hacking: security in practice
How to bypass "Do you want to allow this app from an unknown publisher ?" considering that I don't have admin right ?
My brother's school computer is blocked :
1) he doesn't have admin rights
2) he can execute app from an unknown publisher
3) and worst of all the BIOS has a password
He want to do some stuff so I've been searching for hours for a solutions but I found nothing relevant
Do you have any solution ?
submitted by /u/Jallbalath
[link] [comments]
How to bypass "Do you want to allow this app from an unknown publisher ?" considering that I don't have admin right ?
My brother's school computer is blocked :
1) he doesn't have admin rights
2) he can execute app from an unknown publisher
3) and worst of all the BIOS has a password
He want to do some stuff so I've been searching for hours for a solutions but I found nothing relevant
Do you have any solution ?
submitted by /u/Jallbalath
[link] [comments]
reddit
How to bypass "Do you want to allow this app from an unknown...
My brother's school computer is blocked : 1) he doesn't have admin rights 2) he can execute app from an unknown publisher 3) and worst of all...
Hacking Articles Tips Tricks Videos Tutorials
Photo
hacking: security in practice
Here it is! deserter is the first of its kind (at least to my knowledge) targeted DNS cache poisoner
https://external-preview.redd.it/lyc9mJV0MTQaAQyZ6VBxml62OJwEi7tGA7_sF0-UTxU.jpg?width=640&crop=smart&auto=webp&s=e8408507f66e85be189b9bf145c71bef41b07297 submitted by /u/b4ckslash0
[link] [comments]
Here it is! deserter is the first of its kind (at least to my knowledge) targeted DNS cache poisoner
https://external-preview.redd.it/lyc9mJV0MTQaAQyZ6VBxml62OJwEi7tGA7_sF0-UTxU.jpg?width=640&crop=smart&auto=webp&s=e8408507f66e85be189b9bf145c71bef41b07297 submitted by /u/b4ckslash0
[link] [comments]
Hacking Articles Tips Tricks Videos Tutorials
Photo
hacking: security in practice
How secure is data saved on iCloud locked notes + VPN?
Discussion with a friend, can't find a clear answer online. How secure is information saved on locked apple iOS notes when accessing the internet via VPN? How would a hacker exploit this situation? Curious to learn! Thanks
submitted by /u/possiblyai
[link] [comments]
How secure is data saved on iCloud locked notes + VPN?
Discussion with a friend, can't find a clear answer online. How secure is information saved on locked apple iOS notes when accessing the internet via VPN? How would a hacker exploit this situation? Curious to learn! Thanks
submitted by /u/possiblyai
[link] [comments]
reddit
How secure is data saved on iCloud locked notes + VPN?
Discussion with a friend, can't find a clear answer online. How secure is information saved on locked apple iOS notes when accessing the internet...
Hacking Articles Tips Tricks Videos Tutorials
Photo
hacking: security in practice
CVE-2021-28663 - POC - Explanation
Hello,
I have come across the poc for this exploit for Mali GPUs: https://github.com/lntrx/CVE-2021-28663 . I would like to run it on my android smartphone (Huawei P30 Pro), as it has a vulnerable Mali GPU.
The issue is that I am not very proficient at C and thus do not understand much of the exploit. The exploit fails very early on (https://github.com/lntrx/CVE-2021-28663/blob/main/mali_poc.c#L42). Could someone explain to me the workings of it, as the best I can do is add a bunch of print statements to see what is happening.
submitted by /u/reujea0
[link] [comments]
CVE-2021-28663 - POC - Explanation
Hello,
I have come across the poc for this exploit for Mali GPUs: https://github.com/lntrx/CVE-2021-28663 . I would like to run it on my android smartphone (Huawei P30 Pro), as it has a vulnerable Mali GPU.
The issue is that I am not very proficient at C and thus do not understand much of the exploit. The exploit fails very early on (https://github.com/lntrx/CVE-2021-28663/blob/main/mali_poc.c#L42). Could someone explain to me the workings of it, as the best I can do is add a bunch of print statements to see what is happening.
