Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
BadUSB 101
https://cdn-images-1.medium.com/max/600/1*d_SBjQc8GqEHiN5rtp5RCw.png
In this article, we will discuss BadUSB, how to program it, and some offensive tricks of delivering it.
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
BadUSB 101
https://cdn-images-1.medium.com/max/600/1*d_SBjQc8GqEHiN5rtp5RCw.png
In this article, we will discuss BadUSB, how to program it, and some offensive tricks of delivering it.
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
BadUSB 101
In this article, we will discuss BadUSB, how to program it, and some offensive tricks of delivering it.
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
How to Convert MP4 Videos to Animated GIFs
https://cdn-images-1.medium.com/max/2400/1*zGCYdV2hQI0gXYsKeh9qdA.jpeg
With Kazam and ffmpeg on GNU/Linux systems
Continue reading on Dev Genius »
___________________________
@hacking_Attack
@Hacking_Video
How to Convert MP4 Videos to Animated GIFs
https://cdn-images-1.medium.com/max/2400/1*zGCYdV2hQI0gXYsKeh9qdA.jpeg
With Kazam and ffmpeg on GNU/Linux systems
Continue reading on Dev Genius »
___________________________
@hacking_Attack
@Hacking_Video
Medium
How to Convert MP4 Videos to Animated GIFs
With Kazam and ffmpeg on GNU/Linux systems
Hacking Articles Tips Tricks Videos Tutorials
Photo
KitPloit - PenTest Tools!
MITM_Intercept - A Little Bit Less Hackish Way To Intercept And Modify non-HTTP Protocols Through Burp And Others
https://blogger.googleusercontent.com/img/a/AVvXsEg2JmDppo3kVlH7Mw0bmIeAF7YBs3xy1l9MZO7gq8OTGy2m9aQSl7vIF7-Y6Muf-lwvmQINsWpIJ3rpaF9je7MfYIDQUzzdBcUiMkoP6H4mRZAK3M5WPHU4NQhcc0KGpTUehSYpsbH7JyeafMPx8uS2AqRESujHk5DjuqFpvm7Ncpm2gMDXFyRsyWcm=w640-h372 A little bit less hackish way to intercept and modify non-HTTP protocols through Burp and others with SSL and TLS interception support. This tool is for researchers and applicative penetration testers that perform thick clients security assesments.
An improved version of the fantastic mitm_relay project. The StoryAs part of our work in the research department of CyberArk Labs, we needed a way to inspect SSL and TLS communication over TCP and have the option to modify the content of packets on the fly. There are many ways to do so (for example, the known Burp Suite extension NoPE), but none of them worked for us in some cases. In the end we stumbled upon mitm_relay.
mitm_relay is a quick and easy way to perform MITM of any TCP-based protocol through existing HTTP interception software like Burp Suite’s proxy. It is particularly useful for thick clients security assessments. But it didn’t completely work for us, so we needed to customize it. After a lot of customizations, every new change required a lot of work, and we ended up rewriting everything in a more modular way.
We hope that others will find this script helpful, and we hope that adding functionality will be easy. How does it workFor a start, listeners’ addresses and ports need to be configured. For each listener, there also needs to be a target configured (address and port). Every data received from the listener will be wrapped into a body of an HTTP POST request with the URL containing “CLIENT_REQUEST”. Every data received from the target will be wrapped into a body of an HTTP POST request with the URL containing “SERVER_RESPONSE”. Those requests are sent to a local HTTP interception server.
There is the option to configure an HTTP proxy and use a tool like burp suite as an HTTP interception tool and view the messages there. This way, it is easy to modify the messages by using Burp’s “Match and Replace”, extensions or even manually (Remember, the timeout mechanism of the intercepted protocol can be very short).
Another way to modify the messages is by using a python script that the HTTP interception server will run when it receives messages.
The body of the messages sent to the HTTP interception server will be printed to the shell. The messages will be printed after the changes if the modification script is given. After all the modifications, the interception server will also echo back as an HTTP response body.
To decrypt the SSL/TLS communication, mitm_intercept need to be provided a certificate and a key that the client will accept when starting a handshake with the listener. If the target server requires a specific certificate for a handshake, there is an option to give a certificate and a key.
