hacking: security in practice
PassMutate & Defeater: A tool that boosts the performance of wordlists, and a strong wordlist to match

https://external-preview.redd.it/F1XfrodmF6aHOHzlTAowE_jojDTQyyQbeMfxRDd9Erc.jpg?width=640&crop=smart&auto=webp&s=11703db4b3abeeca6d49bb1cd8f1b632520d998a submitted by /u/kaimosec
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Is it possible to clone my work's PC?

Hello, currently I work homeoffice in a call center and my problem is the following: the computer that the company gave me to work not only is old and slow, as it is also a desktop PC that should be limited only to the space of my house. The company does not allow me to use another computer to work on claiming security issues and also does not allow me to take this desktop PC out of my house claiming that they can monitor by GPS the place where the PC is (which does not make the slightest sense once I'm working on homeoffice, it does not make a difference where I work and if I were to leak information from the customers I've talk to, I could do it anyway, regardless of whether or not I would be using the company's computer).In addition, this computer still uses Windows 10 pirate, which limits various operating system functions.

Now, I have a personal laptop that is much better than this company desktop and I would like to work using it and not using the company's desktop PC. After taking a look, I realized that the company's PC is not a special computer locked in an online server or something like that, in fact, it's just a normal desktop, with a local user (no administrator functions) created for me the day I brought the computer home and that, according to the company, all my activities within that user can be monitored. I'm not sure if that user is in fact connected to the cloud because I can use it even without access to the internet. Once I log in, I just need to log in to the company's VPN using the SonicWall Global VPN Client and then I can access all internal company sites and also log in to the software that I use to talk with the customers (Callflex - softphone).

Some gaps that I discovered in the company system involve the possibility to log in to OneDrive and share oline files through Sticky Notes and I can also use the desktop PC from any other computer using tools like TeamViewer or AnyDesk that are installed on it. However, remote access to the desktop PC is not yet ideal because the transmission of the sound of the computer to my laptop is horrible, so I still have to leave my headphone connected physically to the desktop PC to talk to the clients. What I would like to be able to do is to use the company's systems and the call software (CallFlex) from my laptop regardless of where I was, without having to be connected to the company's PC.

Is there any way to copy the programs from this PC to my laptop? Is it possible to clone the desktop HD and open it on a virtual machine emulating the physical PC? Anyone there has any experience with something like that and could you help me?

submitted by /u/levtahor
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
FalsiScan: Make it look like a PDF has been hand signed and scanned

https://external-preview.redd.it/z55b_0-_DYGZxjSO4sTVwBNIkMqkFCKvhcexHvELgV4.jpg?width=108&crop=smart&auto=webp&s=a3dfba29f9d19dc5dd95d58e68cd2ca48d0f6551 submitted by /u/binaryfor
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

https://preview.redd.it/4lidr7kpp3d81.jpg?width=320&crop=smart&auto=webp&s=6dccee3531b629398fdbdb73b4071416bc500493 submitted by /u/FREEVISION09
[link] [comments]

T-Reqs-HTTP-Fuzzer - A Grammar-Based HTTP Fuzzer
http://www.kitploit.com/2022/01/t-reqs-http-fuzzer-grammar-based-http.html

___________________________
@hacking_Attack
@Hacking_Video

T-Reqs (Two Requests) is a grammar-based HTTP Fuzzer (https://www.kitploit.com/search/label/Fuzzer) written as a part of the paper (https://bahruz.me/papers/ccs2021treqs.pdf) titled "T-Reqs: HTTP Request Smuggling with Differential Fuzzing" which was presented at ACM CCS 2021 (https://www.sigsac.org/ccs/CCS2021/accepted-papers.html).
BibTeX of the paper: @inproceedings{ccs2021treqs,
title={T-Reqs: HTTP Request Smuggling with Differential Fuzzing},
author={Jabiyev, Bahruz and Sprecher, Steven and Onarlioglu, Kaan and Kirda, Engin},
booktitle={Proceedings of the 2021 ACM SIGSAC Conference on Computer and Communications Security},
pages={1805--1820},
year={2021}
}
About T-Reqs is for fuzzing (https://www.kitploit.com/search/label/Fuzzing) HTTP servers by sending mutated HTTP requests with versions 1.1 and earlier. It has three main components: 1) generating inputs, 2) mutating generated inputs (https://www.kitploit.com/search/label/Inputs) and 3) delivering them to the target server(s). Generating Inputs A CFG grammar fed into the fuzzer is used to generate HTTP requests. As the example grammar shown below is tailored for request line fuzzing, every request line component and possible values for each of them are explicitly specified. This allows us to generate valid requests with various forms of request line and also to treat each request line component as a separate unit from the mutation perspective. ': [''], '': [''], '': [''], '': ['GET', 'HEAD', 'POST', 'PUT', 'DELETE', 'CONNECT', 'OPTIONS', 'TRACE', 'PATCH'], '': [' '], '': ['/_URI_'], '': ['HTTP'], '': ['/'], '': ['0.9', '1.0', '1.1'], '': ['\r\n'], '': ['Host: _HOST_\r\nConnection:close\r\nX-Request-ID: _REQUEST_ID_\r\n'], '': ['Content-Length: 5\r\n\r\nBBBBBBBBBB'],"> '':
[''],
'':
[''],
'':
[''],
'':
['GET', 'HEAD', 'POST', 'PUT', 'DELETE', 'CONNECT', 'OPTIONS', 'TRACE', 'PATCH'],
'':
[' '],
'':
['/_URI_'],
'':
['HTTP'],
'':
['/'],
'':
['0.9', '1.0', '1.1'],
'':
['\r\n'],
'':
['Host: _HOST_\r\nConnection:close\r\nX-Request-ID: _REQUEST_ID_\r\n'],
'':
['Content-Length: 5\r\n\r\nBBBBBBBBBB'],
Mutating Inputs Each component can be marked in two ways: string mutable and tree mutable (see (https://github.com/bahruzjabiyev/T-Reqs-HTTP-Fuzzer/blob/main/config) the example configuration). If a component is string mutable, then a random character can be deleted, replaced, or inserted at a random position. In the example shown below (left side), the last character in the protocol version (1) is deleted, the third letter in the method name (S) is replaced with R, and a forward slash is inserted at the beginning of the URI. Whereas, if a component is tree mutable, then a random component can be deleted, replaced, or inserted at a random position under that component. The example below (right side) shows three tree mutations applied on the request line component: 1) method is replaced by protocol, 2) an extra URI is inserted after the current URI, and 3) the existing proto< /em> is deleted.

