How I hacked Nepal’s ecommerce site and bought huge packs of kitkat for free! :)

Before few months when I was tired of doing my college assignments, I started to drill up my skills in ethical hacking. I used to practise…Continue reading on Medium »
Read more...

All Resource For SQL Injection In One Blog

Hey Everyone ! Surendra Here ! Back With another Blog
Read more...

hacking: security in practice
Recieved an email from an "Ethical hacker" is this a scam?

Our company email address received an email from an ethical hacker, is this something serious that I need to look into or is it just a scam and I should just block and move on? The email states:

​

Hello Team,

​

​
As an Ethical Hacker i found some Vulnerabilities in your site one of them is as follows.
​
Issue : CLICK JACKING
​

​
Clickjacking, also known as a "UI redress attack", is when an attacker uses
​
multiple transparent or opaque layers to trick a user into clicking on a
​
button or link on another page when they were intending to click on the the
​
top level page. Thus, the attacker is "hijacking" clicks meant for their
​
page and routing them to another page, most likely owned by another
​
application, domain, or both.
​
Using a similar technique, keystrokes can also be hijacked. With a
​
carefully crafted combination of stylesheets, iframes, and text boxes, a
​
user can be led to believe they are typing in the password to their email
​
or bank account, but are instead typing into an invisible frame controlled
​
by the attacker.
​
PoC:
​

​



​

​

​

​

​
IMPACTS:
​
By using Clickjacking technique, an attacker hijack's click's meant for one page and route them to another page, most likely for another application, domain, or both.
​

​
Remediation:
​
Frame busting technique is the better framing protection
​
technique. Sending the proper X-Frame-Options HTTP response headers
​
that instruct the browser to not allow framing from other
​
domains
​
For Fix:
​
it is missing a X-FRAME header. a user with the help of some tricky css can trick the user click on the one click actions. . You should apply a X-FRAME header
​
Note: I’m hoping to receive a bounty reward for my current finding. I will be looking forward to hearing from you on this and will be reporting other vulnerabilities accordingly.
​

​
kind Regards SNAPSHOT
submitted by /u/Artistic-Answer-8361
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How long might it take to brute force a 24 word seed phrase (vs a 12 word phrase) if the words are known, but not the order?

(Apologies in advance as I'm relatively new to this space.)

I'm curious, if I offered up the words from a 24 word seed phrase, but not their order, with the plan to reveal the position of each word over a set amount of time how long would it realistically take someone to crack?

I know the 24th word is a checksum, so my loose understanding is that the number of possible combinations is 23! dropping by one factorial with each word revealed.

Curious at what point the passphrase could reasonably be cracked or how many words (if any) would need to be revealed until it is possible to brute force in under 24 hours.

submitted by /u/TEKSTartist
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Where does one place a bounty on decoding a proprietary communications protocol?

I got a pallet from an industrial auction of late 90's early 2000's robotic servomotors a few years ago. Half of them are brand new, the other half working pulls from decommissioned robots.

I'm compiling an open source project for using old industrial robots with ROS. I've designed some great servo amplifiers and server/pc interface cards and got it working with ABB and Panasonic hardware but can't decode all the data from the FANUC Alpha motor pulse coders. Google gives me nothing.

I gave up a year ago and every time I open the garage I have to look at it, sigh, and step around the pile. I'm willing to throw money at the problem at this point.

Where would I throw this money?

Please respect rule 2. I am not asking for your services and any comments/messages offering them will be screenshotted and sent to the subreddit moderators.

submitted by /u/-Mikee
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Some websites are able to determine that your not actually in the us?

