hacking: security in practice
is Flipper Zero worth the money people are listing on ebay?
it's a nifty little tool, i admit, and i played with one so i know first hand it's valuable, but some of these auctions are insane. the prices are ranging from $10 to $1500. i'm interested in getting one but it'd difficult to discern what it's actually worth without some more opinions.
thoughts on the value of this thing?
submitted by /u/nohupt
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
is Flipper Zero worth the money people are listing on ebay?
it's a nifty little tool, i admit, and i played with one so i know first hand it's valuable, but some of these auctions are insane. the prices are ranging from $10 to $1500. i'm interested in getting one but it'd difficult to discern what it's actually worth without some more opinions.
thoughts on the value of this thing?
submitted by /u/nohupt
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
is Flipper Zero worth the money people are listing on ebay?
it's a nifty little tool, i admit, and i played with one so i know first hand it's valuable, but some of these auctions are insane. the prices are...
hacking: security in practice
Are hardware based security keys the best security we can have?
Like when comparing to Authenticator apps how much better are security keys?
submitted by /u/Princet2001
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
Are hardware based security keys the best security we can have?
Like when comparing to Authenticator apps how much better are security keys?
submitted by /u/Princet2001
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
Are hardware based security keys the best security we can have?
Like when comparing to Authenticator apps how much better are security keys?
hacking: security in practice
Hacking/Jailbreaking MP3 Player?
I have an MP3 player which clearly runs a very capable android operating system. It lets you add files via USB, including if they're APK's or some other sort of executable but attempting to open them gives this error:
Install blocked For security your phone is set to block installation from apps obtained from unknown sources
Is there a way around this? Here is the Amazon link to the specific MP3 player I have
Edit:: There's nothing in settings to allow apps from unknown sources (the company that made the MP3 player must've disabled that setting)
submitted by /u/--Explosion--
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
Hacking/Jailbreaking MP3 Player?
I have an MP3 player which clearly runs a very capable android operating system. It lets you add files via USB, including if they're APK's or some other sort of executable but attempting to open them gives this error:
Install blocked For security your phone is set to block installation from apps obtained from unknown sources
Is there a way around this? Here is the Amazon link to the specific MP3 player I have
Edit:: There's nothing in settings to allow apps from unknown sources (the company that made the MP3 player must've disabled that setting)
submitted by /u/--Explosion--
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
Hacking/Jailbreaking MP3 Player?
I have an MP3 player which clearly runs a very capable android operating system. It lets you add files via USB, including if they're APK's or some...
Hacking Articles Tips Tricks Videos Tutorials
Photo
hacking: security in practice
Hello World - elektroThing 🚀
submitted by /u/Loud-Consideration-2
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
Hello World - elektroThing 🚀
submitted by /u/Loud-Consideration-2
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
Hello World - elektroThing 🚀
Posted in r/hacking by u/Loud-Consideration-2 • 1 point and 0 comments
Deep Web
how to stay safe on the deep web?
i just want some info on how to stay safe while browsing. any info on how i can stay away from bad sites?
submitted by /u/YoonminLife
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
how to stay safe on the deep web?
i just want some info on how to stay safe while browsing. any info on how i can stay away from bad sites?
submitted by /u/YoonminLife
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
how to stay safe on the deep web?
i just want some info on how to stay safe while browsing. any info on how i can stay away from bad sites?
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
How to be a hacker: The ultimate guide to ethical hacking
https://cdn-images-1.medium.com/max/2600/1*-alj4tMD85b5g4T5ca7-RA.jpeg
In this article ill tell you all about hacking. we will also discuss how we can become a successful ethical hacker and what skills are…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
How to be a hacker: The ultimate guide to ethical hacking
https://cdn-images-1.medium.com/max/2600/1*-alj4tMD85b5g4T5ca7-RA.jpeg
In this article ill tell you all about hacking. we will also discuss how we can become a successful ethical hacker and what skills are…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
How to be a hacker: The ultimate guide to ethical hacking
In this article ill tell you all about hacking. we will also discuss how we can become a successful ethical hacker and what skills are…
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
How Cybersecurity Risks Must Be Fixed to Build Trust in Technology Innovation
https://cdn-images-1.medium.com/max/960/1*Nb4YnfrSTFPn_sRWx2yJcg.png
Thanks to DynamicCISO for a great discussion about the changing landscape of cybersecurity and how we must all adapt to drive trust into…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
How Cybersecurity Risks Must Be Fixed to Build Trust in Technology Innovation
https://cdn-images-1.medium.com/max/960/1*Nb4YnfrSTFPn_sRWx2yJcg.png
Thanks to DynamicCISO for a great discussion about the changing landscape of cybersecurity and how we must all adapt to drive trust into…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
How Cybersecurity Risks Must Be Fixed to Build Trust in Technology Innovation
Thanks to DynamicCISO for a great discussion about the changing landscape of cybersecurity and how we must all adapt to drive trust into…
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Download kali linux live boot OS file free and with fast speed. Hacking and cyber operating system…
General information
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Download kali linux live boot OS file free and with fast speed. Hacking and cyber operating system…
General information
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
Download kali linux live boot OS file free and with fast speed. Hacking and cyber operating system…
General information
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Your WordPress Site Has Been Hacked: Now What?
