Hacking on Medium
Antel 13 años exponiendo la ubicación de todos sus usuarios.

https://cdn-images-1.medium.com/max/750/1*W6sUlGLrttHeFGfcGiPEPw.png
Hola red, ¿cómo están? Espero que bien!

Continue reading on Medium »

Hacking on Medium
Story of a Basic CSRF Vulnerability

https://cdn-images-1.medium.com/max/1200/1*QLJPykCtpFg2pf_61ITtKQ.jpeg
This article is about a simple CSRF vulnerability I found, I am going to discuss how I found it and share my POC. Cross-Site Request…

Continue reading on Medium »

Red Team Tactics:
1. As-Exploits 404Team
https://github.com/yzddmr6/As-Exploits
2. MS External Email Warning Bypass
https://whynotsecurity.com/blog/external-email-warning-bypass

Threat Research:
1. Zero-Day Exploits in SonicWall Email Security Lead to Enterprise Compromise
https://www.fireeye.com/blog/threat-research/2021/04/zero-day-exploits-in-sonicwall-email-security-lead-to-compromise.html
2. RCE in Homebrew by compromising the official Cask repository
https://blog.ryotak.me/post/homebrew-security-incident-en

CVE-2021-26415:
Windows Installer Elevation of Privilege Vulnerability (PoC)
https://www.cloaked.pl/2021/04/cve-2021-26415

exploit
CVE-2021-22893:
PoC script to exploit Pulse Secure VPNs
https://github.com/ZephrFish/CVE-2021-22893

Cloud Security:
Azure Application Proxy C2
https://www.trustedsec.com/blog/azure-application-proxy-c2
]-> AppProxyC2 PoC:
https://github.com/xpn/appproxyc2

LKM rootkit for Linux Kernels 2.6.x/3.x/4.x/5.x
(x86/x86_64, ARM64)
https://github.com/m0nad/Diamorphine

___________________________

@hacking_Attack

@Hacking_Video
___________________________

#docker #privesc #enum

Docker Enumeration, Escalation of Privileges and Container Escapeshttps://github.com/stealthcopter/deepce

___________________________

@hacking_Attack

@Hacking_Video
___________________________

#pentest #api #cheatsheet

Bringing order to API hacking chaoshttps://dsopas.github.io/MindAPI/play/

___________________________

@hacking_Attack

@Hacking_Video
___________________________

hacking: security in practice
Can a FB restriction be removed by hacking?

Eng is not my native language so sorry for any typo

I know barely nothing 'bout hacking and honestly find the Facebook bot really annoying. I got several red flags from it because my posts "didn't follow the rules" but most of the times the post/comment was out of context (they erased a post about artistic nude drawing references, not even photos for being "sexual content", removed several of my cat videos because it was "spam" and also deleted funny comments referring to myself of my friends/my characters because it was "hate speech"). Im a freelance artist so the fact that I got banned for 30 days of commenting/posting is problematic because Facebook is the main media where I earn income from (commission posts + adoptables selling), and thats why I started to wonder if a hacker could somehow remove an account's ban.

Please lemme know if this is possible! ;m; any info would be useful~ thank you.

submitted by /u/applesjuic3
[link] [comments]

___________________________

@hacking_Attack

@Hacking_Video
___________________________

hacking: security in practice
URGENT: can someone hack me if they have my apple ID?

Can they go thru all my pictures and messages and all that?

Pls help

submitted by /u/MOONLITE24
[link] [comments]

___________________________

@hacking_Attack

@Hacking_Video
___________________________

Brave — Stealing your cookies remotely

Brave for Android had a vulnerability that allowed a malicious webpage to steal your cookies remotely.
Read more...

___________________________

@hacking_Attack

@Hacking_Video
___________________________

___________________________

@hacking_Attack

@Hacking_Video
___________________________

Hacking on Medium
Using pendrive as a password for your desktop / laptops.

