Hacking on Medium
A Guide to Joining Hackathons as a Designer

https://cdn-images-1.medium.com/max/1500/0*InY99bFd5gxzm4h5
Ever feel intimidated joining hackathons as a designer? Then this guide is for you!

Continue reading on Medium »

Hacking on Medium
Is the CEH really “worth it”?

This question has been bouncing around in my head since I started really gobbling up certifications about 2 years ago. One of the first…

Continue reading on Medium »

hacking: security in practice
Someone Doxxed Me

Is there a possible way to identify who made an Instagram account because someone created an account and revealed my friend and I’s home addresses. I want to find out who was responsible for this but I don’t know how to find out who created the account.

https://www.instagram.com/hsbsnzomamzmzhznsnsjwoamzkz here is the account link for anyone that wants to help me. If you find out who it is please tell me through private messages, Thanks a lot 🙏🏽

submitted by /u/Bennythebear25
[link] [comments]

Hacking on Medium
PC Optimization (Windows 10)

https://cdn-images-1.medium.com/max/1705/1*1eMHGZH7wSGGJJXX81C4cQ.png
We’ve all experienced our devices become painfully slow to the point we no longer want to use them. This can make for a very annoying…

Continue reading on Medium »

Hacking on Medium
Buffer overflow Vulnerability

What is Buffer Overflow ?

Continue reading on Medium »

Hacking on Medium
Advanced Phishing Email — When Protective AI May Harm

One popular technique we hear a lot on corporate and college courses on phishing is that there are certain patterns with phishing emails…

Continue reading on Medium »

Hacking on Medium
Hacking a X-RAY Machine with WHIDelite & EvilCrowRF

https://cdn-images-1.medium.com/max/2048/1*c46yg5guDizVwsMTycVroA.jpeg
Recently I bought a X-RAY machine from China to have some ghetto-style desktop setup in order to inspect/reverse engineer some PCBs and…

Continue reading on Medium »

Hacking on Medium
How does the Web work !!

https://cdn-images-1.medium.com/max/2600/0*jQVhe8ycKNHyS07N
To exploit a website, you must know how it works so that you can effectively take it down to the ground!

Continue reading on Secure You!! »

Black Hat Ethical Hacking
NitroRansomware Asks for Discord Gift Codes, Steals Access Tokens

https://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg NitroRansomware Asks for Discord Gift Codes, Steals Access TokensPost Views: 60
Reading Time: 1 Minute
The NitroRansomware malware strain is shaking up the ransomware norm by demanding Discord Nitro gift codes from victims instead of actual money.
Discord is a VoIP, instant messaging and digital-distribution platform designed for creating communities. Users communicate with voice calls, video calls, text messaging, media and files in private chats or as part of communities called “servers.”
While it’s free, users can purchase an upgraded “Nitro” subscription for $9.99 that allows larger upload sizes, HD video streaming, better emoji options and the ability to “stand out” via promotions on servers.

The NitroRansomware operators are apparently extremely interested in Nitro subscriptions. Initially spotted by MalwareHunterTeam, other researchers looked into how the code works. It’s being distributed as a purported free gift-code generator for Nitro.

“Upon executing the ransomware, it will encrypt the victim’s file and will give three hours to them to provide a valid Discord Nitro [code],” explained Heimdal Security researcher Cezarina Chirica, in a Monday posting. “The malware appends the ‘.givemenitro’ extension to the filenames of the encrypted files. At the end of an encryption process, NitroRansomware will change the user’s wallpaper to an evil or angry Discord logo.”
See Also: WordPress could treat Google FloC as a security issue
According to an analysis by Bleeping Computer, the ransomware verifies that the provided Discord gift codes are valid, and decrypts the files using an embedded static decryption key. However, the three-hour limit appears to be a scareware tactic. If the timer ticks down to zero, no files are actually deleted.

The outlet’s analysis also pointed out that because the decryption keys are static, it’s possible to extract a decryption key from the executable itself, so there’s no real need to pay the $9.99. Follow-On Attacks PossibleMalwareHunterTeam also noted that the malware steals Discord tokens from victims as well, which would allow attackers to hack Discord servers.
See Also: Offensive Security Tool: Hunt
And, “NitroRansomware also implements backdoor capabilities, allowing the hackers to remotely execute commands and then have the output sent through their webhook to the attacker’s Discord channel,” said Heimdal’s Chirica.

Chirica recommended that users infected with the ransomware immediately change their Discord password and perform an antivirus scan to detect other malicious programs added to the computer. And, also, users should check for new user accounts in Windows that they did not create and remove them if found. Gift Cards: A Cybercrime GoldmineWhy gift codes? They can be resold, and also can be used for money laundering, researcher Kevin Beaumont pointed out.
Lolol, ransomware which uses Discord gift cards as payment. https://t.co/dWWOLqiQqQ

— Kevin Beaumont (@GossiTheDog) April 18, 2021 See Also: Hacking Stories: When two young hackers played war games with PentagonStolen gift and loyalty codes and cards can be big business on the cyber-underground. In February for instance, gift cards from 3,010 companies showed up on a Russian-speaking illicit forum, according to Gemini Advisors. These included cards from Airbnb, Amazon, American Airlines, Chipotle, Dunkin Donuts, Marriott, Nike, Subway, Target and Walmart.

These were worth around $38,000, Gemini noted – but they netted a bit less for[...]

the cybercriminals behind the cache. The starting bidding price of the stolen gift cards was $10,000, with a “buy now” price of $20,000. The gift cards were bought by another cybercriminal soon after the cards were posted for sale, according to the firm.

“Typically, compromised gift cards sell for 10 percent of the card value in the Dark Web; however, the 895,000 cards offered from the breach were priced at roughly 0.05 percent of the card value,” according to Gemini, in an early April report. This discrepancy likely means the gift cards were potentially carrying low balances, it added.