https://cdn-images-1.medium.com/max/2271/1*nBwqROC1Tu3aEtPJ2itaig.jpeg
Here’s a disturbing fact: stats show that almost one out of every six WordPress-powered sites are vulnerable to attacks. More than half a…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Your WordPress Site Has Been Hacked: Now What?
https://cdn-images-1.medium.com/max/2271/1*nBwqROC1Tu3aEtPJ2itaig.jpeg
Here’s a disturbing fact: stats show that almost one out of every six WordPress-powered sites are vulnerable to attacks. More than half a…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
Your WordPress Site Has Been Hacked: Now What?
Here’s a disturbing fact: stats show that almost one out of every six WordPress-powered sites are vulnerable to attacks. More than half a…
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Anonymous communication for Black Hat Hackers
How to talk anonymously and with class? How do you communicate with other Black Hat “friends”? You don’t need super privacy devices…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Anonymous communication for Black Hat Hackers
How to talk anonymously and with class? How do you communicate with other Black Hat “friends”? You don’t need super privacy devices…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
Anonymous communication for Black Hat Hackers
How to talk anonymously and with class? How do you communicate with other Black Hat “friends”? You don’t need super privacy devices…
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Nueva campaña RIG Exploit Kit que infecta las PC de las víctimas con RedLine Stealer
https://cdn-images-1.medium.com/max/1446/0*Dr-TGh6ml52wrC1_
PUBLICADO EN 28 ABRIL, 2022POR EHACKING
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Nueva campaña RIG Exploit Kit que infecta las PC de las víctimas con RedLine Stealer
https://cdn-images-1.medium.com/max/1446/0*Dr-TGh6ml52wrC1_
PUBLICADO EN 28 ABRIL, 2022POR EHACKING
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
Nueva campaña RIG Exploit Kit que infecta las PC de las víctimas con RedLine Stealer
PUBLICADO EN 28 ABRIL, 2022POR EHACKING
IOSSecuritySuite - iOS Platform Security And Anti-Tampering Swift Library
http://www.kitploit.com/2022/04/iossecuritysuite-ios-platform-security.html
___________________________
@hacking_Attack
@Hacking_Video
http://www.kitploit.com/2022/04/iossecuritysuite-ios-platform-security.html
___________________________
@hacking_Attack
@Hacking_Video
KitPloit - PenTest & Hacking Tools
IOSSecuritySuite - iOS Platform Security And Anti-Tampering Swift Library
iOS Security Suite is an advanced and easy-to-use platform security & anti-tampering library written in pure Swift! If you are developing for iOS and you want to protect your app according to the OWASP MASVS (https://github.com/OWASP/owasp-masvs) standard, chapter v8, then this library could save you a lot of time. What ISS detects: Jailbreak (even the iOS 11+ with brand new indicators!) Attached debugger (https://www.kitploit.com/search/label/Debugger) If an app was run in an emulator Common reverse engineering (https://www.kitploit.com/search/label/Reverse%20Engineering) tools running on the device
Setup There are 4 ways you can start using IOSSecuritySuite 1. Add source Add IOSSecuritySuite/*.swift files to your project 2. Setup with CocoaPods pod 'IOSSecuritySuite' 3. Setup with Carthage github "securing/IOSSecuritySuite" 4. Setup with Swift Package Manager .package(url: "https://github.com/securing/IOSSecuritySuite.git", from: "1.5.0") Update Info.plist After adding ISS to your project, you will also need to update your main Info.plist. There is a check in jailbreak (https://www.kitploit.com/search/label/Jailbreak) detection module that uses canOpenURL(_:) method and requires (https://developer.apple.com/documentation/uikit/uiapplication/1622952-canopenurl) specifying URLs that will be queried. LSApplicationQueriesSchemes cydia undecimus sileo zbra filza activator ">LSApplicationQueriesSchemes
cydia
undecimus
sileo
zbra
filza
activator
How to use Jailbreak detector module The simplest method returns True/False if you just want to know if the device is jailbroken or jailed if IOSSecuritySuite.amIJailbroken() {
print("This device is jailbroken")
} else {
print("This device is not jailbroken")
} Verbose, if you also want to know what indicators were identified let jailbreakStatus = IOSSecuritySuite.amIJailbrokenWithFailMessage()
if jailbreakStatus.jailbroken {
print("This device is jailbroken")
print("Because: \(jailbreakStatus.failMessage)")
} else {
print("This device is not jailbroken")
