e in an email to Threatpost. “Mobile users frequently assume that they are safe either because of app store policies, or because they have consented to terms of service – but third parties are not carefully checked by app reviewers, and they are rarely monitored for safety.”

Because of this, these apps “can be hijacked to execute phishing attacks, share sensitive data with fourth or fifth parties, suffer a data breach caused by lax security practices, or worse,” he noted.
See Also: Hacking stories – Rafael Núñez (aka RaFa), hacking NASA with the hacking group: World of Hell
Source: threatpost.com (Click Link)https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/Untitled-design.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/ezgif.com-gif-maker-10-90x90.jpg SSRF vulnerability in VMWare authentication software could allow access to user data1 day ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/Safari-Apple-navigateur-90x90.jpg Same-origin violation vulnerability in Safari 15 could leak a user’s website history and identity2 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/Qlocker-Ransomware-1-90x90.png Qlocker ransomware returns – targets QNAP NAS devices worldwide3 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/https___specials-images.forbesimg.com_imageserve_61aff357a4c71fc225ab8ba7_0x0-90x90.jpg AWS fixes security flaws that exposed AWS customer data6 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/image-apple-releases-15-2-1-update-for-ios-and-ipados-to-fix-bugs-164203308032302-90x90.jpg Apple fixes doorLock bug that can disable iPhones and iPads1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/0_Windows-headpic-90x90.jpg Microsoft: New critical Windows HTTP vulnerability is wormable1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/powerdir-exploit-microsoft-90x90.jpg Microsoft: powerdir bug gives access to protected macOS user data1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/using-npm-create-javascript-icon-libraries-90x90.png Dev corrupts NPM libs ‘colors’ and ‘faker’ breaking thousands of apps1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/ezgif.com-gif-maker-7-90x90.jpg Partially Unpatched VMware Bug Opens Door to Hypervisor Takeover2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/Apple-iPhone-13-Pro-90x90.png iOS malware can fake iPhone shut downs to snoop on camera, microphone2 weeks ago
The post Beijing Olympics App Flaws Allow Man-in-the-Middle Attacks first appeared on Black Hat Ethical Hacking.

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
DarkNet Interviews: Part 1

https://cdn-images-1.medium.com/max/1920/1*hT0JajpmO3DCV99Fl2gZhw.jpeg
I’ve been taking some time to meet with security professionals from all over the world. I have set up a series of interviews which will be…

Continue reading on CodeX »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
TryHackMe: Wreath

room: https://tryhackme.com/room/wreath

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
What's more lucrative? White hat or black hat hacking?

This question is academic, not a request for career advice.

I also understand that black hat hacking can come with room and board included if you get caught.

submitted by /u/anon314159265358p
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Strange message from one of my contacts

Hey guys today one of my contacts ( someone from high school that I didnt speak with for more then 2 years ) sent me a message on Facebook

The message was written in our native language and it translates as : Are you the one in this video ? + LINK

I was kind of freaking out and I was just looking at the message ( I did not click the link ) and while I was thinking what to do he UNSENT the message then I asked this person what is going on and he didnt reply back yet.

The thing that surprised and confused me is that the message was written correctly in our native language ( not english )

So I am asking you guys what is going on ?

submitted by /u/LEggENDE
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Dep-Scan - Fully Open-Source Security Audit For Project Dependencies Based On Known Vulnerabilities And Advisories. Supports Both Local Repos And Container Images. Integrates With Various CI Environments Such As Azure Pipelines, CircleCI, Google CloudBuild
http://www.kitploit.com/2022/01/dep-scan-fully-open-source-security.html

___________________________
@hacking_Attack
@Hacking_Video

dep-scan is a fully open-source security audit tool for project dependencies based on known vulnerabilities, advisories and license limitations. Both local repositories and container images are supported as input. The tool is ideal for CI environments with built-in build breaker logic. If you have just come across this repo, probably the best place to start is to checkout the parent project slscan (https://slscan.io/) which include depscan along with a number of other tools.
Features Local repos and container image based scanning with CVE insights [1] Package vulnerability scanning (https://www.kitploit.com/search/label/Vulnerability%20Scanning) is performed locally and is quite fast. No server is used! Suggest optimal fix version by package group (See suggest mode) Perform deep packages risk audit for dependency confusion attacks and maintenance risks (See risk audit) NOTE: [1] Only application related packages in container images are included in scanning. OS packages are not included yet.