submitted by /u/reujea0
[link] [comments]
Wordlistgen - Quickly Generate Context-Specific Wordlists For Content Discovery From Lists Of URLs Or Paths
http://www.kitploit.com/2021/09/wordlistgen-quickly-generate-context.html
http://www.kitploit.com/2021/09/wordlistgen-quickly-generate-context.html
wordlistgen is a tool to pass a list of URLs and get back a list of relevant words for your wordlists. Wordlists (https://www.kitploit.com/search/label/Wordlists) are much more effective when you take the application's context into consideration. wordlistgen (https://www.kitploit.com/search/label/WordListGen) pulls out URL components, such as subdomain (https://www.kitploit.com/search/label/Subdomain) names, paths, query strings, etc. and spits them back to stdout so you can easily add them to your wordlists
Installation
If you don't have Go installed, "go" do that! go get -u github.com/ameenmaali/wordlistgen
Usage
wordlistgen takes URLs and paths from stdin, of which you will most likely want in a file such as: $ cat file.txt
https://google.com/home/?q=2&d=asd
http://my.site
/api/v2/auth/me?id=123
Get unique URL components from a file of URLs and/or paths: cat hosts.txt | wordlistgen Get unique URL components from a file of URLs and/or paths, including query string values, and save to a file: cat hosts.txt | wordlistgen -qv > urlComponents.txt wordlistgen works at it's best when chained with other tools, such as @tonnomnom's (https://github.com/tomnomnom) waybackurls (https://github.com/tomnomnom/waybackurls) : cat hosts.txt | waybackurls (https://www.kitploit.com/search/label/Waybackurls) | wordlistgen
Help
$ wordlistgen -h
Usage of wordlistgen:
-fq
If enabled, filter out query strings (e.g. if enabled /?q=123 - q would NOT be included in results
-qv
If enabled, include query string values (e.g. if enabled /?q=123 - 123 would be included in results
Download Wordlistgen (https://github.com/ameenmaali/wordlistgen)
Installation
If you don't have Go installed, "go" do that! go get -u github.com/ameenmaali/wordlistgen
Usage
wordlistgen takes URLs and paths from stdin, of which you will most likely want in a file such as: $ cat file.txt
https://google.com/home/?q=2&d=asd
http://my.site
/api/v2/auth/me?id=123
Get unique URL components from a file of URLs and/or paths: cat hosts.txt | wordlistgen Get unique URL components from a file of URLs and/or paths, including query string values, and save to a file: cat hosts.txt | wordlistgen -qv > urlComponents.txt wordlistgen works at it's best when chained with other tools, such as @tonnomnom's (https://github.com/tomnomnom) waybackurls (https://github.com/tomnomnom/waybackurls) : cat hosts.txt | waybackurls (https://www.kitploit.com/search/label/Waybackurls) | wordlistgen
Help
$ wordlistgen -h
Usage of wordlistgen:
-fq
If enabled, filter out query strings (e.g. if enabled /?q=123 - q would NOT be included in results
-qv
If enabled, include query string values (e.g. if enabled /?q=123 - 123 would be included in results
Download Wordlistgen (https://github.com/ameenmaali/wordlistgen)
Hacking Articles Tips Tricks Videos Tutorials
Photo
Black Hat Ethical Hacking
Unpatched Apple Zero-Day in macOS Finder Allows Code Execution
https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Unpatched Apple Zero-Day in macOS Finder Allows Code ExecutionPost Views: 134
Reading Time: 1 Minute
A zero-day security vulnerability in Apple’s macOS Finder system could allow remote attackers to trick users into running arbitrary commands, according to researchers – and a silent patch hasn’t fixed it.
For those not in the Apple camp, the macOS Finder is the default file manager and GUI front-end used on all Macintosh operating systems. It’s the first thing users see upon booting, and it governs the launching of other applications and the overall user management of files, disks and network volumes. It’s the overlord application for everything else on the Mac, in other words.
According to an SSD Secure Disclosure advisory this week, the vulnerability exists in the way macOS Finder handles .Inetloc files. Inetloc files are Apple-specific, and function as shortcuts to internet locations, such as an RSS feed or a telnet location; or they can be used to open documents locally on someone’s Mac within a browser using the “file://” format (in place of http://). It’s the latter function that’s at issue with the zero day, researchers said.
In an exploit scenario for the bug, the .Inetloc files can be specially crafted to contain embedded commands. The crafted files can then be attached to (or linked in) malicious emails, researchers added – and if users are socially engineered into clicking on them, those commands embedded inside automatically execute in stealth mode, with no alert or prompt given to victims.
“A vulnerability in the way macOS processes .Inetloc files causes it to run commands embedded inside, the commands it runs can be local to the macOS allowing the execution of arbitrary commands by the user without any warning/prompts,” according to the advisory.
