Hacking Articles Tips Tricks Videos Tutorials
Photo
Kali Linux Tutorials
Xepor : Web Routing Framework For Reverse Engineers And Security Researchers
Xepor (pronounced /ˈzɛfə/, zephyr), a web routing framework for reverse engineers and security researchers. It provides a Flask-like API for hackers to intercept and modify HTTP request and/or HTTP response in a human-friendly coding style.
This project is meant to be used with mitmproxy. User write scripts with
If you want to step from PoC to production, from demo(e.g. http-reply-from-proxy.py, http-trailers.py, http-stream-modify.py) to something you could take out with your WiFi Pineapple, then Xepor is for you! Features* Code everything with
* Handle multiple URL routes, even multiple hosts in one
* For each route, you can choose to modify the request before connecting to server (or even return a fake response without connection to upstream), or modify the response before forwarding to user.
* Blacklist mode or whitelist mode. Only allow URL endpoints defined in scripts to connect to upstream, blocking everything else (in specific domain) with HTTP 404. Suitable for transparent proxying.
* Human readable URL path definition and matching powered by parse
* Host remapping. define rules to redirect to genuine upstream from your fake hosts. Regex matching is supported. Best for SSL stripping and server side license cracking!
* Plus all the bests from mitmproxy! ALL operation modes (
* Sniffing traffic from specific device by iptables + transparent proxy, modify the payload with xepor on the fly.
* Cracking cloud based software license. See examples/krisp/ as an example.
* Write complicated web crawler in ~100 lines of codes. See examples/polyv_scrapper/ as an example.
* … and many more.
SSL stripping is NOT provided by this project. Installationpip install xepor Quick startTake the script from examples/httpbin as an example.
In this example, we setup the mitmproxy server on
Set your Browser HTTP Proxy to
Send a GET request from http://httpbin.org/#/HTTP_Methods/get_get , Then you could see the modification made by Xepor in mitmweb interface, browser devtools or Wireshark.
The
* When user access http://httpbin.org/get, inject a query string parameter
* When user access http://httpbin.org/basic-auth/xx/xx/ (we just pretends we don’t know the password), sniff
Just what mitmproxy always do, but with code written in xepor way. https://github.com/xepor/xepor-examples/tree/main/httpbin/httpbin.pyfrom mitmproxy.http import HTTPFlow
from xepor import InterceptedAPI, RouteType
HOST_HTTPBIN = “httpbin.org”
api = InterceptedAPI(HOST_HTTPBIN)
@api.route(“/get”)
def change_your_request(flow: HTTPFlow):
“””
Modify URL query param.
Test at:
http://httpbin.org/#/HTTP_Methods/get_get
“””
flow.request.query[“payload”] = “evil_param”
@api.route(“/basic-auth/{usr}/{pwd}”, rtype=RouteType.RESPONSE)
def capture_auth(flow: HTTPFlow, usr=None, pwd=None):
“””
Sniffing password.
Test at:
http://httpbin.org/#/Auth/get_basic_auth__user___passwd_
“””
print(
f”auth @ {usr} + {pwd}:”,
f”Captured {‘successful’ if flow.response.status_code < 300 else ‘unsuccessful’} login:”,
flow.request.headers.get(“Authorization”, “”),
)
addons = [api] Download
Xepor : Web Routing Framework For Reverse Engineers And Security Researchers
Xepor (pronounced /ˈzɛfə/, zephyr), a web routing framework for reverse engineers and security researchers. It provides a Flask-like API for hackers to intercept and modify HTTP request and/or HTTP response in a human-friendly coding style.
This project is meant to be used with mitmproxy. User write scripts with
xepor, and run the script inside mitmproxy with mitmproxy -s your-script.py.If you want to step from PoC to production, from demo(e.g. http-reply-from-proxy.py, http-trailers.py, http-stream-modify.py) to something you could take out with your WiFi Pineapple, then Xepor is for you! Features* Code everything with
@api.route(), just like Flask! Write everything in one script and no if..elseany more.* Handle multiple URL routes, even multiple hosts in one
InterceptedAPIinstance.* For each route, you can choose to modify the request before connecting to server (or even return a fake response without connection to upstream), or modify the response before forwarding to user.
* Blacklist mode or whitelist mode. Only allow URL endpoints defined in scripts to connect to upstream, blocking everything else (in specific domain) with HTTP 404. Suitable for transparent proxying.
* Human readable URL path definition and matching powered by parse
* Host remapping. define rules to redirect to genuine upstream from your fake hosts. Regex matching is supported. Best for SSL stripping and server side license cracking!
* Plus all the bests from mitmproxy! ALL operation modes (
mitmproxy/ mitmweb+ regular/ transparent/ socks5/ reverse:SPEC/ upstream:SPEC) are fully supported. Use Case* Evil AP and phishing through MITM.* Sniffing traffic from specific device by iptables + transparent proxy, modify the payload with xepor on the fly.
* Cracking cloud based software license. See examples/krisp/ as an example.
* Write complicated web crawler in ~100 lines of codes. See examples/polyv_scrapper/ as an example.
* … and many more.
SSL stripping is NOT provided by this project. Installationpip install xepor Quick startTake the script from examples/httpbin as an example.
