Digging Deep Into Dom XSS
https://thexssrat.medium.com/digging-deep-into-dom-xss-9ed172876477?source=rss------bug_bounty-5

IntroductionContinue reading on Medium » (https://thexssrat.medium.com/digging-deep-into-dom-xss-9ed172876477?source=rss------bug_bounty-5)

Kali Linux Tutorials
TUF : A Framework For Securing Software Update Systems

TUF is a repository is the reference implementation of The Update Framework (TUF). It is written in Python and intended to conform to version 1.0 of the TUF specification. This implementation is in use in production systems, but is also intended to be a readable guide and demonstration for those working on implementing TUF in […]

The post TUF : A Framework For Securing Software Update Systems appeared first on Kali Linux Tutorials.

Hacking on Medium
Relevante — episodio 8 ☠️

https://cdn-images-1.medium.com/max/640/0*gIUb__uPaUoNebJV
Se vino el otoño, 2021. Un editorial dedicado al futuro distópico: Los robots de Boston Dynamics van por todo. Controlaremos el teléfono…

Continue reading on Relevantenews »

Hacking on Medium
Digging Deep Into Dom XSS

https://cdn-images-1.medium.com/max/2600/0*PL0mWVQ7MrwO1iUm
Introduction

Continue reading on Medium »

KitPloit - PenTest Tools!
AzureC2Relay - An Azure Function That Validates And Relays Cobalt Strike Beacon Traffic By Verifying The Incoming Requests Based On A Cobalt Strike Malleable C2 Profile

https://1.bp.blogspot.com/-oa6G92plSqA/YGvgYtysKHI/AAAAAAAAV0o/t4My_zkK6c8t1pBye3UvChXovumbmPIBgCNcBGAsYHQ/w640-h326/AzureC2Relay_1_AzureRelay.png AzureC2Relay is an Azure Function that validates and relays Cobalt Strike beacon traffic by verifying the incoming requests based on a Cobalt Strike Malleable C2 profile. Any incoming requests that do not share the profiles user-agent, URI paths, headers, and query parameters, will be redirected to a configurable decoy website. The validated C2 traffic is relayed to a team server within the same virtual network that is further restricted by a network security group. Allowing the VM to only expose SSH. DeployAzureC2Relay is deployed via terraform azure modules as well as some local az cli commands

Make sure you have terraform , az cli and the dotnet core 3.1 runtime installed

Windows (Powershell) &([scriptblock]::Create((Invoke-WebRequest -UseBasicParsing 'https://dot.net/v1/dotnet-install.ps1'))) -runtime dotnet -version 3.1.0
Invoke-WebRequest 'https://releases.hashicorp.com/terraform/0.14.6/terraform_0.14.6_windows_amd64.zip' -OutFile 'terraform.zip'
Expand-Archive -Path terraform.zip -DestinationPath "$([Environment]::GetFolderPath('ApplicationData'))\TerraForm\"
setx PATH "%PATH%;$([Environment]::GetFolderPath('ApplicationData'))\TerraForm\"
Invoke-WebRequest -Uri https://aka.ms/installazurecliwindows -OutFile .\AzureCLI.msi; Start-Process msiexec.exe -Wait -ArgumentList '/I AzureCLI.msi /quiet'; rm .\AzureCLI.msi Mac curl -L https://dot.net/v1/dotnet-install.sh | bash -s -- --runtime dotnet --version 3.1.0
brew update
brew tap hashicorp/tap
brew install hashicorp/tap/terraform
brew install azure-cli Ubuntu , Debian curl -L https://dot.net/v1/dotnet-install.sh | bash -s -- --runtime dotnet --version 3.1.0
wget https://releases.hashicorp.com/terraform/0.14.5/terraform_0.14.5_linux_amd64.zip
unzip terraform_0.14.5_linux_amd64.zip
sudo cp terraform /usr/local/bin/terraform
curl -sL https://aka.ms/InstallAzureCLIDeb | sudo bash Kali curl -L https://dot.net/v1/dotnet-install.sh | bash -s -- --runtime dotnet --version 3.1.0
wget https://releases.hashicorp.com/terraform/0.14.5/terraform_0.14.5_linux_amd64.zip
unzip terraform_0.14.5_linux_amd64.zip
sudo cp terraform /usr/local/bin/terraform
echo "deb [arch=amd64] https://packages.microsoft.com/repos/azure-cli/ stretch main" | sudo tee /etc/apt/sources.list.d/azure-cli.list
curl -L https://packages.microsoft.com/keys/microsoft.asc | sudo apt-key add -
sudo apt-get update && sudo apt-get install apt-transport-https azure-cli 1. Modify the first variables defined in config.tfto suit your needs
2. Replace the dummy "cobaltstrike-dist.tgz" with an actual cobaltstrike download
3. Edit/Replace the Malleable profile inside the Ressources folder (Make sure the profile filename matches the variables you set in step 1)
4. login with azure az login5. run terraform init6. run terraform apply -auto-approveto deploy the infra
7. Wait for the CDN to become active and enjoy!

