Hacking on Medium
picoCTF write up: crackme-py

https://cdn-images-1.medium.com/max/600/1*KlGimrIDTFUJqDXnARmz1w.jpeg
Note: You should not copy flag from here just find one by following steps mentioned here.

Continue reading on Medium »

Hacking on Medium
pico CTF write up: 13

https://cdn-images-1.medium.com/max/600/1*KlGimrIDTFUJqDXnARmz1w.jpeg
Note: You should not copy flag from here just find one by following steps mentioned here.

Continue reading on Medium »

Hacking on Medium
Nuevo exploit permite a los atacantes de malware pasar por alto el parche para una falla crítica…

https://cdn-images-1.medium.com/max/1622/0*YIAS8UJStIEPB1cJ
PUBLICADO EN 22 DICIEMBRE, 2021POR DPAB

Continue reading on Medium »

Hacking on Medium
picoCTF write up: First Grep

https://cdn-images-1.medium.com/max/600/1*KlGimrIDTFUJqDXnARmz1w.jpeg
Note: You should not copy flag from here just find one by following steps mentioned here.

Continue reading on Medium »

Hacking on Medium
picoCTF write up: dont-use-client-side

https://cdn-images-1.medium.com/max/600/1*KlGimrIDTFUJqDXnARmz1w.jpeg
Note: You should not copy flag from here just find one by following steps mentioned here.

Continue reading on Medium »

Umay - IoT Malware Similarity Analysis Platform
http://www.kitploit.com/2021/12/umay-iot-malware-similarity-analysis.html

IoT Malware (https://www.kitploit.com/search/label/Malware) Similarity Analysis (https://www.kitploit.com/search/label/Analysis) PlatformView Demo

 This project provides IoT malware similarity analysis based on shared codes. It helps to identify other malwares that have shared code with the analyzed file. In this way, you can have a chance to get an idea about the family of the malware. There are various devices with different architectures in the IoT ecosystem. Static-based methods are more effective when addressing the multi-architecture issue. 1000 malware binaries provided by IoTPOT (https://sec.ynu.codes/iot/) were used in the project. The basic blocks and functions of each of binaries were extracted by radare2 (https://www.kitploit.com/search/label/radare2) and the hash values of these data were stored in the SQL database. The basic blocks and functions of the sample to be analyzed are query from this database and all malwares that have shared code are listed.
Current featuresShared code based static analysis.Supporting ARM, MIPS, x86-64, i386, PowerPC, m68k, Renesas SH.?Getting StartedPrerequisitesPython3+Radare2 (https://github.com/radareorg/radare2)r2pipeInstallationgit clone https://github.com/mucoze/Umay
cd Umay
virtualenv venvsource venv/bin/activatepip install -r requirements.txtpython manage.py makemigrationspython manage.py migratepython manage.py createsuperuserpython manage.py runserverand now project app is accesible from your browser. Default: 127.0.0.1:8000Create your own dataset filepython create_dataset.py samples/Give the directory (https://www.kitploit.com/search/label/Directory) where all the samples are located as an argument and it will generate the dataset.db file for you.🤝 ContributingContributions, issues, and feature requests are welcome!Feel free to contact me.LicenseUmay is licensed under Apache License 2.0 (https://github.com/mucoze/Umay/blob/main/LICENSE)

Download Umay (https://github.com/mucoze/Umay)

Umay - IoT Malware Similarity Analysis Platform

IoT Malware Similarity Analysis PlatformView Demo This project provides IoT malware similarity analysis based on shared codes. It helps to identify other malwares that have shared code with the analyzed file. In this way, you can have a chance to get an idea about the family of the malware. There are various devices with different architectures in the IoT ecosystem. Static-based methods are more effective when addressing the multi-architecture issue. 1000 malware binaries provided by IoTPOT were used in the project. The basic blocks and functions of each of binaries were extracted by radare2 and the hash values of these data were stored in the SQL database. The basic blocks and functions of the sample to be analyzed are query from this database and all malwares that have shared code are listed.Current featuresShared code based static analysis.Supporting ARM, MIPS, x86-64, i386, PowerPC, m68k, Renesas SH.?Getting StartedPrerequisitesPython3+Radare2r2pipeInstallationgit clone https://github.com/mucoze/Umaycd Umayvirtualenv venvsource venv/bin/activatepip install -r requirements.txtpython manage.py makemigrationspython manage.py migratepython manage.py createsuperuserpython manage.py runserverand now project app is accesible from your browser. Default: 127.0.0.1:8000Create your own dataset filepython create_dataset.py samples/Give the directory where all the samples are located as an argument and it will generate the dataset.db file for you.🤝 ContributingContributions, issues, and feature requests are welcome!Feel free to contact me.LicenseUmay is licensed under Apache License 2.0Download Umay
Read more...

hacking: security in practice
Google Chrome Appdata folder

Hello,

Can someone pose as a user by simply copying the chrome app data directories from one PC to another?

submitted by /u/mylife24
[link] [comments]

hacking: security in practice
Deciding on Hardware. Any input is appreciated!

