Hacking on Medium
Arming the Use-After-Free()

https://cdn-images-1.medium.com/max/1438/1*1R8i8ppVz8A_b8T0bgKT2Q.png
Hemlo Hackers, This is a short introduction to exploiting Use-After-Free vulnerabilities in the ARM platform.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Following a path or going on my own?

When learning to hack should i «follow» a path like e.g TryHackMe paths or should i just find stuff that interests me and learn from experience and «random» things i stumble upon on the road?

Everyone learns differently obv but whats your opinion?

submitted by /u/FranciscoBlackmore
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Hacking into a windows 10 computer

First of, I’m sorry for the bad English, it’s not my first language.

So yesterday while shutting down my laptop, I saw that there was an update. I decided to do it at the same time I shut down my laptop. This morning, when I opened my computer, I couldn’t use my PIN or my fingerprint.

Usually, I always use my PIN to access my computer, so I have no idea what to do. The message that is written is: ‘’Something happened and your PIN isn't available. Click to set up your PIN again.’’ When I click to set up my PIN, nothing happens. The only way to access my computer is by the password and I can’t remember what it is.

So I’m wondering if there is a simple way to hack into my computer without my password. I have Windows 10.

Keep in mind that I’m not a hacker at all. Thanks in advance!

submitted by /u/MonBeauSoleil
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Leaks are scary as hell

I just discovered the website "intelx.io". I did something everybody do when first visiting this website, searching for your own email adress.

I came across a list of data about people who submitted a video for FailArmy and some other communities. I actually found datas about location, names, email adresses and even phone numbers !

Be carefull when you share your personal data, even for this kind of posts.

(I don't share the link to it, to prevent any bad behaviour linked to theses, I'm trying to warn people through their submissions, usually a youtube video.)

submitted by /u/Ninovui
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
What's the best way to boot kali?

I know, this one has been asked a lot. But I have some specific things I need answer to, after searching google for answers.

Just a bit of context: I daily drive mint, single boot, I have a quite powerful gaming laptop to go with it. In the hacking scene I'm more of a newbie but I already know a thing or two. I was wondering:

-If I use a VM, so here, running kali, would it add an extra layer of defense? Like if I get a malware it only gets the vm, and if someone wants to trace me back, would the VM make that harder?

-If I use a vm do I need more hardware to be able to do pen-testing for networks? I've read somewhere that it would deny access for my wifi card.

-If I use it remotely, not just at home, what do recommend?

Also would like to know your choice and reasons - usb boot, dualboot, or vm.

Thank you in advance.

submitted by /u/MontyIsCute
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How to trigger old school wireless doorbell

I have this old school wireless doorbell that I would like to "hack" or trigger by sending a signal with my computer. The doorbell is nothing fancy, no wifi or anything, I assume just regular radio signal. My thinking is that I could record the signal when I press the button and the play that recording back with some kind of device. I assume that I will need some kind of hardware for this but I'm not sure what to look for, or if I'm on the right track.

I would appreciate some help and pointers in the right direction to successfully attempt this, also some help with what type of hardware I would need.

Thank you.

submitted by /u/jaxupaxu
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Bug Bounty Hunting
https://medium.com/@mfirefox491/bug-bounty-hunting-14add8107ab?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

You might wonder what this bug bounty hunting is. Is it hunting bugs or what? Well certainly its you hunting down bugs but not the ones we…Continue reading on Medium » (https://medium.com/@mfirefox491/bug-bounty-hunting-14add8107ab?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Analyzing Binaries with Radare2
https://www.reddit.com/r/redteamsec/comments/s6cgdp/analyzing_binaries_with_radare2/

submitted by /u/DLLCoolJ (https://www.reddit.com/user/DLLCoolJ)
[link] (https://youtu.be/8rLhX_v66O4) [comments] (https://www.reddit.com/r/redteamsec/comments/s6cgdp/analyzing_binaries_with_radare2/)

___________________________
@hacking_Attack
@Hacking_Video

Critical XSS in chrome extension
https://medium.com/@p3rr0x22/critical-xss-in-chrome-extension-b55757a2074?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Chrome extensions have a feature to inject content scripts containing JavaScript code in a web page. By using the standard Document Object…Continue reading on Medium » (https://medium.com/@p3rr0x22/critical-xss-in-chrome-extension-b55757a2074?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

reFlutter - Flutter Reverse Engineering Framework
http://www.kitploit.com/2022/01/reflutter-flutter-reverse-engineering.html

