hacking: security in practice
How did someone hack into my iPhone?

I had an iphone 7plus and it started opening desktop browsers in safari, and I had web history of stuff I didn't even look up. When I would call someone it would say my contacts name and then '3 others' my battery was constantly dieing so I went into my phone settings and went to find my iPhone. First it opened in the app, showed my location and everything was fine. THEN it automatically opened in a web browser and my location was correct but something didn't feel right. The phone indicator on my address on the map turned black then disappeared. So I accidentally swiped a browser open and it opened github and the page said this.

"Welcome back! Click your favorite users email account". -shows both my personal and icloud email

So I started going through his settings on whatever he was using and I came across a purchase he made saying this:

"Thank you for your purchase! You now have unlimited access to the users auidio and camera"

I touched the camera icon on his web panel and my camera opened up!!!

I flipped out!

I shut off my mobile data, Bluetooth, wifi, all internet access to my phone so I could investigate.

This person copied and pasted a link accessing my icloud account into all of my phones contacts bc after looking further, it was a "gateway" for his followers (yes followers, like Instagram. I even saw the comments people left about me! And my pictures!!) To gain access to my phone too.

He was in my phone like a parasite. I took screen shots of everything while I went through all of what he had access to and called apple.

apple did NOTHING. They kept telling me to change my password and I was explaining to them he is watching all my key strokes so it doesn't matter how many times I change my password.

How can someone get access like that to a phone?

I saw all the screen shots he took of my banking and other personal information it was hell.

I was hysterical paranoid for months

submitted by /u/Amb_301
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Do you know about the Immortal Rootkit?

From the earliest times to the present day, humans have been evolving towards technology along with malware. There are various kind of…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Smart Travel!

https://cdn-images-1.medium.com/max/1000/1*gvae_XIs_OsV-6BuKqlLRQ.jpeg
Being a person who loves to travel and go to places ,here are some things I’ve come across that can help you in making your journey more…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Important programming languages ​​for an ethical hacker

https://cdn-images-1.medium.com/max/2600/1*_i_ekUEYp-qERZnDHpajbw.jpeg
Hacking has become very popular among computer enthusiasts. In fact, most people pursue it as a fulfilling career. One of the basic…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Hacker101: Postbook

https://cdn-images-1.medium.com/max/1908/1*nrOh0J6mPZRiQhvByDED2Q.png
Facebook is well known for having security issues like data leaks, hacks etc. quite often. “Postbook” is a CTF on Hacker101 recreating the…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
What the hell is TOR? (Unknown Dark Web)

https://cdn-images-1.medium.com/max/1280/0*zs4aONZBswK4FASz
Tor Browser definition may need to be…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hashdb-Ida - HashDB API Hash Lookup Plugin For IDA Pro
http://www.kitploit.com/2021/11/hashdb-ida-hashdb-api-hash-lookup.html

HashDB IDA Plugin
Malware string hash lookup plugin (https://www.kitploit.com/search/label/Plugin) for IDA Pro. This plugin connects to the OALABS HashDB Lookup Service (https://hashdb.openanalysis.net/).
Adding New Hash Algorithms
The hash algorithm database is open source and new algorithms can be added on GitHub here (https://github.com/OALabs/hashdb). Pull requests are mostly automated (https://www.kitploit.com/search/label/Automated) and as long as our automated tests pass the new algorithm will be usable on HashDB within minutes.
Using HashDB
HashDB can be used to look up strings that have been hashed in malware (https://www.kitploit.com/search/label/Malware) by right-clicking on the hash constant in the IDA disassembly view and launching the HashDB Lookup client.
Settings
Before the plugin can be used to look up hashes (https://www.kitploit.com/search/label/Hashes) the HashDB settings must be configured. The settings window can be launched from the plugins menu Edit->Plugins->HashDB.

 
Hash Algorithms
Click Refresh Algorithms to pull a list of supported hash algorithms from the HashDB API, then select the algorithm used in the malware you are analyzing.
Optional XOR
There is also an option to enable XOR with each hash value as this is a common technique used by malware authors to further obfuscate hashes.
API URL
The default API URL for the HashDB Lookup Service is https://hashdb.openanalysis.net/. If you are using your own internal server this URL can be changed to point to your server.
Enum Name
When a new hash is identified by HashDB the hash and its associated string are added to an enum in IDA. This enum can then be used to convert hash constants in IDA to their corresponding enum name. The enum name is configurable from the settings in the event that there is a conflict with an existing enum.
Hash Lookup
Once the plugin settings have been configured you can right-click on any constant in the IDA disassembly window and look up the constant as a hash. The right-click also provides a quick way to set the XOR value if needed.

Bulk Import
If a hash is part of a module a prompt will ask if you want to import all the hashes from that module. This is a quick way to pull hashes in bulk. For example, if one of the hashes identified is Sleep from the kernel32 module, HashDB can then pull all the hashed exports from kernel32.

 
Algorithm Search
HashDB also includes a basic algorithm search that will attempt to identify the hash algorithm based on a hash value. The search will return all algorithms that contain the hash value, it is up to the analyst to decide which (if any) algorithm is correct. To use this functionality right-click on the hash constant and select HashDB Hunt Algorithm.

  All algorithms that contain this hash will be displayed in a chooser box. The chooser box can be used to directly select the algorithm for HashDB to use. If Cancel is selected no algorithm will be selected.