hacking: security in practice
WAR - WebOS Ad Remover 1.00 released - Remove ads from your LG TV Home Page

https://github.com/bashalarmist/war-webos-ad-remover

This removes the AI Recommendations and the Trending section from the WebOS home screen.

I just released this today, hope some of you find it useful.

submitted by /u/bashalarmist
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
The Kids Online "Safety" Act Will Be A Privacy Nightmare

https://external-preview.redd.it/JY4fy-MthnZ40XZOa8Yo9W-1bn2V3OeYcIkhNOWHFoU.jpg?width=320&crop=smart&auto=webp&s=600b572ce26f2b7d61042cebbbe8f70f8257bfed submitted by /u/Metalsaurus_Rex
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Former DHS Acting IT Chief Convicted in Software, Database Theft Scheme

Former DHS employees targeted confidential, proprietary software and personally identifying information (PII) for hundreds of thousands of federal employees.

Dark Reading: Attacks/Breaches
Google, GitHub Collaboration Focuses on Securing Code Build Processes

The software supply chain security tool from GitHub and Google uses GitHub Actions and Sigstore to generate a "tamper-proof" record describing where, when, and how the software is produced.

Hacking on Medium
[THM] Inclusion — LFI Easy Room

https://cdn-images-1.medium.com/max/1231/1*eFYguIdVOZaeADBz6YqBSg.png
Fala pessoal! Vamos ver uma máquina teoricamente fácil, e de nível iniciante, me pediram pra ver essa sala então lá vamos nós.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
The most insecure passwords used in the world

https://cdn-images-1.medium.com/max/1920/1*hE9dKi96XQZp2VLgg_tAkw.jpeg
Do you use any of these passwords? Please, change them now!

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
CISA warns orgs of WatchGuard bug exploited by Sandworm, a Russian-sponsored hacking group to build a new botnet dubbed Cyclops Blink out of compromised WatchGuard Small Office/Home Office (SOHO) network devices.

https://external-preview.redd.it/mmaovY7aXVS295MPhM6Qt2yXRafb_MIfptCuLTjsG-E.jpg?width=640&crop=smart&auto=webp&s=b99adc94a89c808e5b6d38db32b165b6906284f6 submitted by /u/Late_Ice_9288
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
[HTB] Bashed靶機 Write-Up

https://cdn-images-1.medium.com/max/1715/1*LAAyABWpcMRRYhNcceyCyQ.png
Hack The Box Bashed machine Write-Up

Continue reading on 璿的筆記 »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Cybersecurity Protection Against A Growing Threat

https://cdn-images-1.medium.com/max/1920/1*HK3oKDphyMnjEW0pNLUQhA.jpeg
Cybersecurity, if you have not considered it before, should be at the top of your actions in the next day or so following the Russian…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
TryHackMe: [Day 11] Networking Where Are The Reindeers?

https://cdn-images-1.medium.com/max/1920/1*psaTaSfd9sQyajFeYTLO-w.png
You decided that the first step would be to check the running services on MACHINE_IP. You resort to yesterday’s tool, Nmap.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Gaining access to files

I found some files, I don't have permission to view what is inside, I know what is inside however. How would I extract everything that is inside ? I obviously can't just copy it to a thumbdrive. I know the path to the files. lmk.

Not a zip file
Windows
Not password protected, but I can not open it.
They are stored in a directory for e.g C://DOMAIN.COM/PATH

submitted by /u/Ijustwannalearnlol
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Black Hat Ethical Hacking
Attackers are abusing Spring4Shell vulnerability to spread Mirai botnet malware

___________________________
@hacking_Attack
@Hacking_Video

Some insights into offensive security from ex Facebook red teamer
https://www.reddit.com/r/redteamsec/comments/u1usmc/some_insights_into_offensive_security_from_ex/

Recently recorded this podcast with a CTO in cybersecurity (my boss) and a former offensive security engineer at Facebook (currently enterprise architect at ReliaQuest) about red teaming and offensive security. There is some interesting insight into ethical red teaming, internal vs external teams and getting the business on board with the whole process. Give it a listen if you'd like. https://open.spotify.com/episode/1BuzVj8Md3K4O7OAkuHrdM submitted by /u/AgentLessBots (https://www.reddit.com/user/AgentLessBots)
[link] (https://www.reddit.com/r/redteamsec/comments/u1usmc/some_insights_into_offensive_security_from_ex/) [comments] (https://www.reddit.com/r/redteamsec/comments/u1usmc/some_insights_into_offensive_security_from_ex/)

