Hacking on Medium
Cracking User Passwords Stored in Keycloak with Hashcat

https://cdn-images-1.medium.com/max/2395/1*K-Z3bSPbbYdIe0jDJjGSBw.png
It is faster and easier that you might have thought, even with crappy hardware and no profound knowledge. A brief how-to.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How to hack a satellite

https://cdn-images-1.medium.com/max/1200/1*ZD98pzrjBww4S0PJjgf5zQ.png
The winner of the second annual Hack-A-Sat contest used an “ingenious tactic” to defeat the competition, offering lessons for U.S.

Continue reading on README_ »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Software company Polymer just raised millions to build the data loss prevention solution that will…

https://cdn-images-1.medium.com/max/1200/1*30LJKDeHd723x-HQtOOBLw.jpeg
Polymer’s no-code platform for automated data loss prevention (DLP) for software-as-a-service (SaaS) apps significantly leverages AI…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
BLACKCAT: UN NUEVO MALWARE RANSOMWARE BASADO EN RUST DETECTADO EN LA NATURALEZA

https://cdn-images-1.medium.com/max/1419/0*nffv7HOFA69N-UjU
PUBLICADO EN 13 DICIEMBRE, 2021POR DPAB

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking Articles|Raj Chandel's Blog
Seal HackTheBox Walkthrough

Seal is a CTF Linux machine rated as medium difficulty on Hack the Box platform. So let get started and deep dive into breaking down this machine by using the following the methodology below. Pentesting Methodologies · NmapExploitation · Path TraversalPrivilege Escalation· Digging SSH Id_rsaPort Scanning & EnumerationFirst, we’ll start by running nmap aggressive scan to look for open ports. As you can see, 3 ports are open, namely:DIRBwhich is a web content scanner to brute force the directory and files name of the seal machine. GitBucket.We don’t have any credentials, so let’s create a new one. ___________________________
@hacking_Attack
@Hacking_Video

EjtnOvfUIO1GO360y8uCr13e1lv2D-L1ucYUtJuvNXilBisMAjGQBKqhpFvvhdp3x1NHLM4Yfw8KwysR6WRRnj52wD7Ueu41VowNaO3NfwbIgXL_efAIPtDXvWNPAbr4EVSnbOKJsD_mHXCNGZhlEe1cH70naxcvTDwYyRQwND4RbIPSXCoykN9U4hqaw=s16000 By expanding the comment, we can see that many configuration files have been changed. But the last configuration was done to the tomcat_user.xml file. It means that some information about users has been changed. While going through the configuration file, tomcat username and passwordcan be found. Exploitation;/html (;) character to bypass. /manager/;/html/upload?___________________________
@hacking_Attack
@Hacking_Video

iOHs0E2AbsOMBEl3whAzA0srpyM5ZNQRoH2diNoz6OGd4gDfLtNgcztgSTn50BgJJjOc4Aks3GshEpMlcmQ9rM5kY4jaTzA0efzMQBOxG5IEfcTTEcY2e-1n9iOEPoZ_NOaBhE2fiTQNc-shoGMGxkA3CkGXMPfTefVyujBboNNH-3z4IysnTmLKrTwg=s16000 As you can see below we have been able to upload our shell.war file in the tomcat application manager. /cat/etc/passwd would show us the list of available users. We have luis user. We also have a backup file which has trigger our attention. So let’s dig into that also browser the complete directory to find any kind of files that ca help. run.yml.What its actually doing, it’s backing up all files in the path /var/liv/tomcat9/webapps/ROOT/admin/dashboardand keeping it in destination /opt/backups/archives/backup-date and time. So if you can put any file in the source directory that can be helpful to us, it’s going to be automatically be zipped the destination folder and we will be able to get access to it. So let’s browse to the home directory of the user we find above, that is, Luis. tar -xvf backup.gzhttps://blogger.googleusercontent.com/img/a/AVvXsEgZnUc8y2DW3KH-g0EpQkFlPYVZlC7PY_ZAyGjM_zr6isqc_kVOM3ad88bdSc6NLgI7mdYOycw4AmTNY78xue0cw-7p0nwpG5jqZjlWf4DXnLx85jTDMw31KG13oq95J2s3gGL7MHENQsqzmMmVWd3MjKrMmp2Npkr6fulQTk-Zc2aw9yyah079YmRfrA=s16000 So now if we browse to the dashboard/uploads, we can find the .ssh folder. And when browsin[...]

___________________________
@hacking_Attack
@Hacking_Video

g the .ssh folder we can find 3 files including the id_rsa. Now we can cat this file to find the private key.Privilege EscalationNow that we have been able to login as luis, lets run the command sudo -l to verify any suoders privilege escalation. We can see that luis can run ansible-playbook as sudo. Now we are going to create a file called test.yml put in those command below:-name: "ignite"The task part is very important here. What it is actually doing is, it’s putting suid bin on bash binary. Once the suid bit has been put on a bash binary, we will execute it.sudo /usr/bin/ansible-playbook ./test.ymlAs show above we have a suid bin and we have root access. ___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
EXIF data help

doing some OSINT and could use some leads... anyone have some good info on photo EXIF, software or web. thanks

submitted by /u/polarchimp91
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Cant get a shell_reverse_tcp (Metasploit)

When using openVPN to a ctf box I cant get a metasploit reverse shell. when init msploit db it defaults my ip address to my local IP. Ill go in and set LHOST to the openvpn IP but when running the exploit it seems that it falls back on the local IP 0.0.0.0:4444 .. I cant figure out what I'm doing wrong. I've tried both with and without using the database and always the same results. Any ideas? I have both a ethernet and wifi NIC. both initialize when starting up. Is it possible that is the issue? what does the syntax look like to set the interface?? "set SRVHOST 10.2.10.10etho0" ??

submitted by /u/Dnozz
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
I am running a simple reverse Shell python scrypt on my local machine from bash terminal. The scrypt work. I have access to a shell. But I want to know, after running a command, how to back to the command line or close the scrypt? I tried CTRL + C , CTRL + Z, CTRL + BREAK. Not working.

https://external-preview.redd.it/IHQKM6rvBTeKDN4cuh6DUnuDgqaAXvrQgEkd6eajuXU.jpg?width=640&crop=smart&auto=webp&s=a7447498ac16ebb6296403ff7232024638f7d6cf submitted by /u/guizmole
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How does twitter account gets hacked ?

