FiddleZAP - A Simplified Version Of EKFiddle For OWASP ZAP

FiddleZAP is a simplified version of EKFiddle for OWASP ZAP.With ZAP as your web proxy, you are able to flag malicious traffic based on predefined regular expressions.Example: Alert, highlighting and tagging when a regex matches on a string within the HTML source code of a compromised websiteInstallationDownload and install ZAP: https://www.zaproxy.org/download/Download or clone the FiddleZAP directory into your Documents folder.It should have the following structure: There are 2 scripts (standalone, passive rules). The former is used to run manually on the currently loaded session (web traffic), the latter automatically runs while recording traffic.Stand AloneFirst, install the standalone script:Click on the Load script icon: Select the following parameters:It now shows under standalone: Passive RulesNext, install the passive rules script:Click on the Load script icon:Select the following parameters:The FiddleZAP script should now show up under Passive Rules. If it is not enabled, right-click on it and select Enable script. FeaturesRegexes (rules) to detect malicious trafficRules for FiddleZAP can look for URI patterns and source code patterns (session body).A community_rules.txt file is provided with some examples.The user_rules.txt is your own rules file.Rules are automatically loaded and used to scan incoming traffic (if Passive Rules script is enabled). If you want to run rules on previously captured traffic, you need to run the standalone script.Color coding and tagging of matching web sessions(This feature requires the neonmarker add-on)Detailed alertsDownload FiddleZAP
Read more...

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Bug Bounty Hunting — How I Earned $500 In 4 Hours

https://cdn-images-1.medium.com/max/605/0*P8a0CjEngnq7oLae.jpg
Phi$hing, Phi$hing, Phi$hing

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
10 resources for beginners to learn Web hacking

https://cdn-images-1.medium.com/max/600/1*rF9z34GLTSO0xhFXGyjGtg.jpeg
Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
10 resources for beginners to learn Cyber Forensics

https://cdn-images-1.medium.com/max/600/1*1lfGSMuS9dIhXMBopBCNTQ.jpeg
Five Case Studies in Cyber Forensics: Creator @Control_Risks

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Loly: 1 Vulnhub Walkthrough

https://cdn-images-1.medium.com/max/667/0*0-3sAn4_hxZxvjCQ.png
Makineyi indirebilirsiniz.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
What is Sandbox?

https://cdn-images-1.medium.com/max/1640/1*mnjzE6srSTnzDvf7T6GC-Q.png
Sandbox is an isolated environment. Software enables this kind of special environment inside your computer where you can run programs.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

How I earned 240$ from a Zero Interface✌

bonjour Hackers, I’ Saransh Saraf AKA MR23R0.Continue reading on Medium »
Read more...

“FREE 350+ Tryhackme Rooms”
https://sm4rty.medium.com/free-350-tryhackme-rooms-f3b7b2954b8d?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hey Guys, I am Samrat Gupta aka Sm4rty, a Security Researcher and a Bug Bounty Hunter. In this blog, I will be sharing a list of 350+ Free…Continue reading on Medium » (https://sm4rty.medium.com/free-350-tryhackme-rooms-f3b7b2954b8d?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Penetration Testing Glossary For Newbies
https://www.reddit.com/r/Pentesting/comments/rfkaz0/penetration_testing_glossary_for_newbies/

submitted by /u/jeffreysan1996 (https://www.reddit.com/user/jeffreysan1996)
[link] (https://www.consealsecurity.com/about/glossary/) [comments] (https://www.reddit.com/r/Pentesting/comments/rfkaz0/penetration_testing_glossary_for_newbies/)

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Backdoor.IRC.Subhuman Unauthenticated Open Proxy

https://3.bp.blogspot.com/-XNOhyhmygqg/WWlvTLzMLRI/AAAAAAAAINo/1vKZqL-UEc0yrpuP08mTX_Jxjx_k32PvQCLcBGAs/s1600/h41.png
Backdoor.IRC.Subhuman malware suffers from an unauthenticated open proxy vulnerability.

