Hacking on Medium
TryHackMe: Advent of Cyber 3 (2021)

https://cdn-images-1.medium.com/max/1080/1*cLtE4yUUWRmW2sKiJkuUCg.png
TryHackMe: [Day 1] Web Exploitation Save The Gifts

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

NodeSecurityShield - A Developer And Security Engineer Friendly Package For Securing NodeJS Applications
http://www.kitploit.com/2022/05/nodesecurityshield-developer-and.html

___________________________
@hacking_Attack
@Hacking_Video

A Developer and Security Engineer friendly package for Securing NodeJS (https://www.kitploit.com/search/label/NodeJS) Applications. Inspired by the log4J vulnerability (https://www.kitploit.com/search/label/Vulnerability) (CVE-2021-44228 (https://nvd.nist.gov/vuln/detail/CVE-2021-44228)) which can be exploited because an application can make arbitrary network calls. We felt there is an need for an application to declare what privileges it can have so that exploitation (https://www.kitploit.com/search/label/Exploitation) of such vulnerabilities (https://www.kitploit.com/search/label/vulnerabilities) becomes harder. To achieve this, NSS (Node Security Shield) has Resource Access (https://www.kitploit.com/search/label/Access) Policy.
Resource Access Policy (RAP) Resource Access Policy is similar to CSP(Content Security Policy (https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP)). It lets the developer/security engineer declare what resources an application should access. And Node Security Shield will enforce it. Installation Install Node Security Shield using npm npm install nodesecurityshield Usage // Require Node Security Shield
let nodeSecurityShield = require('nodesecurityshield');

// Enable Attack Monitoring and/or Blocking
nodeSecurityShield.enableAttackMonitoring(resourceAccessPolicy ,callbackFunction); Sample resourceAccessPolicy const resourceAccessPolicy = {
"outBoundRequest" : {
"blockedDomains" : ["*.123.com", "stats.abc.com", 'xyz.com'],
"allowedDomains" : ["*.domdog.io"]
}
}; Note: blockedDomains holds precedence over allowedDomains. i.e., requests checked against blockedDomains first then allowedDomains. Sample callbackFunction for Attack Monitoring var callbackFunction = function (violationEvent) {
console.log(violationEvent);
} Sample callbackFunction for Attack Blocking var callbackFunction = function (violationEvent) {
throw new Error("Request Blocked. It violates declared Resource Access Policy.")
} Sample violationEvent {
"violationtType": "Outbound Request",
"message": "Outbound request to 'www.malicious.com' violates declared 'Resource Access Policy (RAP)'.",
"policy": {
"outBoundRequest" : {
"blockedDomains" : ["*.123.com", "stats.abc.com", 'xyz.com'],
"allowedDomains" : ["*.domdog.io"]
}
} Integrating with Sentry Sample callbackFunction to integrate with Sentry (https://sentry.io/) var callbackFunction = function (violationEvent) {

var e = new Error();
e.name = 'Resource Access Policy Violation';
e.message = JSON.stringify(violationEvent);
Sentry.captureException(e);

} Screenshot from Sentry dashboard

___________________________
@hacking_Attack
@Hacking_Video

Features Attack Monitoring Outbound Network Calls Attack Blocking Outbound Network Calls Roadmap Attack Monitoring Command Execution File Calls Attack Blocking Command Execution File Calls Vulnerability Scanner Authors Lavakumar Kuppan Github - @lavakumar (https://github.com/Lavakumar) Twitter - @lavakumark (https://twitter.com/lavakumark) Sukesh Pappu Github - @thelogicalbeard (https://www.github.com/thelogicalbeard) Twitter - @thelogicalbeard (https://www.twitter.com/thelogicalbeard) License Apache License 2.0 (https://github.com/DomdogSec/NodeSecurityShield/blob/main/LICENSE)

Download NodeSecurityShield (https://github.com/DomdogSec/NodeSecurityShield)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Can hacking tools go undetected

My company is trying out a software tool to detect hacks. We are doing a test, I'm thinking of NMAP, OWASP ZAP etc, to see if they are detected.

Is there a way to go undetected, I know NAMP can do stealth mode.

submitted by /u/Accomplished_Ad3821
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
What certification to start with

I have gone thru numerous courses over the past few months and I’m getting more confidant of my growing skills each day , but I’m a tad overwhelmed with all the different certifications. I’m not sure which one to start with , any suggestions?

submitted by /u/Many-Trouble-5616
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
NodeSecurityShield - A Developer And Security Engineer Friendly Package For Securing NodeJS Applications

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgofQEgI4u-jUWx7H-ii-ce51t0I-ACbfpzxkI99qosLwK_aTtNOTWEj2fYNW-kqczhOwYkmsElkG-icMNC6pJRLUP0a8W5JP6iyjSfugXpfRZ3-0u-wdi0_CbL0nRYgHBlIaX_AdSvBOV8yP1g8__HeqoWa0jw7cAKXXqVgc42zZXSv9z5aQcX6zIT/s320/NodeSecurityShield_1_NodeSecurityShield.png A Developer and Security Engineer friendly package for Securing NodeJS Applications.

