WhiteBeam - Transparent Endpoint Security
http://www.kitploit.com/2022/06/whitebeam-transparent-endpoint-security.html

___________________________
@hacking_Attack
@Hacking_Video

Transparent endpoint security

Features Block and detect advanced attacks Modern audited cryptography: RustCrypto (https://github.com/RustCrypto) for hashing (https://www.kitploit.com/search/label/Hashing) and encryption Highly compatible: Development focused on all platforms (incl. legacy) and architectures Source available: Audits welcome Reviewed by security researchers with combined 100+ years of experience
In Action Video demonstration of detection and prevention capabilities (https://whitebeamsec.com/) Testing WhiteBeam against zeroday exploits (https://vs.whitebeamsec.com/) Recorded attacks against the WhiteBeam honeypot (https://asciinema.org/~wbhoneypot) Installation From Packages (Linux) Distro-specific packages have not been released yet for WhiteBeam, check again soon! From Releases (Linux) Download the latest release (https://github.com/WhiteBeamSec/WhiteBeam/releases) Ensure the release file hash matches the official hashes (https://www.kitploit.com/search/label/Hashes) (How-to (https://github.com/WhiteBeamSec/WhiteBeam/wiki/Verifying-file-hashes)) Install: ./whitebeam-installer install From Source (Linux) Run tests (Optional): cargo run test Compile: cargo run build Install WhiteBeam: cargo run install Quick start Become root (sudo su/su root) Set a recovery (https://www.kitploit.com/search/label/Recovery) secret. You'll be able to use this with whitebeam --auth to make changes to the system: whitebeam --setting RecoverySecret mask How to Detect Attacks with WhiteBeam Multiple guides are provided depending on your preference. Contact us (mailto:info@whitebeamsec.com) so we can help you integrate WhiteBeam with your environment. Serverless guide (https://github.com/WhiteBeamSec/WhiteBeam/wiki), for passive review osquery Fleet setup guide (https://github.com/WhiteBeamSec/WhiteBeam/wiki), for passive review WhiteBeam Server setup guide (https://github.com/WhiteBeamSec/WhiteBeam/wiki), for active (https://www.kitploit.com/search/label/Active) response How to Prevent Attacks with WhiteBeam WhiteBeam is experimental software. Contact us (mailto:info@whitebeamsec.com) for assistance safely implementing it. Become root (sudo su/su root) Review the baseline at least 24 hours after installing WhiteBeam: whitebeam --baseline Add trusted behavior to the whitelist, following the whitelisting guide (https://github.com/WhiteBeamSec/WhiteBeam/wiki) Enable WhiteBeam prevention: whitebeam --setting Prevention true

Download WhiteBeam (https://github.com/WhiteBeamSec/WhiteBeam)

___________________________
@hacking_Attack
@Hacking_Video

Same bug different platform
https://prajwoldhungana487.medium.com/same-bug-different-platform-4c648e91af6b?source=rss------bug_bounty-5

At the moment I am on a break from the Bug hunting so thought of writing this article about a bug I found couple of months ago.Continue reading on Medium » (https://prajwoldhungana487.medium.com/same-bug-different-platform-4c648e91af6b?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

From blind SSRF to localhost dirbusting and asset enumeration
https://medium.com/@joshibeast/from-blind-ssrf-to-localhost-dirbusting-and-asset-enumeration-dc0179310038?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

HTML to PDF generators are, in general, known to “very challenging” when it comes to security.Continue reading on Medium » (https://medium.com/@joshibeast/from-blind-ssrf-to-localhost-dirbusting-and-asset-enumeration-dc0179310038?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
TryHackMe- Frank and Herby try again walkthrough

https://cdn-images-1.medium.com/max/992/1*QF8OXEVXLCMCuO5i4jfpKQ.png
This is the walkthrough of the machine frank and herby try again from TryHackMe.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
From blind SSRF to localhost dirbusting and asset enumeration

https://cdn-images-1.medium.com/max/789/1*0SZ7naSUSS3FbzOuBZ-cNQ.png
Story about how inconsistent printing of img alt tag in WeasyPrint pdf generator can turn blind SSRF into localhost dirbuster.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Everything You need to know about Pegasus