When it comes to monetization, cybercriminals basically have two options, according to Gemini: Purchase actual goods and resell them; or, sell the cards to a third-party gift card marketplace as in the example above. “In [one] scheme, cybercriminals would use stolen payment cards to purchase gift cards and then sell the gift cards to Cardpool [a carding marketplace],” according to the report. “If a bank were to determine that the gift card had been purchased with a stolen payment card, they could connect with the merchant bank or gift card vendors that issued the gift card and request they void the gift card. Unfortunately, this process can prove cumbersome and time-consuming, making it a rare occurrence and granting cybercriminals a wider time window to pull off their scheme.”
Source: threatpost.com (Click Link)Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/Untitled-design-10-90x90.png WordPress could treat Google FloC as a security issue1 day ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/Crypto_Mining_Bitcoin-90x90.jpg Attackers Target ProxyLogon Exploit to Install Cryptojacker4 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/patchtues1-90x90.jpg Microsoft to Patch multiple Zero-Days, 110 vulnerabilities in total5 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/Google-Chrome-Browser-90x90.jpg Chrome Zero-Day Exploit Posted on Twitter6 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/Clubhouse2-e1618258606781-90x90.png 1.3M Clubhouse Users’ Data Dumped in Hacker Forum for Free1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/linkedin-90x90.png Data from 500M LinkedIn Users Posted for Sale Online1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/cisco-patch-90x90.png Zero-Day Bug Impacts Problem-Plagued Cisco SOHO Routers2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/google-play-90x90.jpg Fake Netflix App on Google Play Spreads Malware Via WhatsApp2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/vmware-patch-90x90.jpg Critical Cloud Bug in VMWare Carbon Black Allows Takeover2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/eggs-chickens-e1617650984482-90x90.jpg LinkedIn Spear-Phishing Campaign Targets Job Hunters2 weeks ago
The post NitroRansomware Asks for Discord Gift Codes, Steals Access Tokens first appeared on Black Hat Ethical Hacking.

Reproxy - Simple Edge Server / Reverse Proxy
http://www.kitploit.com/2021/04/reproxy-simple-edge-server-reverse-proxy.html

Reproxy is a simple edge HTTP(s) server / reverse proxy supporting various providers (docker, static, file). One or more providers supply information about requested server, requested url, destination url and health check url. Distributed as a single binary or as a docker container. Automatic SSL termination with Let's Encrypt (https://letsencrypt.org/) Support of user-provided SSL certificates Simple but flexible proxy rules Static, command line (https://www.kitploit.com/search/label/Command%20Line) proxy rules provider Dynamic, file-based proxy rules provider Docker provider with an automatic discovery Optional traffic compression User-defined limits and timeouts Single binary distribution Docker container distribution Built-in static assets server
Server can be set as FQDN, i.e. s.example.com or * (catch all). Requested url can be regex, for example ^/api/(.*) and destination url may have regex matched groups in, i.e. http://d.example.com:8080/$1. For the example above http://s.example.com/api/something?foo=bar will be proxied to http://d.example.com:8080/something?foo=bar. For convenience, requests with the trailing / and without regex groups expanded to /(.*), and destinations in those cases expanded to /$1. I.e. /api/ -> http://127.0.0.1/service will be translated to ^/api/(.*) -> http://127.0.0.1/service/$1 Both HTTP and HTTPS supported. For HTTPS, static certificate can be used as well as automated ACME (Let's Encrypt) certificates. Optional assets server can be used to serve static files. Starting reproxy requires at least one provider defined. The rest of parameters are strictly optional and have sane default. Example with a static provider: reproxy --static.enabled --static.rule="example.com/api/(.*),https://api.example.com/$1" Example with an automatic docker discovery: reproxy --docker.enabled --docker.auto
Install
for a binary distribution pick the proper file in the release section (https://github.com/umputun/reproxy/releases) docker container available on Docker Hub (https://hub.docker.com/r/umputun/reproxy) as well as on Github (https://github.com/umputun/reproxy/blob/master/ghcr.io/umputun/reproxy)Container (https://www.kitploit.com/search/label/Container) Registry. Latest stable version has :vX.Y.Z tag (with :latest alias) and the current master has :master tag.
Providers
Proxy rules supplied by various providers. Currently included file, docker and static. Each provider may define multiple routing rules for both proxied request and static (assets). User can sets multiple providers at the same time. See examples of various providers in examples (https://github.com/umputun/reproxy/tree/master/examples)
Static
This is the simplest provider defining all mapping rules directly in the command line (or environment). Multiple rules supported. Each rule is 3 or 4 comma-separated elements server,sourceurl,destination,[ping-url]. For example: *,^/api/(.*),https://api.example.com/$1, - proxy all request to any host/server with /api prefix to https://api.example.com example.com,/foo/bar,https://api.example.com/zzz,https://api.example.com/ping - proxy all requests to example.com and with /foo/bar url to https://api.example.com/zzz. Uses https://api.example.com/ping for the health check The last (4th) element defines an optional ping url used for health reporting. I.e.*,^/api/(.*),https://api.example.com/$1,https://api.example.com/ping. See Health check (https://github.com/umputun/reproxy#ping-and-health-checks) section for more details.
File
reproxy --file.enabled --file.name=config.yml Example of config.yml: default: # the same as * (catch-all) server
- { route: "^/api/svc1/(.*)", dest: "http://127.0.0.1:8080/blah1/$1" }
- {
route: "/api/svc3/xyz",
dest: "http://127.0.0.3:8080/blah3/xyz",
"ping": "http://127.0.0.3:8080/ping",
}
srv.example.com: