Hacking on Medium
Hack Like A Jedi | Kenobi | TryHackMe

https://cdn-images-1.medium.com/max/1964/0*fH0Mq7JniHyP3G0M.png
Hello World and welcome to HaXeZ, in this post we’re going to be channeling our inner Jedi and taking on the TryHackMe Kenobi room. This…

Continue reading on System Weakness »

___________________________
@hacking_Attack
@Hacking_Video

Pwning.eth Earns Whitehat Hall Of Fame NFT For Aurora Find

Pwning.eth has earned a Whitehat Hall of Fame NFT for his recent critical bug find in Aurora, forever securing his spot in hacking history…Continue reading on Immunefi »
Read more...

Black Hat Ethical Hacking
Recon Tool: JFScan

Recon Tool: JFScanPost Views: 14
Premium Content https://www.blackhatethicalhacking.com/wp-content/uploads/2022/05/Patreon.png Subscribe to Patreon to watch this episode.
Reading Time: 4 Minutes GitHub Link
JFScan by nullt3r, is a super-fast port scanning and service discovery using Masscan and Nmap. Scan large networks with Masscan and use Nmap’s scripting abilities to discover information about services. It also allows you to generate a report so you can analyze it and spend time focusing on the results in a stylish manner. DescriptionKilling features* Perform a large-scale scans using Nmap! Allows you to use Masscan to scan targets and execute Nmap on detected ports with custom settings. Nmap on steroids. *
* Scans targets in variety of formats, including domain names!
* Results can be produced in domain:port format.
* It works in stdin/stdout mode, allowing you to stream results to/from other tools.
* Auto-adjusts a packet rate for masscan so you don’t have to (disable it by –disable-auto-rate).
* Produces a standard Nmap XML report.
* Fully supports IPv6.
* Supports scope control, only targets defined in scope will be scanned.
See Also: So you want to be a hacker? Complete Offensive Security and Ethical Hacking Course
The JFScan is a wrapper around a super-fast port scanner Masscan. It’s designed to simplify work when scanning for open ports on targets in a variety of formats. The JFScan accepts a target in the following forms: URL, domain, or IP (including CIDR). You can specify a file with targets using argument or use stdin. It also allows you to output only the results and chain it with other tools like Nuclei. The domain:port output of JFScan is crucial if you want to discover vulnerabilities in web applications as the virtual host decides which content will be served.

Finally, it can scan discovered ports with Nmap. You can also define custom options and use Nmap’s amazing scripting capabilities.

https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/usage1.png

https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/usage2.png
JFScans logic of input and output processing:

https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/logic-of-input-and-output-processing.png
Trending: Offensive Security Tool: Mobile Security Framework (MobSF) Usagehttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/usage.png ExampleScan targets for only for ports 80 and 443 with rate of 10 kpps: $ jfscan -p 80,443 --targets targets.txt -r 10000Scan targets for top 1000 ports: $ jfscan --top-ports 1000 1.1.1.1/24You can also specify targets on stdin and pipe it to nuclei: $ cat targets.txt | jfscan --top-ports 1000 -q | httpx -silent | nucleiOr as positional parameter: $ jfscan --top-ports 1000 1.1.1.1/24 -q | httpx -silent | nucleiOr everything at once, the JFScan just does not care and scans all the targets specified: $ echo target1 | jfscan --top-ports 1000 target2 --targets targets.txt -q | httpx -silent | nucleiUtilize nmap to gather more info about discovered services: $ cat targets.txt | jfscan -p 0-65535 --nmap --nmap-options="-sV --scripts ssh-auth-methods"The targets.txt can contain targets in the following forms (IPv6 similarly): http://domain.com/domain.com1.2.3.41.2.3.0/241.1.1.1-1.1.1.30Trending: Write up: Find hidden and encrypted secrets from any website Installation1. Before installation, make sure you have the latest version of Masscan installed (tested version is 1.3.2).

First, install a libpcap-dev (Debian based distro) or libcap-devel (Centos based distro): sudo apt install libpcap-devNext, clone the official repository an[...]

___________________________
@hacking_Attack
@Hacking_Video

d install: sudo apt-get --assume-yes install git make gccgit clone https://github.com/robertdavidgraham/masscancd masscanmakesudo make install2. The Masscan requires root permissions to run. Since running binaries under root is not good idea, we will set a CAP_NET_RAW capability to the binary: sudo setcap CAP_NET_RAW+ep /usr/bin/masscan3. For installation of JFscan a python3 and pip3 is required. sudo apt install python3 python3-pipInstall JFScan: $ git clone https://github.com/nullt3r/jfscan.git$ cd jfscan$ pip3 install .If you can’t run the jfscan directly from command line you should check if $HOME/.local/bin is in your path.

