Kali Linux Tutorials
IDA2Obj : Static Binary Instrumentation

IDA2Obj is a tool to implement SBI (Static Binary Instrumentation).

The working flow is simple:

* Dump object files (COFF) directly from one executable binary.
* Link the object files into a new binary, almost the same as the old one.
* During the dumping process, you can insert any data/code at any location.
* SBI is just one of the using scenarios, especially useful for black-box fuzzing.
How To Use

* Prepare the enviroment:
* Set AUTOIMPORT_COMPAT_IDA695 = YESin the idapython.cfgto support the API with old IDA 6.x style.
* Install dependency: pip install cough

* Create a folder as the workspace.
* Copy the target binary which you want to fuzz into the workspace.
* Load the binary into IDA Pro, choose Load resources and manually load to load all the segments from the binary.
* Wait for the auto-analysis done.
* Dump object files by running the script MagicIDA/main.py.
* The output object files will be inside ${workspace}/${module}/objs/afl.
* If you create an empty file named TRACE_MODEinside the workspace, then the output object files will be inside ${workspace}/${module}/objs/trace.
* By the way, it will also generate 3 files inside ${workspace}/${module}:
* exports_afl.def (used for linking)
* exports_trace.def (used for linking)
* hint.txt (used for patching)
* Generate lib files by running the script utils/LibImports.py.
* The output lib files will be inside ${workspace}/${module}/libs, used for linking later.

* Open a terminal and change the directory to the workspace.
* Link all the object files and lib files by using utils/link.bat.
* e.g. utils/link.bat GdiPlus dll afl /RELEASE
* It will generate the new binary with the pdb file inside ${workspace}/${module}.

* Patch the new built binary by using utils/PatchPEHeader.py.
* e.g. utils/PatchPEHeader.py GdiPlus/GdiPlus.afl.dll
* For the first time, you may need to run utils/register_msdia_run_as_administrator.batas administrator.

* Run & Fuzz.
Download

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Universities in India/Australia

i want to know about some best universities for penetration testing or EH in INdia or Australia

submitted by /u/shifted_soul
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Australian Red Cross Clients Caught Up in a Global Cyber Attack

https://external-preview.redd.it/gl4A-o0wmlTDxqwrsPsBTJ07H3vhILijbVJxzQouhRA.jpg?width=640&crop=smart&auto=webp&s=bfac5c1268afd5b1a6611bf0ba91f9e5a8c6f30c submitted by /u/djuyera
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Elon Musk’s Private Jet Tracked – Teen Demands $500,00 to Stop – Read Right Now

https://external-preview.redd.it/xabXQEVv3BUtalOL-er8TsnNOLH8YBW7N93lyDIMLok.jpg?width=640&crop=smart&auto=webp&s=1fd74a62c98b63a45aa9aa0187fdfcbd5d903624 submitted by /u/businesstells
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Vulnerability Capstone — Tryhackme

Vulnerability ResearchingContinue reading on Medium »
Read more...

How I was able to buy a product for free — $$$
https://radianid.medium.com/how-i-was-able-to-buy-a-product-for-free-e91516409ffc?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hi everyone, I hope you are good. It’s been a long time I haven’t write again. So in this article I will share about my finding..Continue reading on Medium » (https://radianid.medium.com/how-i-was-able-to-buy-a-product-for-free-e91516409ffc?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Vulnerability Capstone — Tryhackme
https://mukibas37.medium.com/vulnerability-capstone-tryhackme-b0e520720dcf?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Vulnerability ResearchingContinue reading on Medium » (https://mukibas37.medium.com/vulnerability-capstone-tryhackme-b0e520720dcf?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

rDEX Bug Bounty
https://olalekanalaka11.medium.com/rdex-bug-bounty-789934e94ff1?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

OverviewContinue reading on Medium » (https://olalekanalaka11.medium.com/rdex-bug-bounty-789934e94ff1?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

XSS Discovery and Exploitation With BurpSuite
https://medium.com/@kaorrosi/xss-discovery-and-exploitation-with-burpsuite-91d98865c1ee?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

I’ve recently completed TryHackMe’s cross-site-scripting room and PortSwigger’s XSS labs and here’s what I’ve learned! This piece assumes…Continue reading on Medium » (https://medium.com/@kaorrosi/xss-discovery-and-exploitation-with-burpsuite-91d98865c1ee?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Bluffy - Convert Shellcode Into Different Formats!
http://www.kitploit.com/2022/01/bluffy-convert-shellcode-into-different.html

___________________________
@hacking_Attack
@Hacking_Video