[Metasploit]Upgrade Normal Shell To Meterpreter Shell

After we got access to the machine, sometimes we get Meterpreter Shell immediately after exploitation.Continue reading on Medium »
Read more...

How to Run BurpSuite API with a script?

So in my previous post, I told you how to integrate Jenkins with BurpSuite Professional. But this one is different we will run the Burp’s…Continue reading on Medium »
Read more...

Analyzing attacks that exploit the CVE-2021-40444 MSHTML vulnerability | Microsoft Security Blog
https://www.reddit.com/r/redteamsec/comments/pp7su1/analyzing_attacks_that_exploit_the_cve202140444/

submitted by /u/dmchell (https://www.reddit.com/user/dmchell)
[link] (https://www.microsoft.com/security/blog/2021/09/15/analyzing-attacks-that-exploit-the-mshtml-cve-2021-40444-vulnerability/) [comments] (https://www.reddit.com/r/redteamsec/comments/pp7su1/analyzing_attacks_that_exploit_the_cve202140444/)

hacking: security in practice
Answered call from friend but she said automated voice answered?

So my friend called me and I answered, but there was nothing coming through from her end it was just silence. She then hung up and texted me saying the call was answered by an automated voice that sounds like it was calling from a car, and she can’t recall what it said. I’m really confused as to what happened. I’m pretty sure this isn’t the right subreddit for this, but if anyone knows a better subreddit to post it to or if you know what happened please let me know. Thank you.

submitted by /u/Jogen666
[link] [comments]

Hacking on Medium
Bluetooth BrakTooth Bug causing Havoc!


What Is Bluetooth-

Continue reading on rootissh »

Hacking on Medium
How To Protect Your Accounts From Getting Hacked


In recent times, the way hackers or should I say Script Kiddies are hacking people’s social media, mails and other accounts is very…

Continue reading on Medium »

Hacking on Medium
Hacking Bill Joel Blog — TryHackMe


The intermediate level machine to hack into the Bil Joel Blog.

Continue reading on Medium »

Hacking on Medium
The Throughtek Kalay Vulnerability Is Absolutely Absurd; Here’s Why It Should Worry You


Visualize 83 million people (about the population of Canada, Oregon, and California combined) each with a baby monitor or security camera…

Continue reading on AWS in Plain English »

Hacking on Medium
Linh tinh về Oracle Business Intelligence [part 2]


Description

Continue reading on Medium »

Fully Weaponized CVE-2021-40444: Malicious docx generator using arbitrary DLL
https://www.reddit.com/r/redteamsec/comments/ppa935/fully_weaponized_cve202140444_malicious_docx/

submitted by /u/0xDangerous_bit (https://www.reddit.com/user/0xDangerous_bit)
[link] (https://github.com/klezVirus/CVE-2021-40444) [comments] (https://www.reddit.com/r/redteamsec/comments/ppa935/fully_weaponized_cve202140444_malicious_docx/)

How I found my first AEM related bug.

Hello all the amazing hackers and cyber security enthusiasts. My name is Vedant(Also known as Vegeta on Twitter😁) and I’m an aspiring bug…
Read more...

[Metasploit]Upgrade Normal Shell To Meterpreter Shell

After we got access to the machine, sometimes we get Meterpreter Shell immediately after exploitation. Meterpreter Shell offers the easiest…
Read more...

Plution - Prototype Pollution Scanner Using Headless Chrome
http://www.kitploit.com/2021/09/plution-prototype-pollution-scanner.html

Plution is a convenient way to scan at scale for pages that are vulnerable (https://www.kitploit.com/search/label/Vulnerable) to client side (https://www.kitploit.com/search/label/Client%20Side) prototype pollution (https://www.kitploit.com/search/label/Prototype%20Pollution) via a URL payload. In the default configuration, it will use a hardcoded payload that can detect 11 of the cases documented here: https://github.com/BlackFan/client-side-prototype-pollution/tree/master/pp
What this is not
This is not a one stop shop. Prototype pollution is a complicated beast. This tool does nothing you couldn't do manually. This is not a polished bug-free super tool. It is functional but poorly coded and to be considered alpha at best.
How it works
Plution appends a payload to supplied URLs, naviguates to each URL with headless chrome (https://www.kitploit.com/search/label/Headless%20Chrome) and runs javascript on the page to verify if a prototype was successfully polluted.
how it is used
Basic scan, output only to screen:
cat URLs.txt | plution Scan with a supplied payload rather than hardcoded one:
cat URLs.txt|plution -p '__proto__.zzzc=example'
Note on custom payloads: The variable you are hoping to inject must be called or render to "zzzc". This is because 'window.zzzc' will be run on each page to verify pollution. Output:
Passing '-o' followed by a location will output only URLs of pages that were successfully polluted. Concurrency:
Pass the '-c' option to specify how many concurrent jobs are run (default is 5)
questions and answers
How do I install it?
go get -u github.com/raverrr/plution why specifically limit it to checking if window.zzzc is defined?
zzzc is a short pattern that is unlikely to already be in a prototype. If you want more freedom in regards to the javascript use https://github.com/detectify/page-fetch instead Got a more specific question?
Ask me on twitter @divadbate.