Add the following line to your ~/.zshrc or ~/.bashrc: export PATH="$HOME/.local/bin:$PATH"* When scanning smaller network ranges, you can just use nmap directly, there is no need to use JFScan. You can reach up to 70% of the speed of JFScan using the following options: nmap -Pn -n -v yourTargetNetwork/26 -p- --min-parallelism 64 --min-rate 20000 --min-hostgroup 64 --randomize-hosts -sS -sVAs always, expect some false positives/negatives. DisclaimerAs always, you are responsible for your own actions. Attacking targets without prior mutual consent is illegal.
Trending: Recon Tool: Domain Analyzer https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Merch-1024x1024.png Recent Tools* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/lupo-90x90.png Digital Forensics Tool: Lupo – Malware IOC Extractor6 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/Mobile-Security-Framework-MobSF-90x90.png Offensive Security Tool: Mobile Security Framework (MobSF)7 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/metabigor-90x90.png OSINT Tool: Metabigor2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/Domain-Analyzer-90x90.png Recon Tool: Domain Analyzer3 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/05/deepsleep-90x90.png Offensive Security Tool: DeepSleep4 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/05/qsreplace-90x90.png Recon Tool: qsreplace4 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/05/Arjun-90x90.png Offensive Security Tool: Arjun1 month ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/05/Dorks-collections-list-90x90.png Recon Tool: Dorks collections list1 month ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/05/malicious-pdf-90x90.png Offensive Security Tool: malicious-pdf1 month ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/05/scanmycode-90x90.png Static Code Analysis Tool: scanmycode-ce2 months ago
The post Recon Tool: JFScan first appeared on Black Hat Ethical Hacking.

___________________________
@hacking_Attack
@Hacking_Video

Pwning.eth Earns Whitehat Hall Of Fame NFT For Aurora Find
https://medium.com/immunefi/pwning-eth-earns-whitehat-hall-of-fame-nft-for-aurora-find-fd4c52c4a025?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Pwning.eth has earned a Whitehat Hall of Fame NFT for his recent critical bug find in Aurora, forever securing his spot in hacking history…Continue reading on Immunefi » (https://medium.com/immunefi/pwning-eth-earns-whitehat-hall-of-fame-nft-for-aurora-find-fd4c52c4a025?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

WEF - Wi-Fi Exploitation Framework
http://www.kitploit.com/2022/06/wef-wi-fi-exploitation-framework.html

___________________________
@hacking_Attack
@Hacking_Video

A fully offensive framework to the 802.11 networks and protocols with different types of attacks for WPA and WEP, automated (https://www.kitploit.com/search/label/Automated) hash cracking, bluetooth hacking and much more. I recommend you my alfa adapter: Alfa AWUS036ACM, which works really great with both, 2.4 and 5 Ghz Tested and supported in Kali Linux, Parrot OS, Arch Linux and Ubuntu *However it's not finished and may have issues, try it at your own risk.* If you have any issue please, contact me or create a issue
SUPPORTED ATTACKS: Deauthentication Attack Authentication Attack Beacon Flood Attack PKMID Attack EvilTwin Attack Passive/Stealthy Attack Pixie Dust Attack Null Pin Attack Chopchop Attack Replay Attack Michael Exploitation (https://www.kitploit.com/search/label/Exploitation) Attack Caffe-Latte Attack Jamming, Reading and Writing bluetooth connections GPS Spoofing with HackRF FEATURES: Log generatorWPA/WPA2, WPS and WEP AttacksAuto handshake crackingMultiple templates for EvilTwin attackCheck monitor mode and it status2Ghz and 5Ghz attacksCustom wordlist selectorAuto detect requirementsBluetooth (https://www.kitploit.com/search/label/Bluetooth) support (Jamming, Reading, Writing)USAGE: Common usage of the framework wef -i wlan0 # Your interface name might be different or wef --interface wlan0 Once the application is working, type 'help' to view more functions and useful info. If you don't want to scan APs with every attack you can do something like this: set name my-wifi # To especify the name to attack
set time 60 # To define the total duration of the attacks that ask for the time
set packets 15 # To define the amount of packets that some attacks will send REQUIREMENTS: Don't install them manually, WEF takes care of that if you don't already have them aircrack-ng
reaver
mdk4
macchanger
hashcat
xterm
hcxtools
pixiewps
python3
btlejack
crackle
php
hostadp
dnsmasq
INSTALLATION: Checkout the Wiki (https://github.com/D3Ext/WEF/wiki/Installation) DEMO: Demo on a Parrot OS with Kitty terminal

___________________________
@hacking_Attack
@Hacking_Video

Created by D3Ext Extra If you are using bspwm, you can add this line to your bspwmrc for launching the xterm windows always beeing in floating mode (for a prettier design) bspc rule -a XTerm state=floating

Copyright © 2022, D3Ext

Download WEF (https://github.com/D3Ext/WEF)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
C# - Vulnerability found in Newtonsoft Json - Upgrade package to 13.0.1

https://external-preview.redd.it/FS7Mx1ZQk9W4haSKp36dHjPnJrDaLopveIusgdNnwH4.jpg?width=216&crop=smart&auto=webp&s=2faf2ff72a5bb1755452a4496d421803b0c88183 submitted by /u/hlenyriao
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
SSOh-No : User Enumeration And Password Spraying Tool For Testing Azure AD

SSOh-No is designed to enumerate users, password spray and perform brute force attacks against any organisation that utilises Azure AD or O365.

