abort() MSHook detector module Bool { return false } // Defining FunctionType : @convention(thin) indicates a “thin” function reference, which uses the Swift calling convention with no special “self” or “context” parameters. typealias FunctionType = @convention(thin) (Int) -> (Bool) // Getting pointer address of function we want to verify func getSwiftFunctionAddr(_ function: @escaping FunctionType) -> UnsafeMutableRawPointer { return unsafeBitCast(function, to: UnsafeMutableRawPointer.self) } let funcAddr = getSwiftFunctionAddr(someFunction) let amIMSHooked = IOSSecuritySuite.amIMSHooked(funcAddr)">// Function declaration
func someFunction(takes: Int) -> Bool {
return false
}

// Defining FunctionType : @convention(thin) indicates a “thin” function reference, which uses the Swift calling convention with no special “self” or “context” parameters.
typealias FunctionType = @convention(thin) (Int) -> (Bool)

// Getting pointer address of function we want to verify
func getSwiftFunctionAddr(_ function: @escaping FunctionType) -> UnsafeMutableRawPointer {
return unsafeBitCast(function, to: UnsafeMutableRawPointer.self)
}

let funcAddr = getSwiftFunctionAddr(someFunction)
let amIMSHooked = IOSSecuritySuite.amIMSHooked(funcAddr) MSHook deny module () // Getting original function address let funcDenyDebugger: FunctionType = denyDebugger let funcAddr = unsafeBitCast(funcDenyDebugger, to: UnsafeMutableRawPointer.self) if let originalDenyDebugger = denyMSHook(funcAddr) { // Call the original function with 1337 as Int argument unsafeBitCast(originalDenyDebugger, to: FunctionType.self)(1337) } else { denyDebugger() }">// Function declaration
func denyDebugger(value: Int) {
}

// Defining FunctionType : @convention(thin) indicates a “thin” function reference, which uses the Swift calling convention with no special “self” or “context” parameters.
typealias FunctionType = @convention(thin) (Int)->()

// Getting original function address
let funcDenyDebugger: FunctionType = denyDebugger
let funcAddr = unsafeBitCast(funcDenyDebugger, to: UnsafeMutableRawPointer.self)


if let originalDenyDebugger = denyMSHook(funcAddr) {
// Call the original function with 1337 as Int argument
unsafeBitCast(originalDenyDebugger, to: FunctionType.self)(1337)
} else {
denyDebugger()
} File integrity verifier module // Determine if application has been tampered with
if IOSSecuritySuite.amITampered([.bundleID("biz.securing.FrameworkClientApp"),
.mobileProvision("2976c70b56e9ae1e2c8e8b231bf6b0cff12bbbd0a593f21846d9a004dd181be3"),
.machO("IOSSecuritySuite", "6d8d460b9a4ee6c0f378e30f137cebaf2ce12bf31a2eef3729c36889158aa7fc")]).result {
print("I have been Tampered.")
}
else {
print("I have not been Tampered.")
}

// Manually verify SHA256 hash value of a loaded dylib
if let hashValue = IOSSecuritySuite.getMachOFileHashValue(.custom("IOSSecuritySuite")), hashValue == "6d8d460b9a4ee6c0f378e30f137cebaf2ce12bf31a2eef3729c36889158aa7fc" {
print("I have not been Tampered.")
}
else {
print("I have been Tampered.")
}

// Check SHA256 hash value of the main executable
// Tip: Your application may retrieve this value from the server
if let hashValue = IOSSecuritySuite.getMachOFileHashValue(.d efault), hashValue == "your-application-executable-hash-value" {
print("I have not been Tampered.")
}
else {
print("I have been Tampered.")
} Breakpoint detection module () let func_denyDebugger: FunctionType = denyDebugger // `: FunctionType` is a must let func_addr = unsafeBitCast(func_denyDebugger, to: UnsafeMutableRawPointer.self) let hasBreakpoint = IOSSecuritySuite.hasBreakpointAt(func_addr, functionSize: nil) if hasBreakpoint { print("Breakpoint found in the specified function") } else { print("Breakpoint not found in the specified function") }'>func denyDebugger() {
// Set breakpoint here
}

typealias FunctionType = @convention(thin) ()->()