Hello Guys, Today Indian Prime minister Narendra modi's twitter account was hacked second time and this make me wonder if it's something wrong with twitter or could be the individual who is at risk ? i am also wondering if i should be without worry if i have 2FA enable ? or there is no guarantee of anything ?

submitted by /u/deepak8717
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
KaliLinux proxychains CA issue

I’m using Kali-Linux using the default SOCK5 Tor proxy and a SOCK5 USA proxy I’m trying to just surf the web and everytime I try to go anywhere it says that the certs. are invalid and I need to goto advanced options to go the “unsafe” option. Anyway I can fix this? Btw I’m using proxychains4

Config

Tor service is on Using proxychains4 Proxy_dns is on Using dynamic_chain

Testing by using the command:

proxychains Firefox google.com (won’t let me access)

But using:

proxychains Firefox whatsmyip.com (Asks if I would like to proceed “unsafe”)

submitted by /u/KeepYaGuessin
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Haptyc - Test Generation Framework
http://www.kitploit.com/2021/12/haptyc-test-generation-framework.html

___________________________
@hacking_Attack
@Hacking_Video

Haptyc is a python library (https://www.kitploit.com/search/label/Python%20Library) which was built to add payload position support and Sniper/Clusterbomb/Batteringram/Pitchfork attack types into Turbo Intruder. While Haptyc accomplishes these goals fairly well it also introduces a simpler way to express test sequences in general. While this library was meant to target Turbo Intruder it has no hard dependencies on Turbo Intruder and can be used anywhere one requires test generation in a Python context. Unfortunately at this time since Haptyc was built for a jython interpreter it only supports Python 2.7 (however future changes will fix this).
What are Haptyc tags?Haptyc tags are tags which a tester can use to annotate an original input payload. A tester can use multiple tags to surround key pieces of data in an HTTP request to wrap it as a positional payload. When tests are being generated Haptyc will parse all the tags in the original payload and generate tests in accordance to the functions associated with the tag names. When Haptyc evaluates a Haptyc tag it will execute the associated tag function (this is called a Haptyc Transform) for a test payload to place in position of the associated tag in the request. Every tag function will receive a data argument and a state argument. The data argument may contain the inner data of the tag or may contain some other test payload sequence. The state argument is a state object associated with the tag where state can be stored between test iterations. Let's review an example.Example 1: Simple list iterationOriginal Payload:GET /animal/[+GuessAnimal]dog[+end] HTTP/1.1Haptyc Class & Haptyc Transform:from haptyc import *

original = "GET /animal/[+GuessAnimal]dog[+end] HTTP/1.1"

class TestLogic(Transform):
@ApplyList(["snake","cat","owl","lion"])
def test_GuessAnimal(self, data, state):
return data + "?original=" + self.inner() + "&attempt=" + str(state.iter)

TestFactory = TestLogic(original)
for test in TestFactory:
print(test)Tests Generated:GET /animal/snake?original=dog&attempt=0 HTTP/1.1
GET /animal/cat?original=dog&attempt=1 HTTP/1.1
GET /animal/owl?original=dog&attempt=2 HTTP/1.1
GET /animal/lion?original=dog&attempt=3 HTTP/1.1In the example above we how one can express tests in a simple way using Haptyc. First the Haptyc library is imported. Second we have defined the original data with our Haptyc tag annotations (GuessAnimal). Next the TestLogic class is defined and extended as a Transform class. Inside this class every method that starts with test_ will get registered as a Haptyc tag for evaluation (https://www.kitploit.com/search/label/Evaluation) in the original payload. We use a logic decorator to apply the state logic for this Haptyc transform. In this case we use the @ApplyList(list) decorator to tell Haptyc to generate a test for every item in the specified list and place that item into the Haptyc transform as the data argument. Inside the transform we return a mutated version of the data to insert back into the position of the tag. In this case the mutation is the list item as data concatenated with the data surrounded by the tag (dog) and then concatentated with the iter value in the state object. Lastly the remaining python shows the TestFactory object being created and all tests being generated in a for loop iterator. This is an example of a standard sniper-style attack which targets a single payload position. Next lets look at other style of attacks.Example 2: ClusterbombOriginal Payload:GET /animal?type=[%type]dog[%end]&name=[%name]fido[%end] HTTP/1.1Haptyc Class & Haptyc Transform:from haptyc import *

original = "GET /animal?type=[%type]dog[%end]&name=[%name]fido[%end] HTTP/1.1"

class TestLogic(Transform):
@ApplyList("snake","cat","owl","lion")
def test_type(self, data, state):
return data

@ApplyList("Frank", "Lisa", "Jin", "Tooth")
def test_name(self, data, state):
return data

TestFactory = TestLogic(original)
for test in TestFactory:

___________________________
@hacking_Attack
@Hacking_Video