WebApp intentionally made vulnerable (https://www.kitploit.com/search/label/Vulnerable) to Race Condition
DescriptionRace Condition vulnerability (https://www.kitploit.com/search/label/Vulnerability) can be practiced in the developed WebApp. Task is to buy a Mega Box using race condition that costs more than available vouchers. Two challenges are made for practice. Challenge B is to be solved when PHPSESSID cookie (https://www.kitploit.com/search/label/Cookie) is present, cookie is auto created when user is logged in. Happy learning
Building and running the docker imageBuild the docker image with:git clone https://github.com/Xib3rR4dAr/WannaRace && cd WannaRace
docker build -t xib3rr4dar/wanna_race:1.0 .Run docker image:docker run -it --rm xib3rr4dar/wanna_race:1.0
ORdocker run -it --rm -p 9050:80 xib3rr4dar/wanna_race:1.0
Then open in browser relevant IP:PORT
ScreenshotsChallenge #1Main Page

___________________________
@hacking_Attack
@Hacking_Video

Four vouchers worth 400 units available for recharge

___________________________
@hacking_Attack
@Hacking_Video

Task is to buy Mega box (which is worth 401 units) by exploiting (https://www.kitploit.com/search/label/Exploiting) race condition

___________________________
@hacking_Attack
@Hacking_Video

Challenge #2Same as Challenge #1 but requires login so that PHPSESSID and appropriate cookies (https://www.kitploit.com/search/label/Cookies) are set

___________________________
@hacking_Attack
@Hacking_Video

Download WannaRace (https://github.com/Xib3rR4dAr/WannaRace)

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
WannaRace - WebApp Intentionally Made Vulnerable To Race Condition For Practicing Race Condition

https://blogger.googleusercontent.com/img/a/AVvXsEgjP3t6bru-XjgSzIt9uEPpTRTFHIdcGNie-m50YGQqb8jUAwXJe-5szGiY_izIeX0gTyxTGboMBON68nxS08L3tmzc4_dbWBrR0Xdcc79V7Phv2R0W2oulGjPmxn_33LB_8uusBUlGsSPGrfq6Df0dHBvXuakD_PamyY_Smn_jRV6cXn9W82lMEpbr=w640-h240 WebApp intentionally made vulnerable to Race Condition Description Race Condition vulnerability can be practiced in the developed WebApp. Task is to buy a Mega Box using race condition that costs more than available vouchers. Two challenges are made for practice. Challenge B is to be solved when PHPSESSID cookie is present, cookie is auto created when user is logged in. Happy learning Building and running the docker imageBuild the docker image with: git clone https://github.com/Xib3rR4dAr/WannaRace && cd WannaRace
docker build -t xib3rr4dar/wanna_race:1.0 .Run docker image: docker run -it --rm xib3rr4dar/wanna_race:1.0 OR docker run -it --rm -p 9050:80 xib3rr4dar/wanna_race:1.0 Then open in browser relevant IP:PORT ScreenshotsChallenge #1

Main Page https://blogger.googleusercontent.com/img/a/AVvXsEgjP3t6bru-XjgSzIt9uEPpTRTFHIdcGNie-m50YGQqb8jUAwXJe-5szGiY_izIeX0gTyxTGboMBON68nxS08L3tmzc4_dbWBrR0Xdcc79V7Phv2R0W2oulGjPmxn_33LB_8uusBUlGsSPGrfq6Df0dHBvXuakD_PamyY_Smn_jRV6cXn9W82lMEpbr=w640-h240 Four vouchers worth 400 units available for recharge https://blogger.googleusercontent.com/img/a/AVvXsEhP-rUpAnTeV1FzYt8QnshGPr3dusefpMWr7kNN-OzoeHNnFletGoRW0IVRPTCyLv85wDFCL8I5_E0W4__uCy2HlFked4QdsAGewOff-SrV1Xe87h3sTa27SS9ILT8gTyOef5dL25ks9PGYXWXBFEIIhjtW2MKSyxXyHWg_wmfVCSo0QP6bUZjcDgCq=w640-h480 Task is to buy Mega box (which is worth 401 units) by exploiting race condition https://blogger.googleusercontent.com/img/a/AVvXsEi92nbp0P7XLHqnQOVcTPcKEGq2Bq-z90g3NCMvXVd-ChlRjxQbOyY10c0e8iY859XOt9vvXeVlHtHEbTka7VvJ_rZbz69XgOHtoWWxgHBGa8fiPhrMwYn4mlOvaxPpkCKg-7ttfWZAg-bU5rKatWwowbQfUT0DXCc2ZEVNegLAa1DQGou6xAJsKAPG=w640-h396 Challenge #2

Same as Challenge #1 but requires login so that PHPSESSID and appropriate cookies are set https://blogger.googleusercontent.com/img/a/AVvXsEgdPMLdHRwnWwaWmaj2VMFqlPGsUW2H98NnjlOv1_loxelQOTW2QQLRVJlvPvTPr3vVV3dXCHQOG49IpxrIjo1KSgOPltHnK_MFy0QZ3WPxElOcSStMytKB702qrGPjOWjzk4vwO-CNQHJaqegWbISdv24w2_1q7p6-XfBDeSadSvnbx2cdeZKKIrWb=w640-h214 Download WannaRace

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How do I decrypt my own Adobe password?

