When I was helping someone take down a poser/impostor account. I tried to check the request body on what’s going on behind the scene. The…Continue reading on Medium » (https://zerocode-ph.medium.com/spoof-as-another-facebook-user-to-report-an-impostor-account-f2dd6683744d?source=rss------bug_bounty-5)
___________________________
@hacking_Attack
@Hacking_Video
___________________________
@hacking_Attack
@Hacking_Video
Medium
Spoof as another Facebook user to report an impostor account
When I was helping someone take down a poser/impostor account. I tried to check the request body on what’s going on behind the scene. The…
hacking: security in practice
open source intelligence tools?
hey i've been a regular user of open soure intelligence tools like shodan , bu it is kind of a hassle when i'd have to head over to other search engines like this because sometimes I can't the exact information i'm looking for. Besides, it would have been much better if shodan was more noob user friendly to guide me through the process? I'm mainly using this for handling incidents but this seems sometimes useless for post incident response and time consuming for me so i'd appreciate if you could throw me some other alternatives(preferably more cost-effective as well) to try out? I'd like to try out a few before I settle on using one as my go-to
submitted by /u/alicia30765
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
open source intelligence tools?
hey i've been a regular user of open soure intelligence tools like shodan , bu it is kind of a hassle when i'd have to head over to other search engines like this because sometimes I can't the exact information i'm looking for. Besides, it would have been much better if shodan was more noob user friendly to guide me through the process? I'm mainly using this for handling incidents but this seems sometimes useless for post incident response and time consuming for me so i'd appreciate if you could throw me some other alternatives(preferably more cost-effective as well) to try out? I'd like to try out a few before I settle on using one as my go-to
submitted by /u/alicia30765
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
open source intelligence tools?
hey i've been a regular user of open soure intelligence tools like shodan , bu it is kind of a hassle when i'd have to head over to other search...
CVE-2022–21907
CVE-2022–21907: detection, protection, exploitation and demonstration. Exploitation: Powershell, Python, Ruby, NMAP and Metasploit…Continue reading on Medium »
Read more...
CVE-2022–21907: detection, protection, exploitation and demonstration. Exploitation: Powershell, Python, Ruby, NMAP and Metasploit…Continue reading on Medium »
Read more...
CVE-2022–21907
https://medium.com/@reconshell.com/cve-2022-21907-a119562dc97a?source=rss------bug_bounty-5
___________________________
@hacking_Attack
@Hacking_Video
https://medium.com/@reconshell.com/cve-2022-21907-a119562dc97a?source=rss------bug_bounty-5
___________________________
@hacking_Attack
@Hacking_Video
Medium
CVE-2022–21907
CVE-2022–21907: detection, protection, exploitation and demonstration. Exploitation: Powershell, Python, Ruby, NMAP and Metasploit…
CVE-2022–21907: detection, protection, exploitation and demonstration. Exploitation: Powershell, Python, Ruby, NMAP and Metasploit…Continue reading on Medium » (https://medium.com/@reconshell.com/cve-2022-21907-a119562dc97a?source=rss------bug_bounty-5)
___________________________
@hacking_Attack
@Hacking_Video
___________________________
@hacking_Attack
@Hacking_Video
Medium
CVE-2022–21907
CVE-2022–21907: detection, protection, exploitation and demonstration. Exploitation: Powershell, Python, Ruby, NMAP and Metasploit…
Hacking Articles Tips Tricks Videos Tutorials
Photo
Black Hat Ethical Hacking
Supply chain flaws in PHP package manager PEAR lay undiscovered for 15 years
Supply chain flaws in PHP package manager PEAR lay undiscovered for 15 yearsPost Views: 3
https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/patreon-300x61.png Advanced Enumeration techniques with NMAP, Zenmap and Hydra
Subscribe to Patreon to watch this episode.
Reading Time: 2 Minutes
Attackers could have wreaked havoc on the PHP ecosystem by exploiting a pair of longstanding vulnerabilities that were only recently patched in package manager PEAR.