___________________________
@hacking_Attack
@Hacking_Video

Vulnerability Data sources OSV NVD GitHub NPM Usage dep-scan is ideal for use during continuous integration (https://www.kitploit.com/search/label/Continuous%20Integration) (CI) and also as a tool for local development. Use with ShiftLeft Scan dep-scan is integrated with scan (https://github.com/ShiftLeftSecurity/sast-scan), a free and open-source SAST tool. To enable this feature simply pass depscan to the --type argument. Refer (https://slscan.io/) to the scan documentation for more information. ---
--type python,depscan,credscan This approach should work for all CI environments supported by scan. Scanning projects locally (Python version) sudo npm install -g @appthreat/cdxgen
pip install appthreat-depscan This would install two commands called cdxgen and scan. You can invoke the scan command directly with the various options. depscan --src $PWD --report_file $PWD/reports/depscan.json">cd
depscan --src $PWD --report_file $PWD/reports/depscan.json Full list of options are below: usage: depscan [-h] [--no-banner] [--cache] [--sync] [--suggest] [--risk-audit] [--private-ns PRIVATE_NS] [-t PROJECT_TYPE] [--bom BOM] -i SRC_DIR [-o REPORT_FILE]
[--no-error]
-h, --help show this help message and exit
--no-banner Do not display banner
--cache Cache vulnerability information in platform specific user_data_dir
--sync Sync to receive the latest vulnerability data. Should have invoked cache first.
--suggest Suggest appropriate fix version for each identified vulnerability.
--risk-audit Perform package risk audit (slow operation). Npm only.
--private-ns PRIVATE_NS
Private namespace to use while performing oss risk audit. Private packages should not be available in public registries by default. Comma
sep arated values accepted.
-t PROJECT_TYPE, --type PROJECT_TYPE
Override project type if auto-detection is incorrect
--bom BOM Examine using the given Software Bill-of-Materials (SBoM) file in CycloneDX format. Use cdxgen command to produce one.
-i SRC_DIR, --src SRC_DIR
Source directory
-o REPORT_FILE, --report_file REPORT_FILE
Report filename with directory
--no-error Continue on error to prevent build from breaking Scanning containers locally (Python version) Scan latest tag of the container shiftleft/scan-slim depscan --no-error --cache --src shiftleft/scan-slim -o containertests/depscan-scan.json -t docker Include license to the type to perform license audit. depscan --no-error --cache --src shiftleft/scan-slim -o containertests/depscan-scan.json -t docker,license You can also specify the image using the sha256 digest depscan --no-error --src redmine@sha256:a5c5f8a64a0d9a436a0a6941bc3fb156be0c89996add834fe33b66ebeed2439e -o containertests/depscan-redmine.json -t docker You can also save container images using docker or podman save command and pass the archive to depscan for scanning. docker save -o /tmp/scanslim.tar shiftleft/scan-slim:latest
# podman save --format oci-archive -o /tmp/scanslim.tar shiftleft/scan-slim:latest
depscan --no-error --src /tmp/scanslim.tar -o reports/depscan-scan.json -t docker Refer to the docker tests under GitHub action workflow for this repo for more examples. Scanning projects locally (Docker container) appthreat/dep-scan or quay.io/appthreat/dep-scan container image can be used to perform the scan. To scan with default settings docker run --rm -v $PWD:/app appthreat/dep-scan scan --src /app --report_file /app/reports/depscan.json To scan with custom environment variables based configuration \ -v /tmp:/db \ -v $PWD:/app appthreat/dep-scan scan --src /app --report_file /app/reports/depscan.json">docker run --rm \
-e VDB_HOME=/db \
-e NVD_START_YEAR=2010 \
-e GITHUB_PAGE_COUNT=5 \

