A script for automatize boolean-based blind SQL injections.
Works with SQLite (https://www.kitploit.com/search/label/SQLite) at least, supports using cookies.
It uses bitwise comparisons with multithreading (https://www.kitploit.com/search/label/Multithreading) to find cell values instead of binary (https://www.kitploit.com/search/label/Binary) search, which is more efficient.It's able to:Search cell values by columns in a tableSearch characters count in a cells by columns in a tableSearch rows count in a tableThe search algorithm is shown below.
Knowing the name of its column ('sqlite_master' by default in sqlite, for example) and the column name of it ('name' in sqlite) you can find values of every cell in every row. And the fastest algorithm for this is checking the binary values of every character in every cell, which can be perform using multiple threads. Considering this, we can send only 7 requests to get the standard 7-bit letter, and using 1000 threads, we get ~142 letters per moment (it's also worth keeping in mind requests to get the length of a cell value).
Works with SQLite (https://www.kitploit.com/search/label/SQLite) at least, supports using cookies.
It uses bitwise comparisons with multithreading (https://www.kitploit.com/search/label/Multithreading) to find cell values instead of binary (https://www.kitploit.com/search/label/Binary) search, which is more efficient.It's able to:Search cell values by columns in a tableSearch characters count in a cells by columns in a tableSearch rows count in a tableThe search algorithm is shown below.
Knowing the name of its column ('sqlite_master' by default in sqlite, for example) and the column name of it ('name' in sqlite) you can find values of every cell in every row. And the fastest algorithm for this is checking the binary values of every character in every cell, which can be perform using multiple threads. Considering this, we can send only 7 requests to get the standard 7-bit letter, and using 1000 threads, we get ~142 letters per moment (it's also worth keeping in mind requests to get the length of a cell value).
The number of bits need to compare (7 by default for ASCII) and the number of threads can be specified as input data.Installinggit clone https://github.com/Sunlight-Rim/sqlbit.git
pip3 install -r requirements.txt
UsageIt does not accept command line (https://www.kitploit.com/search/label/Command%20Line) arguments, so you can specify data in the config file or at runtime program.python sqlbit.py
pip3 install -r requirements.txt
UsageIt does not accept command line (https://www.kitploit.com/search/label/Command%20Line) arguments, so you can specify data in the config file or at runtime program.python sqlbit.py
Note: please, use it only for your own servers or for the servers of those owners with whom you have agreed in advance.
Download SQLbit (https://github.com/Sunlight-Rim/SQLbit)
Download SQLbit (https://github.com/Sunlight-Rim/SQLbit)
hacking: security in practice
Auxiliator — telegram bot for basic web-application analysis
Auxiliator is telegram bot for basic web-application analysis, I made it because sometimes there is no access to your main PC, where you can scan web-site and search for exploits, and you only have for e.g your phone. Some people would say, that you can just connect with ssh, but is is not really easy to type on small screen. That is why, i created this telegram bot, where it is simpler to analyse the website for further testing. I created it with python, and it can search for exploits on exploit-db, scan for open ports, search info about ip using Censys, detect WAF, and find real IP by domain using censys.
I hope you enjoy this tool!)
Opened for critics and suggestions!
submitted by /u/Tough-Aide-1810
[link] [comments]
Auxiliator — telegram bot for basic web-application analysis
Auxiliator is telegram bot for basic web-application analysis, I made it because sometimes there is no access to your main PC, where you can scan web-site and search for exploits, and you only have for e.g your phone. Some people would say, that you can just connect with ssh, but is is not really easy to type on small screen. That is why, i created this telegram bot, where it is simpler to analyse the website for further testing. I created it with python, and it can search for exploits on exploit-db, scan for open ports, search info about ip using Censys, detect WAF, and find real IP by domain using censys.
I hope you enjoy this tool!)