My password was in the Adobe breach of 2013. I have the leaked Adobe data, and I have located my own user data within it. But the password is in its encrypted form and it consisting of random characters and looks something like this: 3p1i4vlbinfre42=

What kind of string is this? Does it have a name? What encryption was used to produce it?

Now, I know what my password was. Would that be enough for me to decrypt this random nonsense into something slightly more useful like a hash? Or do I need to know the master password that Adobe used or something like that?

I don't think I need a reason for asking such questions, but I am doing this to educate myself by practicing on real world examples (and on my own data).

submitted by /u/Ken852
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
What's Your Daily Source of Cybersecurity News?

What's your go-to source for all things malware, APT, and cyber related?

submitted by /u/Rebel_Ye11
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
What jobs does a professional hacker get?

What's the pay and how do you go about getting these jobs?

submitted by /u/Sambar_Dosa
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Microsoft: macOS 'Powerdir' Flaw Could Enable Access to User Data

The vulnerability could allow an attacker to bypass the macOS Transparency, Consent, and Control measures to access a user's protected data.

Dark Reading: Attacks/Breaches
5 Things to Know About Next-Generation SIEM

NG-SIEM is emerging as a cloud- and analytics-driven alternative to legacy SIEMs. Based on new research, Omdia highlights five important new insights for anyone considering a NG-SIEM purchase.

Dark Reading: Attacks/Breaches
Why Security Awareness Training Should Begin in the C-Suite

It's not just the rights and privileges that CXOs have on the network. They can also set an example of what good security hygiene looks like.

Kali Linux Tutorials
Kubernetes-Goat : Is A “Vulnerable By Design” Kubernetes Cluster

Kubernetes-Goat is designed to be an intentionally vulnerable cluster environment to learn and practice Kubernetes security.

Setting Up Kubernetes Goat

Before we set up the Kubernetes Goat, ensure that you have created and have admin access to the Kubernetes cluster

kubectl version –short

Set up the helm version 2 in your path as helm2. Refer to helm releases for more information about setup

helm2 –help

Then finally setup Kubernetes Goat by running the following command

git clone https://github.com/madhuakula/kubernetes-goat.git
cd kubernetes-goat
bash setup-kubernetes-goat.sh

To export the ports/services locally to start learning, run the following command

bash access-kubernetes-goat.sh

Setting up Kubernetes Goat using KIND

If you want to set up the Kubernetes Goat using KIND (Kubernetes IN Docker), then follow the below steps

Make sure you have followed the pre-requisites as mentioned in the Kubernetes Goat. Also, you must have KIND installed and setup locally in your system.

* To setup the KIND cluster run the following command

bash setup-kind-cluster-and-goat.sh

Then to access the Kubernetes Goat locally, run the following command

bash access-kubernetes-goat.sh

To destroy the KIND cluster run the following command

bash teardown-cluster.sh
Download

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Nosferatu : Lsass NTLM Authentication Backdoor

Nosferatu is a Lsass NTLM Authentication Backdoor

How It Works

First, the DLL is injected into the lsass.exeprocess, and will begin hooking authentication WinAPI calls. The targeted function is MsvpPasswordValidate(), located in NtlmShared.dll. In the pursuit of not being detected, the hooked function will call the original function and allow for the normal flow of authentication. Only after seeing that authentication has failed will the hook swap out the actual NTLM hash with the backdoor hash for comparison.

Usage

Nosferatu must be compiled as a 64 bit DLL. It must be injected using the a DLL Injector with SeDebugPrivilege.
https://blogger.googleusercontent.com/img/a/AVvXsEj-e7FHSL_uXtmawCLkwvxLUhdswxJqLalTSKpkx2lMeq9ZSdQnM_QhUWohZFOkWm7AlN6qkuCbg62yUV4TsyzV87_18aub2dJ12aGyAvihngHt6e53vG2PAhJLDL3Q48d7wGSrKK8vIkvI_ogI6Ex4sHhivKF5qaY6XSoq-Gp5D_HdH1labt6M0bHm=s1508
You can see it loaded using Procexp:
https://blogger.googleusercontent.com/img/a/AVvXsEh3H0gLucrBHMqFiD0SEDk-OgwMV_11-Vqpt5HizEMY1_4Ha7R7lZhIN-TPbYBgh9BrecZSim8PHk7fG0EjfRMGWxtflLlo2GmpBfbvQZmn7kAju5s2vFnV4aU8KQEJC1SPMrsZw4x9QiKfa8GlOU5F5G9il5KVfHfOgYKThZgMXvE3H6yH8yeWS1Gh=s966
Login example using Impacket:
https://blogger.googleusercontent.com/img/a/AVvXsEhuXnbA5OFm9p0PUrbHZHzG_rkeWOTK8__09RRnbNDvJDP1jDKRrwILIzo0FFfUGf9viqyYbsTPdX44QjnnRjCVxJx4cUedqavrLPsDXIAdzflw6K2c9f_6fzgRxbrWAblkiGOKjVRWO3QlILT1CCmeprDEi4Dz2Z6KH5TvYa9ISqr1heOuNLdNwTIH=s2484

Download

___________________________
@hacking_Attack
@Hacking_Video