Implementing Django-rest API Throttling and Unauthenticated bypass

In the name of God.Continue reading on InfoSec Write-ups »
Read more...

Dark Reading: Attacks/Breaches
CrowdStrike Incorporates Intel CPU Telemetry into Falcon Sensor

The Falcon sensor uses Intel PT telemetry to identify suspicious operations associated with hard-to-detect exploit techniques.

Why we use Nmap?
https://medium.com/@mukundkumarjha2005/why-we-use-nmap-7cc34ab3a2a6?source=rss------bug_bounty-5

I clear this topic in 2 points
1.As a hacking or penteration testing.
2.use in bug bounty.
1. As a Hacker-
We know that nmap is network…Continue reading on Medium » (https://medium.com/@mukundkumarjha2005/why-we-use-nmap-7cc34ab3a2a6?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Covery: Online Fraud Detection Software

Every business owner thinks about how to ensure a safety for own finances, confidential documents, workers’ and clients’ personal data and money. When it comes to a business of any scale in any niche there are a lot of aspects, which require a protection.

Moreover, considering the increase of the number of online frauds the enhancement of the protection system is a mandatory point for the optimal functioning of the business.

Today the best way to protect your business from any type of a virtual fraud is to use a fraud detection software. The functioning of the fraud detection software is based on the mechanism of the risk management software.

A great technology of the risk management software was created for the analysis of the large amount of information in a short time. This unique anti-fraud system is aimed at the recognizing a scammer as soon as possible not to allow them starting a fraud process.

The use of the risk management software helps to explore the analyzed information and make forecasts about possible threats.

Here is a list of anti-fraud systems, which include a fraud detection software, which are the most popular on the market:

·         Bot Manager (Akamai)

·         Kaspersky Fraud Prevention

·         Fraud Prevention by Forter

·         FraudForce (TransUnion)

·         ThreatMetrix

·         Guaranteed Fraud Prevention (Signifyd)

·         Radware Bot Manager

·         Monitor Plus

·         Emailage

·         Phoneprinting (Pindrop)

·         Guardian Analytics

·         Kount Complete

·         Cleafy

·         Fraud Management by Accertify

·         Behaviosec Behavioral Biometrics

·         Payer Authentication by CyberSource

·         ClearSale Total Guaranteed Protection Solution

·         Instant Verify and Instant Authenticate and InstantID (LexisNexis)

·         FraudNet by Experian

Be sure that the choice of any fraud detection system from the list will be a great step towards the advancement of your business security system. Inasmuch as a fraud detection system is one of the most effective anti-fraud tools.

In addition to the fraud detection software it is reasonable to use such preventive methods as device fingerprinting, chargeback prevention, trust-chain, AML and KYC systems, etc. All mentioned technologies are offered by Covery, which is a famous high-class fraud detection software provider in the USA and Europe.

Covery offers a high-grade fraud detection software, which is appropriate for different business spheres. Today more often the implementation of a fraud detection software is required by representatives of e-commerce

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How To Install Tool-X In Termux | All About Technology

https://cdn-images-1.medium.com/max/1079/0*DC9o8bL0M6AzwLxz.jpg
Tags: Install Tool-X In Termux | Termux | Ethical Hacking | Termux

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Account Takeover Via Changing Email ID

https://cdn-images-1.medium.com/max/882/1*-A5oz1DYZIp5Zt9cIAXWjg.png
What is Account Takeover Vulnerability?

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Why we use Nmap?

I clear this topic in 2 points
1.As a hacking or penteration testing.
2.use in bug bounty.
1. As a Hacker-
We know that nmap is network…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Breaking Parser Logic Gain Access To NGINX Plus API — Read/Write Upstreams.

https://cdn-images-1.medium.com/max/1054/1*cRZG9McFS7NMrdncOYralQ.png
Hi hackers, in this talk I will explain how I could direct traffic from an internal server to my own by breaking the way their reverse…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Metasploit payloads dont work with custom loaders
https://www.reddit.com/r/redteamsec/comments/rwimm9/metasploit_payloads_dont_work_with_custom_loaders/

