Hacking on Medium
“Defend the Web” write-up (Crypt3 / Crypt — decoding morse code)

https://cdn-images-1.medium.com/max/1024/1*uDBACgKbg8VFoHb2warn4w.jpeg
This challenge is a little bit interesting. The developers gave us a clue, which is an encrypted text message that incorporates the…

Continue reading on Purple TEAM »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Hub Weekly Digest: Quantum-Resistant Encryption, FirstEnergy, Accellion Data Hack and North Korean…

https://cdn-images-1.medium.com/max/2600/1*pGPDIXCumwp5JgVIU0aX5g.jpeg
HUB Security’s weekly digest covers top stories happening around the world related to cyber attacks, threats and global cybersecurity news.

Continue reading on HUB Security »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
website designer vs website developer — Knowledge World

https://cdn-images-1.medium.com/max/600/0*5YK6YRi0Z9gL_Bx-
Welcome to the discussion of Front and Development vs. Back and Development, we will try to understand it with a real-life example…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Ontology’s EVM TestNet Officially Deployed, Now Opening EVM-Compatible Public Beta to Developers
https://medium.com/ontologynetwork/ontologys-evm-testnet-officially-deployed-now-opening-evm-compatible-public-beta-to-developers-6dddc2bdd764?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Earn rewards for participating in Ontology’s security vulnerabilities and threat intelligence bounty programme — top prize: $12,000 of ONG!Continue reading on OntologyNetwork » (https://medium.com/ontologynetwork/ontologys-evm-testnet-officially-deployed-now-opening-evm-compatible-public-beta-to-developers-6dddc2bdd764?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
Graphw00F - GraphQL fingerprinting tool for GQL endpoints

http://4.bp.blogspot.com/-mgJcIbjF0LM/YTVRrKYUQkI/AAAAAAAAubs/eINIxgmCJcs1v799iIzhKIoGGxS7L-i-wCK4BGAYYCw/s320/graphw00f_1_graphw00f-759654.png Credits to Nick Aleks for the logo!How does it work?graphw00f (inspired by wafw00f) is the GraphQL fingerprinting tool for GQL endpoints, it sends a mix of benign and malformed queries to determine the GraphQL engine running behind the scenes. graphw00f will provide insights into what security defences each technology provides out of the box, and whether they are on or off by default.

Specially crafted queries cause different GraphQL server implementations to respond uniquely to queries, mutations and subscriptions, this makes it trivial to fingerprint the backend engine and distinguish between the various GraphQL implementations. (CWE: CWE-200) Detectionsgraphw00f currently attempts to discover the following GraphQL engines:

* Graphene - Python
* Ariadne - Python
* Apollo - TypeScript
* graphql-go - Go
* gqlgen - Go
* WPGraphQL - PHP
* GraphQL API for Wordpress - PHP
* Ruby - GraphQL
* graphql-php - PHP
* Hasura - Haskell
* HyperGraphQL - Java
* graphql-java - Java
* Juniper - Rust
* Sangria - Scala
* Flutter - Dart
* Diana.jl - Julia
* Strawberry - Python
* Tartiflette - Python GraphQL Technologies Defence MatricesEach fingerprinted technology (e.g. Graphene, Ariadne, ...) has an associated document (example for graphene) which covers the security defence mechanisms the specific technology supports to give a better idea how the implementation may be attacked. | Field Suggestions | Query Depth Limit | Query Cost Analysis | Automatic Persisted Queries | Introspection | Debug Mode | Batch Requests |
|-------------------|-------------------|---------------------|-----------------------------|--------------------|------------|-----------------|
| On by Default | No Support | No Support | No Support | Enabled by Default | N/A | Off by Default | Prerequisites* python3
* requests InstallationClone Repositorygit clone git@github.com:dolevf/graphw00f.gitRun graphw00fpython3 main.py -hUsage: main.py -h

Options:
-h, --help show this help message and exit
-r, --noredirect Do not follow redirections given by 3xx responses
-t URL, --target=URL target url with the path
-o OUTPUT_FILE, --output-file=OUTPUT_FILE
Output results to a file (CSV)
-l, --list List all GraphQL technologies graphw00f is able to
detect
-v, --version Print out the current version and exit. Examplepython3 main.py -t http://127.0.0.1:5000/graphql