A small chart to show the typical traffic flow: https://blogger.googleusercontent.com/img/a/AVvXsEg2JmDppo3kVlH7Mw0bmIeAF7YBs3xy1l9MZO7gq8OTGy2m9aQSl7vIF7-Y6Muf-lwvmQINsWpIJ3rpaF9je7MfYIDQUzzdBcUiMkoP6H4mRZAK3M5WPHU4NQhcc0KGpTUehSYpsbH7JyeafMPx8uS2AqRESujHk5DjuqFpvm7Ncpm2gMDXFyRsyWcm=w640-h372 Differences from mitm_relaymitm_intercept is compatible with newer versions of python 3 (python 3.9) and is also compatible with windows (socket.MSG_DONTWAIT does not exist in windows, for example). We kept the option of using “STARTTLS,” and we called it “Mixed” mode. Using the SSL key log file is updated (the built-in option to use it is new from python 3.8), and we added the option to change the sni header. Now, managing incoming and outgoing communication is done by socketserver, and all the data is sent to a[...]
___________________________
@hacking_Attack
@Hacking_Video
MITM_Intercept - A Little Bit Less Hackish Way To Intercept And Modify non-HTTP Protocols Through Burp And Others
https://blogger.googleusercontent.com/img/a/AVvXsEg2JmDppo3kVlH7Mw0bmIeAF7YBs3xy1l9MZO7gq8OTGy2m9aQSl7vIF7-Y6Muf-lwvmQINsWpIJ3rpaF9je7MfYIDQUzzdBcUiMkoP6H4mRZAK3M5WPHU4NQhcc0KGpTUehSYpsbH7JyeafMPx8uS2AqRESujHk5DjuqFpvm7Ncpm2gMDXFyRsyWcm=w640-h372 A little bit less hackish way to intercept and modify non-HTTP protocols through Burp and others with SSL and TLS interception support. This tool is for researchers and applicative penetration testers that perform thick clients security assesments.
An improved version of the fantastic mitm_relay project. The StoryAs part of our work in the research department of CyberArk Labs, we needed a way to inspect SSL and TLS communication over TCP and have the option to modify the content of packets on the fly. There are many ways to do so (for example, the known Burp Suite extension NoPE), but none of them worked for us in some cases. In the end we stumbled upon mitm_relay.
mitm_relay is a quick and easy way to perform MITM of any TCP-based protocol through existing HTTP interception software like Burp Suite’s proxy. It is particularly useful for thick clients security assessments. But it didn’t completely work for us, so we needed to customize it. After a lot of customizations, every new change required a lot of work, and we ended up rewriting everything in a more modular way.
We hope that others will find this script helpful, and we hope that adding functionality will be easy. How does it workFor a start, listeners’ addresses and ports need to be configured. For each listener, there also needs to be a target configured (address and port). Every data received from the listener will be wrapped into a body of an HTTP POST request with the URL containing “CLIENT_REQUEST”. Every data received from the target will be wrapped into a body of an HTTP POST request with the URL containing “SERVER_RESPONSE”. Those requests are sent to a local HTTP interception server.
There is the option to configure an HTTP proxy and use a tool like burp suite as an HTTP interception tool and view the messages there. This way, it is easy to modify the messages by using Burp’s “Match and Replace”, extensions or even manually (Remember, the timeout mechanism of the intercepted protocol can be very short).
Another way to modify the messages is by using a python script that the HTTP interception server will run when it receives messages.
The body of the messages sent to the HTTP interception server will be printed to the shell. The messages will be printed after the changes if the modification script is given. After all the modifications, the interception server will also echo back as an HTTP response body.
To decrypt the SSL/TLS communication, mitm_intercept need to be provided a certificate and a key that the client will accept when starting a handshake with the listener. If the target server requires a specific certificate for a handshake, there is an option to give a certificate and a key.
A small chart to show the typical traffic flow: https://blogger.googleusercontent.com/img/a/AVvXsEg2JmDppo3kVlH7Mw0bmIeAF7YBs3xy1l9MZO7gq8OTGy2m9aQSl7vIF7-Y6Muf-lwvmQINsWpIJ3rpaF9je7MfYIDQUzzdBcUiMkoP6H4mRZAK3M5WPHU4NQhcc0KGpTUehSYpsbH7JyeafMPx8uS2AqRESujHk5DjuqFpvm7Ncpm2gMDXFyRsyWcm=w640-h372 Differences from mitm_relaymitm_intercept is compatible with newer versions of python 3 (python 3.9) and is also compatible with windows (socket.MSG_DONTWAIT does not exist in windows, for example). We kept the option of using “STARTTLS,” and we called it “Mixed” mode. Using the SSL key log file is updated (the built-in option to use it is new from python 3.8), and we added the option to change the sni header. Now, managing incoming and outgoing communication is done by socketserver, and all the data is sent to a[...]