___________________________
@hacking_Attack
@Hacking_Video

let func_denyDebugger: FunctionType = denyDebugger // `: FunctionType` is a must
let func_addr = unsafeBitCast(func_denyDebugger, to: UnsafeMutableRawPointer.self)
let hasBreakpoint = IOSSecuritySuite.hasBreakpointAt(func_addr, functionSize: nil)

if hasBreakpoint {
print("Breakpoint found in the specified function")
} else {
print("Breakpoint not found in the specified function")
} Watchpoint detection module Bool{ // lldb: watchpoint set expression ptr var ptr = malloc(9) // lldb: watchpoint set variable count var count = 3 return IOSSecuritySuite.hasWatchpoint() }">// Set a breakpoint at the testWatchpoint function
func testWatchpoint() -> Bool{
// lldb: watchpoint set expression ptr
var ptr = malloc(9)
// lldb: watchpoint set variable count
var count = 3
return IOSSecuritySuite.hasWatchpoint()
} Security considerations Before using this and other platform security checkers, you have to understand that: Including this tool in your project is not the only thing you should do in order to improve your app security! You can read a general mobile security whitepaper here (https://www.securing.biz/en/mobile-application-security-best-practices/index.html). Detecting if a device is jailbroken is done locally on the device. It means that every jailbreak detector may be bypassed (even this)! Swift code is considered to be harder to manipulate dynamically than Objective-C. Since this library was written in pure Swift, the IOSSecuritySuite methods shouldn't be exposed to Objective-C runtime (which makes it more difficult to bypass ✅). You have to know that attacker is still able to MSHookFunction/MSFindSymbol Swift symbols and dynamically change Swift code execution flow. It's also a good idea to obfuscate the whole project code, including this library. See Swiftshield (https://github.com/rockbruno/swiftshield) Contribution ❤️ Yes, please! If you have a better idea or you just want to improve this project, please text me on Twitter (https://twitter.com/_r3ggi) or Linkedin (https://www.linkedin.com/in/wojciech-regula/). Pull requests are more than welcome! Special thanks:  kubajakowski (https://github.com/kubajakowski) for pointing out the problem with canOpenURL(_:) method olbartek (https://github.com/olbartek) for code review (https://www.kitploit.com/search/label/Code%20Review) and pull request benbahrenburg (https://github.com/benbahrenburg) for various ISS improvements fotiDim (https://github.com/fotiDim) for adding new file paths to check gcharita (https://github.com/gcharita) for adding the Swift Package Manager support rynaardb (https://github.com/rynaardb) for creating the amIJailbrokenWithFailedChecks() method undeaDD (https://github.com/undeaDD) for various ISS improvements fnxpt (https://github.com/fnxpt) for adding multiple JB detections TannerJin (https://github.com/TannerJin) for MSHook, RuntimeHook, SymbolHook and Watchpoint Detection modules NikoXu (https://github.com/NikoXu) for adding file integrity (https://www.kitploit.com/search/label/File%20Integrity) module hellpf (https://github.com/hellpf) for fixing a dangling socket problem TODO Research Installer5 and Zebra Package Manager detection ( Cydia Alternatives ) License See the LICENSE file. References While creating this tool I used:  https://github.com/TheSwiftyCoder/JailBreak-Detection  https://github.com/abhinashjain/jailbreakdetection  https://gist.github.com/ddrccw/8412847  https://gist.github.com/bugaevc/4307eaf045e4b4264d8e395b5878a63b  "iOS Application Security" by David Thiel

Download IOSSecuritySuite (https://github.com/securing/IOSSecuritySuite)

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Microsoft: Russia Using Cyberattacks in Coordination With Military Invasion of Ukraine

Six Russian state-backed threat actors have lunched 237 cyberattacks on Ukraine's infrastructure, new research from MIcrosoft shows.