Opened for critics and suggestions!
submitted by /u/Tough-Aide-1810
[link] [comments]
reddit
Auxiliator — telegram bot for basic web-application analysis
Auxiliator is telegram bot for basic web-application analysis, I made it because sometimes there is no access to your main PC, where you can scan ...
hacking: security in practice
Application that decrypts CSV files
Is there a way to find how that application / executable local program decrypts the CSV file? This is a 10 year old application, is there any general known exploits that can be used to find the key inside the file?
submitted by /u/CrownOfIce
[link] [comments]
Application that decrypts CSV files
Is there a way to find how that application / executable local program decrypts the CSV file? This is a 10 year old application, is there any general known exploits that can be used to find the key inside the file?
submitted by /u/CrownOfIce
[link] [comments]
reddit
Application that decrypts CSV files
Is there a way to find how that application / executable local program decrypts the CSV file? This is a 10 year old application, is there any...
Hacking Articles Tips Tricks Videos Tutorials
Photo
Black Hat Ethical Hacking
Apple fixes macOS security flaw behind Gatekeeper bypass
https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Apple fixes macOS security flaw behind Gatekeeper bypassPost Views: 105 https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/BECOME-A-PATRON-AND-UNLOCK-EXCLUSIVE-VIDEOS-1.png Reading Time: 1 Minute
Apple has addressed a macOS vulnerability that unsigned and unnotarized script-based apps could exploit to bypass all macOS security protection mechanisms even on fully patched systems.
If they circumvent automated notarization security checks (which scans for malicious components and code-signing issues), the applications are allowed to launch by Gatekeeper, a macOS security feature designed to verify if downloaded apps are notarized and developer-signed.
Once malicious script-based apps targeting the bypass flaw (CVE-2021-30853) are launched on a target’s system, they can be used by attackers to download and deploy second-stage malicious payloads.
Apple has addressed this vulnerability in macOS 11.6 through a security update released in September 2021 that adds improved checks.
See Also: Complete Offensive Security and Ethical Hacking Course Gatekeeper bypass with a shebangThe CVE-2021-30853 Gatekeeper bypass bug was discovered and reported to Apple by Box Offensive Security Engineer Gordon Long.
He found that specially-crafted script-based applications downloaded from the Internet would launch without showing an alert even though automatically quarantined.
The “specially-crafted” part requires creating an app that uses a script starting with a shebang (!#) character but leaving the rest of the line empty, which tells the Unix shell to run the script without specifying a shell command interpreter.
This leads to a Gatekeeper bypass because the syspolicyd daemon automatically commonly invoked by the AppleSystemPolicy kernel extension to perform security checks (signing and notarization) no longer gets triggered for inspection when launching a script without specifying an interpreter.
Basically, if the script used a shebang (!#) but did not explicitly specify an interpreter, it would bypass Gatekeeper security checks.
In short, unsigned, non-notarized script-based applications would be allowed if their script did *not* specify an interpreter! 🤯🤣
Meaning attackers could trivially bypass a myriad of foundational macOS security mechanisms via:
#!
<anypic.twitter.com/WPSABkXR7i
— Objective-See (@objective_see) December 22, 2021
See Also: Hackers start pushing malware in worldwide Log4Shell attacks “The syspolicyd daemon will perform various policy checks and ultimately prevent the execution of untrusted applications, such as those that are unsigned or unnotarized,” explained security researcher Patrick Wardle.
“But, what if the AppleSystemPolicy kext decides that the syspolicyd daemon does not need to be invoked? Well then, the process is allowed! And if this decision is made incorrectly, well then, you have a lovely File Quarantine, Gatekeeper, and notarization bypass.”
As revealed by Wardle, threat actors can exploit this flaw by tricking their targets into opening a malicious app that can also be camouflaged as a benign-looking PDF document.
Such malicious payloads can be delivered on targets’ systems via many methods, including poisoned search results, fake updates, and trojaned applications downloaded from sites linking to pirated software.
https://www.bleepstatic.com/images/news/u/1109292/2021/macOS_infection_vectors.png
<figcaptionImage: Patrick Wardle
See Also: Offensive Security Tool: log4j-scan Similar bugs exploited by malwareThis [...]
