hacking: security in practice
signal bots on telegram

hey there,

anyone has some content to study about signal bots on telegram?

i'm interesting in bots that send me a signal to help analisys of cassino's games (have not familiarity of this term in english, sorry).

Link below to demonstrate what i'm talk about:

https://www.youtube.com/watch?v=PrqUefbnEZc

submitted by /u/dogras420
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Is it possible to hack into someone's phone just by a simple phone call, and you have nothing else, just their phone number?

I literally know nothing about hacking, I'm just curious.

submitted by /u/PratikBrahma101
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How easy is it for a crazy ex to get my pass

I need opinions on this because I’m not too familiar with this stuff. Back in September texts were sent to my boyfriend over tiktok DM, posing as me and asking him for his snap password because my snapchat was “messed up” - AKA trying to log into his snap. The texts sent were very very realistic and the conversation was muted so I never saw it. Earlier today I was going through my DM’s for whatever reason and saw the texts. I told my boyfriend about it and he was like “oh yeah that was weird I knew it was a hacker because you were texting me on snapchat at the time” (guess he forgot to tell me or something). Since I just saw this now and never changed my password, the person has had access to my account this whole time but hasn’t done anything else. They only messaged my boyfriend - which is weird because I had other DM’s and I’m not sure how they knew we were together because we hadn’t posted together. He has a crazy ex but I didn’t think she would be that crazy. Would a random hacker do this? I’m just really worried it’s someone personal. No other social media was hacked

submitted by /u/orangeslice5151
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Possible CORS or cache poisoning vulnerablity

I recently started with bug bounty and scanned a target with burp. The scan sais that the page might be vulnerable to cache poisoning. Unfortunatly i'm not experienced enough to test if the page is vulnerable or not.

Feel free to scan the page yourself and find out if it's vulnerable or not. If you do find that the page is vulnerable and decide to make a report, I would appreciate some credit but obviously you don't have to since i've contributed verly little.

webpage: https://api.20min.ch

submitted by /u/Remote_Inspection_68
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Securely erase iPhone data?

I've learned that data is not permanently deleted until it has been overwritten which iPhone's reset function doesn't do. Any software recommendations to overwrite/erase iPhone data?

submitted by /u/Wild-Treat-1562
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Does anyone know how to export audio assets from Unreal Engine 4?

Basically the title says it, I need to pull audio assets from poppy playtime and I can’t seem to find a way export the assets without getting a error. I’m asking here because there is not way that I have found to decompile the .pak and pull audio out. Anyone have any pointers.

submitted by /u/JunkBoi76
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
DuplicateDump - Dumping LSASS With A Duplicated Handle From Custom LSA Plugin

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEie3nSfB41hs0CJGekmcb_wnpRoyhp1ZHAOGgCMkl7f44Gg9JllQnzCCHRC2bn6N2ndJ0eAdm47ant28xRy3nL-RHvo7XYGz9XPEtcQq4HdfXdHEfzl_cSvmOoXcNhBbQ-Q28we1wxk3sgaCV3rXZyXUKG4RHTaMZbDrvGqbXJ3L1SWmCqQvdzVK56I/w640-h314/LSAPlugin.png
DuplicateDump is a fork of MirrorDump with following modifications:

* DInovke implementation
* LSA plugin DLL written in C++ which could be clean up after dumping LSASS. MirrorDump compile LSA plugin as .NET assembly which would not be unloaded by LSASS process. That's why MirrorDump failed to delete the plugin.
* PID of dump process (i.e., DuplicateDump) is shared to LSA plugin through named pipe
* Passing value "0" instead of LSASS PID to MiniDumpWriteDump. This prevent MiniDumpWriteDump from opening its own handle to LSASS

DuplicateDump add custom LSA plugin that duplicate LSASS process handle from the LSASS process to DuplicateDump. So DuplicateDump has a ready to use process handle to LSASS without invoking OpenProcess.
Testing

By loading DuplicateDump in memory, it was able to dump LSASS memory without detection on

* Symantec 14.3
* Kaspersky Enterprise
* Windows Defender

Detected by Cortex XDR, Crowdstrike. Failed to dump lsass without detection on SentinalOne.

