You’ve also seen IDOR leads to account takeover and think that it’s just luck that man/women found that bug right? But let me tell you…Continue reading on Medium » (https://medium.com/@sarafsaransh321/how-i-find-my-first-critical-bug-worth-2500-5000-7eb2c1c5d6d7?source=rss------bug_bounty-5)
How I find My first Critical Bug Worth $2500–5000
You’ve also seen IDOR leads to account takeover and think that it’s just luck that man/women found that bug right? But let me tell you…Continue reading on Medium »
Read more...
You’ve also seen IDOR leads to account takeover and think that it’s just luck that man/women found that bug right? But let me tell you…Continue reading on Medium »
Read more...
WriteupContinue reading on Medium » (https://mukibas37.medium.com/bolt-tryhackme-f049c07e2a50?source=rss------bug_bounty-5)
hacking: security in practice
Linux in the Real-World (Newb)
What are some real world examples OR common reasons I may need to use linux? (I'm a Linux newb; recently installed my first vm with bare metal Kali Linux) Appreciate any genuine responses am in my teen years looking to build a future in cyber security
submitted by /u/DrewDrue
[link] [comments]
Linux in the Real-World (Newb)
What are some real world examples OR common reasons I may need to use linux? (I'm a Linux newb; recently installed my first vm with bare metal Kali Linux) Appreciate any genuine responses am in my teen years looking to build a future in cyber security
submitted by /u/DrewDrue
[link] [comments]
reddit
Linux in the Real-World (Newb)
What are some **real world examples** _OR_ **common reasons** I may need to use linux? (I'm a Linux newb; recently installed my first vm with bare...
https://external-preview.redd.it/HeNs24YkgLfaKSPYziVmTjBYWsTi0Nt-YmrWBMssAbs.jpg?width=108&crop=smart&auto=webp&s=6d4896a4f0e8124b39366de51d6d2dd5e8559e6e Is there any subreddit for reverse engineering?
There is one, but can't ask any question there.
https://www.reddit.com/r/ReverseEngineering/
https://preview.redd.it/7feqp5pzp4y71.png?width=1050&format=png&auto=webp&s=007ddea751952555a80f69cba7528194d782793f
It would be good if there is dedicated channel for discussion/ask question.
Software reverse engineering (SRE) is the practice of analyzing a software system, either in whole or in part, to extract design and implementation information. A typical SRE scenario would involve a software module that has worked for years and carries several rules of a business in its lines of code; unfortunately the source code of the application has been lost – what remains is “native” or “binary” code. Reverse engineering skills are also used to detect and neutralize viruses and malware, and to protect intellectual property.
Reference: https://link.springer.com/chapter/10.1007/978-3-642-04117-4_31
Update:
Anyway, I've just created one. Feel free to join and discuss anything related to RE, malware analysis, crackmes, etc
https://www.reddit.com/r/RE_ReverseEngineering/
submitted by /u/w0lfcat
[link] [comments]
There is one, but can't ask any question there.
https://www.reddit.com/r/ReverseEngineering/
https://preview.redd.it/7feqp5pzp4y71.png?width=1050&format=png&auto=webp&s=007ddea751952555a80f69cba7528194d782793f
It would be good if there is dedicated channel for discussion/ask question.
Software reverse engineering (SRE) is the practice of analyzing a software system, either in whole or in part, to extract design and implementation information. A typical SRE scenario would involve a software module that has worked for years and carries several rules of a business in its lines of code; unfortunately the source code of the application has been lost – what remains is “native” or “binary” code. Reverse engineering skills are also used to detect and neutralize viruses and malware, and to protect intellectual property.
Reference: https://link.springer.com/chapter/10.1007/978-3-642-04117-4_31
Update:
Anyway, I've just created one. Feel free to join and discuss anything related to RE, malware analysis, crackmes, etc
https://www.reddit.com/r/RE_ReverseEngineering/
submitted by /u/w0lfcat
[link] [comments]
hacking: security in practice
Does Anyone Know How To Track A Phone Number?
i lost my phone yesterday and i never activated Find My Iphone and now im looking for online trackers but all of them are fake or you have to buy a membership.... help :/ i know everything about my phone but idk how to locate it.
submitted by /u/musicianwithbbc
[link] [comments]
Does Anyone Know How To Track A Phone Number?
i lost my phone yesterday and i never activated Find My Iphone and now im looking for online trackers but all of them are fake or you have to buy a membership.... help :/ i know everything about my phone but idk how to locate it.
submitted by /u/musicianwithbbc
[link] [comments]
reddit
Does Anyone Know How To Track A Phone Number?
i lost my phone yesterday and i never activated Find My Iphone and now im looking for online trackers but all of them are fake or you have to buy...
