Hacking on Medium
Planning your CYBER SECURITY budget smartly!

https://cdn-images-1.medium.com/max/700/0*zTFOiVpkt4qUDOT7
If you are an organization or an individual from the IT sector or someone working from home, continuously using the internet, or whether…

Continue reading on rootissh »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Best Wifi/Wireless Hacking Tools That You should Try

https://cdn-images-1.medium.com/max/1200/1*IFACBdEwZu78-tMq1Y7SIA.jpeg
Wireless Hacking Tools

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Friday Five: MPs urge UK ban on Chinese CCTV firms

https://cdn-images-1.medium.com/max/2048/1*1eLBWBIcWEDdSpfDT2Qwvg.jpeg
Zone’s Rianna Mitchell handpicks and shares the five best new stories on digital trends, experiences and technologies…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Find SSRF , LFI , XSS using httpx , waybackurls , gf , gau , qsreplace

https://cdn-images-1.medium.com/max/600/0*PC6q_X86P5kj1wTK.gif
Hello Beautiful hackers

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
Haxx - Untethered + Unsandboxed Code Execution Haxx As Root On iOS 14 - iOS 14.8.1

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhWVCO1LxlAqpuAhEH4rFW4Kv0SI6KfZrmKnEDYgb_Ds93Tcb0EmC5R8tNbovKecRK6A_yF6sSPi7G7Tv50jBTZHa9oAXK69Wa76J8guIBa5u41HRUgKuV92-NAO1GI86zXWj3eOC_UR_IhvR1lKmLmSWWKBhTnwSGfK1nYp95zAx7sRjM1keq3KhYH/w640-h426/Unsandboxed.jpg
Untethered + Unsandboxed code execution haxx as root on iOS 14 - iOS 14.8.1.

Based on CoreTrustDemo, also please note that certificates are not copyrightable.
Usage

Note: requires macOS + existing jailbreak

Get up and running

1. On your mac import dev_certificate.p12 into the keychain, and the password is password.
2. Modify haxx.c to include your own code (if you need it).
3. Run maketo build
4. On the device, Copy /System/Library/PrivateFrameworks/CoreAnalytics.framework/Support/analyticsdto /System/Library/PrivateFrameworks/CoreAnalytics.framework/Support/analyticsd.back
5. Then replace /System/Library/PrivateFrameworks/CoreAnalytics.framework/Support/analyticsdwith /usr/bin/fileproviderctl
6. Create the /private/var/haxxdirectory, mode should be 0777
7. Copy fileproviderctl_internaland haxxgenerated from the build to /usr/local/binon the device, mode should be 0755.
8. Profit.

Fixing fileproviderctl

After doing the above steps, fileproviderctlwill be broken, to fix it do the following steps

1. Grab a copy of /usr/bin/fileproviderctlon your device to your mac
2. Patch the binary with GNU sed: gsed -i 's|/usr/local/bin/fileproviderctl_internal|/usr/local/bin/fileproviderctl_XXXXXXXX|g' fileproviderctl
3. Resign it: codesign -s "Worth Doing Badly iPhone OS Application Signing" --preserve-metadata=entitlements --force fileproviderctl
4. Put the fixed binary back onto your device.

Removal

To remove the installation, do the following steps

1. Copy /System/Library/PrivateFrameworks/CoreAnalytics.framework/Support/analyticsdto /usr/bin/fileproviderctl
2. Move /System/Library/PrivateFrameworks/CoreAnalytics.framework/Support/analyticsd.backto /System/Library/PrivateFrameworks/CoreAnalytics.framework/Support/analyticsd
3. Delete /var/haxx, /usr/local/bin/fileproviderctl_internalas well as /usr/local/bin/haxx
Download Haxx

___________________________
@hacking_Attack
@Hacking_Video

Haxx - Untethered + Unsandboxed Code Execution Haxx As Root On iOS 14 - iOS 14.8.1
http://www.kitploit.com/2022/07/haxx-untethered-unsandboxed-code.html

