hacking: security in practice
I want to learn Cell phone hacking

I have no idea what are the terms or the protocols, what should I search since googling "cell phone hacking" doesn't provide the wanted information

submitted by /u/Clichedfoil
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

First bounty of $150

Hello everyone! I’m Aman, a cybersecurity researcher from India. And this is my first write-up on I was awarded a $150 bounty.Continue reading on Medium »
Read more...

hacking: security in practice
Security Threats & Concepts Explained

https://external-preview.redd.it/cLpWysJC9JeV0SqYCLWUnm_06SA3M8DO4p5hQ0dE1YI.jpg?width=320&crop=smart&auto=webp&s=e1039d5bafd71354a72a95fedb6b19f3b640970d submitted by /u/Fluffy-Mix9834
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Goreplay - Open-Source Tool For Capturing And Replaying Live HTTP Traffic Into A Test Environment In Order To Continuously Test Your System With Real Data
http://www.kitploit.com/2022/06/goreplay-open-source-tool-for-capturing.html

___________________________
@hacking_Attack
@Hacking_Video

GoReplay is an open-source network monitoring tool which can record your live traffic (https://www.kitploit.com/search/label/Traffic) and use it for shadowing, load testing, monitoring and detailed analysis.
About As your application grows, the effort required to test it also grows exponentially. GoReplay offers you the simple idea of reusing your existing traffic for testing, which makes it incredibly powerful. Our state of art technique allows you to analyze and record your application traffic without affecting it. This eliminates the risks that come with putting a third party component in the critical path. GoReplay increases your confidence in code deployments, configuration and infrastructure (https://www.kitploit.com/search/label/Infrastructure) changes. GoReplay offers a unique approach for shadowing. Instead of being a proxy, GoReplay listens in the background for traffic on your network interfaces, requiring no changes in your production infrastructure, other than running GoReplay daemon on the same machine as your service.

___________________________
@hacking_Attack
@Hacking_Video

Check latest documentation (http://github.com/buger/goreplay/wiki). Installation Download the latest binary (https://www.kitploit.com/search/label/Binary) from https://github.com/buger/goreplay/releases or compile by yourself (https://github.com/buger/goreplay/wiki/Compilation). Getting started The most basic setup will be sudo ./gor --input-raw :8000 --output-stdout which acts like tcpdump. If you already have a test environment, you can start replaying by running: sudo ./gor --input-raw :8000 --output-http http://staging.env. See our documentation (https://github.com/buger/goreplay/wiki/) and the Getting Started (https://github.com/buger/goreplay/wiki/Getting-Started) page for more info. Newsletter Subscribe to our newsletter (https://www.getdrip.com/forms/89690474/submissions/new) to stay informed about the latest features and changes to the Gor project. Want to Upgrade? We have created a GoReplay PRO (https://goreplay.org/pro.html) extension which provides additional features such as support for binary protocols (https://www.kitploit.com/search/label/Protocols) like Thrift or ProtocolBuffers, saving and replaying from cloud storage, TCP session replication, etc. The PRO version also includes a commercial-friendly license, dedicated support, and it also allows you to support high-quality open source development. Problems? If you have a problem, please review the FAQ (https://github.com/buger/goreplay/wiki/FAQ) and Troubleshooting (https://github.com/buger/goreplay/wiki/Troubleshooting) wiki pages. Searching the issues (https://github.com/buger/goreplay/issues) for your problem is also a good idea. All bug-reports and suggestions should go through Github Issues or our Google Group (https://groups.google.com/forum/#!forum/gor-users) (you can just send email to gor-users@googlegroups.com (mailto:gor-users@googlegroups.com)). If you have a private question feel free to send email to support@gortool.com (mailto:support@gortool.com). Contributing Fork it Create your feature branch (git checkout -b my-new-feature) Commit your changes (git commit -am 'Added some feature') Push to the branch (git push origin my-new-feature) Create new Pull Request Companies using Gor GOV.UK (https://www.gov.uk/) - UK Government Digital Service theguardian.com (http://theguardian.com/) - Most popular online newspaper in the UK TomTom (http://www.tomtom.com/) - Global leader in navigation, traffic and map products, GPS Sport Watches and fleet management (https://www.kitploit.com/search/label/Management) solutions. 3SCALE (http://www.3scale.net/) - API infrastructure to manage your APIs for internal or external users Optionlab (http://www.opinionlab.com/) - Optimize customer experience and drive engagement across multiple channels TubeMogul (http://tubemogul.com/) - Software for Brand Advertising Videology (http://www.videologygroup.com/) - Video advertising platform ForeksMobile (http://foreksmobile.com/) - One of the leading financial application development company in Turkey Granify (http://granify.com/) - AI backed SaaS solution that enables online retailers to maximise their sales And many more! If you are using Gor, we are happy to add you to the list and share your story, just write to: hello@goreplay.org (mailto:hello@goreplay.org) Author Leonid Bugaev, @buger (https://twitter.com/buger), https://leonsbox.com (https://leonsbox.com/)

