Dark Reading: Attacks/Breaches
Hikvision Network Cyber-Protect Helps Ensure Physical Cybersecurity Protection

Combines technology, education and tools to help dealers protect networked security systems.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Log4j Remediation Took Weeks or More for Over 50% of Organizations

ISC(2) survey also found that half of cybersecurity teams worldwide worked on fixing Log4j issues on weekends and during time off.

___________________________
@hacking_Attack
@Hacking_Video

HSTS false positive findings in Burp Pro?
https://www.reddit.com/r/Pentesting/comments/sz6wq9/hsts_false_positive_findings_in_burp_pro/

I notice that Burp keep showing low finding "Strict transport security not enforced" when "strict-transport-security" not found in the HTTP header which is the right thing to do. https://portswigger.net/kb/issues/01000300_strict-transport-security-not-enforced Example of good HSTS configuration $ curl -sI https://owasp.org HTTP/2 200 content-type: text/html; charset=utf-8 strict-transport-security: max-age=31536000; includeSubDomains However, Burp also show similar finding when the site is redirecting (302) to different page and there is no HSTS in the landing page e.g. $ curl -sI https://127.0.0.1 HTTP/1.1 302 Found Cache-Control: private Content-type: text/html; charset=utf-8 Location: https://127.0.0.1/otherPage.php But then when checked the redirected page, HSTS is there $ curl -sI https://127.0.0.1/otherPage.php HTTP/1.1 302 Found Cache-Control: private Content-type: text/html; charset=utf-8 ... Strict-Transport-Security: max-age=31536000; includeSubDomains Is this considered as false positive? submitted by /u/w0lfcat (https://www.reddit.com/user/w0lfcat)
[link] (https://www.reddit.com/r/Pentesting/comments/sz6wq9/hsts_false_positive_findings_in_burp_pro/) [comments] (https://www.reddit.com/r/Pentesting/comments/sz6wq9/hsts_false_positive_findings_in_burp_pro/)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Big question: When is Hacking Illegal and Legal?

https://cdn-images-1.medium.com/max/976/1*bshdy5xbzhxEojf6awebLA.jpeg
The big question of the day is that, When is Hacking Illegal and Legal?

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Descomplicando cálculos de sub-rede (IPV4)

https://cdn-images-1.medium.com/max/600/1*TUpykgCsJ8rV4fAZzri4jw.jpeg
Antes de irmos direto para os calculos de sub-rede, acho que se faz necessário uma breve explicação sobre o IPV4 (Internet Protocol…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
HSTS false positive findings in Burp Pro?

I notice that Burp keep showing low finding "Strict transport security not enforced" when "strict-transport-security" not found in the HTTP header which is the right thing to do.

https://portswigger.net/kb/issues/01000300_strict-transport-security-not-enforced

Example of good HSTS configuration
$ curl -sI https://owasp.org HTTP/2 200 content-type: text/html; charset=utf-8 strict-transport-security: max-age=31536000; includeSubDomains
However, Burp also show similar finding when the site is redirecting (302) to different page and there is no HSTS in the landing page

e.g. (no HSTS here)
$ curl -sI https://127.0.0.1 HTTP/1.1 302 Found Cache-Control: private Content-type: text/html; charset=utf-8 Location: https://127.0.0.1/otherPage.php
But then when checked the redirected page, HSTS is there
$ curl -sI https://127.0.0.1/otherPage.php HTTP/1.1 302 Found Cache-Control: private Content-type: text/html; charset=utf-8 ... Strict-Transport-Security: max-age=31536000; includeSubDomains
My questions:

1. Is this considered as false positive?
2. Is HSTS flag required in every single HTTP response?

submitted by /u/w0lfcat
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Best & Simple Things About Malicious

https://cdn-images-1.medium.com/max/600/0*m-90DMp9mnQZwRXu.jpg
Malicious software / code can disrupt computer systems, IT, mobile app and, in more extreme cases, delete your private data or hold it for…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Hacking paper

https://cdn-images-1.medium.com/max/976/1*1VG8_q0m2Y4GYjhyUD4umA.jpeg
Hi guys! I’m back with another blog and this is great because it’s a write up from hackthebox!