See Also: Complete Offensive Security and Ethical Hacking Course It’s a simple exploitation scenario – as demoed in an SSD video included in the alert.
Independent security researcher Park Minchan reported the vulnerability to SSD, noting that the bug affects the macOS Big Sur edition and all those prior to it. In response, Apple chose not to issue a CVE and instead silently patched the issue. However, the fix was botched, researchers said.
“The vendor has notified us that file:// [function] has been silently patched,” the advisory explained. However, researchers added that the bug can still be exploited by using a mangled value, like FiLe:// in the file’s execution routine.
“Newer versions of macOS (from Big Sur) have blocked the file:// prefix…however they did case-matching causing File:// or fIle:// to bypass the check,” they explained.
“We…have not received any response from them since the report has been made,” according to the advisory. “As far as we know, at the moment, the vulnerability has not been patched.”
See Also: Windows MSHTML zero-day defenses bypassed as new info emerges There’s no word on whether it’s been exploited in the wild, and Apple did not immediately return a request for comment.
The computing giant has had its share of zero days this year. In May, it patched a critical bug in macOS that could be exploited to take screenshots of someone’s computer and to capture images of their activity within applications or on videoconferences without that person knowing. In July, it patched an actively exploited zero-day flaw in both its iOS and macOS platforms that could allow attackers to take over an affected system. And earlier this month, it rushed an emergency patch for the “ForcedEntry” zer[...]
Unpatched Apple Zero-Day in macOS Finder Allows Code Execution
https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Unpatched Apple Zero-Day in macOS Finder Allows Code ExecutionPost Views: 134
Reading Time: 1 Minute
A zero-day security vulnerability in Apple’s macOS Finder system could allow remote attackers to trick users into running arbitrary commands, according to researchers – and a silent patch hasn’t fixed it.
For those not in the Apple camp, the macOS Finder is the default file manager and GUI front-end used on all Macintosh operating systems. It’s the first thing users see upon booting, and it governs the launching of other applications and the overall user management of files, disks and network volumes. It’s the overlord application for everything else on the Mac, in other words.
According to an SSD Secure Disclosure advisory this week, the vulnerability exists in the way macOS Finder handles .Inetloc files. Inetloc files are Apple-specific, and function as shortcuts to internet locations, such as an RSS feed or a telnet location; or they can be used to open documents locally on someone’s Mac within a browser using the “file://” format (in place of http://). It’s the latter function that’s at issue with the zero day, researchers said.
In an exploit scenario for the bug, the .Inetloc files can be specially crafted to contain embedded commands. The crafted files can then be attached to (or linked in) malicious emails, researchers added – and if users are socially engineered into clicking on them, those commands embedded inside automatically execute in stealth mode, with no alert or prompt given to victims.
“A vulnerability in the way macOS processes .Inetloc files causes it to run commands embedded inside, the commands it runs can be local to the macOS allowing the execution of arbitrary commands by the user without any warning/prompts,” according to the advisory.
See Also: Complete Offensive Security and Ethical Hacking Course It’s a simple exploitation scenario – as demoed in an SSD video included in the alert.
Independent security researcher Park Minchan reported the vulnerability to SSD, noting that the bug affects the macOS Big Sur edition and all those prior to it. In response, Apple chose not to issue a CVE and instead silently patched the issue. However, the fix was botched, researchers said.
“The vendor has notified us that file:// [function] has been silently patched,” the advisory explained. However, researchers added that the bug can still be exploited by using a mangled value, like FiLe:// in the file’s execution routine.
“Newer versions of macOS (from Big Sur) have blocked the file:// prefix…however they did case-matching causing File:// or fIle:// to bypass the check,” they explained.
“We…have not received any response from them since the report has been made,” according to the advisory. “As far as we know, at the moment, the vulnerability has not been patched.”
See Also: Windows MSHTML zero-day defenses bypassed as new info emerges There’s no word on whether it’s been exploited in the wild, and Apple did not immediately return a request for comment.
The computing giant has had its share of zero days this year. In May, it patched a critical bug in macOS that could be exploited to take screenshots of someone’s computer and to capture images of their activity within applications or on videoconferences without that person knowing. In July, it patched an actively exploited zero-day flaw in both its iOS and macOS platforms that could allow attackers to take over an affected system. And earlier this month, it rushed an emergency patch for the “ForcedEntry” zer[...]
