PacketStreamer sensors collect raw network packets on remote hosts. It selects packets to capture using a BPF filter, and forwards them to a central reciever process where they are written in pcap format. Sensors are very lightweight and impose little performance (https://www.kitploit.com/search/label/Performance) impact on the remote hosts. PacketStreamer sensors can be run on bare-metal servers, on Docker hosts, and on Kubernetes nodes. The PacketStreamer receiver accepts network traffic from multiple sensors, collecting it into a single, central pcap file. You can then process the pcap file or live feed the traffic to the tooling of your choice, such as Zeek, Wireshark Suricata, or as a live stream for Machine Learning (https://www.kitploit.com/search/label/Machine%20Learning) models. When to use PacketStreamer PacketStreamer meets more general use cases than existing alternatives. For example, PacketBeat (https://github.com/elastic/beats/tree/master/packetbeat) captures and parses the packets on multiple remote hosts, assembles transactions, and ships the processed data to a central ElasticSearch collector. ksniff (https://github.com/eldadru/ksniff) captures raw packet data from a single Kubernetes pod. Use PacketStreamer if you need a lightweight, efficient method to collect raw network data from multiple machines for central logging and analysis. Quick Start For full instructions, refer to the PacketStreamer Documentation (https://deepfence.github.io/PacketStreamer/). You will need to install the golang toolchain and libpcap-dev before building PacketStreamer. # Pre-requisites (Ubuntu): sudo apt install golang-go libpcap-dev
git clone https://github.com/deepfence/PacketStreamer.git
cd PacketStreamer/
make Run a PacketStreamer receiver, listening on port 8081 and writing pcap output to /tmp/dump_file (see receiver.yaml (https://github.com/deepfence/PacketStreamer/blob/main/contrib/config/receiver.yaml)): ./packetstreamer receiver --config ./contrib/config/receiver.yaml Run one or more PacketStreamer sensors on local and remote hosts. Edit the server address in sensor.yaml (https://github.com/deepfence/PacketStreamer/blob/main/contrib/config/sensor-local.yaml): # run on the target hosts to capture and forward traffic

# copy and edit the sample sensor-local.yaml file, and add the address of the receiver host
cp ./contrib/config/sensor-local.yaml ./contrib/config/sensor.yaml

./packetstreamer sensor --config ./contrib/config/sensor.yaml Who uses PacketStreamer? Deepfence ThreatStryker (https://deepfence.io/threatstryker/) uses PacketStreamer to capture traffic (https://www.kitploit.com/search/label/Capture%20Traffic) from production platforms for forensics and anomaly detection. Get in touch Thank you for using PacketStreamer. Start with the documentation Got a question, need some help? Find the Deepfence team on Slack Got a feature request or found a bug? Raise an issue productsecurity at deepfence dot io: Found a security issue? Share it in confidence Find out more at deepfence.io (https://deepfence.io/) Security and Support For any security-related issues in the PacketStreamer project, contact productsecurity at deepfence dot io. Please file GitHub issues as needed, and join the Deepfence Community Slack channel (https://join.slack.com/t/deepfence-community/shared_invite/zt-podmzle9-5X~qYx8wMaLt9bGWwkSdgQ). License The Deepfence PacketStreamer project (this repository) is offered under the Apache2 license (https://www.apache.org/licenses/LICENSE-2.0). Contributions (https://github.com/deepfence/PacketStreamer/blob/main/CONTRIBUTING.md) to Deepfence PacketStreamer project are similarly accepted under the Apache2 license, as per GitHub's inbound=outbound policy (https://docs.github.com/en/github/site-policy/github-terms-of-service#6-contributions-under-repository-license).

Download PacketStreamer (https://github.com/deepfence/PacketStreamer)

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Design Weakness Discovered in Apple M1 Kernel Protections

The proof-of-concept attack from MIT CSAIL researchers undermines the pointer authentication feature used to defend the Apple chip's OS kernel.

Dark Reading: Attacks/Breaches
How 4 Young Musicians Hacked Sheet Music to Help Fight the Cold War

In 1985, a group of klezmer musicians from the US rendezvoused with underground dissidents in Tbilisi, Georgia. This is the story of how they pulled it off with homebrew cryptography.