Usage

Compile LSA plugin (export either SpLsaModeInitialize or dllMain function) and provide the full path of DLL to DuplicateDump

.\DuplicateDump.exe --help
-f, --filename=VALUE The path to write the dump file to
-p, --plugin=VALUE Full file path to LSA plugin
-c, --compress GZip and delete the dump file on disk
-d, --DebugPriv Obtain SeDebugPrivilege
-h, --help Display this help

Example

.\DuplicateDump.exe -f test -c -p C:\LSAPlugin.dll [+] Loading LSA security package [+] Named pipe connected and replying with current PID 6492 [+] Found duplicated LSASS process handle 0x3d0 [+] Compressed dump file saved to test.gz

Improvement

*
DuplicateDump use DInvoke to call API AddSecurityPackage to load a LSA plugin. You could use RPC call without having to invoke that API call directly. Check details in XPN's blog post

*
Recently, splinter_code discovered that SecLogon could be leveraged to dump LSASS. Strongly recommend you to study his blog post.
References

* https://github.com/CCob/MirrorDump
* https://rastamouse.me/dumping-lsass-with-duplicated-handles/
* https://github.com/jfmaes/SharpHandler
Download DuplicateDump
➖ Sent by @TheFeedReaderBot ➖

___________________________
@hacking_Attack
@Hacking_Video

DuplicateDump - Dumping LSASS With A Duplicated Handle From Custom LSA Plugin
http://www.kitploit.com/2022/05/duplicatedump-dumping-lsass-with.html

___________________________
@hacking_Attack
@Hacking_Video

DuplicateDump is a fork of MirrorDump (https://github.com/CCob/MirrorDump) with following modifications: DInovke implementation LSA plugin (https://www.kitploit.com/search/label/Plugin) DLL written in C++ which could be clean up after dumping LSASS. MirrorDump compile LSA plugin as .NET assembly (https://www.kitploit.com/search/label/Assembly) which would not be unloaded by LSASS process. That's why MirrorDump failed to delete the plugin. PID of dump process (i.e., DuplicateDump) is shared to LSA plugin through named pipe Passing value "0" instead of LSASS PID to MiniDumpWriteDump. This prevent MiniDumpWriteDump from opening its own handle to LSASS DuplicateDump add custom LSA plugin that duplicate LSASS process handle from the LSASS process to DuplicateDump. So DuplicateDump has a ready to use process handle to LSASS without invoking OpenProcess.
Testing By loading DuplicateDump in memory, it was able to dump LSASS memory (https://www.kitploit.com/search/label/Memory) without detection on Symantec 14.3 Kaspersky Enterprise Windows Defender Detected by Cortex (https://www.kitploit.com/search/label/Cortex) XDR, Crowdstrike. Failed to dump lsass without detection on SentinalOne. Usage Compile LSA plugin (export either SpLsaModeInitialize or dllMain function) and provide the full path of DLL to DuplicateDump .\DuplicateDump.exe --help
-f, --filename=VALUE The path to write the dump file to
-p, --plugin=VALUE Full file path to LSA plugin
-c, --compress GZip and delete the dump file on disk
-d, --DebugPriv Obtain SeDebugPrivilege
-h, --help Display this help Example .\DuplicateDump.exe -f test -c -p C:\LSAPlugin.dll [+] Loading LSA security package [+] Named pipe connected and replying with current PID 6492 [+] Found duplicated LSASS process handle 0x3d0 [+] Compressed dump file saved to test.gz Improvement DuplicateDump use DInvoke to call API AddSecurityPackage to load a LSA plugin. You could use RPC call without having to invoke that API call directly. Check details in XPN's blog post (https://blog.xpnsec.com/exploring-mimikatz-part-2/) Recently, splinter_code discovered that SecLogon could be leveraged to dump LSASS. Strongly recommend you to study his blog post (https://splintercod3.blogspot.com/p/the-hidden-side-of-seclogon-part-2.html). References https://github.com/CCob/MirrorDump https://rastamouse.me/dumping-lsass-with-duplicated-handles/ https://github.com/jfmaes/SharpHandler

Download DuplicateDump (https://github.com/Hagrid29/DuplicateDump)

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
PlainID Debuts Authorization-as-a-Service Platform

Platform powered by policy-based access control (PBAC).

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
España: destituyen a jefa de inteligencia por espionaje a políticos.

https://cdn-images-1.medium.com/max/940/0*RoqQFwHep5Y34pf_.jpg
PUBLICADO EN 11 MAYO, 2022POR EHACKING

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Tryhackme: Road

https://cdn-images-1.medium.com/max/600/1*1sBeWMcgHiWG355y45hfcg.png
Road is a tryhackme machine with a medium rating that was inspired by a real-world pentest.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Nuevas muestras de REvil indican que la banda de ransomware está de vuelta después de meses de…

https://cdn-images-1.medium.com/max/1509/0*LtGDfDoieWFAUyEW
PUBLICADO EN 10 MAYO, 2022 POR EHACKING

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video