Hacking on Medium
Top 3 Crypto Biggest Crash

https://cdn-images-1.medium.com/max/978/1*K50nppIUjiEQStGdJGa2yw.png
Good morning everyone!

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
¿Acceso a aplicaciones de terceros es el nuevo archivo ejecutable?

https://cdn-images-1.medium.com/max/990/0*A7jm72Pohl1eNRwT
PUBLICADO EN 30 MAYO, 2022POR EHACKING

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
¡Cuidado! Detectan un nuevo exploit de Zero Day de Microsoft Office

https://cdn-images-1.medium.com/max/1591/0*3Tmhh_bldeul8SpP
PUBLICADO EN 30 MAYO, 2022POR EHACKING

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Elastic search databases on Shodan

Does anybody collect data from open elastic search databases? I have in the past using shodan and the elastic search crawler script, but I'm not too knowledgeable in parsing data. What's the best way to organize and search data sets? Any recommendations?

submitted by /u/ItsAllPartofTheShow
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Website Vulnerability

Hello there guys,

To anyone whos familiar with the GDPR I've got a question, I found out recently a 'bug' in a website register form, it turns out in the email textbox form, there's an active POST request being made where it will send a payload of the user's typed email address and it will return either "OK", in case the email is not taken and "ERROR" in case the email is already registered.

The issue is that it is possible to brute-force said POST request without any sort of limitation, so it'd be possible to have a 'wordlist' of emails and brute force them to know whether or not it is already registered.

​

My question is if this is worth sending an email to the cybersecurity team of the said website, and wewhetherther or not it might go against any GDPR law.

submitted by /u/brunommpreto
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

How to Crack & Install BurpSuite Professional in Kali Linux
https://medium.com/@abdul-samad/how-to-crack-install-burpsuite-professional-in-kali-linux-a67eccba8b3d?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Steps to crack & Install Burpsuite Pro in Kali-LinuxContinue reading on Medium » (https://medium.com/@abdul-samad/how-to-crack-install-burpsuite-professional-in-kali-linux-a67eccba8b3d?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

PicoCTF Review
https://medium.com/@noli.mtz/picoctf-review-458c7a41cc7?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hi! Guys I’m back with a new blog and I’m so excited because with this site you can learn a LOT!Continue reading on Medium » (https://medium.com/@noli.mtz/picoctf-review-458c7a41cc7?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

How to Crack & Install BurpSuite Professional in Kali Linux

Steps to crack & Install Burpsuite Pro in Kali-LinuxContinue reading on Medium »
Read more...

PicoCTF Review

Hi! Guys I’m back with a new blog and I’m so excited because with this site you can learn a LOT!Continue reading on Medium »
Read more...

Labtainers - A Docker-based Cyber Lab Framework
http://www.kitploit.com/2022/05/labtainers-docker-based-cyber-lab.html