Here by we are gonna do this with an amazing software name predator. This software turns your pendrive into a password for your laptop and…

Continue reading on Medium »

___________________________

@hacking_Attack

@Hacking_Video
___________________________

___________________________

@hacking_Attack

@Hacking_Video
___________________________

Hacking on Medium
Hacktivism. La libertà nelle maglie della rete

https://cdn-images-1.medium.com/max/600/1*oi8oBvP8L3ossAOpH3aaiQ.jpeg
di Arturo Di Corinto e Tommaso Tozzi

Continue reading on Medium »

___________________________

@hacking_Attack

@Hacking_Video
___________________________

___________________________

@hacking_Attack

@Hacking_Video
___________________________

___________________________

@hacking_Attack

@Hacking_Video
___________________________

Black Hat Ethical Hacking
Mount Locker Ransomware Aggressively Changes Up Tactics

https://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Mount Locker Ransomware Aggressively Changes Up TacticsPost Views: 97
Reading Time: 2 Minutes
The Mount Locker ransomware has shaken things up in recent campaigns with more sophisticated scripting and anti-prevention features, according to researchers. And, the change in tactics appears to coincide with a rebranding for the malware into “AstroLocker.”
According to researchers, Mount Locker has been a swiftly moving threat. Having just hit the ransomware-as-a-service scene in the second half of 2020, the group released a major update in November that broadened its targeting capabilities (including searching for file extensions utilized by TurboTax tax-return software to encrypt). It also added improved detection evasion. Attacks have continued to escalate, and now, another major update signals “an aggressive shift in Mount Locker’s tactics,” according to an analysis released Thursday by GuidePoint Security. Mount Locker Adds Security-Evasion FeaturesLike many ransomware gangs, the operators not only lock up files, but also steal data and threaten to leak it if the ransom isn’t paid, in a double-extortion gambit. They’re also known for demanding multimillion-dollar ransoms and stealing especially large amounts of data (up to 400 GB).

In terms of technical approach, Mount Locker uses off-the-shelf, legitimate tools to move laterally, steal files and deploy encryption, GuidePoint noted. This includes the use of AdFind and Bloodhound for Active Directory and user reconnaissance; FTP for file exfiltration; and the pen-testing tool CobaltStrike for lateral movement and the delivery and execution of encryption, potentially through psExec.
See Also: Pulse Secure Critical Zero-Day Security Bug Under Active Exploit “After the environment is mapped, backup systems are identified and neutralized, and data is harvested, systems are encrypted with target-specific ransomware delivered via the established command-and-control channels (C2),” said Drew Schmitt, senior threat intelligence analyst for GuidePoint, in the analysis. “These payloads include executables, extensions and unique victim IDs for payment.”

More recent campaigns have jazzed things up with new batch scripts, researchers noted. These are designed to disable detection and prevention tools.

“[This] indicates that Mount Locker is increasing its capabilities and is becoming a more dangerous threat,” according to Schmitt. “These scripts were not just blanket steps to disable a large swath of tools, they were customized and targeted to the victim’s environment.”

Another change in tactics for the group involves using multiple CobaltStrike servers with unique domains. It’s an added step that helps with detection evasion, but Schmitt noted that it’s not often seen because it requires much more management to put into practice effectively.
See Also: Offensive Security Tool: Hunt Biotech Firms in Cyberattack Sightshttps://media.threatpost.com/wp-content/uploads/sites/103/2021/04/22150002/MountLocker-300x258.png

A Mount Locker ransom note. Click to enlarge. Source: GuidePoint Security.
The changes have been accompanied by an uptick in Mount Locker attacks, especially those taking aim at companies in the biological tech industry. Schmitt said there has been a surge in incidents in this segment, indicating that  there may be a larger campaign afoot that aggressively targets healthcare-adjacent industries.

“Biotech companies, in particular, are a prime target for ransomware because of their position in an industry flush not only with ca[...]

