Web app PT help
https://www.reddit.com/r/Pentesting/comments/u0eebf/web_app_pt_help/

<!-- SC_OFF -->hey guys, I am a cybersecurity student and I am practicing PT on my school training system. I am given a website and I am supposed to : -Identify a vulnerability in the web application that can cause credentials to be sent across the network.
- Trigger the identified vulnerability and intercept the credentials sent over the network. I've looked for everything I know and couldn't find anything, the only this I found is the ability to access a database or a server for some CSV files. the request looks like this : http://:/Class/Logic?filename=\\FS-srv\Dec19.csv I have tried SQLi, XXS, HHHattack, CSRF, and had Burb intruder work really hard. i guess it must be how the server authenticate the file request but i have no idea how to check for that . i would really appreciate any help . PS: not looking for an answer , just for some directions <!-- SC_ON --> submitted by /u/Joeissa89 (https://www.reddit.com/user/Joeissa89)
[link] (https://www.reddit.com/r/Pentesting/comments/u0eebf/web_app_pt_help/) [comments] (https://www.reddit.com/r/Pentesting/comments/u0eebf/web_app_pt_help/)

hacking: security in practice
Someone I know had their key fob falling apart

And I had nothing better to do so I'd look up if I could make a mobile app that could unlock their car door.

I looked up how key fobs work. This is a good resource, basically a 40-bit code is sent from the fob to the car, once the car recieves the code, both the transmitter and the car switch the code based on the same pseudo-random number generation algorithm. (If you're wondering what happens if the car doesn't receive the code, the car maintains a window of 256 codes, so any of the subsequent 255 codes will be accepted, which means don't press those buttons 256 times out of range).

I thought I'll first try brute forcing through the 40-bit code to have a simple first attempt, 40-bit codes are obsolete and breakable, not fast enough on a phone to be of any practical use though, but I still went ahead with the idea out of curiosity. There's also the problem of this not only unlocking the car in question, but all the cars in proximity, which would be cool, but also probably illegal and not cool for the owners of the other cars.... I thought I could just try it in an isolated area.

Next I checked what frequency key fobs operate on, 433.92 mhz in my case, then I checked if my mobile would be capable of transmitting at that frequency, and this is when naive me realised there's nothing on a mobile phone that can do that :') so I had to drop the idea, sucks.

I still looked up a bit more about it and found this great video, he uses a laptop, a RF transceiving equipment and a much more educated approach.

submitted by /u/kcolcllaw
[link] [comments]

Poro - Scan Publicly Accessible Assets On Your AWS Cloud Environment
http://www.kitploit.com/2022/04/poro-scan-publicly-accessible-assets-on.html

Scan for publicly accessible assets on your AWS environment Services covered by this tool: AWS ELB API Gateway S3 Buckets RDS Databases EC2 instances Redshift Databases Poro also check if a tag you specify is applied to identified public resources using --tag-key and --tag-value arguments.
Prequisites AWS account with Read Only Access (https://www.kitploit.com/search/label/Access) to services listed above. Python 3.X requests>=2.22.0 boto3>=1.20 botocore>= 1.20 enlighten>=1 Usage Clone this repository Configure your envionment with active (https://www.kitploit.com/search/label/Active) credentials (https://www.kitploit.com/search/label/Credentials) -> aws configure [sso] Run python poro.py [-h] [--profile PROFILE] [--export FILE_NAME] [--verbose] [--tag-key KEY] [--tag-value VALUE] optional arguments:
-h, --help show this help message and exit
--profile PROFILE Specify the aws profile (default is default)
--export FILE_NAME Specify the file name if you want to expport the results
--verbose, -v
--tag-key KEY Specify the tag key that you want to check if it exists in public resources
--tag-value VALUE Specify the tag value that you want to check if it exists in public resources
Poro prints the scanning (https://www.kitploit.com/search/label/Scanning) results at the end of it's execution in a json (https://www.kitploit.com/search/label/JSON) file if no export option is not specified.