Inspired by the log4J vulnerability (CVE-2021-44228) which can be exploited because an application can make arbitrary network calls.

We felt there is an need for an application to declare what privileges it can have so that exploitation of such vulnerabilities becomes harder.

To achieve this, NSS (Node Security Shield) has Resource Access Policy. Resource Access Policy (RAP)Resource Access Policy is similar to CSP(Content Security Policy).

It lets the developer/security engineer declare what resources an application should access. And Node Security Shield will enforce it. InstallationInstall Node Security Shield using npm npm install nodesecurityshieldUsage// Require Node Security Shield
let nodeSecurityShield = require('nodesecurityshield');

// Enable Attack Monitoring and/or Blocking
nodeSecurityShield.enableAttackMonitoring(resourceAccessPolicy ,callbackFunction);Sample resourceAccessPolicy const resourceAccessPolicy = {
"outBoundRequest" : {
"blockedDomains" : ["*.123.com", "stats.abc.com", 'xyz.com'],
"allowedDomains" : ["*.domdog.io"]
}
};* Note: blockedDomains holds precedence over allowedDomains.
* i.e., requests checked against blockedDomains first then allowedDomains.

Sample callbackFunction for Attack Monitoring var callbackFunction = function (violationEvent) {
console.log(violationEvent);
}Sample callbackFunction for Attack Blocking var callbackFunction = function (violationEvent) {
throw new Error("Request Blocked. It violates declared Resource Access Policy.")
}Sample violationEvent {
"violationtType": "Outbound Request",
"message": "Outbound request to 'www.malicious.com' violates declared 'Resource Access Policy (RAP)'.",
"policy": {
"outBoundRequest" : {
"blockedDomains" : ["*.123.com", "stats.abc.com", 'xyz.com'],
"allowedDomains" : ["*.domdog.io"]
}
}Integrating with SentrySample callbackFunction to integrate with Sentry var callbackFunction = function (violationEvent) {

var e = new Error();
e.name = 'Resource Access Policy Violation';
e.message = JSON.stringify(violationEvent);
Sentry.captureException(e);

}Screenshot from Sentry dashboard https://blogger.googleusercontent.com/img/a/AVvXsEi4IGbW8O-xScePg6pGyBGXBQ7FSFzOqBuoDaW3610t9f6LrEk3j8Sqw82oHePkczzIZdQkpr_k1itqPyuitzOyvPB0PiLdk6o0Um3rVvZ36t73wh74HpePpstHki9r1k14nY9G4beH1i4mTJjFVs3sWoJPZ7HA29E-3EpVZ13kxr6G1vpnjelC0V2r=w640-h96 Features* Attack Monitoring
* Outbound Network Calls

* Attack Blocking
* Outbound Network Calls Roadmap* Attack Monitoring
* Command Execution
* File Calls

* Attack Blocking
* Command Execution
* File Calls

* Vulnerability Scanner Authors* Lavakumar Kuppan
* Github - @lavakumar
* Twitter - @lavakumark

* Sukesh Pappu
* Github - @thelogicalbeard
* Twitter - @thelogicalbeard LicenseApache License 2.0 Download NodeSecurityShield

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
D&D is Best When It’s Mr. Robot | Cryptomancer

https://cdn-images-1.medium.com/max/715/1*5HjzrsmrXE1xD4xzS02HJw.jpeg
Lord of the Rings meets Watch_Dogs

Continue reading on The Ugly Monster »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Linux Privilege Escalation

https://cdn-images-1.medium.com/max/1111/1*xbtgNsNcIbzwrTfnjmeU0g.png
~# https://beacons.ai/f4_zzz

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Windows on ps4

Maybe this isn´t the rigth place to ask but anyways, there´s a way to install windows on my ps4 and use it as a pc?

submitted by /u/Sad-Shallot-9918
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
static binary isn’t linked to a library, but the library is already on the PC. What can I do?

I’m doing a CTF where I need to use a provided static binary of a tool called socat to port forward. I can do it normally, but I wanted to practice using it with the OpenSSL option. The static binary apparently isn’t linked to the OpenSSL library, but the target PC already has OpenSSL installed.

TL;DR

Is there any way to make this work? Or would this only be possible by compiling socat with the link to the OpenSSL library?

submitted by /u/Agent-BTZ
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Can I start bug bounty hunting on my low end pc?

Can I start bug bounty hunting on my low end pc?
IF yes then what vulnerabilities should i look after and which tools should I use according to my specs.

submitted by /u/Bastav-325
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

How to find vulnerable websites to SQL-Injection vulnerability real life
https://medium.com/@arshiadev/how-to-find-vulnerable-websites-to-sql-injection-vulnerability-real-life-5dc05850de1e?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

In this writeup you will learn how real hackers find vulnerable websites to SQL-Injection vulnerability to perform this web application…Continue reading on Medium » (https://medium.com/@arshiadev/how-to-find-vulnerable-websites-to-sql-injection-vulnerability-real-life-5dc05850de1e?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

How to find vulnerable websites to SQL-Injection vulnerability in real life

In this writeup you will learn how real hackers find vulnerable websites to SQL-Injection vulnerability to perform this web application…Continue reading on Medium »
Read more...