___________________________

@hacking_Attack

@Hacking_Video
___________________________

Black Hat Ethical Hacking
Offensive Security Tool: ADFSBrute

https://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Offensive Security Tool: ADFSBrutePost Views: 15 https://www.blackhatethicalhacking.com/wp-content/uploads/2020/11/BECOME-A-PATRON-AND-UNLOCK-EXCLUSIVE-VIDEOS-8-1-300x120.png Reading Time: 5 Minutes

Offensive Security Tool: ADFSBrute GitHub Link
adfsbrute
ADFSBrute by ricardojoserf, is a script to test credentials against Active Directory Federation Services (ADFS), calculating the ADFS url of an organization and allowing password spraying or bruteforce attacks.

The main idea is carrying out password spraying attacks with a random and high delay between each test and using a list of proxies or Tor to make the detection by the Blue Team more difficult. Brute force attacks are also possible, or testing credentials with the format username:password (for example from Pwndb). Tested logins will get stored in a log file to avoid testing them twice.
Usage ./adfsbrute.py -t TARGET [-u USER] [-U USER_LIST] [-p PASSWORD] [-P PASSWORD_LIST] [-UL userpassword_list]
[-m MIN_TIME] [-M MAX_TIME] [-tp TOR_PASSWORD] [-pl PROXY_LIST] [-n NUMBER_OF_REQUESTS_PER_IP]
[-s STOP_ON_SUCCESS] [-r RANDOM_COMBINATIONS] [-d DEBUG] [-l LOG_FILE]The parameters for the attacks are: * -t: Target domain. Example: test.com

* -u: Single username. Example: agarcia@domain.com

* -U: File with a list of usernames. Example: users.txt

* -p: Single password: Example: Company123

* -P: File with a list of passwords. Example: passwords.txt

* -UP: File with a list of credentials in the format "username:password". Example: userpass.txt

* -m : Minimum value of random seconds to wait between each test. Default: 30

* -M : Maximum value of random seconds to wait between each test. Default: 60

* -tp: Tor password (change IP addresses using Tor)

* -pl: Use a proxy list (change IP addresses using a list of proxy IPs)

* -n: Number of requests before changing IP address (used with -tp or -pl). Default: 1

* -s: Stop on success, when one correct credential is found. Default: False

* -r: Randomize the combination of users and passwords. Default: True

* -d: Show debug messages. Default: True

* -l: Log file location with already tested credentials. Default: tested.txtExamples
Password spraying with password “Company123”, tor password is “test123” and changing the IP every 3 requests: python3 adfsbrute.py -t company.com -U users.txt -p Company123 -tp test123 -n 3https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/image1.png
Password spraying with password “Company123”, tor password is “test123”, changing the IP for every request, random delay time between 10 and 20 seconds and do not randomize the order of users: python3 adfsbrute.py -t company.com -U users.txt -p Company123 -tp test123 -m 10 -M 20 -r Falsehttps://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/image2.png
Finding ADFS url: python3 adfsbrute.py -t company.comhttps://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/image3.png
Using Tor
To use Tor to change the IP for every request, you must hash a password: tor --hash-password test123In the file /etc/tor/torrc, uncomment the variable ControlPort and the variable HashedControlPassword, and in this last one add the hash: ControlPort 9051
HashedControlPassword 16:7F314CAB402A81F860B3EE449B743AEC0DED9F27FA41831737E2F08F87Restart the tor service and use this password as argument for the script (“-tp test123” or “–tor_password 123”) service tor restartNote

This script is implemented to test in security audits, DO NOT use without proper authorization from the company owning the ADFS or you will block acco[...]

___________________________

@hacking_Attack

@Hacking_Video
___________________________

sh but also with highly sensitive IP,” Schmitt explained. “Additionally, connections to other research organizations increase the potential to damage the victim’s reputation in the industry and put business dealings at risk.”

Healthcare and biotech companies are also prime targets given that they stand to lose the most if operations are halted for too long or critical IP is lost, Schmitt pointed out. So, “attackers view them as more likely to pay the requested ransom quickly,” he said.

