Hacking on Medium
[project]Bypass Firewalls using Various Evasion Techniques

https://cdn-images-1.medium.com/max/600/1*6tOx9lmygwvTC-PL_2vhaQ.png
Bypass windows firewall using Nmap evasion techniques

Continue reading on Medium »

Hacking on Medium
Is it possible to cause a blackout by hacking 250k electric cars?

https://cdn-images-1.medium.com/max/800/0*P0jlipIYYD3KlspC.jpg
Detailed & helpful guide about electric vehicles for cyber fans

Continue reading on Medium »

Hacking on Medium
How You Can Avoid Falling Prey to Catfishing on Social Media

https://cdn-images-1.medium.com/max/1800/1*a2kglqm4fYppdsxcmPXzCQ.jpeg
#catfishing #phishing #socialmedia

Continue reading on Medium »

Hacking on Medium
5 Side Hustles I’m Working On in 2022

https://cdn-images-1.medium.com/max/2600/1*orAhFe7lnIs8FIMtgmSUkg.jpeg
2022 will be a year of many projects for many creators, and I am no different in the face of it all. Here is what I am working on.

Continue reading on Criating on Demand »

Hacking on Medium
How to use in-built docker tools for reconnaissance

https://cdn-images-1.medium.com/max/2600/0*DYw1tecsFw-tTDW5
Detecting container and host environments

Continue reading on Medium »

SQLbit - Just Another Script For Automatize Boolean-Based Blind SQL Injections
http://www.kitploit.com/2021/12/sqlbit-just-another-script-for.html

A script for automatize boolean-based blind SQL injections.
Works with SQLite (https://www.kitploit.com/search/label/SQLite) at least, supports using cookies.
It uses bitwise comparisons with multithreading (https://www.kitploit.com/search/label/Multithreading) to find cell values instead of binary (https://www.kitploit.com/search/label/Binary) search, which is more efficient.It's able to:Search cell values by columns in a tableSearch characters count in a cells by columns in a tableSearch rows count in a tableThe search algorithm is shown below.
Knowing the name of its column ('sqlite_master' by default in sqlite, for example) and the column name of it ('name' in sqlite) you can find values ​​of every cell in every row. And the fastest algorithm for this is checking the binary values of every character in every cell, which can be perform using multiple threads. Considering this, we can send only 7 requests to get the standard 7-bit letter, and using 1000 threads, we get ~142 letters per moment (it's also worth keeping in mind requests to get the length of a cell value).

 The number of bits need to compare (7 by default for ASCII) and the number of threads can be specified as input data.Installinggit clone https://github.com/Sunlight-Rim/sqlbit.git
pip3 install -r requirements.txt
UsageIt does not accept command line (https://www.kitploit.com/search/label/Command%20Line) arguments, so you can specify data in the config file or at runtime program.python sqlbit.py

 Note: please, use it only for your own servers or for the servers of those owners with whom you have agreed in advance.

Download SQLbit (https://github.com/Sunlight-Rim/SQLbit)

hacking: security in practice
Auxiliator — telegram bot for basic web-application analysis

Auxiliator is telegram bot for basic web-application analysis, I made it because sometimes there is no access to your main PC, where you can scan web-site and search for exploits, and you only have for e.g your phone. Some people would say, that you can just connect with ssh, but is is not really easy to type on small screen. That is why, i created this telegram bot, where it is simpler to analyse the website for further testing. I created it with python, and it can search for exploits on exploit-db, scan for open ports, search info about ip using Censys, detect WAF, and find real IP by domain using censys.
I hope you enjoy this tool!)

Opened for critics and suggestions!

submitted by /u/Tough-Aide-1810
[link] [comments]

hacking: security in practice
Application that decrypts CSV files

Is there a way to find how that application / executable local program decrypts the CSV file? This is a 10 year old application, is there any general known exploits that can be used to find the key inside the file?

submitted by /u/CrownOfIce
[link] [comments]

Black Hat Ethical Hacking
Apple fixes macOS security flaw behind Gatekeeper bypass

https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Apple fixes macOS security flaw behind Gatekeeper bypassPost Views: 105 https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/BECOME-A-PATRON-AND-UNLOCK-EXCLUSIVE-VIDEOS-1.png Reading Time: 1 Minute
Apple has addressed a macOS vulnerability that unsigned and unnotarized script-based apps could exploit to bypass all macOS security protection mechanisms even on fully patched systems.
If they circumvent automated notarization security checks (which scans for malicious components and code-signing issues), the applications are allowed to launch by Gatekeeper, a macOS security feature designed to verify if downloaded apps are notarized and developer-signed.

Once malicious script-based apps targeting the bypass flaw (CVE-2021-30853) are launched on a target’s system, they can be used by attackers to download and deploy second-stage malicious payloads.

Apple has addressed this vulnerability in macOS 11.6 through a security update released in September 2021 that adds improved checks.
See Also: Complete Offensive Security and Ethical Hacking Course Gatekeeper bypass with a shebangThe CVE-2021-30853 Gatekeeper bypass bug was discovered and reported to Apple by Box Offensive Security Engineer Gordon Long.

He found that specially-crafted script-based applications downloaded from the Internet would launch without showing an alert even though automatically quarantined.

The “specially-crafted” part requires creating an app that uses a script starting with a shebang (!#) character but leaving the rest of the line empty, which tells the Unix shell to run the script without specifying a shell command interpreter.

This leads to a Gatekeeper bypass because the syspolicyd daemon automatically commonly invoked by the AppleSystemPolicy kernel extension to perform security checks (signing and notarization) no longer gets triggered for inspection when launching a script without specifying an interpreter.

Basically, if the script used a shebang (!#) but did not explicitly specify an interpreter, it would bypass Gatekeeper security checks.
In short, unsigned, non-notarized script-based applications would be allowed if their script did *not* specify an interpreter! 🤯🤣

Meaning attackers could trivially bypass a myriad of foundational macOS security mechanisms via:
#!
<anypic.twitter.com/WPSABkXR7i


— Objective-See (@objective_see) December 22, 2021
See Also: Hackers start pushing malware in worldwide Log4Shell attacks “The syspolicyd daemon will perform various policy checks and ultimately prevent the execution of untrusted applications, such as those that are unsigned or unnotarized,” explained security researcher Patrick Wardle.

“But, what if the AppleSystemPolicy kext decides that the syspolicyd daemon does not need to be invoked? Well then, the process is allowed! And if this decision is made incorrectly, well then, you have a lovely File Quarantine, Gatekeeper, and notarization bypass.”
As revealed by Wardle, threat actors can exploit this flaw by tricking their targets into opening a malicious app that can also be camouflaged as a benign-looking PDF document.

Such malicious payloads can be delivered on targets’ systems via many methods, including poisoned search results, fake updates, and trojaned applications downloaded from sites linking to pirated software.
https://www.bleepstatic.com/images/news/u/1109292/2021/macOS_infection_vectors.png
<figcaptionImage: Patrick Wardle
See Also: Offensive Security Tool: log4j-scan Similar bugs exploited by malwareThis [...]