Dark Reading: Attacks/Breaches
Energy Sector Still Needs to Shut the Barn Door

One third of the companies studied haven't fixed their credential management — the same issue that led to the Colonial Pipeline hack last May.

hacking: security in practice
Finding vulnerabilities

Hi,

My uni asked me to write a paper about possible attacks I can perform on the uni website (it's a moodle). Any ideas on where can I start looking for vulnerabilities? It is very important for me and I don't want to look dumb

submitted by /u/Sarciteu
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Why do political movements like BLM not have hackers working for them?

I was always surprised whenever a new story came out about a black teen being killed by a cop that there was never an army of "black anonymous" hacking into redneck PD and doxxing everyone involved within a day.

Why does this never happen? Have we reached the point of technical maturity where even a basic small town police department is unhackable? Are hackers mostly white right wing people? Is there just no money in it?

submitted by /u/orders1-65
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How do you cover your tracks when using a reverse shell?

How do security experts / hackers approach this. I’m sure no one would just program the reverse shell to connect to one’s private server.

If it gets detected, it’s pretty much game over. But what’s the best approach to cover your tracks then?

Purchasing some online server somewhere and telling that server to forward any incoming reverse shell connections to your private computer? Or is there a better, more cost effective approach?

submitted by /u/immerdergewinner
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
IPTV Decoder

Hi guys,

I want to decode some premium channels in my ISP service. I have a Arris box from ISP. Can you help or teach how do I decode this premium channels?

Regards.

submitted by /u/ricascross
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How do hackers get so many emails?

1. How do they know who?

2.
How do they get the addresses?

3.
How do they send so many messages at once without people stopping them?
submitted by /u/iExtrapolate314
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

North Korea's Lazarus APT leverages Windows Update client, GitHub in latest campaign
https://www.reddit.com/r/redteamsec/comments/sf4bzp/north_koreas_lazarus_apt_leverages_windows_update/

submitted by /u/dmchell (https://www.reddit.com/user/dmchell)
[link] (https://blog.malwarebytes.com/threat-intelligence/2022/01/north-koreas-lazarus-apt-leverages-windows-update-client-github-in-latest-campaign/) [comments] (https://www.reddit.com/r/redteamsec/comments/sf4bzp/north_koreas_lazarus_apt_leverages_windows_update/)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Testing for Local File Inclusion Vulnerability-Part 2

https://cdn-images-1.medium.com/max/600/1*oQliV2Tw0lnL-bwvF8kuWA.gif
This is the second part of the LFI walkthrough. Check out Part 1 in case you missed it. Power up your brain and let’s have a ride!

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
HTB Meow (Telnet)

https://cdn-images-1.medium.com/max/1050/1*ZVmMtCVcGJj7CYYB6UpoPw.png
As the first box, this box helps with the set up of the machine.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Video file Reverse shell attack

Hello: I am attempting to find an exploit on my Vizio smart tv. Is it possible to open a reverse shell using a media file?

submitted by /u/ynghuncho
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
File binder

I need a file binder that runs on Linux to bind a script to a video file

submitted by /u/ynghuncho
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How Hackers Hack

https://cdn-images-1.medium.com/max/1280/0*gla3BNMJX1WEHeKa
Before I jumped into the world of Computer Science and Information Security, I thought you needed to be a fast typing genius that’s locked…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Why PCI DSS can be really, really hard!

https://external-preview.redd.it/uC3JgMbvHlF8YIkoCcLQ94bXjQKcSjU03k9gFmr5ykA.jpg?width=640&crop=smart&auto=webp&s=0d100b82a0f50844d9c15b9656326e8a805a2961 submitted by /u/AssociationBusy5717
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
ClusterFuzzLite : Simple Continuous Fuzzing That Runs In CI

ClusterFuzzLite is a continuous fuzzing solution that runs as part of Continuous Integration (CI) workflows to find vulnerabilities faster than ever before. With just a few lines of code, GitHub users can integrate ClusterFuzzLite into their workflow and fuzz pull requests to catch bugs before they are committed.

