Hacking on Medium
[HTB] Knife — Walktrought w/o Metasploit

https://cdn-images-1.medium.com/max/1400/1*oAOeXglNm2sl0WOQpjRjCw.png
Uma máquina Linux, de nível fácil, vamos aprender aqui a explorar utilizando uma falha no PHP 8.1.0-dev, e depois PrivEsc com knife e sudo.

Continue reading on Medium »

Hacking on Medium
How to Secure our Social Media Accounts?

https://cdn-images-1.medium.com/max/640/1*Zn8YPr5VPCSXb0NOZKBDeA.jpeg
In this Digital Era, everyone is very much active on social media. But only few care about their security. Most of people think that what…

Continue reading on Medium »

KitPloit - PenTest Tools!
Maat - Open-source Symbolic Execution Framework

https://blogger.googleusercontent.com/img/a/AVvXsEjBG1ZzSXKS2Dp8ALzi9u814pVTS4LUSqz3p-TIclq4c9w9EPL0atwq1ds9bnrvTtQzaF9AvhR4_AolvuB0lzGePnGhKTtwVCzVWFAEf3wO56g8wH5K8dpaAFmqDQF8CY-kGNqjIz8j5pJiwVXC_ERgLMwxLFPZ_PBjgxREFVgvhbd6f7bT1EaxNJ5I=s16000
Maat is an open-source Dynamic Symbolic Execution and Binary Analysis framework. It provides various functionalities such as symbolic execution, taint analysis, constraint solving, binary loading, environment simulation, and leverages Ghidra's sleigh library for assembly lifting: https://maat.re

Key features:

* Fast & Portable: Designed to scale to real-world applications. Fully written in C++ for good runtime performance. There are hardly any runtime dependencies, and most of them are optional
* User-friendly: Maat has a flexible debugger-like API, and its features are configurable to adapt to many different use-cases. As any self-respecting modern framework, it comes with Python bindings
* Multi-arch: With lifting and emulation based on Ghidra's awesome sleigh library, Maat has the potential to emulate many architectures, including exotic ones
Installation

To install Maat's python module:

python3 -m pip install pymaat


To install Maat's native SDK and use the C++ API, check out BUILDING.md

Example

command line argument engine.load("./some_binary", BIN.ELF32, args=[engine.vars.new_symbolic_buffer("some_arg", 20)]) # Get current eax value engine.cpu.eax # Read 4 bytes at the top of the stack engine.mem.read(engine.cpu.esp, 4) # Set a callback displaying every memory read def show_mem_access(engine): mem_access = engine.info.mem_access print(f"Instruction at {engine.info.addr} reads {mem_access.size} bytes at {mem_access.addr}") engine.hooks.add(EVENT.MEM_R, WHEN.BEFORE, callbacks=[show_mem_access]) # Take and restore snapshots snap = engine.take_snapshot() engine.restore_snapshot(snap) # Run the binary engine.run()">from maat import *

# Create a symbolic engine for Linux X86-32bits
engine = MaatEngine(ARCH.X86, OS.LINUX)

# Load a binary with one command line argument
engine.load("./some_binary", BIN.ELF32, args=[engine.vars.new_symbolic_buffer("some_arg", 20)])

# Get current eax value
engine.cpu.eax

# Read 4 bytes at the top of the stack
engine.mem.read(engine.cpu.esp, 4)

# Set a callback displaying every memory read
def show_mem_access(engine):
mem_access = engine.info.mem_access
print(f"Instruction at {engine.info.addr} reads {mem_access.size} bytes at {mem_access.addr}")

engine.hooks.add(EVENT.MEM_R, WHEN.BEFORE, callbacks=[show_mem_access])

# Take and restore snapshots
snap = engine.take_snapshot()
engine.restore_snapshot(snap)

# Run the binary
engine.run()

Contact

For general discussions, questions and suggestions, we use Github Discussions

For reporting issues and bugs, please use Github Issues

For anything else, drop an e-mail at boyan.milanov@trailofbits.com
Download Maat

hacking: security in practice
Survey

I'm a Bachelors student (Computer Information Sciences) taking my final courses for the term. My professor tasked us with creating a survey in relation to a problem-solution project that we are designing; my focus is on the Internet of Things. I created a very simple, 3 question survey and I'd appreciate any participants. Thanks in advance!

