Dark Reading: Attacks/Breaches
The Ins and Outs of Secure Infrastructure as Code

The move to IaC has its challenges but done right can fundamentally improve an organization's overall security posture.

Dark Reading: Attacks/Breaches
Tenable Acquires External Attack Surface Management Vendor for $44.5M

Acquisition will add Internet-facing attack surface mapping and monitoring to Tenable's internal asset management products.

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Why aren’t programmers good at hacking?

Just curious. I see many intelligent engineers, programmers and coders speak talk etc. They sound intelligent. Come up with amazing projects.

But they don’t know how to hack. It’s not a must for them to but… I thought they would.

submitted by /u/Waltc222
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
QR Codes

Hey everyone. I live in New York City & a lot of musicians/artists/clubs post random stickers with QR codes. There's not always additional info, sometimes just a quote or picture. From what I understand, you can't really be hacked or get viruses by scanning a QR code right? I guess it could take you to a malicious website, but wouldn't you have to do something from that point to be at risk?

Most sources say it's fine, but other sources have a very 2005 internet scare tactics vibe.

Thanks in advance yall!

submitted by /u/shanndawgg
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Hak5 Shark Jack exploits

I've been researching the Hak5 products to see which, if any, would be the most useful for me and I have decided that if I was to get one of the products it would be the Shark Jack. I have tried typing all the variations of "shark jack backdoor bash script" but I haven't had any useful results. Do any of you know any bash scripts that would allow for a backdoor into the system? I am aware that the shark jack would likely need to remain plugged in to the ethernet port so this isn't an issue.

Edit: there is a youtube video that partially demonstrates what I want. https://youtu.be/xD-53orqoiU

submitted by /u/AnonymousGinger27
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Hello, has anyone tried using VPN Relay Servers from VPN Gate? are they good for privacy?

I wanna know if it's worth the trouble of installing it and connecting to one.

submitted by /u/sylph79
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
What is this?

Hi all,

Wht is this? I need a tool like this for PoC. Watch below:

https://www.veed.io/view/ceb181b6-0211-4d91-964e-9d4b143bde34

submitted by /u/110615
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

VulFi - Plugin To IDA Pro Which Can Be Used To Assist During Bug Hunting In Binaries
http://www.kitploit.com/2022/04/vulfi-plugin-to-ida-pro-which-can-be.html

___________________________
@hacking_Attack
@Hacking_Video

The VulFi (Vulnerability Finder) tool is a plugin to IDA Pro which can be used to assist during bug hunting in binaries. Its main objective is to provide a single view with all cross-references to the most interesting functions (such as strcpy, sprintf, system, etc.). For cases where a Hexrays decompiler (https://www.kitploit.com/search/label/Decompiler) can be used, it will attempt to rule out calls to these functions which are not interesting from a vulnerability research (https://www.kitploit.com/search/label/Vulnerability%20Research) perspective (think something like strcpy(dst,"Hello World!")). Without the decompiler, the rules are much simpler (to not depend on architecture) and thus only rule out the most obvious cases.
Installation Place the vulfi.py, vulfi_prototypes.json and vulfi_rules.json files in the IDA plugin folder (cp vulfi* ). Preparing the Database File Before you run VulFi make sure that you have a good understanding of the binary that you work with. Try to identify all standard functions (strcpy, memcpy, etc.) and name them accordingly. The plugin is case insensitive and thus MEMCPY, Memcpy and memcpy are all valid names. However, note that the search for the function requires exact match. This means that memcpy? or std_memcpy (or any other variant) will not be detected as a standard function and therefore will not be considered when looking for potential vulnerabilities. If you are working with an unknown binary you need to set the compiler options first Options > Compiler. After that VulFi will do its best to filter all obvious false positives (such as call to printf with constant string as a first parameter). Please note that while the plugin is made without any ties to a specific ar chitecture some processors do not have full support for specifying types and in such case VulFi will simply mark all cross-references to potentially dangerous standard functions to allow you to proceed with manual analysis. In these cases, you can benefit from the tracking features of the plugin. Usage Scanning To initiate the scan, select Search > VulFi option from the top bar menu. This will either initiate a new scan, or it will read previous results stored inside the idb/i64 file. The data are automatically saved whenever you save the database. Once the scan is completed or once the previous results are loaded a table will be presented with a view containing following columns: IssueName - Used as a title for the suspected issue. FunctionName - Name of the function. FoundIn - The function that contains the potentially interesting reference. Address - The address of the detected call. Status - The review status, initial Not Checked is assigned to every new item. The other statuses are False Positive, Suspicious and Vulnerable. Those can be set using a right-click menu on a given item and should reflect the results of the manual review of the given function call. Priority - An attempt to prioritize more interesting calls over the less interesting ones. Possible values are High, Medium and Low. The priorities are defined along with other rules in vulfi_rules.json file. Comment - A user defined comment for the given item. In case that there are no data inside the idb/i64 file or user decides to perform a new scan. The plugin will ask whether it should run the scan using the default included rules or whether it should use a custom rules file. Please note that running a new scan with already existing data does not overwrite the previously found items identified by the rule with the same name as the one with previously stored results. Therefore, running the scan again does not delete existing comments and status updates.