Download Goreplay (https://github.com/buger/goreplay)

___________________________
@hacking_Attack
@Hacking_Video

First bounty of $150
https://medium.com/@withamankr/first-bounty-of-150-cbcd78d1c538?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hello everyone! I’m Aman, a cybersecurity researcher from India. And this is my first write-up on I was awarded a $150 bounty.Continue reading on Medium » (https://medium.com/@withamankr/first-bounty-of-150-cbcd78d1c538?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Bore : Simple CLI Tool For Making Tunnels To Localhost

Bore, a modern simple TCP tunnel in Rust that exposes local ports to a remote server, bypassing standard NAT connection firewalls. That’s all it does: no more, and no less.

This will expose your local port at localhost:8000to the public internet at bore.pub:, where the port number is assigned randomly.

Similar to local tunnel and ngrok, except boreis intended to be a highly efficient, unopinionated tool for forwarding TCP traffic that is simple to install and easy to self-host, with no frills attached.

(bore totals less than 400 lines of safe, async Rust code and is trivial to set up — just run a single binary for the client and server.) InstallationThe easiest way to install bore is from prebuilt binaries. These are available on the releases page for macOS, Windows, and Linux. Just unzip the appropriate file for your platform and move the bore executable into a folder on your PATH.

You also can build borefrom source using Cargo, the Rust package manager. This command installs the borebinary at a user-accessible path.

cargo install bore-cli

We also publish versioned Docker images for each release. Each image is built for AMD 64-bit and Arm 64-bit architectures. They’re tagged with the specific version and allow you to run the statically-linked borebinary from a minimal “scratch” container.

docker run -it –init –rm –network host ekzhang/bore Detailed UsageThis section describes detailed usage for the boreCLI command. Local ForwardingYou can forward a port on your local machine by using the bore localcommand. This takes a positional argument, the local port to forward, as well as a mandatory --tooption, which specifies the address of the remote server.

bore local 5000 –to bore.pub

You can optionally pass in a --portoption to pick a specific port on the remote to expose, although the command will fail if this port is not available. Also, passing --local-hostallows you to expose a different host on your local area network besides the loopback address localhost.

The full options are shown below.

bore-local 0.4.0
Starts a local proxy to the remote server
USAGE:
bore local [OPTIONS] –to
ARGS:
The local port to expose
OPTIONS:
-h, –help Print help information
-l, –local-host The local host to expose [default: localhost]
-p, –port Optional port on the remote server to select [default: 0]
-s, –secret Optional secret for authentication [env: BORE_SECRET]
-t, –to Address of the remote server to expose local ports to
-V, –version Print version information Self-HostingAs mentioned in the startup instructions, there is a public instance of the boreserver running at bore.pub. However, if you want to self-host boreon your own network, you can do so with the following command:

bore server

That’s all it takes! After the server starts running at a given address, you can then update the bore localcommand with option --to to forward a local port to this remote server.

The full options for the bore servercommand are shown below.

bore-server 0.4.0
Runs the remote proxy server
USAGE:
bore server [OPTIONS]
OPTIONS:
-h, –help Print help information
–min-port Minimum TCP port number to accept [default: 1024]
-s, –secret Optional secret for authentication [env: BORE_SECRET]
-V, –version Print version information ProtocolThere is an implicit control port at 7835, used for creating new connections on demand. At initialization, the client sends a “Hello” message to the server on the TCP control port, asking to proxy a selected remote port. The server then responds with an acknowledgement and begins listening fo[...]

___________________________
@hacking_Attack
@Hacking_Video

r external TCP connections.

Whenever the server obtains a connection on the remote port, it generates a secure UUID for that connection and sends it back to the client. The client then opens a separate TCP stream to the server and sends an “Accept” message containing the UUID on that stream. The server then proxies the two connections between each other.

For correctness reasons and to avoid memory leaks, incoming connections are only stored by the server for up to 10 seconds before being discarded if the client does not accept them. AuthenticationOn a custom deployment of bore server, you can optionally require a secret to prevent the server from being used by others. The protocol requires clients to verify possession of the secret on each TCP connection by answering random challenges in the form of HMAC codes. (This secret is only used for the initial handshake, and no further traffic is encrypted by default.) If a secret is not present in the arguments, borewill also attempt to read from the BORE_SECRETenvironment variable. Download

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
VulFi : Plugin To IDA Pro Which Can Be Used To Assist During Bug Hunting In Binaries

