hacking: security in practice
Is it possible to retrieve passwords from keychain?
So the other day I had to bring my iPhone to get fixed and the repair guy asked me my unlock number in order to check something with settings; now not to be paranoid but I was wondering, if I'm not wrong that number gives you access to the apple passwords keychain (as an alternative to fingerprint access), is there anyway they could have back-up my passwords on their laptop or something?
submitted by /u/lorenzo_6991
[link] [comments]
Is it possible to retrieve passwords from keychain?
So the other day I had to bring my iPhone to get fixed and the repair guy asked me my unlock number in order to check something with settings; now not to be paranoid but I was wondering, if I'm not wrong that number gives you access to the apple passwords keychain (as an alternative to fingerprint access), is there anyway they could have back-up my passwords on their laptop or something?
submitted by /u/lorenzo_6991
[link] [comments]
reddit
Is it possible to retrieve passwords from keychain?
So the other day I had to bring my iPhone to get fixed and the repair guy asked me my unlock number in order to check something with settings; now...
hacking: security in practice
Australian Hacking Law Violates Privacy
Hey Aussies on here, I don’t know if there’s been discussion of this on this subreddit, but the Aus government just passed the “Surveillance Legislation Amendment (Identify and Disrupt) Act 2021”.
The act allows the Federal Police and ACIC to delete, modify, copy and add to data as well as take over people’s accounts, networks and devices as they see fit — meaning they can track everything one does online, and potentially falsify evidence. Because of all the news about covid, the news of this act seems to have passed under everyone’s radar. But making it so easy to get permission to do this really opens it up to be taken advantage of
submitted by /u/rainbowTableAndChair
[link] [comments]
Australian Hacking Law Violates Privacy
Hey Aussies on here, I don’t know if there’s been discussion of this on this subreddit, but the Aus government just passed the “Surveillance Legislation Amendment (Identify and Disrupt) Act 2021”.
The act allows the Federal Police and ACIC to delete, modify, copy and add to data as well as take over people’s accounts, networks and devices as they see fit — meaning they can track everything one does online, and potentially falsify evidence. Because of all the news about covid, the news of this act seems to have passed under everyone’s radar. But making it so easy to get permission to do this really opens it up to be taken advantage of
submitted by /u/rainbowTableAndChair
[link] [comments]
reddit
Australian Hacking Law Violates Privacy
Hey Aussies on here, I don’t know if there’s been discussion of this on this subreddit, but the Aus government just passed the “Surveillance...
hacking: security in practice
protecting myself on network
Hi guys, im currently working on a network with a few colleagues. I suspect that they might want to gain access to my system. How can I protect myself? What would be the best practices I can carry out to ensure I am protected an won't be able to get hacked. I also want to stop my system showing up on Nmap scans. Any idea how I can do this? Would appreciate any an all feedback, thank you.
submitted by /u/messi1_0-
[link] [comments]
protecting myself on network
Hi guys, im currently working on a network with a few colleagues. I suspect that they might want to gain access to my system. How can I protect myself? What would be the best practices I can carry out to ensure I am protected an won't be able to get hacked. I also want to stop my system showing up on Nmap scans. Any idea how I can do this? Would appreciate any an all feedback, thank you.
submitted by /u/messi1_0-
[link] [comments]
reddit
protecting myself on network
Hi guys, im currently working on a network with a few colleagues. I suspect that they might want to gain access to my system. How can I protect...
Bug Bounty Programs: Why it’s considered a hassle and what you can do about it
https://medium.com/ssd-secure-disclosure/bug-bounty-programs-why-its-considered-a-hustle-and-what-you-can-do-about-it-6954a8aaa106?source=rss------bug_bounty-5
https://medium.com/ssd-secure-disclosure/bug-bounty-programs-why-its-considered-a-hustle-and-what-you-can-do-about-it-6954a8aaa106?source=rss------bug_bounty-5
Disclosure and bug bounty programs could sometimes be a double-edged sword. These services could help you avoid the hassle of contacting a…Continue reading on SSD Secure Disclosure » (https://medium.com/ssd-secure-disclosure/bug-bounty-programs-why-its-considered-a-hustle-and-what-you-can-do-about-it-6954a8aaa106?source=rss------bug_bounty-5)
Deep Web
Find Twitter hacker?
Probably don’t even need the deep web for this, willing to pay for a hacker to change the username of an eight year old inactive account, or just delete the account completely.
Will send half only after proving the account is compromised (such as changing profile picture), then the other half after it’s done
No ifs and or buts, just as simple as that
submitted by /u/paceysmailbox
[link] [comments]
Find Twitter hacker?
