hacking: security in practice
Jail time and searches

I was curious to if someone gets caught with the law for hacking can the police legally search your phone for anything?

submitted by /u/hackinghat
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking a NFT Platform
https://medium.com/@mahitman1/hacking-a-nft-platform-56fc59479d3b?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Background:Continue reading on Medium » (https://medium.com/@mahitman1/hacking-a-nft-platform-56fc59479d3b?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Atlassian Confluence Server Bug Under Active Attack to Distribute Ransomware

Most of the attacks involve the use of automated exploits, security vendor says.

Dark Reading: Attacks/Breaches
DeadBolt Ransomware Actively Targets QNAP NAS Devices — Again

The QNAP network-connected devices, used to store video surveillance footage, are a juicy target for attackers, experts warn.

Dark Reading: Attacks/Breaches
WordPress Plug-in Ninja Forms Issues Update for Critical Bug

The code injection vulnerability is being actively exploited in the wild, researchers say.

Dark Reading: Attacks/Breaches
Ransomware and Phishing Remain IT's Biggest Concerns

Security teams — who are already fighting off malware challenges — are also facing renewed attacks on cloud assets and remote systems.

OSIPs - Gathers All Valid IP Addresses From All Text Files From A Directory, And Checks Them Against Whois Database, TOR Relays And Location
http://www.kitploit.com/2022/06/osips-gathers-all-valid-ip-addresses.html

___________________________
@hacking_Attack
@Hacking_Video

This script scans every file from a given folder recursively, extracts every IPv4 and IPv6 address, filters out the public IP addresses and then queries these IPs against TOR relays, WhoIs service and Location service. It outputs 4 files: a CSV file and a JSON file with all details of the IP addresses, a CSV file containing an index of every found IP address and a KML file with all the locations gathered.
Features Parses any number of files in a single run Can also be run for a single input file Extracts all unique valid IPv4 and IPv6 addresses (correctly comparing two addresses, even if they are written differently) Collects publicly available Who Is information for all public IP addresses Queries all public IP addresses against TOR relays Collects geographical location information for all public IP addresses Can be run with command line (https://www.kitploit.com/search/label/Command%20Line) parameters in non-interactive mode for easy integration in other scripts Can be run without parameters and the input values can be provided interactively Allows user to select what steps to perform or exclude Verbosely outputs information to console at every step that it performs Exports all IP addresses details in both a CSV file and a JSON file Exports a KML file that can be easily loaded on top of a map Keeps an index of all found IP addresses in a separate CSV file for easy traceback Pre-requisites: Python 3.9.x Installation To install dependencies, run: pip install -r requirements.txt Compile to executable pip install pyinstaller pyinstaller --onefile osips.py Usage python osips.py [-h] [-F INPUTFOLDER] [-f INPUTFILE] [-p INPUTFILESPATTERN] [-o OUTPUTFILESNAME] [-t {y,n,Y,N}] [-w {y,n,Y,N}] [-l {y,n,Y,N}] [-locationEndpoint LOCATIONENDPOINT] Interactively python osips.py Non-interactively python osips.py --checkTor Y --checkWhoIs Y --checkLocations Y --inputFolder testFolder/ --inputFilesPattern * --outputFilesName test Help python osips.py -h Options -h, --help Show the help message and exit -F INPUTFOLDER, --inputFolder INPUTFOLDER A folder containing files with IPs (log files, email files, text files etc). The IPs can be IPv4 and/or IPv6 and can be placed anywhere in the files. The script will parse every file in the folder and will scan for every IP -f INPUTFILE, --inputFile INPUTFILE Use this option to scan only one file instead of a folder with files. The file can be any text file that contains IP addresses (log files, email files, text files etc.) -p INPUTFILESPATTERN, --inputFilesPattern INPUTFILESPATTERN Enter the pattern to use for the files in the input folder. Example: * for all files, *.txt for text files. -o OUTPUTFILESNAME, --outputFilesName OUTPUTFILESNAME The name for the output files, WITHOUT EXTENSION. 4 different files will be created with this name: a CSV file storing the IP details, an index file storing the IP indexes, a JSON file storing the details and a KML file storing the locations. -t {y,n,Y,N}, --checkTor {y,n,Y,N} Specify if you want to check every public IP address against the TOR relays IP addresses -w {y,n,Y,N}, --checkWhoIs {y,n,Y,N} Specify if you want to extract WhoIs information for every public IP address -l {y,n,Y,N}, --checkLocations {y,n,Y,N} Specify if you want to geocode every public IP address and extract location info using https://reallyfreegeoip.org (https://reallyfreegeoip.org/) -locationEndpoint LOCATIONENDPOINT Default REST endpoint for location is "https://reallyfreegeoip.org/json/". You can specify a diffrent end point, includding placeholder. The result must be in JSON and must include the following fields: country_name, region_code, region_name, city, zip_code, time_zone, latitude, longitude, metro_code Remarks The tool extracts IPv4 addresses only in dot decimal notation (xxx.xxx.xxx.xxx). It doesn’t extract IPv4 addresses in decimal, octal or hexadecimal (https://www.kitploit.com/search/label/Hexadecimal)