Dark Reading: Attacks/Breaches
Artificial Intelligence and Security: What You Should Know

Next-generation AI products learn proactively and identify changes in the networks, users, and databases using "data drift" to adapt to specific threats as they evolve.

Dark Reading: Attacks/Breaches
In a Quickly Evolving Landscape, CISOs Shift Their 2022 Priorities

Cloud migration, DevSecOps, cyber insurance, and more have emerged as important motivators for cybersecurity investment and focus.

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Researchers find eight CVEs in single building access system

https://cdn-images-1.medium.com/max/1200/0*D-fQUJYY1m7xrBmA.jpg
Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
PacketStreamer - Distributed Tcpdump For Cloud Native Environments

https://blogger.googleusercontent.com/img/a/AVvXsEhBD21wT8Z5TrI4GftYsubWn6oNH2AekPeR-S0Yh_lv86Lfmm97d8urHXYcdAbjM-9jnSUu0qt6Zk5r_vbWLNWgrOkNg5v2fv8Na26_G1pr836zmZwXVT2oKirgJJ92k944gWMySdHlcMZbadys1Fgad_YF50cVArAmaVgFu6OBmZxkOs1K12lezHvA=w640-h292 Deepfence PacketStreamer is a high-performance remote packet capture and collection tool. It is used by Deepfence's ThreatStryker security observability platform to gather network traffic on demand from cloud workloads for forensic analysis.

Primary design goals:

* Stay light, capture and stream, no additional processing
* Portability, works across virtual machines, Kubernetes and AWS Fargate. Linux and Windows

PacketStreamer sensors are started on the target servers. Sensors capture traffic, apply filters, and then stream the traffic to a central reciever. Traffic streams may be compressed and/or encrypted using TLS.

The PacketStreamer receiver accepts PacketStreamer streams from multiple remote sensors, and writes the packets to a local pcapcapture file https://blogger.googleusercontent.com/img/a/AVvXsEhBD21wT8Z5TrI4GftYsubWn6oNH2AekPeR-S0Yh_lv86Lfmm97d8urHXYcdAbjM-9jnSUu0qt6Zk5r_vbWLNWgrOkNg5v2fv8Na26_G1pr836zmZwXVT2oKirgJJ92k944gWMySdHlcMZbadys1Fgad_YF50cVArAmaVgFu6OBmZxkOs1K12lezHvA=w640-h292 PacketStreamer sensors collect raw network packets on remote hosts. It selects packets to capture using a BPF filter, and forwards them to a central reciever process where they are written in pcap format. Sensors are very lightweight and impose little performance impact on the remote hosts. PacketStreamer sensors can be run on bare-metal servers, on Docker hosts, and on Kubernetes nodes.

The PacketStreamer receiver accepts network traffic from multiple sensors, collecting it into a single, central pcapfile. You can then process the pcap file or live feed the traffic to the tooling of your choice, such as Zeek, WiresharkSuricata, or as a live stream for Machine Learning models. When to use PacketStreamerPacketStreamer meets more general use cases than existing alternatives. For example, PacketBeat captures and parses the packets on multiple remote hosts, assembles transactions, and ships the processed data to a central ElasticSearch collector. ksniff captures raw packet data from a single Kubernetes pod.

Use PacketStreamer if you need a lightweight, efficient method to collect raw network data from multiple machines for central logging and analysis. Quick StartFor full instructions, refer to the PacketStreamer Documentation.

You will need to install the golang toolchain and libpcap-devbefore building PacketStreamer. # Pre-requisites (Ubuntu): sudo apt install golang-go libpcap-dev
git clone https://github.com/deepfence/PacketStreamer.git
cd PacketStreamer/
makeRun a PacketStreamer receiver, listening on port 8081 and writing pcap output to /tmp/dump_file (see receiver.yaml): ./packetstreamer receiver --config ./contrib/config/receiver.yamlRun one or more PacketStreamer sensors on local and remote hosts. Edit the server address in sensor.yaml: # run on the target hosts to capture and forward traffic

# copy and edit the sample sensor-local.yaml file, and add the address of the receiver host
cp ./contrib/config/sensor-local.yaml ./contrib/config/sensor.yaml

./packetstreamer sensor --config ./contrib/config/sensor.yamlWho uses PacketStreamer?* Deepfence ThreatStryker uses PacketStreamer to capture traffic from production platforms for forensics and anomaly detection. Get in touchThank you for using PacketStreamer.