___________________________
@hacking_Attack
@Hacking_Video

-e GITHUB_TOKEN= \
-v /tmp:/db \
-v $PWD:/app appthreat/dep-scan scan --src /app --report_file /app/reports/depscan.json In the above example, /tmp is mounted as /db into the container. This directory is then specified as VDB_HOME for caching the vulnerability information. This way the database can be cached and reused to improve performance. Supported languages and package format dep-scan uses cdxgen (https://github.com/AppThreat/cdxgen) command internally to create Software Bill-of-Materials (SBoM) file for the project. This is then used for performing the scans. The following projects and package-dependency format is supported by cdxgen. Language Package format node.js package-lock.json, pnpm-lock.yaml, yarn.lock, rush.js java maven (pom.xml [1]), gradle (build.gradle, .kts), scala (sbt) php composer.lock python setup.py, requirements.txt [2], Pipfile.lock, poetry.lock, bdist_wheel, .whl go binary, go.mod, go.sum, Gopkg.lock ruby Gemfile.lock, gemspec rust Cargo.toml, Cargo.lock .Net .csproj, packages.config, project.assets.json, packages.lock.json docker / oci image All supported languages excluding OS packages NOTE The docker image for dep-scan currently doesn't bundle suitable java and maven commands required for bom generation. To workaround this limitation, you can - Use python-based execution from a VM containing the correct versions for java, maven and gradle. Generate the bom file by invoking cdxgen command locally and subsequently passing this to dep-scan via the --bom argument. Integration with CI environments Integration with Azure DevOps Refer to this example yaml (https://github.com/AppThreat/WebGoat/blob/develop/azure-pipelines.yml#L33) configuration for integrating dep-scan with Azure Pipelines. The build step would perform the scan and display the report inline as shown below:

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
LOLBins : PyQT5 App For LOLBAS And GTFOBins

LOLBins is a PyQT app to list all Living Off The Land Binaries and Scripts for Windows from LOLBAS and Unix binaries that can be used to bypass local security restrictions in misconfigured systems from GTFOBins.
https://blogger.googleusercontent.com/img/a/AVvXsEiaxG_Ik8nOFoG5kTWQeSamManID5EDwuNBviDqFiRudn-wSOWBJl7E4MZl7CFkyPX47LjiYqQBBed36lkjBiu8XqjN29aqyhFC7Qhji8mW_qFplEoAlrpnKLlbfnBDfMt3SPG72Nzl8RMidrJ9N0dn67DxCeuvH3suAQRxVzbO9VLFlxp8vPXkHuiL=s1039 Download

___________________________
@hacking_Attack
@Hacking_Video

How I Hacked into Pune University’s Exam/Teachers Portal
https://shreyas-gurjar.medium.com/how-i-hacked-into-pune-universitys-exam-teachers-portal-6c498d51e6ad?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Bypassing the Authentication mechanism results in an amazing Account takeover.Continue reading on Medium » (https://shreyas-gurjar.medium.com/how-i-hacked-into-pune-universitys-exam-teachers-portal-6c498d51e6ad?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Hacking Articles|Raj Chandel's Blog
Hackable: 3 VulnHub Walkthrough