___________________________
@hacking_Attack
@Hacking_Video

Usage Configuration The fuzzer should be informed about the user preferences about the generation and mutation of inputs. More specifically, the input grammar, the mutable components, mutation preferences among other things should be specified in the configuration file (see an example configuration (https://github.com/bahruzjabiyev/T-Reqs-HTTP-Fuzzer/blob/main/config)). Running modes To be able to reproduce the inputs generated and mutated in each iteration, a seed number is used. In fact, this seed number serves as a seed for random number generations during the formation and mutation of an input. Depending on how these seeds are fed into the fuzzer, it runs in one of these two modes: individual and collective. In the individual mode, inputs are generated and mutated based on the seeds specified by a user. In the command below, a single seed (i.e., 505) is specified. Alternatively, a list of seeds could be specified with -f option (see help page for more). python3 main.py -i -c config -s 505
Whereas, in the collective mode (which is default), it starts from zero as the seed value and increments it in each iteration until the end number is reached. The beginning and end numbers can be customized. python3 main.py -c config
Using for Finding HRS discrepancies HTTP Request Smuggling relies on different body parsing (https://www.kitploit.com/search/label/Parsing) behaviors between servers where one server uses Transfer-Encoding header while the other prefers Content-Length header to decide the boundaries of a request body, or one server ignores a request body, whereas the other one processes it. To analyze the body parsing of servers in response to various mutations in various forms of an HTTP request, we need to have a feedback mechanism installed on those servers to tell us about the body parsing behavior. One way of installing a feedback mechanism on a server, is to run the server in the reverse-proxy mode and have it forward requests to a "feedback provider" script running as a service. This service measures the length of the body in received requests and saves it for comparing it later with other servers. An example "feedback provider (https://github.com/bahruzjabiyev/T-Reqs-HTTP-Fuzzer/blob/main/code/feedback-server.py)" script is available in this repository. However, this script sends the body length information back in a response assuming that this information is stored on the client (https://www.kitploit.com/search/label/Client) side. License T-Reqs is licensed (https://github.com/bahruzjabiyev/T-Reqs-HTTP-Fuzzer/blob/main/LICENSE) under MIT license.

Download T-Reqs-HTTP-Fuzzer (https://github.com/bahruzjabiyev/T-Reqs-HTTP-Fuzzer)

___________________________
@hacking_Attack
@Hacking_Video

Security blog monetization?
https://www.reddit.com/r/Pentesting/comments/s9jt8g/security_blog_monetization/

Just wondering how others go about doing this - the most unobtrusive way without paywall or donation popups seemed to be ads, but the Google terms explicitly reference content about hacking being a disqualifier for being approved (and I've been rejected twice citing this). Other ad networks always seem so untrustworthy and spam-y, I refuse to do the paywall idea - information should be able to be shared without that kind of stuff. What kind of successful monetization have people been able to do that doesn't greatly inconvenience the user? submitted by /u/jsownz (https://www.reddit.com/user/jsownz)
[link] (https://www.reddit.com/r/Pentesting/comments/s9jt8g/security_blog_monetization/) [comments] (https://www.reddit.com/r/Pentesting/comments/s9jt8g/security_blog_monetization/)

