ck gives us a way better SNR!

OK, here’s where the REALLY powerful stuff comes in. We got a pair of rules in a chain here.

Files with extensions that match the first rule will be sent to second rule, which will “grep” (i.e. String.Contains()) them for stuff in a specific wordlist.

You can chain these together as much as you like, although I imagine you’ll start to see some performance problems if you get too inception-y with it.

[[Classifiers]]
EnumerationScope = “FileEnumeration” # this one looks at files…
RuleName = “ConfigGrepExtExact”
MatchLocation = “FileExtension” # specifically the extensions…
WordListType = “Exact”
WordList = [“.yaml”, “.xml”, “.json”, “.config”, “.ini”, “.inf”, “.cnf”, “.conf”] # these ones.
MatchAction = “Relay” # Then any files that match are handed downstream…
RelayTarget = “KeepConfigGrepContainsRed” # To the rule with this RuleName!

[[Classifiers]]
RuleName = “KeepConfigGrepContainsRed” # which is this one! This is why following a naming convention really helps.
EnumerationScope = “ContentsEnumeration” # this one looks at file content!
MatchAction = “Snaffle” # it keeps files that match
MatchLocation = “FileContentAsString” # it’s looking at the contents as a string (rather than a byte array)
WordListType = “Contains” # it’s using simple matching
WordList = [“password=”, ” connectionString=\””, “sqlConnectionString=\””, “validationKey=”, “decryptionKey=”, “NVRAM config last updated”]
Triage = “Red” Who did you steal code from?The share enumeration bits were snaffled (see what I did there?) from SharpShares, which was written by the exceedingly useful Dwight Hohnstein. (https://github.com/djhohnstein/SharpShares/) Dwight’s GitHub profile is like that amazing back aisle at a hardware store that has a whole bunch of tools that make you go “oh man I can’t wait til I have an excuse to try this one for realsies…” and you should definitely check it out.

While no code was taken (mainly cos it’s Ruby lol) we did steal a bunch of nifty ideas from plunder2(http://joshstone.us/plunder2/)

Wordlists were also curated from those found in some other similar-ish tools like trufflehog, shhgit, gitrobber, and graudit. Download

hacking: security in practice
You can probably fry electronics using focused attacks

I told the White House and a stupid kid that used to goto school with me found out and he works at a major Bay Area cable station and he released a virus to fry electronics until they kill me and my family, all over me talking to jon Stewart

Anyways try multithreaded loops, how it’s fixed? No one knows, but you can melt solder

submitted by /u/m0rph1ne_
[link] [comments]

hacking: security in practice
Neighbors left their ring cameras

My neighbor’s installed ring camera equipped flood lights and moved out. I know the new tenants and they have no intention of making use of the cameras. There is a wifi network named “Ring Setup cf” available totally unsecured. How easy would it be for a nosey neighbor or law enforcement to make use of these cameras? I’m not asking anyone to help me do this. I just want to know how vulnerable and likely is it that this camera can be viewed by others?

submitted by /u/sleepy_xia
[link] [comments]

Your Guide To JWT Attacks
https://medium.com/@omarwhadidi9/your-guide-to-jwt-attacks-ce44b55dd3f?source=rss------bug_bounty-5

this is a detailed blog on JWT attacks with some source code ReviewContinue reading on Medium » (https://medium.com/@omarwhadidi9/your-guide-to-jwt-attacks-ce44b55dd3f?source=rss------bug_bounty-5)

Hacking on Medium
HTB [Secret]

https://cdn-images-1.medium.com/max/1208/1*ar2tmRiraI5HJKX7a5uwKQ.png
Secret is a box on the Hack the Box platform ranked as Easy. Although the path to user and the foothold is relatively straightforward…

Continue reading on Medium »

Hacking on Medium
IP Rotation with Python

Accessing online services in an automated manner may often leads to blockages by those services. In case requests come from IPs that are…

Continue reading on Medium »

Hacking on Medium
ShmooCon is back. Five things you may have missed

https://cdn-images-1.medium.com/max/2309/1*oYgvhlxwXvfX15W7LeLvlg.png
The buzzy ShmooCon cybersecurity conference returned this weekend after a pandemic hiatus, drawing a lively crowd of hackers, security…

Continue reading on README_ »

Hacking on Medium
Jargons used by information security professionals

https://cdn-images-1.medium.com/max/2600/1*JGy_HD1uF4k96UUlEzRIUg.jpeg
Do you feel lost in translation when IT professionals start speaking their jargon? Check out this comprehensive list of important terms to…

Continue reading on Medium »