So I got this play store gift card and when I entered it on my phone it said it can only be claimed in the united states, so I changed my google billing adreeas to the us, but I still got that messagee, so I used a vpn and a new google acount, but I still got the message, so I got a windows vps that was hosted in the us and logged into my acount and tried to claim the gift card but I still got the error message, how is google play store able to determine that im not actually in the us???

submitted by /u/Agitated-Farmer-4082
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Potential iCloud Hack/Scam

I'm not really sure if this is the right sub for this, so if it is not, and you could redirect me to the right one, that would be great. Anyways, I was just browsing through reddit on my phone, and clicked on a link for a picture in someone's comment. It brought me to an Apple iCloud page that was blank with a grey loading circle. It spun for around 2 seconds before it hit me that it could be a potential hack/scam. I instantly clicked closed that browser, and now I am here. I clicked on the reddit account that posted the comment, and it was a bot account, with like 4 karma. Basically what I'm asking here, is should I be worried, or was it just nothing? I closed out of the tab before anything loaded, but I'm thinking that nothing would have ever loaded, it was just to stall while it could potentially infiltrate my phone. Thanks for any help!

submitted by /u/Lil-Parabala
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How To Pay And Buy Online Anonymously | SCOT UG

https://cdn-images-1.medium.com/max/1080/1*NJmAtbsjSg-D5borTqVW7A.png
Some factors people think of first are their personal data, like the names of credit cards they use and their biography. However, hackers…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How to know the secrets of a website server?

https://cdn-images-1.medium.com/max/640/0*rHY2MHx1yZUK5ey-.jpg
A website presents itself as all its information is public. However, there’s is an ocean of useful data hidden which isn’t visible to the…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Privilege Escalation with MySQL User Defined Functions

https://cdn-images-1.medium.com/max/2071/1*nc03GvmuYZL4brqx7nAsPw.jpeg
Extending MySQL functionality with UDFs — Banzai, Proving Grounds

Continue reading on R3d Buck3T »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
CISA emite una advertencia sobre las amenazas cibernéticas dirigidas a los sistemas de agua y…

https://cdn-images-1.medium.com/max/1622/0*FMHygPRbmvKZXeoD
PUBLICADO EN 15 OCTUBRE, 2021POR EHACKING

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Más de 30 países se comprometen a luchar contra los ataques de ransomware en una reunión mundial…

https://cdn-images-1.medium.com/max/1611/0*34mwIliQWa_ptJDo
PUBLICADO EN 18 OCTUBRE, 2021 POR EHACKING

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Inceptor - Template-Driven AV/EDR Evasion Framework
http://www.kitploit.com/2021/10/inceptor-template-driven-avedr-evasion.html

