https://b.thumbs.redditmedia.com/BNwJ48zXMDYjbiEay4p81NKiUeqmtzcvHNhn0LAr7HA.jpg Hardware grade PIN bruteforce protection using a split encryption key

https://veslocker.com

https://preview.redd.it/7lzm8zaub0y71.png?width=756&format=png&auto=webp&s=ba002803e3b7e99c41308238f16755d0290291cf

submitted by /u/vesvault
[link] [comments]

hacking: security in practice
How can having someones ip be a threat to them?

Recently I've been seeing all these memes about how sending someone their ip address is threatening. I know those are just meme but I wonder if it's actually a thing. I don't know much about networks and hacking but I know that with ip you can only find out which city people live in and that's not much information.

submitted by /u/mustache-eater
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Thread Modelling using DREAD

https://cdn-images-1.medium.com/max/964/1*vJHF5sI21bszj6PX2GY55Q.png
Introduction

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How I built an Android Spyware using Ruby on Rails and Metasploit

https://cdn-images-1.medium.com/max/1600/1*yv9GnGEyJN2T_69Ei4AJaw.png
Last year I had to present my dissertation paper and I chose to build a spyware tool for Android devices. I got a lot of requests to…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Broken: Gallery Vulnhub Walkthrough

https://cdn-images-1.medium.com/max/804/0*j9dFAoDZ_Fm4iyJG.png
Makineyi indirebilirsiniz.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Hacker101: Micro-CMS v1

https://cdn-images-1.medium.com/max/600/1*Eu-rwVs3qzPWB1FCmHBfZQ.png
console.log(“Hello World!”);

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
The 5 Steps to Hack Fight by Smart Mindset

https://cdn-images-1.medium.com/max/1536/1*BHivZz6vSIPu7FZgLRgmyw.png
Are you in the victim mindset, millionaire mindset, entrepreneurial mindset, positive mind, or growth mindset?

Continue reading on ILLUMINATION »

___________________________
@hacking_Attack
@Hacking_Video

Is there any blogpost regarding how NSX based EDRs work and how to bypass them?
https://www.reddit.com/r/redteamsec/comments/qo3iit/is_there_any_blogpost_regarding_how_nsx_based/

<!-- SC_OFF -->As the title says, Is there any blogpost or anything regarding how NSX based EDRs work and how to bypass them? ​ For example kaspersky has something called an agentless VMware NSX based EDR, but i cant find any red teamming type of info regarding it? ​ Since its agentless, i dont know which part of it should i analyze in IDA in order to understand how its detecting threats on the endpoints? Does it even use any driver or usermode service, or it monitors apps through hypervisor?! ​ For example this is kaspersky's agentless virtualization security: https://www.kaspersky.com/small-to-medium-business-security/virtualization-agentless ​ My main concern right now is to learn how exactly the agentless Kaspersky and similar products work, and how to bypass them, and how is it "Agentless"? How its monitoring the endpoints, for example process creation, etc without an agent/driver/service on the guest machines? If its using hypervisor to monitor the guests instead of a driver in the guest, then it means i cant even bypass it using a kernel mode rootkit, right?! <!-- SC_ON --> submitted by /u/BitDrill (https://www.reddit.com/user/BitDrill)
[link] (https://www.reddit.com/r/redteamsec/comments/qo3iit/is_there_any_blogpost_regarding_how_nsx_based/) [comments] (https://www.reddit.com/r/redteamsec/comments/qo3iit/is_there_any_blogpost_regarding_how_nsx_based/)

Smuggler - An HTTP Request Smuggling / Desync Testing Tool
http://www.kitploit.com/2021/11/smuggler-http-request-smuggling-desync.html

An HTTP Request Smuggling / Desync testing tool written in Python 3
Acknowledgements
A special thanks to James Kettle (https://skeletonscribe.net/) for his research and methods into HTTP desyncs (https://portswigger.net/research/http-desync-attacks-request-smuggling-reborn) And a special thanks to Ben Sadeghipour (https://www.nahamsec.com/) for beta testing Smuggler and for allowing me to discuss my work at Nahamcon 2020 (https://nahamcon.com/)
IMPORTANT
This tool does not guarantee no false-positives or false-negatives. Just because a mutation may report OK does not mean there isn't a desync issue, but more importantly just because the tool indicates a potential desync issue does not mean there definitely exists one. The script may encounter request processors from large entities (i.e. Google/AWS/Yahoo/Akamai/etc..) that may show false positive results.
Installation
git clone https://github.com/defparam/smuggler.git cd smuggler python3 smuggler.py -h
Example Usage
Single Host: ">python3 smuggler.py -u
List of hosts: cat list_of_hosts.txt | python3 smuggler.py

Options
usage: smuggler.py [-h] [-u URL] [-v VHOST] [-x] [-m METHOD] [-l LOG] [-q]
[-t TIMEOUT] [--no-color] [-c CONFIGFILE]

