Hacking on Medium
Αύξηση κυβερνοεπιθέσεων κατά την σύγκρουση Ρωσίας-Ουκρανίας

https://cdn-images-1.medium.com/max/1000/0*QYR7W5c7engKdAhU.jpg
Continue reading on iGuRu.gr »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Ronin Bridge Exploit — Cashing out through Huobi, FTX, Crypto.com?

https://cdn-images-1.medium.com/max/2600/1*V8kOkCQ9z7hLA62Plvir_g.jpeg
Monitoring digital assets worth over $600M+ USD with ease: Uppsala Security’s latest Crypto Asset Monitor Solution

Continue reading on Sentinel Protocol »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Axie Infinity Loses Over $600 Million in Crypto Following Ronin Network Hack

https://cdn-images-1.medium.com/max/1170/1*y8nZ2HZV_C0Lk_qcvZOrfA.png
An Ethereum sidechain that powers blockchain game Axie Infinity has been hacked for more than $600 million worth of cryptocurrency, making…

Continue reading on Coinmonks »

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
Casper-Fs - A Custom Hidden Linux Kernel Module Generator. Each Module Works In The File System To Protect And Hide Secret Files

https://blogger.googleusercontent.com/img/a/AVvXsEgiAGECyuWm1eyDx3zDcBE-vSaeI-G0z7gPiofDI2nnzUrqWx4eCrptfzvC2IGbsPELlYNAbi_72O-A6rRvBHxMl8WPhTEPJFe9xScq8L_KO0z2ORd8CkuXjR9dEqpwigc0OQlKLSQ8GOXuf5DFLpWWN_NOi41ODUfNqNgPUGMPX0E4wOlDQjo0YRb-=w640-h408 Casper-fs is a custom Linux Kernel Module generator to work with resources to protect or hide a custom list of files. Each LKM has resources to protect or hide files following a custom list in the YAML rule file. Yes, not even the root has permission to see the files or make actions like edit and remove. The files only can be caught, edited, and deleted if the user sends a proper key to the custom device to liberate the action in the file system. OverviewThe first point, the user sends input to the Casper-FS the YAML file with rules to generate a custom LKM(Linux kernel module), each generated module works in the file system to protect and hide secret files (Not even the root has permission to see the file, only can see with a proper sending key to the custom device). This program has two principal functions: turning private files hidden. The second function is to protect confidential files to prevent reading, writing and removal.

The motivation: An attacker can read every file in your machine in a bad situation(if he got root). But if you have a Casper-fs custom module, the attacker will not find the hidden kernel module that has functions to protect your private data files such as logs and password vaults.

My beginning purpose at this project is to protect my server, which is to protect my friends' machines. When I talk to friends, I say peoples that don't know how to write low-level code. Using the Casper-fs, you can generate your custom kernel module to protect your secret files. The low-level programmer can write new templates for modules etc. Video demo:https://www.youtube.com/watch?v=qxLEkYFicTg The first step, understand before the run.Verify if the kernel version is 3.x, 4.x, or 5.x: $ uname -r Clone the repository $ git clone https://github.com/CoolerVoid/casper-fs Enter the folder and install python3 modules: $ cd casper-fs/module_generator
$ sudo python3 -m pip install -r requirements.txt Edit your file rules in directory module_generator/rules/fs-rules.yaml, the python scripts, use that file to generate a new casper-fs custom module. $ cat module_generator/rules/fs-rules.yaml
binary_name: casperfs
module_name: Casperfs
unhide_module_key: AbraKadabra
hide_module_key: Shazam
fake_device_name: usb15
unhide-hide-file-key: Alakazam
unprotect-protect-file-key: Sesame
fs-rules:
- hidden:
1: secret.txt
2: my_vault.db
- protect:
1: backup_httpd.log The array is hidden and array protected. You can insert a lot of the elements of another file on context, for example: - protect:
1: backup_httpd.log
2: secret_img.iso
3: secret_file.img
4: secret_file2.img
5: secret_file3.img If you want to study the static code to generate, look at the directory "templates" content. The second step, generate your module.If you want to generate a kernel module following your YAML file of rules, follow that command: $ python3 casper-fs-gen.py --rules rules/fs-rules.yaml This action can generate a generic module with the fs-rules.yaml. The third step, install your module.If you use Fedora Linux, install kernel packages for the developer: # dnf update
# dnf install kernel-headers.x86_64 kernel-modules.x86_64 kernel.x86_64 kernel-devel kmod On Ubuntu Linux: apt install linux-headers-generic gcc make To test module: # cd output; make clean; make
# insmod casperfs.ko The fourth step runs your custom module.* The passwor[...]

___________________________
@hacking_Attack
@Hacking_Video

d to turn casper-fs module visible for lsmod is the key "Shazam".
* The password to turn the casper-fs invisible is "AbraKadabra".
* The password to turn the secret files in hidden is "Alakazam", the same to turn to unhidden.
* The password to protect files or unprotect is "Sesame".

