Hacking on Medium
КУПИВАЙТЕ ЯКІСНІ ПІДРОБЛЕЖНІ ГРОШІ WHATSAPP ME ЗА ТЕЛЕФОНОМ +27 67 252 9928 ЄВРО, ДОЛАРИ ТА ФУНТІ…

https://cdn-images-1.medium.com/max/1080/1*bOkIYpWuINVj4OBYLuwD0A.jpeg
Придбайте водійські права, паспорт, візу, іспити EITLS, підроблені банкноти WhatsApp: +27 67 252 9928

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How do “email hackers” send you an email from yourself?

I’ve recently gotten one of those classic “I’m hacked you and stolen you information” emails, and it’s clearly a scam that relies on the fear factor. The only thing that concerns me is that the email was seemingly sent from my own account and that the hacker knows the password. I haven’t gotten any “new login” notifications, and read somewhere that such a thing can be easily spoofed by even inexperienced hackers. My question: How? Did they actually log into my email? I’m almost certain they didn’t as it was my school email account and the head of it would instantly get notified. I’m just wondering how it happened.

submitted by /u/_the_redditor__
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Precursor Malware is a Early Warning Sign for Ransomware

Ransomware typically rely on malware downloaders and other delivery mechanisms. Detecting and removing precursor malware improves the odds that a ransomware attack has been blocked.

Casper-Fs - A Custom Hidden Linux Kernel Module Generator. Each Module Works In The File System To Protect And Hide Secret Files
http://www.kitploit.com/2022/03/casper-fs-custom-hidden-linux-kernel.html

___________________________
@hacking_Attack
@Hacking_Video

Enter the folder and install python3 modules: $ cd casper-fs/module_generator
$ sudo python3 -m pip install -r requirements.txt
Edit your file rules in directory (https://www.kitploit.com/search/label/Directory) module_generator/rules/fs-rules.yaml, the python scripts, use that file to generate a new casper-fs custom module. $ cat module_generator/rules/fs-rules.yaml
binary_name: casperfs
module_name: Casperfs
unhide_module_key: AbraKadabra
hide_module_key: Shazam
fake_device_name: usb15
unhide-hide-file-key: Alakazam
unprotect-protect-file-key: Sesame
fs-rules:
- hidden:
1: secret.txt
2: my_vault.db
- protect:
1: backup_httpd.log
The array is hidden and array protected. You can insert a lot of the elements of another file on context, for example: - protect:
1: backup_httpd.log
2: secret_img.iso
3: secret_file.img
4: secret_file2.img
5: secret_file3.img
If you want to study the static code to generate, look at the directory "templates" content. The second step, generate your module. If you want to generate a kernel module following your YAML file of rules, follow that command: $ python3 casper-fs-gen.py --rules rules/fs-rules.yaml
This action can generate a generic module with the fs-rules.yaml. The third step, install your module. If you use Fedora Linux, install kernel packages for the developer: # dnf update
# dnf install kernel-headers.x86_64 kernel-modules.x86_64 kernel.x86_64 kernel-devel kmod
On Ubuntu Linux: apt install linux-headers-generic gcc make
To test module: # cd output; make clean; make
# insmod casperfs.ko
The fourth step runs your custom module. The password to turn casper-fs module visible for lsmod is the key "Shazam". The password to turn the casper-fs invisible is "AbraKadabra". The password to turn the secret files in hidden is "Alakazam", the same to turn to unhidden. The password to protect files or unprotect is "Sesame". You need to send the password for your fake device, "usb15" for example, to test hidden and unhidden resources on the file system: /dev/usb15 $ ls secret.txt $ echo "Alakazam" > /dev/usb15 $ ls -- no results--'>$ touch secret.txt
$ ls
-- no results--
$ echo "Alakazam" > /dev/usb15
$ ls
secret.txt
$ echo "Alakazam" > /dev/usb15
$ ls
-- no results--
So this is an example of trying to remove a protected file by Casper-fs: /dev/usb15 // to remove protection # rm backup_httpd.log # ls test.txt log.txt # echo "Sesame" > /dev/usb15 // to active protection (https://www.kitploit.com/search/label/Protection) again'># ls
test.txt log.txt backup_httpd.log
# rm backup_httpd.log
# ls
test.txt log.txt backup_httpd.log
# echo "Sesame" > /dev/usb15 // to remove protection
# rm backup_httpd.log
# ls
test.txt log.txt
# echo "Sesame" > /dev/usb15 // to active protection again
Note You need to turn casperfs visible at the "lsmod" command. Need this action before removing module /dev/usb15 # lsmod | grep casper casperfs # rmmod casperfs"># rmmod casperfs
rmmod: ERROR: ../libkmod/libkmod-module.c:799 kmod_module_remove_module() could not remove 'casperfs': No such file or directory
rmmod: ERROR: could not remove module casperfs: No such file or directory
# lsmod | grep casper
# echo "Shazam" > /dev/usb15
# lsmod | grep casper
casperfs
# rmmod casperfs
Random notes Tested on ubuntu 16 and fedora 29 at kernels "3.x","4.x" and "5.x". Point of attention This tool aims to use in the hardening system context. Pay attention if you have proper authorization (https://www.kitploit.com/search/label/Authorization) before using that. I do not have responsibility for your actions. You can use a hammer to construct a house or destroy it, choose the law path, don't be a bad guy, remember. References Wikipedia Netfilter https://en.wikipedia.org/wiki/Netfilter Linux Device Drivers http://lwn.net/Kernel/LDD3/ M0nad's Diamorphine https://github.com/m0nad/Diamorphine/