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
T-Reqs-HTTP-Fuzzer - A Grammar-Based HTTP Fuzzer

http://1.bp.blogspot.com/-Khbgo1JP-Aw/Yd0MPvJz9UI/AAAAAAAA74o/oWRJXbWbEogc4-Q-0-KJ4u8e7Sa_aqwbACK4BGAYYCw/w304-h400/T-Reqs-HTTP-Fuzzer_1_logo-treqs-741914.png T-Reqs (Two Requests) is a grammar-based HTTP Fuzzer written as a part of the paper titled "T-Reqs: HTTP Request Smuggling with Differential Fuzzing" which was presented at ACM CCS 2021.
BibTeX of the paper: @inproceedings{ccs2021treqs,
title={T-Reqs: HTTP Request Smuggling with Differential Fuzzing},
author={Jabiyev, Bahruz and Sprecher, Steven and Onarlioglu, Kaan and Kirda, Engin},
booktitle={Proceedings of the 2021 ACM SIGSAC Conference on Computer and Communications Security},
pages={1805--1820},
year={2021}
} AboutT-Reqs is for fuzzing HTTP servers by sending mutated HTTP requests with versions 1.1 and earlier. It has three main components: 1) generating inputs, 2) mutating generated inputs and 3) delivering them to the target server(s). Generating InputsA CFG grammar fed into the fuzzer is used to generate HTTP requests. As the example grammar shown below is tailored for request line fuzzing, every request line component and possible values for each of them are explicitly specified. This allows us to generate valid requests with various forms of request line and also to treat each request line component as a separate unit from the mutation perspective. 'Mutating InputsEach component can be marked in two ways: string mutable and tree mutable (see the example configuration). If a component is string mutable, then a random character can be deleted, replaced, or inserted at a random position. In the example shown below (left side), the last character in the protocol version (1) is deleted, the third letter in the method name (S) is replaced with R, and a forward slash is inserted at the beginning of the URI. Whereas, if a component is tree mutable, then a random component can be deleted, replaced, or inserted at a random position under that component. The example below (right side) shows three tree mutations applied on the request line component: 1) method is replaced by protocol, 2) an extra URI is inserted after the current URI, and 3) the existing proto< /em> is deleted. http://1.bp.blogspot.com/--83UySBBHSw/Yd0MPz3GIUI/AAAAAAAA74w/PyUInqGo404j7IE6UpKZvXPRxUuOwJxxQCK4BGAYYCw/s320/T-Reqs-HTTP-Fuzzer_2_mutation-types-743097.png UsageConfigurationThe fuzzer should be informed about the user preferences about the generation and mutation of inputs. More specifically, the input grammar, the mutable components, mutation preferences among other things should be specified in the configuration file (see an example configuration). Running modesTo be able to reproduce the inputs generated and mutated in each iteration, a seed number is used. In fact, this seed number serves as a seed for random number generations during the formation and mutation of an input. Depending on how these seeds are fed into the fuzzer, it runs in one of these two modes: individual and collective. In the individual mode, inputs are generated and mutated based on the seeds specified by a user. In the command below, a single seed (i.e., 505) is specif[...]

___________________________
@hacking_Attack
@Hacking_Video

ied. Alternatively, a list of seeds could be specified with -f option (see help page for more). python3 main.py -i -c config -s 505 Whereas, in the collective mode (which is default), it starts from zero as the seed value and increments it in each iteration until the end number is reached. The beginning and end numbers can be customized. python3 main.py -c config Using for Finding HRS discrepanciesHTTP Request Smuggling relies on different body parsing behaviors between servers where one server uses Transfer-Encoding header while the other prefers Content-Length header to decide the boundaries of a request body, or one server ignores a request body, whereas the other one processes it.

To analyze the body parsing of servers in response to various mutations in various forms of an HTTP request, we need to have a feedback mechanism installed on those servers to tell us about the body parsing behavior. One way of installing a feedback mechanism on a server, is to run the server in the reverse-proxy mode and have it forward requests to a "feedback provider" script running as a service. This service measures the length of the body in received requests and saves it for comparing it later with other servers.

An example "feedback provider" script is available in this repository. However, this script sends the body length information back in a response assuming that this information is stored on the client side. LicenseT-Reqs is licensed under MIT license. Download T-Reqs-HTTP-Fuzzer

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Super Mario VM Walkthrough

https://cdn-images-1.medium.com/max/842/0*-BJJu_ymrjATwSfr.png
Makineyi indirebilirsiniz.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Hacking a Redis database — TryHackMe

https://cdn-images-1.medium.com/max/1234/1*WhoTAsWQBsQCaNrixl9Qog.png
Res is a vulnerable machine from Tryhackme it’s pretty easy to solve and all you need to know is on this website…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Una campaña respaldada por el gobierno del Reino Unido tiene como objetivo frustrar el uso del…

https://cdn-images-1.medium.com/max/1644/0*IWZwiyK40WlajZ__
PUBLICADO EN 21 ENERO, 2022POR EHACKING

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
A Quick Pentester Blueprint: Outline

https://cdn-images-1.medium.com/max/790/1*CM4YwG3wOw0l_yQMqSU-kQ.png
The Pentester Blueprint is a great resource if you are wanting to break into the offensive/defense security industry. I found this book to…

Continue reading on Nerd For Tech »

___________________________
@hacking_Attack
@Hacking_Video