Hacking on Medium
Finding of Clickjacking bug

Bug Bounty Writeup

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
TryHackme-Vulnversity PART 1

https://cdn-images-1.medium.com/max/750/1*PfT4XCk3ciX2HCR4Kizw1A.png
CTF Writeup

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
GITHUB RECON 5.1

https://cdn-images-1.medium.com/max/1597/1*fZ_qqkeXWSfrt8XvuHLkuQ.jpeg
Pesquise os repositórios GitHub de uma organização para dados confidenciais que tenham vazados acidentalmente ou informações que podem…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
What are the different ways to attack a web app?

I've been looking online but all the articles I found were pretty much outdated.

submitted by /u/JeuneCuisse
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
memit: Run binaries straight from memory in Linux (Go module + CLI tool)

https://external-preview.redd.it/6fd9davEWNR1AroueeAuW_QwtKDR7AcoUHoQPnd7s-s.jpg?width=640&crop=smart&auto=webp&s=302fcc5ae9f12373e7193cca879beeedf56824d6 submitted by /u/pope_friction
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Can a fax number be spoofed/stollen?

I know faxing is considered more secure than email, however, my (very basic) understanding is it is not encrypted. Just like cell phone numbers are spoofed, could a fax line be spoofed. Or could someone hijack a fax phone number and receive those faxes? VOIP vs hardline? Does anyone know if it could be done, and has this example happened in the past? Thank you!

submitted by /u/sophchels
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

OWASP ZAP automated scan freezing at 87%
https://www.reddit.com/r/Pentesting/comments/qzokcl/owasp_zap_automated_scan_freezing_at_87/

I have tried doing multiple scans on multiple different domains. It never fails, every time it gets to 87% the memory maxes out. It doesn’t matter if I have 2GB or 8GB set on the VM. I was looking in the process of the scan and it seems like “Cross Site Scripting (DOM based)” is the current scan at that percentage. I don’t know what else I can do besides skip that portion of the scan. Any other suggestions? submitted by /u/Unknown_Mando (https://www.reddit.com/user/Unknown_Mando)
[link] (https://www.reddit.com/r/Pentesting/comments/qzokcl/owasp_zap_automated_scan_freezing_at_87/) [comments] (https://www.reddit.com/r/Pentesting/comments/qzokcl/owasp_zap_automated_scan_freezing_at_87/)

___________________________
@hacking_Attack
@Hacking_Video

Sql injection nedir?Nasıl bulunur?Nasıl kullanılır?.
https://mirabbasagalarov.medium.com/sql-injection-nedir-nas%C4%B1l-bulunur-nas%C4%B1l-kullan%C4%B1l%C4%B1r-1ccdee3b76fd?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

SQL Injection Nedir?Continue reading on Medium » (https://mirabbasagalarov.medium.com/sql-injection-nedir-nas%C4%B1l-bulunur-nas%C4%B1l-kullan%C4%B1l%C4%B1r-1ccdee3b76fd?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

TryHackme-Vulnversity PART 1
https://mukibas37.medium.com/tryhackme-vulnversity-part-1-5b232c888f90?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

CTF WriteupContinue reading on Medium » (https://mukibas37.medium.com/tryhackme-vulnversity-part-1-5b232c888f90?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

ThreadBoat - Program Uses Thread Execution Hijacking To Inject Native Shell-code Into A Standard Win32 Application

Program uses Thread Hijacking to Inject Native Shellcode into a Standard Win32 Application.AboutI developed this small project to continue my experiences of different code injection methods and to allow RedTeam security professionals to utilize this method as a unique way to perform software penetration testing. With Thread hijacking, it allows the hijacker.exe program to susepend a thread within the target.exe program allowing us to write shellcode to that target thread, and later be executed (via; WriteProcessMemory(), SetThreadContext(), ResumeThread(), CreateThread()).Example GIF (Credits To Endgame)Usageint main(){ System sys; Interceptor incp; Exception exp; sys.returnVersionState(); if (sys.returnPrivilegeEscalationState()) { std::cout << "Token Privileges Adjusted\n"; } if (DWORD m_procId = incp.FindWin32ProcessId((PCHAR)mwin32ProcessName)) { incp.ExecuteWin32Shellcode(mprocId); } system("PAUSE"); return 0;}For Further Information On Thread Execution HijackingClick On The Link Belowhttps://capec.mitre.org/data/definitions/30.htmlEnvironmentWindows Vista+Visual C++LibsWinapiuser32.dllkernel32.dllntdll.dllEthical NoticeThis code was simply written to demonstrate an overlooked method to inject shellcode or a DLL into a Win32 program. This code is not to be used for malicous purposes. The author, Josh Schiavone, is not liable for misuse of this software. May God bless you all.Download ThreadBoat
Read more...