} The failMessage is a String containing comma-separated indicators as shown on the example below: Cydia URL scheme detected, Suspicious file exists: /Library/MobileSubstrate/MobileSubstrate.dylib, Fork was able to create a new process Verbose & filterable, if you also want to for example identify devices that were jailbroken in the past, but now are jailed let jailbreakStatus = IOSSecuritySuite.amIJailbrokenWithFailedChecks()
if jailbreakStatus.jailbroken {
if (jailbreakStatus.failedChecks.contains { $0.check == .existenceOfSuspiciousFiles }) && (jailbreakStatus.failedChecks.contains { $0.check == .suspiciousFilesCanBeOpened }) {
print("This is real jailbroken device")
}
} Debugger detector module let amIDebugged: Bool = IOSSecuritySuite.amIDebugged() Deny debugger at all IOSSecuritySuite.denyDebugger() Emulator detector module let runInEmulator: Bool = IOSSecuritySuite.amIRunInEmulator() Reverse engineering tools detector module let amIReverseEngineered: Bool = IOSSecuritySuite.amIReverseEngineered() System proxy detector module let amIProxied: Bool = IOSSecuritySuite.amIProxied() Experimental features Runtime hook detector module let amIRuntimeHooked: Bool = amIRuntimeHook(dyldWhiteList: dylds, detectionClass: SomeClass.self, selector: #selector(SomeClass.someFunction), isClassMethod: false) Symbol hook deny module // If we want to deny symbol hook of Swift function, we have to pass mangled name of that function
denySymbolHook("$s10Foundation5NSLogyySS_s7CVarArg_pdtF") // denying hooking for the NSLog function
NSLog("Hello Symbol Hook")
denySymbolHook("abort")
___________________________
@hacking_Attack
@Hacking_Video
Setup There are 4 ways you can start using IOSSecuritySuite 1. Add source Add IOSSecuritySuite/*.swift files to your project 2. Setup with CocoaPods pod 'IOSSecuritySuite' 3. Setup with Carthage github "securing/IOSSecuritySuite" 4. Setup with Swift Package Manager .package(url: "https://github.com/securing/IOSSecuritySuite.git", from: "1.5.0") Update Info.plist After adding ISS to your project, you will also need to update your main Info.plist. There is a check in jailbreak (https://www.kitploit.com/search/label/Jailbreak) detection module that uses canOpenURL(_:) method and requires (https://developer.apple.com/documentation/uikit/uiapplication/1622952-canopenurl) specifying URLs that will be queried. LSApplicationQueriesSchemes cydia undecimus sileo zbra filza activator ">LSApplicationQueriesSchemes
cydia
undecimus
sileo
zbra
filza
activator
How to use Jailbreak detector module The simplest method returns True/False if you just want to know if the device is jailbroken or jailed if IOSSecuritySuite.amIJailbroken() {
print("This device is jailbroken")
} else {
print("This device is not jailbroken")
} Verbose, if you also want to know what indicators were identified let jailbreakStatus = IOSSecuritySuite.amIJailbrokenWithFailMessage()
if jailbreakStatus.jailbroken {
print("This device is jailbroken")
print("Because: \(jailbreakStatus.failMessage)")
} else {
print("This device is not jailbroken")
} The failMessage is a String containing comma-separated indicators as shown on the example below: Cydia URL scheme detected, Suspicious file exists: /Library/MobileSubstrate/MobileSubstrate.dylib, Fork was able to create a new process Verbose & filterable, if you also want to for example identify devices that were jailbroken in the past, but now are jailed let jailbreakStatus = IOSSecuritySuite.amIJailbrokenWithFailedChecks()
if jailbreakStatus.jailbroken {
if (jailbreakStatus.failedChecks.contains { $0.check == .existenceOfSuspiciousFiles }) && (jailbreakStatus.failedChecks.contains { $0.check == .suspiciousFilesCanBeOpened }) {
print("This is real jailbroken device")
}
} Debugger detector module let amIDebugged: Bool = IOSSecuritySuite.amIDebugged() Deny debugger at all IOSSecuritySuite.denyDebugger() Emulator detector module let runInEmulator: Bool = IOSSecuritySuite.amIRunInEmulator() Reverse engineering tools detector module let amIReverseEngineered: Bool = IOSSecuritySuite.amIReverseEngineered() System proxy detector module let amIProxied: Bool = IOSSecuritySuite.amIProxied() Experimental features Runtime hook detector module let amIRuntimeHooked: Bool = amIRuntimeHook(dyldWhiteList: dylds, detectionClass: SomeClass.self, selector: #selector(SomeClass.someFunction), isClassMethod: false) Symbol hook deny module // If we want to deny symbol hook of Swift function, we have to pass mangled name of that function
denySymbolHook("$s10Foundation5NSLogyySS_s7CVarArg_pdtF") // denying hooking for the NSLog function
NSLog("Hello Symbol Hook")
denySymbolHook("abort")
___________________________
@hacking_Attack
@Hacking_Video
GitHub
GitHub - OWASP/masvs: The OWASP MASVS (Mobile Application Security Verification Standard) is the industry standard for mobile app…
The OWASP MASVS (Mobile Application Security Verification Standard) is the industry standard for mobile app security. - OWASP/masvs