Link to my survey: https://www.surveymonkey.com/r/MQRQNK2

submitted by /u/r3dact3d97
[link] [comments]

hacking: security in practice
WhatsApp vulnerability?

Is there a WhatsApp vulnerability to access random WhatsApp's groups ?

I was in a group and random users were constantly entering the group with no invite, they start selling Bitcoins and stuff, the admin of the group ban the number but they keep coming with random phone numbers.

How was this posible?

submitted by /u/Cover_Prize
[link] [comments]

hacking: security in practice
Is there a bot to simulate clearnet activity? Like maybe playing back human traces?

is there anything like it? Ideally it would just run in CLI and browse youtube/mainstream sites and have same mouse/click behaviour to have in parallel while running tor on some bridges

Of course you'd have to keep under control the data leak from clearnet browsing, any consideration is welcome!

is there anything like this?

submitted by /u/idocodesometime
[link] [comments]

hacking: security in practice
US seizes RaidForums, the “go-to” site for hackers selling stolen login details – Ars Technica

https://external-preview.redd.it/TBR0o-cWIhSyLI2kpfF7tIKt0_Zvm2AzQfzldpC6-40.jpg?width=640&crop=smart&auto=webp&s=08ab9801822a26dd67e49f458f8352a9dfd72f29 submitted by /u/darksieth99
[link] [comments]

hacking: security in practice
Accessing video feed from wifi connected camera

Im working on a side project trying to repurpose an old camera from a junk drone into a security camera for the house. I got the hardware side working well and i get a connection and footage from the manufacturers app, but that only works on mobile. I want to get this working from the home computer and build my own web app to access the camera. Ive noticed that the only open port on the camera is 2020 which is hosting a server (i forget the exact type at the moment) and its transfering the footage over UDP. Does anyone know any decent ways of accessing the footage outside their app? Or are there any tools that are good at reverse engineering their app to figure out hownit works? Any info would be amazing!

submitted by /u/floatingcoffeepoop
[link] [comments]

hacking: security in practice
Is it remotely possible to get into someone's phone with their phone number, or into their PC with their PC name?

Probably some dumb questions, but wanted to get them clarified.

submitted by /u/LaughingButter13
[link] [comments]

Dark Reading: Attacks/Breaches
Russian Group Sandworm Foiled in Attempt to Disrupt Ukraine Power Grid

The attack involved use of a new version of Industroyer tool for manipulating industrial control systems.

Dark Reading: Attacks/Breaches
Microsoft Patches Windows Flaw Under Attack and Reported by NSA

"Go patch your systems before" the exploit spreads more widely, ZDI warns.

Dark Reading: Attacks/Breaches
Microsoft Plans Windows Auto-Update Service for Enterprises

Starting in July, the Windows Autopatch service will automatically patch all software bugs, including security updates, for Windows 10/11 Enterprise E3 customers, Microsoft says.

Dark Reading: Attacks/Breaches
Criminal IP Cybersecurity Search Engine Launches First Beta Test

Criminal IP visualizes all IT assets connected to the Internet based on IP addresses held by companies and individuals.

Dark Reading: Attacks/Breaches
United States Leads Seizure of One of the World’s Largest Hacker Forums and Arrests Administrator

Court records unsealed Tuesday indicate that the United States recently obtained judicial authorization to seize three domains that long hosted the RaidForums website.

Dark Reading: Attacks/Breaches
Datto to be Acquired by Kaseya for $6.2 Billion

Funding led by Insight Partners.