___________________________
@hacking_Attack
@Hacking_Video

Labtainers include more than 50 cyber lab exercises and tools to build your own. Import a single VM appliance (https://nps.edu/web/c3o/virtual-machine-images) or install on a Linux system and your students are done with provisioning and administrative setup, for these and future lab exercises. Consistent lab execution environments and automated provisioning via Docker containers Multi-component network topologies on a modestly performing laptop computer Automated assessment of student lab activity and progress Individualized lab exercises to discourage sharing solutions Labtainers provide controlled and consistent execution environments in which students perform labs entirely within the confines of their computer, regardless of the Linux distribution and packages installed on the student's computer. Labtainers run on our [VM appliance][vm-appliancee], or on any Linux with Dockers installed. And Labtainers is available as cloud-based VMs, e.g., on Azure as described in the Student Guide (https://github.com/mfthomps/Labtainers/blob/master/docs/student/labtainer-student.pdf). See the Student Guide (https://github.com/mfthomps/Labtainers/blob/master/docs/student/labtainer-student.pdf) for installation and use, and the Instructor Guide (https://github.com/mfthomps/Labtainers/blob/master/docs/instructor/labtainer-instructor.pdf) for student assessment. Developing and customizing lab exercises is described in the Designer Guide (https://github.com/mfthomps/Labtainers/blob/master/docs/labdesigner/labdesigner.pdf). See the Papers (https://nps.edu/web/c3o/labtainers#papers) for additional information about the framework. The Labtainers website, and downloads (including VM appliances with Labtainers pre-installed) are at https://nps.edu/web/c3o/labtainers. Distribution created: 03/25/2022 09:37
Revision: v1.3.7c
Commit: 626ea075
Branch: master
Distribution and Use Please see the licensing and distribution information in the docs/license.md file (https://github.com/mfthomps/Labtainers/blob/master/docs/license.md). Guide to directories scripts/labtainers-student -- the work directory for running and testing student labs. You must be in that directory to run student labs. scripts/labtainers-instructor -- the work directory for running and testing automated assessment and viewing student results. labs -- Files specific to each of the labs setup_scripts -- scripts for installing Labtainers and Docker and updating Labtainers docs -- latex source for the labdesigner.pdf, and other documentation. UI -- Labtainers lab editor source code (Java). headless-lite -- scripts for managing Docker Workstation and cloud instances of Labtainers (systems that do not have native X11 servers.) scripts/designer -- Tools for building new labs and managing base Docker images. config -- system-wide configuration settings (these are not the lab-specific configuration settings. distrib -- distribution support scripts, e.g., for publishing labs to the Docker hub. testsets -- Test procedures and expected results. (Per-lab drivers for SimLab are not distributed). pkg-mirrors -- utility scripts for internal NPS package mirroring to reduce external package pulling during tests and distribution. Support Use the GitHub issue reports, or email me at mfthomps@nps.edu (mailto:mfthomps@nps.edu) Also see https://my.nps.edu/web/c3o/support1 Release notes The standard Labtainers distribution does not include files required for development of new labs. For those, run ./update-designer.sh from the labtainer/trunk/setup_scripts directory. The installation script and the update-designer.sh script set environment variables, so you may want to logout/login, or start a new bash shell before using Labtainers the first time. March 23, 2022 Fix path to tap lock directory; was causing failure of labs using network taps Update plc-traffic netmon computer to have openjfx

___________________________
@hacking_Attack
@Hacking_Video

needed for new grassmarlin in java environment Speed up lab startup by avoiding chown -R, which is very slow in docker. Another shot at avoiding deletion of the X11 link in container /tmp directory. Fix webtrack counting of sites visited and remove live-headers goal, that tool is no longer available. Clarified some lab manual steps. March 2, 2022 Add new ssh-tunnel lab (thanks GWD!) Fix labedit failure to reflect X11 value set by new_lab_setup Add option to not parameterize a container February 23, 2022 labedit was corrupting start.config after addition of new containers Incorrect path to student guide in the student README file; dynamically change for cloud configs Incorrect extension to update-labtainer.sh Msc guide enahancements Update the ghidra lab to include version 10.1.2 of Ghidra February 15, 2022 Revert Azure cloud support to provision for each student. Azure discourages sharing resources. January 24, 2022 Azure cloud now uses image stored in an Azure blob instead of provisioning for each student. Added support for Google Cloud. January 19, 2022 Introduce Labtainers on the Azure cloud. See the Student Guide for details on how to use this. January 3, 2022 Revise setuid-env lab to add better assessment; simlab testing and avoid sighup in the printenv child. Fix assessment goal count directive to exclude result tag values of false. Do not require labname when using gradelab -a with a grader started with the debug option. Revise capinout (stdin/stdout mirroring) to handle orphaning of command process children, improved documentation and error handling. Added display of progress bars of docker images being pulled when a lab is first run. User feedback on progress of container initialization. The pcap-lib lab was missing a notify file needed for automated assessment; Remove extraneous step from Lab Manual. November 23, 2021 Disable ubuntu popup errors on test VM. Fix handling of different DISPLAY variable formats. October 22, 2021 Revise the tcpip lab guide to note a successful syn-flood attack is not possible. Fix its automated assessment and add SimLab scripts. Change artifact file extension from zip to lab, and add a preamble to confuse GUI file managers. Students were opening the zip and submitting its guts. Make the -r option to gradelab the default, add a -c option for cumulative use of grader. Modify refresh_mirror to refer to the local release date to avoid frequent queries of DockerHub. Each such query counts as an image pull, and they are now trying to monetize those. September 30, 2021 Change bufoverflow lab guide and grading to not expect success with ASLR turned on, assess whether it was run. Error handling for web grader for cases where student lacks results. Print warning when deprecated lab is run. Change formatstring grading to remove unused "_leaked_secret" description and clarify value of leaked_no_scanf. Also change formatstring grading to allow any name for the vulnerable executable. September 29, 2021 Gradelab error handling, reduce instances of crashes due to bad zip files. Limit stdout artifact files to 1MB September 17, 2021 Ghidra lab guide had wrong IP address, was not remade from source. September 14, 2021 Example labs for LDAP and Mariadb using SSL. Intended as templates for new labs. Handle Mariadb log format Add per-container parameters to limit CPU use or pin container to CPU set. Labpack creation now available via a GUI (makepackui). Tab completion for the labtainer, labpack and gradelab commands. New parallel computing lab ``parallel'' using MPI. August 3, 2021 Add a "WAIT_FOR" configuration option to cause a container to delay parameterization until another container completes its parameterization. Support for Mariadb log formats in results parsing Remove support for Mac and Windows use of Docker Desktop. That product is too unstable for us to support. Supress stderr

