933/BrakTooth.png
Summary of new vulnerabilities and other anomalies found (Vx: Vulnerability, Ax: Non-compliance).
And here’s a list of known affected vendors:
https://media.threatpost.com/wp-content/uploads/sites/103/2021/09/02140009/BrakTook-Vendors.png
Number of product listings with respect to BT SoC.
The researchers uncovered three main attack scenarios for the bugs, the most severe of which results in ACE on internet-of-things (IoT) devices.
See Also: Critical Valve Bug Lets Gamers Add Unlimited Funds to Steam Wallets Arbitrary Code Execution for Smart Home DevicesThe most critical vulnerability (CVE-2021-28139) affects ESP32 SoCs, a series of low-cost, low-power SoC microcontrollers with integrated Wi-Fi and dual-mode Bluetooth, from the vendor Espressif. These are commonly found in IoT appliances used in industry automation, smart-home device, personal fitness gadgets and more.
“A lack of out-of-bounds check in ESP32 BT Library allows the reception of a mutated LMP_feature_response_ext,” according to the paper. “This results in the injection of eight bytes of arbitrary data outside the bounds of Extended Feature Page Table.”
To exploit it, an attacker who knows the firmware layout of a target device can write a known function address (JMP Addr.) to the offset pointed by Features Page field.
Researchers successfully forced ESP32 into erasing data housed in devices’ non-volatile random-access memory (NVRAM), which retains data without applied power. They were also able to disable both BT and Wi-Fi on the device; and most concerningly, control the general-purpose input/output (GPIO) of the device if the attacker knows addresses to attached functions-controlling actuators. GPIO is used to communicate the ON/OFF signals received from connected switches, or the digital readings received from connected sensors, to the CPU.
“This has serious implications if such an attack is applied to Bluetooth-enabled smart home products,” the researchers warned.
See Also: Offensive Security Tool: Starkiller DoSing Laptops & SmartphonesThe second attack scenar[...]
___________________________
@hacking_Attack
@Hacking_Video
Hacking Articles Tips Tricks Videos Tutorials
Black Hat Ethical Hacking Bluetooth Bugs Open Billions of Devices to DoS, Code Execution https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Bluetooth Bugs Open Billions of Devices to DoS, Code ExecutionPost Views: 70…
io can lead to DoS in laptops and smartphones. Researchers were able to achieve this using gear containing Intel AX200 SoCs and Qualcomm WCN3990 SoCs.
One of the DoS bugs (CVE-2021-34147) exists because of a failure in the SoC to free resources upon receiving an invalid LMP_timing_accuracy_response from a connected BT device (i.e., a “slave,” according to the paper:
“The attacker can exhaust the SoC by (a) paging, (b) sending the malformed packet, and (c) disconnecting without sending LMP_detach,” researchers wrote. “These steps are repeated with a different BT address (i.e., BDAddress) until the SoC is exhausted from accepting new connections. On exhaustion, the SoC fails to recover itself and disrupts current active connections, triggering firmware crashes sporadically.”
The researchers were able to forcibly disconnect slave BT devices from Windows and Linux laptops, and cause BT headset disruptions on Pocophone F1 and Oppo Reno 5G smartphones.
Another DoS bug (CVE pending) affects only devices using the Intel AX200 SoC.
It’s triggered when an oversized LMP_timing_accuracy_request (i.e., bigger than 17 bytes) is sent to an AX200 slave.
“This temporarily corrupts AX200 firmware, which responds incorrectly during a subsequent BT connection and eventually disables the paging scan procedure,” researchers explained. “Thus, scanning AX200 works, but no connection is established from an external BT device.”
Aside from disconnecting master BT devices connected to a vulnerable laptop and leading to sporadic BT firmware crashes, this state of affairs can also be used for man-in-the-middle (MiTM) attacks. Bad actors can easily trick a user into connecting to the attacker’s BT hardware instead of the legitimate device, researchers noted – with persistence.
“Indeed, the user needs to manually re-enable BT to restore functionality,” they said, adding, “Due to the number of smartphones and laptops vulnerable to such attacks, and the common use of BT connectivity during video-conference calls and music streaming, updating the affected devices is essential.” See Also: Hacking Stories: Andrian Lamo – The ‘homeless’ HackerBT Audio Product FreezesA third attack scenario was discovered while probing various BT speakers (specifically the Mi Portable Bluetooth Speaker – MDZ-36-DB, BT Headphone and BT Audio Modules) and an unbranded BT audio receiver.
