InstallationMacOSDownload the current linked binary in the most recent release. Using terminal ensure you change permissions to include the executable permission.chmod 755 SnapScraper
Optionally, a icon.png file is included which can be used to change the icon of the downloaded executable.Windows/LinuxAt this point in time, SnapScraper only supports MacOS. However, dependancies have been checked and users should be able to complile the code on their own file system without any issues. Ensure Alamofire has been installed.UsageDouble click SnapScraper to launch the command line (https://www.kitploit.com/search/label/Command%20Line) tool. SnapScraper works best when the defaul window size is set to 80x50.You should be presented with the following window:

___________________________
@hacking_Attack
@Hacking_Video

The current options for use are indicated in the command window. Select to option by pressing the required key(s) on the keyboard and pressing enter.CheckThe main option users will select will be the check option to locate snap media on the Snap Map. To select this option type 'c' followed by the enter key.SnapScraper will then ask you for a set of longitude and lattitude coordinates which can be obtained from map.snapchat.com as discussed in the publication "Richard Matthews, Kieren Lovell, Matthew Sorell, Ghost protocol – Snapchat as a method of surveillance, Forensic Science International: Digital Investigation, Volume 36, Supplement, 2021, 301112, ISSN 2666-2817, https://doi.org/10.1016/j.fsidi.2021.301112.". Navigate to map.snapchat.com and note the URL of the location you wish to extract snap media from ie. https://map.snapchat.com/@24.931153,44.873214,6.04z. The coordinates to enter into SnapScraper are located in the URL after the @ symbol. The first number is the lattitude, the second the longitude and the final the zoom level. Lattitude and longitude should be entered into SnapScraper to 6 decimal places while zoom should be entered to 2 decimal places.When each coordinate is entered into the program SnapScraper will then poll Snap Map for snap media at the desired location. When media is located the meta data of the media will be printed to the command window.

___________________________
@hacking_Attack
@Hacking_Video

Users will then be given the option of printing direct links to the media to the command window. Select y to print these links to the command window or n to skip.Users will then be given the option to save the links to a text file. Select y to save the file n to skip. File will be saved in the users "Downloads" directory (https://www.kitploit.com/search/label/Directory) in a folder called "Snapchat"(macOS users only). The file is titled with the current date, time and coordiates of extraction prefixed with the word "listing".Finally, users will be asked if they would like to download the media. This is the extraction step with media being saved directly from the URLs indicated in the previous steps. Select y to download, n to skip. Media will be saved in a folder titled with the current date, time and coordinates of extraction within the "Snapchat" folder previously identified above.Log reportingCurrently log reporting has not been implremented in 0.5.0-b. To save a log of the extraction method use the "export text as" function built in to the terminal.Finalise the extraction process as above and then quit SnapScraper by selecting "q". The terminal session will end but the window will remain open as shown.