Download Poro (https://github.com/9rnt/poro)

Hacking on Medium
Automotive Hacking

https://cdn-images-1.medium.com/max/1024/0*aeUd2p_8EosCp6aC.png
As more connected vehicles hit the road, cyber threats are increasing in number, and the potential damage cannot be ignored. We have seen…

Continue reading on Medium »

KitPloit - PenTest Tools!
Poro - Scan Publicly Accessible Assets On Your AWS Cloud Environment

https://blogger.googleusercontent.com/img/a/AVvXsEhICJTE3qcIeVC78Oe_kAjSo3d4-Rw_rQSSXOmmNQzYniYax0jkLSYZkj5Zvssc30zvT-Y7cdzDNLTzcQ44jSQCdwRJmiTWriQazKgJRHufW_HqaXyp8ztMV2znsJYzBbjXbEW-TCjsKUHjIbwRTvZ9FQoQyjfFFuEqIYiGtvY5iqAOtN1TX0ik0Lv0=w222-h400
Scan for publicly accessible assets on your AWS environment

Services covered by this tool:

* AWS ELB
* API Gateway
* S3 Buckets
* RDS Databases
* EC2 instances
* Redshift Databases

Poro also check if a tag you specify is applied to identified public resources using --tag-key and --tag-value arguments.
Prequisites

* AWS account with Read Only Access to services listed above.
* Python 3.X
* requests>=2.22.0
* boto3>=1.20
* botocore>= 1.20
* enlighten>=1

Usage

*
Clone this repository

*
Configure your envionment with active credentials -> aws configure [sso]

*
Run python poro.py [-h] [--profile PROFILE] [--export FILE_NAME] [--verbose] [--tag-key KEY] [--tag-value VALUE]

optional arguments:
-h, --help show this help message and exit
--profile PROFILE Specify the aws profile (default is default)
--export FILE_NAME Specify the file name if you want to expport the results
--verbose, -v
--tag-key KEY Specify the tag key that you want to check if it exists in public resources
--tag-value VALUE Specify the tag value that you want to check if it exists in public resources

Poro prints the scanning results at the end of it's execution in a json file if no export option is not specified.
Download Poro

hacking: security in practice
Hacking myself

Hello r/hacking, this is an absolute long shot and a strange request to make, but here goes anyway.

I was locked out of my old instagram account a few years ago and would like to access it again, however, I never had a Facebook, gave a fake email, and the number I had at the time is gone. Would anyone be capable of hacking my account? The password is not an apple generated one as it’s not in my iCloud Keychain and I’m pretty confident it’s mostly non numerical, there is a lot of memories in that account for me and I’d love to be able to access them. Dm or comment if you’re up for the challenge

submitted by /u/pcorv
[link] [comments]

hacking: security in practice
Cookie Catcher

is there a tool to catch cookies and transfer to another browser so you could bypass password requirements?

Is there a way to use Burp Suit for this?

submitted by /u/KurzgesagtPrivate
[link] [comments]

hacking: security in practice
the answer is no

https://b.thumbs.redditmedia.com/0dNu5srYoQR7sriS9aKgCP1bN3VPiFhCWwDFVsVcClE.jpg submitted by /u/irl_ID-10T_error
[link] [comments]

hacking: security in practice
GOOD cybersecurity subreddits

Is there somewhere I can go where people discuss high level topics and people who ask "HoW tO hAcK wIfI WiTh KaLi" aren't allowed?

submitted by /u/ADickTed2Sex
[link] [comments]

hacking: security in practice
Small Group

Hello! Im currently in a small group looking for people to join!

We are not master haxors and its just a fun small group to hangout in share knowledge and help eachother grow

We are going to be using guided (a alternative to discord) for non private messages and matrix for private messages If you would like to apply sign up to join check the comments for the link!

https://guilded.gg/Hacking

submitted by /u/YAROBONZ-
[link] [comments]

Running Decentralized, and Community Oriented Bug Bounties

Bug bounties are not a new thing, but web 3 has challenged security trends, expanding project’s needs, and creating a deep desire for…Continue reading on Medium »
Read more...

Running Decentralized, and Community Oriented Bug Bounties
https://hatsfinance.medium.com/running-decentralized-and-community-oriented-bug-bounties-70605d769bbe?source=rss------bug_bounty-5

Bug bounties are not a new thing, but web 3 has challenged security trends, expanding project’s needs, and creating a deep desire for…Continue reading on Medium » (https://hatsfinance.medium.com/running-decentralized-and-community-oriented-bug-bounties-70605d769bbe?source=rss------bug_bounty-5)

There’s $20 up for grabs in this post
https://ethr.medium.com/theres-20-up-for-grabs-in-this-post-aff4873a82fd?source=rss------bug_bounty-5