PEAR developer accounts were left at risk of malicious takeover by a flaw arising from weak entropy on the password reset function, revealed Thomas Chauchefoin, a vulnerability researcher at Swiss security firm SonarSource, in a blog post.
Attackers could then poison the PHP ecosystem with malicious releases of existing packages, before securing persistent access to the central PEAR server via abuse of a separate vulnerability in an outdated version of a bundled dependency.
SonarSource has published a video explaining the two-pronged attack scenario.
See Also: Complete Offensive Security and Ethical Hacking Course
https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Solutions-1.png ‘Minimal technical expertise’PEAR has fallen out of favor amid the rise to dominance of rival PHP package manager Composer, in whose principal repository SonarSource disclosed a similarly serious vulnerability last year.
However, the most popular packages downloaded via PEAR – the PEAR client itself, Console_Getopt, Archive_Tar, and Mail – still rack up several thousand downloads per month.
The supply chain vulnerabilities, which lay undiscovered for more than 15 years, “could have been easily identified and exploited by threat actors with only minimal technical expertise, causing important disruption and security breaches across the world”, according to Chauchefoin.
Software supply chain attacks targeting PEAR and similar developer tools have a particularly significant impact given developers “are likely to run it on their computers before deploying it on production servers, creating an opportunity for attackers to pivot into companies’ internal network”, he added. Weak PRNGPEAR’s password reset function used mt_rand() to generate random values, even though the technique is obsolete and unsuitable for generating cryptographically secure values.
Once the values were concatenated and hashed with md5(), “the final value is only based on two unknowns, which are the output of mt_rand() and time(),” said Chauchefoin.
“The first one cannot yield many values (10), and the second one can easily be approximated by the attacker. In addition, the HTTP server of pear.php.net adds a Date header to its responses, narrowing it down to only a few values (< 5).”
The researchers concluded that attackers could secure a valid password reset token within 50 attempts.
See Also: Kali Linux 2022.1 Release with Visual Updates, New Tools, Legacy SSH The other bug provided a backdoor for continuing attacks even if the first bug had been fixed. “It could also help them to hide their tracks by modifying access logs,” said Chauchefoin.
The flaw arose because pearweb pulled version 1.4.7 of Archive_Tar, which was vulnerable to CVE-2020-36193, a directory traversal issue that could lead to remote code execution (RCE) on PEAR. TimelineSonarSource warned the maintainers of PEAR about the bugs on July 30, 2021.
They were patched in pearweb version 1.32, released on March 13, with all previous versions affected.
The flaws’ survival in PEAR’s codebase for more than 15 years raises “questions about the lack of security contrib[...]
___________________________
@hacking_Attack
@Hacking_Video
Supply chain flaws in PHP package manager PEAR lay undiscovered for 15 years
Supply chain flaws in PHP package manager PEAR lay undiscovered for 15 yearsPost Views: 3
https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/patreon-300x61.png Advanced Enumeration techniques with NMAP, Zenmap and Hydra
Subscribe to Patreon to watch this episode.
Reading Time: 2 Minutes
Attackers could have wreaked havoc on the PHP ecosystem by exploiting a pair of longstanding vulnerabilities that were only recently patched in package manager PEAR.
PEAR developer accounts were left at risk of malicious takeover by a flaw arising from weak entropy on the password reset function, revealed Thomas Chauchefoin, a vulnerability researcher at Swiss security firm SonarSource, in a blog post.
Attackers could then poison the PHP ecosystem with malicious releases of existing packages, before securing persistent access to the central PEAR server via abuse of a separate vulnerability in an outdated version of a bundled dependency.
SonarSource has published a video explaining the two-pronged attack scenario.
See Also: Complete Offensive Security and Ethical Hacking Course
https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Solutions-1.png ‘Minimal technical expertise’PEAR has fallen out of favor amid the rise to dominance of rival PHP package manager Composer, in whose principal repository SonarSource disclosed a similarly serious vulnerability last year.
However, the most popular packages downloaded via PEAR – the PEAR client itself, Console_Getopt, Archive_Tar, and Mail – still rack up several thousand downloads per month.