If you were been told that Jeff Bezos can get hacked and his private messages with his ex-wife was released, and was been threatened that…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
My first CVE-2022–31289

https://cdn-images-1.medium.com/max/1920/1*bns-TguLQpN0XhIsaEmDqw.png
Authentication Bypass on Sonatype Nexus Repository Manager OSS 3.37.3-02

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
WhiteBeam - Transparent Endpoint Security

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjpLzN9752QW_e2u4C8O-rX-59axUpFgF4rJLpVbELNWCCCtF-J_CQJ850NZhlNgKj8X99G_CTGdCw-yEya2LTeNIEvkR8Nss03_wnKOB1XBhHkqTJxyQbVZ7L5K42sRRk5_1cOepHYRGy5jVLrHUQMnhAQoere7UJvNfHBMvkj4_oqmlFWr9LyFQH4/w640-h172/WhiteBeam.png
Transparent endpoint security
Features

* Block and detect advanced attacks
* Modern audited cryptography: RustCrypto for hashing and encryption
* Highly compatible: Development focused on all platforms (incl. legacy) and architectures
* Source available: Audits welcome
* Reviewed by security researchers with combined 100+ years of experience
In Action

* Video demonstration of detection and prevention capabilities
* Testing WhiteBeam against zeroday exploits
* Recorded attacks against the WhiteBeam honeypot

Installation

From Packages (Linux)

Distro-specific packages have not been released yet for WhiteBeam, check again soon!

From Releases (Linux)

1. Download the latest release
2. Ensure the release file hash matches the official hashes (How-to)
3. Install:
* ./whitebeam-installer install
From Source (Linux)

1. Run tests (Optional):
* cargo run test

2. Compile:
* cargo run build

3. Install WhiteBeam:
* cargo run install
Quick start

1. Become root (sudo su/su root)
2. Set a recovery secret. You'll be able to use this with whitebeam --authto make changes to the system: whitebeam --setting RecoverySecret mask

How to Detect Attacks with WhiteBeam

Multiple guides are provided depending on your preference. Contact us so we can help you integrate WhiteBeam with your environment.

1. Serverless guide, for passive review
2. osquery Fleet setup guide, for passive review
3. WhiteBeam Server setup guide, for active response

How to Prevent Attacks with WhiteBeam
WhiteBeam is experimental software. Contact us for assistance safely implementing it.

1. Become root (sudo su/su root)
2. Review the baseline at least 24 hours after installing WhiteBeam:
* whitebeam --baseline

3. Add trusted behavior to the whitelist, following the whitelisting guide
4. Enable WhiteBeam prevention:
* whitebeam --setting Prevention true
Download WhiteBeam

___________________________
@hacking_Attack
@Hacking_Video

My first CVE-2022–31289

Authentication Bypass on Sonatype Nexus Repository Manager OSS 3.37.3-02Continue reading on Medium »
Read more...

0 Day Vulnerability — URI Normalization Issue — Access the Internal Tomcat Server

Description:Continue reading on Medium »
Read more...

Linux is not used at work
https://www.reddit.com/r/Pentesting/comments/va13y0/linux_is_not_used_at_work/

I recently landed my first pentesting job at a super large company, but with a really really small red team area. I am not yet a super expert but all I have learnt about ethical hacking and pentesting was using Linux, specifically Kali. So the question is whether the red team area at work using mainly Windows is kind of normal or should I ask whether it is possible to use Linux to conduct the pentesting activities? submitted by /u/EktorMG (https://www.reddit.com/user/EktorMG)
[link] (https://www.reddit.com/r/Pentesting/comments/va13y0/linux_is_not_used_at_work/) [comments] (https://www.reddit.com/r/Pentesting/comments/va13y0/linux_is_not_used_at_work/)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
RFID resources

Where can I read about RFID and RFID cloning?

submitted by /u/suspiciously_tasty
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video