Cross Site Port Attack in Wild
https://thehemdeep.medium.com/cross-site-port-attack-in-wild-9d2f6af36455?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hello Hunter, Sorry for the delay of post and this is my first post in this year, I hope you’re all doing well and happy. So without…Continue reading on Medium » (https://thehemdeep.medium.com/cross-site-port-attack-in-wild-9d2f6af36455?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Cross Site Port Attack in Wild

Hello Hunter, Sorry for the delay of post and this is my first post in this year, I hope you’re all doing well and happy. So without…Continue reading on Medium »
Read more...

Black Hat Ethical Hacking
Same-origin violation vulnerability in Safari 15 could leak a user’s website history and identity

https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Same-origin violation vulnerability in Safari 15 could leak a user’s website history and identityPost Views: 95 https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/BECOME-A-PATRON-AND-UNLOCK-EXCLUSIVE-VIDEOS-1.png Reading Time: 1 Minute
A vulnerability affecting the Safari browser can leak a user’s identity and their website history, researchers have warned.
The issue was introduced in Safari’s implementation of the IndexedDB API in its latest offering, version 15. IndexedDB is a browser API for client-side storage designed to hold significant amounts of data.

To prevent data leaks from cross-site scripting (XSS) attacks, IndexedDB follows the same-origin policy, controlling which resources can access each piece of data.
Same-origin policy restricts how documents or scripts loaded from one origin can interact with resources from other origins. It also prevents malicious script on one page from obtaining access to sensitive data on another web page.

A blog post from researchers at FingerprintJS who discovered the bug, have revealed that in Safari 15 on macOS, and in all browsers on iOS and iPadOS 15, the IndexedDB API is violating same-origin policy in the WebKit implementation, leading to users’ information being made accessible.

“It lets arbitrary websites learn what websites the user visits in different tabs or windows,” the blog post explains. “This is possible because database names are typically unique and website-specific.
See Also: Complete Offensive Security and Ethical Hacking Course ‘Precisely identified’“Moreover, we observed that in some cases, websites use unique user-specific identifiers in database names. This means that authenticated users can be uniquely and precisely identified.

“Some popular examples would be YouTube, Google Calendar, or Google Keep. All of these websites create databases that include the authenticated Google User ID and in case the user is logged into multiple accounts, databases are created for all these accounts.”

Not only can untrusted or malicious websites therefore potentially learn a user’s identity, this could also allow the linking together of multiple separate accounts used by the same user.

The researchers noted that these leaks do not require any specific user action. A tab or window that runs in the background and continually queries the IndexedDB API for available databases can learn what other websites a user visits in real-time, they explained.

Alternatively, websites can open any website in an iframe or popup window in order to trigger an IndexedDB-based leak for that specific site.

FingerprintJS claims that more than 30 of the Alexa Top 1000 sites use indexed databases directly on their homepage, potentially leaving them exposed to the bug, though they “expect the number to be significantly higher in real-world scenarios”.
Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?

If you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com
See Also: Microsoft: New critical Windows HTTP vulnerability is wormable Fix incoming?A proof-of-concept can be found in FingerprintJS’ blog post. Apple has been made aware of the problem and, according to researchers, engineers confirmed they [...]

___________________________
@hacking_Attack
@Hacking_Video

had fixed the problem. However, FingerprintJS claims that the issue is still present.

In the meantime, users “can’t do much” to protect themselves against the vulnerability, explained the researchers.

Martin Bajanik, software engineer at FingerprintJS, told The Daily Swig: “The real-world impact is that websites visited using an impacted browser (all browsers on iOS 15 and iPadOS 15, as well as Safari 15 on MacOS) are able to access some of your browsing activity in different tabs or windows.

“We aren’t able to know which websites are taking advantage of this vulnerability, so until it is fixed, affected users” privacy may or may not be violated by the sites they visit.”

Bajanik added: “MacOS users can switch to a different browser in the meantime. iOS 15 and iPasOS 15 users do not have this option as all browsers are affected – their options are much more limited.

“They could block all JavaScript by default and only allow it on sites that are trusted, but this will result in an inconvenient browsing experience due to JavaScript’s ubiquity across the web.
See Also: Offensive Security Tool: Ivy “Hopefully, this vulnerability will be fixed shortly, at which point the best protection will be updating one’s OS once the issue is resolved.”