___________________________
@hacking_Attack
@Hacking_Video

In the right-click context menu within the VulFi view, you can also remove the item from the results or remove all items. Please note that any comments or status updates will be lost after performing this operation. Investigation Whenever you would like to inspect the detected instance of a possible vulnerable (https://www.kitploit.com/search/label/Vulnerable) function, just double-click anywhere in the desired row and IDA will take you to the memory location which was identified as potentially interesting. Using a right-click and option Set Vulfi Comment allows you to enter comment for the given instance (to justify the status for example). Adding More Functions The plugin also allows for creating custom rules. These rules could be defined in the IDA interface (ideal for single functions) or supplied as a custom rule file (ideal for rules that aim to cover multiple functions). Within the Interface When you would like to trace a custom function, which was identified during the analysis, just switch the IDA View to that function, right-click anywhere within its body and select Add current function to VulFi.

___________________________
@hacking_Attack
@Hacking_Video

Custom Set of Rules It is also possible to load a custom file with set of multiple rules. To create a custom rule file with the below structure you can use the included template file here (https://github.com/Accenture/VulFi/blob/main/rule_template_file.json). [ // An array of rules
{
"name": "RULE NAME", // The name of the rule
"alt_names":[
"function_name_to_look_for" // List of all function names that should be matched against the conditions defined in this rule
],
"wrappers":true, // Look for wrappers of the above functions as well (note that the wrapped function has to also match the rule)
"mark_if":{
"High":"True", // If evaluates to True, mark with priority High (see Rules below)
"Medium":"False", // If evaluates to True, mark with priority Medium (see Rules below)
"Low": "False" // If evaluates to True, mark with priority Low (see Rules below)
}
}
] An example rule that looks for all cross-references to function malloc and checks whether its paramter is not constant and whether the return value of the function is checked is shown below: {
"name": "Possible Null Pointer Dereference",
"alt_names":[
"malloc",
"_malloc",
".malloc"
],
"wrappers":false,
"mark_if":{
"High":"not param[0].is_constant() and not function_call.return_value_checked()",
"Medium":"False",
"Low": "False"
}
} Rules Available Variables param[]: Used to access the parameter to a function call (index starts at 0) function_call: Used to access the function call event param_count: Holds the count of parameters that were passed to a function Available Functions Is parameter a constant: param[].is_constant() Get numeric value of parameter: param[].number_value() Get string value of parameter: param[].string_value() Is parameter set to null after the call: param[].set_to_null_after_call() Is return value of a function checked: function_call.return_value_checked() Examples Mark all calls to a function where third parameter is > 5: param[2].number_value() > 5 Mark all calls to a function where the second parameter contains "%s": "%s" in param[1].string_value() Mark all calls to a function where the second parameter is not constant: not param[1].is_constant() Mark all calls to a function where the return value is validated against the value that is equal to the number of parameters: function_call.return_value_checked(param_count) Mark all calls to a function where the return value is validated against any value: function_call.return_value_checked() Mark all calls to a function where none of the parameters starting from the third are constants: all(not p.is_constant() for p in param[2:]) Mark all calls to a function where any of the parameters are constant: any(p.is_constant() for p in param) Mark all calls to a function: True Issues and Warnings When you request the parameter with index that is out of bounds any call to a function will be marked as Low priority. This is a way to avoid missing cross references where it was not possible to correctly get all parameters (this mainly applies to disassembly mode). When you search within the VulFi view and change context out of the view and come back, the view will not load. You can solve this either by terminating the search operation before switching the context, moving the VulFi view to the side-view so that it is always visible or by closing and re-opening the view (no data will be lost). Scans for more exotic architectures end with a lot of false positives.

Download VulFi (https://github.com/Accenture/VulFi)

___________________________
@hacking_Attack
@Hacking_Video

Inszene der Heimatschutzbehörde enthüllt eine große Anzahl von Mängel

Continue reading on Medium »
Read more...

Hacking on Medium
Parlons d’Hydra

https://cdn-images-1.medium.com/max/600/1*kWZXVEja_uuqZ3zCZ8SY0w.png
Salut les gens !

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video