hacking: security in practice
is there anyway to grab an ip off of twitter?

There is a small group of pedophiles and groomers harassing me and when i report the twitter does nothing about it, and whenever i block them they just make new accounts. i've even tried exposing them twice now and. they still wont stop.this is my last resort. send there location to to them and hope that they will piss off after that. or even better yet get them arrested by the FBI.

submitted by /u/BongFullofcatcum
[link] [comments]

hacking: security in practice
Keyboard Keylogger

Dont know if this is the right sub but......

So I've been needing a new keyboard for a while, and as I'm walking down my block I see someone puts one out on the curb, so I take it home and have been using it for like a week r 2. Then i get a notification on phone that my C Card has been used. Thing is I randomly use my card and mostly only for online purchases. So my question is is it possible for someone to put a keylogger in the keyboard and steal my information remotely, should i through away the keyboard r am I overthinking this?

submitted by /u/SonofGluttonyy
[link] [comments]

Hacking on Medium
Data Breach — Indian discount broker — Upstox

https://cdn-images-1.medium.com/max/1947/1*gQBZYwt2i5GctHO494xEcg.jpeg
Hackers exposes Indian customer information including Aadhaar , PAN and bank account numbers of customers of upstox.com

Continue reading on Medium »

Hacking on Medium
HackMyVm Zday Write-Up

https://cdn-images-1.medium.com/max/1258/1*-j14FMIYMP3MJVUFGzQQMg.png
Hey folks ! Today I’m going to write a complete write-up for Zday VM created by sml on HackMyVm. It’s hard level machine, but if you know…

Continue reading on Medium »

Hacking on Medium
Hack The Box — Laboratory 10.10.10.216 Writeup

https://cdn-images-1.medium.com/max/918/1*40nmIdFSYeg5AqPlOdixUQ.png
Laboratory is an easy difficulty Linux box that features an instance of GitLab application in a docker container. The application is known…

Continue reading on Medium »

Hacking on Medium
SOCIAL MEDIA HACKING

https://cdn-images-1.medium.com/max/980/1*JzTgSAKIMJvK5zuboZ5c6A.jpeg
In this blog we are going to learn about three most popular ways of hacking any social media account (like Facebook, Instagram, Twitter…

Continue reading on Medium »

Hacking on Medium
My Linux Machine Compromized/Broken — — Power of Observation

https://cdn-images-1.medium.com/max/680/1*3k8ZMxWJDkiIFZ3q5uUYSQ.jpeg
Introduction :

Continue reading on Medium »

Exploiting Unrestricted File Upload to achieve Remote Code Execution on a bug bounty program
https://infosecwriteups.com/exploiting-unrestricted-file-upload-to-achieve-remote-code-execution-on-a-bug-bounty-program-85661516712?source=rss------bug_bounty-5

My story began with a typical assessment of the program's scope. Luckily all of the in-scope subdomains were listed on the program’s page…Continue reading on InfoSec Write-ups » (https://infosecwriteups.com/exploiting-unrestricted-file-upload-to-achieve-remote-code-execution-on-a-bug-bounty-program-85661516712?source=rss------bug_bounty-5)

XSS via Exif Data - The P2 Elevator
https://shahjerry33.medium.com/xss-via-exif-data-the-p2-elevator-d09e7b7fe9b9?source=rss------bug_bounty-5

Summary :Continue reading on Medium » (https://shahjerry33.medium.com/xss-via-exif-data-the-p2-elevator-d09e7b7fe9b9?source=rss------bug_bounty-5)

hacking: security in practice
How to unpack compiled init file from IoT firmware

Hi all,

I'm currently writing my Bachelor Thesis and I'm stuck in one problem.First a bit of context: The aim of my thesis is to find vulnerabilities in IoT web interfaces automatically.My first step is reading the init file and find how the web server gets started, what are the configuration files used and what directories are used. I know there are some firmwares that the init file is a simple bash script, but some of them are compiled code.

Here is the information I have of one of the init files after using the file command:
ELF 32-bit LSB executable, MIPS, MIPS32 version 1 (SYSV), dynamically linked, interpreter /lib/ld-uClibc.so.0, stripped
and
ELF 32-bit LSB executable, ARM, EABI5 version 1 (SYSV), dynamically linked, interpreter /lib/ld-uClibc.so.0, stripped

Here are the things I've tried so far:
- Look at source code of
→ Firmadyne, FirmAE, FirmAFL and Firmfuzz
→ Try and find the code that parses the init from the firmwares in order to apply it to finding how to start httpd daemon
- Try and understand directly the init file
→ All of the init files are a ELF executable (either ARM or MIPS)
→ Utilities used to try and read the init file
⇒ strings, readelf, dumpelf
• Found some interesting functions that start/stop the httpd daemon
⇒ ghidra
• Reverse engineered the init file
• Found a start_httpd function, but I'm not experienced enough to understand the reverse engeneered code
- Looked at rc.d scripts
→ rc.thttpd: There is a start and stop function
⇒ The directories and config files aren't where the script searches. Probably directories created after init executes

(These are my notes so sorry for the formatting)

I'm not sure if I'm taking a wrong approach for emulating the web interface, but I'm really stuck and can't continue on without this. So any resource or any little help will be appreciated.

Thank you!

PS: if there is another subreddit where I should post this I can definitively post it there :)

submitted by /u/marcmc1
[link] [comments]

hacking: security in practice
SolarWinds hacking campaign puts Microsoft in the hot seat

https://external-preview.redd.it/wSZwPshoy9RDvA45m0qWNy2GBELlUmquDpD7l19OhJw.jpg?width=640&crop=smart&auto=webp&s=a7215c241293c80efe7379edce0ff8697302dab0 submitted by /u/WomanStache
[link] [comments]