___________________________
@hacking_Attack
@Hacking_Video

To save a log of activity navigate to Shell-> Export Text as... A save box will open. Navigate to the Snapchat folder within users Downloads folder and find the recent URL listing that has been saved (if used from previous steps). Click on this file and change the save as file name by removing the prefix word listing to log. This will save a text file contianing the contents of the terminal window and show all activity that was contducted while SnapScraper was run.Other optionsSnapScraper has a fully functional menu. Other options include displaying the MIT license, publication information associated with the current release of the tool, information to support the continued development and maintenance and the current development log. To access enter the relevant option keys followed by the enter key.ContributingSnapScraper was born out of a discussion in 2017 while in Tallinn Estonia. In the spirit of that initial collaboration (https://www.kitploit.com/search/label/Collaboration) I'd love for you to help bring this project to its full vision. The wiki contains a road map for the codebase including a wishlist of future functionality.Pull requests are welcome. For major changes, please open an issue first to discuss what you would like to change.Please make sure to update tests as appropriate.DontationsDontations are appreciated to help support the continued development, maintenance and upkeep of this product.Dontate using Monero: 41hZLF5Mhh7gDeiTLLws8dXMsi9NpyM6cWUQJoTJNAWkbx4YccDagRMWYED4cyHw481VjYyiEgkEh9mxHR1tJeNy7ce9yNpFunding goals include:Server hosting for a web hosted version of SnapScraper.Support for Windows file system.Filtering of downloaded media to flag for NSFW content (triage).Automated scraping by geofence and time.Long term data storage, enabling historical, sociological and other areas of research (Internet Archive, but for Snapmap).CreditsProject LeadRichard MatthewsAutomated Content Moderation TeamMatthew SorellSanjana TanukuSiyu WangLiyu XuAcknowledgementsBen Agnew - Thanks for the Developer mode discussions during CSRB in 2019!Kieren Lovell - Minesweeper (https://www.kitploit.com/search/label/Minesweeper) extraordinaire.Matthew Sorell - Forensics and more.Repos usedAlamofire - https://github.com/Alamofire/AlamofirePublicationsRichard Matthews, Kieren Lovell, Matthew Sorell. "Ghost protocol – Snapchat as a method of surveillance", Forensic Science International: Digital Investigation, Volume 36, Supplement, 2021, 301112, ISSN 2666-2817, https://doi.org/10.1016/j.fsidi.2021.301112.Richard Matthews. "Snapchat Disclosed on HackerOne: CreatorID Leaked from Public Content Posted to SnapMaps", May 7, 2020. Accessed November 06, 2021. https://hackerone.com/reports/867521.LicenseMIT (c) 2020 Dr Richard MatthewsDisclaimerThis project is in no way affiliated, associated, authorised or endorsed by the education institutions of those indicated in the credits section of this repo. This includes but is not limited to The University of Adelaide, Australia and TalTech (Tallinn University of Technology).This project is not affiliated, associated, authorized, endorsed by, or in any way officially connected with the application Snapchat, Snap inc. or any of its subsidiaries or its affiliates. The official Snapchat website can be found at http://www.snapchat.com (http://www.snapchat.com/).The names Snap, Snap Map, and Snapchat as well as related names, marks, emblems and images are registered trademarks of their respective owners.All names, logos, images and brands are property of their respective owners.This tool is provided as is for instructional purposes only without any warranty. Any use is not authorised or implied.

Download Snap-Scraper (https://github.com/rhematt/Snap-Scraper)

___________________________
@hacking_Attack
@Hacking_Video

DOM Based XSS
https://medium.com/@hardeepsinghsandhu537/dom-based-xss-35ad8603232c?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

DOM based XSS (cross site scripting) is a client side vulnerability that arises when the javascript takes data from user controllable…Continue reading on Medium » (https://medium.com/@hardeepsinghsandhu537/dom-based-xss-35ad8603232c?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

HOW I GOT MY SECOND SWAG
https://faiyazhacks.medium.com/how-i-got-my-second-swag-2fa08a1dfd39?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hi everyone! Hope you all are doing good. In this article i am going to show you how i got my second swag from Ivanti by reporting an open…Continue reading on Medium » (https://faiyazhacks.medium.com/how-i-got-my-second-swag-2fa08a1dfd39?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

How I Bypassed Netflix Profile Lock?
https://infosecwriteups.com/how-i-bypassed-netflix-profile-lock-43901be1307c?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hi hackers,Continue reading on InfoSec Write-ups » (https://infosecwriteups.com/how-i-bypassed-netflix-profile-lock-43901be1307c?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Black Hat Ethical Hacking
Wireless coexistence – New attack technique exploits Bluetooth, WiFi performance features

https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Wireless coexistence – New attack technique exploits Bluetooth, WiFi performance featuresPost Views: 172 https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/BECOME-A-PATRON-AND-UNLOCK-EXCLUSIVE-VIDEOS-1.png Reading Time: 1 Minute
Vulnerabilities in wireless chip designs could allow malicious hackers to steal data and passwords from devices. According to security researchers, attackers could exploit “wireless coexistence” or shared component features on millions of mobile devices.
According to the group, from the Technical University of Darmstadt’s Secure Mobile Networking Group (Germany) and the University of Brescia’s CNIT (Italy), attackers could exploit “wireless coexistence” or shared component features on millions of mobile devices.

Wireless devices often use radio components with shared resources, combination chips or System on a Chip (SoC) designs. These SoCs are responsible for multiple radio interfaces, including Bluetooth, WiFi, LTE (4G) and 5G.