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Credit Card Fraud: How to Stay Safe
https://cdn-images-1.medium.com/max/600/1*bqm89tlJsNL8sg-x7S80YQ.jpeg
Who is not aware of the common credit card fraud in our digital era? As a form of identity theft, criminals’ tendency to use stolen credit…
Continue reading on Medium »
Credit Card Fraud: How to Stay Safe
https://cdn-images-1.medium.com/max/600/1*bqm89tlJsNL8sg-x7S80YQ.jpeg
Who is not aware of the common credit card fraud in our digital era? As a form of identity theft, criminals’ tendency to use stolen credit…
Continue reading on Medium »
Etl-Parser - Event Trace Log File Parser In Pure Python
http://www.kitploit.com/2021/11/etl-parser-event-trace-log-file-parser.html
http://www.kitploit.com/2021/11/etl-parser-event-trace-log-file-parser.html
Event Trace Log file reader in pure Python etl-parser is a pure Python 3 (https://www.kitploit.com/search/label/Python%203) parser library (https://www.kitploit.com/search/label/Library) for ETL Windows log files. ETL is the default format for ETW (https://docs.microsoft.com/en-us/windows/win32/etw/event-tracing-portal) as well as the default format for the Kernel logger. etl-parser has no system dependencies, and will work well on both Windows and Linux. Since this format is not documented, we merged information from the blog of Geoff Chappel (https://www.geoffchappell.com/) and reverse engineering (https://www.kitploit.com/search/label/Reverse%20Engineering) activities conducted by Airbus CERT team. What is ETL and why is it a pain to work with? Consider ETL as a container, like AVI is for video files. Reading ETL is similarly frustrating as reading an AVI file without the right codec. etl-parser tries to solve this problem by including parsers for the following well known log formats: ETW manifest base provider TraceLogging MOF for kernel log
How to use etl-parser?
etl-parser offers two scripts. The first script, etl2xml transforms all known ETL events into XML: etl2xml -i example.etl -o example.xml
The second script, etl2pcap transforms network captures created through netsh into the pcap file format: netsh start trace capture=yes
netsh stop trace
etl2pcap -i NetTrace.etl -o NetTrace.pcap
You can also use etl-parser as a library: from etl.etl import IEtlFileObserver, build_from_stream
from etl.system import SystemTraceRecord
from etl.perf import PerfInfo
from etl.event import Event
from etl.trace import Trace
from etl.wintrace import WinTrace
class EtlFileLogger(IEtlFileObserver):
def on_system_trace(self, event: SystemTraceRecord):
"""Mof kernel message with Process Id and Thread Id"""
mof = event.get_mof() # Invoke MOF parser
def on_perfinfo_trace(self, event: PerfInfo):
"""Mof kernel message with timestamp"""
mof = event.get_mof() # Invoke MOF parser
def on_trace_record(self, event: Trace):
"""unknown"""
def on_event_record(self, event: Event):
"""ETW event this is what you search"""
# Choose the "parse_" function which corresponds to your event
message = event.parse_tracelogging() # Invoke TraceLogging parser
me ssage = event.parse_etw() # Invoke Manifest based parser
def on_win_trace(self, event: WinTrace):
"""unknown"""
etw = event.parse_etw()
with open("example.etl", "rb") as etl_file:
etl_reader = build_from_stream(etl_file.read())
etl_reader.parse(EtlFileLogger())
Installation
etl-parser is available from pip: pip install etl-parser
Alternatively, you can install etl-parser using setup.py: git clone https://github.com/airbus-cert/etl-parser.git
cd etl-parser
pip install -e .
Missing a parser?
If you encounter a parsing error, please open an issue on the Airbus CERT GitHub repository.
Why an ETL Parser?
