Hacking on Medium
(pt-br) Rootme — TryHackMe

https://cdn-images-1.medium.com/max/1350/1*lXKKKdo3EUXVJOBrN1KvTQ.png
Um simples write-up de como resolver o CTF rootme na plataforma TryHackMe. Não se apegue nas ferramentas usadas, mas nas técnicas.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Ghidra JDK home directory issue

I downloaded Ghidra from here
wget https://github.com/NationalSecurityAgency/ghidra/releases/download/Ghidra_10.1.1_build/ghidra_10.1.1_PUBLIC_20211221.zip
Extract it
7z x ghidra_10.1.1_PUBLIC_20211221.zip
Change directory
cd ghidra_10.1.1_PUBLIC
List directory
$ ls -lh total 48K drwxr-xr-x 5 user user 4.0K Dec 21 13:41 docs drwxr-xr-x 5 user user 4.0K Dec 21 13:41 Extensions drwxr-xr-x 9 user user 4.0K Dec 21 13:41 Ghidra -rwxr-xr-x 1 user user 883 Dec 21 13:41 ghidraRun -rw-r--r-- 1 user user 344 Dec 21 13:41 ghidraRun.bat drwxr-xr-x 6 user user 4.0K Dec 21 13:41 GPL -rw-r--r-- 1 user user 12K Dec 21 13:41 LICENSE drwxr-xr-x 2 user user 4.0K Dec 21 13:41 licenses drwxr-xr-x 2 user user 4.0K Dec 21 13:41 server drwxr-xr-x 2 user user 4.0K Dec 21 13:41 support
Run the binary, but need to specify JDK path
$ ./ghidraRun Picked up _JAVA_OPTIONS: -Dawt.useSystemAAFontSettings=on -Dswing.aatext=true Picked up _JAVA_OPTIONS: -Dawt.useSystemAAFontSettings=on -Dswing.aatext=true ****************************************************************** JDK 11+ (64-bit) could not be found and must be manually chosen! ****************************************************************** Enter path to JDK home directory (ENTER for dialog):
So, I checked Java version
$ java --version Picked up _JAVA_OPTIONS: -Dawt.useSystemAAFontSettings=on -Dswing.aatext=true openjdk 11.0.12 2021-07-20 OpenJDK Runtime Environment (build 11.0.12+7-post-Debian-2) OpenJDK 64-Bit Server VM (build 11.0.12+7-post-Debian-2, mixed mode, sharing)
I also checked java path
$ which java /usr/bin/java
And it's realpath
$ realpath /usr/bin/java /usr/lib/jvm/java-11-openjdk-amd64/bin/java
However, when I put the directory, I'm getting the following error
$ ./ghidraRun Picked up _JAVA_OPTIONS: -Dawt.useSystemAAFontSettings=on -Dswing.aatext=true Picked up _JAVA_OPTIONS: -Dawt.useSystemAAFontSettings=on -Dswing.aatext=true ****************************************************************** JDK 11+ (64-bit) could not be found and must be manually chosen! ****************************************************************** Enter path to JDK home directory (ENTER for dialog): /usr/lib/jvm/java-11-ope Not a valid JDK home directory. Not a directory! Enter path to JDK home directory (ENTER for dialog): /usr/lib/jvm/java-11-ope Not a valid JDK home directory. Missing bin directory! Enter path to JDK home directory (ENTER for dialog): /usr/lib/jvm/java-11-ope Not a valid JDK home directory. JDK is missing javac executable! Enter path to JDK home directory (ENTER for dialog):
What's wrong in this case? What should I do to fix it?

submitted by /u/w0lfcat
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
OSINT digital intelligence

What are some uncommon methods do you know of gathering info of targets?

Any suggesions for softwares used by intelligence and law agencies for investigations and information gathering?

example-Cellebrite

submitted by /u/thecirclingfly
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

How I was able to find multiple vulnerabilities of a Symfony Web Framework web application
https://rootintrud3r.medium.com/how-i-was-able-to-find-multiple-vulnerabilities-of-a-symfony-web-framework-web-application-2b82cd5de144?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Found high severity vulnerability just from reconnaissance. Found multiple vulnerabilities on a web application that used the Symfony web…Continue reading on Medium » (https://rootintrud3r.medium.com/how-i-was-able-to-find-multiple-vulnerabilities-of-a-symfony-web-framework-web-application-2b82cd5de144?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

How I was able to find multiple vulnerabilities of a Symfony Web Framework web application

Found high severity vulnerability just from reconnaissance. Found multiple vulnerabilities on a web application that used the Symfony web…Continue reading on Medium »
Read more...

Setting up a Free VPS for Bug Bounty & More

Finding Bugs can be Time consuming and as for day-to-day life, you are not sitting on your one computer all day unless you are a…Continue reading on Medium »
Read more...

Setting up a Free VPS for Bug Bounty & More
https://nafish.medium.com/setting-up-a-free-vps-for-bug-bounty-more-76890bede56?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Finding Bugs can be Time consuming and as for day-to-day life, you are not sitting on your one computer all day unless you are a…Continue reading on Medium » (https://nafish.medium.com/setting-up-a-free-vps-for-bug-bounty-more-76890bede56?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Hacker Kaise Bane?

Aaj kal hacker yah word har kisi ko attract karne wala lagta hai. isliye kai log hacker banne ka sapna dekhte hai. lekin bahut se log nahi…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Setting up a Free VPS for Bug Bounty & More

https://cdn-images-1.medium.com/max/2600/0*ERgxNYK_4TpudKtT
Finding Bugs can be Time consuming and as for day-to-day life, you are not sitting on your one computer all day unless you are a…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Log4Shell Vulnerability

A new digital robbery has appeared in the world of cybersecurity. Rumours of a new zero-day vulnerability, Log4Shell, affecting several Minecraft servers surfaced on December 9th, 2021. A zero-day vulnerability is an exploit or flaw that is new and has not yet been studied by researchers or analysts. read more

submitted by /u/insights2techinfo
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Fuzzing is always fun..!!
https://pullakarthik5.medium.com/fuzzing-is-always-fun-1697af1a69fe?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hello Everyone,Continue reading on Medium » (https://pullakarthik5.medium.com/fuzzing-is-always-fun-1697af1a69fe?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video