hacking: security in practice
VPS masscan

someone experienced to use masscan on a 10Gbits VPS? Witch VPS you used?

submitted by /u/praisthesun
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Is IT blocking hotspot and router access through ethernet?

So the IT team at my university has started cracking down on students for using too much internet (even though it is unlimited) during class hours (streaming Netflix, torrenting MASSIVE files, etc).

They use MAC filtering for each student to limit how many devices can connect to the network. Luckily I have some Linux/basic hacking knowledge and used macchanger to change my MAC in order to bypass this.

Then they started manually blocking devices based on their usage. Eg if someone was using Netflix, connected to a VPN or proxy to bypass firewall restrictions, or had P2P (torrent) traffic on the network, they would block that device from connecting for 24 hours. Also, they started slowing the speed from gigabit to less than 10 Mbps, so now barely anything works.

We also have ethernet ports throughout the campus and in classes, which don't have any of these restrictions (other than MAC filtering), but the problem is they have somehow blocked the use of ethernet hotspot creation. I have a travel router and whenever I try to connect it with the ethernet, the router cannot give out internet access as an access point. My router has a setting to clone MAC addresses, so I have changed the MAC, but whenever I connect the port it shows up as having no internet through a connected laptop or phone.

I tried connecting my laptop directly to the ethernet port and see what happens, and somehow when I connect everything works just fine, but as soon as I open my mobile hotspot from the settings my internet gets disconnected and I have to reconnect.

First, I want to understand how they are even doing this. Also, I want to learn if there would be a way to bypass this so i can connect my router and create a hotspot.

submitted by /u/jackforfaltu
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

How I was able to delete any users’ OAUTH connections via IDOR

﷽Continue reading on Medium »
Read more...

How I was able to delete any users’ OAUTH connections via IDOR
https://medium.com/@webresearcher007/how-i-was-able-to-delete-any-users-oauth-connections-via-idor-bf3a8e8e2269?source=rss------bug_bounty-5

﷽Continue reading on Medium » (https://medium.com/@webresearcher007/how-i-was-able-to-delete-any-users-oauth-connections-via-idor-bf3a8e8e2269?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
CITRIX got a Problem with Unauthorized Users for Application Delivery Management

https://cdn-images-1.medium.com/max/640/0*icS7OKZ3ia7Yz5l0.jpg
Citrix is a cloud computing company that holds a lot of data to become an incharge of. That’s why this latest issue became a problem for…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
People Are Getting Hacked By The Cyber Criminals In Order To Get There Internet Connection Fast.

People Are Getting Hacked By The Cyber Criminals In Order To Get Their Internet Connection Fast.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
PINNACLE IS THE BEST

I had three evictions late last year which deprived me from purchasing an apartment for my family, and my other apartment was not…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
What is growth hacking?

https://cdn-images-1.medium.com/max/1200/1*4JD5zMrkapBTHYD0wpQxOw.jpeg
Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
WordPress WP HTML Mail plugin Vulnerable to XSS

https://cdn-images-1.medium.com/max/640/0*9qepydqvFV4MjP8H.png
The XSS vulnerability in the WordPress WP HTML Mail plugin for personalized emails makes it vulnerable to code injection and phishing…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Black Hat Ethical Hacking
Offensive Security Tool: HTTPLoot

___________________________
@hacking_Attack
@Hacking_Video

Norimaci - Simple And Lightweight Malware Analysis Sandbox For macOS
http://www.kitploit.com/2022/06/norimaci-simple-and-lightweight-malware.html

___________________________
@hacking_Attack
@Hacking_Video

# $P4: //depot/projects/trustedbsd/openbsm/etc/audit_control#8 $
#
dir:/var/audit
flags:lo,aa,fc,fd,pc,nt,ex <- edit here like this
minfree:5
naflags:lo,aa,fc,fd,pc,nt,ex <- edit here like this
policy:cnt,argv
filesz:2M
expire-after:10M
superuser-set-sflags-mask:has_authenticated,has_console_access
superuser-clear-sflags-mask:has_authenticated,has_console_access
member-set-sflags-mask:
member-clear-sflags-mask:has_authenticated
Usage Basic usage with OpenBSM (most standard usage) Run norimaci.py with sudo. Run a sample of malware (You can run any type of malware. For example, DMG, PKG, Mach-O binary, and so on). Wait for a while (Until, the malware can get their goal). Press "Ctrl + C " at the appropriate time in the terminal where Norimaci runs in. 2 kind of reports are generated (Norimaci_dd_Mon_yy__hh_mm_ffffff.txt and Norimaci_dd_Mon_yy__hh_mm_ffffff_timeline.csv). Confirm reports with your favorite tools (e.g. text editors, grep, less, etc). $ sudo python3 ./norimaci.py -m openbsm -o ./out/
Password:

