rs along with their example/type.
* Code simplification/refactoring.
* Enable cells editing to change API calls directly from the GUI.
* Further optimise the source code.
* Implement support for authenticated testing (via user-supplied API-keys).
* Improve the Param column by adding the type of parameters (e.g. inquery, inbody, etc.).
* Implement the tables and context menus.
* Increase the extension verbosity (via the bottom panel). Download

Hacking on Medium
How Machine Learning Has Become Essential in Stopping Spam and Bots

https://cdn-images-1.medium.com/max/640/0*by3Laf361zc6-gy-.jpg
Spam filters are essential. Without them we couldn’t cut through the noise of phishing scams and malware links to read our messages.

Continue reading on Netacea »

Hacking on Medium
OPSEC LESSONS

https://cdn-images-1.medium.com/max/1500/1*rOtqGdxw879f63zAaYRz3w.png
This will guide you on the interwebs for better security (suckit)…like literally suck it all up.

Continue reading on Medium »

Hacking on Medium
Ethereum and Solana Bridge falls victim to a $320,000,000 hack

https://cdn-images-1.medium.com/max/2600/0*OJT4cBYqrS-uj7e2
It’s happened again. A hacker in the field of DeFi got rich off a bug in the code, and he did so correctly.

Continue reading on The Capital »

Does VPN need to be set up on host or just the kali vm installed on the host?
https://www.reddit.com/r/Pentesting/comments/sjgj8y/does_vpn_need_to_be_set_up_on_host_or_just_the/

<!-- SC_OFF -->It might be a silly question but for a pen test exam they sent me an openvpn file to connect to their network. I have Windows as my main machine and Kali -Virtual box installed on that. Do I need to setup the vpn on my windows machine or just connect directly from kali? <!-- SC_ON --> submitted by /u/brucue (https://www.reddit.com/user/brucue)
[link] (https://www.reddit.com/r/Pentesting/comments/sjgj8y/does_vpn_need_to_be_set_up_on_host_or_just_the/) [comments] (https://www.reddit.com/r/Pentesting/comments/sjgj8y/does_vpn_need_to_be_set_up_on_host_or_just_the/)

Heaptrace - Helps Visualize Heap Operations For Pwn And Debugging
http://www.kitploit.com/2022/02/heaptrace-helps-visualize-heap.html

replaces addresses with easy-to-understand symbols detects heap corruption and memory leakage issues can debug in gdb at any point (--break) supports all ELF64 (x86_64) binaries regardless of ASLR or compiler (https://www.kitploit.com/search/label/Compiler) settings (including stripped binaries (https://github.com/Arinerron/heaptrace/wiki/Dealing-with-a-Stripped-Binary)) How are heaptrace and valgrind different? (https://github.com/Arinerron/heaptrace/wiki/Difference-between-heaptrace-and-valgrind)
Installation Official Releases See the .deb and .rpm release files, and a pre-compiled binary at the Releases page (https://github.com/Arinerron/heaptrace/releases/). Ubuntu PPA $ sudo add-apt-repository ppa:arinerron/heaptrace
$ sudo apt-get update
$ sudo apt-get install heaptrace
Arch User Repository (PKGBUILD) Use your preferred AUR helper to install one of the two following packages: heaptrace-git — source package (PKGBUILD (https://aur.archlinux.org/cgit/aur.git/plain/PKGBUILD?h=heaptrace-git)) heaptrace — binary package (PKGBUILD (https://aur.archlinux.org/cgit/aur.git/plain/PKGBUILD?h=heaptrace)) $ trizen -S heaptrace-git
... OR ...
$ trizen -S heaptrace
Compile from Source $ git clone https://github.com/Arinerron/heaptrace.git && cd heaptrace
$ make
$ sudo make install
...
$ heaptrace ./target Usage You can specify arguments to heaptrace before specifying the binary name: [args...] heaptrace [options...] --attach Options: -p , --attach , --pid Tells heaptrace to attach to the specified pid instead of running the binary from the `target` argument. Note that if you specify this argument you do not have to specify `target`. -b , --break=, --break-at= Send SIGSTOP to the process when the specified `expression` is satisfied and attach the GNU debugger (gdb) to the process. This argument supports complex expressions. Please See the documentation for more information: https://github.com/Arinerron/heaptrace/wiki/How-to-Create-Breakpoints -B , --break-after= Similar to `--break`. Replaces the tracer process with gdb, but only after the heap function returns. See the documentation for more information: https://github.com/Arinerron/heaptrace/wiki/How-to-Create-Breakpoints -e , --environ=, --environment= Sets a single environmental variable. Useful for setting runtime settings for the target such as LD_PRELOAD=./libc.so.6 without having them affect heaptrace's runtime configuration. This option can be used multiple times. -s , --symbols= Override the values heaptrace detects for the malloc/calloc/free/realloc/reallocarray symbols. Useful if heaptrace fails to automatically identify heap functions in a stripped binary. See the wiki for more info. -F, --follow-fork, --follow Tells heaptrace to detach the parent and follow the child if the target calls fork(), vfork(), or clone(). The default behavior is to detach the child and only trace the parent. -G , --gdb-path Tells heaptrace to use the path to gdb specified in `path` instead of /usr/bin/gdb (default). -w , --width=, --term-width= Force a certain terminal width. -o , --output= Write the heaptrace output to `file` instead of /dev/stderr (which is the default output path). -v, --verbose Prints verbose information such as line numbers in source code given the required debugging info is stored in the ELF. -V, --version Displays the current heaptrace version. -h, --help Shows this help menu. ">Usage:
heaptrace [options...] [args...]
heaptrace [options...] --attach

Options:
-p , --attach , --pid
Tells heaptrace to attach to the specified pid
instead of running the binary from the `target`
argument. Note that if you specify this argument
you do not have to specify `target`.