___________________________
@hacking_Attack
@Hacking_Video

notation because of the high rate of false positives. Depending on the number of public IP addresses found, querying the online services could take a long time. If you are dealing with a lot of IP addresses, it is recommended to first run the tool without querying any of the services and just to extract the IP addresses. After seeing the extraction result, you can calculate an estimate of the total run time of the tool if the services are queried, and eventually choose to query only one or two of the services. TOR relays are checked at the moment of running the tool. Because these IPs are constantly changing, this information may not be very accurate. If a date can also be identified for an IP, then it should be checked against ExoneraTor at this address: https://metrics.torproject.org/exonerator.html Who Is information as well as the location information is gathered live from publicly available services, so the IP addresses are sent to these services. There are downloadable databases that would allow you to collect this information locally, but these downloads are not free and would need constant updates. This tool is not built to work with local databases. The default service used for location gathering (https://www.kitploit.com/search/label/Gathering) is https://reallyfreegeoip.org (https://reallyfreegeoip.org/). This is a free service with no limitations, but it may not be very accurate. You can change this service with another, by using the -locationEndpoint parameter of the script. You can provide another service that takes an IP address as a parameter and returns a JSON response. Use the as a placemark for the IP address location. Examples: https://ipapi.co//json, https://api.ipstack.com/?access_key=ACCESS_KEY, https://freeapi.robtex.com/ipquery/. Please note that some of these other REST endpoints (https://www.kitploit.com/search/label/Endpoints) may not return the required fields and thus will break the script’s logic. In this case, the method named RequestInfoFromRestEndpoint should be modified accordingly. Acknowledgements IPv6 regex -https://gist.github.com/dfee/6ed3a4b05cfe7a6faf40a2102408d5d8 Onion Peeler: Batch Tor Lookup Program - http://az4n6.blogspot.com/2017/02/onion-peeler-batch-tor-lookup-program.html

Download OSIPs (https://github.com/ciprianster/OSIPs)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
TryHackMe: OWASP Juice Shop — Walkthrough

https://cdn-images-1.medium.com/max/600/1*7M5E_FqQTTstJiUg7eLwVg.png
Hi! I am making these walkthroughs to keep myself motivated to learn cyber security, and ensure that I remember the knowledge gained by…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How Not to Lose Your Discord Account to a Scammer ‍♂️

https://cdn-images-1.medium.com/max/2600/1*kgt06EZfM38Hu2_-2jTRAw.png
Article crafted in collaboration with The CIA Officer

Continue reading on PowerInside Security Lab »

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
OSIPs - Gathers All Valid IP Addresses From All Text Files From A Directory, And Checks Them Against Whois Database, TOR Relays And Location

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg8m-XoPzdMQv1vLWvHwmfzq8zTHR1qqqaNI-trKcA-HSqPMYhQQq1avSA2Wt9pySKQUY7i4PTbz2sR9uXi6ih7s-8wYLc9eQMs4WLQ7bgaWNFixZtF9PgUg9-z9egJ9IDFVLNZdUQkztZpIFW9mBw5sLOy_m-4gp-V-XLxN6LeANkB8jMBVwNLM_VT/w640-h490/OSIPs.png This script scans every file from a given folder recursively, extracts every IPv4 and IPv6 address, filters out the public IP addresses and then queries these IPs against TOR relays, WhoIs service and Location service. It outputs 4 files: a CSV file and a JSON file with all details of the IP addresses, a CSV file containing an index of every found IP address and a KML file with all the locations gathered. Features* Parses any number of files in a single run
* Can also be run for a single input file
* Extracts all unique valid IPv4 and IPv6 addresses (correctly comparing two addresses, even if they are written differently)
* Collects publicly available Who Is information for all public IP addresses
* Queries all public IP addresses against TOR relays
* Collects geographical location information for all public IP addresses
* Can be run with command line parameters in non-interactive mode for easy integration in other scripts
* Can be run without parameters and the input values can be provided interactively
* Allows user to select what steps to perform or exclude
* Verbosely outputs information to console at every step that it performs
* Exports all IP addresses details in both a CSV file and a JSON file
* Exports a KML file that can be easily loaded on top of a map
* Keeps an index of all found IP addresses in a separate CSV file for easy traceback Pre-requisites:Python 3.9.x InstallationTo install dependencies, run: pip install -r requirements.txtCompile to executablepip install pyinstallerpyinstaller --onefile osips.pyUsagepython osips.py [-h] [-F INPUTFOLDER] [-f INPUTFILE] [-p INPUTFILESPATTERN] [-o OUTPUTFILESNAME] [-t {y,n,Y,N}] [-w {y,n,Y,N}] [-l {y,n,Y,N}] [-locationEndpoint LOCATIONENDPOINT]Interactivelypython osips.pyNon-interactivelypython osips.py --checkTor Y --checkWhoIs Y --checkLocations Y --inputFolder testFolder/ --inputFilesPattern * --outputFilesName testHelppython osips.py -hOptions* -h, --helpShow the help message and exit
* -F INPUTFOLDER, --inputFolder INPUTFOLDERA folder containing files with IPs (log files, email files, text files etc). The IPs can be IPv4 and/or IPv6 and can be placed anywhere in the files. The script will parse every file in the folder and will scan for every IP
* -f INPUTFILE, --inputFile INPUTFILEUse this option to scan only one file instead of a folder with files. The file can be any text file that contains IP addresses (log files, email files, text files etc.)
* -p INPUTFILESPATTERN, --inputFilesPattern INPUTFILESPATTERNEnter the pattern to use for the files in the input folder. Example: * for all files, *.txt for text files.
* -o OUTPUTFILESNAME, --outputFilesName OUTPUTFILESNAMEThe name for the output files, WITHOUT EXTENSION. 4 different files will be created with this name: a CSV file storing the IP details, an index file storing the IP indexes, a JSON file storing the details and a KML file storing the locations.
* -t {y,n,Y,N}, --checkTor {y,n,Y,N}Specify if you want to check every public IP address against the TOR relays IP addresses
* -w {y,n,Y,N}, --checkWhoIs {y,n,Y,N}Specify if you want to extract WhoIs information for every public IP address
* -l {y,n,Y,N}, --checkLocations {y,n,Y,N}Specify if you want to geocode every pub[...]