Apple fixes macOS security flaw behind Gatekeeper bypass
https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Apple fixes macOS security flaw behind Gatekeeper bypassPost Views: 105 https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/BECOME-A-PATRON-AND-UNLOCK-EXCLUSIVE-VIDEOS-1.png Reading Time: 1 Minute
Apple has addressed a macOS vulnerability that unsigned and unnotarized script-based apps could exploit to bypass all macOS security protection mechanisms even on fully patched systems.
If they circumvent automated notarization security checks (which scans for malicious components and code-signing issues), the applications are allowed to launch by Gatekeeper, a macOS security feature designed to verify if downloaded apps are notarized and developer-signed.
Once malicious script-based apps targeting the bypass flaw (CVE-2021-30853) are launched on a target’s system, they can be used by attackers to download and deploy second-stage malicious payloads.
Apple has addressed this vulnerability in macOS 11.6 through a security update released in September 2021 that adds improved checks.
See Also: Complete Offensive Security and Ethical Hacking Course Gatekeeper bypass with a shebangThe CVE-2021-30853 Gatekeeper bypass bug was discovered and reported to Apple by Box Offensive Security Engineer Gordon Long.
He found that specially-crafted script-based applications downloaded from the Internet would launch without showing an alert even though automatically quarantined.
The “specially-crafted” part requires creating an app that uses a script starting with a shebang (!#) character but leaving the rest of the line empty, which tells the Unix shell to run the script without specifying a shell command interpreter.
This leads to a Gatekeeper bypass because the syspolicyd daemon automatically commonly invoked by the AppleSystemPolicy kernel extension to perform security checks (signing and notarization) no longer gets triggered for inspection when launching a script without specifying an interpreter.
Basically, if the script used a shebang (!#) but did not explicitly specify an interpreter, it would bypass Gatekeeper security checks.
In short, unsigned, non-notarized script-based applications would be allowed if their script did *not* specify an interpreter! 🤯🤣
Meaning attackers could trivially bypass a myriad of foundational macOS security mechanisms via:
#!
<anypic.twitter.com/WPSABkXR7i
— Objective-See (@objective_see) December 22, 2021
See Also: Hackers start pushing malware in worldwide Log4Shell attacks “The syspolicyd daemon will perform various policy checks and ultimately prevent the execution of untrusted applications, such as those that are unsigned or unnotarized,” explained security researcher Patrick Wardle.
“But, what if the AppleSystemPolicy kext decides that the syspolicyd daemon does not need to be invoked? Well then, the process is allowed! And if this decision is made incorrectly, well then, you have a lovely File Quarantine, Gatekeeper, and notarization bypass.”
As revealed by Wardle, threat actors can exploit this flaw by tricking their targets into opening a malicious app that can also be camouflaged as a benign-looking PDF document.
Such malicious payloads can be delivered on targets’ systems via many methods, including poisoned search results, fake updates, and trojaned applications downloaded from sites linking to pirated software.
https://www.bleepstatic.com/images/news/u/1109292/2021/macOS_infection_vectors.png
<figcaptionImage: Patrick Wardle
See Also: Offensive Security Tool: log4j-scan Similar bugs exploited by malwareThis [...]
Hacking Articles Tips Tricks Videos Tutorials
Photo
Black Hat Ethical Hacking
Offensive Security Tool: log4j Honeypot Flask
https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Offensive Security Tool: log4j Honeypot FlaskPost Views: 31 https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/BECOME-A-PATRON-AND-UNLOCK-EXCLUSIVE-VIDEOS-1.png Reading Time: 2 Minutes
Offensive Security Tool: log4j Honeypot Flask GitHub Link log4j-honeypot-flaskNow that Log4j has been discovered, a scanner we had shared released, and an existing PoC to showcase the damage it can do, we are sharing another HoneyPot tool mechanism that can help you detect for such attacks happening in your company internally or externally specifically for this, based on the patterns and reverse engineering of the tool that took place. You can setup this Honeypot, set up notifications, and stay steps ahead mitigating it from being compromised with this latest Zero Day release CVE, affecting a big number of Apache Servers.
Log4j Honeypot Flask by BinaryDefense is an internal network honeypot for detecting if an attacker or insider threat scans your network for log4j CVE-2021-44228.