___________________________
@hacking_Attack
@Hacking_Video
KitPloit - PenTest & Hacking Tools
MITM_Intercept - A Little Bit Less Hackish Way To Intercept And Modify non-HTTP Protocols Through Burp And Others
KitPloit - PenTest Tools!
MITM_Intercept - A Little Bit Less Hackish Way To Intercept And Modify non-HTTP Protocols Through Burp And Others
___________________________
@hacking_Attack
@Hacking_Video
MITM_Intercept - A Little Bit Less Hackish Way To Intercept And Modify non-HTTP Protocols Through Burp And Others
___________________________
@hacking_Attack
@Hacking_Video
KitPloit - PenTest & Hacking Tools
MITM_Intercept - A Little Bit Less Hackish Way To Intercept And Modify non-HTTP Protocols Through Burp And Others
MitM attack over RDP scary easy
https://www.reddit.com/r/Pentesting/comments/v38mtd/mitm_attack_over_rdp_scary_easy/
So I’ve been dabbling in kali and pen testing for years off an on starting in highschool. So my roommate has a server and gave me a challenge to find a way into it with no physical attacks. I decided it would be a great chance to really get back into pen testing. I’ve only ever used vulnerabilities on dated vms running known exploitable services. After attempting to use specific vulnerabilities I found through the services he had running to no success, I decided I would try a man in the middle attack. I had no experience so it was a lot of fun using ettercap, and after successfully getting in the middle I found as I had predicted there was nothing but encrypted data. I almost let it go there, but then I started thinking about how he logs into his server, through Remote Desktop for windows from his laptop. I had the idea that if I can get in the middle of his laptop and server as he is logging in, there could be very important data to be had. He decided to help me when I explained this to him as he was very interested if it could be done. Fast forward to 2 hours later that night and we found a git for a program called Seth, which uses ARP poisoning to get in the middle of the RDP session as the user is logging in, then clones the certificate of the session and swipes both the user/pass hash and then the plaintext username and pass. All that is required of the victim is accepting the unauthenticated certificate created by the program. I’m sure most people on this sub would know not to accept unknown certs, but I think you would be surprised how many people don’t even think twice. submitted by /u/Source256 (https://www.reddit.com/user/Source256)
[link] (https://www.reddit.com/r/Pentesting/comments/v38mtd/mitm_attack_over_rdp_scary_easy/) [comments] (https://www.reddit.com/r/Pentesting/comments/v38mtd/mitm_attack_over_rdp_scary_easy/)
___________________________
@hacking_Attack
@Hacking_Video
https://www.reddit.com/r/Pentesting/comments/v38mtd/mitm_attack_over_rdp_scary_easy/
So I’ve been dabbling in kali and pen testing for years off an on starting in highschool. So my roommate has a server and gave me a challenge to find a way into it with no physical attacks. I decided it would be a great chance to really get back into pen testing. I’ve only ever used vulnerabilities on dated vms running known exploitable services. After attempting to use specific vulnerabilities I found through the services he had running to no success, I decided I would try a man in the middle attack. I had no experience so it was a lot of fun using ettercap, and after successfully getting in the middle I found as I had predicted there was nothing but encrypted data. I almost let it go there, but then I started thinking about how he logs into his server, through Remote Desktop for windows from his laptop. I had the idea that if I can get in the middle of his laptop and server as he is logging in, there could be very important data to be had. He decided to help me when I explained this to him as he was very interested if it could be done. Fast forward to 2 hours later that night and we found a git for a program called Seth, which uses ARP poisoning to get in the middle of the RDP session as the user is logging in, then clones the certificate of the session and swipes both the user/pass hash and then the plaintext username and pass. All that is required of the victim is accepting the unauthenticated certificate created by the program. I’m sure most people on this sub would know not to accept unknown certs, but I think you would be surprised how many people don’t even think twice. submitted by /u/Source256 (https://www.reddit.com/user/Source256)
[link] (https://www.reddit.com/r/Pentesting/comments/v38mtd/mitm_attack_over_rdp_scary_easy/) [comments] (https://www.reddit.com/r/Pentesting/comments/v38mtd/mitm_attack_over_rdp_scary_easy/)
___________________________
@hacking_Attack
@Hacking_Video
reddit
MitM attack over RDP scary easy
So I’ve been dabbling in kali and pen testing for years off an on starting in highschool. So my roommate has a server and gave me a challenge to...
Searching for Sources
https://www.reddit.com/r/Pentesting/comments/v3b39i/searching_for_sources/
Hi, I'm new to this. I started using Linux and try to scan my own network as a practice, But this is not enough to become a professional. I need sources like books or websites to learn how to use tools like "Nmap" as a professional Pentester.