+-------------------+
| graphw00f |
+-------------------+
*** ***
** ***
** **
+--------------+ +--------------+
| Node X | | Node Y |
+--------------+ +--------------+
*** ***
** **
** **
+------------+
| Node Z |
+------------+

graphw00f - v1.0.0
The fingerprinting tool for GraphQL

[*] Checking if GraphQL is available at https://demo.hypergraphql.org:8484/graphql...
[*] Found GraphQL...
[*] Attempting to fingerprint...
[*] Discovered GraphQL Engine: (HyperGraphQL)
[!] Attack Surface Matrix: https://github.com/dolevf/graphw00f/blob/main/docs/hypergraphql.md
[!] Technologies: Java
[!] Homepage: https://www.hypergraphql.org
[*] Completed. Support and IssuesAny issues with graphw00f such as false positives, inaccurate detections, bugs, etc. please create a GitHub issue with environment details. ResourcesWant to learn more about GraphQL? head over [...]

___________________________
@hacking_Attack
@Hacking_Video

to my other project and hack GraphQL away: Damn Vulnerable GraphQL Application Download Graphw00F

___________________________
@hacking_Attack
@Hacking_Video

How I Was Able to delete any facebook story where am I mentioned or tagged
https://sank-dahal.medium.com/how-i-was-able-to-delete-any-facebook-story-where-am-i-mentioned-or-tagged-10c38a50e55c?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hello readers,Continue reading on Medium » (https://sank-dahal.medium.com/how-i-was-able-to-delete-any-facebook-story-where-am-i-mentioned-or-tagged-10c38a50e55c?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
LazySign – Create Fake Certs For Binaries Using Windows Binaries And The Power Of Bat Files

LazySign create fake certs for binaries using windows binaries and the power of bat files

Over the years, several cool tools have been released that are capable of stealing or forging fake signatures for binary files. All of these tools however, have additional dependencies which require Go,python,…

This repo gives you the opportunity of fake signing with 0 additional dependencies, all of the binaries used are part of Microsoft’s own devkits. I took the liberty of writing a bat file to make things easy.

So if you are lazy like me, just clone the git, run the bat, follow the instructions and enjoy your new fake signed binary. With some adjustments it could even be used to sign using valid certs as well.
Download

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Brutus : An Educational Exploitation Framework Shipped On A Modular And Highly Extensible Multi-Tasking And Multi-Processing Architecture

Brutus is an educational exploitation framework shipped on a modular and highly extensible multi-tasking and multi-processing architecture.

Introduction

Looking for version 1? See the branches in this repository.

Brutus is an educational exploitation framework written in Python. It automates pre and post-connection network-based exploits, as well as web-based reconnaissance. As a light-weight framework, Brutus aims to minimize reliance on third-party dependencies. Optimized for Kali Linux, Brutus is also compatible with macOS and most Linux distributions, featuring a fully interactive command-line interface and versatile plugin system.

Brutus features a highly-extensible, modular architecture. The included exploits (plugins layer) consists of several decoupled modules that run on a ‘tasking layer’ comprised of thread pools and thread-safe, async queues (whichever is most appropriate for the given module). The main thread runs atop a multi-processing pool that manages app context and dispatches new processes so tasks can run in the background, in separate shells, etc.

The UI layer is also decoupled and extensible. By default, Brutus ships with a menu-based command-line interface UI but there’s no reason you can’t add adapters for a GUI, an argument parser, or even an HTTP API or remote procedure call.

Last, Brutus has a utility layer with common faculties for file-system operations, shell (terminal emulator) management, persistence methods, and system metadata.

If you’re just interested in some Python hacking, feel free to pull the scripts directly – each module can be invoked standalone. Demos

Web Scanning and Payload Compilation Demo: watch mp4
https://1.bp.blogspot.com/-AaOov52IxQw/YSXN04yO6FI/AAAAAAAAKjo/5E5XMCyouYogTG24z5sDRKb4vUDYkItDACLcBGAsYHQ/s1280/brutus_demo1.gif
Installation

You will probably want the following dependencies:

* sslstrip
* pipenv

Brutus is optimized for Kali Linux. There’s lots of information online about how to run Kali Linux in a VM.

To install:

pipenv install

Usage

Run:

pipenv run brutus

Test:

pipenv run test

Lint:

pipenv run lint

Setup Git Hooks for Development:

pipenv run setup

Feel free to open PRs with feature proposals, bugfixes, et al. Note that much of this project is still in progress. The base is there and ready for you to build upon. Brutus: Features and Included Modules

Brutus includes several modules which can be generalized as belonging to three macro-categories: network-based, web-based, and payloads. The latter category is a library of compilers and accompanying payloads – payloads can be compiled via Brutus’ interactive command-line menu; compiled payloads can subsequently be loaded into many of Brutus’ applicable network-based modules.