This can be installed on a workstation or server, either by running the Python app/app.py script directly (you’ll need python3, Flask, and Requests) or as a Docker container.
You will need to set some environment variables (or hard-code them into the script): WEBHOOK_URL=your Teams, Slack or Mattermost webhook URL to receive notifications HONEYPOT_NAME=unique name for this honeypot so you know where the alerts came from HONEYPOT_PORT=8080 or whatever port you want it to listen on.
All it does is watch for suspicious string patterns in the requests (form fields and HTTP headers) and alert you if anything weird comes through by sending a message on Teams or Slack.
Important Note: This is a LOW-INTERACTION honeypot meant for internal active defense. It is not supposed to be vulnerable or let attackers get into anything.
See Also: Complete Offensive Security and Ethical Hacking Course Example running via Docker:
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/40pivot2-90x90.png Offensive Security Tool: Cobalt Strike2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/gomapenum-90x90.png Offensive Security Tool: GoMapEnum3 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/hashcat-90x90.png Offensive Security Tool: Hashcat4 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/bugbountytools-90x90.png Offensive Security Tools: Awesome Bug Bounty Tools1 month ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/unknown-1-90x90.png Offensive Security Tool: Pentesting Tools1 month ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/unknown-90x90.png Offensive Security Tool: DotDotPwn – The Directory Traversal Fuzzer2 months ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/10/unknown-1-90x90.png Offensive Security Tool: ZipExec2 months ago
* [...]
Offensive Security Tool: log4j Honeypot Flask
https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Offensive Security Tool: log4j Honeypot FlaskPost Views: 31 https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/BECOME-A-PATRON-AND-UNLOCK-EXCLUSIVE-VIDEOS-1.png Reading Time: 2 Minutes
Offensive Security Tool: log4j Honeypot Flask GitHub Link log4j-honeypot-flaskNow that Log4j has been discovered, a scanner we had shared released, and an existing PoC to showcase the damage it can do, we are sharing another HoneyPot tool mechanism that can help you detect for such attacks happening in your company internally or externally specifically for this, based on the patterns and reverse engineering of the tool that took place. You can setup this Honeypot, set up notifications, and stay steps ahead mitigating it from being compromised with this latest Zero Day release CVE, affecting a big number of Apache Servers.
Log4j Honeypot Flask by BinaryDefense is an internal network honeypot for detecting if an attacker or insider threat scans your network for log4j CVE-2021-44228.
This can be installed on a workstation or server, either by running the Python app/app.py script directly (you’ll need python3, Flask, and Requests) or as a Docker container.
You will need to set some environment variables (or hard-code them into the script): WEBHOOK_URL=your Teams, Slack or Mattermost webhook URL to receive notifications HONEYPOT_NAME=unique name for this honeypot so you know where the alerts came from HONEYPOT_PORT=8080 or whatever port you want it to listen on.
All it does is watch for suspicious string patterns in the requests (form fields and HTTP headers) and alert you if anything weird comes through by sending a message on Teams or Slack.
Important Note: This is a LOW-INTERACTION honeypot meant for internal active defense. It is not supposed to be vulnerable or let attackers get into anything.
See Also: Complete Offensive Security and Ethical Hacking Course Example running via Docker:
docker build -t log4j-honeypot-flask:latest . docker run -d -p 8080:8080 -e WEBHOOK_URL=https://yourwebhookurl -e HONEYPOT_NAME=dmz_log4j_hp log4j-honeypot-flaskSee Also: Apple fixes macOS security flaw behind Gatekeeper bypass Example running via command line:export WEBHOOK_URL=https://yourwebhookurl export HONEYPOT_NAME=LittleBobbyJNDI export HONEYPOT_PORT=8081 python3 app/app.pyhttps://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/Untitled-design.png Recent Tools* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/log4j-scan-90x90.png Offensive Security Tool: log4j-scan1 week ago* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/40pivot2-90x90.png Offensive Security Tool: Cobalt Strike2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/gomapenum-90x90.png Offensive Security Tool: GoMapEnum3 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/hashcat-90x90.png Offensive Security Tool: Hashcat4 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/bugbountytools-90x90.png Offensive Security Tools: Awesome Bug Bounty Tools1 month ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/unknown-1-90x90.png Offensive Security Tool: Pentesting Tools1 month ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/unknown-90x90.png Offensive Security Tool: DotDotPwn – The Directory Traversal Fuzzer2 months ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/10/unknown-1-90x90.png Offensive Security Tool: ZipExec2 months ago
* [...]