-b , --break=, --break-at=

Send SIGSTOP to the process when the specified
`expression` is satisfied and attach the GNU debugger
(gdb) to the process.

This argument supports complex expressions. Please
See the documentation for more information:
https://github.com/Arinerron/heaptrace/wiki/How-to-Create-Breakpoints


-B , --break-after=
Similar to `--break`. Replaces the tracer
process with gdb, but only af ter the heap function
returns. See the documentation for more information:
https://github.com/Arinerron/heaptrace/wiki/How-to-Create-Breakpoints


-e , --environ=, --environment=
Sets a single environmental variable. Useful for
setting runtime settings for the target such as
LD_PRELOAD=./libc.so.6 without having them affect
heaptrace's runtime configuration. This option can
be used multiple times.

-s , --symbols=
Override the values heaptrace detects for the
malloc/calloc/free/realloc/reallocarray symbols.
Useful if heaptrace fails to automatically
identify heap functions in a stripped binary. See
the wiki for more info.


-F, --follow-fork, --follow
Tells heaptrace to detach the parent and follow
the child if the target calls fork(), vfork(), or
clone().

The default behavior is to detach the child and
only trace the parent.


-G , --gdb-path
Tells heaptrace to use the path to gdb specified
in `path` instead of /usr/bin/gdb (default).


-w , --width=, --term-width=
Force a certain terminal width.


-o , --output=
Write the heaptrace output to `file` instead of
/dev/stderr (which is the default output path).


-v, --verbose
Prints verbose information such as line numbers in
source code given the required debugging info is
stored in the ELF.


-V, --version
Displays the current heaptrace version.


-h, --help
Shows this help menu.

For example, if you wanted to automatically attach gdb at operation #3, you would execute heaptrace --break=3 ./my-binary. Please see the wiki documentation (https://github.com/Arinerron/heaptrace/wiki/How-to-Create-Breakpoints) for more information on how to use this argument. See the wiki documentation (https://github.com/Arinerron/heaptrace/wiki/Dealing-with-a-Stripped-Binary) for more information on how to use the -s/--symbol argument to debug stripped binaries that heaptrace failed to automatically identify functions in. Set the $NO_COLOR argument to remove ANSI color codes from output. This option is still in development and will be converted into an argument soon. Support I'm happy to help if you experience a bug or have any feedback. Please see the GitHub Issues (https://github.com/Arinerron/heaptrace/issues) page.

Download Heaptrace (https://github.com/Arinerron/heaptrace)

Deep Web
Hacking

are deepweb socmed hackers legit?

submitted by /u/usernam30_0
[link] [comments]

UnderRated Tool For Pass-The-Hash[Evil-WinRM]
https://genesis1109.medium.com/underrated-tool-for-pass-the-hash-evil-winrm-50032872b79b?source=rss------bug_bounty-5

First Of all I’ll Describe What is Pass-The-Hash AttackContinue reading on Medium » (https://genesis1109.medium.com/underrated-tool-for-pass-the-hash-evil-winrm-50032872b79b?source=rss------bug_bounty-5)

hacking: security in practice
Was hacking a Trezor One hardware wallet really this simple?

Joe Grand shows in this video https://www.youtube.com/watch?v=dT9y-KQbqi4 how he managed to hack a Trezor One hardware wallet running firmware version 1.6.0.

Objective of the video was to obtain from the device RAM a 5 digit PIN in plaintext. At 28:40 this was accomplished alongside mnemonic pass phrase.

Given the level of security Trezor devices promise, this is laughably insecure.

Are Trezor devices still vulnerable to such attacks with todays firmware?

submitted by /u/PeteMarcus
[link] [comments]

hacking: security in practice
Here's How A Hacker Recovered $2 Million In Cryptocurrency From A Crypto Wallet For An Owner Who Forgot The Password

https://external-preview.redd.it/pVjXxOPFcE8EkEMslEAQuXkgitlmM-atr44Nnn2ZowU.jpg?width=640&crop=smart&auto=webp&s=ef2b0668aebbd4c41b035d3a49995a0d74d333da submitted by /u/noahthearc333
[link] [comments]

hacking: security in practice
Avira set a file in quarantine, what do I do?

Avira is detecting TR/XPACK.GEN2, file setup.exe

The file is in quarantine.

I can delete it, but how do I know if the computer is compromised?

I lost my login and a savy computer guy that i met in person somehow did a reset of my password, so i was able to set a new one.

But i do not know if he installed anything that I'm not aware of. My Antivirus detects what I mentioned.

Will Avira protect me against "anything"?

submitted by /u/_yarayara_
[link] [comments]