In this example, we setup the mitmproxy server on
127.0.0.1. You could change it to any IP on your machine or alternatively to the IP of your VPS. The mitmproxy server running in reverse, upstream and transparent mode requires --set connection_strategy=lazyoption to be set so that Xepor could function correctly. I recommand this option always be on for best stability.Set your Browser HTTP Proxy to
http://127.0.0.1:8080, and access web interface at http://127.0.0.1:8081/.Send a GET request from http://httpbin.org/#/HTTP_Methods/get_get , Then you could see the modification made by Xepor in mitmweb interface, browser devtools or Wireshark.
The
httpbin.pydo two things.* When user access http://httpbin.org/get, inject a query string parameter
payload=evil_paraminside HTTP request.* When user access http://httpbin.org/basic-auth/xx/xx/ (we just pretends we don’t know the password), sniff
Authorizationheaders from HTTP requests and print the password to the attacker.Just what mitmproxy always do, but with code written in xepor way. https://github.com/xepor/xepor-examples/tree/main/httpbin/httpbin.pyfrom mitmproxy.http import HTTPFlow
from xepor import InterceptedAPI, RouteType
HOST_HTTPBIN = “httpbin.org”
api = InterceptedAPI(HOST_HTTPBIN)
@api.route(“/get”)
def change_your_request(flow: HTTPFlow):
“””
Modify URL query param.
Test at:
http://httpbin.org/#/HTTP_Methods/get_get
“””
flow.request.query[“payload”] = “evil_param”
@api.route(“/basic-auth/{usr}/{pwd}”, rtype=RouteType.RESPONSE)
def capture_auth(flow: HTTPFlow, usr=None, pwd=None):
“””
Sniffing password.
Test at:
http://httpbin.org/#/Auth/get_basic_auth__user___passwd_
“””
print(
f”auth @ {usr} + {pwd}:”,
f”Captured {‘successful’ if flow.response.status_code < 300 else ‘unsuccessful’} login:”,
flow.request.headers.get(“Authorization”, “”),
)
addons = [api] Download
Giveaway #2: The Ultimate Guide to Hunt Account Takeover(2022)
INTRODUCTIONContinue reading on Medium »
Read more...
INTRODUCTIONContinue reading on Medium »
Read more...
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
How you got hacked: an overview of current 2FA/MFA exploits and security measures
https://cdn-images-1.medium.com/max/1200/1*JDsaQfhxWq8-5awXbvO87A.png
Let’s say you work at Some Company, doing Some Job. One day at work, you check your email and find that Some Company is mandating…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
How you got hacked: an overview of current 2FA/MFA exploits and security measures
https://cdn-images-1.medium.com/max/1200/1*JDsaQfhxWq8-5awXbvO87A.png
Let’s say you work at Some Company, doing Some Job. One day at work, you check your email and find that Some Company is mandating…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
How you got hacked: an overview of current 2FA/MFA exploits and security measures
Let’s say you work at Some Company, doing Some Job. One day at work, you check your email and find that Some Company is mandating…
Hacking Articles Tips Tricks Videos Tutorials
Photo
Black Hat Ethical Hacking
Researchers crack MEGA’s ‘privacy by design’ storage, encryption
Researchers crack MEGA’s ‘privacy by design’ storage, encryptionPost Views: 5
Premium Content https://www.blackhatethicalhacking.com/wp-content/uploads/2022/05/Patreon.png Subscribe to Patreon to watch this episode.
Reading Time: 2 Minutes
ETH Zurich cryptography researchers Matilda Backendal, Miro Haller, and Professor Kenneth Paterson analyzed MEGA’s source code and cryptographic architecture, uncovering a total of five vulnerabilities.
MEGA claims that its storage service is private by design, but according to researchers, the technology is beset with “serious” security issues.
Based in New Zealand, MEGA is a cloud storage service and messaging platform that offers end-to-end encryption to more than 250 million users. MEGA also allows users to make audio and video calls.
The company calls itself a “zero-knowledge” encryption service built with “privacy by design”.
“All your data on MEGA is encrypted with a key derived from your password; in other words, your password is your main encryption key,” the organization says. “MEGA does not have access to your password or your data.”
However, according to the ETH Zurich University, based in Switzerland, in-depth testing of the platform has revealed “security holes that would allow the provider to decrypt and manipulate customer data”, despite its marketing claims to the contrary.
ETH Zurich cryptography researchers Matilda Backendal, Miro Haller, and Professor Kenneth Paterson analyzed MEGA’s source code and cryptographic architecture, uncovering a total of five vulnerabilities.
See Also: So you want to be a hacker? Complete Offensive Security and Ethical Hacking Course https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Solutions-1.png Encryption crackedAfter recreating part of the MEGA platform and attempting to brute-force their own accounts, the team says they found that using one main key represents a “fundamental” weakness in the service.
A paper (PDF) describing the flaw says that the MEGA client derives an authentication key from a user’s password. This key is then used to encrypt other key material, files, and more.
A lack of integrity protection of ciphertexts containing keys breaks the confidentiality of the master key and overall encryption system, according to the researchers. This permits integrity attacks, RSA key and plaintext recovery attacks, and establishes an RSA decryption attack vector.