___________________________
@hacking_Attack
@Hacking_Video

Download Casper-Fs (https://github.com/CoolerVoid/casper-fs)

___________________________
@hacking_Attack
@Hacking_Video

Notion as a platform for offensive operations
https://www.reddit.com/r/redteamsec/comments/ts5se7/notion_as_a_platform_for_offensive_operations/

submitted by /u/soupcreamychicken (https://www.reddit.com/user/soupcreamychicken)
[link] (https://github.com/mttaggart/OffensiveNotion) [comments] (https://www.reddit.com/r/redteamsec/comments/ts5se7/notion_as_a_platform_for_offensive_operations/)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Αύξηση κυβερνοεπιθέσεων κατά την σύγκρουση Ρωσίας-Ουκρανίας

https://cdn-images-1.medium.com/max/1000/0*QYR7W5c7engKdAhU.jpg
Continue reading on iGuRu.gr »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Ronin Bridge Exploit — Cashing out through Huobi, FTX, Crypto.com?

https://cdn-images-1.medium.com/max/2600/1*V8kOkCQ9z7hLA62Plvir_g.jpeg
Monitoring digital assets worth over $600M+ USD with ease: Uppsala Security’s latest Crypto Asset Monitor Solution

Continue reading on Sentinel Protocol »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Axie Infinity Loses Over $600 Million in Crypto Following Ronin Network Hack

https://cdn-images-1.medium.com/max/1170/1*y8nZ2HZV_C0Lk_qcvZOrfA.png
An Ethereum sidechain that powers blockchain game Axie Infinity has been hacked for more than $600 million worth of cryptocurrency, making…

Continue reading on Coinmonks »

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
Casper-Fs - A Custom Hidden Linux Kernel Module Generator. Each Module Works In The File System To Protect And Hide Secret Files

https://blogger.googleusercontent.com/img/a/AVvXsEgiAGECyuWm1eyDx3zDcBE-vSaeI-G0z7gPiofDI2nnzUrqWx4eCrptfzvC2IGbsPELlYNAbi_72O-A6rRvBHxMl8WPhTEPJFe9xScq8L_KO0z2ORd8CkuXjR9dEqpwigc0OQlKLSQ8GOXuf5DFLpWWN_NOi41ODUfNqNgPUGMPX0E4wOlDQjo0YRb-=w640-h408 Casper-fs is a custom Linux Kernel Module generator to work with resources to protect or hide a custom list of files. Each LKM has resources to protect or hide files following a custom list in the YAML rule file. Yes, not even the root has permission to see the files or make actions like edit and remove. The files only can be caught, edited, and deleted if the user sends a proper key to the custom device to liberate the action in the file system. OverviewThe first point, the user sends input to the Casper-FS the YAML file with rules to generate a custom LKM(Linux kernel module), each generated module works in the file system to protect and hide secret files (Not even the root has permission to see the file, only can see with a proper sending key to the custom device). This program has two principal functions: turning private files hidden. The second function is to protect confidential files to prevent reading, writing and removal.

The motivation: An attacker can read every file in your machine in a bad situation(if he got root). But if you have a Casper-fs custom module, the attacker will not find the hidden kernel module that has functions to protect your private data files such as logs and password vaults.