Probably don’t even need the deep web for this, willing to pay for a hacker to change the username of an eight year old inactive account, or just delete the account completely.
Will send half only after proving the account is compromised (such as changing profile picture), then the other half after it’s done
No ifs and or buts, just as simple as that
submitted by /u/paceysmailbox
[link] [comments]
reddit
Find Twitter hacker?
Probably don’t even need the deep web for this, willing to pay for a hacker to change the username of an eight year old inactive account, or just...
Deep Web
Dark.fail
Is it not working for anyone else? I haven’t gotten it to work in forever
submitted by /u/MudMuddington
[link] [comments]
Dark.fail
Is it not working for anyone else? I haven’t gotten it to work in forever
submitted by /u/MudMuddington
[link] [comments]
reddit
Dark.fail
Is it not working for anyone else? I haven’t gotten it to work in forever
Why Blackhats Are Becoming Whitehats
More and more blackhats in DeFi hacking are turning whitehat, and the reason why is simple: whitehats become heroes for responsibly…Continue reading on Immunefi »
Read more...
More and more blackhats in DeFi hacking are turning whitehat, and the reason why is simple: whitehats become heroes for responsibly…Continue reading on Immunefi »
Read more...
Bug Bounty Programs: Why it’s considered a hassle and what you can do about it
Disclosure and bug bounty programs could sometimes be a double-edged sword. These services could help you avoid the hassle of contacting a…Continue reading on SSD Secure Disclosure »
Read more...
Disclosure and bug bounty programs could sometimes be a double-edged sword. These services could help you avoid the hassle of contacting a…Continue reading on SSD Secure Disclosure »
Read more...
Hacking Articles Tips Tricks Videos Tutorials
Photo
KitPloit - PenTest Tools!
Gokart - A Static Analysis Tool For Securing Go Code
http://1.bp.blogspot.com/-LgAYgiHc1f0/YTVLE6UiY2I/AAAAAAAAt2c/69N7EVO6s-Id70PXqgFkbjB_jFP4vY8OwCK4BGAYYCw/w640-h462/gokart_1_logo-770328.png
GoKart is a static analysis tool for Go that finds vulnerabilities using the SSA (single static assignment) form of Go source code. It is capable of tracing the source of variables and function arguments to determine whether input sources are safe, which reduces the number of false positives compared to other Go security scanners. For instance, a SQL query that is concatenated with a variable might traditionally be flagged as SQL injection; however, GoKart can figure out if the variable is actually a constant or constant equivalent, in which case there is no vulnerability.
Why We Built GoKart
Static analysis is a powerful technique for finding vulnerabilities in source code. However, the approach has suffered from being noisy - that is, many static analysis tools find quite a few "vulnerabilities" that are not actually real. This has led to developer friction as users get tired of the tools "crying wolf" one time too many.
The motivation for GoKart was to address this: could we create a scanner with significantly lower false positive rates than existing tools? Based on our experimentation the answer is yes. By leveraging source-to-sink tracing and SSA, GoKart is capable of tracking variable taint between variable assignments, significantly improving the accuracy of findings. Our focus is on usability: pragmatically, that means we have optimized our approaches to reduce false alarms.
For more information, please read our blog post.
Install
You can install GoKart locally by using any one of the options listed below.
Install with
Install a release binary
1.
Download the binary for your OS from the releases page.
2.
(OPTIONAL) Download the
Gokart - A Static Analysis Tool For Securing Go Code
http://1.bp.blogspot.com/-LgAYgiHc1f0/YTVLE6UiY2I/AAAAAAAAt2c/69N7EVO6s-Id70PXqgFkbjB_jFP4vY8OwCK4BGAYYCw/w640-h462/gokart_1_logo-770328.png
GoKart is a static analysis tool for Go that finds vulnerabilities using the SSA (single static assignment) form of Go source code. It is capable of tracing the source of variables and function arguments to determine whether input sources are safe, which reduces the number of false positives compared to other Go security scanners. For instance, a SQL query that is concatenated with a variable might traditionally be flagged as SQL injection; however, GoKart can figure out if the variable is actually a constant or constant equivalent, in which case there is no vulnerability.
Why We Built GoKart
Static analysis is a powerful technique for finding vulnerabilities in source code. However, the approach has suffered from being noisy - that is, many static analysis tools find quite a few "vulnerabilities" that are not actually real. This has led to developer friction as users get tired of the tools "crying wolf" one time too many.