ClusterFuzzLite is based on ClusterFuzz. Features

* Quick code change (pull request) fuzzing to find bugs before they land
* Downloads of crashing testcases
* Continuous longer running fuzzing (batch fuzzing) to asynchronously find deeper bugs missed during code change fuzzing and build a corpus for use in code change fuzzing
* Coverage reports showing which parts of your code are fuzzed
* Modular functionality, so you can decide which features you want to use

Supported Languages

* C
* C++
* Java (and other JVM-based languages)
* Go
* Python
* Rust
* Swift Supported CI Systems

* GitHub Actions
* Google Cloud Build
* Prow
* Support for more CI systems is in-progess, and extending support to other CI systems is easy Supported Fuzzing Engine and Sanitizers

* libFuzzer for coverage-guided testing
* AddressSanitizer for finding memory safety issues
* MemorySanitizer for finding use of uninitialized memory
* UndefinedBehaviorSanitizer for finding undefined behavior (e.g. integer overflows)

Introducing fuzzing with libFuzzer and Sanitizers.

This section provides an overview of the fuzzing process and defines common terms. If you are already familiar with libFuzzer and Sanitizers, feel free to skip to Step 1: Build Integration to begin writing fuzzers and integrating with ClusterFuzzLite’s build system. Fuzzing

Fuzzing is a technique where randomized inputs are automatically created and fed as input to a (target) program in order to find bugs in that program. The program that creates the inputs is called a fuzzer. Fuzzing is highly effective at finding bugs missed by manually written tests, code review, or auditing. Fuzzing has found thousands of bugs in mature software such as Chrome, OpenSSL, and Curl. When done well, fuzzing is able to find bugs in virtually any code. libFuzzer

LibFuzzer is a fuzzer (sometimes called a fuzzing engine) that mutates inputs and feeds them to target code in a loop. During execution of the target on the input, libFuzzer observes the coverage of the code under test using instrumentation inserted by the compiler. LibFuzzer uses this coverage feedback to “evolve” progressively more interesting inputs and reach deeper program states, allowing it to find interesting bugs with little developer effort. Fuzz target

To fuzz target code, you must define a function called a fuzz target with the following API:

fuzz_target.cc
extern “C” int LLVMFuzzerTestOneInput(const uint8_t *Data, size_t Size) {
DoSomethingInterestingWithMyAPI(Data, Size);
return 0; // Non-zero return values are reserved for future use.
}

Clang’s -fsanitizer=fuzzeroption will link this fuzz target function against libFuzzer, producing a fuzzer binary that will fuzz your target code when run. Note that in ClusterFuzzLite, you will not use this flag directly. Instead, you should use the $LIB_FUZZING_ENGINEenvironment variable, which is discussed in more detail in Step 1: Build Integration. Sanitizers

Sanitizers are tools that detect bugs in code (typically “native code” such as C/C++, Rust, Go, and Swift) and report bugs by crashing. ClusterFuzzLite relies on sanitizers to detect bugs that would otherwise be missed. Sanitizers work by instructing clang to add compile-time instrumentation, so different builds are needed to use different sanitizers.

The sanitizers ClusterFuzzLite uses are:

* AddressSanitizer (ASan) : For detecting memory safety is[...]

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Crawpy : Yet Another Content Discovery Tool

Crawpy is Yet another content discovery tool written in python.

What makes this tool different than others:

* It is written to work asynchronously which allows reaching to maximum limits. So it is very fast.
* Calibration mode, applies filters on its own
* Has bunch of flags that helps you fuzz in detail
* Recursive scan mode for given status codes and with depth
* Report generations, you can later go and check your results
* Multiple url scans

Example reports

Example reports can be found here

https://morph3sec.com/crawpy/example.html
https://morph3sec.com/crawpy/example.txt

Installation

git clone https://github.com/morph3/crawpy
pip3 install -r requirements.txt
or
python3 -m pip install -r requirements.txt