My beginning purpose at this project is to protect my server, which is to protect my friends' machines. When I talk to friends, I say peoples that don't know how to write low-level code. Using the Casper-fs, you can generate your custom kernel module to protect your secret files. The low-level programmer can write new templates for modules etc. Video demo:https://www.youtube.com/watch?v=qxLEkYFicTg The first step, understand before the run.Verify if the kernel version is 3.x, 4.x, or 5.x: $ uname -r Clone the repository $ git clone https://github.com/CoolerVoid/casper-fs Enter the folder and install python3 modules: $ cd casper-fs/module_generator
$ sudo python3 -m pip install -r requirements.txt Edit your file rules in directory module_generator/rules/fs-rules.yaml, the python scripts, use that file to generate a new casper-fs custom module. $ cat module_generator/rules/fs-rules.yaml
binary_name: casperfs
module_name: Casperfs
unhide_module_key: AbraKadabra
hide_module_key: Shazam
fake_device_name: usb15
unhide-hide-file-key: Alakazam
unprotect-protect-file-key: Sesame
fs-rules:
- hidden:
1: secret.txt
2: my_vault.db
- protect:
1: backup_httpd.log The array is hidden and array protected. You can insert a lot of the elements of another file on context, for example: - protect:
1: backup_httpd.log
2: secret_img.iso
3: secret_file.img
4: secret_file2.img
5: secret_file3.img If you want to study the static code to generate, look at the directory "templates" content. The second step, generate your module.If you want to generate a kernel module following your YAML file of rules, follow that command: $ python3 casper-fs-gen.py --rules rules/fs-rules.yaml This action can generate a generic module with the fs-rules.yaml. The third step, install your module.If you use Fedora Linux, install kernel packages for the developer: # dnf update
# dnf install kernel-headers.x86_64 kernel-modules.x86_64 kernel.x86_64 kernel-devel kmod On Ubuntu Linux: apt install linux-headers-generic gcc make To test module: # cd output; make clean; make
# insmod casperfs.ko The fourth step runs your custom module.* The passwor[...]

___________________________
@hacking_Attack
@Hacking_Video

d to turn casper-fs module visible for lsmod is the key "Shazam".
* The password to turn the casper-fs invisible is "AbraKadabra".
* The password to turn the secret files in hidden is "Alakazam", the same to turn to unhidden.
* The password to protect files or unprotect is "Sesame".

You need to send the password for your fake device, "usb15" for example, to test hidden and unhidden resources on the file system:

/dev/usb15 $ ls secret.txt $ echo "Alakazam" > /dev/usb15 $ ls -- no results--">$ touch secret.txt
$ ls
-- no results--
$ echo "Alakazam" > /dev/usb15
$ ls
secret.txt
$ echo "Alakazam" > /dev/usb15
$ ls
-- no results--

So this is an example of trying to remove a protected file by Casper-fs:

/dev/usb15 // to remove protection # rm backup_httpd.log # ls test.txt log.txt # echo "Sesame" > /dev/usb15 // to active protection again"># ls
test.txt log.txt backup_httpd.log
# rm backup_httpd.log
# ls
test.txt log.txt backup_httpd.log
# echo "Sesame" > /dev/usb15 // to remove protection
# rm backup_httpd.log
# ls
test.txt log.txt
# echo "Sesame" > /dev/usb15 // to active protection again

* Note You need to turn casperfs visible at the "lsmod" command. Need this action before removing module

/dev/usb15 # lsmod | grep casper casperfs # rmmod casperfs"># rmmod casperfs
rmmod: ERROR: ../libkmod/libkmod-module.c:799 kmod_module_remove_module() could not remove 'casperfs': No such file or directory
rmmod: ERROR: could not remove module casperfs: No such file or directory
# lsmod | grep casper
# echo "Shazam" > /dev/usb15
# lsmod | grep casper
casperfs
# rmmod casperfs Random notesTested on ubuntu 16 and fedora 29 at kernels "3.x","4.x" and "5.x". Point of attentionThis tool aims to use in the hardening system context. Pay attention if you have proper authorization before using that. I do not have responsibility for your actions. You can use a hammer to construct a house or destroy it, choose the law path, don't be a bad guy, remember. ReferencesWikipedia Netfilter https://en.wikipedia.org/wiki/Netfilter

Linux Device Drivers http://lwn.net/Kernel/LDD3/

M0nad's Diamorphine https://github.com/m0nad/Diamorphine/ Download Casper-Fs

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Recommendation for note taking app (pentester)

Morning everyone. I'm after a recommendation for a note taking application. Currently using Cherrytree, not only is it rubbish but its now crashing alot... So time to move on. If you have a recommendation that would be good but also I'm terrible at organising my notes so if you can point me to a structure of headings I can shoehorn my notes into as well that would be the icing on the cake.

submitted by /u/1c3c0d3
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Unsafe content loading [Electron JS]
https://shabarkin.medium.com/unsafe-content-loading-electron-js-76296b6ac028?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Phishing in misconfigured Electron appsContinue reading on Medium » (https://shabarkin.medium.com/unsafe-content-loading-electron-js-76296b6ac028?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
WordPress Curtain 1.0.2 Cross Site Request Forgery

https://2.bp.blogspot.com/-Nz8u9CyJbsU/WWlveW9d4WI/AAAAAAAAIPw/tdSVtwWBcYIHlgRN6nbdKVd_fE-UdNKsACLcBGAs/s1600/h80.png
WordPress Curtain plugin version 1.0.2 suffers from a cross site request forgery vulnerability.

MD5 | 978ea605aee96ce40235254a8e16bcab

Download
# Exploit Title: WordPress Plugin curtain 1.0.2 - CSRF
# Date: 29-03-2022
# Exploit Author: Hassan Khan Yusufzai - Splint3r7
# Vendor Homepage: https://wordpress.org/plugins/curtain/

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video