Hacking Articles Tips Tricks Videos Tutorials

Hacking Articles
TheNotebook HackTheBox Walkthrough

We’ll look at another one of HackTheBox machines today, called “TheNotebook.” It is a medium difficulty box targeting the commonly found threat of using insecure JWT token implementation. A user is able to gain access to the system by forging this token and adding desired values. We’d own the root

The post TheNotebook HackTheBox Walkthrough appeared first on Hacking Articles.

___________________________
@hacking_Attack
@Hacking_Video

Hacking Articles

TheNotebook HackTheBox Walkthrough - Hacking Articles

We’ll look at another one of HackTheBox machines today, called “TheNotebook.” It is a medium difficulty box targeting the commonly found threat of using insecure

7 viewsedited 12:50

Hacking Articles Tips Tricks Videos Tutorials

Blind XSS on Google Internal System
https://bountyget.medium.com/blind-xss-on-google-internal-system-dd459d74bfb5?source=rss------bug_bounty-5

Blind cross-site scripting (XSS) refers to a type of code injection where an attacker inserts XSS payload in user input fields and they…Continue reading on Medium » (https://bountyget.medium.com/blind-xss-on-google-internal-system-dd459d74bfb5?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Medium

Blind XSS on Google Internal System

Blind cross-site scripting (XSS) refers to a type of code injection where an attacker inserts XSS payload in user input fields and they are…

10 viewsedited 13:15

Hacking Articles Tips Tricks Videos Tutorials

6 views13:40

Hacking Articles Tips Tricks Videos Tutorials

Photo

KitPloit - PenTest Tools!
Packet-Sniffer - A pure-Python Network Packet Sniffing Tool

https://blogger.googleusercontent.com/img/a/AVvXsEgyiG2LnOhEc-VVhFpcfSPOuInpqc4IU4d_SQLB5_fd1TnmSVWGb-TF5CTHCkGE9BEJRj_0WEti7z0-et19clSOigT4-JKkFoL0JwfQIEFcxsFG62Sio_mTARRFTlFbQu6QxBUGbXupaLv3ZQfOOIg5wzbsIgNMEodlE8rLSfqs1DbdQR_F9X-y9_lCtA=w640-h459 A simple pure-Python network packet sniffer. Packets are disassembled as they arrive at a given network interface controller and their information is displayed on the screen.

This application maintains no dependencies on third-party modules and can be run by any Python 3.x interpreter. InstallationGNU / LinuxSimply clone this repository with git cloneand execute the packet_sniffer.pyfile as described in the following Usage section. user@host:~/DIR$ git clone https://github.com/EONRaider/Packet-Sniffer.git Other SystemsThis project is dependent on PF_PACKET- a stateful packet filter not found on Windows or Mac OS X. For demonstration purposes, you can try out this package in a Docker container. Although it will not have full access to localhost on your machine, you can still sniff on the Docker subnet and at least get the module running.

Use this command to build and run from the project directory: docker build -t sniff . && docker run --network host sniff Note that the entry command is simply python packet_sniffer.py, so feel free to use the full functionality of the module by overriding the default command. Remember that we tagged the container with the name "sniff" before, so we can pass command-line arguments to the sniffer in the following manner:

docker run --network host sniff [your command goes here]
echo "Now let's print help"
docker run --network host sniff python packet_sniffer.py --help

Usage of --network hostis not supported on OS X or Windows so this container won't be fully functional - but you will see packets traveling within the docker subnet. Usage

packet_sniffer.py [-h] [-i INTERFACE] [-d]

A pure-Python network packet sniffer.

optional arguments:
-h, --help            show this help message and exit
-i INTERFACE, --interface INTERFACE
Interface from which packets will be captured (captures
from all available interfaces by default).
-d, --displaydata     Output packet data during capture.