Hackable: 3, Vulnhub medium machine was created by Elias Sousa and can be downloaded here.This lab is designed for experienced CTF players who want to put their abilities to the test. We used the machine in the way that it was designed. Also, if you haven't checked the machine or are having problems, you can attempt every approach you know. The key is port knocking, so let's get started and discover how to split things down into digestible chunks. Pentesting Methodology● netdiscover● nmap● abusing http● dirb● wordlist● port knocking● hydra● ssh● user flag● linpeas● lxd● root flagTo begin with, we must use the netdiscovercommand to scan the network for the IP address of the victim machine.netdiscoverOur IP address is 192.168.1.185.Nmap. For open port enumeration.nmap -sC -sV 192.168.1.185According to Nmap, we have an SSH server operating on port 22 and an HTTP service (Apache Server) running on port 80.EnumerationFirst, we'll attempt to use HTTP. Let's look at port 80 and see if anything interesting comes up. We can immediately verify it in the browser because the Apache Server is listening on port 80.login page."jubiscleudo."port knocking.https://blogger.googleusercontent.com/img/a/AVvXsEg5dzsOwH__RbupQ-l5c033EKAS_KlSorzXpRQYECF8Eu_baDuetC0dNVN8i-FkHx5Njequkd9FpqRTWARIhskPJ1ECZnUhTNVepG5p4F5jVZ_HVMkFEp69kUsQ5xn1LKuETe12MLy_Upb07rw-TNhmosHSMiRzofKOMYwUDLtNfqnJZ6sy5iXcKDy9hQ=s16000 To find out more about this laboratory. To uncover certain hidden directory paths, we execute a dirb directory scan.dirb http://192.168.1.185/Let's look through a lot of trustworthy directories, so let's look through them one by one.backup directory. We obtained a word list filethat might be valuable in the future.___________________________
@hacking_Attack
@Hacking_Video

Et8HFO_L73m-3Hlrfsirm6mGHgodJMq6kdbquTCas_3HX6ylII__nhO3j8i6h_ZJCTIqSpZRMMfPrlPCXWDggT5tIg=s16000 As a result, we run the wget command to download this word list to our machine.wget http://192.168.1.185/backup/wordlist.txthttps://blogger.googleusercontent.com/img/a/AVvXsEhLZM499xBUbcE72tbHdXo13bTYS-wE5Zd0gsAIK-8ZCfiIBS26gyQHinfoNxv2h_HKXd7ILA1j9OehSYdyCZKy8SqfsdLEpOkZ7tMbAyKwy8mTma2zPNnuno-ljdlS1YMvUm7Tdags5PAenN-FQOY2GRY4oM4HOaABmZ5gJq-ougO2PyJ7CnlvZhVtag=s16000 Let's look at the second config directory; we found a file called 1.txt. We ran this file through the browser and discovered some essential but mysterious context.decode this text using the following command.We received our first text of port knockingafter recovering the initial text (10000).echo MTAwMDA= | base64 -dhttps://blogger.googleusercontent.com/img/a/AVvXsEgonhSm44bJZc5fmvbpi7g0RqmAaT9UjwllWkObLO-EALHuV89yRKLUcvcQLbsYJa-HBFm4Lj2nAVgj17ibVlY3gh4gbNn5nSWhr8UxDsF9DI346MFJTiTqJBFRri4noWeSblQlQ_D5oPb6vWtTwTLYZHPvChQz-Ci0HDMIBSS5wcLP5W2qmoiLx-Z8cg=s16000 When we checked the third one (css directory), we got another text file called 2.txt. where we obtained an enumeration of brain fucks.4444) of port knocking activity by providing them with our text.: 10000 and 4444. Remember that we obtained a link to a login page earlier? We immediately checked that URL but found nothing interesting. So, we looked at the source code. We found an image called 3.jpgthat might provide some insight into the problem.steghide,which could be useful in certain situations. For our image file, we now provide the steghide tool. Hurray!! We received a top-secret text file.steghide extract -sf 3.jpgTo explore this file, we use the catcommand. Congratulations!! 65535is our third context of port knocking.cat steganopayload48505.txthttps://blogger.googleusercontent.com/img/a/AVvXsEgaW5gIjfhX1cFYtylI_IZle-QWiOcUq0ZjjPaZfIsOfOyi1wXaD7CjMPD79HZvGjaSVQrAq8umJDyyFyaGjWnDt0cdEfB3B4QrUWMBkMvnNiHKndrEvm7WkjY_LxKmpumvoNWQRbg0GVBwjCYVhqtL7o5fPk07bjfFR_RM3CgOZExn9VdKUNGEL7-DVw=s16000 We're now ready to perform port knocking. We're good to go if we use this command in conjunction with our context.knock 192.168.1.185 10000 4444 65535We run an nmapsc[...]

___________________________
@hacking_Attack
@Hacking_Video