Hacking on Medium
Hub Weekly Digest: GE, DOE, Verkada Hack, VMware and the DHS

https://cdn-images-1.medium.com/max/2600/1*_ouolRTZtZ1LXMl5z_BVXw.jpeg
Hub Security’s weekly digest covers top stories happening around the world related to fintech, critical infrastructure, cloud, and…

Continue reading on HUB Security »

Obfuscation\_Detection - Collection Of Scripts To Pinpoint Obfuscated Code

Automatically detect control-flow flattening and other state machines Author: Tim BlazytkoDescription: Scripts and binaries to automatically detect control-flow flattening and other state machines in binaries. Implementation is based on Binary Ninja. Check out the following blog post for more information: Automated Detection of Control-flow FlatteningUsage $ ./detect_flattening.py samples/finspy Function 0x401602 has a flattening score of 0.9473684210526315.Function 0x4017c0 has a flattening score of 0.9981378026070763.Function 0x405150 has a flattening score of 0.9166666666666666.Function 0x405270 has a flattening score of 0.9166666666666666.Function 0x405370 has a flattening score of 0.9984544049459042.Function 0x4097a0 has a flattening score of 0.9992378048780488.Function 0x412c70 has a flattening score of 0.9629629629629629.Function 0x412df0 has a flattening score of 0.9629629629629629.Function 0x412f70 has a flattening score of 0.9927007299270073.Function 0x4138e0 has a flattening score of 0.9629629629629629. Note The password for the zipped malware samples is "infected". To unpack, use the following command line: $ unzip -P infected samples.zip Contact For more information, contact @mr_phrazer. Download Obfuscation_Detection
Read more...

Obfuscation_Detection - Collection Of Scripts To Pinpoint Obfuscated Code
http://www.kitploit.com/2021/03/obfuscationdetection-collection-of.html

Automatically detect control-flow flattening and other state machines Author: Tim Blazytko
Description:
Scripts and binaries to automatically detect control-flow flattening and other state machines in binaries. Implementation is based on Binary (https://www.kitploit.com/search/label/Binary) Ninja. Check out the following blog post for more information: Automated Detection of Control-flow Flattening (https://synthesis.to/2021/03/03/flattening_detection.html)
Usage
$ ./detect_flattening.py samples/finspy
Function 0x401602 has a flattening score of 0.9473684210526315.
Function 0x4017c0 has a flattening score of 0.9981378026070763.
Function 0x405150 has a flattening score of 0.9166666666666666.
Function 0x405270 has a flattening score of 0.9166666666666666.
Function 0x405370 has a flattening score of 0.9984544049459042.
Function 0x4097a0 has a flattening score of 0.9992378048780488.
Function 0x412c70 has a flattening score of 0.9629629629629629.
Function 0x412df0 has a flattening score of 0.9629629629629629.
Function 0x412f70 has a flattening score of 0.9927007299270073.
Function 0x4138e0 has a flattening score of 0.9629629629629629.

Note
The password for the zipped malware samples (https://www.kitploit.com/search/label/Malware%20Samples) is "infected". To unpack, use the following command line: $ unzip -P infected samples.zip

Contact
For more information, contact @mr_phrazer (https://twitter.com/mr_phrazer).

Download Obfuscation_Detection (https://github.com/mrphrazer/obfuscation_detection)

KitPloit - PenTest Tools!
Obfuscation_Detection - Collection Of Scripts To Pinpoint Obfuscated Code

https://1.bp.blogspot.com/-pVG_GY_Kvjg/YFexRwJ3VZI/AAAAAAAAVrY/p638kM3wVY895SoSAenvnyZFnfoxs9u-wCNcBGAsYHQ/w640-h380/Obfuscation_Detection.png
Automatically detect control-flow flattening and other state machines
Author: Tim Blazytko

Description:

Scripts and binaries to automatically detect control-flow flattening and other state machines in binaries.

Implementation is based on Binary Ninja. Check out the following blog post for more information:

Automated Detection of Control-flow Flattening
Usage
$ ./detect_flattening.py samples/finspy
Function 0x401602 has a flattening score of 0.9473684210526315.
Function 0x4017c0 has a flattening score of 0.9981378026070763.
Function 0x405150 has a flattening score of 0.9166666666666666.
Function 0x405270 has a flattening score of 0.9166666666666666.
Function 0x405370 has a flattening score of 0.9984544049459042.
Function 0x4097a0 has a flattening score of 0.9992378048780488.
Function 0x412c70 has a flattening score of 0.9629629629629629.
Function 0x412df0 has a flattening score of 0.9629629629629629.
Function 0x412f70 has a flattening score of 0.9927007299270073.
Function 0x4138e0 has a flattening score of 0.9629629629629629.

