process creation logs (1) with sensitive data.
Additional Command Groups
Executed with: Seatbelt.exe -group=GROUPNAME Alias Description Slack Runs modules that start with "Slack*" Chrome Runs modules that start with "Chrome*" Remote Runs the following modules (for use against a remote system): AMSIProviders, AntiVirus, DotNet, ExplorerRunCommands, Hotfixes, InterestingProcesses, LastShutdown, LogonSessions, LSASettings, MappedDrives, NetworkProfiles, NetworkShares, NTLMSettings, PowerShell, ProcessOwners, PuttyHostKeys, PuttySessions, RDPSavedConnections, RDPSessions, RDPsettings, Sysmon, WindowsDefender, WindowsEventForwarding, WindowsFirewall
Command Arguments
Command that accept arguments have it noted in their description. To pass an argument to a command, enclose the command an arguments in double quotes. For example, the following command returns 4624 logon events for the last 30 days: Seatbelt.exe "LogonEvents 30" The following command queries a registry three levels deep, returning only keys/valueNames/values that match the regex .*defini.*, and ignoring any errors that occur. Seatbelt.exe "reg \"HKLM\SOFTWARE\Microsoft\Windows Defender\" 3 .*defini.* true"
Output
Seatbelt can redirect its output to a file with the -outputfile="C:\Path\file.txt" argument. If the file path ends in .json, the output will be structured json. For example, the following command will output the results of system checks to a txt file: Seatbelt.exe -group=system -outputfile="C:\Temp\system.txt"
Remote Enumeration
Commands noted with a + in the help menu can be run remotely against another system. This is performed over WMI via queries for WMI classes and WMI's StdRegProv for registry enumeration. To enumerate a remote system, supply -computername=COMPUTER.DOMAIN.COM - an alternate username and password can be specified with -username=DOMAIN\USER -password=PASSWORD For example, the following command runs remote-focused checks against a remote system: Seatbelt.exe -group=remote -computername=192.168.230.209 -username=THESHIRE\sam -password="yum \"po-ta-toes\""
Building Your Own Modules
Seatbelt's structure is completely modular, allowing for additional command modules to be dropped into the file structure and loaded up dynamically. There is a commented command module template at .\Seatbelt\Commands\Template.cs for reference. Once built, drop the module in the logical file location, include it in the project in the Visual Studio Solution Explorer, and compile.
Compile Instructions
We are not planning on releasing binaries for Seatbelt, so you will have to compile yourself. Seatbelt has been built against .NET 3.5 and 4.0 with C# 8.0 features and is compatible with Visual Studio Community Edition (https://visualstudio.microsoft.com/downloads/). Simply open up the project .sln, choose "release", and build. To change the target .NET framework version, modify the project's settings (https://github.com/GhostPack/Seatbelt/issues/27) and rebuild the project.
Acknowledgments
Seatbelt incorporates various collection items, code C# snippets, and bits of PoCs found throughout research for its capabilities. These ideas, snippets, and authors are highlighted in the appropriate locations in the source code, and include: @andrewchiles (https://twitter.com/andrewchiles)' HostEnum.ps1 (https://github.com/threatexpress/red-team-scripts/blob/master/HostEnum.ps1) script and @tifkin_ (https://twitter.com/tifkin_)'s Get-HostProfile.ps1 (https://github.com/leechristensen/Random/blob/master/PowerShellScripts/Get-HostProfile.ps1) provided inspiration for many of the artifacts to collect. Boboes' code concerning NetLocalGroupGetMembers (https://stackoverflow.com/questions/33935825/pinvoke-netlocalgroupgetmembers-runs-into-fatalexecutionengineerror/33939889#33939889) ambyte's code for converting a mapped drive letter to a network path (https://gist.github.com/ambyte/01664dc7ee576f69042c) Igor Korkhov's code to retrieve current token
Additional Command Groups
Executed with: Seatbelt.exe -group=GROUPNAME Alias Description Slack Runs modules that start with "Slack*" Chrome Runs modules that start with "Chrome*" Remote Runs the following modules (for use against a remote system): AMSIProviders, AntiVirus, DotNet, ExplorerRunCommands, Hotfixes, InterestingProcesses, LastShutdown, LogonSessions, LSASettings, MappedDrives, NetworkProfiles, NetworkShares, NTLMSettings, PowerShell, ProcessOwners, PuttyHostKeys, PuttySessions, RDPSavedConnections, RDPSessions, RDPsettings, Sysmon, WindowsDefender, WindowsEventForwarding, WindowsFirewall
