Hacking Articles Tips Tricks Videos Tutorials

The network data and utf-8 decoded text

Today I want to share something about the network data and the utf-8 decoded text. I think we really should know what is going on during…Continue reading on Medium »
Read more...

9 views02:15

From the hacking community on Reddit

hacking: security in practice
how do hackers find out people's location?

I am no expert on the matter hence why this post is up. I know that you can see the area that someone is in with an ip adress but is there a way for experienced people to pinpoint an exact adress without going on facebook or other websites that may contain pictures or information about you?

thanks!

submitted by /u/ChadSh1tOnly
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Explore this post and more from the hacking community

8 viewsedited 02:55

MS Word Password protected without a hash

hacking: security in practice
MS Word Password protected without a hash

My elderly neighbor is wanting to work on his book he started years ago. He had it saved on floppy disc so I bought a reader and pulled the files off. He doesn't remember the password so I told him I would try to brute force. I don't know how to without a hash though. I am thinking it is a Microsoft 97 document. It says 97-2004. How would you all handle this? Appreciate your help.

submitted by /u/SendtoJeffSmith
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

My elderly neighbor is wanting to work on his book he started years ago. He had it saved on floppy disc so I bought a reader and pulled the files...

7 viewsedited 02:55

How screwed up can this company be?

hacking: security in practice
How screwed up can this company be?

I was just playing around in a website when I found a path where all the resumes that people send to the company can be found.

There is more than 100 PDF files of people containing a lot of information, such as: address, age, marital status and everything that a resume typically contain.

Is that company breaking some law by doing this? How bad can this situation be for them?

I sent an e-mail for them talking about the problem, but no response yet.

submitted by /u/Im_MrLonely
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

I was just playing around in a website when I found a path where all the resumes that people send to the company can be found. There is more than...

8 viewsedited 02:55

The network data and utf-8 decoded text
https://gulizhiguhao.medium.com/the-network-data-and-utf-8-decoded-text-a8a61864a0ea?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

The network data and utf-8 decoded text

Today I want to share something about the network data and the utf-8 decoded text. I think we really should know what is going on during…

7 viewsedited 03:09

6 views03:09

Today I want to share something about the network data and the utf-8 decoded text. I think we really should know what is going on during…Continue reading on Medium » (https://gulizhiguhao.medium.com/the-network-data-and-utf-8-decoded-text-a8a61864a0ea?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

The network data and utf-8 decoded text

Today I want to share something about the network data and the utf-8 decoded text. I think we really should know what is going on during…

7 viewsedited 03:09

AWS-Loot - Pull Secrets From An AWS Environment

Searches an AWS environment looking for secrets, by enumerating environment variables and source code. This tool allows quick enumeration over large sets of AWS instances and services. Install pip install -r requirements.txt An AWS credential file (.aws/credentials) is required for authentication to the target environment Access Key Access Key Secret How it works Awsloot works by going through EC2, Lambda, CodeBuilder instances and searching for high entropy strings. The EC2 Looter works by querying all available instance ID's in all regions and requesting instance's USERDATA where often developers leave secrets. The Lambda looter operates across regions as well. Lambada looter can search all available versions of a found function. It starts by searching the functions environment variables then downloads the source code and scans the source for secrets. The Codebuilder Looter works by searching for build instances and searching those builds for environment variables that might contain secrets. Usage Python3 awsloot.py Next Features Allow users to specify an ARN to scan Looter for additional services Download AWS-Loot
Read more...

___________________________
@hacking_Attack
@Hacking_Video

7 viewsedited 03:18

8 views04:12

Hacking on Medium
The network data and utf-8 decoded text

https://cdn-images-1.medium.com/max/1080/1*AbxYh2MJLdkQvBkDe-y-OA.png
Today I want to share something about the network data and the utf-8 decoded text. I think we really should know what is going on during…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

The network data and utf-8 decoded text

Today I want to share something about the network data and the utf-8 decoded text. I think we really should know what is going on during…

8 viewsedited 04:12

8 views06:55

Hack your Brain - DIY brain-computer interfaces have arrived

hacking: security in practice
Hack your Brain - DIY brain-computer interfaces have arrived

https://github.com/Ildaron/EEGwithRaspberryPI

submitted by /u/SpecificAd3444
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

[https://github.com/Ildaron/EEGwithRaspberryPI](https://github.com/Ildaron/EEGwithRaspberryPI)

9 viewsedited 06:55

I ran a netstat command on windows and found a destination port 4444. I searched web for what it was for but found keywords like malware ,...

hacking: security in practice
Is port 4444 malicious?