You need to send the password for your fake device, "usb15" for example, to test hidden and unhidden resources on the file system:

/dev/usb15 $ ls secret.txt $ echo "Alakazam" > /dev/usb15 $ ls -- no results--">$ touch secret.txt
$ ls
-- no results--
$ echo "Alakazam" > /dev/usb15
$ ls
secret.txt
$ echo "Alakazam" > /dev/usb15
$ ls
-- no results--

So this is an example of trying to remove a protected file by Casper-fs:

/dev/usb15 // to remove protection # rm backup_httpd.log # ls test.txt log.txt # echo "Sesame" > /dev/usb15 // to active protection again"># ls
test.txt log.txt backup_httpd.log
# rm backup_httpd.log
# ls
test.txt log.txt backup_httpd.log
# echo "Sesame" > /dev/usb15 // to remove protection
# rm backup_httpd.log
# ls
test.txt log.txt
# echo "Sesame" > /dev/usb15 // to active protection again

* Note You need to turn casperfs visible at the "lsmod" command. Need this action before removing module

/dev/usb15 # lsmod | grep casper casperfs # rmmod casperfs"># rmmod casperfs
rmmod: ERROR: ../libkmod/libkmod-module.c:799 kmod_module_remove_module() could not remove 'casperfs': No such file or directory
rmmod: ERROR: could not remove module casperfs: No such file or directory
# lsmod | grep casper
# echo "Shazam" > /dev/usb15
# lsmod | grep casper
casperfs
# rmmod casperfs Random notesTested on ubuntu 16 and fedora 29 at kernels "3.x","4.x" and "5.x". Point of attentionThis tool aims to use in the hardening system context. Pay attention if you have proper authorization before using that. I do not have responsibility for your actions. You can use a hammer to construct a house or destroy it, choose the law path, don't be a bad guy, remember. ReferencesWikipedia Netfilter https://en.wikipedia.org/wiki/Netfilter

Linux Device Drivers http://lwn.net/Kernel/LDD3/

M0nad's Diamorphine https://github.com/m0nad/Diamorphine/ Download Casper-Fs

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Recommendation for note taking app (pentester)

Morning everyone. I'm after a recommendation for a note taking application. Currently using Cherrytree, not only is it rubbish but its now crashing alot... So time to move on. If you have a recommendation that would be good but also I'm terrible at organising my notes so if you can point me to a structure of headings I can shoehorn my notes into as well that would be the icing on the cake.

submitted by /u/1c3c0d3
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Unsafe content loading [Electron JS]
https://shabarkin.medium.com/unsafe-content-loading-electron-js-76296b6ac028?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Phishing in misconfigured Electron appsContinue reading on Medium » (https://shabarkin.medium.com/unsafe-content-loading-electron-js-76296b6ac028?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
WordPress Curtain 1.0.2 Cross Site Request Forgery

https://2.bp.blogspot.com/-Nz8u9CyJbsU/WWlveW9d4WI/AAAAAAAAIPw/tdSVtwWBcYIHlgRN6nbdKVd_fE-UdNKsACLcBGAs/s1600/h80.png
WordPress Curtain plugin version 1.0.2 suffers from a cross site request forgery vulnerability.

MD5 | 978ea605aee96ce40235254a8e16bcab

Download
# Exploit Title: WordPress Plugin curtain 1.0.2 - CSRF
# Date: 29-03-2022
# Exploit Author: Hassan Khan Yusufzai - Splint3r7
# Vendor Homepage: https://wordpress.org/plugins/curtain/

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
WordPress Clipr 1.2.3 Cross Site Scripting

https://2.bp.blogspot.com/-QRNaohEgzXY/WWlvKewId7I/AAAAAAAAIL8/tdiAF5DdWR4NRfdTdLr92btKcmbTDzxHQCLcBGAs/s1600/h147.png
WordPress Clipr plugin version 1.2.3 suffers from a cross site scripting vulnerability.

MD5 | d1b537531b93739457721e8e0d5443a1

Download
# Exploit Title: WordPress plugin clipr version 1.2.3 - ( Authenticated )
# Date: 29-03-2022
# Exploit Author: Hassan Khan Yusufzai - Splint3r7
# Vendor Homepage: https://wordpress.org/plugins/clipr/
`
- Navigate to the main page of the WordPress URL
`http://localhost:10003/`
Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Atom CMS 1.0.2 Shell Upload

https://3.bp.blogspot.com/-UEPmQpzFyCs/WWlvQSuTgiI/AAAAAAAAINA/LFaHvgtClFA67K--PZO5ZJSS69Dsl8UBACLcBGAs/s1600/h31.png
Atom CMS version 1.0 suffers from a remote shell upload vulnerability.

MD5 | 96d978d4ce51689762e987b3a4617e53

Download
# Exploit Title: Atom CMS 2.0 - Remote Code Execution (RCE)
# Date: 22.03.2022
# Exploit Author: Ashish Koli (Shikari)
# Vendor Homepage: https://thedigitalcraft.com/
# Software Link: https://github.com/thedigicraft/Atom.CMS
# Version: 2.0
# Tested on: Ubuntu 20.04.3 LTS
# CVE: CVE-2022-25487

# Description
This script uploads webshell.php to the Atom CMS. An application will store that file in the uploads directory with a unique number which allows us to access Webshell.

# Usage : python3 exploit.py
Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video