hacking: security in practice
Did this link do anything bad to my device?

I saw a fake elon musk tweet that tells you to visit muskbc.com for free btc, which I did out of curiosity. The website loaded for a long time but did nothing. Can someone skilled let me know if this was a virus or not?

submitted by /u/slomorosh
[link] [comments]

hacking: security in practice
Where are the most vulnerabilities in code? Perhaps Operating System code written in C?

As per the title, while I imagine many different vulnerabilities may be exploited, there must be one general area where they are most likely to be found?

submitted by /u/ahpto
[link] [comments]

Exploit Collector
RTLO Injection URI Spoofing

https://4.bp.blogspot.com/-SxgEc7szt9w/WWlva1nZfUI/AAAAAAAAIPE/UrvwYC_4YmMlGypxS9ASHy318XWSifzEQCLcBGAs/s1600/h71.png
RTLO injection URI spoofing generator for WhatsApp, iMessage, Instagram, and Facebook Messenger.

MD5 | 6c508227541dc40dd1944f191db714a4

Download
# Exploit Title: WordPress Plugin Jetpack 9.1 - Cross Site Scripting (XSS)
# Date: 2022-02-07
# Author: Milad karimi
# Software Link: https://wordpress.org/plugins/jetpack
# Version: 9.1
# Tested on: Windows 11
# CVE: N/A

1. Description:
This plugin creates a Jetpack from any post types. The slider import search feature and tab parameter via plugin settings are vulnerable to reflected cross-site scripting.

2. Proof of Concept:
http://localhost/modules/contact-form/grunion-form-view.php?post_id=


Source:packetstormsecurity.com

Dark Reading: Attacks/Breaches
HR Alone Can't Solve the Great Resignation

Here's how IT teams and decision-makers can step up to support the workforce. Creating a culture of feedback and introducing automation can mitigate burnout, inspire employees, and reduce turnover.

Hacking Wordpress - Vulnhub DC6 Walkthrough
https://www.reddit.com/r/Pentesting/comments/tnsaw9/hacking_wordpress_vulnhub_dc6_walkthrough/

<!-- SC_OFF -->https://www.youtube.com/watch?v=aJ52gTHzzKQ <!-- SC_ON --> submitted by /u/lsecqt (https://www.reddit.com/user/lsecqt)
[link] (https://www.reddit.com/r/Pentesting/comments/tnsaw9/hacking_wordpress_vulnhub_dc6_walkthrough/) [comments] (https://www.reddit.com/r/Pentesting/comments/tnsaw9/hacking_wordpress_vulnhub_dc6_walkthrough/)

Wep Cracking
https://www.reddit.com/r/Pentesting/comments/tnsbhj/wep_cracking/

<!-- SC_OFF -->Hello, I have a Cap file with only 3 packets. I am trying to break a WEP encryption using aircrack-ng to get the key. However it does not have enough IVs. Is there any way to crack it without more IVs or to generate fake IVs somehow. Keep in mind I do not have access to the network and can't use monitor mode or inject any packets. I only have the Cap file. <!-- SC_ON --> submitted by /u/Smakernamat (https://www.reddit.com/user/Smakernamat)
[link] (https://www.reddit.com/r/Pentesting/comments/tnsbhj/wep_cracking/) [comments] (https://www.reddit.com/r/Pentesting/comments/tnsbhj/wep_cracking/)

Hacking Wordpress, DC 6 from Vulnhub
https://www.reddit.com/r/redteamsec/comments/tnwqn0/hacking_wordpress_dc_6_from_vulnhub/

<!-- SC_OFF -->https://youtu.be/aJ52gTHzzKQ <!-- SC_ON --> submitted by /u/luzunov (https://www.reddit.com/user/luzunov)
[link] (https://www.reddit.com/r/redteamsec/comments/tnwqn0/hacking_wordpress_dc_6_from_vulnhub/) [comments] (https://www.reddit.com/r/redteamsec/comments/tnwqn0/hacking_wordpress_dc_6_from_vulnhub/)

Hacking on Medium
Hackers de Lapsus$ filtran 37 GB del supuesto código fuente de Microsoft

https://cdn-images-1.medium.com/max/1526/0*9IfgJrhghtNuIsJy
PUBLICADO EN 25 MARZO, 2022POR EHACKING

Continue reading on Medium »

Hacking on Medium
Scam Likely: Web3 Cyber Security

https://cdn-images-1.medium.com/max/2600/1*fffke5q4wAGpYr9_YgM9qA.jpeg
By Teddy MacDonald

Continue reading on Medium »

Hacking on Medium
Why Did I Encrypt Myself With My Own Darknet Ransomware?

https://cdn-images-1.medium.com/max/2600/1*GmId2kYoKDlfPw0KuDyERw.jpeg
I encrypted all the data on my Windows client on purpose and sent the decryption key to the TOR network aka the “Darknet”.

