hacking: security in practice
I need your advice

hello and sorry for my bad English

I am a novice assembler (NASM) and a freelancer by trade and a very good contract was sent my way.they want me to de-assemble a Visual C++/MFC 2012 application and rewrite it in C#/.NET

the thing is as I'm a very good software and website full-stack developer but said I'm a novice in this area but yet I don't want to ignore this challenge and not to mention the money is good. so I fired up Ghidra and realized something: I've only worked with CLI Code when it came to assembly I don't know how to differentiate the GUI written in MFC from the program's own logic.

the client sent me a sample code. they said if i de-assemble it and manage to write it in high-level language the contract's mine.

so that's it for now. I want to know how to start de-assembling a gui program and figure out how to differentiate/separate the gui code from the core logic of the app.

I need advice. materials to read that can help.

PS: right now I'm reading up on Intel's Assembly Volumes to refresh my memory

submitted by /u/kage_heroin
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How do I bypass router password?

Ok, so here is my problem I have parents who like to take control of everything. They recently got a Netgear Nighthawk 3500 and got this annoying ass program called Circle by Disney. (you may have heard of it) (its circle 1 not 2) and no matter what I have tried I cant seem to bypass it. I have ran a nmap scan and I have the token but that's as far as I could get. Does anyone have any ideas?

submitted by /u/JunkBoi76
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
What stops someone from hacking a software they developed themselves?

What stops something from hacking a software they developed themselves. Let’s say an app for your bank or accounts in general. Bear with me because I know next to nothing about software let alone coding, but from my point of view it would seem quite easy to bypass something you made yourself. What stops a developer on an app like this from not being able to log into my account and suck out all my money. Obviously two factor authentication exists, but let’s say it wasn’t a part of this hypothetical system.

submitted by /u/BibbidiBobbidiBu
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

How to use Metasploit to save tons of time

Metasploit is a powerful tool that is used by ethical hackers to find vulnerabilities on networks and servers. It helps to find the weak…Continue reading on Medium »
Read more...

Hacking on Medium
월패드 해킹으로 알아보는 IoT 보안 현황

https://cdn-images-1.medium.com/max/1920/1*AQvXTv-4ymZuHu7GnHP_lQ.jpeg
실제 피해 사례와 예방법을 알아보자.

Continue reading on StealthSolution »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Does NP in GetNPUsers stand for Non-Preauth?

I believe SPN in GetUserSPNs stands for "Service Principal Names" as this tool is used to find Service Principal Names that are associated with normal user account.

https://github.com/SecureAuthCorp/impacket/blob/master/examples/GetUserSPNs.py

Then, I've also looking at impacket GetNPUsers and wondering what is the meaning of NP in it's name?

https://github.com/SecureAuthCorp/impacket/blob/master/examples/GetNPUsers.py

Does NP stand for Non-Preauth as the technique attempt to harvest the non-preauth AS_REP responses?

submitted by /u/w0lfcat
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
zune 30gb

are there anything i can do with a 30gb zune other then turning the zune in to a portable hdd ?

submitted by /u/ilovewomancum
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Simple File Upload Vulnerability on Post request of Payment Gateway

Introduction:

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Microsoft Announces New Endpoint Security Solutions For SMBs

https://cdn-images-1.medium.com/max/1600/0*RjKNpcS8CJSaTXIr
Defender for Business helps SMBs defend against cybersecurity threats, in conjunction with but not restricted to malware and ransomware…

Continue reading on rootissh »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How does a TPM actually protect you?

Sorry if this counts as off topic, but i guess hackers knows the most about how to also protect yourself from hackers.

To me it sounds like a TPM serves no purpose unless your computer gets physically stolen, but i'm pretty sure that's wrong, so i have to ask. I know the TPM 2.0 can be used for DRM purposes with win11. And i know its used in some way with the BitLocker and secure boot, making so you cant usb- / remote boot, like for adding admin accounts and stuff. But i don't know much else.

submitted by /u/tekett
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Metasploit....

