hacking: security in practice
CompTIA (Security+, Linux+, Network+) PBQs - Labs and more | Happy learning

Hola community,

Extra PBQs to support your studies.

Free CompTIA A+ Core 2 PBQs: https://dojolab.org/labs/comptia-a-220-1002-dojo-lab/

Free CompTIA Network+ PBQs: https://dojolab.org/labs/comptia-network-n10-007-n10-008-dojo-lab/

Free CompTIA Security+ PBQs: https://dojolab.org/labs/comptia-security-sy0-601-dojo-lab/

Free CompTIA Linux+ PBQs: https://dojolab.org/labs/comptia-linux-xk0-004-dojo-lab/

Happy learning

submitted by /u/Complex_Temperature5
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How do I get Ciphey to use more cores for decryption?

im trying to crack a hash with ciphey but its taking forever and the process is only using one core.

repo: https://github.com/Ciphey/Ciphey

OS: Arch Linux x86_64 Kernel: 5.16.9-zen1-1-zen CPU: Intel i5-3570K (4) @ 4.500GHz GPU: NVIDIA GeForce GTX 770 Memory: 2310MiB / 15960MiB

submitted by /u/dominic_l
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

My First Reflected XSS Bug Bounty — Google Dork — $xxx

Today I will share a Reflected XSS vulnerability that was reported by me and i found this with google dorks…Continue reading on InfoSec Write-ups »
Read more...

What is CSRF Attack ?

Cross-Site Request Forgery (CSRF) is an attack that forces authenticated users to submit a request to a Web application against which they…Continue reading on Medium »
Read more...

Hacked Dutch Government Website. All I got was this l̶o̶u̶s̶y̶ cool T-Shirt.

They are right. Persistence is the key !Continue reading on Medium »
Read more...

Hacking on Medium
This iOS Security Flaw Needs To Be Addressed In Every App

https://cdn-images-1.medium.com/max/1170/1*VC_Sn04kQCmjR6t3gKfP9g.png
A flaw in the way iOS handles app uninstalls means that sensitive Keychain data isn’t deleted when the rest of the app’s user content is…

Continue reading on Medium »

Hacking on Medium
Hacked Dutch Government Website. All I got was this l̶o̶u̶s̶y̶ cool T-Shirt.

https://cdn-images-1.medium.com/max/600/1*qm0P1x8h6XYjwEw637zRaQ.png
They are right. Persistence is the key !

Continue reading on Medium »

Hacking on Medium
Free OWASP TOP 10 Playground on herokuapp

https://cdn-images-1.medium.com/max/2401/1*DazaNUTki-qxygr2nQZngQ.png
Juice Shop is a vulnerable webapp written in Node.js, Express and Angular. It was the first application written entirely in JavaScript…

Continue reading on Medium »

Hacking on Medium
Cybersecurity Breaches & Solutions | Feb 16th, 2022

https://cdn-images-1.medium.com/max/1920/1*7Im7z7Fm9F_cy2gPk1iloA.png
Severe Vulnerabilities on Apple & Moxa, and an Ominous Rise in DDoS Attacks

Continue reading on HUB Security »

Hacking on Medium
Top 10 OSINT Tools Used In Cybersecurity

https://cdn-images-1.medium.com/max/2600/1*ojUOoQkfcsxDs4rz9kaaRA.jpeg
1. OSINT Framework

Continue reading on Medium »

Hacking on Medium
Hacking? Hacker? What?

https://cdn-images-1.medium.com/max/600/0*aRNF-FSZvouTv2Pe
When someone mentions the term “Hacker” why does the mind directly picture a hooded figure in front of a laptop with a black screen…

Continue reading on Medium »

KitPloit - PenTest Tools!
FakeLogonScreen - Fake Windows Logon Screen To Steal Passwords

http://4.bp.blogspot.com/-20diIlff9Es/Yd0ernCa4RI/AAAAAAAA8j0/mhGTik-X11w_7sfEWP1_uIorfkCZSpDEwCK4BGAYYCw/w640-h400/fakelogonscreen_1_demo-761682.gif
FakeLogonScreen is a utility to fake the Windows logon screen in order to obtain the user's password. The password entered is validated against the Active Directory or local machine to make sure it is correct and is then displayed to the console or saved to disk.

It can either be executed by simply running the .exe file, or using for example Cobalt Strike's execute-assemblycommand.
Binaries available from the Releases page.

* FakeLogonScreen.exe: Writes output to console which for example is compatible with Cobalt Strike
* FakeLogonScreenToFile.exe: Writes output to console and %LOCALAPPDATA%\Microsoft\user.db

Folders:

* / (root): Built against .NET Framework 4.5 which is installed by default in Windows 8, 8.1 and 10
* DOTNET35: Built against .NET Framework 3.5 which is installed by default in Windows 7

Features

* Primary display shows a Windows 10 login screen while additional screens turn black
* If custom background is configured by the user, shows that background instead of the default one
* Validates entered password before closing the screen
* Username and passwords entered are outputted to console or stored in a file
* Blocks many shortkeys to prevent circumventing the screen
* Minimizes all existing windows to avoid other windows staying on top
Authored by Arris Huijgen (@bitsadmin - https://github.com/bitsadmin/)
Download Fakelogonscreen

FakeLogonScreen - Fake Windows Logon Screen To Steal Passwords
http://www.kitploit.com/2022/02/fakelogonscreen-fake-windows-logon.html