___________________________
@hacking_Attack
@Hacking_Video

messages when user uses built-in bash commands such as "which". Bug fixes to makepack/labpack programs. July 19, 2021 Add a DNS lab to introduce the DNS protocol and configuration. Revised VirtualBox appliance image to start with the correct update script. Split resolv.conf nameserver parameter out of the lab_gw configuration field into its own value. IModule command failed if run before any labs had been started. July 5, 2021 Errors in DISPLAY env variable management broke GUI applications on Docker Desktop. July 1, 2021 Support Mac package installation of headless Labtainers. The routing-basics lab automated assessment failed due to lack of treataslocal files Correct typos and incorrect addresses in routing-basics lab, and fix automated assessment. Assessment of pcapanalysis was failing. June 10, 2021 All lab manual PDFs are now in the github repo Convert vpnlab and vpnlab2 instructions to PDF lab manuals. May 25, 2021 Add searchable keywords to each lab. See "labtainer -h" for usage. Expand routing-basics lab and lab manual Remove routing-basics2 lab, it is now redundant. sudo on some containers failed because hostnames remove underscores, leading to mismatch with the hosts file. Fix with extra entry in the hosts file with container name sans underscore. New Labpack feature to package a collection of labs, and makepack tool to create Labpacks. Error check for /sbin directory when using ubuntu20 -- would be silently fatal. New network-basics lab May 5, 2021 Introduce a new users lab to introduce user/group management Surpress Apparmor host messages in centos container syslogs April 28, 2021 New base2 images lacked man pages. Used unminimize to restore them in the base image. Introduce a OSSEC host-based IDS lab. April 13, 2021 CyberCIEGE lab failed because X11 socket was not relocated prior to starting Wine via fixlocal. April 9, 2021 New gdb-cpp tutorial lab for using GDB on a simple C++ program. Floating point exceptions were revealing use of exec_wrap.sh for stdin/stdout mirroring. April 7, 2021 ldap lab failed when moved to Ubuntu 20. Problem traced to problem with nscd cache of pwd. Move ldap to Ubuntu 20 March 23, 2021 Parameterizing with RANDOM did not include the upper bound. Add optional step parameter to RANDOM, e.g., to ensure word boundaries. db-access lab: add mysql-workbench to database computer. New overrun lab to illustrate memory references beyond bounds of c data structures. New printf lab to introduce memory references made by the printf function. March 19, 2021 gradelab ignore makdirs error, problem with Windows rmtree on shared folders. gradelab handle spaces in student zip file names. gradelab handle zip file names from Moodle, including build downloads. March 12, 2021 labedit UI: Remove old wireshark image from list of base images. labedit UI: Increase some font sizes. grader web interface failed to display lab manuals if the manual name does not follow naming conventions. March 11, 2021 labedit UI add registry setting in new global lab configuration panel. March 10, 2021 labedit UI fixes to not build if syntax error in lab labedit UI "Lab running" indicator fix to reflect current lab. March 8, 2021 Deprecate use of HOST_HOME_XFER, all labs use directory per the labtainer.config file. Add documentation comment to start.config for REGISTRY and BASE_REGISTRY March 5, 2021 Error handling on gradelab web interface when missing results. labedit addition of precheck, msc bug fixes. February 26, 2021 The dmz-example lab had errors in routing and setup of dnsmasq on some components. February 18, 2021 UI was rebuilding images because it was updating file times without cause Clean up UI code to remove some redundant data copies. February 14, 2021 Add local build option to UI Create empty faux_init for centos6 bases. February 11, 2021 Fix UI handling

___________________________
@hacking_Attack
@Hacking_Video