The Daily Swig has reached out to Apple to find out more about whether a proper fix is incoming.
See Also: Hacking stories – Rafael Núñez (aka RaFa), hacking NASA with the hacking group: World of Hell
Source: portswigger.net (Click Link)https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/Untitled-design.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/Qlocker-Ransomware-1-90x90.png Qlocker ransomware returns – targets QNAP NAS devices worldwide1 day ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/https___specials-images.forbesimg.com_imageserve_61aff357a4c71fc225ab8ba7_0x0-90x90.jpg AWS fixes security flaws that exposed AWS customer data4 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/image-apple-releases-15-2-1-update-for-ios-and-ipados-to-fix-bugs-164203308032302-90x90.jpg Apple fixes doorLock bug that can disable iPhones and iPads5 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/0_Windows-headpic-90x90.jpg Microsoft: New critical Windows HTTP vulnerability is wormable6 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/powerdir-exploit-microsoft-90x90.jpg Microsoft: powerdir bug gives access to protected macOS user data1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/using-npm-create-javascript-icon-libraries-90x90.png Dev corrupts NPM libs ‘colors’ and ‘faker’ breaking thousands of apps1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/ezgif.com-gif-maker-7-90x90.jpg Partially Unpatched VMware Bug Opens Door to Hypervisor Takeover2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/Apple-iPhone-13-Pro-90x90.png iOS malware can fake iPhone shut downs to snoop on camera, microphone2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/0358ad020c37-article-cache-poisoning-article-90x90.png Researcher discovers 70 web cache poisoning vulnerabilities, nets $40k in bug bounty rewards2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/1200x0-90x90.jpg Apple iOS vulnerable to HomeKit ‘doorLock’ denial of service bug2 weeks ago
The post Same-origin violation vulnerability in Safari 15 could leak a user’s website history and identity first appeared on Black Hat Ethical Hacking.

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Security Explained: 5 Reasons IT Security is Paramount

https://cdn-images-1.medium.com/max/1110/1*TF-X1azyg07aV3zWa-zDLQ.jpeg
Taking the proper security precautions is integral to smooth business operations. We have listed 5 reasons why customers used our services.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Update on the Suspicious Activity Incident on Crypto.com

https://cdn-images-1.medium.com/max/1200/1*0kisG4eAuksbetwO9NhfyA.png
Singapore, 18th January 2022 — Through our team’s preliminary analysis, we estimate that the alleged compromised assets from the recent…

Continue reading on Sentinel Protocol »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Looking for a project/resources that tracks most exploited vulnerabilities

There are many resources that are build around vulnerabilities (NVD, vulnmon, vulndbd, attackerkb) but only few focus on exploitable CVE. Have you come across a good database that tracks exploitable CVEs (other than exploitdb, rapid7)

submitted by /u/bawlachora
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Sites like z shadow

Hello guys. Is there any site like z shadow?

submitted by /u/TElemelons
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
XSS in 500 Internal Server Error HTTP Response?

When a site return 500 Internal Server Error with the whole headers in it including User-Agent

HTTP Response
HEADERS ======= ... User-Agent: Mozilla ...
Does this consider as a valid XSS finding? Burp Suite Pro says this is certain, however I did not get any popup though with this payload on web browser. All I get is bunch of error message with complete HTTP HEADERS at the bottow of the browser.

submitted by /u/w0lfcat
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

XSS in 500 Internal Server Error HTTP Response?
https://www.reddit.com/r/Pentesting/comments/s6uq9w/xss_in_500_internal_server_error_http_response/

When a site return 500 Internal Server Error with the whole headers in it including User-Agent HTTP Response HEADERS ======= ... User-Agent: Mozilla 1 ... Does this consider as a valid XSS finding? Burp Suite Pro says this is certain, however I did not get any popup though with this payload on web browser. All I get is bunch of error message with complete HTTP HEADERS at the bottow of the browser. submitted by /u/w0lfcat (https://www.reddit.com/user/w0lfcat)
[link] (https://www.reddit.com/r/Pentesting/comments/s6uq9w/xss_in_500_internal_server_error_http_response/) [comments] (https://www.reddit.com/r/Pentesting/comments/s6uq9w/xss_in_500_internal_server_error_http_response/)

___________________________
@hacking_Attack
@Hacking_Video

Driftwood - Private Key Usage Verification
http://www.kitploit.com/2022/01/driftwood-private-key-usage-verification.html