Command Arguments
Command that accept arguments have it noted in their description. To pass an argument to a command, enclose the command an arguments in double quotes. For example, the following command returns 4624 logon events for the last 30 days: Seatbelt.exe "LogonEvents 30" The following command queries a registry three levels deep, returning only keys/valueNames/values that match the regex .*defini.*, and ignoring any errors that occur. Seatbelt.exe "reg \"HKLM\SOFTWARE\Microsoft\Windows Defender\" 3 .*defini.* true"
Output
Seatbelt can redirect its output to a file with the -outputfile="C:\Path\file.txt" argument. If the file path ends in .json, the output will be structured json. For example, the following command will output the results of system checks to a txt file: Seatbelt.exe -group=system -outputfile="C:\Temp\system.txt"
Remote Enumeration
Commands noted with a + in the help menu can be run remotely against another system. This is performed over WMI via queries for WMI classes and WMI's StdRegProv for registry enumeration. To enumerate a remote system, supply -computername=COMPUTER.DOMAIN.COM - an alternate username and password can be specified with -username=DOMAIN\USER -password=PASSWORD For example, the following command runs remote-focused checks against a remote system: Seatbelt.exe -group=remote -computername=192.168.230.209 -username=THESHIRE\sam -password="yum \"po-ta-toes\""
Building Your Own Modules
Seatbelt's structure is completely modular, allowing for additional command modules to be dropped into the file structure and loaded up dynamically. There is a commented command module template at .\Seatbelt\Commands\Template.cs for reference. Once built, drop the module in the logical file location, include it in the project in the Visual Studio Solution Explorer, and compile.
Compile Instructions
We are not planning on releasing binaries for Seatbelt, so you will have to compile yourself. Seatbelt has been built against .NET 3.5 and 4.0 with C# 8.0 features and is compatible with Visual Studio Community Edition (https://visualstudio.microsoft.com/downloads/). Simply open up the project .sln, choose "release", and build. To change the target .NET framework version, modify the project's settings (https://github.com/GhostPack/Seatbelt/issues/27) and rebuild the project.
Acknowledgments
Seatbelt incorporates various collection items, code C# snippets, and bits of PoCs found throughout research for its capabilities. These ideas, snippets, and authors are highlighted in the appropriate locations in the source code, and include: @andrewchiles (https://twitter.com/andrewchiles)' HostEnum.ps1 (https://github.com/threatexpress/red-team-scripts/blob/master/HostEnum.ps1) script and @tifkin_ (https://twitter.com/tifkin_)'s Get-HostProfile.ps1 (https://github.com/leechristensen/Random/blob/master/PowerShellScripts/Get-HostProfile.ps1) provided inspiration for many of the artifacts to collect. Boboes' code concerning NetLocalGroupGetMembers (https://stackoverflow.com/questions/33935825/pinvoke-netlocalgroupgetmembers-runs-into-fatalexecutionengineerror/33939889#33939889) ambyte's code for converting a mapped drive letter to a network path (https://gist.github.com/ambyte/01664dc7ee576f69042c) Igor Korkhov's code to retrieve current token
group information (https://stackoverflow.com/questions/2146153/how-to-get-the-logon-sid-in-c-sharp/2146418#2146418) RobSiklos' snippet to determine if a host is a virtual machine (https://stackoverflow.com/questions/498371/how-to-detect-if-my-application-is-running-in-a-virtual-machine/11145280#11145280) JGU's snippet on file/folder ACL right comparison (https://stackoverflow.com/questions/1410127/c-sharp-test-if-user-has-write-access-to-a-folder/21996345#21996345) Rod Stephens' pattern for recursive file enumeration (http://csharphelper.com/blog/2015/06/find-files-that-match-multiple-patterns-in-c/) SwDevMan81's snippet for enumerating current token privileges (https://stackoverflow.com/questions/4349743/setting-size-of-token-privileges-luid-and-attributes-array-returned-by-gettokeni) Jared Atkinson's PowerShell work on Kerberos ticket caches (https://github.com/Invoke-IR/ACE/blob/master/ACE-Management/PS-ACE/Scripts/ACE_Get-KerberosTicketCache.ps1) darkmatter08's