Greetings, I wanted to share with you the OTP Bypass vulnerability that I found in a VDP.Continue reading on Medium » (https://ertugrull.medium.com/otp-bypass-with-response-manipulation-12646c6d7f33?source=rss------bug_bounty-5)

Hacking on Medium
TryHackMe — Kenobi

https://cdn-images-1.medium.com/max/1400/0*EfJRYdzQzg5u32S0.jpeg
Task 1

Continue reading on Medium »

Hacking on Medium
Geisha:1: Vulnhub Walkthrough

https://cdn-images-1.medium.com/max/768/0*tVpwzO9swgho23fr.png
Makineyi indirebilirsiniz.

Continue reading on Medium »

Hacking on Medium
Subdomain Enumeration of Onion sites

https://cdn-images-1.medium.com/max/1200/1*g9B0XD_-BpbBGaI6n99vyg.png
There are tools like gobuster and dirbuster which helps in subdomain enumeration of websites.

Continue reading on InfoSec Write-ups »

hacking: security in practice
What are some of your early security mistakes?

For people who have built websites, apps, or other projects that required security, what mistakes did you make early on that you look back on and laugh about?

For me, the first thing that comes to mind is my forgetting to think about SQL injection in an app I made for a class project. Halfway through presenting it to the class, it was already hacked, and another kid in the class made themself an admin account.

submitted by /u/dragonfiremalus
[link] [comments]

hacking: security in practice
Can virtualbox interfere with using hashcat with GPU ?

I’ve downloaded the relevant drivers for my GPU but im still unable to see it on kali, is it possible that the reason is that i use virtualbox?

If someone managed to run hashcat using his GPU on a kali in virtualbox i would really like to know

submitted by /u/guykehat
[link] [comments]

hacking: security in practice
A new vulnerability in the OmniPod Insulin Management System allows an attacker nearby to schedule or immediately inject insulin

https://external-preview.redd.it/pYRBKJGjeO8W58bYixSajw6atnqq0aDaAt0v3i-4Zuo.jpg?width=640&crop=smart&auto=webp&s=bce34d5975e794523c9fdf8a945a259657f484e2 submitted by /u/CommanderHutli
[link] [comments]

Cracken - A Fast Password Wordlist Generator, Smartlist Creation And Password Hybrid-Mask Analysis Tool
http://www.kitploit.com/2021/11/cracken-fast-password-wordlist.html

Cracken is a fast password wordlist generator, Smartlist creation and password hybrid-mask analysis tool written in pure safe Rust (more on talk/ (https://github.com/shmuelamar/cracken/blob/main/talk)). Inspired by great tools like maskprocessor (https://hashcat.net/wiki/doku.php?id=maskprocessor), hashcat (https://hashcat.net/), Crunch (https://github.com/crunchsec/crunch) and珞 HuggingFace's tokenizers (https://github.com/huggingface/tokenizers).
What? Why? Woot?? At DeepSec2021 (https://deepsec.net/speaker.html#PSLOT517) we presented a new method for analysing passwords as Hybrid-Masks exploiting (https://www.kitploit.com/search/label/Exploiting) common substrings in passwords by utilizing NLP tokenizers (more info on talk/ (https://github.com/shmuelamar/cracken/blob/main/talk)). Our method splits a password into its subwords instead of just a characters mask. HelloWorld123! splitted into ['Hello', 'World', '123!'] as these three subwords are very common in other passwords. Hybrid Masks & Smartlists Smartlists - Compact & representative subword lists created from passwords by utilizing NLP tokenizers Hybrid-Mask - A representation of a password as a combination of wordlists & characters (e.g. ?w1?w2?l?d) Analyzing RockYou Passwords (https://www.kitploit.com/search/label/Passwords) with Smartlists & Hybrid-Masks:

full table here (https://github.com/shmuelamar/cracken/blob/main/talk/rockyou_hybrid-masks_counts.csv) Cracken
is used for: Generating Hybrid-Masks very VERY FAST 隸 (see performance (https://github.com/shmuelamar/cracken#performance) section) Building Smartlists - compact & representative list of subwords from given passwords files (using 珞 HuggingFace's tokenizers (https://github.com/huggingface/tokenizers)) Analyzing passwords for their Hybrid-Masks - building statistics for better password candidates (again very fast) Possible workflows with Cracken: Simple: Generate wordlist candidates from a hybrid mask - e.g. cracken -w rockyou.txt -w 100-most-common.txt '?w1?w2?d?d?d?d?s' You can pipe the passwords Cracken generates into hashcat, john or your favorite password cracker Advanced: Create a Smartlist from existing passwords - cracken create Analyze a passwords list of plaintext passwords - cracken entropy use most frequent Hybrid-Masks to generate password candidates fast - cracken generate -i hybrid-masks.txt For more details see Usage (https://github.com/shmuelamar/cracken#usage-info) section Getting Started download (linux only currently): latest release (https://github.com/shmuelamar/cracken/releases) (https://github.com/shmuelamar/cracken/releases) for more installation options see installation section run Cracken: generate all words of length 8 starting with uppercase followed by 6 lowercase chars and then a digit: $ cracken -o pwdz.lst '?u?l?l?l?l?l?l?d' generate words from two wordlists with year suffix (1000-2999) $ cracken --wordlist firstnames.txt --wordlist lastnames.lst --charset '12' '?w1?w2?1?d?d?d' create a Smartlist of size 50k from subwords extracted from rockyou.txt $ cracken create -f rockyou.txt -m 50000 --smartlist smart.lst estimate the entropy of hybrid mask of the password HelloWorld123! using a smartlist $ cracken entropy -f smart.lst 'HelloWorld123!'

