hacking: security in practice
Future of binary exploitation

Hello! I'm starting to learn about binary exploitation and 0day development. I have learned about stackoverflows, ASLR, DEP, stack cookies and so on... But then I came across this video:
https://www.youtube.com/watch?v=o_hk9nh8S1M
I was very motivated by the subject, but after watching that video, I really don't know if it is worth the effort to keep learning about this.
Do you think that memory corrumption techniques will disappear completely in the future? What about binary exploitation and 0day development in general? Will it completly disappear?
And by binary exploitation I mean this exploits that hackers use in chrome, ios, safari, etc. To gain remote code execution without user interaction.
Thanks.

submitted by /u/PuzzledWhereas991
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Base has been Pwned!


This is the final machine of the Starting Point category on Hack The Box.

Continue reading on Geek Culture »

Hacking on Medium
ICYMI: Security and ATOs…

https://cdn-images-1.medium.com/max/1242/1*Abg0R34-0ek4A9Vczg9NwA.png
ICYMI is an ongoing series of blog posts memorializing important Twitter threads from thought leaders at Coinbase and beyond. In this…

Continue reading on The Coinbase Blog »

___________________________
@hacking_Attack
@Hacking_Video

Do you share every single findings to stakeholder?
https://www.reddit.com/r/redteamsec/comments/pohpm0/do_you_share_every_single_findings_to_stakeholder/

Taken from rapid7 (https://www.rapid7.com/blog/post/2016/06/23/penetration-testing-vs-red-teaming-the-age-old-debate-of-pirates-vs-ninja-continues/) The goal of the Red Team Assessment is NOT to find as many vulnerabilities as possible. The goal is to test the organization's detection and response capabilities. Question is, do you share every single findings that you have in Red Team Assessment? Or do you keep some of them to be used in the following exercise later? submitted by /u/w0lfcat (https://www.reddit.com/user/w0lfcat)
[link] (https://www.reddit.com/r/redteamsec/comments/pohpm0/do_you_share_every_single_findings_to_stakeholder/) [comments] (https://www.reddit.com/r/redteamsec/comments/pohpm0/do_you_share_every_single_findings_to_stakeholder/)

___________________________
@hacking_Attack
@Hacking_Video

How to "hack" Roku TVs in 5 minutes!
https://www.reddit.com/r/Pentesting/comments/pojdsq/how_to_hack_roku_tvs_in_5_minutes/

___________________________
@hacking_Attack
@Hacking_Video

submitted by /u/entropydaemon3 (https://www.reddit.com/user/entropydaemon3)
[link] (https://github.com/Kleptocratic/Abusing-Roku-APIs) [comments] (https://www.reddit.com/r/Pentesting/comments/pojdsq/how_to_hack_roku_tvs_in_5_minutes/)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
What is Vulnerability Assessment and Penetration Testing (VAPT)?


Technology is spreading its wings to provide a profusion of opportunities. We have millions of smart, interconnected devices and complex…

Continue reading on Medium »

hacking: security in practice
How does one find their leaked passwords from HaveIBeenpwned?

I'm trying to recover an old blockchain.com account. I cannot for the life of me remember the password I used at the time and because of how the site is set up I cannot verify as they don't store the passwords. I've noticed my email in a few leaks on HaveIbeenpwned and some of the sites listed I'm pretty sure the password would be the same or a variation on it.

So yeah, how does one go about finding these password lists?

submitted by /u/toomanynamesaretook
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
An Introduction to HTTP Protocol


HTTP — HyperText Transfer Protocol — is a stateless protocol, working on the application layer. It is the backbone of the internet. It…

Continue reading on Medium »

Hacking on Medium
Shell Scripting: Getting started with shell scripting


Hey, everyone! In this blog, we will learn about something that interests many of us: Shell Scripting.

Continue reading on Medium »

Hacking on Medium
GTA San Andreas | Grand Theft Auto San Andreas Mod Apk


GTA San Andreas is also a best experience action game that was launched in 2004 which was created by Rockstar north And this game was…

Continue reading on Medium »

Hacking on Medium
Snapchat Mod Apk Premium Unlocked


Snapchat Mod Apk is a social application and is additionally accessible for Android. Assuming that you want to prank and second propose…

Continue reading on Medium »