Kerberos C# snippet (https://www.dreamincode.net/forums/topic/135033-increment-memory-pointer-issue/) Numerous PInvoke.net (https://www.pinvoke.net/) samples Jared Hill's awesome CodeProject to use Local Security Authority to Enumerate User Sessions (https://www.codeproject.com/Articles/18179/Using-the-Local-Security-Authority-to-Enumerate-Us) Fred's code on querying the ARP cache (https://social.technet.microsoft.com/Forums/lync/en-US/e949b8d6-17ad-4afc-88cd-0019a3ac9df9/powershell-alternative-to-arp-a?forum=ITCG) ShuggyCoUk's snippet on querying the TCP connection table (https://stackoverflow.com/questions/577433/which-pid-listens-on-a-given-port-in-c-sharp/577660#577660) yizhang82's example of using reflection to interact with COM objects through C# (https://gist.github.com/yizhang82/a1268d3ea7295a8a1496e01d60ada816) @djhohnstein (https://twitter.com/djhohnstein)'s SharpWeb project (https://github.com/djhohnstein/SharpWeb/blob/master/Edge/SharpEdge.cs) @djhohnstein (https://twitter.com/djhohnstein)'s EventLogParser project (https://github.com/djhohnstein/EventLogParser) @cmaddalena (https://twitter.com/cmaddalena)'s SharpCloud project (https://github.com/chrismaddalena/SharpCloud), BSD 3-Clause @_RastaMouse (https://twitter.com/_RastaMouse)'s Watson project (https://github.com/rasta-mouse/Watson/), GPL License @_RastaMouse (https://twitter.com/_RastaMouse)'s Work on AppLocker enumeration (https://rastamouse.me/2018/09/enumerating-applocker-config/) @peewpw (https://twitter.com/peewpw)'s Invoke-WCMDump project (https://github.com/peewpw/Invoke-WCMDump/blob/master/Invoke-WCMDump.ps1), GPL License TrustedSec's HoneyBadger project (https://github.com/trustedsec/HoneyBadger/tree/master/modules/post/windows/gather), BSD 3-Clause CENTRAL Solutions's Audit User Rights Assignment Project (https://www.centrel-solutions.com/support/tools.aspx?feature=auditrights), No license Collection ideas inspired from @ukstufus (https://twitter.com/ukstufus)'s Reconerator (https://github.com/stufus/reconerator) Office MRU locations and timestamp parsing information from Dustin Hurlbut's paper Microsoft Office 2007, 2010 - Registry Artifacts (https://ad-pdf.s3.amazonaws.com/Microsoft_Office_2007-2010_Registry_ArtifactsFINAL.pdf) The Windows Commands list (https://docs.microsoft.com/en-us/windows-server/administration/windows-commands/windows-commands), used for sensitive regex construction Ryan Ries' code for enumeration mapped RPC endpoints (https://stackoverflow.com/questions/21805038/how-do-i-pinvoke-rpcmgmtepeltinqnext) Chris Haas' post on EnumerateSecurityPackages() (https://stackoverflow.com/a/5941873) darkoperator (https://github.com/GhostPack/Seatbelt/blob/master/carlos_perez)'s work on the HoneyBadger project (https://github.com/trustedsec/HoneyBadger) @airzero24 (https://twitter.com/airzero24)'s work on WMI Registry enumeration (https://github.com/airzero24/WMIReg) Alexandru's answer on RegistryKey.OpenBaseKey alternatives
(https://stackoverflow.com/questions/26217199/what-are-some-alternatives-to-registrykey-openbasekey-in-net-3-5) Tomas Vera's post on JavaScriptSerializer (http://www.tomasvera.com/programming/using-javascriptserializer-to-parse-json-objects/) Marc Gravell's note on recursively listing files/folders (https://stackoverflow.com/a/929418) @mattifestation (https://twitter.com/mattifestation)'s Sysmon rule parser (https://github.com/mattifestation/PSSysmonTools/blob/master/PSSysmonTools/Code/SysmonRuleParser.ps1#L589-L595) Some inspiration from spolnik's Simple.CredentialsManager project (https://github.com/spolnik/Simple.CredentialsManager), Apache 2 license This post on Credential Guard settings (https://www.tenforums.com/tutorials/68926-verify-if-device-guard-enabled-disabled-windows-10-a.html) This thread (https://social.technet.microsoft.com/Forums/windows/en-US/b0e13a16-51a6-4aca-8d44-c85e097f882b/nametype-in-nla-information-for-a-network-profile) on network profile information Mark McKinnon's post on decoding the DateCreated and DateLastConnected SSID values (http://cfed-ttf.blogspot.com/2009/08/decoding-datecreated-and.html) This Specops post on group policy caching (https://specopssoft.com/blog/things-work-group-policy-caching/) sa_ddam213's StackOverflow post on enumerating items in the Recycle Bin (https://stackoverflow.com/questions/18071412/list-filenames-in-the-recyclebin-with-c-sharp-without-using-any-external-files) Kirill Osenkov's code for managed assembly detection (https://stackoverflow.com/a/15608028) The Mono project (https://github.com/mono/linux-packaging-mono/blob/d356d2b7db91d62b80a61eeb6fbc70a402ac3cac/external/corefx/LICENSE.TXT) for the SecBuffer/SecBufferDesc classes Elad Shamir (https://twitter.com/elad_shamir) and his Internal-Monologue (https://github.com/eladshamir/Internal-Monologue/) project, Vincent Le Toux (https://twitter.com/mysmartlogon) for his DetectPasswordViaNTLMInFlow (https://github.com/vletoux/DetectPasswordViaNTLMInFlow/) project, and Lee Christensen for this GetNTLMChallenge (https://github.com/leechristensen/GetNTLMChallenge/) project. All of these served as inspiration int he SecPackageCreds command. @leftp and @eksperience's Gopher project (https://github.com/EncodeGroup/Gopher) for inspiration for the FileZilla and SuperPutty commands @funoverip for the original McAfee SiteList.xml decryption code We've tried to do our due diligence for citations, but if we've left someone/something out, please let us know!
Download Seatbelt (https://github.com/GhostPack/Seatbelt)
Download Seatbelt (https://github.com/GhostPack/Seatbelt)
Hacking Articles Tips Tricks Videos Tutorials
Photo
Black Hat Ethical Hacking
Apple, Google Both Track Mobile Telemetry Data, Despite Users Opting Out
https://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Apple, Google Both Track Mobile Telemetry Data, Despite Users Opting OutPost Views: 42
style="display:block"
data-ad-client="ca-pub-6620833063853657"
data-ad-slot="8337846400"
data-ad-format="auto"
data-full-width-responsive="true">
Reading Time: 1 Minute
Mobile device-tracking by Apple and Google take center stage in a report revealing that, despite both allowing users to opt out of sharing telemetry data – they do anyway.
“Both iOS and Google Android transmit telemetry, despite the user explicitly opting out of this,” wrote researcher Douglas Leith from Trinity College in Ireland, in a recently published academic report.
The research, entitled Mobile Handset Privacy: Measuring The Data iOS and Android Send to Apple And Google (PDF), also found that Google collects up to 20 times more data from its Android Pixel users compared to the amount of data that Apple collects from iOS users.
“The phone IMEI, hardware serial number, SIM serial number and IMSI, handset phone number etc. are shared with Apple and Google,” according to the report. “When a SIM is inserted, both iOS and Google Android send details to Apple/Google. iOS sends the MAC addresses of nearby devices, e.g. other handsets and the home gateway, to Apple, together with their GPS location. Currently there are few, if any, realistic options for preventing this data sharing.” Data Collected & Shared with Apple, GoogleParameters of the testing did not include pre-installed apps baked into the manufacturers’ mobile operating system, or third-party apps. Rather, research focused on data collected by OS-level handset components and functions, such as Apple’s Bluetooth UniqueChipID, Secure Element ID and the transmission of the devices’ Wi-Fi MAC addresses.
“Google collects a notably larger volume of handset data than Apple,” Leith wrote. “During the first 10 minutes of startup, the Pixel handset sends around 1MB of data to Google, compared with the iPhone sending around 42KB of data to Apple. When the handsets are sitting idle, the Pixel sends roughly 1MB of data to Google every 12 hours, compared with the iPhone sending 52KB to Apple — i.e., Google collects around 20 times more handset data than Apple.”
He noted that the operating systems connect to their back-end servers on average every 4.5 minutes, whether they’re in use or not.
On an informal basis, Leith did examine a number of the pre-installed apps and services, specific to the phone manufacturers. He noted that they also make network connections, despite never having been opened or used.
See Also: Malicious Docker Cryptomining Images Rack Up 20M Downloads
“In particular, on iOS these include Siri, Safari and iCloud; and on Google Android these include the YouTube app, Chrome, Google Docs, Safetyhub, Google Messaging, the Clock and the Google SearchBar,” he said. Apple, Google Dispute ResearchWhen Leith reached out to both Apple and Google to comment on his research he received mixed results.