___________________________
@hacking_Attack
@Hacking_Video

Untethered + Unsandboxed code execution haxx as root on iOS 14 - iOS 14.8.1. Based on CoreTrustDemo (https://github.com/zhuowei/CoreTrustDemo), also please note that certificates (https://www.kitploit.com/search/label/Certificates) are not copyrightable.
Usage Note: requires macOS + existing jailbreak Get up and running On your mac import dev_certificate.p12 into the keychain, and the password is password. Modify haxx.c to include your own code (if you need it). Run make to build On the device, Copy /System/Library/PrivateFrameworks/CoreAnalytics.framework/Support/analyticsd to /System/Library/PrivateFrameworks/CoreAnalytics.framework/Support/analyticsd.back Then replace /System/Library/PrivateFrameworks/CoreAnalytics.framework/Support/analyticsd with /usr/bin/fileproviderctl Create the /private/var/haxx directory, mode should be 0777 Copy fileproviderctl_internal and haxx generated from the build to /usr/local/bin on the device, mode should be 0755. Profit. Fixing fileproviderctl After doing the above steps, fileproviderctl will be broken, to fix it do the following steps Grab a copy of /usr/bin/fileproviderctl on your device to your mac Patch the binary (https://www.kitploit.com/search/label/Binary) with GNU (https://www.kitploit.com/search/label/GNU) sed: gsed -i 's|/usr/local/bin/fileproviderctl_internal|/usr/local/bin/fileproviderctl_XXXXXXXX|g' fileproviderctl Resign it: codesign -s "Worth Doing Badly iPhone (https://www.kitploit.com/search/label/iPhone) OS Application Signing" --preserve-metadata=entitlements --force fileproviderctl Put the fixed binary back onto your device. Removal To remove the installation, do the following steps Copy /System/Library/PrivateFrameworks/CoreAnalytics.framework/Support/analyticsd to /usr/bin/fileproviderctl Move /System/Library/PrivateFrameworks/CoreAnalytics.framework/Support/analyticsd.back to /System/Library/PrivateFrameworks/CoreAnalytics.framework/Support/analyticsd Delete /var/haxx, /usr/local/bin/fileproviderctl_internal as well as /usr/local/bin/haxx

Download Haxx (https://github.com/asdfugil/haxx)

___________________________
@hacking_Attack
@Hacking_Video

Innovation in the Free World
https://enigmaseries.medium.com/innovation-in-the-free-world-3e20039be9cd?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Objective ReviewersContinue reading on Medium » (https://enigmaseries.medium.com/innovation-in-the-free-world-3e20039be9cd?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Black Hat Ethical Hacking
OSINT Tool: Pagodo

___________________________
@hacking_Attack
@Hacking_Video

Finding SQL Injections through source code in .NET applications

CodeAllTheThingsContinue reading on Medium »
Read more...

APT Groups with AI Generated Images

I ran some APT Group names through Google’s AI image generator. Results are probably what you’d expect.Continue reading on Medium »
Read more...

Kali Linux Tutorials
Mitmproxy2Swagger : Automatically Reverse-Engineer REST APIs Via Capturing Traffic

Mitmproxy2Swagger is a tool for automatically converting mitmproxy captures to OpenAPI 3.0 specifications. This means that you can automatically reverse-engineer REST APIs by just running the apps and capturing the traffic.

Installation

First you will need python3 and pip3.

pip install mitmproxy2swagger
… or …
pip3 install mitmproxy2swagger

Then clone the repo and run mitmproxy2swaggeras per examples below.

Usage

Mitmproxy

To create a specification by inspecting HTTP traffic you will need to:

* Capture the traffic by using the mitmproxy tool. I personally recommend using mitmweb, which is a web interface built-in to mitmproxy.

$ mitmweb
Web server listening at http://127.0.0.1:8081/
Proxy server listening at http://*:9999
…

* IMPORTANTTo configure your client to use the proxy exposed by mitm proxy, please consult the mitmproxy documentation for more information.
* Save the traffic to a flow file.In mitmweb you can do this by using the “File” menu and selecting “Save”

Run the first pass of mitmproxy2swagger:

$ mitmproxy2swagger -i -o -p

Please note that you can use an existing schema, in which case the existing schema will be extended with the new data. You can also run it a few times with different flow captures, the captured data will be safely merged.

is the base url of the API you wish to reverse-engineer. You will need to obtain it by observing the requests being made in mitmproxy.

For example if an app has made requests like these:

https://api.example.com/v1/login
https://api.example.com/v1/users/2
https://api.example.com/v1/users/2/profile

* The likely prefix is https://api.example.com/v1.
* Running the first pass should have created a section in the schema file like this:

x-path-templates:
Remove the ignore: prefix to generate an endpoint with its URL
Lines that are closer to the top take precedence, the matching is greedy
ignore:/addresses
ignore:/basket
ignore:/basket/add
ignore:/basket/checkouts
ignore:/basket/coupons/attach/{id}
ignore:/basket/coupons/attach/104754

* You should edit the schema file with a text editor and remove the ignore:prefix from the paths you wish to be generated. You can also adjust the parameters appearing in the paths.
* Run the second pass of mitmproxy2swagger:

$ mitmproxy2swagger -i -o -p [–examples]

Run the command a second time (with the same schema file). It will pick up the edited lines and generate endpoint descriptions.

Please note that mitmproxy2swagger will not overwrite existing endpoint descriptions, if you want to overwrite them, you can delete them before running the second pass.

Passing --exampleswill add example data to requests and responses. Take caution when using this option, as it may add sensitive data (tokens, passwords, personal information etc.) to the schema.

HAR

* Capture and export the traffic from the browser DevTools.In the browser DevTools, go to the Network tab and click the “Export HAR” button.
* Continue the same way you would do with the mitmproxy dump. mitmproxy2swaggerwill automatically detect the HAR file and process it.

___________________________
@hacking_Attack
@Hacking_Video