Hacking on Medium
Find reflected XSS candidates in source code

https://cdn-images-1.medium.com/max/758/1*WIi0_jYkCVBZHxEOEJOLzw.png
Using Ocular to search for reflected XSS in an application

Continue reading on ShiftLeft Blog »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Mindset for hacking GraphQL Applications

I’ve tried to summarize a lot of information from HackTricks, YouTube, HTB write-ups, disclosed vulnerabilities, and the GraphQL…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Exploit para Microsoft Exchange RCE (Actualiza!)

https://cdn-images-1.medium.com/max/1523/0*PmYX-Fh4NaibsI1b
PUBLICADO EN 23 NOVIEMBRE, 2021 POR DPAB

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Zero-Day que permite Elevación de Privilegios en Windows

https://cdn-images-1.medium.com/max/1370/0*1_KNkJT5wDvT8lp_
PUBLICADO EN 23 NOVIEMBRE, 2021POR DPAB

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Finding XSS on .apple.com and building a proof of concept to leak your PII information
https://zseano.medium.com/finding-xss-on-apple-com-and-building-a-proof-of-concept-to-leak-your-pii-information-d7bc93cff2df?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Back in February of this year I hacked with members of BugBountyHunter.com on a public bug bounty program and we chose Apple as our target…Continue reading on Medium » (https://zseano.medium.com/finding-xss-on-apple-com-and-building-a-proof-of-concept-to-leak-your-pii-information-d7bc93cff2df?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
SMTP issue Gophish

I’ve been experimented with phishing attack and recently stumbled upon the Gophish attack framework. When I reach the sending profile tab where I upload my SMTP server and send a test email it replies “Max connection attempts exceeded -530 Invalid username or password. I’ve checked and rechecked but my credentials are the same. Is this a common error? The server I used was the sendinblue.

submitted by /u/fizzcoguy589
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
What hackers use...?

It was very interesting to me, so I did a little research on google, I read that they mostly use linux as an OS, so I'm interested in whether black hackers really use linux, or make their OS, which only they have access to. Another question is what hardware they use, like which processors and the rest, are there any companies that work illegally and make certain processors. I'm interested in how well they hide from everything, whether there is even a possibility to catch them through the hardware and locate them. I'm not a hacker, I don't deal with it, I'm just interested in some things like this.

I’ve been hearing a lot about them lately on youtube and I read a lot still. I still can’t fathom that with all this technology, they can’t get over it, catch them or something. Either they depend on state security, or they are very neutral, not working for anyone but themselves. I find it very strange because money is everywhere in the world, why he can never buy them.

There is probably someone among you who would like to tell me a few details, so that I know what I am up to, so that I can continue reading.

Thanks!

submitted by /u/MechanistDesign
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
New Android Spyware Variants Linked to Middle Eastern APT

The new variants, improved for stealth and persistence, share code with other malware samples attributed to the C-23 APT.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Baffle's Data Privacy Cloud Protects Data for Amazon Redshift Customers

Amazon Redshift customers can use Baffle’s Data Privacy Cloud to secure the data pipeline as source data is migrated to Redshift and used for data analytics.