The supply chain vulnerabilities, which lay undiscovered for more than 15 years, “could have been easily identified and exploited by threat actors with only minimal technical expertise, causing important disruption and security breaches across the world”, according to Chauchefoin.
Software supply chain attacks targeting PEAR and similar developer tools have a particularly significant impact given developers “are likely to run it on their computers before deploying it on production servers, creating an opportunity for attackers to pivot into companies’ internal network”, he added. Weak PRNGPEAR’s password reset function used mt_rand() to generate random values, even though the technique is obsolete and unsuitable for generating cryptographically secure values.
Once the values were concatenated and hashed with md5(), “the final value is only based on two unknowns, which are the output of mt_rand() and time(),” said Chauchefoin.
“The first one cannot yield many values (10), and the second one can easily be approximated by the attacker. In addition, the HTTP server of pear.php.net adds a Date header to its responses, narrowing it down to only a few values (< 5).”
The researchers concluded that attackers could secure a valid password reset token within 50 attempts.
See Also: Kali Linux 2022.1 Release with Visual Updates, New Tools, Legacy SSH The other bug provided a backdoor for continuing attacks even if the first bug had been fixed. “It could also help them to hide their tracks by modifying access logs,” said Chauchefoin.
The flaw arose because pearweb pulled version 1.4.7 of Archive_Tar, which was vulnerable to CVE-2020-36193, a directory traversal issue that could lead to remote code execution (RCE) on PEAR. TimelineSonarSource warned the maintainers of PEAR about the bugs on July 30, 2021.
They were patched in pearweb version 1.32, released on March 13, with all previous versions affected.
The flaws’ survival in PEAR’s codebase for more than 15 years raises “questions about the lack of security contrib[...]
___________________________
@hacking_Attack
@Hacking_Video
Black Hat Ethical Hacking
Supply chain flaws in PHP package manager PEAR lay undiscovered for 15 years | Black Hat Ethical Hacking
Attackers could have wreaked havoc on the PHP ecosystem by exploiting a pair of longstanding vulnerabilities that were only recently patched in package manager PEAR.
Hacking Articles Tips Tricks Videos Tutorials
Black Hat Ethical Hacking Supply chain flaws in PHP package manager PEAR lay undiscovered for 15 years Supply chain flaws in PHP package manager PEAR lay undiscovered for 15 yearsPost Views: 3 https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/patreon…
utions [audits] from companies relying on it”, said Chauchefoin.
They advised PEAR users to “consider migrating to Composer, where the contributors community is more active and the same packages are available”. See Also: Offensive Security Tool: Scapy Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?
If you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com
See Also: Lizard Squad – the infamous hacking group that brought Xbox and PlayStation networks to their knees. Source: portswigger.net Source Linkhttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Merch-1024x1024.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/php-hack-90x90.jpg PHP bug allows attackers to bypass domain filters, stage DoS attacks against servers1 day ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/apple-iphone-hacking-90x90.jpg Apple emergency update fixes zero-days used to hack iPhones, Macs4 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Google-Campus-90x90.jpg Google Chrome Bug Actively Exploited as Zero-Day5 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/685f-article-211221-chrome-site-isolation-body-text-90x90.jpg HTML parser bug triggers Chromium XSS security flaw6 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Polygon-hacker-90x90.jpg Hackers getting faster at latching onto unpatched vulnerabilities7 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/mitmproxy-90x90.png HTTP request smuggling bug patched in mitmproxy1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/ee3dc49c79d14f20970cc8b20063f52e-90x90.jpg Flash loan attack on One Ring protocol nets crypto-thief $1.4 million2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/ezgif.com-gif-maker-3-1-90x90.jpg DeadBolt Ransomware Resurfaces to Hit QNAP Again2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/hackers-90x90.jpg Lapsus$ Data Kidnappers Claim Snatches From Microsoft, Okta2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Invisible-man-scaled-e1647906959971-90x90.jpg Browser-in-the-Browser Attack Makes Phishing Nearly Invisible2 weeks ago
The post Supply chain flaws in PHP package manager PEAR lay undiscovered for 15 years first appeared on Black Hat Ethical Hacking.