Dark Reading: Attacks/Breaches
Bumblebee Malware Buzzes Into Cyberattack Fray

The sophisticated Bumblebee downloader is being used in ongoing email-borne attacks that could lead to ransomware infections.

Dark Reading: Attacks/Breaches
The Ransomware Crisis Deepens, While Data Recovery Stalls

Higher probabilities of attack, soaring ransoms, and less chance of getting data back — the ransomware plague gets worse, and cyber insurance fails to be a panacea.

Dark Reading: Attacks/Breaches
IT Teams Worry Staff Lack Cloud-Specific Skills

Security, cost, and reliability top the list of concerns IT teams have about their cloud operations, according to a recent report.

Dark Reading: Attacks/Breaches
Capital One Ventures, Snowflake Ventures, Verizon Ventures, and Wipro Ventures Join Securonix $1B+ Growth Investment as Strategic Investors

Blue Chip Companies Deepen Commitment Based on Success of Long-Standing Customer and Partner Relationships and Conviction of Securonix’s Vision and Hypergrowth Potential

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Microsoft Patches Pair of Dangerous Vulnerabilities in Azure PostgreSQL

Flaws gave attackers a way to access other cloud accounts and databases, security vendor says.

hacking: security in practice
Some documents in my macbook changed file name to another saved file’s name without me doing it. I just wanna know, how and why this has happened?

Is this a sign of my computer being hacked or just some random error? Fyi, i was using this laptop for work and do receive emails from some of my (maybe-not-so-trustworthy) subordinates. What are some tell-tale signs of macbooks being hacked? Appreciate some light being shed on this matter. Cheers!

submitted by /u/royalflush59
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Of

Is there a legit way to hack onlyfans

submitted by /u/THE-MR-TROLL
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
how do you make indivious links for schools that block YouTube ?

I have termux on my phone cause I don't have a laptop and I'm not actually allowed to have a device at all so i hope this isn't a process I would have to work all day on cause I don't.have much scream time.

I am asking for Georgia USA school system. Is there a way to make indivious links for tings other than YouTube that are blocked like Pinterest or social medias ?

submitted by /u/Anairies
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
how do I get back in my gmail with termux hydra?

I can't do anything where I need a word list cause I have no clue what the password might be.My relatives went on my old phone and changed the email password,took the Sims card out the phone changed the passcode to the phone ,and I don't.have 2 step verification on.

I still have the email on this device but I am logged out I can only view the 10 digit security code that's apparently useless cause I can't do anything with it I guess.

submitted by /u/Anairies
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Writing in Color

Are there any Bypasses to write in color on certain Apps? for example if I put (c3)here and the Programm automatically writes that down as different color

I would be very interested if that works and on which Programms

What Codes to use and so on

submitted by /u/crackboyy
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Spotify für Twitter Spaces

https://cdn-images-1.medium.com/max/782/1*CDo32IpDpfXUZ1WuMlp_pg.png
Hallöchen

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Günün Özeti : 2

https://cdn-images-1.medium.com/max/600/1*CdwXUy1GPELMKj6HfwaqQw.png
Zaman tasarrufunu amaçlayan yeni düzenlemede Motorlu Taşıt Sürücü Sertifikası Sorgulama Hizmeti ve Motorlu Taşıt Sürücü Sertifikası…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
La Agencia de Ciberseguridad de EE.UU.

https://cdn-images-1.medium.com/max/1529/0*y3j0Gj-1WDpj0Cz2
PUBLICADO EN 28 ABRIL, 2022POR EHACKING

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
IOSSecuritySuite - iOS Platform Security And Anti-Tampering Swift Library

___________________________
@hacking_Attack
@Hacking_Video