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Why the 'Basement Hacker' Stereotype Is Wrong — and Dangerous

It engenders a false sense of superiority that spurs complacency among risk managers and executives, who in turn may underinvest in security teams, rely too much on automation, or both.

Kali Linux Tutorials
Vimana : An Experimental Security Framework That Aims To Provide Resources For Auditing Python Web Applications

Vimana is a modular security framework designed to audit Python web applications.

Framework Structure

The base of the Vimana is composed of crawlers focused on frameworks (in addition to the generic ones for web), trackers, discovery, fuzzer, parser among other types of modules. The main idea, from where the framework emerged, is to identify, through a blackbox approach, configuration flaws and inadequate and/or insufficient implementations that allow unhandled exceptions to be triggered. Depending on the framework settings (or specific libs even when not using frameworks, for example raw wsgi) this can lead to leakage of sensitive and critical information that can allow to compromising the entire application, server, apis, databases, services and any third part software with tokens, secrets or api keys in current exposed environment variables.

Another important step performed by Vimana is to obtain and reconstruct the source code snippets of the affected modules (leaked by exceptions) that allow the discovery of hardcoded credentials, connection strings to databases, vulnerable libraries, in addition to allowing the analysis of logic of the application of a mixed perspective between the black and whitebox approaches, since the initial analysis starts from a blind test, but ends up allowing access to code snippets.

Getting Started with Vimana

The easiest way is through Docker image build script:

sudo git clone https://github.com/s4dhul4bs/vimana-framework.git
cd vimana-framework && sudo ./vmnf_build

If the build runs smoothly, you will see the about screen (README image above)

If you prefer you can follow the same steps as the script manually to build the image:

timedatectl set-ntp yes
sudo git clone https://github.com/s4dhul4bs/vimana-framework.git
cd vimana-framework
sudo docker build –no-cache=true –network=host -t vimana_framework:alpha .

Once the image has been successfully created, you can start Vimana as follows: sudo docker run -it --name vimana vimana_framework:alpha aboutAnd the same image will be displayed.

Of course, the framework can also be executed in the traditional way. directly by code (most stable way so far):

sudo git clone https://github.com/s4dhul4bs/vimana-framework.git
cd vimana-framework
pip3 install -r requirements.txt
python3 vimana.py

Example of running a siddhi (vimana module):

sudo docker run -it vimana_framework:alpha run –module dmt –target-list 192.168.1.101,192.168.1.212,mypythonapp.com –port-list 5000,5001,8000 –verbose –debug –random –threads 5

Explaining the command line syntax above: runCommand to run a siddhi (vimana framework module) in inline mode (in this case, module DMT, Django Misconfiguration Tracker) --target-listThe framework supports several types of scope definition arguments (although this also depends on the arguments expected by each module). In this case, a list of IPs and URLs was used with the argument target-list (comma-separated). --port-listHere, as with the definition of targets, the ports also accept various formats, in this case the port-list with a list of ports to be tested is being used. An important note, when you do not want the defined port to be tested before the chosen module is invoked, the --ignore-stateargument must be passed so that the state of the port will not be checked. --verboseEnable verbose mode in realtime issues presentation --debugEnable Vimana debug mode,showing realtime technical information about execution --randomEnable randomize, this flag, enable randomization in supported modules (for example user-agent, cookies, tokens, etc) --threadsConfigures the number of threads [...]

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Vimana : An Experimental Security Framework That Aims To Provide Resources For Auditing Python Web Applications

___________________________
@hacking_Attack
@Hacking_Video