* Start with the documentation
* Got a question, need some help? Find the Deepfence team on Slack
* Got a feature request or found a bug? Rai[...]

___________________________
@hacking_Attack
@Hacking_Video

se an issue
* productsecurity at deepfence dot io: Found a security issue? Share it in confidence
* Find out more at deepfence.io Security and SupportFor any security-related issues in the PacketStreamer project, contact productsecurity at deepfence dot io.

Please file GitHub issues as needed, and join the Deepfence Community Slack channel. LicenseThe Deepfence PacketStreamer project (this repository) is offered under the Apache2 license. Contributions to Deepfence PacketStreamer project are similarly accepted under the Apache2 license, as per GitHub's inbound=outbound policy. Download PacketStreamer

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
WordPress Motopress Hotel Booking Lite 4.2.4 Cross Site Scripting

https://3.bp.blogspot.com/-bZ42fSZSr3k/WWlvHn9HijI/AAAAAAAAILg/Inc3JSbnqMk2Mr3Ts5OXFhitf0RPA2_cwCLcBGAs/s1600/h140.png
WordPress Motopress Hotel Booking Lite plugin version 4.2.4 suffers from a persistent cross site scripting vulnerability.

SHA-256 | 5cc44d045b16ad7ccdd88a107e648c4c1da49cc26d0a844d7168e4d5f80ea2b0

Download
# Exploit Title: WordPress Plugin Motopress Hotel Booking Lite 4.2.4 - Stored Cross-Site Scripting (XSS)
# Date: 2022-06-05
# Exploit Author: Sanjay Singh
# Vendor Homepage: https://motopress.com/
# Software Link: https://downloads.wordpress.org/plugin/motopress-hotel-booking-lite.4.2.4.zip
# Version: 4.2.4
# Tested on: Windows/XAMPP
###########################################################################
PoC:

1. http://localhost/wp-admin/edit.php?post_type=mphb_room_type
2. Click on "Add Accommodation Type".
3. Add title payload= ">
4. Excerpt input payload ">
5. Click publish.
6. Visit http://localhost/accommodations/
7. XSS payload execute.


Source:packetstormsecurity.com
➖ Sent by @TheFeedReaderBot ➖

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Kik Messenger XMPP Stanza Smuggling

https://3.bp.blogspot.com/-BKQJl1oXbqE/WWlvQjSZMJI/AAAAAAAAINE/UWb7sXt4uvssyXVrWpwrINbeIcIr93_vACLcBGAs/s1600/h33.png
There is a vulnerability in Kik Messenger for Android that allows an attacker to send arbitrary XMPP stanzas (XMPP control messages) to another Kik client, including XMPP stanzas that are normally sent only by the Kik server. Included is a proof of concept that demonstrates sending of the stc stanza which triggers a captcha dialog and opens an arbitrary attacker-control webpage on the victim client. However, the full impact is likely larger than this, and includes any application features accessible over XMPP.

SHA-256 | 3f66b31a34e395df392668d6453b6eee4bbfd623765c95d99108116f95c8a143

Download
Source:packetstormsecurity.com
➖ Sent by @TheFeedReaderBot ➖

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Malware analysis CTF’s

I’m on the hunt for ctf style malware analysis sites. I came across one by accident from a YouTuber but for got to book mark the site.

Do any of you know of any ctf style malware analysis sites ?🙏🏾🙏🏾

submitted by /u/WinnerzCircle
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Bored of work, should I do freelance ?

Hello, since 1,5 years I work as cybersecurity consultant. I do pentest, phishing, dev of malware, forensic and all kind of hacking stuff. From some time now I also do commercial management.

All I've done until now I made it alone, no technical mentoring. Just me and my Google friend.