Rootend - A \Nix Enumerator And Auto Privilege Escalation Tool

rootend is a python \nix Enumerator & Auto Privilege Escalation tool. For a full list of our tools, please visit our website https://www.twelvesec.com/ Written by: nickvourd (twitter) maldevel (twitter) servoUsage Enumeration & Automation Privilege Escalation tool. rootend is an open source tool licensed under GPLv3. Affected systems: *nix. Written by: @nickvourd of @twelvesec. Special thanks to @maldevel & servo. https://www.twelvesec.com/ Please visit https://github.com/twelvesec/rootend for more.. optional arguments: -h, --help show this help message and exit -v, --version show version and exit -a, --auto automated privilege escalation process -m, --manual system enumeration -n, --nocolor disable color -b, --banner show banner and exit -s, --suid suid binary enumeration -w, --weak weak permissions of files enumeration -p, --php PHP configuration files enumeration -c, --capabilities capabilities enumeration -f, --full-writables world writable files enumeration usage examples: ./rootend.py -a ./rootend.py -m ./rootend.py -v ./rootend.py -b Specific categories usage examples: ./rootend.py -a -s ./rootend.py -m -w ./rootend.py -a -s -p ./rootend.py -m -w -c -p ./rootend.py -a -s -c -p -f *Use the above arguments with -n to disable color. ">_ ._ _ \_ _/_ _ _ _ | |_ _ _ / _/ _ _ | | \ \/ \/ // _ \| |\ \/ // _ \ \_ \_/ _ \_/ _\ | | \ /\ _/| |_\ /\ _/ / \ _/\ \_ |_| \/\_/ \_ >_/\_/ \_ >_ /\_ >\_ > \/ \/ \/ \/ \/ rootend v.2.0.2 - Enumeration & Automation Privilege Escalation tool.rootend is an open source tool licensed under GPLv3.Affected systems: *nix.Written by: @nickvourd of @twelvesec.Special thanks to @maldevel & servo.https://www.twelvesec.com/Please visit https://github.com/twelvesec/rootend for more..optional arguments: -h, --help show this help message and exit -v, --version show version and exit -a, --auto automated privilege escalatio n process -m, --manual system enumeration -n, --nocolor disable color -b, --banner show banner and exit -s, --suid suid binary enumeration -w, --weak weak permissions of files enumeration -p, --php PHP configuration files enumeration -c, --capabilities capabilities enumeration -f, --full-writables world writable files enumerationusage examples: ./rootend.py -a ./rootend.py -m ./rootend.py -v ./rootend.py -bSpecific categories usage examples: ./rootend.py -a -s ./rootend.py -m -w ./rootend.py -a -s -p ./rootend.py -m -w -c -p ./rootend.py -a -s -c -p -f *Use the above arguments with -n to disable color. Version 2.0.2 Supports Python 2.x Python 3.x Tested on Python 2.7.18rc1 Python 3.8.2 Modes Manual Auto Exploitation Categories Suid Binaries: General Suids Suids for reading files Suids for creating file as root Limited Suids Custom Suids Weak Permissions: /etc/passwd /etc/shadow apache2.conf httpd.conf redis.conf /root Weak Ownership: /etc/passwd /etc/shadow apache2.conf httpd.conf redis.conf /root Capabilities: General Capabilities Custom Capabilities With CAP_SETUID Interesting Files: PHP Configuration Files World Writable Files Download Rootend
Read more...

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!Rootend - A *Nix Enumerator And Auto Privilege Escalation Tool





rootend is a python *nix Enumerator & Auto Privilege Escalation tool.

For a full list of our tools, please visit our website https://www.twelvesec.com/

Written by:

* nickvourd (twitter)
* maldevel (twitter)
* servo



Usage

Enumeration & Automation Privilege Escalation tool. rootend is an open source tool licensed under GPLv3. Affected systems: *nix. Written by: @nickvourd of @twelvesec. Special thanks to @maldevel & servo. https://www.twelvesec.com/ Please visit https://github.com/twelvesec/rootend for more.. optional arguments: -h, --help show this help message and exit -v, --version show version and exit -a, --auto automated privilege escalation process -m, --manual system enumeration -n, --nocolor disable color -b, --banner show banner and exit -s, --suid suid binary enumeration -w, --weak weak permissions of files enumeration -p, --php PHP configuration files enumeration -c, --capabilities capabilities enumeration -f, --full-writables world writable files enumeration usage examples: ./rootend.py -a ./rootend.py -m ./rootend.py -v ./rootend.py -b Specific categories usage examples: ./rootend.py -a -s ./rootend.py -m -w ./rootend.py -a -s -p ./rootend.py -m -w -c -p ./rootend.py -a -s -c -p -f *Use the above arguments with -n to disable color. ">___________ .__ _________
\__ ___/_ _ __ ____ | |___ __ ____ / _____/ ____ ____
| | \ \/ \/ // __ \| |\ \/ // __ \ \_____ \_/ __ \_/ ___\
| | \ /\ ___/| |_\ /\ ___/ / \ ___/\ \___
|____| \/\_/ \___ >____/\_/ \___ >_______ /\___ >\___ >
\/ \/ \/ \/ \/
rootend v.2.0.2 - Enumeration & Automation Privilege Escalation tool.
rootend is an open source tool licensed under GPLv3.
Affected systems: *nix.
Written by: @nickvourd of @twelvesec.
Special thanks to @maldevel & servo.
https://www.twelvesec.com/
Please visit https://github.com/twelvesec/rootend for more..