___________________________
@hacking_Attack
@Hacking_Video

Whispers - Identify Hardcoded Secrets In Static Structured Text

"My little birds are everywhere, even in the North, they whisper to me the strangest stories." - Lord VarysWhispers is a static code analysis tool designed for parsing various common data formats in search of hardcoded credentials and dangerous functions. Whispers can run in the CLI or you can integrate it in your CI/CD pipeline.DetectsPasswordsAPI tokensAWS keysPrivate keysHashed credentialsAuthentication tokensDangerous functionsSensitive filesSupported FormatsWhispers is intended to be a structured text parser, not a code parser.The following commonly used formats are currently supported:YAMLJSONXML.npmrc.pypirc.htpasswd.propertiespip.confconf / iniDockerfileDockercfgShell scriptsPython3Python3 files are parsed as ASTs because of native language support.Declaration & Assignment FormatsThe following language files are parsed as text, and checked for common variable declaration and assignment patterns:JavaScriptJavaGoPHPSpecial FormatsAWS credentials filesJDBC connection stringsJenkins config filesSpringFramework Beans config filesJava Properties filesDockercfg private registry auth filesGithub tokensInstallationFrom PyPIpip3 install whispersFrom GitHubgit clone https://github.com/Skyscanner/whisperscd whispersmake installUsageCLIwhispers --helpwhispers --infowhispers source/code/fileOrDirwhispers --config config.yml source/code/fileOrDirwhispers --output /tmp/secrets.yml source/code/fileOrDirwhispers --rules aws-id,aws-secret source/code/fileOrDirwhispers --severity BLOCKER,CRITICAL source/code/fileOrDirwhispers --exitcode 7 source/code/fileOrDirPythonfrom whispers.cli import parse_argsfrom whispers.core import runsrc = "tests/fixtures"configfile = "whispers/config.yml"args = parse_args("-c", configfile, src)for secret in run(args): print(secret)ConfigThere are several configuration options available in Whispers. It’s possible to include/exclude results based on file path, key, or value. File path specifications are interpreted as globs. Keys and values accept regular expressions and several other parameters. There is a default configuration file built-in that will be used if you don't provide a custom one.config.yml should have the following structure:include: files: - "**/*.yml"exclude: files: - "**/test/**/*" - "**/tests/**/*" keys: - ^foo values: - bar$rules: starks: message: Whispers from the North severity: CRITICAL value: regex: (Aria|Ned) Stark ignorecase: TrueThe fastest way to tweak detection (ie: remove false positives and unwanted results) is to copy the default config.yml into a new file, adapt it, and pass it as an argument to Whispers.whispers --config config.yml --rules starks src/file/or/dirCustom RulesRules specify the actual things that should be pulled out from key-value pairs. There are several common ones that come built-in, such as AWS keys and passwords, but the tool is made to be easily expandable with new rules.Custom rules can be defined in the main config file under rules:Custom rules can be added to whispers/rulesrule-id: # unique rule name description: Values formatted like AWS Session Token message: AWS Session Token # report will show this message severity: BLOCKER # one of BLOCKER, CRITICAL, MAJOR, MINOR, INFO key: # specify key format regex: (aws.?session.?token)? ignorecase: True # case-insensitive matching value: # specify value format regex: ^(?=.*a-z)(?=.*A-Z)A-Za-z0-9\+\/{270,450}$ ignorecase: False # case-sensitive matching minlen: 270 # value is at least this long isBase64: True # value is base64-encoded isAscii: False # value is binary data when decoded isUri: False # value is not formatted like a URI similar: 0.35 # maximum allowed similarity between key and value # (1.0 being exactly the same)PluginsAll parsing functionality is implemented via plugins. Each plugin implements a class with the pairs() method that runs through files and returns the key-value pairs to be checked with rules.class PluginName: def pairs(self, file): yield "key", "value"Download Whispers
Read more...

hacking: security in practice
Here's a cool way to capture login credentials between a Windows machine and a Linux file server using MITM ARP poisoning attack and Wireshark. Of course, you can use this approach between any type of system that authenticates over the network in the same subnet. Enjoy!

https://external-preview.redd.it/7SpxRngiQygp74IskQp88T-jOb5b3LYqqZcXiu5-nVI.jpg?width=640&crop=smart&auto=webp&s=0b8577a9c40b6e0665f9507f6a8e54a5c8c4c53e submitted by /u/nexenta81
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Cisco anyconnect exploits 4.10

Anyone??

submitted by /u/Sicfast
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Container Security-Common issues

https://cdn-images-1.medium.com/max/1038/1*XWHG9906dZSQBIAZT7kdrg.png
A) Docker unix socket mounted in container(Container Breakout-1)-

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video