Hello, im taking a course by Sektor7. i have the problem that, no matter in which way i try, i cant get a metasploit payload executed correctly by any loader (cpp) in the course. The program run, but there was no meterpreter session opened no more What I tried: Simple xor encryption and decryption Simple AES encryption and decryption Even base64 encoding doesnt work for me I also tried to research the root of the problem with no success. The source I used already was fixed for all problems any debugger gave me: The python script for aes encryption: https://pastebin.com/Qyxa3Zrr The cpp loader that decrypts and runs the payload in memory: https://pastebin.com/MfVynd45 the compiler (a custom batch): https://pastebin.com/rn6zXfqi I already tried to generate a PE with msfvenom and run it through the python, did not work. I tried to generate the raw payload with msfvenom, then encrypt it manually and put in aes key and payload into the cpp, didnt work. I tried to generate with -f raw -o 1.bin, then run the .bin through the python, didnt work. Note: Only the provided shellcodes by Sektor7 seem to work flawlessly. These have no other function besides executing the calc.exe from the System32 folder or showing basic messages. Maybe the sheer size of metasploit generated payloads or its custom functions make them going broken during the cryption and compilation process? If yes, why and how to design the loaders they dont break the payload? submitted by /u/janameyers2002 (https://www.reddit.com/user/janameyers2002)
[link] (https://www.reddit.com/r/redteamsec/comments/rwimm9/metasploit_payloads_dont_work_with_custom_loaders/) [comments] (https://www.reddit.com/r/redteamsec/comments/rwimm9/metasploit_payloads_dont_work_with_custom_loaders/)

___________________________
@hacking_Attack
@Hacking_Video

How was this .bin file made and compiled?
https://www.reddit.com/r/Pentesting/comments/rwiv2l/how_was_this_bin_file_made_and_compiled/

Does anyone know the source and compilation method of the with-given .bin files (shellcodes) in the Red Team Operator Malware Dev Essentials course by sektor7? in case you dont know it, i uploaded the bin here (https://gofile.io/d/aqERUF) The thing about these files is that these are the only one working with the provided script of the course (and also any other loader i built from other ressources in cpp). SO i want to figure out how these shellcodes were compiled and made to also figure out why only them work with the loader. submitted by /u/janameyers2002 (https://www.reddit.com/user/janameyers2002)
[link] (https://www.reddit.com/r/Pentesting/comments/rwiv2l/how_was_this_bin_file_made_and_compiled/) [comments] (https://www.reddit.com/r/Pentesting/comments/rwiv2l/how_was_this_bin_file_made_and_compiled/)

___________________________
@hacking_Attack
@Hacking_Video

Black Hat Ethical Hacking
Researcher discovers 70 web cache poisoning vulnerabilities, nets $40k in bug bounty rewards

https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Researcher discovers 70 web cache poisoning vulnerabilities, nets $40k in bug bounty rewardsPost Views: 140 https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/BECOME-A-PATRON-AND-UNLOCK-EXCLUSIVE-VIDEOS-1.png Reading Time: 1 Minute
Despite being a known and well-documented vulnerability, web cache poisoning continues to crop up around the web.
In extensive research of many websites, including some high-traffic online services, security researcher Iustin Ladunca (Youstin) recently discovered 70 cache poisoning vulnerabilities with various impacts.

Web cache poisoning attacks target the intermediate storage points between web servers and client devices, such as point-of-presence servers, proxies, and load balancers.

These intermediaries help improve the performance of websites by storing local versions of web content to speed up their delivery to web clients.

Web cache poisoning attacks manipulate the behavior of cache servers and how they respond to specific URL requests by clients.
See Also: Complete Offensive Security and Ethical Hacking Course DoS and XSS“I started researching web cache poisoning back in November 2020, shortly after reading James Kettle’s extensive research on the topic,” Ladunca told The Daily Swig.

“Only a few weeks in, I discovered two novel cache poisoning vulnerabilities, which made me realize just how wide the attack surface for cache poisoning is.”

In a write-up on his blog, ladunca has detailed how he discovered and reported the web cache vulnerabilities, which included Apache Traffic Server, GitHub, GitLab, HackerOne, and Cloudflare, among other servers.

“A common pattern was caching servers configured to only cache static files, meaning attacks were limited to static files only,” ladunca said. “Even so, there still was significant impact, since modern websites rely heavily on JS [JavaScript] and CSS {cascading style sheets] and taking those files down would really affect application availability.”
See Also: Hackers start pushing malware in worldwide Log4Shell attacks
Several of the web cache vulnerabilities resulted in denial of service (DoS) attacks. Cache servers use some headers as keys to store and retrieve URL requests. By using invalid values in unkeyed headers, ladunca was able to force the servers to cache error responses and later serve them instead of the original content, which made the target webpages inaccessible to clients.