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Scanmycode-Ce : Code Scanning/SAST/Static Analysis/Linting Using Many tools/Scanners

Scanmycode-Ce is a Code Scanning/SAST/Static Analysis/Linting solution using many tools/Scanners with One Report. You can also add any tool to it. Currently, it supports many languages and tech stacks. Similar to SonarQube, but it is different.
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEijvC5L7aWx6NtnZoBSu92JqTwyeHo6wy5ZD8Dj5NDKY6w_lo39RDaf1mqK3scw3a1QmCAcNbkYIhvKdavImGuYmuxxjScbSGrQu350DXG_5P2FfMMID7C-fj4vP3-SIMNmgxOUfR-LHAa3ipNqdO-9ALQXMYCT-9Pu3voJlpL6C84WPjucOVmafjxB/s441/155940853-04cb916d-658b-48e1-bae9-959af96fd2ba.png TLDRTo install it. Install dockerand docker-composeand then:

2 options

* Fastest (use DockerHub built images). If unsure, use this.

git clone https://github.com/marcinguy/scanmycode-ce.git
cd scanmycode-ce/dockerhub
./start.sh

* Slower (build everything)

git clone https://github.com/marcinguy/scanmycode-ce.git
cd scanmycode-ce/docker
./start.sh

Go in the Browser to: http://localhost:5000Sign up locally (and login in when needed) Under the hoodProgpilot, PMD, Bandit, Brakeman, Gosec, confused, semgrep, trufflehog3, jshint, log4shell via custom semgrep rule and other(s). Some were modified. Recorded DEMOCommunity Edition does not have GitHub support and other plugins. But rest is the same.
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEirYSqyHppvN1_NQclyaMGyGccgkc5qmd1OCgn0SCb_aotPHO0i64Q7qFpSN2pFpb_p9akAYmQa5ZxsAZObyl4--YN84yhu3ypJ3tlMbr9WOvrf2_zFQQq8Cofav0UbXmxaAt2p-V5OHXoySuJ3jW-72m01CTU7ckZzm-J8ImOcxXuBvKgr3SOPKsoD/s1814/152678316-04fdcd54-73e8-42f8-9bf2-fb9a69618ff9.gif How is Scanmycode different than SonarQube?Both use static analysis to find bugs and defects, but there are a few differences.

* Scanmycode can be extended with any tool producing JSON output (any binary, in any technology/language/product). That’s the biggest difference.
* Scanmycode is Open Source, SonarQube also offers an open-source version, but it is missing features (For example, 12 of the supported languages are not available in the open-source offering, and more powerful dataflow features are only available in the paid versions)
* Scanmycode supports scanning only changed files (differential analysis), SonarQube does not
* Scanmycode uses also semgrep as one of the tools (without semgrep community rules, only Scanmycode’s custom rules)

Below are semgrep’s (also Scanmycode advantages over SonarQube):

“Extending Semgrep with custom rules is simple, since Semgrep rules look like the source code you’re writing. Writing custom rules with SonarQube is restricted to a handful of languages and requires familiarity with Java and abstract syntax trees (ASTs).”

“Semgrep focuses on speed and ease-of-use, making analysis possible at up to 20K-100K loc/sec per rule. SonarQube authors report approximately 0.4K loc/sec for rulesets in production.”

Source: semgrep’s website Welcome to Scanmycode CE (Community Edition)!Scanmycode is based on QuantifedCode. QuantifiedCode is a code analysis & automation platform. It helps you to keep track of issues and metrics in your software projects, and can be easily extended to support new types of analyses. The application consists of several parts:

* A frontend, realized as a React.js app
* A backend, realized as a Flask app, that exposes a REST API consumed by the frontend
* A background worker, realized using Celery, that performs the code analysis

Currently supports: PHP, Java, Scala, Python, Ruby, Javascript, GO, Secret Scanning, Dependency Confusion, Trojan Source, Open Source and Proprietary Checks (total ca. 1000 checks)

Advantages:

* Many tools, one report (unification)
* Dismiss, collaborate on findings. Mark false-positives
* Enable/disable each individual check in Che[...]

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Master_Librarian : A Tool To Audit Unix/*BSD/Linux System Libraries To Find Public Security Vulnerabilities

Master_Librarian is a simple tool to audit Unix/*BSD/Linux system libraries to find public security vulnerabilities.