Hacking Articles Tips Tricks Videos Tutorials
Black Hat Ethical Hacking Unpatched Apple Zero-Day in macOS Finder Allows Code Execution https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Unpatched Apple Zero-Day in macOS Finder Allows Code ExecutionPost Views: 134…
o-click zero-day, which was being exploited by NSO Group to install spyware.
See Also: Offensive Security Tool: SniperPhish Source: threatpost.com (Click Link)Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/ezgif.com-gif-maker-1-90x90.jpg New macOS zero-day bug lets attackers run commands remotely1 day ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/Windows-attack-90x90.jpg Hacked sites push TeamViewer using fake expired certificate alert2 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/hackers-waging-living-off-land-attacks-on-azure-showcase_image-7-a-16158-90x90.jpg Azure Zero-Day Flaws Highlight Lurking Supply-Chain Risk3 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/Anonymous-90x90.png Anonymous leaks gigabytes of data from alt-right web host Epik6 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/ezgif.com-gif-maker-90x90.jpg New malware uses Windows Subsystem for Linux for stealthy attacks6 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/Google-Chrome-Browser-90x90.jpg Pair of Google Chrome Zero-Day Bugs Actively Exploited1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/banner-2021.3-release-90x90.jpg Kali Linux 2021.3 released: Kali NetHunter on a smartwatch, wider OpenSSL compatibility, new tools1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/microsoft-exploit-90x90.jpg Microsoft Patches Actively Exploited Windows Zero-Day Bug1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/Apple-marketing-communications-mix-90x90.jpg Apple Issues Emergency Fix for NSO Zero-Click Zero Day1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/zeroday-90x90.png Windows MSHTML zero-day exploits shared on hacking forums1 week ago
The post Unpatched Apple Zero-Day in macOS Finder Allows Code Execution first appeared on Black Hat Ethical Hacking.
See Also: Offensive Security Tool: SniperPhish Source: threatpost.com (Click Link)Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/ezgif.com-gif-maker-1-90x90.jpg New macOS zero-day bug lets attackers run commands remotely1 day ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/Windows-attack-90x90.jpg Hacked sites push TeamViewer using fake expired certificate alert2 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/hackers-waging-living-off-land-attacks-on-azure-showcase_image-7-a-16158-90x90.jpg Azure Zero-Day Flaws Highlight Lurking Supply-Chain Risk3 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/Anonymous-90x90.png Anonymous leaks gigabytes of data from alt-right web host Epik6 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/ezgif.com-gif-maker-90x90.jpg New malware uses Windows Subsystem for Linux for stealthy attacks6 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/Google-Chrome-Browser-90x90.jpg Pair of Google Chrome Zero-Day Bugs Actively Exploited1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/banner-2021.3-release-90x90.jpg Kali Linux 2021.3 released: Kali NetHunter on a smartwatch, wider OpenSSL compatibility, new tools1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/microsoft-exploit-90x90.jpg Microsoft Patches Actively Exploited Windows Zero-Day Bug1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/Apple-marketing-communications-mix-90x90.jpg Apple Issues Emergency Fix for NSO Zero-Click Zero Day1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/zeroday-90x90.png Windows MSHTML zero-day exploits shared on hacking forums1 week ago
The post Unpatched Apple Zero-Day in macOS Finder Allows Code Execution first appeared on Black Hat Ethical Hacking.
Wordlistgen - Quickly Generate Context-Specific Wordlists For Content Discovery From Lists Of URLs Or Paths
wordlistgen is a tool to pass a list of URLs and get back a list of relevant words for your wordlists. Wordlists are much more effective when you take the application's context into consideration. wordlistgen pulls out URL components, such as subdomain names, paths, query strings, etc. and spits them back to stdout so you can easily add them to your wordlists Installation If you don't have Go installed, "go" do that! go get -u github.com/ameenmaali/wordlistgen Usage wordlistgen takes URLs and paths from stdin, of which you will most likely want in a file such as: $ cat file.txthttps://google.com/home/?q=2&d=asdhttp://my.site/api/v2/auth/me?id=123 Get unique URL components from a file of URLs and/or paths: cat hosts.txt | wordlistgen Get unique URL components from a file of URLs and/or paths, including query string values, and save to a file: cat hosts.txt | wordlistgen -qv > urlComponents.txt wordlistgen works at it's best when chained with other tools, such as @tonnomnom's waybackurls : cat hosts.txt | waybackurls | wordlistgen Help $ wordlistgen -hUsage of wordlistgen: -fq If enabled, filter out query strings (e.g. if enabled /?q=123 - q would NOT be included in results -qv If enabled, include query string values (e.g. if enabled /?q=123 - 123 would be included in results Download Wordlistgen
Read more...
