Learning cybersecurity comes in many forms: technical practice, lab workshops, and also writeups. Bug bounty hunter Alvin, going by the…Continue reading on HackenProof » (https://medium.com/hackenproof/hacker-interview-2-alvin-steiner254-56ce7731e33f?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
What is SQL Injection?

https://cdn-images-1.medium.com/max/2600/1*YerC98lFXER3hF5C1ZWm1A.jpeg
What is It?

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
“Ninguna Tecnología está libre de Riesgo” (Guerra de Rusia Vs Ucrania también ocurre en Internet —…

https://cdn-images-1.medium.com/max/1280/0*HkhHh1MtE_PYj0-c.jpg
Los consejos de ciberseguridad ante la guerra en Ucrania: “Ningún servicio o sistema tecnológico está realmente libre de riesgos”

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Wolverine Security CTF

https://cdn-images-1.medium.com/max/600/1*AsBvCghIsz9sSVrx9STyIg.png
SSRF 101

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
Hcltm - Documenting Your Threat Models With HCL

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgFIDKhZNpsGTVemA6vZyMVxJiq1oGEzlFSWGjeqEYnD_6GqFMJvqLTzZj8zRF7okHasxQG-bGgNEWePCss_cvlW4i8JF_f31N8xvz5k9SZP_e2X6Ux57cOajVtUYccHs4W_Hx0nFrwMNEwgZ-FqCFDPxPiFY2pyMx4LHdDHz4OK4sxvYgnolWdsHzf/w640-h452/hcltm.png Threat Modeling with HCL OverviewThere are many different ways in which a threat model can be documented. From a simple text file, to more in-depth word documents, to fully instrumented threat models in a centralised solution. Two of the most valuable attributes of a threat model are being able to clearly document the threats, and to be able to drive valuable change. hcltmaims to provide a DevOps-first approach to documenting a system threat model by focusing on the following goals:

* Simple text-file format
* Simple cli-driven user experience
* Integration into version control systems (VCS)

This repository is the home of the hcltmcli software. The hcltmspec is based on HCL2, HashiCorp's Configuration Language, which aims to be "pleasant to read and write for humans, and a JSON-based variant that is easier for machines to generate and parse". Combining the hcltmcli software and the hcltmspec allows practitioners to define a system threat model in HCL, for example: threatmodel "Tower of London" {
description = "A historic castle"
author = "@xntrik"

attributes {
new_initiative = "true"
internet_facing = "true"
initiative_size = "Small"
}

information_asset "crown jewels" {
description = "including the imperial state crown"
information_classification = "Confidential"
}

usecase {
description = "The Queen can fetch the crown"
}

third_party_dependency "community watch" {
description = "The community watch helps guard the premise"
uptime_dependency = "degraded"
}

threat {
description = "Someone who isn't the Queen steals the crown"
impacts = ["Confidentiality"]
control = "Lots of guards"
}

data_flow_diagram {
// ... see below for more information
}

}See Data Flow Diagram for more information on how to construct data flow diagrams that are converted to PNGs automatically.

To see an example of how to reference pre-defined control libraries for the OWASP Proactive Controls and AWS Security Checklist see examples/tm3.hcl. We also have the MITRE ATT&CK Controls here.

To see a full description of the spec, see here or run: hcltm generate boilerplatehcltmwill also process JSON files, but the only caveat is that import modules and variables won't work. You can see examples/tm1.json as an example. Why HCL?HCL is the primary configuration language used in the products by HashiCorp, in-particularly, Terraform - their open-source Infrastructure-as-Code software. I worked at HashiCorp for a while and the language really grew on me, plus, if DevOps and Software engineers are using the language, then simplifying how they document threat models aligns with hcltm's goals.

You can use hcltmwith JSON, but you lose some of the features. For more, see the examples/ folder. Why not just document them in MD?I liked the idea of using a format that could be programmatically interacted with. Kudos and ReferencesOne of the features of hcltmis the automatic generation of data flow diagrams from HCL files. This leverages the go-dfd package by Marqeta and Blake Hitchcock. Definitely check out their blog post on Threat models at the speed of DevOps.

Additionally I'd like to extend thanks to Jamie Finnigan and Talha Tariq at HashiCorp for allowing me to continue working on this open-source tool even after I'd finished up with HashiCorp. hcltm cliInstallationDownload the latest version from releases and move the hcltmbinary into yo[...]

___________________________
@hacking_Attack
@Hacking_Video

ur PATH. Install with HomebrewThe following will add a local tap, and install hcltmwith Homebrew brew install xntrik/repo/hcltmRun with Dockerdocker run --rm -it xntrik/hcltmRun with GitHub Actionshcltmcan be integrated directly into your GitHub repos with https://github.com/xntrik/hcltm-action. This is one of the ideal methods to manage your threat models, and helps meet the goal of integrating into your version control systems. Building from Source1. Clone this repository.
2. Change into the directory, hcltm3. make bootstrap4. make devFor further help on contributing to hcltmplease see the CHANGELOG.md. UsageFor help on any subcommands use the -hflag.