By hijacking only a session ID, it takes a maximum of 512 login attempts to break into a MEGA account.
“An additional manipulation of the MEGA software program on the computer of the victim can force their user account to constantly log in automatically,” the researchers said. “This shortens the time needed to fully reveal the key to just a few minutes.”
It then may be possible to compromise other keys used on the MEGA platform.
Potential post-attack vectors could include stealing user data or even uploading files – such as illegal or compromising images and video – locking up the account, and then blackmailing the targeted individual.
Trending: Internet scans find 1.6 million secrets leaked by websites MEGA responsePaterson said the team reported its findings to MEGA on March 24 and proposed ways to resolve the security holes.
While MEGA apparently “decided to react in ways that are different than what we suggested,” according to the researcher, the initial attack vector on the RSA key has now been patched.
When approached for comment, MEGA pointed us toward a security advisory which says the first fix has been rolled out and additional patches are being developed.
According to MEGA, only customers that have logged into th[...]
___________________________
@hacking_Attack
@Hacking_Video
Researchers crack MEGA’s ‘privacy by design’ storage, encryption
Researchers crack MEGA’s ‘privacy by design’ storage, encryptionPost Views: 5
Premium Content https://www.blackhatethicalhacking.com/wp-content/uploads/2022/05/Patreon.png Subscribe to Patreon to watch this episode.
Reading Time: 2 Minutes
ETH Zurich cryptography researchers Matilda Backendal, Miro Haller, and Professor Kenneth Paterson analyzed MEGA’s source code and cryptographic architecture, uncovering a total of five vulnerabilities.
MEGA claims that its storage service is private by design, but according to researchers, the technology is beset with “serious” security issues.
Based in New Zealand, MEGA is a cloud storage service and messaging platform that offers end-to-end encryption to more than 250 million users. MEGA also allows users to make audio and video calls.
The company calls itself a “zero-knowledge” encryption service built with “privacy by design”.
“All your data on MEGA is encrypted with a key derived from your password; in other words, your password is your main encryption key,” the organization says. “MEGA does not have access to your password or your data.”
However, according to the ETH Zurich University, based in Switzerland, in-depth testing of the platform has revealed “security holes that would allow the provider to decrypt and manipulate customer data”, despite its marketing claims to the contrary.
ETH Zurich cryptography researchers Matilda Backendal, Miro Haller, and Professor Kenneth Paterson analyzed MEGA’s source code and cryptographic architecture, uncovering a total of five vulnerabilities.
See Also: So you want to be a hacker? Complete Offensive Security and Ethical Hacking Course https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Solutions-1.png Encryption crackedAfter recreating part of the MEGA platform and attempting to brute-force their own accounts, the team says they found that using one main key represents a “fundamental” weakness in the service.
A paper (PDF) describing the flaw says that the MEGA client derives an authentication key from a user’s password. This key is then used to encrypt other key material, files, and more.
A lack of integrity protection of ciphertexts containing keys breaks the confidentiality of the master key and overall encryption system, according to the researchers. This permits integrity attacks, RSA key and plaintext recovery attacks, and establishes an RSA decryption attack vector.
By hijacking only a session ID, it takes a maximum of 512 login attempts to break into a MEGA account.
“An additional manipulation of the MEGA software program on the computer of the victim can force their user account to constantly log in automatically,” the researchers said. “This shortens the time needed to fully reveal the key to just a few minutes.”
It then may be possible to compromise other keys used on the MEGA platform.
Potential post-attack vectors could include stealing user data or even uploading files – such as illegal or compromising images and video – locking up the account, and then blackmailing the targeted individual.
Trending: Internet scans find 1.6 million secrets leaked by websites MEGA responsePaterson said the team reported its findings to MEGA on March 24 and proposed ways to resolve the security holes.
While MEGA apparently “decided to react in ways that are different than what we suggested,” according to the researcher, the initial attack vector on the RSA key has now been patched.
When approached for comment, MEGA pointed us toward a security advisory which says the first fix has been rolled out and additional patches are being developed.
According to MEGA, only customers that have logged into th[...]
___________________________
@hacking_Attack
@Hacking_Video
Black Hat Ethical Hacking
Researchers crack MEGA’s ‘privacy by design’ storage, encryption | Black Hat Ethical Hacking
ETH Zurich cryptography researchers Matilda Backendal, Miro Haller, and Professor Kenneth Paterson analyzed MEGA’s source code and cryptographic architecture, uncovering a total of five vulnerabilities.
Hacking Articles Tips Tricks Videos Tutorials
Black Hat Ethical Hacking Researchers crack MEGA’s ‘privacy by design’ storage, encryption Researchers crack MEGA’s ‘privacy by design’ storage, encryptionPost Views: 5 Premium Content https://www.blackhatethicalhacking.com/wp-content/uploads/2022/05/Patreon.png…
eir account at least 512 times could be at risk – and this does not include resuming existing sessions.
Furthermore, the organization says that to take advantage of the cryptographic flaws, attackers would need to “gain control over the heart of MEGA’s server infrastructure or achieve a successful man[ipulator]-in-the-middle attack on the user’s TLS connection to MEGA”.