___________________________
@hacking_Attack
@Hacking_Video
They advised PEAR users to “consider migrating to Composer, where the contributors community is more active and the same packages are available”. See Also: Offensive Security Tool: Scapy Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?
If you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com
See Also: Lizard Squad – the infamous hacking group that brought Xbox and PlayStation networks to their knees. Source: portswigger.net Source Linkhttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Merch-1024x1024.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/php-hack-90x90.jpg PHP bug allows attackers to bypass domain filters, stage DoS attacks against servers1 day ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/apple-iphone-hacking-90x90.jpg Apple emergency update fixes zero-days used to hack iPhones, Macs4 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Google-Campus-90x90.jpg Google Chrome Bug Actively Exploited as Zero-Day5 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/685f-article-211221-chrome-site-isolation-body-text-90x90.jpg HTML parser bug triggers Chromium XSS security flaw6 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Polygon-hacker-90x90.jpg Hackers getting faster at latching onto unpatched vulnerabilities7 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/mitmproxy-90x90.png HTTP request smuggling bug patched in mitmproxy1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/ee3dc49c79d14f20970cc8b20063f52e-90x90.jpg Flash loan attack on One Ring protocol nets crypto-thief $1.4 million2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/ezgif.com-gif-maker-3-1-90x90.jpg DeadBolt Ransomware Resurfaces to Hit QNAP Again2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/hackers-90x90.jpg Lapsus$ Data Kidnappers Claim Snatches From Microsoft, Okta2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Invisible-man-scaled-e1647906959971-90x90.jpg Browser-in-the-Browser Attack Makes Phishing Nearly Invisible2 weeks ago
The post Supply chain flaws in PHP package manager PEAR lay undiscovered for 15 years first appeared on Black Hat Ethical Hacking.
___________________________
@hacking_Attack
@Hacking_Video
Hacking on Medium
CVE-2022–21907
https://cdn-images-1.medium.com/max/754/1*33v1BWDUMgWh_57XTG-DSA.jpeg
CVE-2022–21907: detection, protection, exploitation and demonstration. Exploitation: Powershell, Python, Ruby, NMAP and Metasploit…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
CVE-2022–21907
https://cdn-images-1.medium.com/max/754/1*33v1BWDUMgWh_57XTG-DSA.jpeg
CVE-2022–21907: detection, protection, exploitation and demonstration. Exploitation: Powershell, Python, Ruby, NMAP and Metasploit…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
CVE-2022–21907
CVE-2022–21907: detection, protection, exploitation and demonstration. Exploitation: Powershell, Python, Ruby, NMAP and Metasploit…
Hacking on Medium
What is Automated Content Discovery?
https://cdn-images-1.medium.com/max/1200/0*9znlwfXgdcuXRBqn
Wordlists, Automation Tools, FFUF, DIRB, and Gobuster
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
What is Automated Content Discovery?
https://cdn-images-1.medium.com/max/1200/0*9znlwfXgdcuXRBqn
Wordlists, Automation Tools, FFUF, DIRB, and Gobuster
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
What is Automated Content Discovery?