Diagram PNG files from existing HCL threatmodel file(s) generate Generate an HCL Threat Model list List Threatmodels found in HCL file(s) validate Validate existing HCL Threatmodel file(s) view View existing HCL Threatmodel file(s) ">$ hcltm
Usage: hcltm [--version] [--help] [ Config fileMost of the hcltmcommands have a -configflag that allows you to specify a config.hclfile. HCL within this file may be used to overwrite some of hcltm's default attributes. These are listed below:

* Initiative Sizes - defaults to "Undefined", "Small", "Medium", "Large"
* Default Initiative Size - defaults to "Undefined
* Information Classifications - defaults to "Restricted", "Confidential", "Public"
* Default Information Classification - defaults to "Confidential"
* Impact Types - defaults to "Confidentiality", "Integrity", "Availability"
* STRIDE Elements - defaults to "Spoofing", "Tampering", "Info Disclosure", "Denial Of Service", "Elevation Of Privilege"
* Uptime Dependency Classifications - defaults to "none", "degraded", "hard", "operational"
* Default Uptime Depency Classification - defaults to "none"

For example: initiative_sizes = ["S", "M", "L"]
default_initiative_size = "M"
info_classifications = ["1", "2"]
default_info_classification = "1"
impact_types = ["big", "small"]
strides = ["S", "T"]
uptime_dep_classifications = ["N", "D"]
default_uptime_dep_classification = "N"If you modify these attributes, you'll need to remember to provide the config file for other operations, as this may impact validation or dashboard creation. List and ViewThe hcltm listand hcltm viewcommands can be used to list and view data from hcltmspec HCL files. $ hcltm list examples/*
# File Threatmodel Author
1 examples/tm1.hcl Tower of London @xntrik
2 examples/tm1.hcl Fort Knox @xntrik
3 examples/tm2.hcl Modelly model @xntrikValidateThe hcltm validatecommand is used to validate a hcltmspec HCL file. $ hcltm validate examples/*
Validated 3 threatmodels in 3 filesGenerateThe hcltm generatecommand is used to either output a generic boilerplatehcltmspec HCL file, or, interactively ask the user questions to then output a hcltmspec HCL file. Generate InteractiveSee the following example of: hcltm generate interactivehttps://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgFIDKhZNpsGTVemA6vZyMVxJiq1oGEzlFSWGjeqEYnD_6GqFMJvqLTzZj8zRF7okHasxQG-bGgNEWePCss_cvlW4i8JF_f31N8xvz5k9SZP_e2X6Ux57cOajVtUYccHs4W_Hx0nFrwMNEwgZ-FqCFDPxPiFY2pyMx4LHdDHz4OK4s[...]

___________________________
@hacking_Attack
@Hacking_Video

xvYgnolWdsHzf/w640-h452/hcltm.png Generate Interactive EditorIf you prefer to work directly in your $EDITORthen run: hcltm generate interactive editorThis will open your editor with a barebones HCL threat model. If you want to validate the model after creation, then use the -validateflag. DashboardThe hcltm dashboardcommand takes hcltmspec HCL files, and generates a number of markdown and png files, dropping them into a selected folder. $ hcltm dashboard -overwrite -outdir=dashboard-example examples/*
Created the 'dashboard-example' directory
Writing dashboard markdown files to 'dashboard-example' and overwriting existing files
Successfully wrote to 'dashboard-example/tm1-toweroflondon.md'
Successfully wrote to 'dashboard-example/tm1-fortknox.md'
Successfully wrote to 'dashboard-example/tm2-modellymodel.png'
Successfully wrote to 'dashboard-example/tm2-modellymodel.md'
Successfully wrote to 'dashboard-example/dashboard.md'Custom Markdown TemplatesThe hcltm dashboardcommand can also take optional flags to specify custom templates (as per Golang's text/template).

To specify a dashboard template file, use the -dashboard-templateflag. For an example, see dashboard-template.tpl.

To specify a threatmodel template file, use the -threatmodel-templateflag. For an example, see threatmodel-template.tpl. Custom Filename for the Dashboard Index fileThe hcltm dashboardcommand can also take an optional flag to specify a filename for the "index" generated dashboard file. By default this file is dashboard.md. Use the -dashboard-filenameflag without an extension to change this filename. Data Flow DiagramAs per the spec, a threatmodelmay include a single data_flow_diagram. An example of a simple DFD is available here.