optional arguments:
-h, --help show this help message and exit
-v, --version show version and exit
-a, --auto automated privilege escalatio n process
-m, --manual system enumeration
-n, --nocolor disable color
-b, --banner show banner and exit
-s, --suid suid binary enumeration
-w, --weak weak permissions of files enumeration
-p, --php PHP configuration files enumeration
-c, --capabilities capabilities enumeration
-f, --full-writables world writable files enumeration

usage examples:
./rootend.py -a
./rootend.py -m
./rootend.py -v
./rootend.py -b

Specific categories usage examples:
./rootend.py -a -s
./rootend.py -m -w
./rootend.py -a -s -p
./rootend.py -m -w -c -p
./rootend.py -a -s -c -p -f

*Use the above arguments with -n to disable color.



Version

2.0.2

Supports

* Python 2.x
* Python 3.x

Tested on

* Python 2.7.18rc1
* Python 3.8.2

Modes

* Manual
* Auto

Exploitation Categories

Suid Binaries:

* General Suids
* Suids for reading files
* Suids for creating file as root
* Limited Suids
* Custom Suids

Weak Permissions:

* /etc/passwd
* /etc/shadow
* apache2.conf
* httpd.conf
* redis.conf
* /root

Weak Ownership:

* /etc/passwd
* /etc/shadow
* apache2.conf
* httpd.conf
* redis.conf
* /root

Capabilities:

* General Capabilities
* Custom Capabilities
* With CAP_SETUID

Interesting Files:

* PHP Configuration Files
* World Writable Files



Download Rootend

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux TutorialsKali Linux 2021.3 Released for NetHunter Smartwatch and With New Hacking Tools
The most popular penetration testing distro Kali linux announced a new version that included extended support for OpenSSL, new Tools, Live VM Support, and support for smartwatch.

The Kali Linux 2021.3 is the third release of the year, now it is available for ready download or users can update to the latest version.

What’s New With Kali Linux 2021.3

OpenSSL by Default

Starting from Kali Linux 2021.3, support for legacy protocols and ciphers are enabled by default. This would help researchers to test older machines that still using older protocols.

Complete OpenSSL Configurations can be found here.

New Kali-Tools

The tools pages have been refreshed with a new design that helps users to pick the tools and contribute.”We have refreshed every aspect of the previous site, giving a new, faster, layout, content, and system!”

Following are the new tools introduced;

* Berate_ap – Orchestrating MANA rogue Wi-Fi Access Points
* CALDERA – Scalable automated adversary emulation platform
* EAPHammer – Targeted evil twin attacks against WPA2-Enterprise Wi-Fi networks
* HostHunter – Recon tool for discovering hostnames using OSINT techniques
* RouterKeygenPC – Generate default WPA/WEP Wi-Fi keys
* Subjack – Subdomain takeover
* WPA_Sycophant – Evil client portion of EAP relay attack

Virtualization and Desktop

Hyper-V Enhanced Session Mode made simple with the new release, it can be enabled by just hitting an enter.

Following are improvements with Desktop

* Improved GTK3 theme for Xfce’s notifications and logout-dialog
* Redesigned GTK2 theme for a better fit of older programs
* Improved Kali-Dark and Kali-Light syntax-highlighting themes for GNOME and Xfce



Kali NetHunter

For the first time, Kali linux was introduced for a smartwatch, the TicHunter Pro, it is still in the experimental phase, there be many limitations now, hope in the future it will be promising.



You can find the documentation of how to install it here.

Kali Linux 2021.3 is available to download from here, you can also update using the following commands.
┌──(kali㉿kali)-[~]
└─$ echo "deb http://http.kali.org/kali kali-rolling main non-free contrib" | sudo tee /etc/apt/sources.list
┌──(kali㉿kali)-[~]
└─$ sudo apt update && sudo apt -y full-upgrade
┌──(kali㉿kali)-[~]
└─$ [ -f /var/run/reboot-required ] && sudo reboot -f
To check the update
┌──(kali㉿kali)-[~]
└─$ grep VERSION /etc/os-release VERSION="2021.3" VERSION_ID="2021.3" VERSION_CODENAME="kali-rolling"
Offensive security team is having plans to refresh the kali menus by making some alteration in structre and to change load balancers that handles OS images.

___________________________
@hacking_Attack
@Hacking_Video

Rootend - A *Nix Enumerator And Auto Privilege Escalation Tool
http://www.kitploit.com/2021/09/rootend-nix-enumerator-and-auto.html

___________________________
@hacking_Attack
@Hacking_Video