Download Plution (https://github.com/raverrr/plution)

KitPloit - PenTest Tools!Plution - Prototype Pollution Scanner Using Headless Chrome



Plution is a convenient way to scan at scale for pages that are vulnerable to client side prototype pollution via a URL payload. In the default configuration, it will use a hardcoded payload that can detect 11 of the cases documented here: https://github.com/BlackFan/client-side-prototype-pollution/tree/master/pp



What this is not

This is not a one stop shop. Prototype pollution is a complicated beast. This tool does nothing you couldn't do manually. This is not a polished bug-free super tool. It is functional but poorly coded and to be considered alpha at best.

How it works

Plution appends a payload to supplied URLs, naviguates to each URL with headless chrome and runs javascript on the page to verify if a prototype was successfully polluted.

how it is used

*
Basic scan, output only to screen:
cat URLs.txt | plution

*
Scan with a supplied payload rather than hardcoded one:
cat URLs.txt|plution -p '__proto__.zzzc=example'
Note on custom payloads: The variable you are hoping to inject must be called or render to "zzzc". This is because 'window.zzzc' will be run on each page to verify pollution.

*
Output:
Passing '-o' followed by a location will output only URLs of pages that were successfully polluted.

*
Concurrency:


*
Pass the '-c' option to specify how many concurrent jobs are run (default is 5)


questions and answers

*
How do I install it?
go get -u github.com/raverrr/plution

*
why specifically limit it to checking if window.zzzc is defined?
zzzc is a short pattern that is unlikely to already be in a prototype. If you want more freedom in regards to the javascript use https://github.com/detectify/page-fetch instead

*
Got a more specific question?
Ask me on twitter @divadbate.




Download Plution

Plution - Prototype Pollution Scanner Using Headless Chrome

Plution is a convenient way to scan at scale for pages that are vulnerable to client side prototype pollution via a URL payload. In the default configuration, it will use a hardcoded payload that can detect 11 of the cases documented here: https://github.com/BlackFan/client-side-prototype-pollution/tree/master/ppWhat this is not This is not a one stop shop. Prototype pollution is a complicated beast. This tool does nothing you couldn't do manually. This is not a polished bug-free super tool. It is functional but poorly coded and to be considered alpha at best. How it works Plution appends a payload to supplied URLs, naviguates to each URL with headless chrome and runs javascript on the page to verify if a prototype was successfully polluted. how it is used Basic scan, output only to screen: cat URLs.txt | plution Scan with a supplied payload rather than hardcoded one: cat URLs.txt|plution -p '_proto_.zzzc=example' Note on custom payloads: The variable you are hoping to inject must be called or render to "zzzc". This is because 'window.zzzc' will be run on each page to verify pollution. Output: Passing '-o' followed by a location will output only URLs of pages that were successfully polluted. Concurrency: Pass the '-c' option to specify how many concurrent jobs are run (default is 5) questions and answers How do I install it? go get -u github.com/raverrr/plution why specifically limit it to checking if window.zzzc is defined? zzzc is a short pattern that is unlikely to already be in a prototype. If you want more freedom in regards to the javascript use https://github.com/detectify/page-fetch instead Got a more specific question? Ask me on twitter @divadbate. Download Plution
Read more...

hacking: security in practice
Exploit Android devices via the Android Debugging Bridge (ADB) with this tool

https://github.com/kikiokol/AndroidDown/

submitted by /u/kikiokol1
[link] [comments]

hacking: security in practice
Previous post about hardware removal to maintain privacy and annonymity explained:

I picked up a Lenovo T250 as I believe IME is not installed on those models. Is there anything else I should physically remove in order to protect my privacy and maintain annonymity while persuing an ethical hacking career? While I will be engaging in legal activities online, something you need to venture over to the dark side to get a better understanding by witnessing both sides of the coin. I'm no longer a novice, but taking these next steps is making me nervous and I have small kiddos whonrely on me. My previous career was of a network engineer and got extremely bored and fast. I plan on running Kali inside of qubesos/whonix. If there is anything in the photo I am about to post, that needs to go, please let me know and if you have the time to explain why, even better. Thank you all, such a great sub.

submitted by /u/cho--e
[link] [comments]