“The reported vulnerabilities would have required MEGA to become a bad actor against certain of its users, or otherwise could only be exploited if another party compromised MEGA’s API servers or TLS connections without being noticed,” the firm added.
Trending: Recon Tool: JFScan Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?
If you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com
The Daily Swig passed on this reaction to researchers at ETH Zurich who responded by saying MEGA had only resolved some of the security shortcomings that they had identified:
As detailed on the webpage of the paper [1], we contacted MEGA on March 24, 2022, to inform them of the vulnerabilities. They responded the same day and acknowledged the issues. They have been very open and communicative throughout. As part of our disclosure, we provided them with three sets of countermeasures, ranging from ‘immediate’ to ‘recommended’.
MEGA decided to go with a different patch, which protects against the first three out of our five attacks. You can read more about this in their blog post [2]. We continue to stand by our recommended countermeasures, which we believe would protect against our attacks (and others) in a more robust way than the fix that MEGA decided for.
Trending: Write up: How to schedule tasks the right way in Linux, using crontab
Source: portswigger.net Source Linkhttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Merch-1024x1024.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/f9ed623c5c-90x90.jpg Google Warns Spyware Being Deployed Against Android, iOS Users24 hours ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/170720-poulsen-fancy-bear-tease_zzzwzw-90x90.jpg Fancy Bear Uses Nuke Threat Lure to Exploit 1-Click Bug4 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/intro_toddycat_apt-800x450-1-90x90.jpg Elusive ToddyCat APT Targets Microsoft Exchange Servers5 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/office-365-90x90.jpg Office 365 Config Loophole Opens OneDrive, SharePoint Data to Ransomware Attack6 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/cyber-1-90x90.jpg Internet scans find 1.6 million secrets leaked by websites1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/malicious-chrome-extensions-feature-90x90.jpg Google Chrome extensions can be fingerprinted to track you online1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/android_malware-700x394-1-90x90.jpg New MaliBot Android banking malware spreads as a crypto miner2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/Cisco_Systems_Bug-90x90.jpg Cisco Secure Email bug can let attackers bypass authentication2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/android-malware-90x90.jpg Android malware on the Google Play Store gets 2 million downloads2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/Linux-90x90.jpg New Linux rootkit, Syslogk uses magic packets to trigger backdoor2 weeks ago
The post Researchers crack MEGA’s ‘privacy by design’ storage, encryption first appeared on Black Hat Ethical Hacking.
___________________________
@hacking_Attack
@Hacking_Video
Furthermore, the organization says that to take advantage of the cryptographic flaws, attackers would need to “gain control over the heart of MEGA’s server infrastructure or achieve a successful man[ipulator]-in-the-middle attack on the user’s TLS connection to MEGA”.
“The reported vulnerabilities would have required MEGA to become a bad actor against certain of its users, or otherwise could only be exploited if another party compromised MEGA’s API servers or TLS connections without being noticed,” the firm added.
Trending: Recon Tool: JFScan Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?
If you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com
The Daily Swig passed on this reaction to researchers at ETH Zurich who responded by saying MEGA had only resolved some of the security shortcomings that they had identified:
As detailed on the webpage of the paper [1], we contacted MEGA on March 24, 2022, to inform them of the vulnerabilities. They responded the same day and acknowledged the issues. They have been very open and communicative throughout. As part of our disclosure, we provided them with three sets of countermeasures, ranging from ‘immediate’ to ‘recommended’.
MEGA decided to go with a different patch, which protects against the first three out of our five attacks. You can read more about this in their blog post [2]. We continue to stand by our recommended countermeasures, which we believe would protect against our attacks (and others) in a more robust way than the fix that MEGA decided for.
Trending: Write up: How to schedule tasks the right way in Linux, using crontab
Source: portswigger.net Source Linkhttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Merch-1024x1024.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/f9ed623c5c-90x90.jpg Google Warns Spyware Being Deployed Against Android, iOS Users24 hours ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/170720-poulsen-fancy-bear-tease_zzzwzw-90x90.jpg Fancy Bear Uses Nuke Threat Lure to Exploit 1-Click Bug4 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/intro_toddycat_apt-800x450-1-90x90.jpg Elusive ToddyCat APT Targets Microsoft Exchange Servers5 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/office-365-90x90.jpg Office 365 Config Loophole Opens OneDrive, SharePoint Data to Ransomware Attack6 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/cyber-1-90x90.jpg Internet scans find 1.6 million secrets leaked by websites1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/malicious-chrome-extensions-feature-90x90.jpg Google Chrome extensions can be fingerprinted to track you online1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/android_malware-700x394-1-90x90.jpg New MaliBot Android banking malware spreads as a crypto miner2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/Cisco_Systems_Bug-90x90.jpg Cisco Secure Email bug can let attackers bypass authentication2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/android-malware-90x90.jpg Android malware on the Google Play Store gets 2 million downloads2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/Linux-90x90.jpg New Linux rootkit, Syslogk uses magic packets to trigger backdoor2 weeks ago
The post Researchers crack MEGA’s ‘privacy by design’ storage, encryption first appeared on Black Hat Ethical Hacking.