But, as the researchers note, these interfaces typically share components, such as memory, and resources including antennae and wireless spectrum. Designers utilize wireless coexistence to allow resource sharing and maximize network performance. In doing so, they create security flaws that are hard, or even impossible, to patch.

“While SoCs are constantly optimized towards energy efficiency, high throughput, and low latency communication, their security has not always been prioritized,” the researchers warn.
See Also: Complete Offensive Security and Ethical Hacking Course Over-the-air exploitIn tests, researchers built a mobile test rig for under $100, and in an over-the-air exploit made use of a Bluetooth connection to obtain network passwords and manipulate traffic on a WiFi chip. Coexistence attacks enable a novel type of lateral privilege escalation across chip boundaries, they state.

The researchers were able to create a proof-of-concept exploitation of shared resources on technologies from Silicon Labs, Broadcomm, and Cypress. The group found nine CVEs, which they disclosed to the chip companies, as well as the Bluetooth SIG and associated manufacturers that use coexistence interfaces.

Attackers can escalate “privileges laterally from one wireless chip or core into another”. And serial coexistence protocols can leak information across wireless chips, giving away packet types and activity. Malicious hackers could obtain keypress timings from a Bluetooth device “for inferring passwords and password lengths”, they found.

More details on the research can be found in a paper by the researcher entitled ‘Attacks on Wireless Coexistence: Exploiting Cross-Technology Performance Features for Inter-Chip Privilege Escalation‘ (PDF).

More details on the research can be found in a paper by the researcher entitled ‘Attacks on Wireless Coexistence: Exploiting Cross-Technology Performance Features for Inter-Chip Privilege Escalation‘ (PDF).
See Also: Hackers start pushing malware in worldwide Log4Shell attacks Mitigation impossible?The potential attacks are both stealthy and hard to patch. An attack that moves laterally between components is likely to be invisible to the operating system, and so bypass its protection measures, the researchers warned.

Hardware manufacturers should be able to reduce the risks by redesigning chip architectures, and by patching firmware. But not all systems can be patched, and older devic[...]

___________________________
@hacking_Attack
@Hacking_Video

es might no longer receive updates from their makers.

In the meantime, device users are advised to take steps such as deleting unused Bluetooth pairings and using 4G rather than WiFi in public places.
See Also: Offensive Security Tool: log4j Honeypot Flask “This raises an entire new class of attack against devices with multiple RF [radio frequency] interfaces,” UK-based security researcher Andrew Tierney told The Daily Swig. “The most interesting aspect is how stealthy they can be, entirely bypassing protections put in place by the operating system.”

But he added that as the techniques “are very involved” they are most likely to be used by nation states.
See Also: Hacking stories – Rafael Núñez (aka RaFa), hacking NASA with the hacking group: World of Hell
Source: portswigger.net (Click Link)https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/Untitled-design.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/apple-store-tower-90x90.jpg Apple fixes macOS security flaw behind Gatekeeper bypass3 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/5157-article-201208-ms-team_body_text-90x90.jpg Microsoft Teams bug allowing phishing unpatched since March4 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/ezgif.com-gif-maker-6-90x90.jpg 800K WordPress sites still impacted by critical SEO plugin flaw5 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/ezgif.com-gif-maker-5-90x90.jpg Microsoft warns of easy Windows domain takeover via Active Directory bugs6 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/ezgif.com-gif-maker-4-90x90.jpg TellYouThePass ransomware revived in Linux, Windows Log4j attacks1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/ezgif.com-gif-maker-3-1-90x90.jpg Log4j attackers switch to injecting Monero miners via RMI1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/Hackers-Using-Malicious-IIS-Server-Module-to-Steal-Microsoft-Exchange-560x380-1-90x90.jpg Hackers steal Microsoft Exchange credentials using IIS module2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/how-ransomware-works-1024x535-1-90x90.png New ransomware now being deployed in Log4Shell attacks2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/0d73-article-201111-ubuntu-90x90.jpg Attackers can get root by crashing Ubuntu’s AccountsService2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/frame_2_delay-0.5s-90x90.jpg Hackers start pushing malware in worldwide Log4Shell attacks2 weeks ago
The post Wireless coexistence – New attack technique exploits Bluetooth, WiFi performance features first appeared on Black Hat Ethical Hacking.

___________________________
@hacking_Attack
@Hacking_Video