Once terraform completes it will provide you with the needed ssh command, the CobaltStrike teamserver will be running inside an tmux session on the deployed VM

When your done using the infra, you can remove it with terraform destroy -auto-approveDownload AzureC2Relay

hacking: security in practice
What types of ways can people crack a password?

I've heard of brute force. That's the only one I know.

(Using python script)

submitted by /u/Guy_withThe_Hat
[link] [comments]

https://b.thumbs.redditmedia.com/OWJgznW6gWiwYYPLEUfNtdN375PzpWUbMhGPIE2L2mY.jpg so my phone run out of battery and I started to charge it and went about my day but when I went back and turned it on I saw a messages pop-up in the middle with out me opening my messages app of my screen never had this before I would show you a pic but I don't know where to add it on here

(am on Samsung android 7.0)

https://preview.redd.it/krwwf2wjjks61.png?width=1440&format=png&auto=webp&s=be5bbdf8a35c7ce1527810b1d3a1bafcd4b9ef1b

submitted by /u/the_dead_revenant1
[link] [comments]

hacking: security in practice
Xiaomi band hacking.

Hello,

It really amases me how many people have the xiaomi band. I have one laying around and I am tinking about hacking it. The smart band coneccts to a phone, and it gets software updates like that, so in theory if I reverce engineer the app and make my own app to send a malicous update to the watch that would allow me to controll it. But that's theory, it just leaves too much questions, for example: how would I program a malicous update, is it linux based? How do I actually program the content of the update? And so on... I actually didin't find a post disccusing hacking this band, it would be fun ;) Do you have any ideas? We could work it out together! The hack could just simply consist of desplaying custom text on the screen.

Cheers

submitted by /u/PaintballAlex
[link] [comments]

Kali Linux Tutorials
SharpGPOAbuse : Tool To Take Advantage Of A User’s Edit Rights On A Group Policy Object (GPO)

SharpGPOAbuse is a .NET application written in C# that can be used to take advantage of a user’s edit rights on a Group Policy Object (GPO) in order to compromise the objects that are controlled by that GPO. More details can be found at the following blog post: https://labs.mwrinfosecurity.com/tools/sharpgpoabuse Compile Instructions Make sure the necessary […]

The post SharpGPOAbuse : Tool To Take Advantage Of A User’s Edit Rights On A Group Policy Object (GPO) appeared first on Kali Linux Tutorials.

https://external-preview.redd.it/J7FZh36usB2IZLJpdMgjR4ENQ732VYghnTocTsyzdT8.jpg?width=108&crop=smart&auto=webp&s=46f65edf142b2240e5da2e52008c2d05ddf5d6c2 I've been working on hacking smart meters on and off for the last 5 years and have decided to start sharing what I find more widely. My only goal is to learn every single thing about these smart meters, how they communicate over a massive mesh network, measure and report power and enable the utilities to turn your power on/off.

I have a few places I am sharing information and really look forward to collaborating with others. Happy to share anything I have found or chat about what you're working on if there are similar components used.