___________________________
@hacking_Attack
@Hacking_Video

This framework helps with Flutter apps reverse engineering (https://www.kitploit.com/search/label/Reverse%20Engineering) using the patched version of the Flutter library which is already compiled and ready for app repacking. This library has snapshot deserialization (https://www.kitploit.com/search/label/Deserialization) process modified to allow you perform dynamic analysis (https://www.kitploit.com/search/label/Dynamic%20Analysis) in a convenient way.
Key features: socket.cc is patched for traffic monitoring and interception; dart.cc is modified to print classes, functions and some fields; contains minor changes for successfull compilation; if you would like to implement your own patches, there is manual Flutter code change is supported using specially crafted Dockerfile Supported engines Android: arm64, arm32; iOS: arm64; Release: Stable, Beta Install # Linux, Windows, MacOS
pip3 install reflutter
Usage Burp Suite IP: SnapshotHash: 8ee4ef7a67df9845fba331734198a953 The resulting apk file: ./release.RE.apk Please sign the apk file Configure Burp Suite proxy server to listen on *:8083 Proxy Tab -> Options -> Proxy Listeners -> Edit -> Binding Tab Then enable invisible proxying in Request Handling Tab Support Invisible Proxying -> true impact@f:~$ reflutter main.ipa">impact@f:~$ reflutter main.apk

Please enter your Burp Suite IP:

SnapshotHash: 8ee4ef7a67df9845fba331734198a953
The resulting apk file: ./release.RE.apk
Please sign the apk file

Configure Burp Suite proxy server to listen on *:8083
Proxy Tab -> Options -> Proxy Listeners -> Edit -> Binding Tab

Then enable invisible proxying in Request Handling Tab
Support Invisible Proxying -> true

impact@f:~$ reflutter main.ipa Traffic interception You need to specify the IP of your Burp Suite Proxy Server located in the same network where the device with the flutter application is. Next, you should configure the Proxy in BurpSuite -> Listener Proxy -> Options tab Add port: 8083 Bind to address: All interfaces Request handling: Support invisible proxying = True

___________________________
@hacking_Attack
@Hacking_Video

You don't need to install any certificates. On an Android device, you don't need root access as well. reFlutter also allows to bypass some of the flutter certificate pinning (https://www.kitploit.com/search/label/Certificate%20Pinning) implementations. Usage on Android The resulting apk must be aligned and signed. I use uber-apk-signer (https://github.com/patrickfav/uber-apk-signer/releases/tag/v1.2.1) java -jar uber-apk-signer.jar --allowResign -a release.RE.apk. To see which code is loaded through DartVM, you need to run the application on the device. reFlutter prints its output in logcat with the reflutter tag impact@f:~$ adb logcat -e reflutter | sed 's/.*DartVM//' >> reflutter.txt code output NavigationInteractor { } Function 'initDeepLinkHandle':. (dynamic) => Future* { } Function '_navigateDeepLink@547106886':. (dynamic, dynamic, {dynamic navigator}) => void { } } Library:'package:anyapp/auth/navigation/AuthAccount.dart' Class: AuthAccount extends Account { PlainNotificationToken* _instance = sentinel; Function 'getAuthToken':. (dynamic, dynamic, dynamic, dynamic) => Future* { } Function 'checkEmail':. (dynamic, dynamic) => Future* { } Function 'validateRestoreCode':. (dynamic, dynamic, dynamic) => Future* { } Function 'sendSmsRestorePassword':. (dynamic, dynamic) => Future* { } }">Library:'package:anyapp/navigation/DeepLinkImpl.dart' Class: Navigation extends Object {

String* DeepUrl = anyapp://evil.com/ ;

Function 'Navigation.': constructor. (dynamic, dynamic, dynamic, dynamic) => NavigationInteractor {

}

Function 'initDeepLinkHandle':. (dynamic) => Future* {

}

Function '_navigateDeepLink@547106886':. (dynamic, dynamic, {dynamic navigator}) => void {

}

}

Library:'package:anyapp/auth/navigation/AuthAccount.dart' Class: AuthAccount extends Account {

PlainNotificationToken* _instance = sentinel;

Function 'getAuthToken':. (dynamic, dynamic, dynamic, dynamic) => Future* {

}

Function 'checkEmail':. (dynamic, dynamic) => Future* {

}< br/>
Function 'validateRestoreCode':. (dynamic, dynamic, dynamic) => Future* {

}

Function 'sendSmsRestorePassword':. (dynamic, dynamic) => Future* {

}
} Usage on iOS Use the IPA file created after the execution of reflutter main.ipa command. To see which code is loaded through DartVM, you need to run the application on the device. reFlutter prints its output in console logs in XCode with the reflutter tag.

___________________________
@hacking_Attack
@Hacking_Video

To Do Display absolute code offset for functions; Extract more strings and fields; Add socket patch; Extend engine support to Debug using Fork and Github Actions; Improve detection of App.framework and libapp.so inside zip archive Build Engine The engines are built using reFlutter (https://github.com/ptswarm/reFlutter/blob/main/.github/workflows/main.yml) in Github Actions (https://github.com/ptswarm/reFlutter/actions) to build the desired version, commits and snapshot hashes are used from this table (https://github.com/ptswarm/reFlutter/blob/main/enginehash.csv). The hash of the snapshot is extracted from storage.googleapis.com/flutter_infra_release/flutter//android-arm64-release/linux-x64.zip release

___________________________
@hacking_Attack
@Hacking_Video