Usage

morph3 ➜ crawpy/ [main✗] λ python3 crawpy.py –help
usage: crawpy.py [-h] [-u URL] [-w WORDLIST] [-t THREADS] [-rc RECURSIVE_CODES] [-rp RECURSIVE_PATHS] [-rd RECURSIVE_DEPTH] [-e EXTENSIONS] [-to TIMEOUT] [-follow] [-ac] [-fc FILTER_CODE] [-fs FILTER_SIZE] [-fw FILTER_WORD] [-fl FILTER_LINE] [-k] [-m MAX_RETRY]
[-H HEADERS] [-o OUTPUT_FILE] [-gr] [-l URL_LIST] [-lt LIST_THREADS] [-s] [-X HTTP_METHOD] [-p PROXY_SERVER]
optional arguments:
-h, –help show this help message and exit
-u URL, –url URL URL
-w WORDLIST, –wordlist WORDLIST
Wordlist
-t THREADS, –threads THREADS
Size of the semaphore pool
-rc RECURSIVE_CODES, –recursive-codes RECURSIVE_CODES
Recursive codes to scan recursively Example: 301,302,307
-rp RECURSIVE_PATHS, –recursive-paths RECURSIVE_PATHS
Recursive paths to scan recursively, please note that only given recursive paths will be scanned initially Example: admin,support,js,backup
-rd RECURSIVE_DEPTH, –recursive-depth RECURSIVE_DEPTH
Recursive scan depth Example: 2
-e EXTENSIONS, –extension EXTENSIONS
Add extensions at the end. Seperate them with comas Example: -x .php,.html,.txt
-to TIMEOUT, –timeout TIMEOUT
Timeouts, I suggest you to not use this option because it is procudes lots of erros now which I was not able to solve why
-follow, –follow-redirects
Follow redirects
-ac, –auto-calibrate
Automatically calibre filter stuff
-fc FILTER_CODE, –filter-code FILTER_CODE
Filter status code
-fs FILTER_SIZE, –filter-size FILTER_SIZE
Filter size
-fw FILTER_WORD, –filter-word FILTER_WORD
Filter words
-fl FILTER_LINE, –filter-line FILTER_LINE
Filter line
-k, –ignore-ssl Ignore untrusted SSL certificate
-m MAX_RETRY, –max-retry MAX_RETRY
Max retry
-H HEADERS, –headers HEADERS
Headers, you can set the flag multiple times.For example: -H “X-Forwarded-For: 127.0.0.1”, -H “Host: foobar”
-o OUTPUT_FILE, –output OUTPUT_FILE
Output folder
-gr, –generate-report
If you want crawpy to generate a report, default path is crawpy/reports/.txt
-l URL_LIST, –list URL_LIST
Takes a list of urls as input and runs crawpy on via multiprocessing -l ./urls.txt
-lt LIST_THREADS, –list-threads LIST_THREADS
Number of threads for running crawpy parallely when running with list of urls
-s, –silent Make crawpy not produce output
-X HTTP_METHOD, –http-method HTTP_METHOD
HTTP request method
-p PROXY_SERVER, –proxy PROXY_SERVER
Proxy server, ex: ‘http://127.0.0.1:8080’

Examples

python3 crawpy.py -u https://facebook.com/FUZZ -w ./common.txt -k -ac -e .php,.html
python3 crawpy.py -u https://google.com/FUZZ -w ./common.txt -k -fw 9,83 -rc 301,302 -rd 2 -ac
python3 crawpy.py -u https://morph3sec.com/FUZZ -w ./common.txt -e .php,.html -t 20 -ac -k
python3 crawpy.py -u https://google.com/FUZZ -w ./common.txt -ac -gr
python3 crawpy.py -u https://google.com/FUZZ -w ./common.txt -ac -gr -o /tmp/test.txt
sudo python3 crawpy.py -l urls.txt -lt 20 -gr -w ./common.txt -t 20 -o custom_reports -k -ac -s
python3 crawpy.py -u https://google.com/FUZZ -w ./common.txt -ac -gr -rd 1 -rc 302,301 -rp admin,backup,support -k Download

___________________________
@hacking_Attack
@Hacking_Video