Everything you need to know about Bug Bounties
https://bugbaseindia.medium.com/everything-you-need-to-know-about-bug-bounties-5abbba0cfc89?source=rss------bug_bounty-5

What are Bug Bounty ProgramsContinue reading on Medium » (https://bugbaseindia.medium.com/everything-you-need-to-know-about-bug-bounties-5abbba0cfc89?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Easy way to put a reverse shell on a dropbox and have it call out to my external server?

Hi all,

I am trying to make a raspberry pi with kali on it to be a reverse shell and go to my server on digital ocean through a reverse proxy.

How can I implant a reverse shell on the dropbox to do that?

I tried with metasploit but I have been running into issues.

This has to go through port 443 as well.

submitted by /u/Enes_24
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

HTTPS Downgrade only works on Chrome based browser
https://www.reddit.com/r/Pentesting/comments/t3abox/https_downgrade_only_works_on_chrome_based_browser/

Using HTTPS in your web application is mandatory to guarantee trust and security. However, an attacker may try to downgrade that secure protocol into simple HTTP and grab or tamper with the exchanged data. https://auth0.com/blog/preventing-https-downgrade-attacks/ If certain site is running on https, then by simply changing it to http, the whole communication is now running on http. No redirection to https is done even though HSTS is there. However, this can only be done via Chrome based browser only and not Firefox. Is this consider as a valid pentest finding? submitted by /u/user11392 (https://www.reddit.com/user/user11392)
[link] (https://www.reddit.com/r/Pentesting/comments/t3abox/https_downgrade_only_works_on_chrome_based_browser/) [comments] (https://www.reddit.com/r/Pentesting/comments/t3abox/https_downgrade_only_works_on_chrome_based_browser/)

___________________________
@hacking_Attack
@Hacking_Video

NMAP commands

Basic Scan on a Single IP:Continue reading on Medium »
Read more...

NMAP commands
https://rootbabu.medium.com/nmap-commands-1847fb990fa1?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Basic Scan on a Single IP:Continue reading on Medium » (https://rootbabu.medium.com/nmap-commands-1847fb990fa1?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Black Hat Ethical Hacking
Conti ransomware’s internal chats leaked after siding with Russia

https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Conti ransomware’s internal chats leaked after siding with RussiaPost Views: 8
https://www.blackhatethicalhacking.com/wp-content/uploads/2022/02/Patreon.png
Reading Time: 2 Minutes
A Ukrainian security researcher has leaked over 60,000 internal messages belonging to the Conti ransomware operation after the gang sided with Russia over the invasion of Ukraine.
BleepingComputer has independently confirmed the validity of these messages from internal conversations previously shared with BleepingComputer regarding Conti’s attack on Shutterfly.

AdvIntel CEO Vitali Kremez, who has been tracking the Conti/TrickBot operation over the last couple of years, also confirmed to BleepingComputer that the leaked messages are valid and were taken from a log server for the Jabber communication system used by the ransomware gang.

Kremez told BleepingComputer that the data was leaked by a researcher who had access to the “ejabberd database” backend for Conti’s XMPP chat server. This was also confirmed by cybersecurity firm Hold Security.

In total, there are 393 leaked JSON files containing a total of 60,694 messages since January 21, 2021, through today. Conti launched their operation in July 2020, so while it contains a big chunk of their internal conversations, it is not all of them.
https://www.bleepstatic.com/images/news/ransomware/c/conti/private-messages-leak/leaked-chats.jpg
Messages leaked over Conti’s siding with RussiaEarlier this week, the Conti ransomware operation published a blog post announcing their full support for the Russian government’s attack on Ukraine. They also warned that if anyone organized a cyberattack against Russia, the Conti gang would[...]

___________________________
@hacking_Attack
@Hacking_Video

Black Hat Ethical Hacking
Conti ransomware’s internal chats leaked after siding with Russia

___________________________
@hacking_Attack
@Hacking_Video

NMAP commands

Basic Scan on a Single IP:Continue reading on Medium »
Read more...

hacking: security in practice
How reliable is Brave Browser Tor option?

Hey, I was wondering if using the tor window feature in Brave is equivalent to using a “real” onion web tor browser? It seems way quicker in loading speed to me. I am no expert at all, was just interested if it might become a thing for daily browsing instead of a vpn, if it advances further.

submitted by /u/schnavy
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
What’s is up with the bvp 47 backdoor? Is there anything one can do ?

https://thehackernews.com/2022/02/chinese-experts-uncover-details-of.html

submitted by /u/Meier2
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
If Ddos is illegal then what about anonymous

Correct me if I’m wrong but in this cyber war between Russia and Ukraine the anonymous hacker group have been using Ddos attacks, so if they get caught will they be arrested or will an exception be made due to their cause. In my country Ddos is punishable by a jail sentence/ fine. Any insight helps, thanks

submitted by /u/Armweak5104
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Bruteforce metamask password

Hi, a friend of mine lost his metamask password, he has no seedphrase, no private key, nothing.
He can only try to brute force it.
He knows the password is around 15-18 chars and he also knows the first 7 letters. The other chars are either numbers (0-9) or ! or ?.
What would be the best way to bruteforce?

submitted by /u/Hyposs
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Anonymous is not alone NB65

submitted by /u/Haldane-FRS
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Rustpad : Multi-Threaded Padding Oracle Attacks Against Any Service

Rustpadis a multi-threaded successor to the classic padbuster, written in Rust. It abuses a Padding Oracle vulnerability to decrypt any cypher text or encrypt arbitrary plain text without knowing the encryption key!