To install requirements:

$ sudo python3 -m pip install -r requirements.txt

Overview:

$ python3 master_librarian.py -h
Master librarian v0.3
Tool to search public vulnerabilities on local libraries
by CoolerVoid
Example:
$ python3 master_librarian.py -t csv
$ python3 master_librarian.py -t txt -l 3
usage: master_librarian.py [-h] -t TYPES [-l LIMIT]
optional arguments:
-h, –help show this help message and exit
-t TYPES, –type TYPES
Name of output type for logs(txt or csv)
-l LIMIT, –limit LIMIT
Limit CVEs per pages in nvd NIST search(default is 3)

Example:

$ python3 master_librarian.py -t txt

output

Master librarian v0.3
Tool to search public vulnerabilities on local libraries
by CoolerVoid
Example:
$ python3 master_librarian.py -t csv
$ python3 master_librarian.py -t txt -l 3
Master librarian v0.3
Tool to search public vulnerabilities on local libraries
by CoolerVoid
Search pitfalls in operational system local packages
xres 1.2.0
cairo-ps 1.16.0
xf86vidmodeproto 2.3.1
libcrypto 1.1.1f
damageproto 1.2.1
libffi 3.3
xfixes 5.0.3
Integer overflow in X.org libXfixes before 5.0.3 on 32-bit platforms might allow remote X servers to gain privileges via a length value of INT_MAX, which triggers the client to stop reading data and get out of sync.
https://nvd.nist.gov/vuln/detail/CVE-2016-7944
7.5 HIGH
system.web.extensions.design_1.0 1.0.61025.0
kbproto 1.0.7
gio-unix-2.0 2.64.6
gdk-x11-2.0 2.24.32
sqlite3 3.31.1
cairo-png 1.16.0
libpcre2-posix 10.34
wcf 6.8.0.105
dmxproto 2.3.1
cairo-script 1.16.0
xext 1.3.4
x11 1.6.9
system.web.mvc 1.0.0.0
mono-cairo 6.8.0.105
cecil 6.8.0.105
udev 245
The default configuration of udev on Linux does not warn the user before enabling additional Human Interface Device (HID) functionality over USB, which allows user-assisted attackers to execute arbitrary programs via crafted USB data, as demonstrated by keyboard and mouse data sent by malware on a smartphone that the user connected to the computer.
https://nvd.nist.gov/vuln/detail/CVE-2011-0640
6.9 MEDIUM
plymouth-pretrigger.sh in dracut and udev, when running on Fedora 13 and 14, sets weak permissions for the /dev/systty device file, which allows remote authenticated users to read terminal data from tty0 for local users.
https://nvd.nist.gov/vuln/detail/CVE-2010-4176
4.0 MEDIUM
xkeyboard-config 2.29
bash-completion 2.10
yelp-xsl 3.36.0
xdamage 1.1.5
libgdiplus 6.0.4
icu-uc 66.1
xcomposite 0.4.5
harfbuzz 2.6.4
pixman-1 0.38.4
pthread-stubs 0.4
systemd 245
An exploitable denial-of-service vulnerability exists in Systemd 245. A specially crafted DHCP FORCERENEW packet can cause a server running the DHCP client to be vulnerable to a DHCP ACK spoofing attack. An attacker can forge a pair of FORCERENEW and DCHP ACK packets to reconfigure the server.
https://nvd.nist.gov/vuln/detail/CVE-2020-13529
2.9 LOW
systemd through v245 mishandles numerical usernames such as ones composed of decimal digits or 0x followed by hex digits, as demonstrated by use of root privileges when privileges of the 0x0 user account were intended. NOTE: this issue exists because of an incomplete fix for CVE-2017-1000082.
https://nvd.nist.gov/vuln/detail/CVE-2020-13776
6.2 MEDIUM
A heap use-after-free vulnerability was found in systemd before version v245-rc1, where asynchronous Polkit queries are performed while handling dbus messages. A local unprivileged attacker can abuse this flaw to crash systemd services or potentially execute code and elevate their privileges, by sending specially crafted dbus messages.
https://nvd.nist.gov/vuln/detail/CVE-2020-1712
4.6 MEDIUM
expat 2.2.9
pangocairo 1.44.7
xdmcp 1.1.3
libpcreposix [...]

___________________________
@hacking_Attack
@Hacking_Video