Hacking on Medium
LINUX TERMİNAL DOSYA & DİZİN KOMUTLARI

https://cdn-images-1.medium.com/max/2600/0*noMZBE9anD6o7Rzq
DOSYA & DİZİN KOMUTLARI

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Actualización fuera de Banda de MS soluciona problemas de autenticación en Windows Server

https://cdn-images-1.medium.com/max/1427/0*vmS9trzdtixinIk_
PUBLICADO EN 18 NOVIEMBRE, 2021POR DPAB

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Smsreader, a python script I created to make meterpreter's sms_dump result file more readable.

The default file for meterpreter's sms_dump result is a text file (.txt) where nothing is sorted.

I created this tool to make the results more readable. The conversations are organized and the messages are sorted by date.

https://github.com/ggdev84/smsreader

A little screenshot : https://imgur.com/a/P8TpQmY

submitted by /u/Alfred1400
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Is it possible to bypass network restrictions?

A bit of context here, I am currently studying in computer science and I was wondering if there was anyway to bypass the restrictions on a network such as blocking connection to a game server. The situation is that I'm trying to play with a friend but the p2p is not allowed on the school's network (he is using the school's internet and I'm not). The NAT type seems to be the problem and for some reason that's exactly what I'm learning in my cybersecurity class. So I was wondering if you guys had a solution with an explanation of why it works would be much appreciated.

Sorry if what I'm saying doesn't make sense I'm still very new to cybersecurity.

submitted by /u/BEG-MB
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
What is this tool?

So I was scrolling on tiktok and I found a video of this tool with loads of tools for IPs and things it was phone size and it had a screen and then just a button and a little a analogue stick kinda thing if anyone knows what this is or something like it please could you let me know as I need this in my life even though I probably wouldn’t use it haha thanks

submitted by /u/o_hunt204
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Is Sn1per Professional any good ?
https://www.reddit.com/r/Pentesting/comments/qwx4kl/is_sn1per_professional_any_good/

I been doing pentests for a while now and have a specific set of tools I use in my workflow but most recently I saw one called Sn1per. Which seems to be a "automated" pentesting tool, so I'm wonder how effective it is ? And if it's worth paying 450 dollars for or is the community version good enough ? submitted by /u/uneeed2ketchup (https://www.reddit.com/user/uneeed2ketchup)
[link] (https://www.reddit.com/r/Pentesting/comments/qwx4kl/is_sn1per_professional_any_good/) [comments] (https://www.reddit.com/r/Pentesting/comments/qwx4kl/is_sn1per_professional_any_good/)

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
SQLMAP - Automatic SQL Injection Tool 1.5.11

https://2.bp.blogspot.com/-x_QP5QrO-tY/WWlvkxoh72I/AAAAAAAAIQ4/t-2dHNJyeE0-qZNxsCg7sgdho_ipgPgbgCLcBGAs/s1600/h98.png
sqlmap is an open source command-line automatic SQL injection tool. Its goal is to detect and take advantage of SQL injection vulnerabilities in web applications. Once it detects one or more SQL injections on the target host, the user can choose among a variety of options to perform an extensive back-end database management system fingerprint, retrieve DBMS session user and database, enumerate users, password hashes, privileges, databases, dump entire or user's specified DBMS tables/columns, run his own SQL statement, read or write either text or binary files on the file system, execute arbitrary commands on the operating system, establish an out-of-band stateful connection between the attacker box and the database server via Metasploit payload stager, database stored procedure buffer overflow exploitation or SMB relay attack and more.

MD5 | 53a126404f92d407fdb8048255fb05f9

Download
Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
WordPress Preview E-mails For WooCommerce 1.6.8 Cross Site Scripting

https://1.bp.blogspot.com/-9u0QXe9ybeo/WWlvU_DnejI/AAAAAAAAIN0/BUl-HrIsuwE3sKywG67Nuv_wLRABID6oQCLcBGAs/s1600/h45.png
WordPress Preview E-mails for WooCommerce plugin versions 1.6.8 and below suffer from a cross site scripting vulnerability.