The EVTX log format is fairly well documented, with lots of libraries and tools available today. This is not true for ETL: at time of development, there is no significant open-source project that we know of and the ETL format is not well documented. ETL is massively used by Windows system programmers to log useful artifacts: C:\Windows\System32\WDI\LogFiles\BootPerfDiagLogger.etl C:\Windows\System32\WDI\LogFiles\ShutdownPerfDiagLogger.etl NetTrace.etl via netsh C:\Windows\System32\WDI\\\snapshot.etl etc. A lot of new APIs such as Tracelogging or WPP are based on ETW. These APIs are used extensively by Microsoft (https://www.kitploit.com/search/label/Microsoft) developers for Windows. Tracelogging is addressed by etl-parser, WPP will be addressed in a future release. Microsoft offers a lot of consumers that create ETL traces, such as xperf.exe, logman.exe, netsh.exe, etc. We believe it is a gold mine for DFIR analysts.
Credits
How to use etl-parser?
etl-parser offers two scripts. The first script, etl2xml transforms all known ETL events into XML: etl2xml -i example.etl -o example.xml
The second script, etl2pcap transforms network captures created through netsh into the pcap file format: netsh start trace capture=yes
netsh stop trace
etl2pcap -i NetTrace.etl -o NetTrace.pcap
You can also use etl-parser as a library: from etl.etl import IEtlFileObserver, build_from_stream
from etl.system import SystemTraceRecord
from etl.perf import PerfInfo
from etl.event import Event
from etl.trace import Trace
from etl.wintrace import WinTrace
class EtlFileLogger(IEtlFileObserver):
def on_system_trace(self, event: SystemTraceRecord):
"""Mof kernel message with Process Id and Thread Id"""
mof = event.get_mof() # Invoke MOF parser
def on_perfinfo_trace(self, event: PerfInfo):
"""Mof kernel message with timestamp"""
mof = event.get_mof() # Invoke MOF parser
def on_trace_record(self, event: Trace):
"""unknown"""
def on_event_record(self, event: Event):
"""ETW event this is what you search"""
# Choose the "parse_" function which corresponds to your event
message = event.parse_tracelogging() # Invoke TraceLogging parser
me ssage = event.parse_etw() # Invoke Manifest based parser
def on_win_trace(self, event: WinTrace):
"""unknown"""
etw = event.parse_etw()
with open("example.etl", "rb") as etl_file:
etl_reader = build_from_stream(etl_file.read())
etl_reader.parse(EtlFileLogger())
Installation
etl-parser is available from pip: pip install etl-parser
Alternatively, you can install etl-parser using setup.py: git clone https://github.com/airbus-cert/etl-parser.git
cd etl-parser
pip install -e .
Missing a parser?
If you encounter a parsing error, please open an issue on the Airbus CERT GitHub repository.
Why an ETL Parser?
The EVTX log format is fairly well documented, with lots of libraries and tools available today. This is not true for ETL: at time of development, there is no significant open-source project that we know of and the ETL format is not well documented. ETL is massively used by Windows system programmers to log useful artifacts: C:\Windows\System32\WDI\LogFiles\BootPerfDiagLogger.etl C:\Windows\System32\WDI\LogFiles\ShutdownPerfDiagLogger.etl NetTrace.etl via netsh C:\Windows\System32\WDI\\\snapshot.etl etc. A lot of new APIs such as Tracelogging or WPP are based on ETW. These APIs are used extensively by Microsoft (https://www.kitploit.com/search/label/Microsoft) developers for Windows. Tracelogging is addressed by etl-parser, WPP will be addressed in a future release. Microsoft offers a lot of consumers that create ETL traces, such as xperf.exe, logman.exe, netsh.exe, etc. We believe it is a gold mine for DFIR analysts.
Credits
This project is under copyright of the Airbus Computer Emergency Response Team (CERT) (https://www.trusted-introducer.org/directory/teams/ai-cert.html) and distributed (https://www.kitploit.com/search/label/Distributed) under the Apache 2.0 (https://www.apache.org/licenses/LICENSE-2.0) license Geoff Chappel (https://www.geoffchappell.com/) for all information on his blog
License
etl-parser is released under the Apache 2.0 (https://www.apache.org/licenses/LICENSE-2.0) license.
Download Etl-Parser (https://github.com/airbus-cert/etl-parser)
License
etl-parser is released under the Apache 2.0 (https://www.apache.org/licenses/LICENSE-2.0) license.
Download Etl-Parser (https://github.com/airbus-cert/etl-parser)
hacking: security in practice
How to create my own version of Hiren's Boot CD from scratch?
** Please red this before deleting as low-effort post **
I want to create my own version of Hiren's Boot CD from scratch. I have started reading the Microsoft documentation on Windows PE. I want to know if this should be enough, or I need tor read something else apart from this.