Generally, this endpoint provides extremely verbose errors which can be leveraged to enumerate users and validate their passwords via brute force/spraying attacks, while also failing to log any failed authentication attempts.

This tool is a weaponised version of a PoC demonstrated in the arstechnica research article which discusses the techniques utilised to exploit the endpoint.

This endpoint is known to Microsoft however, in typical fashion it has been branded a feature, not a bug.

This endpoint does enforce “smart locking” which can be bypassed by rotating IP.

Why Is This Unique?

The SSO Autologon endpoint does not contain logging of any sort bar potentially updating the users “Last Logon” time.

The following have been tested and contain no logs:

* AzureAD
* Sentinel
* Defender for Identity (Formerly Advanced Thread Protection)
* Defender for Cloud Apps

Usage

$ ./SSOh-No -h
usage: SSOh-No [-h|–help] [-e|–email “”] [-p|–password “”]
[-U|–userlist “”] [-o|–outfile “”]
Enumerate and abuse a sub-par Azure SSO endpoint.
Arguments:
-h –help Print help information
-e –email Email address to query. Example: user@domain.com
-p –password Password to spray. Example: Password123!
-U –userlist Specify userlist to enumerate
-o –outfile Specify outfile. Example: validated.txt

Upcoming Features

* Proxy Implementation to bypass smart lock
* Password brute force from password lists (single user- No plans for password list brute force against a userlist)
Download

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Kubeclarity : Tool For Detection And Management Of Software Bill Of Materials

KubeClarity is a tool for detection and management of Software Bill Of Materials (SBOM) and vulnerabilities of container images and filesystems. It scans both runtime K8s clusters and CI/CD pipelines for enhanced software supply chain security. SBOM & vulnerability detection challenges* Effective vulnerability scanning requires an accurate Software Bill Of Materials (SBOM) detection:
* Various programming languages and package managers
* Various OS distributions
* Package dependency information is usually stripped upon build

* Which one is the best scanner/SBOM analyzer?
* What should we scan: Git repos, builds, container images or runtime?
* Each scanner/analyzer has its own format – how to compare the results?
* How to manage the discovered SBOM and vulnerabilities?
* How are my applications affected by a newly discovered vulnerability? Solution* Separate vulnerability scanning into 2 phases:
* Content analysis to generate SBOM
* Scan the SBOM for vulnerabilities

* Create a pluggable infrastructure to:
* Run several content analyzers in parallel
* Run several vulnerability scanners in parallel

* Scan and merge results between different CI stages using KubeClarity CLI
* Runtime K8s scan to detect vulnerabilities discovered post-deployment
* Group scanned resources (images/directories) under defined applications to navigate the object tree dependencies (applications, resources, packages, vulnerabilities) Features* Dashboard
* Fixable vulnerabilities per severity
* Top 5 vulnerable elements (applications, resources, packages)
* New vulnerabilities trends
* Package count per license type
* Package count per programming language
* General counters

* Applications
* Automatic application detection in K8s runtime
* Create/edit/delete applications
* Per application, navigation to related:
* Resources (images/directories)
* Packages
* Vulnerabilities
* Licenses in use by the resources
* Application Resources (images/directories)
* Per resource, navigation to related:
* Applications
* Packages
* Vulnerabilities
* Packages
* Per package, navigation to related:
* Applications
* Linkable list of resources and the detecting SBOM analyzers
* Vulnerabilities
* Vulnerabilities
* Per vulnerability, navigation to related:
* Applications
* Resources
* List of detecting scanners
* K8s Runtime scan
* On-demand or scheduled scanning
* Automatic detection of target namespaces
* Scan progress and result navigation per affected element (applications, resources, packages, vulnerabilities)
* CIS Docker benchmark

* CLI (CI/CD)
* SBOM generation using multiple integrated content analyzers (Syft, cyclonedx-gomod)
* SBOM/image/directory vulnerability scanning using multiple integrated scanners (Grype, Dependency-track)
* Merging of SBOM and vulnerabilities across different CI/CD stages
* Export results to KubeClarity backend

* API
* The API for KubeClarity can be found here High level architecturehttps://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEji-NTlmT6zLPs4dGThLdXp7CZ2qYF07FZZGn3ouvvfBR8Yc5DgIrV_LGUXiHtcLf7WXJHnZ4_v6AM9hvaY-rp2JU-i5o_PATm6SbteWFt_-JZXVUHttTfEFyvvzeXgazuZZLiO_qkBYW5WT3h9McBqDqVJa2v0NYMTT_9VDauNdaJ0rwrbm8n8xfLH/s2850/architecture.png Getting startedIntegration with SBOM generators and vulnerability scannersKubeClarity content analyzer integrates with the following SBOM generators:

* Syft
* Cyclonedx-gomod

KubeClarity vulnerability scanner integrates with the following scanners:

* Grype
* Dependency-Track

The integrations with the SBOM generators can be found here, and the integrations with the vulnerability scanners can be found here here. To enable and configure the supported SBOM generators and vulnerability scanners, please check the “analyzer” and “scanner” config under the “vulnerability[...]

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Kubeclarity : Tool For Detection And Management Of Software Bill Of Materials

___________________________
@hacking_Attack
@Hacking_Video