___________________________
@hacking_Attack
@Hacking_Video
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
How To Tell You Have Been Hacked — Tips To Defend Your Network
https://cdn-images-1.medium.com/max/2600/1*90f-xU1ImcFWfmGCSJ0r5A.jpeg
There is no one way you can be hacked but many. And it is very important in today’s world that you know how to recognize these signs, so…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
How To Tell You Have Been Hacked — Tips To Defend Your Network
https://cdn-images-1.medium.com/max/2600/1*90f-xU1ImcFWfmGCSJ0r5A.jpeg
There is no one way you can be hacked but many. And it is very important in today’s world that you know how to recognize these signs, so…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
How To Tell You Have Been Hacked — Tips To Defend Your Network
There is no one way you can be hacked but many. And it is very important in today’s world that you know how to recognize these signs, so…
secureCodeBox (SCB) - Continuous Secure Delivery Out Of The Box
http://www.kitploit.com/2022/06/securecodebox-scb-continuous-secure.html
___________________________
@hacking_Attack
@Hacking_Video
http://www.kitploit.com/2022/06/securecodebox-scb-continuous-secure.html
___________________________
@hacking_Attack
@Hacking_Video
KitPloit - PenTest & Hacking Tools
secureCodeBox (SCB) - Continuous Secure Delivery Out Of The Box
secureCodeBox is a kubernetes (https://www.kitploit.com/search/label/Kubernetes) based, modularized toolchain for continuous security scans (https://www.kitploit.com/search/label/Scans) of your software project. Its goal is to orchestrate and easily automate a bunch of security-testing tools out of the box.
For additional documentation aspects please have a look at our documentation website (https://docs.securecodebox.io/): Purpose of this Project The typical way to ensure application security is to hire a security specialist (aka penetration tester) at some point in your project to check the application for security bugs and vulnerabilities. Usually, this check is done at a later stage of the project and has two major drawbacks: Nowadays, a lot of projects do continuous delivery, which means the developers deploy new versions multiple times each day. The penetration tester is only able to check a single snapshot, but some further commits could introduce new security issues. To ensure ongoing application security, the penetration tester should also continuously test the application. Unfortunately, such an approach is rarely financially feasible. Due to a typically time boxed analysis, the penetration tester has to focus on trivial security issues (low-hanging fruit) and therefore will probably not address the serious, non-obvious ones. With the secureCodeBox we provide a toolchain for continuous scanning (https://www.kitploit.com/search/label/Scanning) of applications to find the low-hanging fruit issues early in the development process and free the resources of the penetration tester to concentrate on the major security issues.
___________________________
@hacking_Attack
@Hacking_Video
For additional documentation aspects please have a look at our documentation website (https://docs.securecodebox.io/): Purpose of this Project The typical way to ensure application security is to hire a security specialist (aka penetration tester) at some point in your project to check the application for security bugs and vulnerabilities. Usually, this check is done at a later stage of the project and has two major drawbacks: Nowadays, a lot of projects do continuous delivery, which means the developers deploy new versions multiple times each day. The penetration tester is only able to check a single snapshot, but some further commits could introduce new security issues. To ensure ongoing application security, the penetration tester should also continuously test the application. Unfortunately, such an approach is rarely financially feasible. Due to a typically time boxed analysis, the penetration tester has to focus on trivial security issues (low-hanging fruit) and therefore will probably not address the serious, non-obvious ones. With the secureCodeBox we provide a toolchain for continuous scanning (https://www.kitploit.com/search/label/Scanning) of applications to find the low-hanging fruit issues early in the development process and free the resources of the penetration tester to concentrate on the major security issues.
___________________________
@hacking_Attack
@Hacking_Video
KitPloit - PenTest & Hacking Tools
Leading source of security tools, hacking tools, cybersecurity and network security. Learn about new tools and updates in one place.
The purpose of secureCodeBox is not to replace the penetration testers or make them obsolete. We strongly recommend to run extensive tests by experienced penetration testers on all your applications. Important note: The secureCodeBox is no simple one-button-click-solution! You must have a deep understanding of security and how to configure the scanners. Furthermore, an understanding of the scan (https://www.kitploit.com/search/label/Scan) results and how to interpret them is also necessary. There is a German article about Security DevOps – Angreifern (immer) einen Schritt voraus (http://www.sigs.de/public/ots/2017/OTS_DevOps_2017/Seedorff_Pfaender_OTS_%20DevOps_2017.pdf) in the software engineering journal OBJEKTSpektrum (https://www.sigs-datacom.de/fachzeitschriften/objektspektrum.html). Quickstart You can find resources to help you get started on our documentation website (https://docs.securecodebox.io/) including instruction on how to install the secureCodeBox (https://docs.securecodebox.io/docs/getting-started/installation) and guides to help you run your first scans (https://docs.securecodebox.io/docs/getting-started/first-scans) with it. Architecture Overview
___________________________
@hacking_Attack
@Hacking_Video
___________________________
@hacking_Attack
@Hacking_Video
KitPloit - PenTest & Hacking Tools
Leading source of security tools, hacking tools, cybersecurity and network security. Learn about new tools and updates in one place.
