Hacking on Medium
Write-up: DOM-based cookie manipulation @ PortSwigger Academy

https://cdn-images-1.medium.com/max/843/0*s6tSYy-8AzetzRzg.png
This write-up for the lab DOM-based cookie manipulation is part of my walk-through series for PortSwigger’s Web Security Academy.

Continue reading on System Weakness »

Hacking on Medium
How To Know If Your Site Has Been Hacked

Site security is an important consideration when developing your Website. In the digital age, websites have become centers of information…

Continue reading on Medium »

Hacking on Medium
Best way to uninstall Microsoft Edge from Win 10

https://cdn-images-1.medium.com/max/740/0*lsPRYFb4P8NCttFH
If you are trying to figure out how to remove Microsoft Edge from Windows 10, rest assured, you are not alone. While it’s a pretty decent…

Continue reading on Medium »

Hacking on Medium
Enable Sleep Mode In Windows 10

https://cdn-images-1.medium.com/max/740/0*vYlh0pBB1TCUDq3I
The Windows Sleep option is a great way to give your PC a break and save some battery life. But what if the Sleep option is missing from…

Continue reading on Medium »

Hacking on Medium
Permanently Disable Windows 10 Update for Students

https://cdn-images-1.medium.com/max/660/0*tBdMtSR9Rh8_5oPy
Before proceeding, remember that some of the automatic updates will be security updates or important stability improvements that you will…

Continue reading on Medium »

penetrating testing of an SSO WEB APP
https://www.reddit.com/r/Pentesting/comments/ve91fb/penetrating_testing_of_an_sso_web_app/

<!-- SC_OFF -->Hi everyone, I'm a cybersecurity student. Actually I have a project about penetrating testing. I was asked to find vulnerability on the 'test-app.tangermedpcs.ma' it's an online website for security testing purposes. But I don't have enough knowledge about SSO system and I couldn't have the public IP of the domain . Please any help . Thanks for advance. <!-- SC_ON --> submitted by /u/Different_Doctor_938 (https://www.reddit.com/user/Different_Doctor_938)
[link] (https://www.reddit.com/r/Pentesting/comments/ve91fb/penetrating_testing_of_an_sso_web_app/) [comments] (https://www.reddit.com/r/Pentesting/comments/ve91fb/penetrating_testing_of_an_sso_web_app/)

Cryptography a Foundation of Cyber Security. (Part-2)

Hello everyone, Welcome back to another Blog of Cyber Security that is Cryptography a Foundation of Cyber Security. (Part-2) !!Continue reading on Medium »
Read more...

hacking: security in practice
Another DeFi Hack: Hacker Steals $1.26M Worth of Cryptos From Inverse Finance

submitted by /u/immunebytes
[link] [comments]

Cryptography a Foundation of Cyber Security. (Part-2)
https://medium.com/@cybertix/cryptography-a-foundation-of-cyber-security-part-2-c888eda26659?source=rss------bug_bounty-5

Hello everyone, Welcome back to another Blog of Cyber Security that is Cryptography a Foundation of Cyber Security. (Part-2) !!Continue reading on Medium » (https://medium.com/@cybertix/cryptography-a-foundation-of-cyber-security-part-2-c888eda26659?source=rss------bug_bounty-5)

Kali Linux Tutorials
IOSSecuritySuite : iOS Platform Security And Anti-Tampering Swift Library

iOS Security Suite is an advanced and easy-to-use platform security & anti-tampering library written in pure Swift! If you are developing for iOS and you want to protect your app according to the OWASP MASVS standard, chapter v8, then this library could save you a lot of time.

What ISS detects:

* Jailbreak (even the iOS 11+ with brand new indicators!
* Attached debugger
* If an app was run in an emulator
* Common reverse engineering tools running on the device SetupThere are 4 ways you can start using IOSSecuritySuite 1. Add sourceAdd IOSSecuritySuite/*.swiftfiles to your project 2. Setup with CocoaPodspod 'IOSSecuritySuite'3. Setup with Carthagegithub "securing/IOSSecuritySuite"4. Setup with Swift Package Manager.package(url: “https://github.com/securing/IOSSecuritySuite.git”, from: “1.5.0”) Update Info.plistAfter adding ISS to your project, you will also need to update your main Info.plist. There is a check in jailbreak detection module that uses canOpenURL(_:)method and requires specifying URLs that will be queried.

key>LSApplicationQueriesSchemes
array>
string>cydia
string>undecimus
string>sileo
string>zbra
string>filza
string>activator
/array> How to useJailbreak detector module* The simplest method returns True/False if you just want to know if the device is jailbroken or jailed

if IOSSecuritySuite.amIJailbroken() {
print(“This device is jailbroken”)
} else {
print(“This device is not jailbroken”)
}

Verbose, if you also want to know what indicators were identified

let jailbreakStatus = IOSSecuritySuite.amIJailbrokenWithFailMessage()
if jailbreakStatus.jailbroken {
print(“This device is jailbroken”)
print(“Because: (jailbreakStatus.failMessage)”)
} else {
print(“This device is not jailbroken”)
}