optional arguments:
-h, --help show this help message and exit
-u URL, --url URL Target URL with Endpoint
-v VHOST, --vhost VHOST
Specify a virtual host
-x, --exit_early Exit scan on first finding
-m METHOD, --method METHOD
HTTP method to use (e.g GET, POST) Default: POST
-l LOG, --log LOG Specify a log file
-q, --quiet Quiet mode will only log issues found
-t TIMEOUT, --timeout TIMEOUT
Socket timeout value Default: 5
--no-color Suppress color codes
-c CONFIGFILE, --configfile CONFIGFILE
Filepath to the configuration file of payloads
Smuggler at a minimum requires either a URL via the -u/--url argument or a list of URLs piped into the script via stdin. If the URL specifies https:// then Smuggler will connect to the host:port using SSL/TLS. If the URL specifies http:// then no SSL/TLS will be used at all. If only the host is specified, then the script will default to https:// Use -v/--vhost to specify a different host header from the server address Use -x/--exit_early to exit the scan of a given server when a potential issue is found. In piped mode smuggler will just continue to the next host on the list Use -m/--method to specify a different HTTP verb from POST (i.e GET/PUT/PATCH/OPTIONS/CONNECT/TRACE/DELETE/HEAD/etc...) Use -l/--log to write output to file as well as stdout Use -q/--quiet reduce verbosity and only log issues found Use -t/--timeout to specify the socket timeout. The value should be high enough to conclude that the socket is hanging, but low enough to speed up testing (default: 5) Use --no-color to suppress the output color codes printed to stdout (logs by default don't include color codes) Use -c/--configfile to specify your smuggler mutation configuration file (default: default.py)
Config Files
Configuration files are python files that exist in the ./config directory of smuggler. These files describe the content of the HTTP requests and the transfer-encoding mutations to test. Here is example content of default.py: def render_template(gadget):
RN = "\r\n"
p = Payload()
p.header = "__METHOD__ __ENDPOINT__?cb=__RANDOM__ HTTP/1.1" + RN
# p.header += "Transfer-Encoding: chunked" +RN
p.header += gadget + RN
p.header += "Host: __HOST__" + RN
p.header += "User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.87 Safari/537.36" + RN
p.header += "Content-type: application/x-www-form-urlencoded; charset=UTF-8" + RN
p.header += "Content-Length: __REPLACE_CL__" + RN
return p

mutations["nameprefix1"] = render_template(" Transfer-Encoding: chunked")
mutations["tabprefix1"] = render_template("Transfer-Encoding:\tchunked")
mutations["tabprefix2"] = render_template("Transfer-Encoding\t:\tchunked")
mutations["space1"] = render_template("Transfer-Encoding : chunked")

for i in [0x1,0x4,0x8,0x9,0xa,0xb,0xc,0xd,0x1F,0x20,0x7f,0xA0,0xFF]:
mutations["midspace-% 02x"%i] = render_template("Transfer-Encoding:%cchunked"%(i))
mutations["postspace-%02x"%i] = render_template("Transfer-Encoding%c: chunked"%(i))
mutations["prespace-%02x"%i] = render_template("%cTransfer-Encoding: chunked"%(i))
mutations["endspace-%02x"%i] = render_template("Transfer-Encoding: chunked%c"%(i))
mutations["xprespace-%02x"%i] = render_template("X: X%cTransfer-Encoding: chunked"%(i))
mutations["endspacex-%02x"%i] = render_template("Transfer-Encoding: chunked%cX: X"%(i))
mutations["rxprespace-%02x"%i] = render_template("X: X\r%cTransfer-Encoding: chunked"%(i))
mutations["xnprespace-%02x"%i] = render_template("X: X%c\nTransfer-Encoding: chunked"%(i))
mutations["endspacerx-%02x"%i] = render_template("Transfer-Encoding: chunked\r%cX: X"%(i))
mutations["endspacexn-%02x"%i] = render_template("Transfer-Encoding: chunked%c\nX: X"%(i)) There are no input arguments yet on specifying your own customer headers (https://www.kitploit.com/search/label/Headers) and user-agents. It is recommended to create your own configuration file based on default.py and modify it to your liking. Smuggler comes with 3 configuration files: default.py (fast), doubles.py (niche, slow), exhaustive.py (very slow) default.py is the fastest because it contains less mutations. specify configuration files using the -c/--configfile command line (https://www.kitploit.com/search/label/Command%20Line) option
Payloads Directory
Inside the Smuggler directory is the payloads directory. When Smuggler finds a potential CLTE or TECL desync issue, it will automatically dump a binary txt file of the problematic payload (https://www.kitploit.com/search/label/Payload) in the payloads directory. All payload filenames are annotated with the hostname, desync type and mutation type. Use these payloads to netcat directly to the server or to import into other analysis (https://www.kitploit.com/search/label/Analysis) tools.
Helper Scripts
After you find a desync issue feel free to use my Turbo Intruder (https://www.kitploit.com/search/label/Intruder) desync scripts found Here: https://github.com/defparam/tiscripts DesyncAttack_CLTE.py and DesyncAttack_TECL.py are great scripts to help stage a desync attack
License
These scripts are released under the MIT license. See LICENSE (https://github.com/defparam/smuggler/blob/master/LICENSE).

Download Smuggler (https://github.com/defparam/smuggler)

hacking: security in practice
Is there a possibility to crack WPA/WPA2 Wifi using rooted Android phones?

I have tried a few apps (WIFI WPS WPA Tester, Androdump etc.) but they simply don't work because the first one requires that the router has activated WPS, and the other is an outdated app that doesn't function anymore. Is there a way to crack WPA/WPA2 passwords through rooted Android phones?

submitted by /u/cheeseburger201
[link] [comments]

hacking: security in practice
Hashcat Fully Exhausted - Now What?

Hey all,

I've been attempting to crack a NTLMv2 hash that's particularly mean using hashcat.

So far, I've used rockyou.txt with d3adh0bo.rule and when that exhausted I tried again with dive.rule.

I'm a bit of a noob when it comes to hash cracking, so I really don't know where to go from here.

Is all hope lost? Is there anything else I should try to crack this thing? Have I exhausted all my options?

Thanks

submitted by /u/nonono64qwertyu
[link] [comments]

hacking: security in practice
Am I hacked?

How can I know if my phone is hacked or not? Or apple devices in general (besides MAC)

submitted by /u/MirusX04
[link] [comments]