MD5 | c46da50d03a7e43bbff2b3dc283f9317

Download
Description: Reflected Cross-Site Scripting

Affected Plugin: Preview E-mails for WooCommerce

Plugin Slug: woo-preview-emails

Affected Versions: <=

CVE ID: CVE-2021-42363

CVSS Score: 6.1 (Medium)

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Researcher/s: Chloe Chamberland

Fully Patched Version: 2.0.0

Preview E-mails for WooCommerce is a simple plugin designed to give site owners the ability to preview the emails that are sent to customers via WooCommerce. Unfortunately, the plugin had a flaw that made it possible for attackers to inject malicious web scripts into the `digthis-woocommerce-preview-emails` page.

As part of the plugin’s functionality, there is a feature to search orders and to generate an email preview based upon a specific order, so that an administrator or shop manager can see exactly what a specific user sees for the emails that get sent out. Unfortunately, the search_orders parameter, used to conduct the search, was reflected to the page and had no input sanitization or escaping upon output which made it possible for users to supply arbitrary scripts that would execute in the browser when the page was accessed with the payload set in the search_orders parameter.

This meant that if an attacker could successfully convince a site administrator to click on a link, they could get malicious JavaScript to execute in that administrator’s browser. This script could be crafted to inject a new administrative user or even modify a plugin or theme file to include a backdoor which in turn would grant the attacker the ability to completely take over the site.

Timeline

November 1, 2021 – Conclusion of the plugin analysis that led to the discovery of a Reflected Cross-Site Scripting Vulnerability in the Preview E-mails for WooCommerce plugin. We validate that the Wordfence Firewall provides complete protection. We initiate contact with the developer.

November 3, 2021 – The developer confirms the inbox for handling the discussion.

November 4, 2021 – We send over the full disclosure details.

October 8, 2021 – A fully patched version of the plugin is released as version 2.0.0.

Conclusion

In today’s post, we detailed a flaw in the Preview E-mails for WooCommerce plugin that made it possible for attackers to inject malicious web scripts into a page that would execute if an attacker successfully tricked a site administrator into performing an action. This flaw has been fully patched in version 2.0.0.

We recommend that WordPress users immediately verify that their site has been updated to the latest patched version available, which is version 2.0.1 at the time of this publication.


Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Linux SO_PEERCRED / SO_PEERGROUPS Race Condition / Use-After-Free

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
Kubernetes-Goat - Is A "Vulnerable By Design" Kubernetes Cluster. Designed To Be An Intentionally Vulnerable Cluster Environment To Learn And Practice Kubernetes Security

https://blogger.googleusercontent.com/img/a/AVvXsEiCnpVDs62xyVPX-RIcFO-TEj0QRwScPp5o0VmCys8ga9rcOC6sM8rt_NIE_NGGvU6ZkoxeboxPfKxLewTLkYHb4P6ekDe5TM8eQM1zPKV1HPnVixPnuk_iwD-6auPTK4a70EGqrtYIOYTGcwgBVzWB00wl9WQ5llbDK5nBq40n7QVOMuzcQZVZRVgPcA=s320 The Kubernetes Goat is designed to be an intentionally vulnerable cluster environment to learn and practice Kubernetes security.

Refer to https://madhuakula.com/kubernetes-goat for the guide. Show us some Please feel free to send us a PR and show some https://blogger.googleusercontent.com/img/a/AVvXsEhSQYyWcW7lzlMIZqyWVytW5Ck4V8ufhiY9eWOWPxEclad3usm0harZMcH1joPAq1GiXKkNCpB9pH3Hat3ZRcNh5c0d1MuhRj1f1_bdcOpTgsAP0BpLeGPj-D9a84MqoyumdkfEEqw8BpoocQ-skDvTR2T2Us9G0AcbgJpQEzitNPbcxYcG_492WyRsqw=s320 Upcoming Training's and SessionsDEFCON DEMO Labs