MD5 | aa1031e2177df725476447c7a4f2ca2a

Download
Discovery / credits: Malvuln - malvuln.com (c) 2021
Original source: https://malvuln.com/advisory/f93e64ac9c3383d0df23662a78a76c07.txt
Contact: malvuln13@gmail.com
Media: twitter.com/malvuln

Threat: Backdoor.IRC.Subhuman
Vulnerability: Unauthenticated Open Proxy
Description: The malware listens on TCP port 1029. Third-party attackers who can connect to the infected system can relay requests from the original connection to the destination and then back to the origination system. Attackers may then be able to launch attacks, download files or port scan third party systems and it will appear as the attacks originated from that infected host.
Type: PE32
MD5: f93e64ac9c3383d0df23662a78a76c07
Vuln ID: MVID-2021-0418
Disclosure: 12/11/2021

Exploit/PoC:
curl socks4://192.168.18.125:1029 http://192.168.18.128:21
220 INetSim FTP Service ready.
Disclaimer: The information contained within this advisory is supplied "as-is" with no warranties or guarantees of fitness of use or otherwise. Permission is hereby granted for the redistribution of this advisory, provided that it is not altered except by reformatting it, and that due credit is given. Permission is explicitly given for insertion in vulnerability databases and similar, provided that due credit is given to the author. The author is not responsible for any misuse of the information contained herein and accepts no responsibility for any damage caused by the use or misuse of this information. The author prohibits any malicious use of security related information or exploits by the author or elsewhere. Do not attempt to download Malware samples. The author of this website takes no responsibility for any kind of damages occurring from improper Malware handling or the downloading of ANY Malware mentioned on this website or elsewhere. All content Copyright (c) Malvuln.com (TM).

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Backdoor.Win32.Mechbot.a Insecure Permissions

https://2.bp.blogspot.com/-uXp9StI5Rh0/WWlvYIMdqaI/AAAAAAAAIOg/mHe50EJovPcz8di_9Up4vC4YPRAZ9BUbwCLcBGAs/s1600/h55.png
Backdoor.Win32.Mechbot.a malware suffers from an insecure permissions vulnerability.

MD5 | 64ea9b60938db7d08ee70a6e3bbc978f

Download
Discovery / credits: Malvuln - malvuln.com (c) 2021
Original source: https://malvuln.com/advisory/8c9e7906d0ad5d0f2267be0057f2a8e3.txt
Contact: malvuln13@gmail.com
Media: twitter.com/malvuln

Threat: Backdoor.Win32.Mechbot.a
Vulnerability: Insecure Permissions
Description: The malware creates a dir with insecure permissions under c:\ drive granting change (C) permissions to the authenticated user group. Standard users can rename the executable dropped by the malware to disable it or replace it with their own executable. Then wait for a privileged user to logon to the infected machine to potentially escalate privileges.
Type: PE32
MD5: 8c9e7906d0ad5d0f2267be0057f2a8e3
Vuln ID: MVID-2021-0417
Disclosure: 12/11/2021
Exploit/PoC:
C:\>cacls "TitanZone BOT"
C:\TitanZone BOT BUILTIN\Administrators:(OI)(CI)(ID)F
NT AUTHORITY\SYSTEM:(OI)(CI)(ID)F
BUILTIN\Users:(OI)(CI)(ID)R
NT AUTHORITY\Authenticated Users:(ID)C
NT AUTHORITY\Authenticated Users:(OI)(CI)(IO)(ID)C
C:\>dir "TitanZone BOT"
Volume in drive C has no label.

Directory of C:\TitanZone BOT

06/15/2003 11:24 AM 591 checkmech
06/15/2003 11:24 AM 21,854 configure
11/19/2021 12:13 AM DIR CONTRIB
05/10/2003 02:07 PM 201,216 CYGWIN1.DLL
05/10/2003 02:07 PM 4,305 GENUSER
07/02/2003 08:44 PM 35 LinkEvents
06/15/2003 11:24 AM 1,391 Makefile
05/10/2003 02:07 PM 22,882 mech.help
07/02/2003 08:40 PM 6 MECH.PID
07/02/2003 08:45 PM 2,464 MECH.SET
05/10/2003 02:07 PM 796 MKINDEX
11/19/2021 12:13 AM DIR randfiles
11/19/2021 12:13 AM DIR SRC
06/26/2003 09:09 PM 213 titanzone.bat
11/19/2021 12:13 AM DIR TOOLS
05/10/2003 02:07 PM 192,512 WinMech.exe
07/02/2003 08:45 PM 155 winmech.users
Disclaimer: The information contained within this advisory is supplied "as-is" with no warranties or guarantees of fitness of use or otherwise. Permission is hereby granted for the redistribution of this advisory, provided that it is not altered except by reformatting it, and that due credit is given. Permission is explicitly given for insertion in vulnerability databases and similar, provided that due credit is given to the author. The author is not responsible for any misuse of the information contained herein and accepts no responsibility for any damage caused by the use or misuse of this information. The author prohibits any malicious use of security related information or exploits by the author or elsewhere. Do not attempt to download Malware samples. The author of this website takes no responsibility for any kind of damages occurring from improper Malware handling or the downloading of ANY Malware mentioned on this website or elsewhere. All content Copyright (c) Malvuln.com (TM).

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video