Hacking on Medium
120k Email Credential Leaks | Plain Passwords

https://cdn-images-1.medium.com/max/610/1*nFUQbfvZmLFuClKn7MZc9g.png
It’s been a while since my last article publish here in medium. but in this article that I'm going to share with you is related to a Email…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Should you Sell your old Hard Drives?

https://cdn-images-1.medium.com/max/2600/1*rPZOOglyIveCHQlGAcHoLA.jpeg
A quick or full format will only remove the file table, which is essentially an index that links the file names with the actual data…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Smishing - How to Recognize Dangerous Text Messages

https://external-preview.redd.it/bDYcEy44V42IEAveWpRWLD6R72Mssf-LlSyM8t3OvRY.jpg?width=640&crop=smart&auto=webp&s=f63a947d4319e84c83ef4dea93242cadb1d1e70b submitted by /u/DrinkMoreCodeMore
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How often do you encounter services using non-default port numbers?

I know anything can run on any port, but I haven’t yet seen anything other than the default setup. Is it common to see systems setup using non-standard ports? I’ve heard that this can mess with things like nmap’s estimated services

submitted by /u/Agent-BTZ
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
I don't think this is much of a hacking but the internet is going to shutdown in my country and I don't know how to cross internet blockage.

I live in Iran and our government probably will block all access to global internet to censor our protests. we stiil will have access to national nthernet but that's not good. is there a way for me to cross this blockage?

submitted by /u/ario3831
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
signal bots on telegram

hey there,

anyone has some content to study about signal bots on telegram?

i'm interesting in bots that send me a signal to help analisys of cassino's games (have not familiarity of this term in english, sorry).

Link below to demonstrate what i'm talk about:

https://www.youtube.com/watch?v=PrqUefbnEZc

submitted by /u/dogras420
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Is it possible to hack into someone's phone just by a simple phone call, and you have nothing else, just their phone number?

I literally know nothing about hacking, I'm just curious.

submitted by /u/PratikBrahma101
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How easy is it for a crazy ex to get my pass

I need opinions on this because I’m not too familiar with this stuff. Back in September texts were sent to my boyfriend over tiktok DM, posing as me and asking him for his snap password because my snapchat was “messed up” - AKA trying to log into his snap. The texts sent were very very realistic and the conversation was muted so I never saw it. Earlier today I was going through my DM’s for whatever reason and saw the texts. I told my boyfriend about it and he was like “oh yeah that was weird I knew it was a hacker because you were texting me on snapchat at the time” (guess he forgot to tell me or something). Since I just saw this now and never changed my password, the person has had access to my account this whole time but hasn’t done anything else. They only messaged my boyfriend - which is weird because I had other DM’s and I’m not sure how they knew we were together because we hadn’t posted together. He has a crazy ex but I didn’t think she would be that crazy. Would a random hacker do this? I’m just really worried it’s someone personal. No other social media was hacked

submitted by /u/orangeslice5151
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Possible CORS or cache poisoning vulnerablity

I recently started with bug bounty and scanned a target with burp. The scan sais that the page might be vulnerable to cache poisoning. Unfortunatly i'm not experienced enough to test if the page is vulnerable or not.

Feel free to scan the page yourself and find out if it's vulnerable or not. If you do find that the page is vulnerable and decide to make a report, I would appreciate some credit but obviously you don't have to since i've contributed verly little.

webpage: https://api.20min.ch

submitted by /u/Remote_Inspection_68
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Securely erase iPhone data?

I've learned that data is not permanently deleted until it has been overwritten which iPhone's reset function doesn't do. Any software recommendations to overwrite/erase iPhone data?

submitted by /u/Wild-Treat-1562
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Does anyone know how to export audio assets from Unreal Engine 4?

Basically the title says it, I need to pull audio assets from poppy playtime and I can’t seem to find a way export the assets without getting a error. I’m asking here because there is not way that I have found to decompile the .pak and pull audio out. Anyone have any pointers.

submitted by /u/JunkBoi76
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
DuplicateDump - Dumping LSASS With A Duplicated Handle From Custom LSA Plugin

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEie3nSfB41hs0CJGekmcb_wnpRoyhp1ZHAOGgCMkl7f44Gg9JllQnzCCHRC2bn6N2ndJ0eAdm47ant28xRy3nL-RHvo7XYGz9XPEtcQq4HdfXdHEfzl_cSvmOoXcNhBbQ-Q28we1wxk3sgaCV3rXZyXUKG4RHTaMZbDrvGqbXJ3L1SWmCqQvdzVK56I/w640-h314/LSAPlugin.png
DuplicateDump is a fork of MirrorDump with following modifications:

* DInovke implementation
* LSA plugin DLL written in C++ which could be clean up after dumping LSASS. MirrorDump compile LSA plugin as .NET assembly which would not be unloaded by LSASS process. That's why MirrorDump failed to delete the plugin.
* PID of dump process (i.e., DuplicateDump) is shared to LSA plugin through named pipe
* Passing value "0" instead of LSASS PID to MiniDumpWriteDump. This prevent MiniDumpWriteDump from opening its own handle to LSASS

DuplicateDump add custom LSA plugin that duplicate LSASS process handle from the LSASS process to DuplicateDump. So DuplicateDump has a ready to use process handle to LSASS without invoking OpenProcess.
Testing

By loading DuplicateDump in memory, it was able to dump LSASS memory without detection on

* Symantec 14.3
* Kaspersky Enterprise
* Windows Defender

Detected by Cortex XDR, Crowdstrike. Failed to dump lsass without detection on SentinalOne.