Hacking Articles Tips Tricks Videos Tutorials
Black Hat Ethical Hacking Apple fixes macOS security flaw behind Gatekeeper bypass https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Apple fixes macOS security flaw behind Gatekeeper bypassPost Views: 105 https://w…
is not the first macOS bug fixed by Apple that would enable threat actors to completely circumvent OS security mechanisms such as Gatekeeper and File Quarantine on fully patched Macs.
In April, Apple patched a zero-day vulnerability exploited in the wild by Shlayer malware operators to bypass macOS automated security checks and deploy additional payloads on compromised Macs.
The Shlayer threat actors began targeting macOS users with unsigned and unnotarized malware that exploited the zero-day bug (tracked as CVE-2021-30657) starting with January 2021, as the Jamf Protect detection team discovered. Microsoft also discovered a macOS vulnerability in October, dubbed Shrootless and tracked as CVE-2021-30892), that could be used to bypass System Integrity Protection (SIP) and perform arbitrary operations, elevate privileges to root, and install rootkits on compromised devices.
“A malicious application may be able to modify protected parts of the file system,” Apple said in a security advisory issued after patching the Shrootless bug.
See Also: Hacking stories – Rafael Núñez (aka RaFa), hacking NASA with the hacking group: World of Hell
Source: www.bleepingcomputer.com (Click Link)https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/Untitled-design.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/5157-article-201208-ms-team_body_text-90x90.jpg Microsoft Teams bug allowing phishing unpatched since March1 day ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/ezgif.com-gif-maker-6-90x90.jpg 800K WordPress sites still impacted by critical SEO plugin flaw2 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/ezgif.com-gif-maker-5-90x90.jpg Microsoft warns of easy Windows domain takeover via Active Directory bugs3 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/ezgif.com-gif-maker-4-90x90.jpg TellYouThePass ransomware revived in Linux, Windows Log4j attacks4 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/ezgif.com-gif-maker-3-1-90x90.jpg Log4j attackers switch to injecting Monero miners via RMI1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/Hackers-Using-Malicious-IIS-Server-Module-to-Steal-Microsoft-Exchange-560x380-1-90x90.jpg Hackers steal Microsoft Exchange credentials using IIS module1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/how-ransomware-works-1024x535-1-90x90.png New ransomware now being deployed in Log4Shell attacks1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/0d73-article-201111-ubuntu-90x90.jpg Attackers can get root by crashing Ubuntu’s AccountsService1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/frame_2_delay-0.5s-90x90.jpg Hackers start pushing malware in worldwide Log4Shell attacks2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/ezgif.com-gif-maker-3-90x90.jpg Malicious Notepad++ installers push StrongPity malware2 weeks ago
The post Apple fixes macOS security flaw behind Gatekeeper bypass first appeared on Black Hat Ethical Hacking.
In April, Apple patched a zero-day vulnerability exploited in the wild by Shlayer malware operators to bypass macOS automated security checks and deploy additional payloads on compromised Macs.
The Shlayer threat actors began targeting macOS users with unsigned and unnotarized malware that exploited the zero-day bug (tracked as CVE-2021-30657) starting with January 2021, as the Jamf Protect detection team discovered. Microsoft also discovered a macOS vulnerability in October, dubbed Shrootless and tracked as CVE-2021-30892), that could be used to bypass System Integrity Protection (SIP) and perform arbitrary operations, elevate privileges to root, and install rootkits on compromised devices.
“A malicious application may be able to modify protected parts of the file system,” Apple said in a security advisory issued after patching the Shrootless bug.
