Hacking Articles Tips Tricks Videos Tutorials

MY FIRST BUG BOUNTY

i.e SQL INJECTION

10 viewsedited 07:06

MY FIRST BUG BOUNTY

i.e SQL INJECTIONContinue reading on Medium »
Read more...

10 views07:47

I'm somewhat a beginner. I was just curious about SSL stripping...

hacking: security in practice
I'm somewhat a beginner. I was just curious about SSL stripping within a python script

I'm writing a packsniffing program, and I tried to run better cap hstshijack as a subprocess. However, it does not allow the rest of the program to run until I exit the SSL strip program. Is there anyway to run it within the packsniffing script?

My goal is to have it run in the background once I run the packsniffer.

submitted by /u/godhimself2
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

I'm writing a packsniffing program, and I tried to run better cap hstshijack as a subprocess. However, it does not allow the rest of the program...

7 viewsedited 08:23

6 views08:44

Hacking on Medium
Reverse Engineering — Part 1 (Basic Programming Concepts)

https://cdn-images-1.medium.com/max/600/1*b31hiO4ynbDLRrXWEFF4aQ.png
Throughout the reverse engineering learning process I have found myself wanting a straightforward guide for what to look for when browsing…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Reverse Engineering — Part 1 (Basic Programming Concepts)

Throughout the reverse engineering learning process I have found myself wanting a straightforward guide for what to look for when browsing…

6 viewsedited 08:44

6 views08:44

6 views08:44

Hacking on Medium
Google releases urgent chrome update to fix two 0-day bugs — Planck Studio

https://cdn-images-1.medium.com/max/1200/1*4-CtC5_HHlDQY9x6Lfry2A.png
Chrome users are advised to update to the latest version (95.0.4638.69) for all platforms Windows, Mac, and Linux

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Google releases urgent chrome update to fix two 0-day bugs

Chrome users are advised to update to the latest version (95.0.4638.69) for all platforms Windows, Mac, and Linux

6 viewsedited 08:44

Hacking on Medium
MY FIRST BUG BOUNTY

i.e SQL INJECTION

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

MY FIRST BUG BOUNTY

i.e SQL INJECTION

6 viewsedited 08:44

6 views08:44

Hacking on Medium
An Introduction to Digital Stenography

https://cdn-images-1.medium.com/max/2600/1*KoJ-DY7GdgCIQdU6XjpP6g.jpeg
Stenography is the art of encoding secret information into multimedia carriers such as images, audio, and videos. The ultimate goal is to…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

An Introduction to Digital Stenography

Stenography is the art of encoding secret information into multimedia carriers such as images, audio, and videos. The ultimate goal is to…

8 viewsedited 08:44

8 views08:44

Hacking on Medium
Green pass, furto di chiavi informatiche per falsificare i certificati EU

https://cdn-images-1.medium.com/max/2048/1*QZPZSFZQyNd0p478J0JXSg.png
Sono state trafugate alcune chiavi informatiche perla generazione del Green Pass europeo con lo scopo di generare certificati falsi.

Continue reading on BV TECH Group »

___________________________
@hacking_Attack
@Hacking_Video

Green pass, furto di chiavi informatiche per falsificare i certificati EU

Sono state trafugate alcune chiavi informatiche perla generazione del Green Pass europeo con lo scopo di generare certificati falsi.

10 viewsedited 08:44

Penetration testing books form beginners to advanced

Penetration testing books form beginners to advanced
https://www.reddit.com/r/Pentesting/comments/qi8qgf/penetration_testing_books_form_beginners_to/

___________________________
@hacking_Attack
@Hacking_Video

Posted in r/Pentesting by u/RHS2022 • 0 points and 0 comments

11 viewsedited 09:25

12 views09:25

The u/RHS2022 community on Reddit. Reddit gives you the best of the internet in one place.

submitted by /u/RHS2022 (https://www.reddit.com/user/RHS2022)
[link] (https://i.redd.it/75b8wrrcwcw71.jpg) [comments] (https://www.reddit.com/r/Pentesting/comments/qi8qgf/penetration_testing_books_form_beginners_to/)

___________________________
@hacking_Attack
@Hacking_Video

overview for RHS2022

11 viewsedited 09:25

11 views09:46

11 views09:46

Black Hat Ethical Hacking

Black Hat Ethical Hacking
All Windows versions impacted by new LPE zero-day vulnerability

___________________________
@hacking_Attack
@Hacking_Video

All Windows versions impacted by new LPE zero-day vulnerability | Black Hat Ethical Hacking

A public proof-of-concept (PoC) exploit and technical details for an unpatched Windows zero-day privilege elevation vulnerability has been disclosed that allows users to gain SYSTEM privileges under certain conditions.

12 viewsedited 09:46

Black Hat Ethical Hacking

Black Hat Ethical Hacking
Offensive Security Tool: ZipExec

https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Offensive Security Tool: ZipExecPost Views: 16 https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/BECOME-A-PATRON-AND-UNLOCK-EXCLUSIVE-VIDEOS-1.png Reading Time: 2 Minutes

Offensive Security Tool: ZipExec GitHub Link ZipExecZipExec by Tylous, is a Proof-of-Concept (POC) tool to wrap binary-based tools into a password-protected zip file. This zip file is then base64 encoded into a string that is rebuilt on disk. This encoded string is then loaded into a JScript file that when executed, would rebuild the password-protected zip file on disk and execute it. This is done programmatically by using COM objects to access the GUI-based functions in Windows via the generated JScript loader, executing the loader inside the password-protected zip without having to unzip it first. By password protecting the zip file, it protects the binary from EDRs and disk-based or anti-malware scanning mechanisms.

As you can see, this is a unique technique to execute binaries from a password protected zip helping the digital forensics team, and offensive security team to use in their field.
https://www.blackhatethicalhacking.com/wp-content/uploads/2021/10/68747470733a2f2f6d656469612e67697068792e636f6d2f6d656469612f596b6d347870354e6e4d6c7a396f684a62432f67697068792e676966.gif
See Also: All Windows versions impacted by new LPE zero-day vulnerability InstallationThe first step as always is to clone the repo. Before you compile ZipExec you’ll need to install the dependencies. To install them, run the following commands:
go get github.com/yeka/zip

Then build it

go build ZipExec.go

or

go get github.com/Tylous/ZipExec
See Also: Hacking stories – Operation Troy – How researchers linked the cyberattacks Help

./ZipExec -h

__________.__      ___________                     
\____    /|__|_____\_   _____/__  ___ ____   ____  
  /     / |  \____ \|    __)_\  \/  // __ \_/ ___\ 
 /     /_ |  |  |_> >        \> <\\___  >
        \/   |__|          \/      \/    \/     \/ 
                (@Tyl0us) Usage of ./ZipExec:
  -I string
        Path to the file containing binary to zip.
  -O string
        Name of output file (e.g. loader.js)
  -sandbox
        Enables sandbox evasion using IsDomainedJoined.

Offensive Security Tool: ZipExec | Black Hat Ethical Hacking

ZipExec is a Proof-of-Concept (POC) tool to wrap binary-based tools into a password-protected zip file.

13 viewsedited 09:46