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

2 Days Left for IWCON 2022 Virtual Infosec Conference & Networking Event
https://infosecwriteups.com/2-days-left-for-iwcon-2022-virtual-infosec-conference-networking-event-407715243eaa?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Never attended a virtual networking event before? Your FAQs answered + Check our live demo here.Continue reading on InfoSec Write-ups » (https://infosecwriteups.com/2-days-left-for-iwcon-2022-virtual-infosec-conference-networking-event-407715243eaa?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Black Hat Ethical Hacking
AirTag clone bypassed Apple’s tracking-protection features, claims researcher

https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png AirTag clone bypassed Apple’s tracking-protection features, claims researcherPost Views: 146
https://www.blackhatethicalhacking.com/wp-content/uploads/2022/02/Patreon.png
Reading Time: 1 Minute
A security researcher claims he bypassed the tracking protection features built into Apple’s Find My app and AirTag tracking devices with a custom-made AirTag clone.
Amid mounting concerns that AirTags are ripe for abuse by stalkers and other wrongdoers, the researcher said he successfully tracked an iPhone user for five days (with their consent) without triggering a single tracking notification.

Launched in April 2021, AirTags communicate with Apple’s Find My service to help users keep track of personal items such as keys, wallets, and luggage.

However, several reports of malicious misuse have surfaced, from devices planted to facilitate grand theft auto to those surreptitiously slipped into victims’ coat pockets. ‘Obvious bypass ideas’Apple moved to address fears around unwanted tracking earlier this month by unveiling a raft of safety warning enhancements.

However, Fabian Bräunlein, co-founder of Berlin-based infosec consultancy Positive Security, said he quickly devised some “quite obvious bypass ideas for every current and upcoming protection measure”, before building an OpenHaystack-based AirTag clone to validate his hypotheses.
See Also: Complete Offensive Security and Ethical Hacking Course
The most common method for detecting unwanted AirTags – iPhone notifications that are triggered when AirTags are separated from their owner’s device but observed moving with another device – was readily bypassed by programming the clone “to continuously broadcast new, never-seen-before public keys”.

The clone, which had no speaker, was also undetectable by beeping alerts.

Bräunlein said Apple’s upcoming privacy changes would be similarly toothless in the face of modified or cloned AirTags. These include a new ‘Precision Finding’ function, refinements to unwanted-tracking alert logic, and use of louder audio alerts. Third-party successWhile the clone went undetected by Apple’s asset-tracking apps for the iOS and Android ecosystems – Find My and Tracker Detect, respectively – it was spotted by a third-party alternative. AirGuard, which was developed by the Secure Mobile Networking Lab (SEEMOO) at the Technical University of Darmstadt’s computer science department, discovered the clone in ‘manual scan’ mode.
See Also: Kali Linux 2022.1 Release with Visual Updates, New Tools, Legacy SSH “iOS and Tracker Detect ignore those devices since they mimic a lost iPhone,” Alexander Heinrich, SEEMOO PhD student and a security expert on the AirGuard project, told The Daily Swig.

Despite its success against Bräunlein’s AirTag imitator, AirGuard was actually designed to detect off-the-shelf devices, such as the Chipolo One Spot and modified, speaker-free AirTags, which Heinrich said are fuelling stalking.

Heinrich said SEEMOO is now working on a follow-up project. “The main issue is that a lost iPhone or a closed MacBook send exactly the same signals as such a tracker,” he said. “We want to develop [the] next version that utilizes as much information as possible to reduce possible false alarms and reliably detect malicious and modified devices.” ‘Cat and mouse’Bräunlein told The Daily Swig that Apple could incorporate AirTag imitators into its threat model by “excluding non-genuine devices from the network” or “improving the detection [...]