The failMessage is a String containing comma-separated indicators as shown on the example below: Cydia URL scheme detected, Suspicious file exists: /Library/MobileSubstrate/MobileSubstrate.dylib, Fork was able to create a new process* Verbose & filterable, if you also want to for example identify devices that were jailbroken in the past, but now are jailed

let jailbreakStatus = IOSSecuritySuite.amIJailbrokenWithFailedChecks()
if jailbreakStatus.jailbroken {
if (jailbreakStatus.failedChecks.contains { $0.check == .existenceOfSuspiciousFiles }) && (jailbreakStatus.failedChecks.contains { $0.check == .suspiciousFilesCanBeOpened }) {
print(“This is real jailbroken device”)
}
} Debugger detector modulelet amIDebugged: Bool = IOSSecuritySuite.amIDebugged()

Deny debugger at all

IOSSecuritySuite.denyDebugger()

Emulator detector module

let runInEmulator: Bool = IOSSecuritySuite.amIRunInEmulator() Experimental featuresRuntime hook detector modulelet amIRuntimeHooked: Bool = amIRuntimeHook(dyldWhiteList: dylds, detectionClass: SomeClass.self, selector: #selector(SomeClass.someFunction), isClassMethod: false)

Symbol hook deny module

// If we want to deny symbol hook of Swift function, we have to pass mangled name of that function
denySymbolHook(“$s10Foundation5NSLogyySS_s7CVarArg_pdtF”) // denying hooking for the NSLog function
NSLog(“Hello Symbol Hook”)
denySymbolHook(“abort”)
abort()

MSHook detector module

// Function declaration
func someFunction(takes: Int) -> Bool {
return false
}
// Defining FunctionType : @convention(thin) indicates a “thin” function reference, which uses the Swift calling convention with no special “self” or “context” parameters.
typealias FunctionType = @convention(thin) (Int) -> (Bool)
// Getting pointer address of function we want to verify
func getSwiftFunctionAddr(_ function: @escaping FunctionType) -> UnsafeMutableRawPointer {
return unsafeBitCast(function, to: Unsafe[...]

MutableRawPointer.self)
}
let funcAddr = getSwiftFunctionAddr(someFunction)
let amIMSHooked = IOSSecuritySuite.amIMSHooked(funcAddr)

File integrity verifier module

// Determine if application has been tampered with
if IOSSecuritySuite.amITampered([.bundleID(“biz.securing.FrameworkClientApp”),
.mobileProvision(“2976c70b56e9ae1e2c8e8b231bf6b0cff12bbbd0a593f21846d9a004dd181be3”),
.machO(“IOSSecuritySuite”, “6d8d460b9a4ee6c0f378e30f137cebaf2ce12bf31a2eef3729c36889158aa7fc”)]).result {
print(“I have been Tampered.”)
}
else {
print(“I have not been Tampered.”)
}
// Manually verify SHA256 hash value of a loaded dylib
if let hashValue = IOSSecuritySuite.getMachOFileHashValue(.custom(“IOSSecuritySuite”)), hashValue == “6d8d460b9a4ee6c0f378e30f137cebaf2ce12bf31a2eef3729c36889158aa7fc” {
print(“I have not been Tampered.”)
}
else {
print(“I have been Tampered.”)
}
// Check SHA256 hash value of the main executable
// Tip: Your application may retrieve this value from the server
if let hashValue = IOSSecuritySuite.getMachOFileHashValue(.default), hashValue == “your-application-executable-hash-value” {
print(“I have not been Tampered.”)
}
else {
print(“I have been Tampered.”)
} Download

Kali Linux Tutorials
Rip Raw : Small Tool To Analyse The Memory Of Compromised Linux Systems

Rip Raw is a small tool to analyse the memory of compromised Linux systems. It is similar in purpose to Bulk Extractor, but particularly focused on extracting system Logs from memory dumps from Linux systems. This enables you to analyse systems without needing to generate a profile.

This is not a replacement for tools such as Rekall and Volatility which use a profile to perform a more structured analysis of memory.

Rip Raw works by taking a Raw Binary such as a Memory Dump and carves files and logs using:

* Text/binary boundaries
* File headers and file magic
* Log entries

Then puts them in a zip file for secondary processing by other tools such as Cado Response or a SIEM such as Splunk (examples below).

Example

For example, after capturing the memory of an Amazon EKS ( Elastic Kubernetes Service) system compromised with a crypto-mining worm we processed it with rip_raw:

python3 rip_raw.py -f eks-node-ncat-capture.mem

And then the large zip of logs that Rip Raw outputs can be viewed in a tool such as Cado Response (below). Approximately 36500 log events were extracted from this memory image, along with a number of binaries such as images and executables.
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjemk1QpFpb8nkq1eet0U6zpI9YLF_8jxNJ8gwbmvjEkp4DVOekWN5cv54_b__wWiGGO5diuWPH9l2jVfBDSLZl2io5wtTXXgSX2eiuTMWl8wfnzkIOkGkgLnMPWQVTfPoej5lvmXRx8FX6g9anJbDWuReW0bM8PB2clP9HxFp4PYg69JUHeKSf-77G/s2495/1%20(2).png
Or Splunk:
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjjEoiRuuGeGtw4w2UJHvSIBlUZinRpelsHL0S6u5XZsS1uAU3fhdzK7JDjbE73Wvq_lWLedLECmOGj3zPUTu_PklL_cy8jImZB5QjOC8p0VYl5Ng34APgPJVpmOPOcHZvZCal-2a9ue7K6YtkL37Y-TwcCU0nFG3BtA0oO4rf04nmayPzbeKvZSvdx/s2512/2%20(1).png

Download