All of this has happened as Mount Locker appears to be rebranding to AstroLocker. Schmitt pointed out that “the verbiage and victims listed on both variants’ shaming sites share significant overlap.” He added, “this could signal a shift in the group’s overall tactics and an effort to fully rebrand as a more insidious threat.” See Also: Hacking Stories: When two young hackers played war games with PentagonOrganizations can look for signs of Mount Locker or AstroLocker within their environments, such as CobaltStrike stagers and beacons; and, they should monitor for the staging and exfiltration of files via FTP.

“While these would always be cause for alarm…an updated, more aggressive Mount Locker and the dramatic increase in attacks attributable to the group make these indicators of compromise particularly alarming,” Schmitt concluded. Source: threatpost.com (Click Link)Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/Untitled-design-11-90x90.png Pulse Secure Critical Zero-Day Security Bug Under Active Exploit1 day ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/firefox_patch-90x90.jpg Mozilla Fixes Firefox Flaw That Allowed Spoofing of HTTPS Browser Padlock2 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/Discord-Nitro-e1618858537976-90x90.png NitroRansomware Asks for Discord Gift Codes, Steals Access Tokens3 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/Untitled-design-10-90x90.png WordPress could treat Google FloC as a security issue4 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/Crypto_Mining_Bitcoin-90x90.jpg Attackers Target ProxyLogon Exploit to Install Cryptojacker1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/patchtues1-90x90.jpg Microsoft to Patch multiple Zero-Days, 110 vulnerabilities in total1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/Google-Chrome-Browser-90x90.jpg Chrome Zero-Day Exploit Posted on Twitter1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/Clubhouse2-e1618258606781-90x90.png 1.3M Clubhouse Users’ Data Dumped in Hacker Forum for Free1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/linkedin-90x90.png Data from 500M LinkedIn Users Posted for Sale Online2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/cisco-patch-90x90.png Zero-Day Bug Impacts Problem-Plagued Cisco SOHO Routers2 weeks ago
The post Mount Locker Ransomware Aggressively Changes Up Tactics first appeared on Black Hat Ethical Hacking.

___________________________

@hacking_Attack

@Hacking_Video
___________________________

unts. Recent Tools* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/logo-90x90.png Offensive Security Tool: Hunt7 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/85207007-711b0b80-b343-11ea-82f3-49aa5d5d719b-90x90.png Offensive Security Tool: CVE Binary Tool by Intel2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/help-1-90x90.png Offensive Security Tool: DirDar3 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/03/intro-90x90.png Information Security Tool: Chameleon4 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/03/skipfish_screenshot-90x90.png Offensive Security Tool: Skipfish1 month ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/03/sparta2-90x90.png Offensive Security Tool: Sparta2 months ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/02/ScareCrow2-90x90.png Offensive Security Tool: ScareCrow2 months ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/01/john_the_ripper_bg-90x90.jpg Offensive Security Tool: JTR – John the Ripper3 months ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/01/shad0w_msf_shad0w-2-90x90.png Offensive Security Tool: Shad0w4 months ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2020/12/hack-like-pro-snort-ids-for-aspiring-hacker-part-2-setting-up-basic-configuration-90x90.png Offensive Security Tools: FireEye Red Team Tool Countermeasures4 months ago
style="display:block; text-align:center;"
data-ad-layout="in-article"
data-ad-format="fluid"
data-ad-client="ca-pub-6620833063853657"
data-ad-slot="4517761481">
The post Offensive Security Tool: ADFSBrute first appeared on Black Hat Ethical Hacking.

___________________________

@hacking_Attack

@Hacking_Video
___________________________

Vajra – an automated web hacking framework for web applications.https://hakin9.org/vajra-framework/

#Vajra #hack #web

___________________________

@hacking_Attack

@Hacking_Video
___________________________

SQL Injection Cheat Sheet.https://www.netsparker.com/blog/web-security/sql-injection-cheat-sheet/

#SQL #Injection #CheatSheet

___________________________

@hacking_Attack

@Hacking_Video
___________________________