Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Visit Websites Without Opening The Browser
https://cdn-images-1.medium.com/max/2600/0*B0SswuDMCh7ObeV-
Learn how to interact with a website using headless Chrome, simple JavaScript, and Docker containers.
Continue reading on JavaScript in Plain English »
Visit Websites Without Opening The Browser
https://cdn-images-1.medium.com/max/2600/0*B0SswuDMCh7ObeV-
Learn how to interact with a website using headless Chrome, simple JavaScript, and Docker containers.
Continue reading on JavaScript in Plain English »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Ensure that you treat all systems, devices, data sources, etc. as protected resources
Today over 30% of data attacks and compromises come from inside the organization. And, most external attacks come from compromised user…
Continue reading on Medium »
Ensure that you treat all systems, devices, data sources, etc. as protected resources
Today over 30% of data attacks and compromises come from inside the organization. And, most external attacks come from compromised user…
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
¡Winamp Media Player regresó con la versión 5.8!
https://cdn-images-1.medium.com/max/1438/0*5njKGltUCyt3VVts
PUBLICADO EN 25 OCTUBRE, 2021 POR EHACKING
Continue reading on Medium »
¡Winamp Media Player regresó con la versión 5.8!
https://cdn-images-1.medium.com/max/1438/0*5njKGltUCyt3VVts
PUBLICADO EN 25 OCTUBRE, 2021 POR EHACKING
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Subnetting with docker
https://cdn-images-1.medium.com/max/2600/0*pWie1xc5j_SQi8Bj
Hi, Dhanesh Sivasamy here. Today we are going to take advantage of docker’s subnet functionality and use it to spin up our docker instance…
Continue reading on Medium »
Subnetting with docker
https://cdn-images-1.medium.com/max/2600/0*pWie1xc5j_SQi8Bj
Hi, Dhanesh Sivasamy here. Today we are going to take advantage of docker’s subnet functionality and use it to spin up our docker instance…
Continue reading on Medium »
Analysis for CVE-2021–23981 (Mozilla Firefox Texture Upload Buffer Overflow OOBR)
Out Of Bounds Read vulnerability exists in texture upload through texImage2D method in WebGL APIContinue reading on Medium »
Read more...
Out Of Bounds Read vulnerability exists in texture upload through texImage2D method in WebGL APIContinue reading on Medium »
Read more...
Analysis for CVE-2021–21233 (Google Chrome Heap Buffer Overflow)
Out Of Bounds Write vulnerability existed in BlitFramebuffer method of WebGL API in Chromium based browsers.Continue reading on Medium »
Read more...
Out Of Bounds Write vulnerability existed in BlitFramebuffer method of WebGL API in Chromium based browsers.Continue reading on Medium »
Read more...
Easy SSRF from Wayback Machine
We will talk about the SSRF and what is it and how I was able to find a Non-Blind SSRF with wayback machine. — By xelkomyContinue reading on Medium »
Read more...
We will talk about the SSRF and what is it and how I was able to find a Non-Blind SSRF with wayback machine. — By xelkomyContinue reading on Medium »
Read more...
Hacking Articles Tips Tricks Videos Tutorials
Photo
hacking: security in practice
Do Nmap scans live any traces if the target isn't capturing network traffic?
For example if I scan all the ports of the external IP of my home network, will that scan leave any traces behind?
Assume that I'm using a common commercial router
submitted by /u/Rolmar
[link] [comments]
Do Nmap scans live any traces if the target isn't capturing network traffic?
For example if I scan all the ports of the external IP of my home network, will that scan leave any traces behind?
Assume that I'm using a common commercial router
submitted by /u/Rolmar
[link] [comments]
reddit
Do Nmap scans live any traces if the target isn't capturing...
For example if I scan all the ports of the external IP of my home network, will that scan leave any traces behind? Assume that I'm using a common...
hacking: security in practice
Issue With Metasploit (HTB)
Hey everyone,
Just started working on some retired machines with HTB to start learning on Kali Linux. I was working on Optimum, did some recon, found the rejetto_hfs after doing a quick google search on exploits for the service on the open port, booted up Metasploit and found it on there.
Here is where things get iffy. When I open the exploit right away I get the "no payload configured defaulting to windows/meterpreter/reverse_tcp" error. For some reason this keeps happening when I use Metasploit and then the options always seem to ask for LHOST and LPORT, which I don't think is usually needed or asked for. I set LHOST to my IP and port 4444 which I heard is fine and set RHOST to the HTB machine IP.
So when I set up the options and run it, it seems to work but then I get :
Server stopped.
This exploit may require manual cleanup of '%TEMP%\sriJzbNrXoXfP.vbs' on the target
Exploit completed, but no session was created.
Any idea why this is happening? I feel as if its an issue with the payload not being configured when I boot up the exploit. This same issue keeps happening with other HTB machines I've done and when I look up tutorials it doesn't mention these issues. I know I can use the "show payloads" command and select one from the list, which I'm not sure I have the knowledge for yet, and set that option but why is this only happening randomly? The first time I used Metasploit I had no issues.
Also whats that manual cleanup issue? I tried looking around on the web and couldn't find much on it.
Any help would be greatly appreciated!
submitted by /u/SUDO_KERSED
[link] [comments]
Issue With Metasploit (HTB)
Hey everyone,
Just started working on some retired machines with HTB to start learning on Kali Linux. I was working on Optimum, did some recon, found the rejetto_hfs after doing a quick google search on exploits for the service on the open port, booted up Metasploit and found it on there.