See Also: Hacking stories – Rafael Núñez (aka RaFa), hacking NASA with the hacking group: World of Hell
Source: www.bleepingcomputer.com (Click Link)https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/Untitled-design.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/5157-article-201208-ms-team_body_text-90x90.jpg Microsoft Teams bug allowing phishing unpatched since March1 day ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/ezgif.com-gif-maker-6-90x90.jpg 800K WordPress sites still impacted by critical SEO plugin flaw2 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/ezgif.com-gif-maker-5-90x90.jpg Microsoft warns of easy Windows domain takeover via Active Directory bugs3 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/ezgif.com-gif-maker-4-90x90.jpg TellYouThePass ransomware revived in Linux, Windows Log4j attacks4 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/ezgif.com-gif-maker-3-1-90x90.jpg Log4j attackers switch to injecting Monero miners via RMI1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/Hackers-Using-Malicious-IIS-Server-Module-to-Steal-Microsoft-Exchange-560x380-1-90x90.jpg Hackers steal Microsoft Exchange credentials using IIS module1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/how-ransomware-works-1024x535-1-90x90.png New ransomware now being deployed in Log4Shell attacks1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/0d73-article-201111-ubuntu-90x90.jpg Attackers can get root by crashing Ubuntu’s AccountsService1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/frame_2_delay-0.5s-90x90.jpg Hackers start pushing malware in worldwide Log4Shell attacks2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/ezgif.com-gif-maker-3-90x90.jpg Malicious Notepad++ installers push StrongPity malware2 weeks ago
The post Apple fixes macOS security flaw behind Gatekeeper bypass first appeared on Black Hat Ethical Hacking.
Hacking Articles Tips Tricks Videos Tutorials
Black Hat Ethical Hacking Offensive Security Tool: log4j Honeypot Flask https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Offensive Security Tool: log4j Honeypot FlaskPost Views: 31 https://www.blackhatethicalhacking.com/wp…
https://www.blackhatethicalhacking.com/wp-content/uploads/2021/10/carbon-2048x1374-1-90x90.png OSINT Tool: Osintgram2 months ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/10/dalfox-90x90.png Offensive Security Tool: Dalfox2 months ago
The post Offensive Security Tool: log4j Honeypot Flask first appeared on Black Hat Ethical Hacking.
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/10/dalfox-90x90.png Offensive Security Tool: Dalfox2 months ago
The post Offensive Security Tool: log4j Honeypot Flask first appeared on Black Hat Ethical Hacking.
Hacking Articles Tips Tricks Videos Tutorials
Photo
KitPloit - PenTest Tools!
SQLbit - Just Another Script For Automatize Boolean-Based Blind SQL Injections
https://blogger.googleusercontent.com/img/a/AVvXsEhal-rocrpyas0V-uVrYasq_POWPyhG1keoyCHuD6Ssn3B_eBi-eXoOcDAZwOfwvWhMkaDDfOgg_wRAE3EDksBJ459uyDPoSibweg8pyY8-fN74E7m6YplhS9ZzY1-YjFppU2I-mqyHoyrkGlDxW-9hweyDIZjIhcLYOOcwckFLIbxO7Fnq-j97mrn28A=w640-h384
A script for automatize boolean-based blind SQL injections.
Works with SQLite at least, supports using cookies.
It uses bitwise comparisons with multithreading to find cell values instead of binary search, which is more efficient.
It's able to:
* Search cell values by columns in a table
* Search characters count in a cells by columns in a table
* Search rows count in a table
The search algorithm is shown below.
Knowing the name of its column ('sqlite_master' by default in sqlite, for example) and the column name of it ('name' in sqlite) you can find values of every cell in every row. And the fastest algorithm for this is checking the binary values of every character in every cell, which can be perform using multiple threads. Considering this, we can send only 7 requests to get the standard 7-bit letter, and using 1000 threads, we get ~142 letters per moment (it's also worth keeping in mind requests to get the length of a cell value).
https://blogger.googleusercontent.com/img/a/AVvXsEhQGE6EO93XcxBLLJZAVDVx47rJeF5djblHf5nu0aecFJGm8vkZAoxrEpg8ozK2E8QHyzk2Kf5iBnlhE7YOAgnTE2stbtrC7CUcOk-1iAVl6Ht2xU_bqkCd122ANMC_xSre2_KvQ5EViCaWGttSBqiIRfJvagGOUvHniSCGWNXeyVyVnB4a7QEEjJ-RIA=w640-h374
The number of bits need to compare (7 by default for ASCII) and the number of threads can be specified as input data.