Hacking on Medium
TryHackMe: [Day 3] Web Exploitation Christmas Blackout

https://cdn-images-1.medium.com/max/1920/1*psaTaSfd9sQyajFeYTLO-w.png
Using a common wordlist for discovering content, enumerate http://MACHINE_IP to find the location of the administrator dashboard. What is…

Continue reading on Medium »

Hacking on Medium
WordPress Security: 10 Tips To Secure Your Site In 2022

https://cdn-images-1.medium.com/max/1200/1*bW3J0ZJrXSmMxN12ASfOZw.jpeg
WordPress is one of the most popular content management systems in use today. While it is a very user-friendly platform, it is also…

Continue reading on Medium »

Hacking on Medium
How to crack ssh password by hydra:

https://cdn-images-1.medium.com/max/920/1*1bYM_XpqU3CU0zn3riodfA.png
Hi,

Continue reading on Medium »

hacking: security in practice
What is Ftewk.exe

Recently, my friend randomly lost access to his steam account while playing a game without any possible explanation. We found a ftwek.exe file running on startup through the task manager upon inspection. There is no information about this file on the internet. Is the system compromised? What should be done?

Every google search seems to be leading to some sort of a hacking article which led me to believe the system was compromised.

submitted by /u/_Machosen
[link] [comments]

hacking: security in practice
NFT collection generator c#

Just coded nft collection generator on c#. I guess, there's no need to explain what does every field for, human kind should have enough IQ. Antivirus checks, more info and .exe file on my github: https://github.com/micegan/NftCollectionGenerator-exe

Yeah, the GUI is shitty, but whatever.

submitted by /u/Various-Animal-9893
[link] [comments]

hacking: security in practice
Raidforums alternatives

Hello, are there any good alternatives to raidforums?

submitted by /u/JRytM
[link] [comments]

hacking: security in practice
Suggestion for cool Hacking Stickers?

Hey guys.

I am Top 3% on THM. Always reading about hacking. Working my way into Cybersecurity from InfoSec. I am in a coffee shop a lot. I noticed that a lot of SEs have stickers on their laptops such as FAANG companies, 10101, etc. Are there any dope stickers or things that ONLY hackers would really know about to pick up? Obviously a big Anonymous Sticker would probably not be a great idea, lol. I am looking to buy some on Amazon considering I only have one snake sticker on my laptop. Any advice would be great. Keep it real guys.

submitted by /u/JupitersHot
[link] [comments]

Request_Smuggler - Http Request Smuggling Vulnerability Scanner
http://www.kitploit.com/2022/03/requestsmuggler-http-request-smuggling.html

Based on the amazing research (https://portswigger.net/research/http-desync-attacks-request-smuggling-reborn) by James Kettle (https://twitter.com/albinowax). The tool can help to find servers that may be vulnerable (https://www.kitploit.com/search/label/Vulnerable) to request smuggling vulnerability.
Usage FLAGS: -h, --help Prints help information -V, --version Prints version information OPTIONS: --amount-of-payloads low/medium/all [default: low] -t, --attack-types [ClTeMethod, ClTePath, ClTeTime, TeClMethod, TeClPath, TeClTime] [default: "ClTeTime" "TeClTime"] --file send request from a file you need to explicitly pass \r\n at the end of the lines -H, --header Example: -H 'one:one' 'two:two' -X, --method [default: POST] -u, --url -v, --verbose 0 - print detected cases and errors only, 1 - print first line of server responses 2 - print requests [default: 0] --verify how many times verify the vulnerability [default: 2]">USAGE:
request_smuggler [OPTIONS] --url

FLAGS:
-h, --help Prints help information
-V, --version Prints version information

OPTIONS:
--amount-of-payloads low/medium/all [default: low]
-t, --attack-types
[ClTeMethod, ClTePath, ClTeTime, TeClMethod, TeClPath, TeClTime] [default: "ClTeTime" "TeClTime"]

--file
send request from a file
you need to explicitly pass \r\n at the end of the lines
-H, --header Example: -H 'one:one' 'two:two'
-X, --method [default: POST]
-u, --url
-v, --verbose
0 - print dete cted cases and errors only,
1 - print first line of server responses
2 - print requests [default: 0]
--verify how many times verify the vulnerability [default: 2]
Installation Linux from releases from source code (rust should be installed) git clone https://github.com/Sh1Yo/request_smuggler
cd request_smuggler
cargo build --release using cargo install cargo install request_smuggler --version 0.1.0-alpha.2 Mac from source code (rust should be installed) git clone https://github.com/Sh1Yo/request_smuggler
cd request_smuggler
cargo build --release using cargo install cargo install request_smuggler --version 0.1.0-alpha.2 Windows from releases

Download Request_Smuggler (https://github.com/Sh1Yo/request_smuggler)