Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
My favorite password cracking wordlists reprise

https://external-preview.redd.it/vuMlHp0AIsM_Ca5d7vo9xv7CzlxBfjHfNLncYNLbIrE.jpg?width=108&crop=smart&auto=webp&s=6baff6d5e808b9f6457c5c69616c1ba69c610f22 submitted by /u/oxagast
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

My favorite password cracking wordlists reprise

Posted in r/hacking by u/oxagast • 1 point and 0 comments

8 viewsedited 23:43

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
How do I find offsets for ret2libc when ASLR (32bit) is turned on?

Hey everyone, I'm trying to implement a ret2libc attack this time but with ASLR on a 32-bit machine. The 32-bit machine part makes it easier.

From my understanding of the attack, we need to fix a base address and try multiple times until the address is correct. And it won't take many attempts because there isn't much randomization on a 32-bit machine.

So when I run ldd ./vuln | grep libcthe output is as follows:-

$ ldd ./vuln | grep libc
`libc.so.6 => /lib32/libc.so.6 (0xf7d26000)`
$ ldd ./vuln | grep libc
`libc.so.6 => /lib32/libc.so.6 (0xf7db9000)`
$ ldd ./vuln | grep libc
`libc.so.6 => /lib32/libc.so.6 (0xf7d3e000)`
$ ldd ./vuln | grep libc
`libc.so.6 => /lib32/libc.so.6 (0xf7d08000)`
$ ldd ./vuln | grep libc
`libc.so.6 => /lib32/libc.so.6 (0xf7ddf000)`
$ ldd ./vuln | grep libc
`libc.so.6 => /lib32/libc.so.6 (0xf7d42000)`
$ ldd ./vuln | grep libc
`libc.so.6 => /lib32/libc.so.6 (0xf7d21000)`
$ ldd ./vuln | grep libc
`libc.so.6 => /lib32/libc.so.6 (0xf7dc7000)`
So it's pretty clear that only the 2 bits after 'f7d' are changing. So I can pick one address and try multiple times. How do I find the offsets for the system function and the '/bin/sh' argument for a particular base address?

I found this link exploiting an almost similar vulnerability, but the author didn't explain how to get the offsets.

Still, for the system function I tried readelf -s /lib32/libc.so.6 | grep systemand got the output:-

255: 001271a0 102 FUNC GLOBAL DEFAULT 13 svcerr_systemerr@@GLIBC_2.0

654: 0003cf10 55 FUNC GLOBAL DEFAULT 13 __libc_system@@GLIBC_PRIVATE

1513: 0003cf10 55 FUNC WEAK DEFAULT 13 system@@GLIBC_2.0

So, is 0x0003cf10 my offset? And I still I have to find '/bin/sh' which I have no clue about. If you have any links to any helpful writeups please share

submitted by /u/reddotname
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

From the hacking community on Reddit: How do I find offsets for ret2libc when ASLR (32bit) is turned on?

Explore this post and more from the hacking community

13 viewsedited 23:43

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
where do stock brokers (such as robinhood, tdameritrade, etc) get their pricing data from?

So I've read of some cryptocurrency exchanges having their pricing oracles hacked, allowing someone to buy a cryptocurrency at a lower price or sell at a higher price than the reality is.

I've wondered, why hasn't that happened in the regular stock market?

submitted by /u/Panzercannon03
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

where do stock brokers (such as robinhood, tdameritrade, etc) get...

So I've read of some cryptocurrency exchanges having their pricing oracles hacked, allowing someone to buy a cryptocurrency at a lower price or...

6 viewsedited 23:43

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
Shower Thought: Are Inverse Programs a Thing?

I had an interesting thought/ idea in the shower, and am coming to Reddit to learn if it's a thing and discuss with any one who's interested. (I'm also not sure this is the best sub for this, but I can't think of any others.)

I'm not quite sure what to call this idea, so I'm going to just go with inverse programming.

The idea/ question is, once everything is boiled down to just ones and zeros, is here any program or piece of data that when every single bit is flipped (the inverse) it produces something coherent but different from the original piece of information (data/instruction).

I assume this is the basis of simple encryption. Flip bits based on a repeated key of bits.