They all are variously subject to a series of bugs (CVE-2021-31609 andCVE-2021-31612, failures when sending oversized LMP packets; CVE-2021-31613, truncated packets; CVE-2021-31611, starting procedures out-of-order; and CVE-2021-28135, CVE-2021-28155 and CVE-2021-31717, feature response flooding).
Successful exploits can “freeze” devices, requiring the user to manually turn on unresponsive devices afterwards. For the Xiaomi MDZ-36-DBs and JBL TUNE 500BTs, this can be done while the user is actively playing music, researchers noted.
“Although issues were found in SoCs targeted to audio products, the BT implementation can be reused in a number of SoCs destined to different BT products,” they added.
These are just a few of the possible exploit scenarios; a full vulnerability listing with descriptions can be found here.
The researchers have released a BrakTooth proof-of-concept (PoC) tool for vendors producing BT SoCs, modules and products – available for them to use to check their gear’s vulnerability.
BlueTooth vulnerabilities are particularly concerning given the vast footprint that they can impact, and unfortunately, they’re not that uncommon. For more, please see Threatpost’s recent previous BlueTooth bug coverage:
* Bluetooth Bug Opens Devices to Man-in-the-Middle Attacks
* Bluetooth Bug Allows Man-in-the-Middle Attacks on Phones
* Bluetooth Spoofing Bug Affects Billions of IoT Devices
Source: threatpost.com (Click Link)Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/wordpress_[...]
___________________________
@hacking_Attack
@Hacking_Video
One of the DoS bugs (CVE-2021-34147) exists because of a failure in the SoC to free resources upon receiving an invalid LMP_timing_accuracy_response from a connected BT device (i.e., a “slave,” according to the paper:
“The attacker can exhaust the SoC by (a) paging, (b) sending the malformed packet, and (c) disconnecting without sending LMP_detach,” researchers wrote. “These steps are repeated with a different BT address (i.e., BDAddress) until the SoC is exhausted from accepting new connections. On exhaustion, the SoC fails to recover itself and disrupts current active connections, triggering firmware crashes sporadically.”
The researchers were able to forcibly disconnect slave BT devices from Windows and Linux laptops, and cause BT headset disruptions on Pocophone F1 and Oppo Reno 5G smartphones.
Another DoS bug (CVE pending) affects only devices using the Intel AX200 SoC.
It’s triggered when an oversized LMP_timing_accuracy_request (i.e., bigger than 17 bytes) is sent to an AX200 slave.
“This temporarily corrupts AX200 firmware, which responds incorrectly during a subsequent BT connection and eventually disables the paging scan procedure,” researchers explained. “Thus, scanning AX200 works, but no connection is established from an external BT device.”
Aside from disconnecting master BT devices connected to a vulnerable laptop and leading to sporadic BT firmware crashes, this state of affairs can also be used for man-in-the-middle (MiTM) attacks. Bad actors can easily trick a user into connecting to the attacker’s BT hardware instead of the legitimate device, researchers noted – with persistence.
“Indeed, the user needs to manually re-enable BT to restore functionality,” they said, adding, “Due to the number of smartphones and laptops vulnerable to such attacks, and the common use of BT connectivity during video-conference calls and music streaming, updating the affected devices is essential.” See Also: Hacking Stories: Andrian Lamo – The ‘homeless’ HackerBT Audio Product FreezesA third attack scenario was discovered while probing various BT speakers (specifically the Mi Portable Bluetooth Speaker – MDZ-36-DB, BT Headphone and BT Audio Modules) and an unbranded BT audio receiver.
They all are variously subject to a series of bugs (CVE-2021-31609 andCVE-2021-31612, failures when sending oversized LMP packets; CVE-2021-31613, truncated packets; CVE-2021-31611, starting procedures out-of-order; and CVE-2021-28135, CVE-2021-28155 and CVE-2021-31717, feature response flooding).
Successful exploits can “freeze” devices, requiring the user to manually turn on unresponsive devices afterwards. For the Xiaomi MDZ-36-DBs and JBL TUNE 500BTs, this can be done while the user is actively playing music, researchers noted.
“Although issues were found in SoCs targeted to audio products, the BT implementation can be reused in a number of SoCs destined to different BT products,” they added.
These are just a few of the possible exploit scenarios; a full vulnerability listing with descriptions can be found here.
The researchers have released a BrakTooth proof-of-concept (PoC) tool for vendors producing BT SoCs, modules and products – available for them to use to check their gear’s vulnerability.