VulFi (Vulnerability Finder) tool is a plugin to IDA Pro which can be used to assist during bug hunting in binaries. Its main objective is to provide a single view with all cross-references to the most interesting functions (such as strcpy, sprintf, system, etc.). For cases where a Hexrays decompiler can be used, it will attempt to rule out calls to these functions which are not interesting from a vulnerability research perspective (think something like strcpy(dst,"Hello World!")). Without the decompiler, the rules are much simpler (to not depend on architecture) and thus only rule out the most obvious cases. InstallationPlace the vulfi.py, vulfi_prototypes.jsonand vulfi_rules.jsonfiles in the IDA plugin folder (cp vulfi* ). Preparing the Database FileBefore you run VulFi make sure that you have a good understanding of the binary that you work with. Try to identify all standard functions (strcpy, memcpy, etc.) and name them accordingly. The plugin is case insensitive and thus MEMCPY, Memcpyand memcpyare all valid names. However, note that the search for the function requires exact match. This means that memcpy?or std_memcpy(or any other variant) will not be detected as a standard function and therefore will not be considered when looking for potential vulnerabilities. If you are working with an unknown binary you need to set the compiler options first Options> Compiler. After that VulFi will do its best to filter all obvious false positives (such as call to printfwith constant string as a first parameter). Please note that while the plugin is made without any ties to a specific architecture some processors do not have full support for specifying types and in such case VulFi will simply mark all cross-references to potentially dangerous standard functions to allow you to proceed with manual analysis. In these cases, you can benefit from the tracking features of the plugin. UsageScanningTo initiate the scan, select Search> VulFioption from the top bar menu. This will either initiate a new scan, or it will read previous results stored inside the idb/i64 file. The data are automatically saved whenever you save the database.

Once the scan is completed or once the previous results are loaded a table will be presented with a view containing following columns:

* IssueName – Used as a title for the suspected issue.
* FunctionName – Name of the function.
* FoundIn – The function that contains the potentially interesting reference.
* Address – The address of the detected call.
* Status – The review status, initial Not Checkedis assigned to every new item. The other statuses are False Positive, Suspiciousand Vulnerable. Those can be set using a right-click menu on a given item and should reflect the results of the manual review of the given function call.
* Priority – An attempt to prioritize more interesting calls over the less interesting ones. Possible values are High, Mediumand Low. The priorities are defined along with other rules in vulfi_rules.jsonfile.
* Comment – A user defined comment for the given item.

In case that there are no data inside the idb/i64 file or user decides to perform a new scan. The plugin will ask whether it should run the scan using the default included rules or whether it should use a custom rules file. Please note that running a new scan with already existing data does not overwrite the previously found ite[...]

___________________________
@hacking_Attack
@Hacking_Video

ms identified by the rule with the same name as the one with previously stored results. Therefore, running the scan again does not delete existing comments and status updates.

In the right-click context menu within the VulFi view, you can also remove the item from the results or remove all items. Please note that any comments or status updates will be lost after performing this operation. InvestigationWhenever you would like to inspect the detected instance of a possible vulnerable function, just double-click anywhere in the desired row and IDA will take you to the memory location which was identified as potentially interesting. Using a right-click and option Set Vulfi Commentallows you to enter comment for the given instance (to justify the status for example). Adding More FunctionsThe plugin also allows for creating custom rules. These rules could be defined in the IDA interface (ideal for single functions) or supplied as a custom rule file (ideal for rules that aim to cover multiple functions). Within the InterfaceWhen you would like to trace a custom function, which was identified during the analysis, just switch the IDA View to that function, right-click anywhere within its body and select Add current function to VulFi. Custom Set of RulesIt is also possible to load a custom file with set of multiple rules. To create a custom rule file with the below structure you can use the included template file here.

[ // An array of rules
{
“name”: “RULE NAME”, // The name of the rule
“alt_names”:[
“function_name_to_look_for” // List of all function names that should be matched against the conditions defined in this rule
],
“wrappers”:true, // Look for wrappers of the above functions as well (note that the wrapped function has to also match the rule)
“mark_if”:{
“High”:”True”, // If evaluates to True, mark with priority High (see Rules below)
“Medium”:”False”, // If evaluates to True, mark with priority Medium (see Rules below)
“Low”: “False” // If evaluates to True, mark with priority Low (see Rules below)
}
}
]

An example rule that looks for all cross-references to function mallocand checks whether its parameter is not constant and whether the return value of the function is checked is shown below:

{
“name”: “Possible Null Pointer Dereference”,
“alt_names”:[
“malloc”,
“_malloc”,
“.malloc”
],
“wrappers”:false,
“mark_if”:{
“High”:”not param[0].is_constant() and not function_call.return_value_checked()”,
“Medium”:”False”,
“Low”: “False”
}
} Download

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Understanding and Mitigating Single Sign-on Risk

SSO's one-to-many architecture is both a big advantage and a weakness.

Hacking on Medium
Top Beneficial Tips to Hiring a Hacker by Hacklancers

If you’re watching to hire a hacker to help you with your project, there are several essential hiring tips that you should follow.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video