Wordlists, Automation Tools, FFUF, DIRB, and Gobuster
Hacking on Medium
How to call everyone around
https://cdn-images-1.medium.com/max/600/1*e0EHUJNxWzk6829ZiM9IVw.gif
We in Postuf are big fans of the Watch Dogs franchise, an action-adventure video game where the protagonist, Aiden Pearce, is able to…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
How to call everyone around
https://cdn-images-1.medium.com/max/600/1*e0EHUJNxWzk6829ZiM9IVw.gif
We in Postuf are big fans of the Watch Dogs franchise, an action-adventure video game where the protagonist, Aiden Pearce, is able to…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
How to call everyone around
We in Postuf are big fans of the Watch Dogs franchise, an action-adventure video game where the protagonist, Aiden Pearce, is able to…
Bug Bounty: How to get private invites
https://cyb3rwulfengrav.medium.com/bug-bounty-how-to-get-private-invites-60062a5d0809?source=rss------bug_bounty-5
Now I know that a lot of people will not like this answer and you certainly do not have to follow this method if you don’t wish to.Continue reading on Medium » (https://cyb3rwulfengrav.medium.com/bug-bounty-how-to-get-private-invites-60062a5d0809?source=rss------bug_bounty-5)
___________________________
@hacking_Attack
@Hacking_Video
https://cyb3rwulfengrav.medium.com/bug-bounty-how-to-get-private-invites-60062a5d0809?source=rss------bug_bounty-5
Now I know that a lot of people will not like this answer and you certainly do not have to follow this method if you don’t wish to.Continue reading on Medium » (https://cyb3rwulfengrav.medium.com/bug-bounty-how-to-get-private-invites-60062a5d0809?source=rss------bug_bounty-5)
___________________________
@hacking_Attack
@Hacking_Video
Medium
Bug Bounty: How to get private invites
Now I know that a lot of people will not like this answer and you certainly do not have to follow this method if you don’t wish to.
Hacking Articles Tips Tricks Videos Tutorials
Photo
hacking: security in practice
JuiceWRLD VEVO Hacked!
https://external-preview.redd.it/rsJmahy-qAgEmMm6XTpNvZt4zfdj5sjLWPaKw-O_Mmc.jpg?width=320&crop=smart&auto=webp&s=4cb4a1213b931761f89124d021492235e6bfa7e9 submitted by /u/SpaceBurn_
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
JuiceWRLD VEVO Hacked!
https://external-preview.redd.it/rsJmahy-qAgEmMm6XTpNvZt4zfdj5sjLWPaKw-O_Mmc.jpg?width=320&crop=smart&auto=webp&s=4cb4a1213b931761f89124d021492235e6bfa7e9 submitted by /u/SpaceBurn_
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
JuiceWRLD VEVO Hacked!
Posted in r/hacking by u/SpaceBurn_ • 1 point and 0 comments
Hacking Articles Tips Tricks Videos Tutorials
Photo
hacking: security in practice
Leaks database
A few weeks ago I found an incredible website that shows the leaks files where a specific email has been used. The website is https://intelx.io
However it is not that user friendly, is there any other alternative to said website? Or in alternative a resource that contains leaked passwords? Kinda like the rockyou list?
The alternative would be somehow download every possible file from https://intelx.io and use a script to fetch the passwords into a wordlist.
Cheers bP
submitted by /u/brunommpreto
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
Leaks database
A few weeks ago I found an incredible website that shows the leaks files where a specific email has been used. The website is https://intelx.io
However it is not that user friendly, is there any other alternative to said website? Or in alternative a resource that contains leaked passwords? Kinda like the rockyou list?
The alternative would be somehow download every possible file from https://intelx.io and use a script to fetch the passwords into a wordlist.
Cheers bP
submitted by /u/brunommpreto
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
Reddit
From the hacking community on Reddit
Explore this post and more from the hacking community
Bug Bounty: How to get private invites
Now I know that a lot of people will not like this answer and you certainly do not have to follow this method if you don’t wish to.Continue reading on Medium »
Read more...
Now I know that a lot of people will not like this answer and you certainly do not have to follow this method if you don’t wish to.Continue reading on Medium »
Read more...
DirtyPipe for Android
https://medium.com/@reconshell.com/dirtypipe-for-android-413dd03d773?source=rss------bug_bounty-5
___________________________
@hacking_Attack
@Hacking_Video
https://medium.com/@reconshell.com/dirtypipe-for-android-413dd03d773?source=rss------bug_bounty-5
___________________________
@hacking_Attack
@Hacking_Video
Medium
DirtyPipe for Android
Dirty Pipe (CVE-2022–0847) temporary root PoC for Android. Dirty Pipe root exploit for Android (Pixel 6) Targets