hybrid-min-split: ["hello", "world1", "2", "3", "!"]
hybrid-mask: ?w1?w1?d?d?s
hybrid-min-entropy: 42.73
--
charset-mask: ?l?l?l?l?l?l?l?l?l?l?d?d?d?s
charset-mask-entropy: 61.97 Performance As of writing this, Cracken is probably the world's fastest wordlist generator:

$ cargo build --release run it: $ ./target/release/cracken --help Usage Info generator USAGE: cracken [SUBCOMMAND] FLAGS: -h, --help Prints help information -V, --version Prints version information SUBCOMMANDS: generate (default) - Generates newline separated words according to given mask and wordlist files create Create a new smartlist from input file(s) entropy Computes the estimated entropy of password or password file. The entropy of a password is the log2(len(keyspace)) of the password. There are two types of keyspace size estimations: * mask - keyspace of each char (digit=10, lowercase=26...). * hybrid - finding minimal split into subwords and charsets. For specific subcommand help run: cracken --help Example Usage: ## Generate Subcommand Examples: # all digits from 00000000 to 99999999 cracken ?d?d?d?d?d?d?d?d # all digits from 0 to 99999999 cracken -m 1 ?d?d?d?d?d?d?d?d # words with pwd prefix - pwd0000 to pwd9999 cracken pwd?d?d?d?d # all passwords of length 8 starting with upper then 6 lowers then digit cracken ?u?l?l?l?l?l?l?d # same as above, write output to pwds.txt instead of stdout cracken -o pwds.txt ?u?l?l?l?l?l?l?d # custom charset - all hex values cracken -c 0123456789abcdef '?1?1?1?1' # 4 custom charsets - the order determines the id of the charset cracken -c 01 -c ab -c de -c ef '?1?2?3?4' # 4 lowercase chars with years 2000-2019 suffix cracken -c 01 '?l?l?l?l20?1?d' # starts with firstname from wordlist followed by 4 digits cracken -w firstnames.txt '?w1?d?d?d?d' # starts with firstname from wordlist with lastname from wordlist ending with symbol cracken -w firstnames.txt -w lastnames.txt -c '!@#$' '?w1?w2?1' # repeating wordlists multiple times and combining charsets cracken -w verbs.txt -w nouns.txt '?w1?w2?w1?w2?w2?d?d?d' ## Create Smartlists Subcommand Examples: # create smartlist from single file into smart.txt cracken create -f rockyou.txt --smartlist smart.txt # create smartlist from multiple files with multiple tokenization algorithms cracken create -t bpe -t unigram -t wordpiece -f rockyou.txt -f passwords.txt -f wikipedia.txt --smartlist smart.txt # create smartlist with minimum subword length of 3 and max numbers-only subwords of size 6 cracken create -f rockyou.txt --min-word-len 3 --numbers-max-size 6 --smartlist smart.txt ## Entropy Subcommand Examples: # estimating entropy of a password cracken entropy --smartlist vocab.txt 'helloworld123!' # estimating entropy of a passwords file with a charset mask entropy (default is hybrid) cracken entropy --smartlist vocab.txt -t charset -p passwords.txt # estimating the entropy of a passwords file cracken entropy --smartlist vocab.txt -p passwords.txt cracken-v1.0.0 linux-x86_64 compiler: rustc 1.56.1 (59eed8a2a 2021-11-01) more info at: https://github.com/shmuelamar/cracken ">$ cracken --help
Cracken v1.0.0 - a fast password wordlist generator

USAGE:
cracken [SUBCOMMAND]

FLAGS:
-h, --help Prints help information
-V, --version Prints version information

SUBCOMMANDS:
generate (default) - Generates newline separated words according to given mask and wordlist files
create Create a new smartlist from input file(s)
entropy
Computes the estimated entropy of password or password file.
The entropy of a password is the log2(len(keyspace)) of the password.

There are two types of keyspace size estimations:
* mask - keyspace of each char (digit=10, lowercase=26...).
* hybrid - finding minimal split into subwords and charsets.