The motivation for GoKart was to address this: could we create a scanner with significantly lower false positive rates than existing tools? Based on our experimentation the answer is yes. By leveraging source-to-sink tracing and SSA, GoKart is capable of tracking variable taint between variable assignments, significantly improving the accuracy of findings. Our focus is on usability: pragmatically, that means we have optimized our approaches to reduce false alarms.
For more information, please read our blog post.
Install
You can install GoKart locally by using any one of the options listed below.
Install with
go install$ go install github.com/praetorian-inc/gokart@latestInstall a release binary
1.
Download the binary for your OS from the releases page.
2.
(OPTIONAL) Download the
checksums.txtfile to verify the integrity of the archive# Check the checksum of the downloaded archive
$ shasum -a 256 gokart_${VERSION}_${ARCH}.tar.gz
b05c4d7895b[...]
Hacking Articles Tips Tricks Videos Tutorials
Photo
Kali Linux TutorialsDorkify : Perform Google Dork Search
Dorkify perform Google Dork Search. Google dorking is a hacker technique that uses Google Search to find security holes in the configuration and computer code that websites use. Google Dorking involves using advanced operators in the Google search engine to locate specific strings of text within search results such as finding specific versions of vulnerable Web applications. Users can utilize commands to get other specific search results.
MENU
* Google Search
* URL Search
* Books
* Music Downloads
* Information
* Dork Hacks!
Features
Dorkify can :
* Perfom a (Google/URL) search
* Find specific link with keywords in URL/Title/Website
* Search for Books
* Extract mp3/mp4 download links
* Perform deep scan on definitions and informations
* Get details on Stocks/Maps/Weather
* Find vulnerable WordPress sites
* Search for Usernames and Password list
* Find vulnerable Web servers
* Find vulnerable CCTV’s
* Find open FTP Servers
More features with stronger results will come out in v 2.21
INSTALLATION
Python 3.6 or higher is required
git clone https://github.com/hhhrrrttt222111/Dorkify.git
cd Dorkify
python3 -m pip install -r requirements.txt
USAGE
python3 dorkify.py –help
usage: dorkify.py [-h]
[–cli | –wp | –up | –cam |
–ftp | -v | -s SEARCH |
-b BOOK | -mu MUSIC | -m MAPS |
-w WEATHER | -i INFO | -d DEFINE |
-st STOCKS | –intitle INTITLE |
–inurl INURL | –site SITE]
optional arguments:
-h, –help show this help message and exit
–cli Run the Command Line version of Dorkify
–wp WordPress sites vulnerabilities
–up Find vulnerable Usernames and Passwords
–cam Find vulnerable CCTV cameras
–ftp Find open FTP Servers
-v, –version Version
-s SEARCH, –search SEARCH
Do a Google search
-b BOOK, –book BOOK Search for a book or author
-mu MUSIC, –music MUSIC
Search for songs or artists
-m MAPS, –maps MAPS Find maps of a city
-w WEATHER, –weather WEATHER
Check weather of a city
-i INFO, –info INFO Get Information
-d DEFINE, –define DEFINE
Define a term
-st STOCKS, –stocks STOCKS
Search for Stock of a company with Ticker value
–intitle INTITLE Search for a keywords in website title
–inurl INURL Search for a keywords in website URL
–site SITE Search for a Site
Run Dorkify
python3 dorkify.py –cli
Download
Dorkify perform Google Dork Search. Google dorking is a hacker technique that uses Google Search to find security holes in the configuration and computer code that websites use. Google Dorking involves using advanced operators in the Google search engine to locate specific strings of text within search results such as finding specific versions of vulnerable Web applications. Users can utilize commands to get other specific search results.
MENU
* Google Search
* URL Search
* Books
* Music Downloads
* Information
* Dork Hacks!
