Hacking on Medium
Crean un nuevo ataque que registra todo lo que haces en Internet

https://cdn-images-1.medium.com/max/1641/0*4xGkvgTHFmmJ7EKW
PUBLICADO EN 1 NOVIEMBRE, 2021POR EHACKING

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
Androidqf - (Android Quick Forensics) Helps Quickly Gathering Forensic Evidence From Android Devices, In Order To Identify Potential Traces Of Compromise

https://blogger.googleusercontent.com/img/a/AVvXsEgaz3pE5GN0Hw1_94tYn5ZEJqg0J7XMY63KUhsgtm8AwSv4d-_G3OpdXSz85Y7JfSftQ7vzpmXlSsYCGI4S4zRCAULVLmOjW1VyMsRP9xMFncBukMNs1hRZz8wXNqkHmEglCc5i73rbK8DA8u2HBb8J37yoW8isyBDokXS82v19rJLv29oB-nlhJSArrg=w640-h350 androidqf (Android Quick Forensics) is a portable tool to simplify the acquisition of relevant forensic data from Android devices. It is the successor of Snoopdroid, re-written in Go and leveraging official adb binaries.

androidqf is intended to provide a simple and portable cross-platform utility to quickly acquire data from Android devices. It is similar in functionality to mvt-android. However, contrary to MVT, androidqf is designed to be easily run by non-tech savvy users as well. Download androidqf BuildExecutable binaries for Linux, Windows and Mac should be available in the latest release. In case you have issues running the binary you might want to build it by yourself.

In order to build androidqf you will need Go 1.15+ installed. You will also need to install make. When ready you can clone the repository and run any of the following commands, for your platform of choice: make linux
make darwin
make windows These commands will generate binaries in a build/ folder. How to useBefore launching androidqf you need to have the target Android device connected to your computer via USB, and you will need to have enabled USB debugging. Please refer to the official documentation on how to do this, but also be mindful that Android phones from different manufacturers might require different navigation steps than the defaults.

Once USB debugging is enabled, you can proceed launching androidqf. It will first attempt to connect to the device over the USB bridge, which should result in the Android phone to prompt you to manually authorize the host keys. Make sure to authorize them, ideally permanently so that the prompt wouldn't appear again.

Now androidqf should be executing and creating an acquisition folder at the same path you have placed your androidqf binary. At some point in the execution, androidqf will prompt you some choices: these prompts will pause the acquisition until you provide a selection, so pay attention.

The following data can be extracted:

1. A list of all packages installed and related distribution files.
2. (Optional) Copy of all installed APKs or of only those not marked as system apps.
3. The output of the dumpsysshell command, providing diagnostic information about the device.
4. The output of the getpropshell command, providing build information and configuration parameters.
5. The output of the psshell command, providing a list of all running processes.
6. (Optional) A backup of SMS and MMS messages. Encryption & Potential ThreatsCarrying the androidqf acquisitions on an unencrypted drive might expose yourself, and even more so those you acquired data from, to significant risk. For example, you might be stopped at a problematic border and your androidqf drive could be seized. The raw data might not only expose the purpose of your trip, but it will also likely contain very sensitive data (for example list of applications installed, or even SMS messages).

Ideally you should have the drive fully encrypted, but that might not always be possible. You could also consider placing androidqf inside a VeraCrypt container and carry with it a copy of VeraCrypt to mount it. However, VeraCrypt containers are typically protected only by a password, which you might be forced to provide.

Alternatively, androidqf allows to encrypt each acquisition with a provided age public key. P[...]

___________________________
@hacking_Attack
@Hacking_Video

referably, this public key belongs to a keypair for which the end-user does not possess, or at least carry, the private key. In this way, the end-user would not be able to decrypt the acquired data even under duress.

If you place a file called key.txtin the same folder as the androidqf executable, androidqf will automatically attempt to compress and encrypt each acquisition and delete the original unencrypted copies.

Once you have retrieved an encrypted acquisition file, you can decrypt it with age like so: $ age --decrypt -i ~/path/to/privatekey.txt -o Bear in mind, it is always possible that at least some portion of the unencrypted data could be recovered through advanced forensics techniques - although we're working to mitigate that. LicenseThe purpose of androidqf is to facilitate the consensual forensic analysis of devices of those who might be targets of sophisticated mobile spyware attacks, especially members of civil society and marginalized communities. We do not want androidqf to enable privacy violations of non-consenting individuals. Therefore, the goal of this license is to prohibit the use of androidqf (and any other software licensed the same) for the purpose of adversarial forensics.

