Hacking Articles Tips Tricks Videos Tutorials
470 subscribers
66.1K photos
15 videos
157 files
133K links
Exploit
Pentesting
Hacking
Red Team
Blue Team
Kali Linux
Bug Bounty
Black Hat
Cyber security etc

@Hacking_Video
@Hacking_attack
Download Telegram
hacking: security in practice
is Flipper Zero worth the money people are listing on ebay?

it's a nifty little tool, i admit, and i played with one so i know first hand it's valuable, but some of these auctions are insane. the prices are ranging from $10 to $1500. i'm interested in getting one but it'd difficult to discern what it's actually worth without some more opinions.

thoughts on the value of this thing?

submitted by /u/nohupt
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video
hacking: security in practice
Hacking/Jailbreaking MP3 Player?

I have an MP3 player which clearly runs a very capable android operating system. It lets you add files via USB, including if they're APK's or some other sort of executable but attempting to open them gives this error:

Install blocked For security your phone is set to block installation from apps obtained from unknown sources

Is there a way around this? Here is the Amazon link to the specific MP3 player I have

Edit:: There's nothing in settings to allow apps from unknown sources (the company that made the MP3 player must've disabled that setting)

submitted by /u/--Explosion--
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video
 iOS Security Suite is an advanced and easy-to-use platform security & anti-tampering library written in pure Swift! If you are developing for iOS and you want to protect your app according to the OWASP MASVS (https://github.com/OWASP/owasp-masvs) standard, chapter v8, then this library could save you a lot of time.  What ISS detects: Jailbreak (even the iOS 11+ with brand new indicators!) Attached debugger (https://www.kitploit.com/search/label/Debugger) ‍ If an app was run in an emulator  Common reverse engineering (https://www.kitploit.com/search/label/Reverse%20Engineering) tools running on the device
Setup There are 4 ways you can start using IOSSecuritySuite 1. Add source Add IOSSecuritySuite/*.swift files to your project 2. Setup with CocoaPods pod 'IOSSecuritySuite' 3. Setup with Carthage github "securing/IOSSecuritySuite" 4. Setup with Swift Package Manager .package(url: "https://github.com/securing/IOSSecuritySuite.git", from: "1.5.0") Update Info.plist After adding ISS to your project, you will also need to update your main Info.plist. There is a check in jailbreak (https://www.kitploit.com/search/label/Jailbreak) detection module that uses canOpenURL(_:) method and requires (https://developer.apple.com/documentation/uikit/uiapplication/1622952-canopenurl) specifying URLs that will be queried. LSApplicationQueriesSchemes cydia undecimus sileo zbra filza activator ">LSApplicationQueriesSchemes

cydia
undecimus
sileo
zbra
filza
activator
How to use Jailbreak detector module The simplest method returns True/False if you just want to know if the device is jailbroken or jailed if IOSSecuritySuite.amIJailbroken() {
print("This device is jailbroken")
} else {
print("This device is not jailbroken")
} Verbose, if you also want to know what indicators were identified let jailbreakStatus = IOSSecuritySuite.amIJailbrokenWithFailMessage()
if jailbreakStatus.jailbroken {
print("This device is jailbroken")
print("Because: \(jailbreakStatus.failMessage)")
} else {
print("This device is not jailbroken")
} The failMessage is a String containing comma-separated indicators as shown on the example below: Cydia URL scheme detected, Suspicious file exists: /Library/MobileSubstrate/MobileSubstrate.dylib, Fork was able to create a new process Verbose & filterable, if you also want to for example identify devices that were jailbroken in the past, but now are jailed let jailbreakStatus = IOSSecuritySuite.amIJailbrokenWithFailedChecks()
if jailbreakStatus.jailbroken {
if (jailbreakStatus.failedChecks.contains { $0.check == .existenceOfSuspiciousFiles }) && (jailbreakStatus.failedChecks.contains { $0.check == .suspiciousFilesCanBeOpened }) {
print("This is real jailbroken device")
}
} Debugger detector module let amIDebugged: Bool = IOSSecuritySuite.amIDebugged() Deny debugger at all IOSSecuritySuite.denyDebugger() Emulator detector module let runInEmulator: Bool = IOSSecuritySuite.amIRunInEmulator() Reverse engineering tools detector module let amIReverseEngineered: Bool = IOSSecuritySuite.amIReverseEngineered() System proxy detector module let amIProxied: Bool = IOSSecuritySuite.amIProxied() Experimental features Runtime hook detector module let amIRuntimeHooked: Bool = amIRuntimeHook(dyldWhiteList: dylds, detectionClass: SomeClass.self, selector: #selector(SomeClass.someFunction), isClassMethod: false) Symbol hook deny module // If we want to deny symbol hook of Swift function, we have to pass mangled name of that function
denySymbolHook("$s10Foundation5NSLogyySS_s7CVarArg_pdtF") // denying hooking for the NSLog function
NSLog("Hello Symbol Hook")

denySymbolHook("abort")

___________________________
@hacking_Attack
@Hacking_Video