Thanks submitted by /u/Primm_Slimm69 (https://www.reddit.com/user/Primm_Slimm69)
[link] (https://www.reddit.com/r/Pentesting/comments/v3b39i/searching_for_sources/) [comments] (https://www.reddit.com/r/Pentesting/comments/v3b39i/searching_for_sources/)
___________________________
@hacking_Attack
@Hacking_Video
https://www.reddit.com/r/Pentesting/comments/v3b39i/searching_for_sources/
Hi, I'm new to this. I started using Linux and try to scan my own network as a practice, But this is not enough to become a professional. I need sources like books or websites to learn how to use tools like "Nmap" as a professional Pentester.
Thanks submitted by /u/Primm_Slimm69 (https://www.reddit.com/user/Primm_Slimm69)
[link] (https://www.reddit.com/r/Pentesting/comments/v3b39i/searching_for_sources/) [comments] (https://www.reddit.com/r/Pentesting/comments/v3b39i/searching_for_sources/)
___________________________
@hacking_Attack
@Hacking_Video
reddit
Searching for Sources
Hi, I'm new to this. I started using Linux and try to scan my own network as a practice, But this is not enough to become a professional. I need...
Hacking Articles Tips Tricks Videos Tutorials
Photo
hacking: security in practice
Best USB WiFi Adapters for Kali Linux
https://external-preview.redd.it/FYNNUWIXd48854pGTT_gwbQKvf_EZ1UGUMSl0khnAuM.jpg?width=640&crop=smart&auto=webp&s=d3e39483bca61800ffb30df47fb4a6ced132c2a1 submitted by /u/ArifSagar
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
Best USB WiFi Adapters for Kali Linux
https://external-preview.redd.it/FYNNUWIXd48854pGTT_gwbQKvf_EZ1UGUMSl0khnAuM.jpg?width=640&crop=smart&auto=webp&s=d3e39483bca61800ffb30df47fb4a6ced132c2a1 submitted by /u/ArifSagar
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
Best USB WiFi Adapters for Kali Linux
Posted in r/hacking by u/ArifSagar • 2 points and 0 comments
hacking: security in practice
Mounted hard drive encryption
Hi everybody,
It is possible to mount encrypted hard drive(Windows 10) on linux without having private key ??
submitted by /u/JackLemaitre
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
Mounted hard drive encryption
Hi everybody,
It is possible to mount encrypted hard drive(Windows 10) on linux without having private key ??
submitted by /u/JackLemaitre
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
Mounted hard drive encryption
Hi everybody, It is possible to mount encrypted hard drive(Windows 10) on linux without having private key ??
Hacking Articles Tips Tricks Videos Tutorials
Photo
Exploit Collector
Product Show Room Site 1.0 Cross Site Scripting
https://3.bp.blogspot.com/-D2NV3HnXxpM/WWlu9YoBNhI/AAAAAAAAIJs/rLrqFdeLLWYSGUQPyN0O7DuhnXu7T_FjQCLcBGAs/s1600/h114.png Product Show Room Site version 1.0 suffers from multiple persistent cross site scripting vulnerabilities.
SHA-256 |
___________________________
@hacking_Attack
@Hacking_Video
Product Show Room Site 1.0 Cross Site Scripting
https://3.bp.blogspot.com/-D2NV3HnXxpM/WWlu9YoBNhI/AAAAAAAAIJs/rLrqFdeLLWYSGUQPyN0O7DuhnXu7T_FjQCLcBGAs/s1600/h114.png Product Show Room Site version 1.0 suffers from multiple persistent cross site scripting vulnerabilities.
SHA-256 |
a796961a488458cb4bb41f2e00c8a65730ac1bded2e03daff8ea9786a74d591eDownload # Product Show Room Site - 'Telephone' Stored Cross-Site Scripting(XSS)
#### Exploit Title: Product Show Room Site - 'Telephone' Stored Cross-Site Scripting(XSS)
#### Exploit Author: webraybtl@webray.com.cn inc
#### Vendor Homepage: https://www.sourcecodester.com/php/15370/product-show-room-site-phpoop-free-source-code.html
#### Software Link: https://www.sourcecodester.com/download-code?nid=15370&title=Product+Show+Room+Site+in+PHP%2FOOP+Free+Source+Code
#### Version: Product Show Room Site 1.0
#### Tested on: Windows Server 2008 R2 Enterprise, Apache ,Mysql
#### Description
Persistent XSS (or Stored XSS) attack is one of the three major categories of XSS attacks, the others being Non-Persistent (or Reflected) XSS and DOM-based XSS. In general, XSS attacks are based on the victim’s trust in a legitimate, but vulnerable, website or web application.Product Show Room Site does not filter the content correctly at the "Contact info-Telephone" module, resulting in the generation of stored XSS.