Upgrading For the steps required for upgrading your secureCodeBox installation, see Upgrading (https://github.com/secureCodeBox/secureCodeBox/blob/main/UPGRADING.md). License Code of secureCodeBox is licensed under the Apache License 2.0 (https://github.com/secureCodeBox/secureCodeBox/blob/master/LICENSE). Community You are welcome, please join us on... GitHub (https://github.com/secureCodeBox/) Slack (https://join.slack.com/t/securecodebox/shared_invite/enQtNDU3MTUyOTM0NTMwLTBjOWRjNjVkNGEyMjQ0ZGMyNDdlYTQxYWQ4MzNiNGY3MDMxNThkZjJmMzY2NDRhMTk3ZWM3OWFkYmY1YzUxNTU) Twitter (https://twitter.com/secureCodeBox) secureCodeBox is an official OWASP (https://www.owasp.org/index.php/OWASP_secureCodeBox) project. Author Information Sponsored and maintained by iteratec GmbH (https://www.iteratec.com/) - secureCodeBox.io (https://www.securecodebox.io/)
Download secureCodeBox (https://github.com/secureCodeBox/secureCodeBox)
___________________________
@hacking_Attack
@Hacking_Video
Download secureCodeBox (https://github.com/secureCodeBox/secureCodeBox)
___________________________
@hacking_Attack
@Hacking_Video
GitHub
secureCodeBox/UPGRADING.md at main · secureCodeBox/secureCodeBox
secureCodeBox (SCB) - continuous secure delivery out of the box - secureCodeBox/UPGRADING.md at main · secureCodeBox/secureCodeBox
hacking: security in practice
How do renting phone number websites work?
How do websites that are able to receive the sms in the browser?
Are the sim cards connected to multiple SIM800L?
submitted by /u/GoldeN2k1
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
How do renting phone number websites work?
How do websites that are able to receive the sms in the browser?
Are the sim cards connected to multiple SIM800L?
submitted by /u/GoldeN2k1
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
How do renting phone number websites work?
How do websites like that are able to receive the sms in the browser? Are the sim cards connected to multiple SIM800L?
hacking: security in practice
Is it possible to access system sounds on Bluetooth headphones
Not sure if this is the correct subreddit for this kinda question. Is it possible to access where system sound files are stored on a pair of Bluetooth headphones? An example being changing the "Power On" voice that typically happens when you power on the device. I've done some googling and it seems this hasn't been explored too much, is this because it's impossible?
submitted by /u/pidgyedits
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
Is it possible to access system sounds on Bluetooth headphones
Not sure if this is the correct subreddit for this kinda question. Is it possible to access where system sound files are stored on a pair of Bluetooth headphones? An example being changing the "Power On" voice that typically happens when you power on the device. I've done some googling and it seems this hasn't been explored too much, is this because it's impossible?
submitted by /u/pidgyedits
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
Is it possible to access system sounds on Bluetooth headphones
Not sure if this is the correct subreddit for this kinda question. Is it possible to access where system sound files are stored on a pair of...
Hacking Articles Tips Tricks Videos Tutorials
Photo
Kali Linux Tutorials
Octopus : Open Source Pre-Operation C2 Server Based On Python And Powershell
Octopus is an open source, pre-operation C2 server based on python which can control an Octopus powershell agent through HTTP/S.
The main purpose of creating Octopus is for use before any red team operation, where rather than starting the engagement with your full operational arsenal and infrastructure, you can use Octopus first to attack the target and gather information before you start your actual red team operation.
Octopus works in a very simple way to execute commands and exchange information with the C2 over a well encrypted channel, which makes it inconspicuous and undetectable from almost every AV, endpoint protection, and network monitoring solution.
One cool feature in Octopus is called ESA, which stands for “Endpoint Situational Awareness”, which will gather some important information about the target that will help you to gain better understanding of the target network endpoints that you will face during your operation, thus giving you a shot to customize your real operation based on this information.
Octopus is designed to be stealthy and covert while communicating with the C2, as it uses AES-256 by default for its encrypted channel between the powershell agent and the C2 server. You can also opt for using SSL/TLS by providing a valid certficate for your domain and configuring the Octopus C2 server to use it. Octopus Key FeaturesOctopus is packed with a number of features that allows you to gain an insight into your upcoming engagement before you actually need to deploy your full aresenal or tools and techniques, such as:
* Control agents throught HTTP/S.
* Execute system commands.
* Download / Upload files.
* Load external powershell modules.
* Use encrypted channels (AES-256) between C2 and agents.
* Use inconspicuous techniques to execute commands and transfer results.
* Create custom and multiple listeners for each target.
* Generate different types of payloads.
* Support all windows versions with powershell 2.0 and higher.
* Run Octopus windows executable agent without touching powershell.exe process.
* Gather information automatically from the endpoint (endpoint situational awareness) feature. RequirementsYou can install all of Octopus’ requirements via :
You can install nasm on Debian based distros using:
* Ubuntu (18.04)
* Ubuntu (16.04)
* Kali Linux (2019.2)
You will also need to install mono to make sure that you can compile the C# source without issues.
