___________________________

@hacking_Attack

@Hacking_Video
___________________________

KitPloit - PenTest Tools!
IPCDump - Tool For Tracing Interprocess Communication (IPC) On Linux

https://1.bp.blogspot.com/-6KEORedujrs/YH5mU7X7W0I/AAAAAAAAV7E/PYDCn5XVuSEIIb1XyAqJ5r_8LJRxz0uIgCNcBGAsYHQ/w640-h492/ipcdump.png Announcement post

ipcdump is a tool for tracing interprocess communication (IPC) on Linux. It covers most of the common IPC mechanisms -- pipes, fifos, signals, unix sockets, loopback-based networking, and pseudoterminals. It's a useful tool for debugging multi-process applications, and it's also a simple way to understand how the different moving parts in your system communicate with one another. ipcdump can trace both the metadata and the contents of this communication, and it's particularly well-suited to tracing IPC between short-lived processes, which can be difficult using traditional debugging tools, like strace or gdb. It also has some basic filtering capabilities to help you sift through large quantities of event s. Most of the information ipcdump collects comes from BPF hooks placed on kprobes and tracepoints at key functions in the kernel, although it also fills in some bookkeeping from the /proc filesystem. To this end ipcdump makes heavy use of gobpf, which provides golang binding for the bcc framework. Requirements & Usage* golang >= 1.15.6 Tested operating systems and kernelsUbuntu 18.04 LTS Ubuntu 20.04 LTS 4.15.0 Tested Not Tested 5.4.0 Not Tested Tested 5.8.0 Not Tested Tested*
*Requires building bcc from source BuildingDependencies1. Install golang snap install go --classicor directly from golang website

1. Install BCC using iovisor's instructions depending on the operation system you chose (usually the newer versions will require building from source) Building ipcdumpgit clone https://github.com/guardicore/IPCDump
cd IPCDump/cmd/ipcdump
go build Usage./ipcdump -h
Usage of ./ipcdump:
-B uint
max number of bytes to dump per event, or 0 for complete event (may be large). meaningful only if -x is specified.
-D value
filter by destination comm (can be specified more than once)
-L do not output lost event information
-P value
filter by comm (either source or destination, can be specified more than once)
-S value
filter by source comm (can be specified more than once)
-c uint
exit after One-linersRun as root: # dump all ipc on the system
./ipcdump

# dump signals sent between any two processes
./ipcdump -t kill

# dump loopback TCP connection metadata to or from pid 1337
./ipcdump -t loopback-tcp -p 1337

# dump unix socket IPC metadata and contents from Xorg
./ipcdump -t unix -x -S Xorg

# dump json-formatted pipe i/o metadata and first 64 bytes of contents
./ipcdump -t pipe -x -B 64 -f json Features* Support for pipes and FIFOs
* Loopback IPC
* Signals (regular and realtime)
* Unix streams and datagrams
* Pseudoterminal-based IPC
* Event filtering based on process PID or name
* Human-friendly or JSON-formatted output Designipcdump is built of a series of collectors, each of which is in charge of a particular type of IPC event. For example, IPC_EVENT_LOOPBACK_SOCK_UDPor IPC_EVENT_SIGNAL.

In practice, all of the collectors[...]

___________________________

@hacking_Attack

@Hacking_Video
___________________________

are built using bpf hooks attached to kprobes and tracepoints. Their implementations are entirely separate, though -- there's no particular reason to assume our information will always come from bpf. That said, the different collectors do have to share a single bpf module, because there's some common code that they need to share. To this end, we share a single BpfBuilder (which is essentially a wrapper around concatenating strings of bcc code) and each collector registers its own code with that builder. The full bcc script is then loaded with gobpf, and each module places the hooks it needs.

There are currently two kinds of bookkeeping that are shared between IPC collectors:

* SocketIdentifier (internal/collection/sock_id.go)-- maps between kernel struct sock*and the processes that use them.
* CommIdentifier (internal/collection/comm_id.go)-- maps between pid numbers and the corresponding process name (/proc/). The bookkeeping done in each of these is particularly important for short-lived processes; while this information can be filled out later in usermode by parsing /proc, often the relevant process will have disappeared by the time the event hits the handler. That said, we do sometimes fill in information from /proc. This happens mostly for processes that existed before ipcdump was run; we won't catch events like process naming in this case. SocketIdentifierand CommIdentifiersort of try and abstract this duality between bcc code and /procparsing behind a single API, although it's not super-clean. By the way, in super-new versions of Linux (5.8), bpf iterators can entirely replace this bookkeeping, although for backwards compatibility we should probably stick to the hooks-and-procfs paradigm for now.

Event output is done through the common EmitIpcEvent()function, which takes a standard event format (source process, dest process, metadata key-value pairs, and contents) and outputs it in a unified format. To save event bandwidth, collectors typically don't output IPC contents if the -xflag isn't specified. This is done with some fancy preprocessing magic in internal/collection/ipc_bytes.go. ContributingPlease do! Check out TODO for the really important stuff. Most of the early work on ipcdump will probably involve making adjustments for different kernel versions and symbols. Download IPCDump

___________________________

@hacking_Attack

@Hacking_Video
___________________________

All about cross-site scripting (XSS)

Methodology for hunting xssContinue reading on Medium »
Read more...

___________________________

@hacking_Attack

@Hacking_Video
___________________________

hacking: security in practice
Hacked or losing my mind?