___________________________
@hacking_Attack
@Hacking_Video

Modern Penetration testing and Red Teaming often requires to bypass common AV/EDR appliances in order to execute code on a target. With time, defenses are becoming more complex and inherently more difficult to bypass consistently.Inceptor is a tool which can help to automate great part of this process, hopefully requiring no further effort.
Features
Inceptor is a template-based PE packer for Windows, designed to help penetration testers and red teamers (https://www.kitploit.com/search/label/Red%20Teamers) to bypass common AV and EDR solutions. Inceptor has been designed with a focus on usability, and to allow extensive user customisation.To have a good overview of what it was implemented and why, it might be useful to tak a look to the following resources:The path to code execution in the era of EDR, Next-Gen AVs, and AMSI (https://klezvirus.github.io/RedTeaming/AV_Evasion/CodeExeNewDotNet/)Inceptor - Bypass AV-EDR solutions combining well known techniques (https://github.com/klezVirus/inceptor/blob/main/slides/Inceptor%20-%20Bypass%20AV-EDR%20solutions%20combining%20well%20known%20techniques.pdf)
Shellcode Transformation/Loading
Inceptor is able to convert existing EXE/DLL into shellcode using various open-source converters:Donut (https://github.com/TheWover/donut): Donut is "The Converter". This tool is more like a piece of art by TheWover (https://twitter.com/TheRealWover), and can be used to transform Native binaries, DLL, and .Net binaries into position independent code shellcode.sRDI (https://github.com/monoxgas/sRDI): By Monoxgas (https://twitter.com/monoxgas), this tool can convert existing naticcve DLL into PIC, which can then be injected as regular shellcode.Pe2Sh (https://github.com/hasherezade/pe_to_shellcode): By Hasherazade (https://twitter.com/hasherezade), this tool can convert an existing native EXE into PIC shellcode, which can also be run as a normal EXE.
LI Encoders vs LD Encoders
Inceptor can encode, compress, or encrypt shellcode using different means. While developing the tool, I started differentiating between what I call loader-independent (LI) encoding, and loader-dependent (LD) encoding.Loader-independent encoding is a type of encoding not managed by the template chosen by the user (loader). This usually means that the decoding stub is not part of the template, but embedded in the shellcode itself. Inceptor offers this kind of feature using the open-source tool sgn (https://github.com/EgeBalci/sgn), which is used to make the payload polymorphic and undetectable (https://www.kitploit.com/search/label/Undetectable) using common signature detection.Even strong at it is, Shikata-Ga-Nai is not really suitable for certain templates. For this reason, Inceptor also implements Loader-dependent encoders, which are designed to let the loader taking care of the decoding. As such, LD encoders install the decoding stub directly in the template. This kind of encoders, as implemented within Inceptor, are also "Chainable", meaning they can be chained together to encode a payload.While using a chain of encoders can sometimes improve the obfuscation (https://www.kitploit.com/search/label/Obfuscation) of a given payload, this technique can also expose multiple decoding routines, which can help Defenders to design signatures against them. For this reason, Inceptor offers multiple ways to obfuscate the final artifacts, hardening the RE process.At the time of writing, the public version of Inceptor has been provided with the following encoders/compressors/encryptors:Native XorNop (Insertion).NET HexBase64XorNop (Insertion)AESZlibRLEPowerShell HexBase64XorNop (Insertion)AESInceptor can validate an encoding chain both statically and dynamically, statically checking the decoders' input/output types, and also dynamically verifying the implementation with an independent implementation.At any time, a user can easily validate a chain using the chain-validate.py utility.
AV Evasion Mechanisms

___________________________
@hacking_Attack
@Hacking_Video

Inceptor also natively implements AV Evasion mechanisms, and as such, it offers the possibility to include AV evasion features to the payload in the form of "modules" (plugins).The plugins which can be embedded are: AMSI bypass WLDP bypass ETW bypass Sandbox (Behavioural) Deception
EDR Evasion Mechanisms
Inceptor also implements EDR Evasion mechanisms, such as full unhooking, direct syscall invocation and manual DLL mapping. Direct Syscalls are implemented in C# using the outstanding "DInvoke (https://github.com/TheWover/DInvoke)" project, again by TheWover (https://github.com/phra/PEzor). In C/C++, Syscalls are implemented using SysWhispers (https://github.com/jthuraisamy/SysWhispers) and SysWhispers2 (https://github.com/jthuraisamy/SysWhispers2) projects, by Jackson_T (https://twitter.com/Jackson_T). In addition, Inceptor has built-in support for x86 Syscalls as well.As the AV bypass features, these features can be enabled as modules, with the only difference that they require operating on a template which supports them. The techniques implemented so far are: Full Unhooking Manual DLL Mapping Direct Syscalls
Obfuscation
Inceptor supports payload obfuscation by using external utils, such as ConfuserEx (https://github.com/mkaring/ConfuserEx)and Chameleon (https://github.com/klezVirus/chameleon), and provides support for C/C++ obfuscation using LLVM-Obfuscator (https://github.com/klezVirus/obfuscator), which is an IR-based obfuscator using the LLVM compilation platform. PowerShell C# C/C++
Code Signing
Another feature of Inceptor is that it can code sign the resulting binary/dll by using the tool CarbonCopy (https://github.com/paranoidninja/CarbonCopy)Usually, files signed with code signing certificates (https://www.kitploit.com/search/label/Certificates) are less strictly analysed. Many anti-malware products don't validate/verify these certificates.
Workflow
The full workflow can be summarized in the following high-level, and simplified scheme:

___________________________
@hacking_Attack
@Hacking_Video