Features
Dorkify can :
* Perfom a (Google/URL) search
* Find specific link with keywords in URL/Title/Website
* Search for Books
* Extract mp3/mp4 download links
* Perform deep scan on definitions and informations
* Get details on Stocks/Maps/Weather
* Find vulnerable WordPress sites
* Search for Usernames and Password list
* Find vulnerable Web servers
* Find vulnerable CCTV’s
* Find open FTP Servers
More features with stronger results will come out in v 2.21
INSTALLATION
Python 3.6 or higher is required
git clone https://github.com/hhhrrrttt222111/Dorkify.git
cd Dorkify
python3 -m pip install -r requirements.txt
USAGE
python3 dorkify.py –help
usage: dorkify.py [-h]
[–cli | –wp | –up | –cam |
–ftp | -v | -s SEARCH |
-b BOOK | -mu MUSIC | -m MAPS |
-w WEATHER | -i INFO | -d DEFINE |
-st STOCKS | –intitle INTITLE |
–inurl INURL | –site SITE]
optional arguments:
-h, –help show this help message and exit
–cli Run the Command Line version of Dorkify
–wp WordPress sites vulnerabilities
–up Find vulnerable Usernames and Passwords
–cam Find vulnerable CCTV cameras
–ftp Find open FTP Servers
-v, –version Version
-s SEARCH, –search SEARCH
Do a Google search
-b BOOK, –book BOOK Search for a book or author
-mu MUSIC, –music MUSIC
Search for songs or artists
-m MAPS, –maps MAPS Find maps of a city
-w WEATHER, –weather WEATHER
Check weather of a city
-i INFO, –info INFO Get Information
-d DEFINE, –define DEFINE
Define a term
-st STOCKS, –stocks STOCKS
Search for Stock of a company with Ticker value
–intitle INTITLE Search for a keywords in website title
–inurl INURL Search for a keywords in website URL
–site SITE Search for a Site
Run Dorkify
python3 dorkify.py –cli
Download
Hacking Articles Tips Tricks Videos Tutorials
Photo
Kali Linux TutorialsBeaconEye : Hunts Out CobaltStrike Beacons And Logs Operator Command Output
BeaconEye scans running processes for active Cobalt Strike beacons. When processes are found to be running beacon, BeaconEye will monitor each process for C2 activity.
How It Works
BeaconEye will scan live processes or MiniDump files for suspected CobaltStrike beacons. In live process mode, BeaconEye optionally attaches itself as a debugger and will begin monitoring beacon activity for C2 traffic (HTTP/HTTPS beacons supported currently).
The AES keys used for encrypting C2 data and mallable profile are decoded on the fly, which enables BeaconEye to extract and decrypt beacon’s output when commands are sent via the operator.
A log folder of activity is created per process relative to the current directory where BeaconEye is executed from.
Usage
BeconEye by @EthicalChaos
CobaltStrike beacon hunter and command monitoring tool x86_64
-v, –verbose Display more verbose output instead of just
information on beacons found
-m, –monitor Attach to and monitor beacons found when scanning
live processes
-f, –filter=VALUE Filter process list with names starting with x (
live mode only)
-d, –dump=VALUE A folder to use for MiniDump mode to scan for
beacons (files with *.dmp or *.mdmp)
-h, –help Display this help
Features
* A per process log folder
* Dumps beacon config
* Displays output from most beacon commands
* Saves screenshots
* Detects standalone and injected beacons
* Detects beacons masked with built in
* Scan running processes or Minidumps offline
Caveats
BeaconEye can detect all beacon types but only monitor HTTP/HTTPS beacons. At present, only command output is decoded and not command requests. See TODO list below for a full list of intended features.
BeaconEye should be considered ALPHA, I’m keen to get feedback on 4.x beacons that cannot be detected or where the malleable C2 profile has not been parsed correctly resulting in incorrect decoding of output.
Download
BeaconEye scans running processes for active Cobalt Strike beacons. When processes are found to be running beacon, BeaconEye will monitor each process for C2 activity.
How It Works
BeaconEye will scan live processes or MiniDump files for suspected CobaltStrike beacons. In live process mode, BeaconEye optionally attaches itself as a debugger and will begin monitoring beacon activity for C2 traffic (HTTP/HTTPS beacons supported currently).
The AES keys used for encrypting C2 data and mallable profile are decoded on the fly, which enables BeaconEye to extract and decrypt beacon’s output when commands are sent via the operator.
A log folder of activity is created per process relative to the current directory where BeaconEye is executed from.
Usage
BeconEye by @EthicalChaos
CobaltStrike beacon hunter and command monitoring tool x86_64
-v, –verbose Display more verbose output instead of just
information on beacons found
-m, –monitor Attach to and monitor beacons found when scanning
live processes
-f, –filter=VALUE Filter process list with names starting with x (
live mode only)
-d, –dump=VALUE A folder to use for MiniDump mode to scan for
beacons (files with *.dmp or *.mdmp)
-h, –help Display this help
Features
* A per process log folder
* Dumps beacon config
* Displays output from most beacon commands
* Saves screenshots
* Detects standalone and injected beacons
* Detects beacons masked with built in
sleep_mask* Scan running processes or Minidumps offline
Caveats
BeaconEye can detect all beacon types but only monitor HTTP/HTTPS beacons. At present, only command output is decoded and not command requests. See TODO list below for a full list of intended features.
BeaconEye should be considered ALPHA, I’m keen to get feedback on 4.x beacons that cannot be detected or where the malleable C2 profile has not been parsed correctly resulting in incorrect decoding of output.
Download