Running the ApplicationObjective Initiate the capture of packets on all available interfaces Execution sudo python3 packet_sniffer.pyOutcome Refer to sample output below
* Sample output:

[>] Packet #476 at 17:45:13:
[+] MAC ......ae:45:39:30:8f:5a -> dc:d9:ae:71:c8:b9
[+] IPv4 ..........192.168.1.65 -> 140.82.113.3    | PROTO: TCP TTL: 64
[+] TCP ..................40820 -> 443             | Flags: 0x010 > ACK
[>] Packet #477 at 17:45:14:
[+] MAC ......dc:d9:ae:71:c8:b9 -> ae:45:39:30:8f:5a
[+] IPv4 ..........140.82.113.3 -> 192.168.1.65    | PROTO: TCP TTL: 49
[+] TCP ....................443 -> 40820           | Flags: 0x010 > ACK
[>] Packet #478 at 17:45:18:
[+] MAC ......dc:d9:ae:71:c8:b9 -> ae:45:39:30:8f:5a
[+] ARP Who has  192.168.1.65 ? -> Tell 192.168.1.254
[>] Packet #479 at 17:45:18:
[+] MAC ......ae:45:39:30:8f:5a -> dc:d9:ae:71:c8:b9
[+] ARP ...........192.168.1.65 -> Is at ae:45:39:30:8f:5a

Legal DisclaimerThe use of code contained in this repository, either in part or in its totality, for engaging targets without prior mutual consent is illegal. It is the end user's responsibility to obey all applicable local, state and federal laws.

Developers assume no liability and are not responsible for misuses or damages caused by any code contained in this repository in any event that, accidentally or otherwise, it comes to be utilized by a threat agent or un[...]

___________________________
@hacking_Attack
@Hacking_Video

Kitploit

Kitploit – Maintenance in Progress

Kitploit is temporarily under maintenance. We’ll be back shortly with improvements.

9 viewsedited 13:40

Hacking Articles Tips Tricks Videos Tutorials

KitPloit - PenTest Tools! Packet-Sniffer - A pure-Python Network Packet Sniffing Tool https://blogger.googleusercontent.com/img/a/AVvXsEgyiG2LnOhEc-VVhFpcfSPOuInpqc4IU4d_SQLB5_fd1TnmSVWGb-TF5CTHCkGE9BEJRj_0WEti7z0-et19clSOigT4-JKkFoL0JwfQIEFcxsFG62Sio_mT…

authorized entity as a means to compromise the security, privacy, confidentiality, integrity, and/or availability of systems and their associated resources by leveraging the exploitation of known or unknown vulnerabilities present in said systems, including, but not limited to, the implementation of security controls, human- or electronically-enabled.

The use of this code is only endorsed by the developers in those circumstances directly related to educational environments or authorized penetration testing engagements whose declared purpose is that of finding and mitigating vulnerabilities in systems, limiting their exposure to compromises and exploits employed by malicious agents as defined in their respective threat models. Download Packet-Sniffer

___________________________
@hacking_Attack
@Hacking_Video

9 viewsedited 13:40

Hacking Articles Tips Tricks Videos Tutorials

A Unique Email Verification Bypass

Hello Hackers! , in this write-up, I will tell you how I found a unique email verification bypass.Continue reading on Medium »
Read more...

9 views13:51

Hacking Articles Tips Tricks Videos Tutorials

Blind XSS on Google Internal System

Blind cross-site scripting (XSS) refers to a type of code injection where an attacker inserts XSS payload in user input fields and they…Continue reading on Medium »
Read more...