Here is where things get iffy. When I open the exploit right away I get the "no payload configured defaulting to windows/meterpreter/reverse_tcp" error. For some reason this keeps happening when I use Metasploit and then the options always seem to ask for LHOST and LPORT, which I don't think is usually needed or asked for. I set LHOST to my IP and port 4444 which I heard is fine and set RHOST to the HTB machine IP.
So when I set up the options and run it, it seems to work but then I get :
Server stopped.
This exploit may require manual cleanup of '%TEMP%\sriJzbNrXoXfP.vbs' on the target
Exploit completed, but no session was created.
Any idea why this is happening? I feel as if its an issue with the payload not being configured when I boot up the exploit. This same issue keeps happening with other HTB machines I've done and when I look up tutorials it doesn't mention these issues. I know I can use the "show payloads" command and select one from the list, which I'm not sure I have the knowledge for yet, and set that option but why is this only happening randomly? The first time I used Metasploit I had no issues.
Also whats that manual cleanup issue? I tried looking around on the web and couldn't find much on it.
Any help would be greatly appreciated!
submitted by /u/SUDO_KERSED
[link] [comments]
reddit
Issue With Metasploit (HTB)
Hey everyone, Just started working on some retired machines with HTB to start learning on Kali Linux. I was working on Optimum, did some recon,...
hacking: security in practice
Why don't RaaS affiliates target Chinese companies?
With the Canadian national recently arrested for his role in Netwalker and the Lockbit list of affiliates released (i.e. usernames such as 'malibudad'), I think it's safe to say many affiliates are not purely of Russian or Soviet-bloc origin. Meaning... they are living in Western countries and obviously very good because most of the public investigation/coverage has been directed towards the authors of the ransomware and not the individuals deploying it domestically.
It might seem stupid, but (especially for affiliates of American origin), why not target cash-rich Chinese firms (or firms not in the American/EU sphere on influence)? Similar to how the authors of malware prevent its use if Cyrillic is detected - without invoking some larger moral thing - it seems like a natural option for affiliates not to shit where they eat?
submitted by /u/heap-spray-n-pray
[link] [comments]
Why don't RaaS affiliates target Chinese companies?
With the Canadian national recently arrested for his role in Netwalker and the Lockbit list of affiliates released (i.e. usernames such as 'malibudad'), I think it's safe to say many affiliates are not purely of Russian or Soviet-bloc origin. Meaning... they are living in Western countries and obviously very good because most of the public investigation/coverage has been directed towards the authors of the ransomware and not the individuals deploying it domestically.
It might seem stupid, but (especially for affiliates of American origin), why not target cash-rich Chinese firms (or firms not in the American/EU sphere on influence)? Similar to how the authors of malware prevent its use if Cyrillic is detected - without invoking some larger moral thing - it seems like a natural option for affiliates not to shit where they eat?
submitted by /u/heap-spray-n-pray
[link] [comments]
reddit
Why don't RaaS affiliates target Chinese companies?
With the Canadian national recently arrested for his role in Netwalker and the Lockbit list of affiliates released (i.e. usernames such as...
Microsoft Digital Defense Report shares new insights on nation-state attacks
https://www.reddit.com/r/redteamsec/comments/qgcv1m/microsoft_digital_defense_report_shares_new/
submitted by /u/SCI_Rusher (https://www.reddit.com/user/SCI_Rusher)
[link] (https://aka.ms/MDDRInsightOnAttacks) [comments] (https://www.reddit.com/r/redteamsec/comments/qgcv1m/microsoft_digital_defense_report_shares_new/)
https://www.reddit.com/r/redteamsec/comments/qgcv1m/microsoft_digital_defense_report_shares_new/
submitted by /u/SCI_Rusher (https://www.reddit.com/user/SCI_Rusher)
[link] (https://aka.ms/MDDRInsightOnAttacks) [comments] (https://www.reddit.com/r/redteamsec/comments/qgcv1m/microsoft_digital_defense_report_shares_new/)
Easy SSRF from Wayback Machine
https://xelkomy.medium.com/easy-ssrf-from-wayback-machine-edf946486120?source=rss------bug_bounty-5
https://xelkomy.medium.com/easy-ssrf-from-wayback-machine-edf946486120?source=rss------bug_bounty-5
We will talk about the SSRF and what is it and how I was able to find a Non-Blind SSRF with wayback machine. — By xelkomyContinue reading on Medium » (https://xelkomy.medium.com/easy-ssrf-from-wayback-machine-edf946486120?source=rss------bug_bounty-5)
Race Condition — Resulted in using the feature which was supposed to be obtained after subscription.
https://medium.com/@bababounty99/race-condition-resulted-in-using-the-feature-which-was-supposed-to-be-obtained-after-subscription-2bfe968d358c?source=rss------bug_bounty-5
What Is a Race Condition Vulnerability?Continue reading on Medium » (https://medium.com/@bababounty99/race-condition-resulted-in-using-the-feature-which-was-supposed-to-be-obtained-after-subscription-2bfe968d358c?source=rss------bug_bounty-5)
https://medium.com/@bababounty99/race-condition-resulted-in-using-the-feature-which-was-supposed-to-be-obtained-after-subscription-2bfe968d358c?source=rss------bug_bounty-5
What Is a Race Condition Vulnerability?Continue reading on Medium » (https://medium.com/@bababounty99/race-condition-resulted-in-using-the-feature-which-was-supposed-to-be-obtained-after-subscription-2bfe968d358c?source=rss------bug_bounty-5)