What did the company bring me in the end? Clients? Today I am able to find them myself... A regular financial income ? Interesting at the beginning but now I think I am also able to do the same or even better. Social interactions (colleagues/boss)? Not really convinced that I still have a lot to learn in this area. Especially since I'm rather lonely.

What's your mind ?

submitted by /u/dd707834
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Descoberta de Vulnerabilidade com direito a avaliação do meu currículo.
https://medium.com/@Diegoeducacao404.../iae-meus-amigos-como-voc%C3%AAs-est%C3%A3o-f228585ed30f?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Iae meus amigos como vocês estão? espero que estejam bem. Trouxe hoje uma vulnerabilidade em uma Universidade que eu gostaria de contar…Continue reading on Medium » (https://medium.com/@Diegoeducacao404.../iae-meus-amigos-como-voc%C3%AAs-est%C3%A3o-f228585ed30f?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Spring4Shell-Scan : A Fully Automated, Reliable, And Accurate Scanner For Finding Spring4Shell

Spring4Shell-Scan is a fully automated, reliable, and accurate scanner for finding Spring4Shell and Spring Cloud RCE vulnerabilities.

Features

* Support for lists of URLs.
* Fuzzing for more than 10 new Spring4Shell payloads (previously seen tools uses only 1-2 variants).
* Fuzzing for HTTP GET and POST methods.
* Automatic validation of the vulnerability upon discovery.
* Randomized and non-intrusive payloads.
* WAF Bypass payloads.

Description

The Spring4Shell RCE is a critical vulnerability that FullHunt has been researching since it was released. We worked with our customers in scanning their environments for Spring4Shell and Spring Cloud RCE vulnerabilities.

We’re open-sourcing an open detection scanning tool for discovering Spring4Shell (CVE-2022-22965) and Spring Cloud RCE (CVE-2022-22963) vulnerabilities. This shall be used by security teams to scan their infrastructure, as well as test for WAF bypasses that can result in achieving successful exploitation of the organization’s environment.

If your organization requires help, please contact (team at fullhunt.io) directly for a full attack surface discovery and scanning for the Spring4Shell vulnerabilities.

Usage

$ ./spring4shell-scan.py -h
[•] CVE-2022-22965 – Spring4Shell RCE Scanner
[•] Scanner provided by FullHunt.io – The Next-Gen Attack Surface Management Platform.
[•] Secure your External Attack Surface with FullHunt.io.
usage: spring4shell-scan.py [-h] [-u URL] [-p PROXY] [-l USEDLIST] [–payloads-file PAYLOADS_FILE] [–waf-bypass] [–request-type REQUEST_TYPE] [–test-CVE-2022-22963]
optional arguments:
-h, –help show this help message and exit
-u URL, –url URL Check a single URL.
-p PROXY, –proxy PROXY
Send requests through proxy
-l USEDLIST, –list USEDLIST
Check a list of URLs.
–payloads-file PAYLOADS_FILE
Payloads file – [default: payloads.txt].
–waf-bypass Extend scans with WAF bypass payloads.
–request-type REQUEST_TYPE
Request Type: (get, post, all) – [Default: all].
–test-CVE-2022-22963
Test for CVE-2022-22963 (Spring Cloud RCE).

Scan a Single URL

$ python3 spring4shell-scan.py -u https://spring4shell.lab.secbot.local

Discover WAF bypasses against the environment

$ python3 spring4shell-scan.py -u https://spring4shell.lab.secbot.local –waf-bypass

Scan a list of URLs

$ python3 spring4shell-scan.py -l urls.txt

Include checks for Spring Cloud RCE (CVE-2022-22963)

$ python3 spring4shell-scan.py -l urls.txt –test-CVE-2022-22963

Installation

$ pip3 install -r requirements.txt

Docker Support

git clone https://github.com/fullhunt/spring4shell-scan.git
cd spring4shell-scan
sudo docker build -t spring4shell-scan .
sudo docker run -it –rm spring4shell-scan
With URL list “urls.txt” in current directory
docker run -it –rm -v $PWD:/data spring4shell-scan -l /data/urls.txt
Download

___________________________
@hacking_Attack
@Hacking_Video