* https://forum.defcon.org/node/237237

Cloud Village - DEFCON

* https://cloud-village.org/#talks?collapseMadhuAkula Recent Kubernetes Goat PresentationsOWASP Bay Area Meetup
DEFCON Red Team Village Just click and Play in the browser for free using Katacoda Playground - Try nowhttps://katacoda.com/madhuakula/scenarios/kubernetes-goat Setting up Kubernetes Goat* Before we set up the Kubernetes Goat, ensure that you have created and have admin access to the Kubernetes cluster kubectl version --short* Set up the helm version 2 in your path as helm2. Refer to helm releases for more information about setup helm2 --help* Then finally setup Kubernetes Goat by running the following command git clone https://github.com/madhuakula/kubernetes-goat.git
cd kubernetes-goat
bash setup-kubernetes-goat.sh* To export the ports/services locally to start learning, run the following command bash access-kubernetes-goat.sh* Then navigate to http://127.0.0.1:1234 Kubernetes Goat - KIND setup* If you want to setup Kubernetes Goat using KIND, refer to kind-setup Scenarios1. Sensitive keys in code-bases
2. DIND (docker-in-docker) exploitation
3. SSRF in K8S world
4. Container escape to access host system
5. Docker CIS Benchmarks analysis
6. Kubernetes CIS Benchmarks analysis
7. Attacking private registry
8. NodePort exposed services
9. Helm v2 tiller to PwN the cluster
10. Analysing crypto miner container
11. Kubernetes Namespaces bypass
12. Gaining environment information
13. DoS the memory/CPU resources
14. Hacker Container preview
15. Hidden in layers
16. RBAC Least Privileges Misconfiguration
17. KubeAudit - Audit Kubernetes Clusters
18. Sysdig Falco - Runtime Security Monitoring & Detection
19. Popeye - A Kubernetes Cluster Sanitizer
20. Secure network boundaries using NSP Showcase* Presented at OWASP Bay Area Meetup at https://youtu.be/DQllxpb46Yw
* Presented at DEF CON RED Team Village https://youtu.be/aEaSZJRbnTo
* Presented at OWASP San Diego at https://www.meetup.com/Open-Web-Application-Security-Project-San-Diego-OWASP-SD/events/hmbbkrybckbvb/
* Featured in the official Kubernetes Podcast at https://kubernetespodcast.com/episode/109-kubermatic
* Featured in tl;dr sec https://tldrsec.com/blog/tldr-sec-039
* Featured in CloudSecList https://cloudseclist.com/issues/issue-42
* Presented at EkoParty 2020 DevSecOps https://youtu.be/XqwbVU-gtng
* Presented at c0c0cn 2020 https://india.c0c0n.org/2020/speakers#madhu_akula
* Featured in Info Ck YouTube channel https://youtu.be/5ojho4L6Xfo
* Presented in Cloud Native Indonesia Meetup https://youtu.be/pf5jOGWoWU0
* Presented in USENIX LISA 2021 Closing Note
* Presented in SANS CloudSecNext Summit 2021 DisclaimerKubern[...]

___________________________
@hacking_Attack
@Hacking_Video

etes Goat creates intentionally vulnerable resources into your cluster. DO NOT deploy Kubernetes Goat in a production environment or alongside any sensitive cluster resources.

Kubernetes Goat comes with absolutely no warranties whatsoever. By using Kubernetes Goat, you take full responsibility for all outcomes that result. Download Kubernetes-Goat

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Addressing the Low-Code Security Elephant in the Room

The danger of anyone being able to spin up new applications is that few are thinking about security. Here's why everyone is responsible for the security of low-code/no-code applications.

Dark Reading: Attacks/Breaches
GBG Announces It Has Agreed to Acquire Acuant

GBG announces it has agreed to acquire Acuant, bringing together two leaders in the global digital identity market with combined revenue of c.£265 million.

___________________________
@hacking_Attack
@Hacking_Video