My goal is to have a device that will allow me to run Linux as a main OS and VM into Kali Linux, Windows, and Vulnerable Boxes (for Tryhackme and HacktheBox).

I can’t decide what makes the most sense:

1.
A beefed up laptop with a core i7 and 32GB ram (pros being portability)

2.
a NUC with the same specs (pros being the cheapest option)

3.
A beefed up PC with an i7 and 32+ GB RAM that I can remote into from a cheaper laptop.
I like the idea of #3 but isn’t remoting into my PC super slow? Won’t it be miserable to use my cruddy laptop that’s remoting to my PC to run VMs?

Any input is helpful!

submitted by /u/NorMalware
[link] [comments]

KitPloit - PenTest Tools!
Umay - IoT Malware Similarity Analysis Platform

https://blogger.googleusercontent.com/img/a/AVvXsEhUhRbMK1OT7zlw_eEid5_Qf7WeqgGCIHlr3T5Blj6J_8Z7V-Cr2HaXpNyaDQKr7EFzAzOtpnmYFcMHEf3ygk_1UeG0cjiTBY7q_-IzS4iMuwt875fzluXVF-XJsfam-hEBGfNYV_7hc7_v6T0RNVq5csOTz4rOItQvzx2fddx3T1qR_fWBBjFcAunmow
IoT Malware Similarity Analysis Platform

View Demo
https://blogger.googleusercontent.com/img/a/AVvXsEilw3i_gxPUCuebsK5azkrZrGru7Rfpsu3TnnIDr7pHrykgRX5jJLAN5vFb6OWjUJYtnIqJbWKOlQcah7_1qrHKbIVMk2KYB6O3iQPmPGiDlu6lPa-xXwkt7gvS39meJHDddNnX_WglPxUowSrn93iOVD02fTbPSJxWuqhVSnMrjllCm3CxE1Ov8sGkww=w640-h334
This project provides IoT malware similarity analysis based on shared codes. It helps to identify other malwares that have shared code with the analyzed file. In this way, you can have a chance to get an idea about the family of the malware. There are various devices with different architectures in the IoT ecosystem. Static-based methods are more effective when addressing the multi-architecture issue. 1000 malware binaries provided by IoTPOT were used in the project. The basic blocks and functions of each of binaries were extracted by radare2 and the hash values of these data were stored in the SQL database. The basic blocks and functions of the sample to be analyzed are query from this database and all malwares that have shared code are listed.
Current features

* Shared code based static analysis.
* Supporting ARM, MIPS, x86-64, i386, PowerPC, m68k, Renesas SH.
* ?

Getting Started

Prerequisites

* Python3+
* Radare2
* r2pipe
Installation

git clone https://github.com/mucoze/Umay
cd Umay


virtualenv venv

source venv/bin/activate

pip install -r requirements.txt

python manage.py makemigrations

python manage.py migrate

python manage.py createsuperuser

python manage.py runserver

and now project app is accesible from your browser. Default: 127.0.0.1:8000

Create your own dataset file

python create_dataset.py samples/

Give the directory where all the samples are located as an argument and it will generate the dataset.dbfile for you.


🤝
Contributing

Contributions, issues, and feature requests are welcome!

Feel free to contact me.

License

Umay is licensed under Apache License 2.0
Download Umay

Ultimate Reconnaissance RoadMap for Bug Bounty Hunters & Pentesters
https://ahmdhalabi.medium.com/ultimate-reconnaissance-roadmap-for-bug-bounty-hunters-pentesters-507c9a5374d?source=rss------bug_bounty-5

Advanced Reconnaissance and Web Application Discovery RoadMap to Find Massive Vulnerabilities.Continue reading on Medium » (https://ahmdhalabi.medium.com/ultimate-reconnaissance-roadmap-for-bug-bounty-hunters-pentesters-507c9a5374d?source=rss------bug_bounty-5)

Dark Reading: Attacks/Breaches
Nearly 50% of People Will Abandon Sites Prohibiting Password Reuse

A new study investigating consumer password use found 25% of online shoppers would abandon their carts of $100 if prompted to reset a password at checkout.