Kali Linux Tutorials
Wifi-Framework : For Creating Proof-Of-Concepts, Automated Experiments, Test Suites, Fuzzers, And More…

Wifi-Framework is a framework to more easily perform Wi-Fi experiments. It can be used to create fuzzers, implement new attacks, create proof-of-concepts to test for vulnerabilities, automate experiments, implement test suites, and so on.

The main advantage of the framework is that it allows you to reuse Wi-Fi functionality of Linux to more easily implement attacks and/or tests. For instance, the framework can connect to (protected) Wi-Fi networks for you and can broadcast beacons for you when testing clients. In general, any Wi-Fi functionality of Linux can be reused to more quickly implement attacks/tests. The framework accomplishes this by executing test cases on top of the hostap user space daemon.
https://blogger.googleusercontent.com/img/a/AVvXsEi27NzKEWwoQn_Wm7MQ2kEms5PkICD7q5ajoQtftXY4WudUUBqbIvkToXH9TUSLTEJDVa2ZNemv6bZYm6_OEzqw45lCfIZ3Bpt1qpyQDzzAvzRL-j0O9RSJlJTUuaUFuran8f5TQptPNUI5E2lyM_x3MV4dJTP73PYKkeRopUeYVQmMkPsJCPI-uLpF=s1000
If you are new to performing Wi-Fi experiments on Linux it is highly recommended to first read the libwifi Linux Tutorial. When you are implementing basic Wi-Fi attacks without the need to reuse Linux functionality, then the framework provides limited advantages and you can instead consider directly implementing attacks in Scapy and optionally use the libwifi library. Usage

To use the framework:

* Install it by running ./setup.sh. See setup to know what this script does.
* Read the usage tutorial. Example

Say you want to test whether a client ever encrypts frames using an all-zero key. This can happen during a key reinstallation attack. By using the framework you do not need to reimplement all functionality of an access point, but only need to write the following test case:

class ExampleKrackZerokey(Test):
name = “example-krack-zero-key”
kind = Test.Authenticator
def init(self):
super().init([
# Replay 4-Way Handshake Message 3/4.
Action( trigger=Trigger.Connected, action=Action.Function ),
# Receive all frames and search for one encrypted with an all-zero key.
Action( trigger=Trigger.NoTrigger, action=Action.Receive ),
# When we receive such a frame, we can terminate the test.
Action( trigger=Trigger.Received, action=Action.Terminate )
])
def resend(self, station):
# Resend 4-Way Handshake Message 3/4.
station.wpaspy_command(“RESEND_M3 ” + station.clientmac )
def receive(self, station, frame):
if frame[Dot11].addr2 != station.clientmac or not frame.haslayer(Dot11CCMP):
return False
# Check if CCMP-encrypted frame can be decrypted using an all-zero key
plaintext = decrypt_ccmp(frame.getlayer(Dot11), tk=b”\x00″*16)
if plaintext is None: return False
# We received a valid plaintext frame!
log(STATUS,’Client encrypted a frame with an all-zero key!’, color=”green”)
return True

The above test case will create an access point that clients can connect to. After the client connects, a new 3rd message in the 4-way handshake will be sent to the client. A vulnerable client will then start using an all-zero encryption key, which the test case automatically detects.

You can run the above test case using simulated Wi-Fi radios as follows:

./setup/setup-hwsim.sh 4
source setup/venv/bin/activate
./run.py wlan1 example-krack-zero-key

You can connect to the created access point to test it (network testnetworkwith password passphrase):

./hostap.py wlan2

By changing the network configuration this AP can easily be configured to use WPA2 or WPA3 and/or can be configured to use enterprise authentication, without making any changes to the test case that we wrote! Additional benefits of using the framework in this example are:

* No need to manually broadcast beacons
* The authentication and association stage [...]

___________________________
@hacking_Attack
@Hacking_Video

is handled by the framework
* The WPA2 and/or WPA3 handshake is handled by the framework
* Injected packets will be automatically retransmitted by the Linux kernel
* Packets sent towards the AP will be acknowledged
* Sleep mode of the client is automatically handled by the kernel
* … Download

___________________________
@hacking_Attack
@Hacking_Video

Weakly Typed SQL Injection

Programming languages come in two categories: Hard/Strong Typed Soft/Weak TypedContinue reading on Medium »
Read more...

Weakly Typed SQL Injection
https://hogarth45.medium.com/weakly-typed-sql-injection-f43a158a7daa?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Programming languages come in two categories:
Hard/Strong Typed
Soft/Weak TypedContinue reading on Medium » (https://hogarth45.medium.com/weakly-typed-sql-injection-f43a158a7daa?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Weakly Typed SQL Injection

Programming languages come in two categories: Hard/Strong Typed Soft/Weak TypedContinue reading on Medium »
Read more...

Exploit Collector
Polkit pkexec Local Privilege Escalation

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Hundreds of Open Source Components Could Undermine Security, Census Finds

The Linux Foundation and Harvard University create lists of the top 500 most popular open source projects, highlighting critical software that needs to be secured.

Dark Reading: Attacks/Breaches
How to Get One Step Ahead of Mobile Attacks

The advent of so-called "dropper" apps, which deliver and install malware that can also be later updated, is an emerging threat vector for mobile users.

Dark Reading: Attacks/Breaches
Attivo Expands Active Directory Protection from Unmanaged Devices, Including Mac, Linux, IoT/OT

Attivo Networks ADSecure-DC solution joins the company’s existing suite of Active Directory protection products.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Palo Alto Networks Introduces PAN-OS 10.2 Nebula

Software collects, analyzes, and interprets potential zero-day threats in real time using inline deep learning.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Cybersecurity Platform CrowdSec Expands Into the United States

CrowdSec is launching a new solutions stack, comprised of three main products: CrowdSec Agent, CrowdSec Console, and CrowdSec Threat Intelligence.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
8-Character Passwords Can Be Cracked in Less than 60 Minutes

Researchers say passwords with less than seven characters can be hacked "instantly."

___________________________
@hacking_Attack
@Hacking_Video

A Case Study: Defending against ransomware with Microsoft Defender for Endpoint and Intel TDT
https://www.reddit.com/r/redteamsec/comments/t5y5j4/a_case_study_defending_against_ransomware_with/

submitted by /u/SCI_Rusher (https://www.reddit.com/user/SCI_Rusher)
[link] (https://aka.ms/MDERansomewareCaseStudy) [comments] (https://www.reddit.com/r/redteamsec/comments/t5y5j4/a_case_study_defending_against_ransomware_with/)

___________________________
@hacking_Attack
@Hacking_Video