Continue reading on Medium »

Hacking on Medium
El error de Honda permite que un pirata informático desbloquee y encienda su automóvil a través de…

https://cdn-images-1.medium.com/max/1780/0*9xvR3rHdCdwlgwFg
PUBLICADO EN 25 MARZO, 2022POR EHACKING

Continue reading on Medium »

DC6 Walkthrough
https://www.reddit.com/r/Pentesting/comments/tnwvvb/dc6_walkthrough/

<!-- SC_OFF -->https://youtu.be/aJ52gTHzzKQ <!-- SC_ON --> submitted by /u/luzunov (https://www.reddit.com/user/luzunov)
[link] (https://www.reddit.com/r/Pentesting/comments/tnwvvb/dc6_walkthrough/) [comments] (https://www.reddit.com/r/Pentesting/comments/tnwvvb/dc6_walkthrough/)

hacking: security in practice
Finding accounts affiliated with a certain email

Is there a software that allows me to see all accounts that use a certain email?

submitted by /u/igoroxm
[link] [comments]

hacking: security in practice
Fern wifi cracker

I'm having an issue with Fern wifi cracker. It'll set wifi into monitor mode and then I'm able to click 'scan' for APs. Thing is, after that, no APs come up in either WEP or WPA.

​

select Wlan1, messages appears "Monitor Mode Enabled on wlan1mon", Scan is "Active"
but it doesn't find any WEP or WPA networks. Checking with ifconfig wlan0mon is up.

​

I had it working a few times

submitted by /u/drmarsche
[link] [comments]

hacking: security in practice
Hacking Wordpress - DC6 Walkthrough

https://youtu.be/aJ52gTHzzKQ

submitted by /u/luzunov
[link] [comments]

hacking: security in practice
Should I get a Rubber Ducky or a Malduino W?

I have 100 dollars to spend on a nicer BadUSB, after using a digikey/pico with some hack to be a BadUSB ive decided to make the switch to a "real" BadUSB. Should I go for the Malduino W (wifi and many more things than the "real" rubber ducky) or should I get the Hak5 rubber ducky (I guess it has a community behind it?)

submitted by /u/leavewhileyoucan
[link] [comments]

SysWhispers3 - AV/EDR Evasion Via Direct System Calls
http://www.kitploit.com/2022/03/syswhispers3-avedr-evasion-via-direct.html

SysWhispers helps with evasion by generating header/ASM files implants can use to make direct system calls. Why on earth didn't I create a PR to SysWhispers2? The reason for SysWhispers3 to be a standalone version are many, but the most important are: SysWhispers3 is the de-facto "fork" used by Inceptor (https://github.com/klezVirus/inceptor), and implements some utils class which are not relevant to the original version of the tool. SysWhispers2 is moving towards supporting NASM compilation (for gcc/mingw), while this version is specifically designed and tested to support MSVC (because Inceptor (https://github.com/klezVirus/inceptor) will stay a Windows-only framework for the near future). SysWhispers3 contains partially implemented features (such as egg-hunting) which would not be sensible to include in the original version of the tool.
Differences with SysWhispers2 The usage is pretty similar to SysWhispers2 (https://github.com/jthuraisamy/SysWhispers2), with the following exceptions: It also supports x86/WoW64 It supports syscalls instruction replacement with an EGG (to be dynamically replaced) It supports direct jumps to syscalls in x86/x64 mode (in WOW64 it's almost standard) It supports direct jumps to random syscalls (borrowing @ElephantSeal's idea (https://twitter.com/ElephantSe4l/status/1488464546746540042)) A better explanation of these features are better outlined i the blog post SysWhispers is dead, long live SysWhispers! (https://klezvirus.github.io/RedTeaming/AV_Evasion/NoSysWhisper/) Introduction Security products, such as AVs and EDRs, usually place hooks in user-mode API functions to analyse a program execution flow, in order to detect potentially malicious activities. SysWhispers2 is a tool designed to generate header/ASM pairs for any system call in the core kernel image (ntoskrnl.exe), which can then be integrated and called directly from C/C++ code, evading user-lands hooks. The tool, however, generates some patters which can be included in signatures, or behaviour which can be detected at runtime. SysWhispers3 is built on top of SysWhispers2, and integrates some helpful features to bypass these forms of detection. Installation git clone https://github.com/klezVirus/SysWhispers3.git C:\> cd SysWhispers3 C:\> python .\syswhispers.py --help">C:\> git clone https://github.com/klezVirus/SysWhispers3.git
C:\> cd SysWhispers3
C:\> python .\syswhispers.py --help
Usage and Examples The help shows all the available commands and features of the tool: python syswhispers.py -h usage: syswhispers.py [-h] [-p PRESET] [-a {x86,x64}] [-m {embedded,egg_hunter,jumper,jumper_randomized}] [-f FUNCTIONS] -o OUT_FILE [--int2eh] [--wow64] [-v] [-d] SysWhispers3 - SysWhispers (https://www.kitploit.com/search/label/SysWhispers) on steroids optional arguments: -h, --help show this help message and exit -p PRESET, --preset PRESET Preset ("all", "common") -a {x86,x64}, --arch {x86,x64} Architecture -c {msvc,mingw,all}, --compiler {msvc,mingw,all} Compiler -m {embedded,egg_hunter,jumper,jumper_randomized}, --method {embedded,egg_hunter,jumper,jumper_randomized} Syscall recovery method -f FUNCTIONS, --functions FUNCTIONS Comma-separated functions -o OUT_FILE, --out-file OUT_FILE Output basename (w/o extension) --int2eh Use the old `int 2eh` instruction in place of `syscall` --wow64 Use Wow64 to run x86 on x64 (only usable with x86 architecture) -v, --verbose Enable debug output -d, --debug Enable syscall debug (insert software breakpoint)'>C:\>python syswhispers.py -h

usage: syswhispers.py [-h] [-p PRESET] [-a {x86,x64}] [-m {embedded,egg_hunter,jumper,jumper_randomized}] [-f FUNCTIONS] -o OUT_FILE [--int2eh] [--wow64] [-v] [-d]