Octopus depends on mono-csc binary to compile the C# source and you can install it by the following command
you can use Octopus without installing mono but you will not be able to use
Also please note that compling C# depends on the
If you encounter any issues using Octopus, feel free to file a bug report! InstallationFirst of all make sure to download the latest version of Octopus using the following command :
___________________________
@hacking_Attack
@Hacking_Video
Octopus : Open Source Pre-Operation C2 Server Based On Python And Powershell
Octopus is an open source, pre-operation C2 server based on python which can control an Octopus powershell agent through HTTP/S.
The main purpose of creating Octopus is for use before any red team operation, where rather than starting the engagement with your full operational arsenal and infrastructure, you can use Octopus first to attack the target and gather information before you start your actual red team operation.
Octopus works in a very simple way to execute commands and exchange information with the C2 over a well encrypted channel, which makes it inconspicuous and undetectable from almost every AV, endpoint protection, and network monitoring solution.
One cool feature in Octopus is called ESA, which stands for “Endpoint Situational Awareness”, which will gather some important information about the target that will help you to gain better understanding of the target network endpoints that you will face during your operation, thus giving you a shot to customize your real operation based on this information.
Octopus is designed to be stealthy and covert while communicating with the C2, as it uses AES-256 by default for its encrypted channel between the powershell agent and the C2 server. You can also opt for using SSL/TLS by providing a valid certficate for your domain and configuring the Octopus C2 server to use it. Octopus Key FeaturesOctopus is packed with a number of features that allows you to gain an insight into your upcoming engagement before you actually need to deploy your full aresenal or tools and techniques, such as:
* Control agents throught HTTP/S.
* Execute system commands.
* Download / Upload files.
* Load external powershell modules.
* Use encrypted channels (AES-256) between C2 and agents.
* Use inconspicuous techniques to execute commands and transfer results.
* Create custom and multiple listeners for each target.
* Generate different types of payloads.
* Support all windows versions with powershell 2.0 and higher.
* Run Octopus windows executable agent without touching powershell.exe process.
* Gather information automatically from the endpoint (endpoint situational awareness) feature. RequirementsYou can install all of Octopus’ requirements via :
pip install -r requirements.txtYou need to install nasmfor linux and ‘mingw-w64’ compiler to use the shellcoding feature and the spoofed args agent.You can install nasm on Debian based distros using:
apt install nasmAnd you can install mingw-w64on Debian based distros using: apt install mingw-w64Octopus has been tested on the following operating systems:* Ubuntu (18.04)
* Ubuntu (16.04)
* Kali Linux (2019.2)
You will also need to install mono to make sure that you can compile the C# source without issues.
Octopus depends on mono-csc binary to compile the C# source and you can install it by the following command
apt install mono-develwhich has been tested on kali and ubuntu 16.04.you can use Octopus without installing mono but you will not be able to use
generate_execommand.Also please note that compling C# depends on the
System.Management.Automation.dllassembly with SHA1 hash a43ed886b68c6ee913da85df9ad2064f1d81c470.If you encounter any issues using Octopus, feel free to file a bug report! InstallationFirst of all make sure to download the latest version of Octopus using the following command :
git clone https://github.com/mhaskar/Octopus/Then you need to install the requirements using the following command : pip install -r requirements.txtAfter that you can start the octopus server by running the following : ./octopus.pyYou will by greeted with the following once you run it : UsageUsing Octopus is quite simple to use, as you[...]___________________________
@hacking_Attack
@Hacking_Video
Kali Linux Tutorials
Octopus : Open Source Pre-Operation C2 Server Based On Python
Octopus is an open source, pre-operation C2 server based on python which can control an Octopus powershell agent through HTTP/S.
Hacking Articles Tips Tricks Videos Tutorials
Kali Linux Tutorials Octopus : Open Source Pre-Operation C2 Server Based On Python And Powershell Octopus is an open source, pre-operation C2 server based on python which can control an Octopus powershell agent through HTTP/S. The main purpose of creating…
just need to start a listener and generate your agent based on that listener’s information.
You can generate as many listeners as you need, and then you can start interacting with your agents that connect to them. Profile setupBefore you can start using Octopus you have to setup a URL handling profile which will control the C2 behavior and functions, as Octopus is an HTTP based C2 thus it depends on URLs to handle the connections and to guarantee that the URLs will not serve as a signatures or IoC in the network you are currently attacking, the URLs can be easily customized and renamed as needed.
Profile setup currently only support URL handling, auto kill value and headers.
Setting up your profile
To start setting up your profile you need to edit the
* file_reciever_url: handles file downloading.
* report_url: handle ESA reports.
* command_send_url: handles the commands that will be sent to the target.
* command_receiver_url: handles commands will be executed on the target.
* first_ping_url: handles the first connection from the target.
* server_response_header: this header will show in every response.