Is deeper encryption just layers of more keys that flip more bits?

Is it possible to encrypt something in such a way that it appears to be a functioning thing (program, photo, text etc) but when passed through decryption it changes in to a different program, image, text etc.?

Could you effectively hide viruses withing encryption. Say like a booby trap. If someone tries to brute force your encrypted file, and tried the wrong a wrong key, it will decrypt it into something harmful?

Am I a genius? A moron who has no idea what their talking about? Or someone somewhat intelligent who's needlessly reinventing the wheel?

Any thoughts? I assume I'm sure something like this exists, I just couldn't find it. Anyone have a direction to point me in or a keyword to search for more info?

Thanks!

submitted by /u/Agent34e
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Shower Thought: Are Inverse Programs a Thing?

I had an interesting thought/ idea in the shower, and am coming to Reddit to learn if it's a thing and discuss with any one who's interested. (I'm...

5 viewsedited 23:43

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
I submitted a severe vulnerability on the cashapp app but..

So I found a vulnerability on the app that allows you to double your money as well as not spend the amount you doubled.

This allows the user to make money out of thin air.

The damage this can cause is HUGE! If alot of people do it square would lose millions in seconds.

Here is the issue I submitted the bug to square via bugcrowd, after a week of waiting I hear back.

They state the the bug is not applicable.

The bug still works.

I am debating on releasing info in detail about the vulnerability here for everyone to use/learn.

What should I do? Should I keep it to myself, release it or let it be and forget about it.

submitted by /u/yahboyelias
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

I submitted a severe vulnerability on the cashapp app but..

So I found a vulnerability on the app that allows you to double your money as well as not spend the amount you doubled. This allows the user to...

6 viewsedited 23:43

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
I want to learn more about hacking but I am scared of the community.

Ive just heard bad things. One person claimed that they used to be in a discord server where people would constantly try to dox them. I can imagine that being good practice for defending yourself against threats but I’d rather not have constantly worry about someone trying to figure out where i live. Was this an exaggerated tale or should i actually be weary?

submitted by /u/Dattebayo_Dattebayo
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

I want to learn more about hacking but I am scared of the community.

Ive just heard bad things. One person claimed that they used to be in a discord server where people would constantly try to dox them. I can...

7 viewsedited 23:43

Hacking Articles Tips Tricks Videos Tutorials

7 views23:43

Hacking Articles Tips Tricks Videos Tutorials

Photo

hacking: security in practice
A step-by-step analysis of the Russian APT Turla backdoor called TinyTurla

https://external-preview.redd.it/6w7dtbwcM-oPp1RplTb0OPsb-3mi94MVkaHzBtVd9BM.jpg?width=640&crop=smart&auto=webp&s=b3faf5cf4c5e3150555435651577b55b2bd45247 submitted by /u/CyberMasterV
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

A step-by-step analysis of the Russian APT Turla backdoor called...

Posted in r/hacking by u/CyberMasterV • 1 point and 0 comments

7 viewsedited 23:43

Hacking Articles Tips Tricks Videos Tutorials

Dark Reading: Attacks/Breaches
Understanding Private 5G LANs in the Enterprise

As the technology matures and costs begin to drop, 5G LAN looks more like a realistic replacement for corporate Wi-Fi networks.

7 views00:57

Source

Hacking Articles Tips Tricks Videos Tutorials

Dark Reading: Attacks/Breaches
Log4j Attacks Continue Unabated Against VMware Horizon Servers

Threat actors are exploiting the vulnerability to drop Web shells and cryptominers, security vendor says.

8 views00:57

Source

Hacking Articles Tips Tricks Videos Tutorials

11 views00:57

Hacking Articles Tips Tricks Videos Tutorials

Photo

Dark Reading: Attacks/Breaches
Private Equity Firm Led by Mnuchin Acquires Mobile Security Vendor Zimperium

Liberty Strategic Capital to pay $525 million for mobile security vendor.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading

Private Equity Firm Led by Mnuchin Acquires Mobile Security Vendor Zimperium

Liberty Strategic Capital to pay $525 million for mobile security vendor.

13 viewsedited 00:57

Hacking Articles Tips Tricks Videos Tutorials