FakeLogonScreen is a utility to fake the Windows logon screen in order to obtain the user's password. The password entered is validated against the Active Directory (https://www.kitploit.com/search/label/Active%20Directory) or local machine to make sure it is correct and is then displayed to the console (https://www.kitploit.com/search/label/Console) or saved to disk. It can either be executed by simply running the .exe file, or using for example Cobalt Strike's execute-assembly command.
Binaries available from the Releases (https://github.com/bitsadmin/fakelogonscreen/releases) page. FakeLogonScreen.exe: Writes output to console which for example is compatible with Cobalt Strike FakeLogonScreenToFile.exe: Writes output to console and %LOCALAPPDATA%\Microsoft\user.db Folders: / (root): Built against .NET Framework 4.5 which is installed by default in Windows 8, 8.1 and 10 DOTNET35: Built against .NET Framework 3.5 which is installed by default in Windows 7 Features Primary display shows a Windows 10 (https://www.kitploit.com/search/label/Windows%2010) login screen while additional screens turn black If custom background is configured by the user, shows that background instead of the default one Validates entered password before closing the screen Username and passwords (https://www.kitploit.com/search/label/Passwords) entered are outputted to console or stored in a file Blocks many shortkeys to prevent circumventing the screen Minimizes all existing windows to avoid other windows staying on top
Authored by Arris Huijgen (@bitsadmin (https://twitter.com/bitsadmin/) - https://github.com/bitsadmin/)

Download Fakelogonscreen (https://github.com/bitsadmin/fakelogonscreen)

Hacking Articles|Raj Chandel's Blog
Windows Privilege Escalation: SpoolFool

Windows Privilege Escalation: SpoolFoolIntroduction<o:pOliver Lyak posted a writeup about a Windows Privilege Escalation vulnerability that persisted in Windows systems even after patching of previous vulnerabilities in Print Spooler CVE-2020-1048 and CVE-2020-1337. Oliver was assigned CVE-2022-21999 for this vulnerability and commonly named it as “SpoolFool.” In this article, we will discuss the technical details associated with the same and demonstrate two methods through which an attacker can leverage and gain escalated privileges as NT AUTHORITY\SYSTEM.<o:p

Related advisories: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21999<o:p

Related CVEs: CVE-2022-21999, CVE-2020-1030, CVE-2020-1337, CVE-2020-1048<o:p Summary of the Vulnerability<o:pThe vulnerability allows an unprivileged user to create arbitrary and writeable directories by configuring SpoolDirectory attribute on a printer. Since an unprivileged user is allowed to add remote printers, an attacker can create a remote printer and grant EVERYONE right to manage this printer. This would return a handle with PRINTER_ACCESS_ADMINISTER right which can be further used to perform task such as DLL injection.<o:p Print Spooler Basics<o:pPrint spooler is the primary printing process interface. It is a built in EXE file which is loaded at system startup itself. The workflow of a printing process is as follows:<o:p https://blogger.googleusercontent.com/img/a/AVvXsEgzRjHIgyikNwAhv9i5Atndlje5cJxTUg6X4QsfFbB7kWT7EnPL129UqZNmeE9bdjGni9LKNkeJ5jgF4fErgPcpncHU654ttNxANwXkYGaR8hIBqr-ELnWE2LM3c6ZtNXAO1IVsD8-p31_lHaQw2AS41eEPDBU5H1RUPkoVBGe9XlsRbcEzSLOE1DLCyg=s16000 Application: The print application creates a print job by calling Graphics Device Interface (GDI).<o:p GDI: GDI includes both user-mode and kernel-mode components for graphics support.<o:p winspool.drvis the interface that talks to spooler. It provides the RPC stubs required to accessing the server.<o:p spoolsv.exeis the spooler's API server. This module implements message routing to print provider with the help of router (spoolss.dll)<o:p spoolss.dlldetermines which print provider to call, based on a printer name and passes function call to the correct provider.<o:p Spool Directory<o:pWhen a user prints a document, a print job is spooled to a predefined location referred to as the spool directory. The default location is C:\Windows\System32\spool\PRINTERS. This directory is by default writeable by everyone as everyone uses printer (FILE_ADD_FILE permission. Read more here), and the Spool Directory is configurable on each printer.<o:p

<o:p Workflow of the CVE 2020-1030<o:pI would highly recommend reading up Victor Mata’s post here before trying to demonstrate the vulnerability yourself. But for people who don’t like to get into too much of technicality, here is a summary of how the vulnerability shall be exploited.<o:p

· By default, users can add printers without administrator authentication needed.<o:p

· Calling AddPrinter returns a printer handle(I recommend reading what handles are if you have less idea of development) with the PRINTER_ALL_ACCESS right. This grants printing rights to standard and administrative print operations. <o:p https://blogger.googleusercontent.com/img/a/AVvXsEipsvNes1iInJTnQmIPewRtQsg6Pl4NoiYmq1_fk8i8NoaG702Z7dPhV1g4WqSCL4SDqUvmNE0XtO5wk17IymRj-KFfVamGcYSe1PzoUvkIC_ihzV8uCKWsQdNGvl85OO4_vRUvMbgNLl2nK_GGo63MK3rdG5peu6zmfhLUx7-b-CwsM4llak7MMnV2AA=s16000 · However, the caller of the AddPrinter function must have SERVER_ACCESS_ADMINISTERright to the server on which the printer is to be created.<o:p

· An unprivileged user will [...]

Hacked Dutch Government Website. All I got was this l̶o̶u̶s̶y̶ cool T-Shirt.
https://medium.com/@chander.romesh/hacked-dutch-government-website-all-i-got-was-this-l%CC%B6o%CC%B6u%CC%B6s%CC%B6y%CC%B6-cool-t-shirt-4fd62ed3e734?source=rss------bug_bounty-5