--===[ Norimaci v0.1.0
--===[ Minoru Kobayashi [@unkn0wnbit]
[*] Launching OpenBSM agent...
[*] When runtime is complete, press CTRL+C to stop logging.
^C
[*] Termination of OpenBSM agent commencing... please wait
[*] Converting OpenBSM data ...
[*] Loading converted macOS activity data ...
[*] Saving report to: /Users/macforensics/tools/norimaci/out/Norimaci_14_Jan_20__15_55_093219.txt
[*] Saving timeline to: /Users/macforensics/tools/norimaci/out/Norimaci_14_Jan_20__15_55_093219_timeline.csv Basic usage with Monitor.app Note: Monitor.app can not run on macOS 10.15. But, it works fine on macOS 10.14 or earlier. Run norimaci.py with sudo. Enter a password after Norimaci launches Monitor.app (Monitor.app needs a password to install its kext). Run a sample of malware (You can run any type of malware. For example, DMG, PKG, Mach-O binary, and so on). Wait for a while (Until, the malware can get their goal). Press "Ctrl + C " at the appropriate time in the terminal where Norimaci runs in. 2 kind of reports are generated (Norimaci_dd_Mon_yy__hh_mm_ffffff.txt and Norimaci_dd_Mon_yy__hh_mm_ffffff_timeline.csv). Confirm reports with your favorite tools (e.g. text editors, grep, less, etc). Help of scripts norimaci.py $ python3 ./norimaci.py -h

--===[ Norimaci v0.1.0
--===[ Minoru Kobayashi [@unkn0wnbit]
usage: norimaci.py [-h] [-m MONITOR] [-j JSON] [-bl OPENBSM_LOG] [-p PROCLIST]
[-ml MONITORAPP_LOG] [-o OUTPUT] [--force] [--debug]

Light weight sandbox which works with OpenBSM or Fireeye's Monitor.app

optional arguments:
-h, --help show this help message and exit
-m MONITOR, --monitor MONITOR
Specify a program to monitor macOS activity. You can
choose 'openbsm' or 'monitorapp'.
-j JSON, --json JSON Path to a JSON file which is converted by
'openbsmconv.py' or 'monitorappconv.py'.
-bl OPENBSM_LOG, --openbsm-log OPENBSM_LOG
Path to an OpenBSM log file.
-p PROCLIST, --proclist PROCLIST
Path to a process list file to process OpenBSM log
file. A file which has ".proclist" extnsion would be
used, if this option is not specified.
-ml MONITORAPP_LOG, --monitorapp-log MONITORAPP_LOG
Path to a Monitor.app data file.
-o OUTPUT, --output OUTPUT
Path to an output directory.
--force Enable to overwrite output files.
--debug Enable debug mode. openbsmconv.py $ python3 ./openbsmconv.py -h
usage: openbsmconv.py [-h] [-f FILE] [-p PROCLIST] [-o OUT] [-c] [-rp]
[--with-failure] [--with-failure-socket] [--force]
[--debug]

Converts OpenBSM log file to JSON format.

optional arguments:
-h, --help show this help message and exit

___________________________
@hacking_Attack
@Hacking_Video

-f FILE, --file FILE Path to a bsm log file
-p PROCLIST, --proclist PROCLIST
Path to a process list file
-o OUT, --out OUT Path to an output file
-c, --console Output JSON data to stdout.
-rp, --use-running-proclist
Use current running process list instead of a existing
process list file. And, the process list is saved to a
file which places in the same directory of '--file' or
to a file which speci fied '--proclist'.
--with-failure Output records which has a failure status too.
--with-failure-socket
Output records which has a failure status too (related
socket() syscall only).
--force Enable to overwrite an existing output file.
--debug Enable debug mode. monitorappconv.py $ python3 ./monitorappconv.py -h
usage: monitorappconv.py [-h] [-f FILE] [-o OUT] [-c] [--force] [--debug]

Parses data of Fireeye Monitor.app and converts it to JSON format. Please note
that strings in JSON data are saved as UTF-8.

optional arguments:
-h, --help show this help message and exit
-f FILE, --file FILE Path to a saved data of Monitor.app.
-o OUT, --out OUT Path to an output file.
-c, --console Output JSON data to stdout.
--force Enable to overwrite an output file.
--debug Enable debug mode. Demo Analyze AppleJeus.A on macOS 10.15 Catalina with Norimaci. This demo movie was made for Japan Security Analyst Conference 2020 (JSAC2020)

___________________________
@hacking_Attack
@Hacking_Video