Hi guy My Name is Ahmed (SadC0d3r)Continue reading on Medium » (https://sadc0d3r.medium.com/monitors-walkthrough-hackthebox-7ce2d37f5190?source=rss------bug_bounty-5)

Monitors Walkthrough — Hackthebox

Hi guy My Name is Ahmed (SadC0d3r)Continue reading on Medium »
Read more...

Deep Web
Where can I read the WSJ, Bloomberg, and the economist for free or how can I bypass the subscription

submitted by /u/AlexVentures
[link] [comments]

hacking: security in practice
Is it possible to do an inspect element on a certain site, but on every computer on a certain IP address?

For example if there's nothing but a page that says "I like chicken" and you inspect element to make it say something else, when you refresh the page, it's gone.

I'm wondering if it's possible to make it stay there for an IP address that is your own (not someone elses). to modify the website so it looks the same on the website owners side, but can be modified on your side and any computers connected to your IP.

I had this idea quickly but I doubt it is possible.

submitted by /u/SicariusREAL
[link] [comments]

hacking: security in practice
So how do I bypass an expensive router

So my dad has a router that allows Him to control everything and has a power trip whenever he is mad for no reason, all I'm asking is that I bypass the wifi shutdown or something that allows me to control it myself

TL:DR MY dad is an asshole and doesn't allow me to do anything if he is mad and I want a comeback

submitted by /u/blkdmn1
[link] [comments]

hacking: security in practice
(WINDOWS 10 OFF TOPIC)How do i disable windows smart screen check apps and files without admin permissions?

it says "the setting is managed by your administrator" and i want to download something. How do i do it? i cant run registry editor, and command prompt because i already tried it. please help.

submitted by /u/Flameex1087
[link] [comments]

hacking: security in practice
Best language to learn first for Black Hat 🎩 Script Kitty 🐈‍⬛

Hi I am interested in WiFi hacking, absolute beginner to computers. Any info helps.

View Poll

submitted by /u/The_Abramelin
[link] [comments]

Hacking on Medium
What is Ethical Hacking | Cybersecurity | ethical hacking course


Ethical Hacking

Continue reading on Medium »

Hacking on Medium
What is the “Mozi Botnet”?


According to researchers, the Mozi botnet, a peer-to-peer (P2P) malware infamous for taking over Netgear, D-Link, and Huawei routers, has…

Continue reading on rootissh »

A small change, and things go in your hand : Story of a $250 bounty
https://fardeen-ahmed.medium.com/a-small-change-and-things-go-in-your-hand-story-of-a-250-bounty-5ddc43c31463?source=rss------bug_bounty-5

Hi there,Continue reading on Medium » (https://fardeen-ahmed.medium.com/a-small-change-and-things-go-in-your-hand-story-of-a-250-bounty-5ddc43c31463?source=rss------bug_bounty-5)

hacking: security in practice
Writing connect back (reverse) shells in c#

Connect back shell allows attackers to bypass the firewall by making the client connect to the malicious server. Learn how to implement such a server in CSharp language to perform C&C

https://tbhaxor.com/writing-connect-back-tcp-shell-in-csharp/

submitted by /u/tbhaxor
[link] [comments]

Hacking on Medium
Footprinting Target Network | footprinting tools techniques | footprinting methodology

■Open Source Information Gathering using Windows Command Line

Continue reading on Medium »

Hacking on Medium
Hacking Deathnote — Writeup VulnHub


A quick win machine for warmup, without ado, let’s dive in!!

Continue reading on Medium »

Full-Spectrum Cobalt Strike Detection
https://www.reddit.com/r/redteamsec/comments/pqkccn/fullspectrum_cobalt_strike_detection/

submitted by /u/dmchell (https://www.reddit.com/user/dmchell)
[link] (https://go.recordedfuture.com/hubfs/reports/mtp-2021-0914.pdf) [comments] (https://www.reddit.com/r/redteamsec/comments/pqkccn/fullspectrum_cobalt_strike_detection/)

KitPloit - PenTest Tools!
Concealed Position - Bring Your Own Print Driver Privilege Escalation Tool


https://1.bp.blogspot.com/-JMl-654CheQ/YUOLZnQfumI/AAAAAAAAuuQ/JGDFkb4V1iQ5GvRUodx6ZDEecD6q2iZ1gCNcBGAsYHQ/w640-h358/printer_hack.jpeg
Concealed Position is a local privilege escalation attack against Windows using the concept of "Bring Your Own Vulnerability". Specifically, Concealed Position (CP) uses the as designed package point and print logic in Windows that allows a low privilege user to stage and install printer drivers. CP specifically installs drivers with known vulnerabilities which are then exploited to escalate to SYSTEM. Concealed Position was first presented at DEF CON 29.
What exploits are available

Concealed Position offers four exploits - all with equally dumb names:

* ACIDDAMAGE - CVE-2021-35449 - Lexmark Universal Print Driver LPE
* RADIANTDAMAGE - CVE-2021-38085 - Canon TR150 Print Driver LPE
* POISONDAMAGE - CVE-2019-19363 - Ricoh PCL6 Print Driver LPE
* SLASHINGDAMAGE - CVE-2020-1300 - Windows Print Spooler LPE

The exploits are neat because, besides SLASHINGDAMAGE, they will continue working even after the issues are patched. The only mechanism Windows has to stop users from using old drivers is to revoke the driver's certificate - something that is not(?) historically done.

But which exploit should I use?!

Probably ACIDDAMAGE. RADIANTDAMAGE and POISONDAMAGE are race conditions (to overwrite a DLL) and SLASHINGDAMAGE damage, hopefully, is patched most everywhere.

How does it work?

Concealed Position has two parts. An evil printer and a client. The client reaches out to the server, grabs a driver, gets the driver stored in the driver store, installs the printer, and exploits the install process. Easy! In MSAPI speak, the attack goes something like this:

Step 1: Stage the driver in the driver store
client to server: GetPrinterDriver
server to client: Response with driver

Stage 2: Install the driver from the driver store
client: InstallPrinterDriverFromPackage

Stage 3: Add a local printer (exploitation stage)
client: Add printer

It is important to note that SLASHINGDAMA[...]