hacking: security in practice
Controlling browser extensions from browser files

I want to toggle browser extensions from outside the browser by changing the contents of the files stored in the browser directories. I'm unable to find just the right files. I'm actually trying to work on a command line program that changes the browser by toggling on and off the dark reader extension. I can do it from the extensions page on my brave browser but how do I achieve the same thing by editing the files?

submitted by /u/zim0369
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Is it possible to bypass is_numeric() function for SQL injection?

I'm currently learning about sql injection using DVWA and the hardest difficulty has is_numeric function. I tried searching for any answers in this subreddit but didn't find any. Is it possible to bypass this function?

submitted by /u/math355
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Exploiting Linux Capabilities – Part 6

Learn the basics of process injection and kernel modules. Build your own rootkits to exploit cap_sys_ptrace and cap_sys_module capabilities in the Linux kernel

https://tbhaxor.com/exploiting-linux-capabilities-part-6/

submitted by /u/tbhaxor
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Getting a CGNAT IP-banned

Mods, please let me know if this is too political, I'll frame it as a question about potential attack vectors.

I've read that activists are spamming the new Texas abortion website with bogus reports in the hopes of crashing it. That website only permits Texas IP addresses to submit reports and practices IP-banning.

Instead of trying to DDOS the site, wouldn't an alternative attack strategy be to get all public IP addresses for ISPs in Texas IP-banned by the site? This would prevent legitimate access to the site, so it would effectively neuter the site and it's original purpose. This would be much easier to accomplish if those ISPs practice CGNAT, right? Is there something I am misunderstanding about how CGNAT works or how IP-banning works?

submitted by /u/numshah
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
HOW TO GET A HACKER TO CHANGE SCHOOL GRADES

for any technical problems about your tasks or issues regarding hacking services, simply contact MAGICFINGERHACKERS@GMAIL.COM

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
I NEED A HACKER TO CHANGE MY UNIVERSITY GRADES

https://cdn-images-1.medium.com/max/1280/1*ej7D31qHOyaEBAdlBpaxFw.jpeg
MAGICFINGERHACKERS@GMAIL.COM — — for any technical problems about your tasks or issues regarding hacking services

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Black Hat Ethical Hacking
Offensive Security Tool: Pegasus Spyware – Decompiled

https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Offensive Security Tool: Pegasus Spyware – DecompiledPost Views: 26 https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/BECOME-A-PATRON-AND-UNLOCK-EXCLUSIVE-VIDEOS-1.png Reading Time: 2 Minutes

Offensive Security Tool: Pegasus Spyware – Decompiled GitHub Link Pegasus Spyware – DecompiledPegasus is a spyware developed by the Israeli cyberarms firm NSO Group that can be covertly installed on mobile phones (and other devices) running most versions of iOS and Android.
The 2021 Project Pegasus revelations suggest that the current Pegasus software can exploit all recent iOS versions up to iOS 14.6. As of 2016, Pegasus was capable of reading text messages, tracking calls, collecting passwords, location tracking, accessing the target device’s microphone and camera, and harvesting information from apps.
See Also: Bluetooth Bugs Open Billions of Devices to DoS, Code Execution
The spyware is named after Pegasus, the winged horse of Greek mythology. It is a Trojan horse computer virus that can be sent “flying through the air” to infect cell phones.
See Also: Hacking stories – The first botnet hijacker aka the Zombie King
This is the decompiled version by jonathandata1 which will help security researchers, even the defensive team understand how this spyware works, in order to look for mitigating it from being exploited, growing the awareness and importance of Offensive Security.
See Also: Offensive Security Tool: Starkiller Recent Tools* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/FIbbZME-90x90.png Offensive Security Tool: Starkiller1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/0URVvVK54SOsx1MEq-90x90.png Offensive Security Tool: FFUF2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/687474703a2f2f633666632e696f2f77617263616e6e6f6e2d636c692e706e67-90x90.png Offensive Security Tool: Warcannon3 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/2-7-90x90.png Offensive Security Tool: Mimikatz4 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/07/Screenshot_20210729_145513-90x90.png Offensive Security Tool: Ruler1 month ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/07/VoIPsniffer-90x90.png Offensive Security Tool: VoIPmonitor Sniffer1 month ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/07/57177630ce750eb1ad40649424d04b9c-90x90.jpeg Offensive Security Tool: Veil2 months ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/07/Untitled-design-90x90.png Offensive Security Tool: It Was All A Dream (Windows Print Spooler RCE)2 months ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/07/unknown-e1625210118591-90x90.png Offensive Security Tool: GoSpider2 months ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/06/3Gn0bEI-e1624621931936-90x90.png Offensive Security Tool: Pixload2 months ago
style="display:block; text-align:center;"
data-ad-layout="in-article"
data-ad-format="fluid"
data-ad-client="ca-pub-6620833063853657"
data-ad-slot="4517761481">
The post Offensive Security Tool: Pegasus Spyware – Decompiled first appeared on Black Hat Ethical Hacking.

___________________________
@hacking_Attack
@Hacking_Video

adalanche - now with machine collector
https://www.reddit.com/r/redteamsec/comments/ph4s1t/adalanche_now_with_machine_collector/

Just a quick before-the-weekend-update on adalanche (https://github.com/lkarlslund/adalanche), which was very well recieved here when I posted about it a month ago. It's an Active Directory visualizer which gives you instant results as long as you have a domain user account. I've just added a collector which can be run on member machines (this is probably more a blue team thing rather than a red team?). It grabs lots of information about computers, and this can be loaded into adalanche to show you who are local admins, can RDP onto systems or do DCOM to a system. It also uses a novel way to figure out who logged on and when, without requiring auditing to be set up or access to the security event log. So it can be run without admin privs - but ofcourse you need some sort of way to get it to run on lots of computers, thus it's probably more for the blue side. If you wan't to play around with it, you can grab binaries from here: https://github.com/lkarlslund/adalanche/actions/runs/1198052978 Basically you will run the adalanche-collector.exe on a system and provide the "-outputpath" parameter with a centralized path to dump the information. The run adalanche analyze like normally with the -collectorpath pointing to the JSON files you just produced. In the JSON files are also information about shares, software inventory etc. so I'll add more analysis to this when I have the time. It can then be used to find interesting shares without having to network scan for them and find high value targets from the software inventory (SCCM for example). I'd love feedback if you try this in the real world :-) Have a nice weekend! submitted by /u/lkarlslund (https://www.reddit.com/user/lkarlslund)
[link] (https://www.reddit.com/r/redteamsec/comments/ph4s1t/adalanche_now_with_machine_collector/) [comments] (https://www.reddit.com/r/redteamsec/comments/ph4s1t/adalanche_now_with_machine_collector/)

___________________________
@hacking_Attack
@Hacking_Video

MobileAudit - SAST and Malware Analysis for Android Mobile APKs
http://www.kitploit.com/2021/09/mobileaudit-sast-and-malware-analysis.html

___________________________
@hacking_Attack
@Hacking_Video

Django Web application for performing Static Analysis (https://www.kitploit.com/search/label/Static%20Analysis) and detecting malware in Android APKs

___________________________
@hacking_Attack
@Hacking_Video

In each of the scans, it would have the following information:Application InfoSecurity InfoComponentsSAST FindingsBest Practices ImplementedVirus Total InfoCertificate InfoStringsDatabasesFiles

___________________________
@hacking_Attack
@Hacking_Video

For easy access there is a sidebar on the left page of the scan:

___________________________
@hacking_Attack
@Hacking_Video

Components

___________________________
@hacking_Attack
@Hacking_Video