Usage

Compile LSA plugin (export either SpLsaModeInitialize or dllMain function) and provide the full path of DLL to DuplicateDump

.\DuplicateDump.exe --help
-f, --filename=VALUE The path to write the dump file to
-p, --plugin=VALUE Full file path to LSA plugin
-c, --compress GZip and delete the dump file on disk
-d, --DebugPriv Obtain SeDebugPrivilege
-h, --help Display this help

Example

.\DuplicateDump.exe -f test -c -p C:\LSAPlugin.dll [+] Loading LSA security package [+] Named pipe connected and replying with current PID 6492 [+] Found duplicated LSASS process handle 0x3d0 [+] Compressed dump file saved to test.gz

Improvement

*
DuplicateDump use DInvoke to call API AddSecurityPackage to load a LSA plugin. You could use RPC call without having to invoke that API call directly. Check details in XPN's blog post

*
Recently, splinter_code discovered that SecLogon could be leveraged to dump LSASS. Strongly recommend you to study his blog post.
References

* https://github.com/CCob/MirrorDump
* https://rastamouse.me/dumping-lsass-with-duplicated-handles/
* https://github.com/jfmaes/SharpHandler
Download DuplicateDump
➖ Sent by @TheFeedReaderBot ➖

___________________________
@hacking_Attack
@Hacking_Video

DuplicateDump - Dumping LSASS With A Duplicated Handle From Custom LSA Plugin
http://www.kitploit.com/2022/05/duplicatedump-dumping-lsass-with.html

___________________________
@hacking_Attack
@Hacking_Video

DuplicateDump is a fork of MirrorDump (https://github.com/CCob/MirrorDump) with following modifications: DInovke implementation LSA plugin (https://www.kitploit.com/search/label/Plugin) DLL written in C++ which could be clean up after dumping LSASS. MirrorDump compile LSA plugin as .NET assembly (https://www.kitploit.com/search/label/Assembly) which would not be unloaded by LSASS process. That's why MirrorDump failed to delete the plugin. PID of dump process (i.e., DuplicateDump) is shared to LSA plugin through named pipe Passing value "0" instead of LSASS PID to MiniDumpWriteDump. This prevent MiniDumpWriteDump from opening its own handle to LSASS DuplicateDump add custom LSA plugin that duplicate LSASS process handle from the LSASS process to DuplicateDump. So DuplicateDump has a ready to use process handle to LSASS without invoking OpenProcess.
Testing By loading DuplicateDump in memory, it was able to dump LSASS memory (https://www.kitploit.com/search/label/Memory) without detection on Symantec 14.3 Kaspersky Enterprise Windows Defender Detected by Cortex (https://www.kitploit.com/search/label/Cortex) XDR, Crowdstrike. Failed to dump lsass without detection on SentinalOne. Usage Compile LSA plugin (export either SpLsaModeInitialize or dllMain function) and provide the full path of DLL to DuplicateDump .\DuplicateDump.exe --help
-f, --filename=VALUE The path to write the dump file to
-p, --plugin=VALUE Full file path to LSA plugin
-c, --compress GZip and delete the dump file on disk
-d, --DebugPriv Obtain SeDebugPrivilege
-h, --help Display this help Example .\DuplicateDump.exe -f test -c -p C:\LSAPlugin.dll [+] Loading LSA security package [+] Named pipe connected and replying with current PID 6492 [+] Found duplicated LSASS process handle 0x3d0 [+] Compressed dump file saved to test.gz Improvement DuplicateDump use DInvoke to call API AddSecurityPackage to load a LSA plugin. You could use RPC call without having to invoke that API call directly. Check details in XPN's blog post (https://blog.xpnsec.com/exploring-mimikatz-part-2/) Recently, splinter_code discovered that SecLogon could be leveraged to dump LSASS. Strongly recommend you to study his blog post (https://splintercod3.blogspot.com/p/the-hidden-side-of-seclogon-part-2.html). References https://github.com/CCob/MirrorDump https://rastamouse.me/dumping-lsass-with-duplicated-handles/ https://github.com/jfmaes/SharpHandler

Download DuplicateDump (https://github.com/Hagrid29/DuplicateDump)

___________________________
@hacking_Attack
@Hacking_Video