YouTube where I am posting videos of the journey and explaining what I find.

RECESSIM Reverse Engineering Wiki where I am documenting the protocol used and the various components that make up the Smart Grid.

Hackaday reached out and coming up this Wednesday the 14th I'll be hosting a Hack Chat as well to hopefully get others interested in hacking smart meters. It's like a massive dark net of power and outage data!

​

https://preview.redd.it/6w0wg0qsbls61.jpg?width=2024&format=pjpg&auto=webp&s=1e1c456636b18efd4548a67d17416d45b3858a9a

https://preview.redd.it/2lyykvqy9ls61.jpg?width=1024&format=pjpg&auto=webp&s=40d3dcd448f2c69cf4f5fc399f58654161f541f8

https://preview.redd.it/5yb19c10als61.jpg?width=1182&format=pjpg&auto=webp&s=274328079c28e27e808b44f00903dade4a7ba1f3

https://preview.redd.it/k85fpm01als61.jpg?width=768&format=pjpg&auto=webp&s=85e3a0612a6d810a242fbb89a9cfd0eced7d0e2c

https://preview.redd.it/apw9sxl1als61.jpg?width=919&format=pjpg&auto=webp&s=c5df06d77c76a46337603eec61e2d68289b318f9

HACK THE PLANET!

submitted by /u/BitBangingBytes
[link] [comments]

hacking: security in practice
Trying to run custom code on a blu ray player

I just found a bdp-bx110 Sony blu ray DVD player, and I was wondering if I could maybe run an exploit on it to let me run code?

submitted by /u/battlecatsahead
[link] [comments]

Cpufetch - Simplistic Yet Fancy CPU Architecture Fetching Tool

Simplistic yet fancy CPU architecture fetching tool1. Support cpufetch currently supports x86_64 CPUs (both Intel and AMD) and ARM. Platform x86_64 ARM Notes Linux ✔️ ✔️ Prefered platform. Experimental ARM support Windows ✔️ ❌ Some information may be missing. Colors will be used if supported Android ❗ ✔️ Experimental ARM support macOS ✔️ ❌ Some information may be missing Emoji Meaning ✔️ Supported ❌ Not supported ❗ Not tested 2. Installation 2.1 Building from source Just clone the repo and use make to compile it git clone https://github.com/Dr-Noob/cpufetchcd cpufetchmake./cpufetch The Makefile is designed to work on Linux, Windows and macOS. 2.2 Linux There is a cpufetch package available in Arch Linux (cpufetch-git). If you are in another distribution, you can build cpufetch from source. 2.2 Windows In the releases section you will find some cpufetch executables compiled for Windows. Just download and run it from Windows CMD. You can also build cpufetch from source. 2.3 macOS You need to build cpufetch from source. 2.4 Android Install termux app (terminal emulator) Run pkg install -y git make clang inside termux. Build from source normally: git clone https://github.com/Dr-Noob/cpufetch cd cpufetch make ./cpufetch 3. Examples Here are more examples of how cpufetch looks on different CPUs. 3.1 x86_64 CPUs 3.2 ARM CPUs 4. Colors and style By default, cpufetch will print the CPU art with the system colorscheme. However, you can always set a custom color scheme, either specifying Intel or AMD, or specifying the colors in RGB format: ./cpufetch --color intel (default color for Intel)./cpufetch --color amd (default color for AND)./cpufetch --color 239,90,45:210,200,200:100,200,45:0,200,200 (example) In the case of setting the colors using RGB, 4 colors must be given in with the format: R,G,B:R,G,B:R,G,B:R,G,B. These colors correspond to CPU art color (2 colors) and for the text colors (following 2). Thus, you can customize all the colors. 5. Implementation See cpufetch programming documentation. 6. Bugs or improvements There are many open issues in github (see issues). Feel free to open a new one report an issue or propose any improvement in cpufetch I would like to thank Gonzalocl and OdnetninI for their help, running cpufetch in many different CPUs they have access to, which makes it easier to debug and check the correctness of cpufetch. Download Cpufetch
Read more...