I posted this on r/techsupport and they deleted it. I posted this on the Microsoft Community and no one replied. This is not a low-effort post, I am putting the effort. I just want someone to guide me in the correct direction. Thanks in advance.
submitted by /u/UnemployedTechie2021
[link] [comments]
How to create my own version of Hiren's Boot CD from scratch?
** Please red this before deleting as low-effort post **
I want to create my own version of Hiren's Boot CD from scratch. I have started reading the Microsoft documentation on Windows PE. I want to know if this should be enough, or I need tor read something else apart from this.
I posted this on r/techsupport and they deleted it. I posted this on the Microsoft Community and no one replied. This is not a low-effort post, I am putting the effort. I just want someone to guide me in the correct direction. Thanks in advance.
submitted by /u/UnemployedTechie2021
[link] [comments]
reddit
How to create my own version of Hiren's Boot CD from scratch?
\*\* Please red this before deleting as low-effort post \*\* I want to create my own version of Hiren's Boot CD from scratch. I have started...
Etl-Parser - Event Trace Log File Parser In Pure Python
Event Trace Log file reader in pure Python etl-parser is a pure Python 3 parser library for ETL Windows log files. ETL is the default format for ETW as well as the default format for the Kernel logger. etl-parser has no system dependencies, and will work well on both Windows and Linux. Since this format is not documented, we merged information from the blog of Geoff Chappel and reverse engineering activities conducted by Airbus CERT team. What is ETL and why is it a pain to work with? Consider ETL as a container, like AVI is for video files. Reading ETL is similarly frustrating as reading an AVI file without the right codec. etl-parser tries to solve this problem by including parsers for the following well known log formats: ETW manifest base provider TraceLogging MOF for kernel log How to use etl-parser? etl-parser offers two scripts. The first script, etl2xml transforms all known ETL events into XML: etl2xml -i example.etl -o example.xml The second script, etl2pcap transforms network captures created through netsh into the pcap file format: netsh start trace capture=yesnetsh stop traceetl2pcap -i NetTrace.etl -o NetTrace.pcap You can also use etl-parser as a library: from etl.etl import IEtlFileObserver, build_from_streamfrom etl.system import SystemTraceRecordfrom etl.perf import PerfInfofrom etl.event import Eventfrom etl.trace import Tracefrom etl.wintrace import WinTraceclass EtlFileLogger(IEtlFileObserver): def on_system_trace(self, event: SystemTraceRecord): """Mof kernel message with Process Id and Thread Id""" mof = event.get_mof() # Invoke MOF parser def on_perfinfo_trace(self, event: PerfInfo): """Mof kernel message with timestamp""" mof = event.get_mof() # Invoke MOF parser def on_trace_record(self, event: Trace): """unknown""" def on_event_record(self, event: Event): """ETW event this is what you search""" # Choose the "parse_" function which corresponds to your event message = event.parse_tracelogging() # Invoke TraceLogging parser me ssage = event.parse_etw() # Invoke Manifest based parser def on_win_trace(self, event: WinTrace): """unknown""" etw = event.parse_etw()with open("example.etl", "rb") as etl_file: etl_reader = build_from_stream(etl_file.read()) etl_reader.parse(EtlFileLogger()) Installation etl-parser is available from pip: pip install etl-parser Alternatively, you can install etl-parser using setup.py: git clone https://github.com/airbus-cert/etl-parser.gitcd etl-parserpip install -e . Missing a parser? If you encounter a parsing error, please open an issue on the Airbus CERT GitHub repository. Why an ETL Parser? The EVTX log format is fairly well documented, with lots of libraries and tools available today. This is not true for ETL: at time of development, there is no significant open-source project that we know of and the ETL format is not well documented. ETL is massively used by Windows system programmers to log useful artifacts: C:\Windows\System32\WDI\LogFiles\BootPerfDiagLogger.etl C:\Windows\System32\WDI\LogFiles\ShutdownPerfDiagLogger.etl NetTrace.etl via netsh C:\Windows\System32\WDI\<GUID>\<GUID>\snapshot.etl etc. A lot of new APIs such as Tracelogging or WPP are based on ETW. These APIs are used extensively by Microsoft developers for Windows. Tracelogging is addressed by etl-parser, WPP will be addressed in a future release. Microsoft offers a lot of consumers that create ETL traces, such as xperf.exe, logman.exe, netsh.exe, etc. We believe it is a gold mine for DFIR analysts. Credits This project is under copyright of the Airbus Computer Emergency Response Team (CERT) and distributed under the Apache 2.0 license Geoff Chappel for all information on his blog License etl-parser is released under the Apache 2.0 license. Download Etl-Parser
Read more...