BlueTooth vulnerabilities are particularly concerning given the vast footprint that they can impact, and unfortunately, they’re not that uncommon. For more, please see Threatpost’s recent previous BlueTooth bug coverage:
* Bluetooth Bug Opens Devices to Man-in-the-Middle Attacks
* Bluetooth Bug Allows Man-in-the-Middle Attacks on Phones
* Bluetooth Spoofing Bug Affects Billions of IoT Devices
Source: threatpost.com (Click Link)Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/wordpress_[...]
___________________________
@hacking_Attack
@Hacking_Video
Hacking Articles Tips Tricks Videos Tutorials
io can lead to DoS in laptops and smartphones. Researchers were able to achieve this using gear containing Intel AX200 SoCs and Qualcomm WCN3990 SoCs. One of the DoS bugs (CVE-2021-34147) exists because of a failure in the SoC to free resources upon receiving…
plugin_vuln-90x90.jpg Gutenberg Template Library & Redux Framework Bugs Plague WordPress Sites1 day ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/ransomware-cpu-90x90.jpg LockFile Ransomware Uses Never-Before Seen Encryption to Avoid Detection2 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Windows-Abstract-90x90.jpg Microsoft Exchange ‘ProxyToken’ Bug Allows Email Snooping3 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/F5-Big-IP-e1619725870974-90x90.jpg F5 Bug Could Lead to Complete System Takeover1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/steel-series-e1629915533369-90x90.jpg Win10 Admin Rights Tossed Off by Yet Another Plug-In1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/white-pegasus-e1626804896117-90x90.jpg Pegasus Spyware Uses iPhone Zero-Click iMessage Zero-Day1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/microsoft-exchange-90x90.jpg ProxyShell Attacks Pummel Unpatched Exchange Servers1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/ddos-90x90.png Web Censorship Systems Can Facilitate Massive DDoS Attacks2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/cisco-patch-1-90x90.png Critical Cisco Bug in Small Business Routers to Remain Unpatched2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Bug-Digital-90x90.jpg Unpatched Fortinet Bug Allows Firewall Takeovers2 weeks ago
style="display:block; text-align:center;"
data-ad-layout="in-article"
data-ad-format="fluid"
data-ad-client="ca-pub-6620833063853657"
data-ad-slot="4517761481">
The post Bluetooth Bugs Open Billions of Devices to DoS, Code Execution first appeared on Black Hat Ethical Hacking.
➖ Sent by @TheFeedReaderBot ➖
___________________________
@hacking_Attack
@Hacking_Video
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/ransomware-cpu-90x90.jpg LockFile Ransomware Uses Never-Before Seen Encryption to Avoid Detection2 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Windows-Abstract-90x90.jpg Microsoft Exchange ‘ProxyToken’ Bug Allows Email Snooping3 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/F5-Big-IP-e1619725870974-90x90.jpg F5 Bug Could Lead to Complete System Takeover1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/steel-series-e1629915533369-90x90.jpg Win10 Admin Rights Tossed Off by Yet Another Plug-In1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/white-pegasus-e1626804896117-90x90.jpg Pegasus Spyware Uses iPhone Zero-Click iMessage Zero-Day1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/microsoft-exchange-90x90.jpg ProxyShell Attacks Pummel Unpatched Exchange Servers1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/ddos-90x90.png Web Censorship Systems Can Facilitate Massive DDoS Attacks2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/cisco-patch-1-90x90.png Critical Cisco Bug in Small Business Routers to Remain Unpatched2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Bug-Digital-90x90.jpg Unpatched Fortinet Bug Allows Firewall Takeovers2 weeks ago
style="display:block; text-align:center;"
data-ad-layout="in-article"
data-ad-format="fluid"
data-ad-client="ca-pub-6620833063853657"
data-ad-slot="4517761481">
The post Bluetooth Bugs Open Billions of Devices to DoS, Code Execution first appeared on Black Hat Ethical Hacking.
➖ Sent by @TheFeedReaderBot ➖
___________________________
@hacking_Attack
@Hacking_Video
Deep Web
Are there any FREE (legit/known) hosts?
I hope in the near future I can start a free hosting service, on the Deepweb. Until then, do y'all know of any now?
I've looked around a lot and I've found nothing.
submitted by /u/DISLEX
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
Are there any FREE (legit/known) hosts?
I hope in the near future I can start a free hosting service, on the Deepweb. Until then, do y'all know of any now?
I've looked around a lot and I've found nothing.
submitted by /u/DISLEX
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
Are there any FREE (legit/known) hosts?