___________________________
@hacking_Attack
@Hacking_Video

Driftwood is a tool that can enable you to lookup whether a private key is used for things like TLS (https://www.kitploit.com/search/label/TLS) or as a GitHub SSH (https://www.kitploit.com/search/label/SSH) key for a user. Driftwood performs lookups with the computed public key, so the private key never leaves where you run the tool. Additionally it supports some basic password cracking (https://www.kitploit.com/search/label/Cracking) for encrypted keys.
Installation Three easy ways to get started. Run with Docker cat private.key | docker run --rm -i trufflesecurity/driftwood --pretty-json - Run pre-built binary Download the binary (https://www.kitploit.com/search/label/Binary) from the releases page (https://github.com/trufflesecurity/driftwood/releases) and run it. Build yourself go install github.com/trufflesecurity/driftwood@latest Usage Minimal usage is $ driftwood path/to/privatekey.pem Run with --help to see more options. Library Usage Packages under pkg/ are libraries that can be used for external consumption. Packages under pkg/exp/ are considered to be experimental status and may have breaking changes.

Download Driftwood (https://github.com/trufflesecurity/driftwood)

___________________________
@hacking_Attack
@Hacking_Video

The New King “Broken Access Control”

The King (Injection Bug) who was ruling the bug world for more than a decade is now conquered by the New King known as “Broken Access…Continue reading on Medium »
Read more...

Kali Linux Tutorials
Cybersecurity for Students

With technology being such a huge part of student life, it’s alarming how many students ignore or don’t pay attention to cybersecurity threats. Sometimes, it’s better to ask for some thesis help at reliable services than looking for the information for your assignment all over the suspicious websites of the Internet.

So, here are some basic cybersecurity tips that all students (and non-students) must know in order to protect themselves! Use licensed softwareRemember that if you use stolen software you can never be sure that it is safe because you don’t know who hacked it. Besides, who told you that the hacker of your software only wants to make money on you once? Be careful of using free Wi-FiOf course, it’s convenient to sit and work in a cafe with free Wi-Fi. It’s comfy, and you don’t have to pay for the Internet. But admit it, you have a guarantee that the visitor at the next table is not listening to the same access point? And you pass your personal information. What to do? There are really two options – use mobile Internet or use a VPN (Virtual Private Network). In this case, the transmitted and received information will be encrypted and, therefore, it is more difficult for an intruder to eavesdrop on your communication channel. Use HTTPS websitesStudying requires students to switch between lots of websites every day – but how often do you actually check the URL search bar?

Make sure you check that every Web site you visit uses HTTPS (secure HTTP, where the address bar has a padlock) rather than plain old HTTP.

Most students polled did not know the difference between HTTPS and HTTP.

Fortunately, if an insecure Web page asks for passwords or other personal information, most browsers will warn you not to enter it, because data in unsecured Web traffic can easily be tracked as it moves across the Internet.

However, it is important that you yourself know the difference between HTTPS and HTTP to ensure that all communications are encrypted from being intercepted in transit between your browser and the sites you visit.

When you need some help with your assignments, feel free to look for some good services on reddit as you’ll be able to read customer feedback before going to the website and putting your data in danger. Warning – phishingUniversity students regularly receive many e-mails a day with information about lectures, seminars, newsletters, student union activities, and other university-related information.

Despite the flood of emails, you need to stay on alert and read emails carefully, especially if they ask you to do something on your computer, such as click a link, download a file, install a new application, or change your system settings.

To prevent phishing, it’s important to make sure that the sender is really who they say they are.

If you’re not careful, you could end up exposing information and details that should remain private, including credit card numbers, details from identification documents such as your driver’s license or passport, or your home address.

When it comes to personal information, use the mantra, “When in doubt, don’t open it”. Lock down your computerMany students use the library to study, but even in the library there are many distractions.

Leaving your laptop for just two minutes to go to the vending machine can be potentially dangerous if you don’t “bother” to log out or lock your computer before leaving it unattended.

While it’s unlikely that someone will hide and wait for you to leave your account open and be able to use it for a while, it’s better to be reassured than sorry.

It’s better to spend a few seconds unlocking your screen or logging in again than to let someone mess up your settings, view your files, or install some malicious application that will spy on you.

Worry[...]

___________________________
@hacking_Attack
@Hacking_Video