9 views13:51

Hacking Articles Tips Tricks Videos Tutorials

Packet-Sniffer - A pure-Python Network Packet Sniffing Tool

A simple pure-Python network packet sniffer. Packets are disassembled as they arrive at a given network interface controller and their information is displayed on the screen. This application maintains no dependencies on third-party modules and can be run by any Python 3.x interpreter.Installation GNU / Linux Simply clone this repository with git clone and execute the packet_sniffer.py file as described in the following Usage section. user@host:~/DIR$ git clone https://github.com/EONRaider/Packet-Sniffer.git Other Systems This project is dependent on PF_PACKET - a stateful packet filter not found on Windows or Mac OS X. For demonstration purposes, you can try out this package in a Docker container. Although it will not have full access to localhost on your machine, you can still sniff on the Docker subnet and at least get the module running. Use this command to build and run from the project directory: docker build -t sniff . && docker run --network host sniff Note that the entry command is simply python packet_sniffer.py, so feel free to use the full functionality of the module by overriding the default command. Remember that we tagged the container with the name "sniff" before, so we can pass command-line arguments to the sniffer in the following manner: docker run --network host sniff your command goes hereecho "Now let's print help"docker run --network host sniff python packet_sniffer.py --help Usage of --network host is not supported on OS X or Windows so this container won't be fully functional - but you will see packets traveling within the docker subnet. Usage packet_sniffer.py -h -i INTERFACE -dA pure-Python network packet sniffer.optional arguments: -h, --help show this help message and exit -i INTERFACE, --interface INTERFACE Interface from which packets will be captured (captures from all available interfaces by default). -d, --displaydata Output packet data during capture. Running the Application Objective Initiate the capture of packets on all available interfaces Execution sudo python3 packet_sniffer.py Outcome Refer to sample output below Sample output: > Packet #476 at 17:45:13: + MAC ......ae:45:39:30:8f:5a -> dc:d9:ae:71:c8:b9 + IPv4 ..........192.168.1.65 -> 140.82.113.3 | PROTO: TCP TTL: 64 + TCP ..................40820 -> 443 | Flags: 0x010 > ACK> Packet #477 at 17:45:14: + MAC ......dc:d9:ae:71:c8:b9 -> ae:45:39:30:8f:5a + IPv4 ..........140.82.113.3 -> 192.168.1.65 | PROTO: TCP TTL: 49 + TCP ....................443 -> 40820 | Flags: 0x010 > ACK> Packet #478 at 17:45:18: + MAC ......dc:d9:ae:71:c8:b9 -> ae:45:39:30:8f:5a + ARP Who has 192.168.1.65 ? -> Tell 192.168.1.254> Packet #479 at 17:45:18: + MAC ......ae:45:39:30:8f:5a -> dc:d9:ae:71:c8:b9 + ARP ...........192.168.1.65 -> Is at ae:45:39:30:8f:5a Legal Disclaimer The use of code contained in this repository, either in part or in its totality, for engaging targets without prior mutual consent is illegal. It is the end user's responsibility to obey all applicable local, state and federal laws. Developers assume no liability and are not responsible for misuses or damages caused by any code contained in this repository in any event that, accidentally or otherwise, it comes to be utilized by a threat agent or unauthorized entity as a means to compromise the security, privacy, confidentiality, integrity, and/or availability of systems and their associated resources by leveraging the exploitation of known or unknown vulnerabilities present in said systems, including, but not limited to, the implementation of security controls, human- or electronically-enabled. The use of this code is only endorsed by the developers in those circumstances directly related to educational environments or authorized penetration testing engagements whose declared purpose is that of finding and mitigating vulnerabilities in systems, limiting their exposure to compromises and exploits employed by malicious agents as defined in their respective threat models. Download Packet-Sniffer
Read more...

GitHub

GitHub - EONRaider/Packet-Sniffer: A Network Packet Sniffing tool developed in Python 3.

A Network Packet Sniffing tool developed in Python 3. - EONRaider/Packet-Sniffer

12 views14:19

Hacking Articles Tips Tricks Videos Tutorials

11 views15:47

Hacking Articles Tips Tricks Videos Tutorials

Photo

Hacking on Medium
Indexed Finance Suffered Its First Cyber-Attack Where Assets Worth $16m Were Stolen.

https://cdn-images-1.medium.com/max/1500/1*NDXF9X9fNfe3zZxDOJ6rAw.jpeg
Recently, Indexed Finance suffered a hack where assets worth $16 Million were exploited from CC10 and DEFI5.

Continue reading on Blockonomist »

___________________________
@hacking_Attack
@Hacking_Video

Medium

Indexed Finance Suffered Its First Cyber-Attack Where Assets Worth $16m Were Stolen.

Recently, Indexed Finance suffered a hack where assets worth $16 Million were exploited from CC10 and DEFI5. Notably, Indexed Finance is an…