Remove if wrong sub for this. I’ve had a few different accounts with suspicious activity the past few days, but the common thread is my yahoo account. They didn’t change my password, so I could see activity in my account that happened on the other side of the country and a link to someone else’s phone. As soon as I changed my password, that info was gone and Yahoo says there is no trace of it on their end and my account has not been compromised. Can that actually happen? Should I keep hounding yahoo or let it go?

submitted by /u/bluecoop36
[link] [comments]

___________________________

@hacking_Attack

@Hacking_Video
___________________________

hacking: security in practice
is this illegal (abusing a feature)

theoretically, if someone found a website feature and abused it. its a website like amazon and if your friend signs up using your link, he gets 15$ free store credit and you get 15$ free store credit on his first purchase.

lets say someone created fake emails and signed up using his own invite link, buying stuff with the every fake account for 15$ dollars and getting 15$ in store credit after every “purchase” from his fake accounts.

would the website catch this and would he get into legal trouble?

submitted by /u/__ejdjsj
[link] [comments]

___________________________

@hacking_Attack

@Hacking_Video
___________________________

hacking: security in practice
Genuinely Curious How You Do It

Hello. I am someone currently learning C++, but I have no desire for hacking. I am incredibly curious though. How do you actually hack something? What I mean is, what programs do you use, what language, how do you determine what to hack and what not to, and what separates the real hackers from the fake ones?

submitted by /u/icysoun0
[link] [comments]

___________________________

@hacking_Attack

@Hacking_Video
___________________________

Free Course Site
Java Programming: Complete Beginner to Advanced

https://freecoursesite.com/wp-content/uploads/2021/04/84452524141.jpg
Become a Computer Programmer by Learning Core Java Skills What you’ll learn Learn core Java skills from complete beginner to advanced features Requirements No previous programming knowledge is required All the tools needed are free to install Willingness to learn Description Would you like to learn real world programming skills that will help you get […]

The post Java Programming: Complete Beginner to Advanced appeared first on Free Course Site.

___________________________

@hacking_Attack

@Hacking_Video
___________________________

___________________________

@hacking_Attack

@Hacking_Video
___________________________

Hacking on Medium
Do we get optimal privacy in smartphones?

https://cdn-images-1.medium.com/max/2600/1*97hvtYjUSUfZm-cnQExWbw.jpeg
Nowadays smartphones are the norm, On every hand you see a smartphone going in the day minding their own work, but smartphones mean a lot…

Continue reading on Medium »

___________________________

@hacking_Attack

@Hacking_Video
___________________________

___________________________

@hacking_Attack

@Hacking_Video
___________________________

Hacking on Medium
Cyber Apocalypse 2021 | Phasestream 3 write-up (Stream Ciphers)

https://cdn-images-1.medium.com/max/1920/0*usoqX712kmhV3vZb.png
Key reuse weakness leading to known plaintext attack.

Continue reading on Medium »

___________________________

@hacking_Attack

@Hacking_Video
___________________________

___________________________

@hacking_Attack

@Hacking_Video
___________________________

___________________________

@hacking_Attack

@Hacking_Video
___________________________

Hacking on Medium
CTF — HackTheBox —Proper

https://cdn-images-1.medium.com/max/742/1*rni3Kgtc7h5vqDCDG-1ovg.png
IP de la machine Proper : 10.129.0.0/16

Continue reading on ProHacktive »

___________________________

@hacking_Attack

@Hacking_Video
___________________________

Hacking on Medium
Cyber Apocalypse 2021 | Alien Camp write-up (Socket Programming)

https://cdn-images-1.medium.com/max/2600/0*IT7Mi_uasjWS0IJx
Answering 500 ‘alien’ queries as fast as possible

Continue reading on Medium »

___________________________

@hacking_Attack

@Hacking_Video
___________________________

Deep Web
Dirty money for sale??

So i was scrolling through this some onion links and i came across a website that claim to sell prepaid cards, paypal transfers etc, (not going to put onion link) one thing that caught my eye is that they are selling real money, not counterfits for cheaper, they claim it comes from dirty and illegal industries so it cant be spent, for example they are selling £1000 for $120?

Not really sure if this is legit but i just wanted to get opinions on whether this is a scam or not

submitted by /u/NoTransportation1521
[link] [comments]

___________________________

@hacking_Attack

@Hacking_Video
___________________________

Deep Web
Tor is really slow. Why?

I just downloaded tor and have been browsing like I'm using another browser, just to get the feel of it. For some reason things are taking forever to load, or links on some sites don't work. Am I doing something wrong?

submitted by /u/TBizzle37
[link] [comments]

___________________________

@hacking_Attack

@Hacking_Video
___________________________

Deep Web
Is that it?

i'm pretty new to using Tor and i've tried searching for all the things you guys hype about and DuckDuckGo comes up with literally just google results? i've noticed that the ''Onion'' links are the biggest different between Tor and Google but even in those sites nothing really interesting.

is there a way that i could sorta make DuckDuckGo come up with onion results only or deep web sites doesn't have to be an .Onion site? could it be .com? .net? .me? is there another site for seatching onion links only? im so confused

BTW i've found forums with onion links but none of them work

submitted by /u/P0werrangers
[link] [comments]

___________________________

@hacking_Attack

@Hacking_Video
___________________________

Deep Web
Is it safe to visit the deepweb out of curiosity?

I've always been curious about the deep and dark web just simply because. I am curious of the content and that is all. Is it safe to download the specific type of browser and proceed?

submitted by /u/drugstore_downer
[link] [comments]

___________________________

@hacking_Attack

@Hacking_Video
___________________________

Making USD1,250 bounty by spending 30minutes in a new target

This post is a sharing of how I got USD1,250 bounty by just spending 30 minutes in a new target. The target is a private program in…Continue reading on Medium »
Read more...

___________________________

@hacking_Attack

@Hacking_Video
___________________________