“In terms of techniques used, by far the most common one was CP-DoS through unkeyed headers, which probably accounted for 80% of [the] total findings,” Ladunca said.

Other web cache poisoning vulnerabilities could lead to cross-site scripting (XSS) attacks. For example, one vulnerability could force the cache server to forward JavaScript file requests to an attacker-controlled address. In another case, ladunca was able to redirect a cache request from one host to another that was vulnerable to DOM-based XSS attacks.
See Also: Offensive Security Tool: Spray365 Lessons learnedLadunca was awarded a total of around $40,000 in bug bounty for the 70 web cache vulnerabilities he discovered. But he also took away important lessons about securing web cache servers.

“I would say a good way to secure CDNs from cache poisoning attacks would be disabling caching for error status codes, a mitigation which should stop a large part of CP-DoS attacks,” he said.

The researcher also recommended using P[...]

___________________________
@hacking_Attack
@Hacking_Video

ortSwigger’s Param Miner, an open source tool that can identify hidden, unlinked parameters. Running Param Miner against web applications can help detect unkeyed headers that can be used for web cache poisoning.
See Also: Hacking stories – Rafael Núñez (aka RaFa), hacking NASA with the hacking group: World of Hell
Source: portswigger.net (Click Link)https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/Untitled-design.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/1200x0-90x90.jpg Apple iOS vulnerable to HomeKit ‘doorLock’ denial of service bug1 day ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/exchange-90x90.png Microsoft releases emergency fix for Exchange – 2022 bug2 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/maxresdefault-90x90.jpg Have I Been Pwned adds 441K accounts stolen by RedLine malware5 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/1229111902.0-90x90.jpg T-Mobile says new data breach caused by SIM swap attacks6 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/feature-log4j-blue-90x90.png Log4j 2.17.1 out now, fixes new remote code execution bug7 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/qnap-logo-white-90x90.jpg QNAP NAS devices hit in surge of ech0raix ransomware attacks1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/shutterstock_495927541-90x90.jpg Wireless coexistence – New attack technique exploits Bluetooth, WiFi performance features1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/apple-store-tower-90x90.jpg Apple fixes macOS security flaw behind Gatekeeper bypass2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/5157-article-201208-ms-team_body_text-90x90.jpg Microsoft Teams bug allowing phishing unpatched since March2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/ezgif.com-gif-maker-6-90x90.jpg 800K WordPress sites still impacted by critical SEO plugin flaw2 weeks ago
The post Researcher discovers 70 web cache poisoning vulnerabilities, nets $40k in bug bounty rewards first appeared on Black Hat Ethical Hacking.

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Top 5 Incident Response Courses/Certifications

I started doing a little research a few weeks ago, looking at the best courses in the market for Penetration Testing, Incident Response and Threat Intelligence. I've been asking people across Reddit and other forums for their input.

Not going to lie, it's been a little bit harder than I first thought and I've had to change my expectations somewhat. Firstly, my top 10 as far as Incident Response goes is now top 5 and secondly I've had to include examination syllabus's too.

1. FOR508 by SANS (Course + Exam)
2. CRIA by CREST (Exam)
3. eCIR by eLearn Security (Exam)
4. BTL1 by Security Blue Team (Course + Exam)
5. BTL2 by Security Blue Team (Course + Exam)

As with my previous post, I do not work for any of these companies and I actively encourage people to do their own research and undertake as much free training as possible too!

The Security Blue Team fans have been pretty vocal about the training on offer, though I personally have not undertaken any of their training... so it would be interesting to hear your thoughts about their courses.

Would you add any other courses/certs to this list?

r/cybersecuritytraining

submitted by /u/MoaningKnight
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

How I was able to spoof any Instagram username on Instagram shop

Summary: i discovered that i can spoof any Instagram username on Instagram shop, with this bug scammers can trick people into thinking…Continue reading on Medium »
Read more...

How I was able to spoof any Instagram username on Instagram shop
https://medium.com/@nvmeeet/how-i-was-able-to-spoof-any-instagram-username-on-instagram-shop-b4d6abdb474a?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video