Note

The password for the zipped malware samples is "infected". To unpack, use the following command line:
$ unzip -P infected samples.zip

Contact

For more information, contact @mr_phrazer.
Download Obfuscation_Detection

hacking: security in practice
Can I use Alfa AWUS1900 for monitor mode and packet Injection in Kali Linux?

Can I use Alfa AWUS1900 in Kali Linux 2021? Can it support monitor mode and packet injection?

submitted by /u/MasterWizard102
[link] [comments]

hacking: security in practice
CREATING EDUCATIONAL LAB ON IOT Security

Hey, first time posting here (please be patient with me). I'm trying to create a lab to demonstrate the types of attacks that can be used against IoT devices. I'm having trouble of figuring out how to setup an environment for me to perform the lab.

Essentially, there is a sensor attached to the Pi and I'll have a custom program with some badly written code. I am trying to use an attack to either show service degradation or a stack overflow attack that could overwrite the program and give the attacker access into the device. How would I go about this? Does this make sense so far? If I left out any information needed don't hesitate to ask?

My setup as of right now is a Raspberry Pi 4 with stock OS.

submitted by /u/Admirable_Cranberry1
[link] [comments]

Hacking on Medium
Hack The Box — Blue: Walkthrough (without Metasploit)

https://cdn-images-1.medium.com/max/600/1*IZ536V6bM7PtvYF4hifIAw.png
Hack The Box — Blue: Walkthrough (without Metasploit) | SMB enumeration | Road to OSCP | EternalBlue | WannaCry | MS17–010 | Windows Easy

Continue reading on Medium »

Hacking on Medium
TryHackMe — Bounty Hacker(Easy)

https://cdn-images-1.medium.com/max/600/1*8KaJkYLFn5IcHz-UrsG0aQ.png
Hello there!
This is the writeup for the ‘Bounty Hacker’ room from TryHackMe. It’s a fun, quick and rated easy box, very beginner friendly.

Continue reading on Medium »

Hacking on Medium
New Neovim Plugins to Improve Development Workflow

https://cdn-images-1.medium.com/max/742/0*Q0yHsNzM-zK7hoJW.png
New Neovim plugins to improve development workflow and productivity.

Continue reading on Medium »

Hacking on Medium
How I Passed OSCP with 100 points in 12 hours without Metasploit in my first attempt

https://cdn-images-1.medium.com/max/1053/1*GvHmoNnuTjgWI5b2sgqeVA.png
I’m 21 years old and I decided to take OSCP two years ago when I was 19 years old. I had to wait for 1 and a half years until I won an…

Continue reading on Medium »

Offloading hashes to crack to a separate PC
https://www.reddit.com/r/Pentesting/comments/meeuy6/offloading_hashes_to_crack_to_a_separate_pc/

<!-- SC_OFF -->I generally do most of my security work from my laptop which is usually fine but when i want to crack hashes (john/hashcat/hydra) it's leagues slower than using my actual PC with a proper GPU and CPU. Is there an automated system i can use to offload hashes to my PC to crack, or is that something I'll have to make custom? <!-- SC_ON --> submitted by /u/Nexr0n (https://www.reddit.com/user/Nexr0n)
[link] (https://www.reddit.com/r/Pentesting/comments/meeuy6/offloading_hashes_to_crack_to_a_separate_pc/) [comments] (https://www.reddit.com/r/Pentesting/comments/meeuy6/offloading_hashes_to_crack_to_a_separate_pc/)

hacking: security in practice
A study in Nature shows that 5G generates enough electricity to power low-profile IoT devices; suggests these devices can fit onto any surface

https://b.thumbs.redditmedia.com/gfQ10vCNEsoIUup1WX22855mMzY3rTSm8J3nBgIbQRw.jpg submitted by /u/if_it_was_a_snake
[link] [comments]

hacking: security in practice
Offloading hashes to separate PC

I generally do most of my security work from my laptop which is usually fine but when i want to crack hashes (john/hashcat/hydra) it's leagues slower than using my actual PC with a proper GPU and CPU. Is there an automated system i can use to offload hashes to my PC to crack, or is that something I'll have to make custom?

submitted by /u/Nexr0n
[link] [comments]