* auto_kill: variable to control when the agent will be killed after N failed connections with the C2
Example: !/usr/bin/python3this is the web listener profile for Octopus C2
you can customize your profile to handle a specific URLs to communicate with the agent
TODO : add the ability to customize the request headers
handling the file downloading
Ex : /anything
Ex : /anything.php
file_receiver_url = “/messages”
handling the report generation
Ex : /anything
Ex : /anything.php
report_url = “/calls”
command sending to agent (store the command will be executed on a host)
leave as it with the same format
Ex : /profile/
Ex : /messages/
Ex : /bills/
command_send_url = “/view/”
handling the executed command
Ex : /anything
Ex : /anything.php
command_receiver_url = “/bills”
handling the first connection from the agent
Ex : /anything
Ex : /anything.php
first_ping_url = “/login”
will return in every response as Server header
server_response_header = “nginx”
will return white page that includes HTA script
mshta_url = “/hta”
auto kill value after n tries
auto_kill = 10
The agent and the listeners will be configured to use this profile to communicate with each other. Next we need to know how to create a listener. ListenersOctopus has two main listeners,”http listener” and “https listener” , and the options of the two listeners are mostly identical.
HTTP listener
* BindIP Defines the IP address that will be used by the listener.
* BindPort Defines the port you want to listen on.
* Hostname Will be used to request the payload from.
* Interval How number of seconds the agent will wait before checking for commands.
* URL The name of the page hosting the payload.
* Listener_name Listener name to use.
you can also view an example of it by running the
Octopus >>listen_http
[-] Please check listener arguments !
Syntax : listen_http BindIP BindPort hostname interval URL listener_name
Example (with domain) : listen_http 0.0.0.0 8080 myc2.live 5 comments.php op1_listener
Example (without domain) : listen_http 0.0.0.0 8080 172.0.1.3 5 profile.php op1_listener
Options info :
BindIP IP address that will be used by the listener
BindPort port you want to listen on
Hostname will be used to request the payload from
Interval how may seconds that agent will wait before check for commands
URL page name will hold the payload
Listener_name listener name to use
Octopus >>
And we can start a listener using the following command :
Octopus >>listen_http 0.0.0.0 8080 192.168.178.1 5 page.php operation1
Octopus >[...]
___________________________
@hacking_Attack
@Hacking_Video
You can generate as many listeners as you need, and then you can start interacting with your agents that connect to them. Profile setupBefore you can start using Octopus you have to setup a URL handling profile which will control the C2 behavior and functions, as Octopus is an HTTP based C2 thus it depends on URLs to handle the connections and to guarantee that the URLs will not serve as a signatures or IoC in the network you are currently attacking, the URLs can be easily customized and renamed as needed.
Profile setup currently only support URL handling, auto kill value and headers.
Setting up your profile
To start setting up your profile you need to edit the
profile.pyfile , which contains a number of key variables, which are:* file_reciever_url: handles file downloading.
* report_url: handle ESA reports.
* command_send_url: handles the commands that will be sent to the target.
* command_receiver_url: handles commands will be executed on the target.
* first_ping_url: handles the first connection from the target.
* server_response_header: this header will show in every response.
* auto_kill: variable to control when the agent will be killed after N failed connections with the C2
Example: !/usr/bin/python3this is the web listener profile for Octopus C2
you can customize your profile to handle a specific URLs to communicate with the agent
TODO : add the ability to customize the request headers
handling the file downloading
Ex : /anything
Ex : /anything.php
file_receiver_url = “/messages”
handling the report generation
Ex : /anything
Ex : /anything.php
report_url = “/calls”
command sending to agent (store the command will be executed on a host)
leave as it with the same format
Ex : /profile/
Ex : /messages/
Ex : /bills/
command_send_url = “/view/”
handling the executed command
Ex : /anything
Ex : /anything.php
command_receiver_url = “/bills”
handling the first connection from the agent
Ex : /anything
Ex : /anything.php
first_ping_url = “/login”
will return in every response as Server header
server_response_header = “nginx”
will return white page that includes HTA script
mshta_url = “/hta”
auto kill value after n tries
auto_kill = 10
The agent and the listeners will be configured to use this profile to communicate with each other. Next we need to know how to create a listener. ListenersOctopus has two main listeners,”http listener” and “https listener” , and the options of the two listeners are mostly identical.
HTTP listener
listen_httpcommand takes the following arguments to start:* BindIP Defines the IP address that will be used by the listener.
* BindPort Defines the port you want to listen on.
* Hostname Will be used to request the payload from.
* Interval How number of seconds the agent will wait before checking for commands.
* URL The name of the page hosting the payload.
* Listener_name Listener name to use.
you can also view an example of it by running the
listen_httpcommand:Octopus >>listen_http
[-] Please check listener arguments !
Syntax : listen_http BindIP BindPort hostname interval URL listener_name
Example (with domain) : listen_http 0.0.0.0 8080 myc2.live 5 comments.php op1_listener
Example (without domain) : listen_http 0.0.0.0 8080 172.0.1.3 5 profile.php op1_listener
Options info :
BindIP IP address that will be used by the listener
BindPort port you want to listen on
Hostname will be used to request the payload from
Interval how may seconds that agent will wait before check for commands
URL page name will hold the payload
Listener_name listener name to use
Octopus >>
And we can start a listener using the following command :
listen_http 0.0.0.0 8080 192.168.178.1 5 page.php operation1The following result will be returned:Octopus >>listen_http 0.0.0.0 8080 192.168.178.1 5 page.php operation1
Octopus >[...]
___________________________
@hacking_Attack
@Hacking_Video