Features

* Decryption of cypher texts
* Encryption of arbitrary plain text
* Multi-threading on both block and byte level
* Modern, real-time and interactive TUI!
* No-TTY support, so you can just pipe output to a file
* Supports Web server oracles…
* … and Script-based oracles. For when you need just that extra bit of control.
* Automated calibration of web oracle’s (in)correct padding response
* Progress bar and automated retries
* Tab auto-completion
* Block-level caching
* Smart detection of cypher text encoding, supporting: hex, base64, base64url* No IV support
* Written in purely safe Rust, making sure you don’t encounter nasty crashes

Usage

Using rustpadto attack a padding oracle is easy. It requires only 4 pieces of information to start:

* type of oracle (web/script, see below)
* target oracle (--oracle)
* cypher text to decrypt (--decrypt)
* block size (--block-size) Web mode

Web mode specifies that the oracle is located on the web. In other words, the oracle is a web server with a URL.

For a padding oracle attack to succeed, an oracle must say so if a cypher text with incorrect padding was provided. rustpadwill analyse the oracle’s responses and automatically calibrate itself to the oracle’s behaviour.

rustpad web –help
rustpad-web 1.8.0
Question a web-based oracle
USAGE:
rustpad {web, –web, -W} [OPTIONS] –oracle –block-size –decrypt
OPTIONS:
-A, –user-agent
User-agent to identify with
[default: rustpad/1.8.0]
-B, –block-size
Block size used by the cypher
[options: 8, 16]
-c, –consider-body
Consider the response body and content length when determining the web oracle’s response to (in)correct padding
-d, –data
Data to send in a POST request
-D, –decrypt
Original cypher text, received from the target service, which is to be decrypted
–delay
Delay between requests within a thread, in milliseconds
[default: 0]
-e, –encoding
Specify encoding used by the oracle to encode the cypher text
[options: auto, hex, base64, base64url]
[default: auto]
-E, –encrypt
Plain text to encrypt. Note: encryption mode requires a cypher text to gather necessary data
-h, –help
Print help information
-H, –header
HTTP header to send
[format: :]
-k, –insecure
Disable TLS certificate validation
-K, –keyword
Keyword indicating the location of the cypher text in the HTTP request. It is replaced by the cypher text’s value at runtime
[default: CTEXT]
-n, –no-iv
Cypher text does not include an Initialisation Vector
–no-cache
Disable reading and writing to the cache file
–no-url-encode
Disable URL encoding and decoding of cypher text
-o, –output
File path to which log output will be written
-O, –oracle
The oracle to question with forged cypher texts. This can be a URL or a shell script.
See the subcommands web --helpand script --helprespectively for further help.
–proxy-credentials
Credentials to authenticate against the proxy server with
[format: :]
-r, –redirect
Follow HTTP Redirects
-t, –threads
Amount of threads in the thread pool
[default: 64]
-T, –timeout
Web request timeout in seconds
[default: 10]
-v, –verbose
Increase verbosity of logging
-V, –version
Print version information
-x, –proxy
Proxy server to send web requests over. Supports HTTP(S) and SOCKS5
Indicate the cypher text’s location! See --keywordfor clarification.

Script mode

Script mode was made for power users or[...]

___________________________
@hacking_Attack
@Hacking_Video

CTF players https://s.w.org/images/core/emoji/13.1.0/72x72/1f3f4-200d-2620-fe0f.png who were given a script to run. The target oracle is a local shell script.

Scripts allow you to run attacks against local oracles or more exotic services. Or you can use script mode to customize and extend rustpad‘s features. However, if you’re missing a feature, feel free to open an issue on GitHub!

rustpad script –help
rustpad-script 1.8.0
Question a script-based oracle
USAGE:
rustpad {script, –script, -S} [OPTIONS] –oracle –block-size –decrypt
OPTIONS:
-B, –block-size
Block size used by the cypher
[options: 8, 16]
-D, –decrypt
Original cypher text, received from the target service, which is to be decrypted
–delay
Delay between requests within a thread, in milliseconds
[default: 0]
-e, –encoding
Specify encoding used by the oracle to encode the cypher text
[options: auto, hex, base64, base64url]
[default: auto]
-E, –encrypt
Plain text to encrypt. Note: encryption mode requires a cypher text to gather necessary data
-h, –help
Print help information
-n, –no-iv
Cypher text does not include an Initialisation Vector
–no-cache
Disable reading and writing to the cache file
–no-url-encode
Disable URL encoding and decoding of cypher text
-o, –output
File path to which log output will be written
-O, –oracle
The oracle to question with forged cypher texts. This can be a URL or a shell script.
See the subcommands web --helpand script --helprespectively for further help.
-t, –threads
Amount of threads in the thread pool
[default: 64]
-v, –verbose
Increase verbosity of logging
-V, –version
Print version information
Script must respond with exit code 0 for correct padding, and any other code otherwise. Cypher text is
passed as the 1st argument. Download

___________________________
@hacking_Attack
@Hacking_Video