___________________________
@hacking_Attack
@Hacking_Video

logic to also detect nearby trackers”.

“The first option would seem to require major changes to the Find My protocol’s design,” he continued. “The second option would require smaller changes, but it’s likely also less effective and leads to the ‘cat and mouse game’ we know from other areas of security.”

The Daily Swig has invited Apple to comment on Bräunlein’s findings but we’ve heard nothing back so far. We will update the article should they get back to us. See Also: Offensive Security Tool: Swaks – Swiss Army Knife for SMTP
Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?

If you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com
See Also: How ILOVEYOU worm became the first global computer virus pandemic Source: portswigger.net Source Linkhttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/merch.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/02/Banner-Img-AWS-90x90.jpg Introducing Ghostbuster – AWS security tool protects against dangling elastic IP takeovers1 day ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/02/zabbix_blog_java-apps-90x90.png Critical vulnerabilities in Zabbix Web Frontend allow authentication bypass, code execution on servers2 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/02/ezgif.com-gif-maker-4-1-90x90.jpg GitHub code scanning now finds more security vulnerabilities5 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/02/012qzWe52HXVPxkc8nUrPyv-1.fit_lim.size_1200x630.v1617817629-90x90.jpg Massive LinkedIn Phishing, Bot Attacks Feed on the Job-Hungry6 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/02/Unredacter-Pixelize-90x90.gif New tool can uncover redacted, pixelated text to reveal sensitive data1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/02/ezgif.com-gif-maker-3-1-90x90.jpg Adobe: Zero-Day Magento 2 RCE Bug Under Active Attack1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/02/banner-2022.1-release-90x90.jpg Kali Linux 2022.1 Release with Visual Updates, New Tools, Legacy SSH1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/02/acastro_210104_1777_google_0001-90x90.jpg Google Project Zero: Vendors are now quicker at fixing zero-days1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/02/Apple-Warning-90x90.jpg Apple patches new zero-day exploited to hack iPhones, iPads, Macs2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/02/f4bc-article-200611-wordpress-body-text-90x90.jpg PHP Everywhere RCE flaws threaten thousands of WordPress sites2 weeks ago
The post AirTag clone bypassed Apple’s tracking-protection features, claims researcher first appeared on Black Hat Ethical Hacking.

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Using SQL to research better in search engines

I’ve seen people do sql injections, but I’m just curious, does anyone have any lines that help you pull up the results in a search bar that you want?

For example, there is a game called Wordle, where you guess a 5 letter word and have 6 guesses. Let’s say I have found out that the word looks something like this “Wee” (* is unknown characters), how could I look up in dictionary.com every word that it could be using SQL (assuming dictionary.com stores everything in an SQL database)?

submitted by /u/nurf8bo
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Find You: Airtag clone that can already bypass all Apple planned tracking protection features

https://external-preview.redd.it/lq0kE4jjGLLNl2QFzHXB6R3nacwt4ogAfxYcVCgewE0.jpg?width=640&crop=smart&auto=webp&s=f63c38e96a52a38d1ec5b8618ac0b21cf3fc9a4c submitted by /u/lgsp
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
My ex has been having into every account I own. I don't know how, and more inoperable, don't know how to stop her. Suggestions?

So I'm not positive, but I don't think this violates rule #4... but my ex called me tonight with very intimate details about my social media conversations, my venmo exchanges(set to private), my emails, and my bank statements.

I put everything I could on the authenticator app, but I think she still broke through on Snap. How in the hell do I put a stop to this? It'll take me days to get through customer support on all this. Even changed all my passwords(didn't remember half of them) and my email on file.

I literally never knew she knew the first fucking thing about all this

submitted by /u/Pound_Me_Too
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
What could be done?

If a country was about to make the internet, an intranet?

submitted by /u/Program514259
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video