So I'm a bit new to metasploit , I used to use metasploit across networks using ngrok for port forwarding as my isp doesnt support it. recently , ngrok got banned by most isps in my country , I was wondering if there were any other alternatives to ngrok . and if not help me out with a solution

submitted by /u/Shark_613
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Cybersecurity in the ROS 2 communication middleware, targeting the top 6 DDS implementations

https://external-preview.redd.it/YIGtgf8FJr1pFrWObmPQxIRb5_PQ8v_-1EIH1IDPWnk.jpg?width=320&crop=smart&auto=webp&s=c68cb2b88663c9974178f4df94ec2dc394f95dd0 submitted by /u/phretor
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Your Brain Against Phishing

https://external-preview.redd.it/UlSmMYulvsthxXoTTmbfWHk_9M873GrTHkSwsGhfQRQ.jpg?width=320&crop=smart&auto=webp&s=cd68c065dd4ce7af87bb933f8d527b38b887aa75 submitted by /u/DrinkMoreCodeMore
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Black Hat Ethical Hacking
New Linux malware hides in cron jobs with invalid dates

https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png New Linux malware hides in cron jobs with invalid datesPost Views: 181
https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/BF2.gif
Reading Time: 1 Minute
Security researchers have discovered a new remote access trojan (RAT) for Linux that keeps an almost invisible profile by hiding in tasks scheduled for execution on a non-existent day, February 31st.
Dubbed CronRAT, the malware is currently targeting web stores and enables attackers to steal credit card data by deploying online payment skimmers on Linux servers.

Characterized by both ingenuity and sophistication, as far as malware for online stores is concerned, CronRAT is undetected by many antivirus engines. Clever hideout for payloadsCronRAT abuses the Linux task scheduling system, cron, which allows scheduling tasks to run on non-existent days of the calendar, such as February 31st.

The Linux cron system accepts date specifications as long as they have a valid format, even if the day does not exist in the calendar – which means that the scheduled task won’t execute.

This is what CronRAT relies on to achieve its stealth. A report today from Dutch cyber-security company Sansec explains that it hides a “sophisticated Bash program” in the names of the scheduled tasks.
See Also: Complete Offensive Security and Ethical Hacking Course
“The CronRAT adds a number of tasks to crontab with a curious date specification: 52 23 31 2 3. These lines are syntactically valid, but would generate a run time error when executed. However, this will never happen as they are scheduled to run on February 31st,” Sansec Researchers explain.
https://www.bleepstatic.com/images/news/u/1100723/2021/CronRAT-payload.png
The payloads are obfuscated via multiple layers of compression and Base64 encoding. Cleaned up, the code includes commands for self-destruction, timing modulation, and a custom protocol that allows communication with a remote server.

The researchers note that the malware contacts a command and control (C2) server (47.115.46.167) using an “exotic feature of the Linux kernel that enables TCP communication via a file.”

Furthermore, the connection is done over TCP via port 443 using a fake banner for the Dropbear SSH service, which also helps the malware stay under the radar.

After contacting the C2 server, the disguise falls, sends and receives several commands, and gets a malicious dynamic library. At the end of these exchanges, the attackers behind CronRAT can run any command on the compromised system.

CronRAT has been found on multiple stores across the world, where it was used to inject on the server scripts that steal payment card data – the so-called Magecart attacks.
See Also: New Windows zero-day with public exploit lets you become an admin Sansec describes the new malware as “a serious threat to Linux eCommerce servers,” due to its capabilities:

* Fileless execution
* Timing modulation
* Anti-tampering checksums
* Controlled via binary, obfuscated protocol
* Launches tandem RAT in separate Linux subsystem
* Control server disguised as “Dropbear SSH” service
* Payload hidden in legitimate CRON scheduled task names

All these features make CronRAT virtually undetectable. On VirusTotal scanning service, 12 antivirus engines were unable to process the malicious file and 58 of them did not detect it as a threat.
See Also: Offensive Security Tools: Awesome Bug Bounty Tools https://www.bleepstatic.com/images/news/u/1100723/2021/CronRAT-undetect.jpg
Sansec notes that CronRAT’s novel execution technique also bypassed i[...]

___________________________
@hacking_Attack
@Hacking_Video