wordlistgen is a tool to pass a list of URLs and get back a list of relevant words for your wordlists. Wordlists are much more effective when you take the application's context into consideration. wordlistgen pulls out URL components, such as subdomain names, paths, query strings, etc. and spits them back to stdout so you can easily add them to your wordlists Installation If you don't have Go installed, "go" do that! go get -u github.com/ameenmaali/wordlistgen Usage wordlistgen takes URLs and paths from stdin, of which you will most likely want in a file such as: $ cat file.txthttps://google.com/home/?q=2&d=asdhttp://my.site/api/v2/auth/me?id=123 Get unique URL components from a file of URLs and/or paths: cat hosts.txt | wordlistgen Get unique URL components from a file of URLs and/or paths, including query string values, and save to a file: cat hosts.txt | wordlistgen -qv > urlComponents.txt wordlistgen works at it's best when chained with other tools, such as @tonnomnom's waybackurls : cat hosts.txt | waybackurls | wordlistgen Help $ wordlistgen -hUsage of wordlistgen: -fq If enabled, filter out query strings (e.g. if enabled /?q=123 - q would NOT be included in results -qv If enabled, include query string values (e.g. if enabled /?q=123 - 123 would be included in results Download Wordlistgen
Read more...
GitHub
GitHub - ameenmaali/wordlistgen: Quickly generate context-specific wordlists for content discovery from lists of URLs or paths
Quickly generate context-specific wordlists for content discovery from lists of URLs or paths - ameenmaali/wordlistgen
Hacking Articles Tips Tricks Videos Tutorials
Photo
KitPloit - PenTest Tools!
Wordlistgen - Quickly Generate Context-Specific Wordlists For Content Discovery From Lists Of URLs Or Paths
https://1.bp.blogspot.com/-Ady00T1Rchw/YUq1gcP9-OI/AAAAAAAAvR4/W7Kfw8YwuzM_w-8RcjOTBtXPkFoguK10wCNcBGAsYHQ/w640-h176/words.png
wordlistgen is a tool to pass a list of URLs and get back a list of relevant words for your wordlists. Wordlists are much more effective when you take the application's context into consideration. wordlistgen pulls out URL components, such as subdomain names, paths, query strings, etc. and spits them back to stdout so you can easily add them to your wordlists
Installation
If you don't have Go installed, "go" do that!
Usage
wordlistgen takes URLs and paths from stdin, of which you will most likely want in a file such as:
Get unique URL components from a file of URLs and/or paths:
Get unique URL components from a file of URLs and/or paths, including query string values, and save to a file:
wordlistgen works at it's best when chained with other tools, such as @tonnomnom's waybackurls :
Help
Download Wordlistgen
Wordlistgen - Quickly Generate Context-Specific Wordlists For Content Discovery From Lists Of URLs Or Paths
https://1.bp.blogspot.com/-Ady00T1Rchw/YUq1gcP9-OI/AAAAAAAAvR4/W7Kfw8YwuzM_w-8RcjOTBtXPkFoguK10wCNcBGAsYHQ/w640-h176/words.png
wordlistgen is a tool to pass a list of URLs and get back a list of relevant words for your wordlists. Wordlists are much more effective when you take the application's context into consideration. wordlistgen pulls out URL components, such as subdomain names, paths, query strings, etc. and spits them back to stdout so you can easily add them to your wordlists
Installation
If you don't have Go installed, "go" do that!
go get -u github.com/ameenmaali/wordlistgenUsage
wordlistgen takes URLs and paths from stdin, of which you will most likely want in a file such as:
$ cat file.txt
https://google.com/home/?q=2&d=asd
http://my.site
/api/v2/auth/me?id=123
Get unique URL components from a file of URLs and/or paths:
cat hosts.txt | wordlistgenGet unique URL components from a file of URLs and/or paths, including query string values, and save to a file:
cat hosts.txt | wordlistgen -qv > urlComponents.txtwordlistgen works at it's best when chained with other tools, such as @tonnomnom's waybackurls :
cat hosts.txt | waybackurls | wordlistgenHelp
$ wordlistgen -h
Usage of wordlistgen:
-fq
If enabled, filter out query strings (e.g. if enabled /?q=123 - q would NOT be included in results
-qv
If enabled, include query string values (e.g. if enabled /?q=123 - 123 would be included in results
Download Wordlistgen