In order to achieve this androidqf is released under MVT License 1.1, an adaptation of Mozilla Public License v2.0. This modified license includes a new clause 3.0, "Consensual Use Restriction" which permits the use of the licensed software (and any "Larger Work" derived from it) exclusively with the explicit consent of the person/s whose data is being extracted and/or analysed ("Data Owner"). Download Androidqf

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Phishing Attack Blends Spoofed Amazon Order and Fraudulent Customer Service Agents

It's the latest in a series of clever brand impersonation scams that use multiple vectors to lure victims.

Dark Reading: Attacks/Breaches
Coalfire Expands Application Security Vision With Major Upgrade to Application Security Platform, ThreadFix

ThreadFix v3.1 delivers fastest speed for AppSec automation and remediation.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Ripping Off the Blindfold: Illuminating OT Environments

A security tool that monitors OT devices can't disrupt operations. This is why the Self-Learning AI acts only on information obtained by passive monitoring of the network.

Dark Reading: Attacks/Breaches
API Security Issues Hinder Application Delivery

A new survey explains why nearly all organizations experience API security problems to varying degrees.

Dark Reading: Attacks/Breaches
US Offers $10M Reward For ID, Location of DarkSide Leadership

The State Department offers multimillion-dollar rewards for information related to the leaders and members involved in DarkSide ransomware.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
How Is Zero Trust Different From Traditional Security?

Unlike traditional security approaches, the zero-trust security model verifies a user's identity each and every time they need specific system access.

hacking: security in practice
How to capture jnlp traffic with Burp?

How to inspect/capture traffic with Burp if an application running on jnlp?

To start the app
javaws https://serverA:1234/path/fileB.jnlp
However, there is nothing on Burp when the app is launched.

Tried with Wireshark and I can see all the traffic.

Weird things is there's not much traffic on port 1234, but there are a lot of communication going to different servers as well on different port numbers.

When I downloaded the jnlp file with curl, it's actually a XML file with bunch of jar href tag.

However, I'm only getting 404 response when trying to access it.
$ curl -k https://serverA:1234/path/fileC.jar Error 404
1. How this kind of app works when all the file returns 404?
2. What is the right way to forward this kind traffic to Burp?

submitted by /u/w0lfcat
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Spoofing a "virtual" Bluetooth device to my phone

Is there existing software to spoof a Bluetooth device on an Android device?

So, Call of Duty mobile has a glitch where if you connect a Bluetooth XBOX/PS controller, you can then plug in a USB controller (ala Razer Kishi) and play away. If i can spoof a virtual Bluetooth Xbox controller, the game should theoretically see that the device it's looking for is present, and i should be able to just use my Kishi, so i don't have to purchase an extra controller for a game i only play occasionally.

submitted by /u/ClimbRunOm
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
is this legit or if not is there a legit one?

i was wondering if this discord token logger was real it attached to chrome and a discord video i think and took the token https://www.youtube.com/watch?v=d6CGRGhpRc0&ab_channel=smarticaim (if you need me to delete i can)

submitted by /u/killmeplease___25
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Deep Web
I use TOR in Brave. Is it necessary to use a incognito distro like Tails?

submitted by /u/UsuarioDaInternet
[link] [comments]

Hacking on Medium
This is how I bypassed Cortex XDR

https://cdn-images-1.medium.com/max/754/1*wpTx5UE1_AfRJBw39bG9-A.png
First of all, let me introduce myself, my name is Omri Baso, I'm 24 years old from Israel and I'm a red teamer and security researcher…

Continue reading on Medium »

hacking: security in practice
Challenge: How to edit a on original video and produce clips without evidence of tampering?

The Gist:

How would you create 2 clips from an original video source file and make it seem that those 2 new clips are originally from the same recording device (iPhone) and not edited and post-produced in anyway.

Scenario:

If you have a 2 minute video straight from your phone (iOS), and you need to split and trim it to produce two 30 second clips from source, how would you do it so that the videos produce seems original unedited files recorded from your phone and no one could tell it came from a single source file?

Trimming and splitting it and using file naming conventions used by IOS on the new files is not enough because it is not all just in the file name, correct?

1. I understand there is META DATA that may leave clues - right? So can we edit/spoof the meta data to make it seem as if the file was written by iOS phone and not a computer or video editing software?
2. The modified and created dates of the files will be suspicious. Say the original video was taken sept 01, 2021 between 9:00 to 9:02AM, i assume we need to alter the modified / created dates to match the original source accurately, right? Is this possible?
3. Scrub any signatures or traces of the computer and editing software used to edit and produce the clips.

I assume these are the 3 factors that needs top be covered, right? Is there any other factors to consider?

​

submitted by /u/remivato69
[link] [comments]