Installing
Usage
It does not accept command line arguments, so you can specify data in the config file or at runtime program.
https://blogger.googleusercontent.com/img/a/AVvXsEhal-rocrpyas0V-uVrYasq_POWPyhG1keoyCHuD6Ssn3B_eBi-eXoOcDAZwOfwvWhMkaDDfOgg_wRAE3EDksBJ459uyDPoSibweg8pyY8-fN74E7m6YplhS9ZzY1-YjFppU2I-mqyHoyrkGlDxW-9hweyDIZjIhcLYOOcwckFLIbxO7Fnq-j97mrn28A=w640-h384
Note: please, use it only for your own servers or for the servers of those owners with whom you have agreed in advance.
Download SQLbit
SQLbit - Just Another Script For Automatize Boolean-Based Blind SQL Injections
https://blogger.googleusercontent.com/img/a/AVvXsEhal-rocrpyas0V-uVrYasq_POWPyhG1keoyCHuD6Ssn3B_eBi-eXoOcDAZwOfwvWhMkaDDfOgg_wRAE3EDksBJ459uyDPoSibweg8pyY8-fN74E7m6YplhS9ZzY1-YjFppU2I-mqyHoyrkGlDxW-9hweyDIZjIhcLYOOcwckFLIbxO7Fnq-j97mrn28A=w640-h384
A script for automatize boolean-based blind SQL injections.
Works with SQLite at least, supports using cookies.
It uses bitwise comparisons with multithreading to find cell values instead of binary search, which is more efficient.
It's able to:
* Search cell values by columns in a table
* Search characters count in a cells by columns in a table
* Search rows count in a table
The search algorithm is shown below.
Knowing the name of its column ('sqlite_master' by default in sqlite, for example) and the column name of it ('name' in sqlite) you can find values of every cell in every row. And the fastest algorithm for this is checking the binary values of every character in every cell, which can be perform using multiple threads. Considering this, we can send only 7 requests to get the standard 7-bit letter, and using 1000 threads, we get ~142 letters per moment (it's also worth keeping in mind requests to get the length of a cell value).
https://blogger.googleusercontent.com/img/a/AVvXsEhQGE6EO93XcxBLLJZAVDVx47rJeF5djblHf5nu0aecFJGm8vkZAoxrEpg8ozK2E8QHyzk2Kf5iBnlhE7YOAgnTE2stbtrC7CUcOk-1iAVl6Ht2xU_bqkCd122ANMC_xSre2_KvQ5EViCaWGttSBqiIRfJvagGOUvHniSCGWNXeyVyVnB4a7QEEjJ-RIA=w640-h374
The number of bits need to compare (7 by default for ASCII) and the number of threads can be specified as input data.
Installing
git clone https://github.com/Sunlight-Rim/sqlbit.git
pip3 install -r requirements.txt
Usage
It does not accept command line arguments, so you can specify data in the config file or at runtime program.
python sqlbit.py
https://blogger.googleusercontent.com/img/a/AVvXsEhal-rocrpyas0V-uVrYasq_POWPyhG1keoyCHuD6Ssn3B_eBi-eXoOcDAZwOfwvWhMkaDDfOgg_wRAE3EDksBJ459uyDPoSibweg8pyY8-fN74E7m6YplhS9ZzY1-YjFppU2I-mqyHoyrkGlDxW-9hweyDIZjIhcLYOOcwckFLIbxO7Fnq-j97mrn28A=w640-h384
Note: please, use it only for your own servers or for the servers of those owners with whom you have agreed in advance.
Download SQLbit
Vibranium Debug Campaign
Vibranium is pleased to announce the debug bounty campaign!Continue reading on Medium »
Read more...
Vibranium is pleased to announce the debug bounty campaign!Continue reading on Medium »
Read more...