#### Payload used:
``
#### Proof of Concept
1. Login the CMS.
Default Admin Access
Username: admin
Password: admin123
1. Open Page http://172.24.5.107/psrs/admin/?page=system_info/contact_info and click View button
2. Put XSS payload (``) in the Telephone box and click on Update to publish the page
3. Open http://172.24.5.107/psrs/?p=contact,Viewing the successfully published page,We can see the alert.
-------
# Product Show Room Site - 'Message' Stored Cross-Site Scripting(XSS)
#### Exploit Title: Product Show Room Site - 'Message' Stored Cross-Site Scripting(XSS)
#### Exploit Author: webraybtl@webray.com.cn inc
#### Vendor Homepage: https://www.sourcecodester.com/php/15370/product-show-room-site-phpoop-free-source-code.html
#### Software Link: https://www.sourcecodester.com/download-code?nid=15370&title=Product+Show+Room+Site+in+PHP%2FOOP+Free+Source+Code
#### Version: Product Show Room Site 1.0
#### Tested on: Windows Server 2008 R2 Enterprise, Apache ,Mysql
#### Description
Persistent XSS (or Stored XSS) attack is one of the three major categories of XSS attacks, the others being Non-Persistent (or Reflected) XSS and DOM-based XSS. In general, XSS attacks are based on the victim’s trust in a legitimate, but vulnerable, website or web application.Product Show Room Site does not filter the content correctly at the "Contact info-Telephone" module, resulting in the generation of stored XSS.
#### Payload used:
``
#### Proof of Concept
1. Login the CMS.
Default Admin Access
Username: admin
Password: admin123
1. Open Page http://172.24.5.107/psrs/?p=contact
2. Put XSS payload (``) in the Message box and click on Send Message to publish the page
4. Open http://172.24.5.107/psrs/admin/?page=inquiries,Viewing the Top 1 of Inquiries page,We can see the alert.
 Source:packetstormsecurity.com___________________________
@hacking_Attack
@Hacking_Video
Kitploit
Product Show Room Site 1.0 Cross Site Scripting
Exploit Collector is the ultimate collection of public exploits and exploitable vulnerabilities. Remote/Local Exploits, Shellcode and 0days.
Hacking Articles Tips Tricks Videos Tutorials
Photo
hacking: security in practice
Have we learned anything from the attacks by lapsus?
https://external-preview.redd.it/Kiskj3Bh1j8Z-6aX0gWi5N5wWAAlVr2R0Oyo9b0LhWg.jpg?width=320&crop=smart&auto=webp&s=b0ad207febbfb347015804c9bcea47463eafa24a submitted by /u/TheDigitalPrepper
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
Have we learned anything from the attacks by lapsus?
https://external-preview.redd.it/Kiskj3Bh1j8Z-6aX0gWi5N5wWAAlVr2R0Oyo9b0LhWg.jpg?width=320&crop=smart&auto=webp&s=b0ad207febbfb347015804c9bcea47463eafa24a submitted by /u/TheDigitalPrepper
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
Have we learned anything from the attacks by lapsus?
Posted in r/hacking by u/TheDigitalPrepper • 1 point and 0 comments
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Hacking an AWS hosted Kubernetes backed product, and failing
https://cdn-images-1.medium.com/max/1920/1*Xl4Qt0EvIav3BuzlK4cCdw.jpeg
Tales from a recent pentest of a product hosted on the AWS cloud backed by Kubernetes (EKS) and a whole lot of secure design goodness that…
Continue reading on Appsecco »
___________________________
@hacking_Attack
@Hacking_Video
Hacking an AWS hosted Kubernetes backed product, and failing
https://cdn-images-1.medium.com/max/1920/1*Xl4Qt0EvIav3BuzlK4cCdw.jpeg
Tales from a recent pentest of a product hosted on the AWS cloud backed by Kubernetes (EKS) and a whole lot of secure design goodness that…
Continue reading on Appsecco »
___________________________
@hacking_Attack
@Hacking_Video
Medium
Hacking an AWS hosted Kubernetes backed product, and failing
Tales from a recent pentest of a product hosted on the AWS cloud backed by Kubernetes (EKS) and a whole lot of secure design goodness that…