I ran a netstat command on windows and found a destination port 4444. I searched web for what it was for but found keywords like malware , metasploit and trojan. So should I be worried? Ps: I am just a beginner student studying for comptia a+ so please excuse my tech lingo Update:- hey guys so i used tcpVeiw tool from sysinternals and found out process named firefox.exe is using port 4444 as remote port

submitted by /u/serverghost_exe
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Is port 4444 malicious?

11 viewsedited 06:55

10 views08:12

Hacking on Medium
What is Ethical Hacking?

https://cdn-images-1.medium.com/max/2000/1*FbpCSKZbXm8bIDPtHgxyBg.png
We now live in a digital age, in which nearly everything is online and connected to the Internet. Keeping everything digital makes life a…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

We now live in a digital age, in which nearly everything is online and connected to the Internet. Keeping everything digital makes life a…

What is Ethical Hacking?

13 viewsedited 08:12

Dump Information for Process using GetTokenInformation
https://www.reddit.com/r/redteamsec/comments/sp2l5t/dump_information_for_process_using/

In this post, you will get a very thorough step-by-step walkthrough on building your own process token dumper in the c++ which will help you in knowing your target better before launching another post exploitation attack. https://tbhaxor.com/dumping-token-information-in-windows/  submitted by /u/tbhaxor (https://www.reddit.com/user/tbhaxor)
[link] (https://www.reddit.com/r/redteamsec/comments/sp2l5t/dump_information_for_process_using/) [comments] (https://www.reddit.com/r/redteamsec/comments/sp2l5t/dump_information_for_process_using/)

13 views09:39

9 views10:34

Black Hat Ethical Hacking
PHP Everywhere RCE flaws threaten thousands of WordPress sites

https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png PHP Everywhere RCE flaws threaten thousands of WordPress sitesPost Views: 176 https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/BECOME-A-PATRON-AND-UNLOCK-EXCLUSIVE-VIDEOS-1.png Reading Time: 1 Minute
Researchers found three critical remote code execution (RCE) vulnerabilities in the ‘PHP Everywhere’ plugin for WordPress, used by over 30,000 websites worldwide.
PHP Everywhere is a plugin that allows WordPress admins to insert PHP code in pages, posts, the sidebar, or any Gutenberg block, and use it to display dynamic content based on evaluated PHP expressions. Three RCE flawsThe three vulnerabilities were discovered by security analysts at Wordfence and can be exploited by contributors or subscribers, affecting all WordPress versions from 2.0.3 and below.

Here’s a short description of the flaws:

* CVE-2022-24663 – Remote code execution flaw exploitable by any subscriber by allowing them to send a request with the ‘shortcode’ parameter set to PHP Everywhere, and execute arbitrary PHP code on the site. (CVSS v3 score: 9.9)
* CVE-2022-24664 – RCE vulnerability exploitable by contributors via the plugin’s metabox. An attacker would create a post, add a PHP code metabox, and then preview it. (CVSS v3 score: 9.9)
* CVE-2022-24665 – RCE flaw exploitable by contributors who have the ‘edit_posts’ capability and can add PHP Everywhere Gutenberg blocks. Default security setting on vulnerable plugin versions isn’t on ‘admin-only’ as it should be. (CVSS v3 score: 9.9)

While the last two flaws aren’t easily exploitable as they require contributor-level permissions, the first vulnerability is a lot more open to broader exploitation as it can be exploited by just being a subscriber on the site.

For example, a logged-in customer on a site is considered a ‘subscriber,’ so merely registering on the target platform would be enough to gain enough privileges for malicious PHP code execution.

In all cases, executing arbitrary code on a site can lead to a complete site takeover, which is the worst possible scenario in website security.
See Also: Complete Offensive Security and Ethical Hacking Course Fix only for Block editorWordfence’s team discovered the vulnerabilities on January 4, 2022, and informed the author of PHP Everywhere of its findings.

The vendor released a security update on January 10, 2022, with version 3.0.0, which took a major version number bump because it required a substantial code rewrite.

While the developers fixed the update last month, it is not uncommon for admins to not regularly update their WordPress site and plugins. According to the download stats on WordPress.org, only 15,000 installs out of 30,000 have updated the plugin since the bugs were fixed.
See Also: Windows vulnerability with new public exploits lets you become admin Therefore, due to the severity of these vulnerabilities, all users of PHP Everywhere are strongly advised to make sure they have upgraded to PHP Everywhere version 3.0.0, which is the latest available at this time.

Note that if you’re using the Classic Editor on your site, you will need to uninstall the plugin and find another solution for hosting custom PHP code on its components.

That is because version 3.0.0 only supports PHP snippets via the Block editor, and it’s unlikely that the author will work on restoring functionality for the sun-setting Classic.
See Also: Offensive Security Tool: Stratus Red Team
Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, O[...]

10 views10:34