The hcltm dfdcommand takes hcltmspec HCL files, and generates a number of png files, dropping them into a selected folder.

If the HCL file doesn't include a threatmodelblock with a data_flow_diagramblock, then nothing is output.

The command itself is very similar to the Dashboard command. $ hcltm dfd -overwrite -outdir testout examples/*
Successfully created 'testout/tm2-modellymodel.png'If your threatmodeldoesn't include a diagram_link, but does include a data_flow_diagram, then this will also be rendered when running hcltm dashboard. TerraformThe hcltm terraformcommand is able to extract data resources from the terraform show -jsondocs here output of plan files, or active state files, and convert these into drafted information_assetblocks for inclusion in hcltmfiles.

If you're in a folder with existing state, you can execute the following: terraform show -json | hcltm terraform -stdinThis will output something similar to this: information_asset "aws_rds_cluster default" {
description = "cluster_identifier: aurora-cluster-demo, database_name: mydb"
information_classification = ""
source = "terraform state"
}
information_asset "aws_s3_bucket example" {
description = "bucket: terraform-20211107232017071500000001"
information_classification = ""
source = "terraform state"
}You can also see similar output from a plan file that hasn't yet been applied with Terraform by running: terraform show -json If you want to update an existing hcltmthreat model file ("threatmodel.hcl") you can with: terraform show -json new-threatmodel.hclWith the -add-to-existingflag, you can also specify -tm-name=if you [...]

___________________________
@hacking_Attack
@Hacking_Video

need to specify a particular threat model from the source file, if there are multiple. And you can also apply a default classification, with the -default-classification=Confidentialflag.

These commands can also take a file as input too, in which case, omit the -stdinflag. Download Hcltm

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
No way to download/update database

Imagine I gained access to server or even some linux based personal computer. It is probably a weird attack, but what if I wanted to stop the owner from installing new programs(and updating existing ones)? How would I disable their access to package managers(apt, pacman and whatever Fedora's package manager is called). Can I somehow remove package managers from their system and leave them absolutely no way to download or upgrade anything? Even if this is somehow possible, reinstalling operating system should probably solve the problem, but can it be fixed without reinstalling entire distro?

submitted by /u/OmniKingBoss
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Trying to get the access to my account back. Is it possible to brute force it?

I know absolutely nothing about hacking btw

I am trying to change the email address of my discord account without having access to said email

For that I need to find a 6 letters password with the possible characters being letters and numbers, so 36 possibles characters. So there are a little over 2 billion possible combinations

is it possible to brute force it? if so how? with what tool(s)?

submitted by /u/-meragi-
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How to hack a drive account?

Please help. I need some documents

submitted by /u/tacosalpastor4life
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How does screenshot hacking works?

A friend’s IG account Was hacked and I’m getting same messages that got him hacked. Hacker chat with me and sent me a link via SMS and asked NOT to click it but to take a screenshot and send back. My friend did exactly that and in few seconds his account is compromised. How does it actually work?

submitted by /u/eightgrand
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How to send similar payload to different http headers?

There are a quite numbers of http headers as listed in https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers

If I have different payloads to be sent to a single http header, it's easy to do that with Burp Intruder.

But, what if a single payload needs to be sent to different http headers?

e.g. from log4j. Taken from https://log4shell.tools/

Copy it and paste it (the paylaod) anywhere you suspect it might end up getting passed through log4j. For example: search boxes, form fields or HTTP headers.

Thanks

submitted by /u/w0lfcat
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Nearly 40% of Macs Left Exposed to 2 Zero-Day Exploits

Apple's emergency fixes last week for two actively exploited vulnerabilities neglected previous Big Sur and Catalina versions of macOS, security vendor says.

Dark Reading: Attacks/Breaches
Zoom's Bug Bounty Programs Soar to $1.8M

Like other software-reliant firms, the company raised its rewards to spur additional scrutiny by security researchers.

Dark Reading: Attacks/Breaches
Nearly Two-Thirds of Ransomware Victims Paid Ransoms Last Year, Finds "2022 Cyberthreat Defense Report"

Record-setting ransomware attacks, a shortage of skilled personnel, and low security awareness across the workforce cause headaches for IT security teams.

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
HackTheBox: Neonify

https://cdn-images-1.medium.com/max/1918/1*iw9Eyh2tpbYBySLsh4fuFg.png
Overview:

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Kali Linux Nedir? Kali Linux Nasıl ve Neden Kullanılır?​

https://cdn-images-1.medium.com/max/889/0*UKLeDquUZtLtp5WP.jpg
Bilgisayar korsanlığı (hacking) konusunda hevesli birisiyseniz veya bu işlerin nasıl yapıldığını merak ediyorsanız Kali Linux işletim…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video