___________________________
@hacking_Attack
@Hacking_Video

lic IP address and extract location info using https://reallyfreegeoip.org
* -locationEndpoint LOCATIONENDPOINTDefault REST endpoint for location is "https://reallyfreegeoip.org/json/". You can specify a diffrent end point, includding placeholder. The result must be in JSON and must include the following fields: country_name, region_code, region_name, city, zip_code, time_zone, latitude, longitude, metro_code Remarks* The tool extracts IPv4 addresses only in dot decimal notation (xxx.xxx.xxx.xxx). It doesn’t extract IPv4 addresses in decimal, octal or hexadecimal notation because of the high rate of false positives.
* Depending on the number of public IP addresses found, querying the online services could take a long time. If you are dealing with a lot of IP addresses, it is recommended to first run the tool without querying any of the services and just to extract the IP addresses. After seeing the extraction result, you can calculate an estimate of the total run time of the tool if the services are queried, and eventually choose to query only one or two of the services.
* TOR relays are checked at the moment of running the tool. Because these IPs are constantly changing, this information may not be very accurate. If a date can also be identified for an IP, then it should be checked against ExoneraTor at this address: https://metrics.torproject.org/exonerator.html
* Who Is information as well as the location information is gathered live from publicly available services, so the IP addresses are sent to these services. There are downloadable databases that would allow you to collect this information locally, but these downloads are not free and would need constant updates. This tool is not built to work with local databases.
* The default service used for location gathering is https://reallyfreegeoip.org. This is a free service with no limitations, but it may not be very accurate. You can change this service with another, by using the -locationEndpoint parameter of the script. You can provide another service that takes an IP address as a parameter and returns a JSON response. Use the as a placemark for the IP address location. Examples: https://ipapi.co//json, https://api.ipstack.com/?access_key=ACCESS_KEY, https://freeapi.robtex.com/ipquery/. Please note that some of these other REST endpoints may not return the required fields and thus will break the script’s logic. In this case, the method named RequestInfoFromRestEndpoint should be modified accordingly. Acknowledgements* IPv6 regex -https://gist.github.com/dfee/6ed3a4b05cfe7a6faf40a2102408d5d8
* Onion Peeler: Batch Tor Lookup Program - http://az4n6.blogspot.com/2017/02/onion-peeler-batch-tor-lookup-program.html Download OSIPs

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
ORACLE CLOUD. An unprivileged user can query information about all cloud service (with ids, admin emails, public ssh keys...) without any policy allowing it and NO WAY to block it.

An unprivileged user can use OCI to query any information about the cloud without any policy allowing it. Oracle let it happen by default and after almost 2 weeks talking with their support they are not considering this as a security problem.

Whats your opinion?

How to:
$ oci --auth instance_principal oci iam compartment list --all

$ oci --auth instance_principal iam compartment list --compartment-id ocid1.compartment.oc1..XXXXXXXXX

(you can get information about resources outside the vm's compartment too)

Using OCI you can get information about ANY resource in the cloud, just using "--auth instance_principal" without any policy allowing or any way to block it.

You can get information about the machine too with the metadata API:
$ wget http://169.254.169.254/opc/v1/instance/

Any request made by your service can be used to get the admin email, public ssh key and other information about the instance.

If you upgrade the metadata api version to V2, you can block it on Ubuntu, however it can still works with Oracle Linux. But, no proper way to block it.

submitted by /u/alemunhoz
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Hacking my own home network

I'm new to hacking and I'd like to try hack my home network (for example remotely open the browser on the computer behind the wall). I'm not a skid so without ready hacking tools. Can anyone give me some tips how to do it, please?

submitted by /u/DasHeidekraut
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video