Event Trace Log file reader in pure Python etl-parser is a pure Python 3 parser library for ETL Windows log files. ETL is the default format for ETW as well as the default format for the Kernel logger. etl-parser has no system dependencies, and will work well on both Windows and Linux. Since this format is not documented, we merged information from the blog of Geoff Chappel and reverse engineering activities conducted by Airbus CERT team. What is ETL and why is it a pain to work with? Consider ETL as a container, like AVI is for video files. Reading ETL is similarly frustrating as reading an AVI file without the right codec. etl-parser tries to solve this problem by including parsers for the following well known log formats: ETW manifest base provider TraceLogging MOF for kernel log How to use etl-parser? etl-parser offers two scripts. The first script, etl2xml transforms all known ETL events into XML: etl2xml -i example.etl -o example.xml The second script, etl2pcap transforms network captures created through netsh into the pcap file format: netsh start trace capture=yesnetsh stop traceetl2pcap -i NetTrace.etl -o NetTrace.pcap You can also use etl-parser as a library: from etl.etl import IEtlFileObserver, build_from_streamfrom etl.system import SystemTraceRecordfrom etl.perf import PerfInfofrom etl.event import Eventfrom etl.trace import Tracefrom etl.wintrace import WinTraceclass EtlFileLogger(IEtlFileObserver): def on_system_trace(self, event: SystemTraceRecord): """Mof kernel message with Process Id and Thread Id""" mof = event.get_mof() # Invoke MOF parser def on_perfinfo_trace(self, event: PerfInfo): """Mof kernel message with timestamp""" mof = event.get_mof() # Invoke MOF parser def on_trace_record(self, event: Trace): """unknown""" def on_event_record(self, event: Event): """ETW event this is what you search""" # Choose the "parse_" function which corresponds to your event message = event.parse_tracelogging() # Invoke TraceLogging parser me ssage = event.parse_etw() # Invoke Manifest based parser def on_win_trace(self, event: WinTrace): """unknown""" etw = event.parse_etw()with open("example.etl", "rb") as etl_file: etl_reader = build_from_stream(etl_file.read()) etl_reader.parse(EtlFileLogger()) Installation etl-parser is available from pip: pip install etl-parser Alternatively, you can install etl-parser using setup.py: git clone https://github.com/airbus-cert/etl-parser.gitcd etl-parserpip install -e . Missing a parser? If you encounter a parsing error, please open an issue on the Airbus CERT GitHub repository. Why an ETL Parser? The EVTX log format is fairly well documented, with lots of libraries and tools available today. This is not true for ETL: at time of development, there is no significant open-source project that we know of and the ETL format is not well documented. ETL is massively used by Windows system programmers to log useful artifacts: C:\Windows\System32\WDI\LogFiles\BootPerfDiagLogger.etl C:\Windows\System32\WDI\LogFiles\ShutdownPerfDiagLogger.etl NetTrace.etl via netsh C:\Windows\System32\WDI\<GUID>\<GUID>\snapshot.etl etc. A lot of new APIs such as Tracelogging or WPP are based on ETW. These APIs are used extensively by Microsoft developers for Windows. Tracelogging is addressed by etl-parser, WPP will be addressed in a future release. Microsoft offers a lot of consumers that create ETL traces, such as xperf.exe, logman.exe, netsh.exe, etc. We believe it is a gold mine for DFIR analysts. Credits This project is under copyright of the Airbus Computer Emergency Response Team (CERT) and distributed under the Apache 2.0 license Geoff Chappel for all information on his blog License etl-parser is released under the Apache 2.0 license. Download Etl-Parser
Read more...
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
About Pre Security THM learning path.
https://cdn-images-1.medium.com/max/1122/1*i1OW4_ckJKnHcchNlJqrqQ.png
I like THM because as they say the best way to learn, is by doing. Their content is guided with interactive exercises placed in safe…
Continue reading on Medium »
About Pre Security THM learning path.
https://cdn-images-1.medium.com/max/1122/1*i1OW4_ckJKnHcchNlJqrqQ.png
I like THM because as they say the best way to learn, is by doing. Their content is guided with interactive exercises placed in safe…
Continue reading on Medium »