The base layer of Brutus utilizes POSIX threads for concurrent multi-tasking. Some modules – i.e. essentially anything heavily I/O bound – instead utilize Python’s async I/O libraries and run on an abstraction atop Python’s default event loop.

Included Utilities/Scripts

* IP Table Management
* Downgrade HTTPS to HTTP
* Enable Monitor Mode
* Enable Port Forwarding
* Keylogger Documentation 48-bit MAC Address Changer (view source)

NOTE: This tool is for 48-bit MACs, with a %02x default byte format.

MAC (Media Access Control) is a permanent, physical, and unique address assigned to network interfaces by device manufacturers. This means even your wireless card, for instance, has its own unique MAC address.

The MAC address, analogous to an IP on the internet, is utilized within a network in order to facilitate the proper delivery of resources and data (i.e. packets). An interaction will generally consist of a source MAC and a dest[...]

___________________________
@hacking_Attack
@Hacking_Video

ination MAC. MAC addresses can identify you, be filtered, or otherwise access-restricted.

Important to note is these unique addresses are not ephemeral; they are persistent and will remain associated with a device were a user to install it in another machine. But the two don’t have to be inextricably intertwined…

This module will accept as user-input any given wireless device and any valid MAC address to which the user wishes to reassign said device. The program is simple such that I need not explain it much further: it utilizes the subprocess module to automate the sequence of the necessary shell commands to bring the wireless interface down, reassign the MAC, and reinitialize it.

If you are actively changing your MAC address, it might be prudent to have some sort of validation structure or higher order method to ensure that 1) the wireless device exists, 2) the wireless device accommodates a MAC address, 3) the user-input MAC address is of a valid format, and 4) the wireless device’s MAC address has successfully been updated. This tool automates these functions.

By selecting the ‘generate’ option in lieu of a specific MAC address, the program will generate a valid MAC address per IEEE specifications. I’m excited to have implemented extended functionality for generating not only wholly random (and valid) MAC addresses, but MAC addresses which either begin with a specific vendor prefix (OUI), or are generated with multicast and/or UAA options. These options trigger byte-code logic in the generator method, which are augmented per IEEE specifications. Learn more about MAC addresses here. ARP-Based Network Scanner (view source)

The network scanner is another very useful tool, and a formidable one when used in conjunction with the aforementioned MAC changer. This scanner utilizes ARP request functionality by accepting as user input a valid ipv4 or ipv6 IP address and accompanying – albeit optional – subnet range.

The program then takes the given IP and/or range, then validates them per IEEE specifications (again, this validation is run against ipv4 and ipv6 standards). Finally, a broadcast object is instantiated with the given IP and a generated ethernet frame; this object returns to us a list of all connected devices within the given network and accompanying range, mapping their IPs to respective MAC addresses.

The program outputs a table with these associations, which then might be used as input for the MAC changer should circumstances necessitate it. Automated ARP Spoofing (view source)

The ARP Spoof module enables us to redirect the flow of packets in a given network by simultaneously manipulating the ARP tables of a given target client and its network’s gateway. This module auto-enables port forwarding during this process, and dynamically constructs and sends ARP packets.

When the module is terminated by the user, the targets’ ARP tables are reset, so as not to leave the controller in a precarious situation (plus, it’s the nice thing to do).

Because this process places the controller in the middle of the packet-flow between the client and AP, the controller therefore has access to all dataflow (dealing with potential encryption of said data is a task for another script). From here, the myriad options for packet-flow orchestration become readily apparent: surrogation of code by way of automation and regular expressions, forced redirects, remote access, et al. Fortunately, Brutus can automate this, too. HTTP Packet Sniffer (view source)

The packet sniffer is an excellent module to employ after running the ARP Spoofer; it creates a dataflow of all intercepted HTTP packets’ data which includes either URLs, or possible user credentials.

The script is extensible and can accommodate a variety of protocols by instantiating the listener object with one of many available filters. Note that Brutus automatically downgrades HTTPS, so unless HSTS is involved, the dataflow should be viable for r[...]

___________________________
@hacking_Attack
@Hacking_Video

econnaissance. Download

___________________________
@hacking_Attack
@Hacking_Video