I hope in the near future I can start a free hosting service, on the Deepweb. Until then, do y'all know of any now? I've looked around a lot...
Deep Web
search engines
what search engine can i use without the f*ds showing up
submitted by /u/plateau_sigma_
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
search engines
what search engine can i use without the f*ds showing up
submitted by /u/plateau_sigma_
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
search engines
what search engine can i use without the f*ds showing up
hacking: security in practice
Controlling browser extensions from browser files
I want to toggle browser extensions from outside the browser by changing the contents of the files stored in the browser directories. I'm unable to find just the right files. I'm actually trying to work on a command line program that changes the browser by toggling on and off the dark reader extension. I can do it from the extensions page on my brave browser but how do I achieve the same thing by editing the files?
submitted by /u/zim0369
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
Controlling browser extensions from browser files
I want to toggle browser extensions from outside the browser by changing the contents of the files stored in the browser directories. I'm unable to find just the right files. I'm actually trying to work on a command line program that changes the browser by toggling on and off the dark reader extension. I can do it from the extensions page on my brave browser but how do I achieve the same thing by editing the files?
submitted by /u/zim0369
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
Controlling browser extensions from browser files
I want to toggle browser extensions from outside the browser by changing the contents of the files stored in the browser directories. I'm unable...
hacking: security in practice
Is it possible to bypass is_numeric() function for SQL injection?
I'm currently learning about sql injection using DVWA and the hardest difficulty has is_numeric function. I tried searching for any answers in this subreddit but didn't find any. Is it possible to bypass this function?
submitted by /u/math355
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
Is it possible to bypass is_numeric() function for SQL injection?
I'm currently learning about sql injection using DVWA and the hardest difficulty has is_numeric function. I tried searching for any answers in this subreddit but didn't find any. Is it possible to bypass this function?
submitted by /u/math355
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
Is it possible to bypass is_numeric() function for SQL injection?
I'm currently learning about sql injection using DVWA and the hardest difficulty has is_numeric function. I tried searching for any answers in...
Hacking Articles Tips Tricks Videos Tutorials
Photo
hacking: security in practice
Exploiting Linux Capabilities – Part 6
Learn the basics of process injection and kernel modules. Build your own rootkits to exploit cap_sys_ptrace and cap_sys_module capabilities in the Linux kernel
https://tbhaxor.com/exploiting-linux-capabilities-part-6/
submitted by /u/tbhaxor
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
Exploiting Linux Capabilities – Part 6
Learn the basics of process injection and kernel modules. Build your own rootkits to exploit cap_sys_ptrace and cap_sys_module capabilities in the Linux kernel
https://tbhaxor.com/exploiting-linux-capabilities-part-6/
submitted by /u/tbhaxor
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
Exploiting Linux Capabilities – Part 6
Learn the basics of process injection and kernel modules. Build your own rootkits to exploit cap\_sys\_ptrace and cap\_sys\_module capabilities in...
hacking: security in practice
Getting a CGNAT IP-banned
Mods, please let me know if this is too political, I'll frame it as a question about potential attack vectors.
I've read that activists are spamming the new Texas abortion website with bogus reports in the hopes of crashing it. That website only permits Texas IP addresses to submit reports and practices IP-banning.
Instead of trying to DDOS the site, wouldn't an alternative attack strategy be to get all public IP addresses for ISPs in Texas IP-banned by the site? This would prevent legitimate access to the site, so it would effectively neuter the site and it's original purpose. This would be much easier to accomplish if those ISPs practice CGNAT, right? Is there something I am misunderstanding about how CGNAT works or how IP-banning works?
submitted by /u/numshah
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
Getting a CGNAT IP-banned
Mods, please let me know if this is too political, I'll frame it as a question about potential attack vectors.
I've read that activists are spamming the new Texas abortion website with bogus reports in the hopes of crashing it. That website only permits Texas IP addresses to submit reports and practices IP-banning.
Instead of trying to DDOS the site, wouldn't an alternative attack strategy be to get all public IP addresses for ISPs in Texas IP-banned by the site? This would prevent legitimate access to the site, so it would effectively neuter the site and it's original purpose. This would be much easier to accomplish if those ISPs practice CGNAT, right? Is there something I am misunderstanding about how CGNAT works or how IP-banning works?
submitted by /u/numshah
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
Getting a CGNAT IP-banned
Mods, please let me know if this is too political, I'll frame it as a question about potential attack vectors. I've read that activists are...