“To date, Apple have responded only with silence (we sent three emails to Apple’s director of user privacy, who declined even to acknowledge receipt of an email,” Leith wrote. Since then, Apple has made public statements critical of Leith’s research and insisting privacy and opt-out measures do exist.
“Google responded with a number of comments and clarifications,” he wrote. “They also say that they intend to publish public documentation on the telemetry data that they collect.”
In a statement to the numerous publi[...]
Apple, Google Both Track Mobile Telemetry Data, Despite Users Opting Out
https://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Apple, Google Both Track Mobile Telemetry Data, Despite Users Opting OutPost Views: 42
style="display:block"
data-ad-client="ca-pub-6620833063853657"
data-ad-slot="8337846400"
data-ad-format="auto"
data-full-width-responsive="true">
Reading Time: 1 Minute
Mobile device-tracking by Apple and Google take center stage in a report revealing that, despite both allowing users to opt out of sharing telemetry data – they do anyway.
“Both iOS and Google Android transmit telemetry, despite the user explicitly opting out of this,” wrote researcher Douglas Leith from Trinity College in Ireland, in a recently published academic report.
The research, entitled Mobile Handset Privacy: Measuring The Data iOS and Android Send to Apple And Google (PDF), also found that Google collects up to 20 times more data from its Android Pixel users compared to the amount of data that Apple collects from iOS users.
“The phone IMEI, hardware serial number, SIM serial number and IMSI, handset phone number etc. are shared with Apple and Google,” according to the report. “When a SIM is inserted, both iOS and Google Android send details to Apple/Google. iOS sends the MAC addresses of nearby devices, e.g. other handsets and the home gateway, to Apple, together with their GPS location. Currently there are few, if any, realistic options for preventing this data sharing.” Data Collected & Shared with Apple, GoogleParameters of the testing did not include pre-installed apps baked into the manufacturers’ mobile operating system, or third-party apps. Rather, research focused on data collected by OS-level handset components and functions, such as Apple’s Bluetooth UniqueChipID, Secure Element ID and the transmission of the devices’ Wi-Fi MAC addresses.
“Google collects a notably larger volume of handset data than Apple,” Leith wrote. “During the first 10 minutes of startup, the Pixel handset sends around 1MB of data to Google, compared with the iPhone sending around 42KB of data to Apple. When the handsets are sitting idle, the Pixel sends roughly 1MB of data to Google every 12 hours, compared with the iPhone sending 52KB to Apple — i.e., Google collects around 20 times more handset data than Apple.”
He noted that the operating systems connect to their back-end servers on average every 4.5 minutes, whether they’re in use or not.
On an informal basis, Leith did examine a number of the pre-installed apps and services, specific to the phone manufacturers. He noted that they also make network connections, despite never having been opened or used.
See Also: Malicious Docker Cryptomining Images Rack Up 20M Downloads
“In particular, on iOS these include Siri, Safari and iCloud; and on Google Android these include the YouTube app, Chrome, Google Docs, Safetyhub, Google Messaging, the Clock and the Google SearchBar,” he said. Apple, Google Dispute ResearchWhen Leith reached out to both Apple and Google to comment on his research he received mixed results.
“To date, Apple have responded only with silence (we sent three emails to Apple’s director of user privacy, who declined even to acknowledge receipt of an email,” Leith wrote. Since then, Apple has made public statements critical of Leith’s research and insisting privacy and opt-out measures do exist.
“Google responded with a number of comments and clarifications,” he wrote. “They also say that they intend to publish public documentation on the telemetry data that they collect.”
In a statement to the numerous publi[...]
Black Hat Ethical Hacking
Apple, Google Both Track Mobile Telemetry Data, Despite Users Opting Out
Apple, Google Both Track Mobile Telemetry Data, Despite Users Opting Out
Hacking Articles Tips Tricks Videos Tutorials
Photo
hacking: security in practice
How The Classic Anime Film Ghost in the Shell Predicted the Future of Hacking in Cyber Security, (Artifical Intelligence, Internet of Things and User Data) Well Worth The Watch.
https://external-preview.redd.it/6EyXXwUE6nGA8hWbhOAypWzOEwWswuuetJKqvbXuuCc.jpg?width=320&crop=smart&auto=webp&s=8c88f715a6688db493676b11c7e43328a9230316 submitted by /u/broschitun
[link] [comments]
How The Classic Anime Film Ghost in the Shell Predicted the Future of Hacking in Cyber Security, (Artifical Intelligence, Internet of Things and User Data) Well Worth The Watch.
https://external-preview.redd.it/6EyXXwUE6nGA8hWbhOAypWzOEwWswuuetJKqvbXuuCc.jpg?width=320&crop=smart&auto=webp&s=8c88f715a6688db493676b11c7e43328a9230316 submitted by /u/broschitun
[link] [comments]
Hacking Articles Tips Tricks Videos Tutorials
Photo
hacking: security in practice
Can I make a server think I uploaded a file earlier than I actually did?
Is it possible to do what the title says?
The website I'm talking about uses jQuery and AJAX in the front-end and PHP in the back-end. When I upload a file through a simple HTML form it gets sent to the server and then the page refreshes displaying the time I uploaded the file.
Screenshots:
https://imgur.com/a/L47dOTW
https://imgur.com/a/TNJItKR
Is there any way I can make the server think the file was uploaded earlier?
Thanks.
submitted by /u/PaterTheofilos
[link] [comments]
Can I make a server think I uploaded a file earlier than I actually did?
Is it possible to do what the title says?
The website I'm talking about uses jQuery and AJAX in the front-end and PHP in the back-end. When I upload a file through a simple HTML form it gets sent to the server and then the page refreshes displaying the time I uploaded the file.
Screenshots:
https://imgur.com/a/L47dOTW
https://imgur.com/a/TNJItKR
Is there any way I can make the server think the file was uploaded earlier?
Thanks.
submitted by /u/PaterTheofilos
[link] [comments]
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Yemek Sepeti ve Veri İhlali
https://cdn-images-1.medium.com/max/600/1*ClJ-_KEB_Qn4ReqmHIaJZQ.jpeg
Bu yazıda Kişisel Verileri Koruma Kurumunun veri ihlali hakkında verdiği bazı kararlarla Yemek Sepeti veri ihlali bildirimini…
Continue reading on Medium »
Yemek Sepeti ve Veri İhlali
https://cdn-images-1.medium.com/max/600/1*ClJ-_KEB_Qn4ReqmHIaJZQ.jpeg
Bu yazıda Kişisel Verileri Koruma Kurumunun veri ihlali hakkında verdiği bazı kararlarla Yemek Sepeti veri ihlali bildirimini…
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
YOU HAVE SCAMMED PEOPLE WITH YOUR HACK!!
A lot of people lost tons of money because of you!!!
Continue reading on Medium »
YOU HAVE SCAMMED PEOPLE WITH YOUR HACK!!
A lot of people lost tons of money because of you!!!
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
YOU HAVE SCAMMED PEOPLE WITH YOUR HACK!!
A lot of people lost tons of money because of you!!!
Continue reading on Medium »
YOU HAVE SCAMMED PEOPLE WITH YOUR HACK!!
A lot of people lost tons of money because of you!!!
Continue reading on Medium »
Facebook Push Notification Linkshim Bypassed
I’m glad you’re here. Please have fun reading (@nmochea).
Read more...
I’m glad you’re here. Please have fun reading (@nmochea).
Read more...
hacking: security in practice
view blurred images?
I am curious if there is a technique I can use to view blurred images on for example this site.
You have to pay them to see certain images. I am very grateful for some insight!
This is what I get when I inspect it on chrome developer console:
submitted by /u/_User2020
[link] [comments]
view blurred images?
I am curious if there is a technique I can use to view blurred images on for example this site.
You have to pay them to see certain images. I am very grateful for some insight!
This is what I get when I inspect it on chrome developer console:
<svg<use
Unlock My Album
5 Credits for 90 days
submitted by /u/_User2020
[link] [comments]
Reddit
From the hacking community on Reddit
Explore this post and more from the hacking community
Hello, Mr.Necromancer
https://medium.com/@pat.necromancer/hello-mr-necromancer-22ea9ba030a7?source=rss------bug_bounty-5
The first day to start in cybersecurity.Continue reading on Medium » (https://medium.com/@pat.necromancer/hello-mr-necromancer-22ea9ba030a7?source=rss------bug_bounty-5)
https://medium.com/@pat.necromancer/hello-mr-necromancer-22ea9ba030a7?source=rss------bug_bounty-5
The first day to start in cybersecurity.Continue reading on Medium » (https://medium.com/@pat.necromancer/hello-mr-necromancer-22ea9ba030a7?source=rss------bug_bounty-5)