Hacking on Medium
This Bugs Could Let Attackers Disrupt Vehicles Remotely

https://cdn-images-1.medium.com/max/728/0*RU3YRhOf2_8Em1DR
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning of a handful of unpatched security vulnerabilities in MiCODUS…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

HackerOne CTF: Postbook

I recently published an article on a CTF writeup, an introduction to the HackerOne CTF. You can find that article here. Today I am…Continue reading on Medium »
Read more...

HackerOne CTF: Postbook
https://tsitsiflora.medium.com/hackerone-ctf-postbook-6efd86ebf652?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

I recently published an article on a CTF writeup, an introduction to the HackerOne CTF. You can find that article here. Today I am…Continue reading on Medium » (https://tsitsiflora.medium.com/hackerone-ctf-postbook-6efd86ebf652?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Android App Pentest #1 Setup Certificate Burpsuite ke Emulator Android
https://medium.com/@anditorx/android-app-pentest-1-setup-certificate-burpsuite-ke-emulator-android-543bad8f35cc?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Burpsuite adalah tool yang sangat sering di gunakan untuk melakukan Penetration Test / Bug bounty. Burpsuite digunakan sebagai penengah…Continue reading on Medium » (https://medium.com/@anditorx/android-app-pentest-1-setup-certificate-burpsuite-ke-emulator-android-543bad8f35cc?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
ICMP type 13, 14

Looking for tools for gathering open source ICMP data I have tried Nping Neither converts the timestamp any tools for gathering and converting this open source information I have try’d online converters the time stamps don’t match up I heard it’s a bug in windows that’s obfuscating time stamp data any help would be appreciated. Looked into hping3 the output doesn’t look promising. Main objective is gathering Hosts exact UTC time

submitted by /u/Phantasius224
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Black Hat Ethical Hacking
Zero-day flaws in GPS tracker pose surveillance, fuel cut-off risks to vehicles

Zero-day flaws in GPS tracker pose surveillance, fuel cut-off risks to vehiclesPost Views: 18 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/07/Patreon.png Subscribe to Patreon to watch this episode.
Reading Time: 3 Minutes
A raft of zero-day flaws found in a popular automotive GPS tracking device “could have disastrous and even life-threatening implications”, security researchers warn.

Six as-yet-unpatched vulnerabilities unearthed by BitSight researcher Pedro Umbelino affect the API server, GPS tracker protocol, and web server of the MV720 GPS tracker, which was developed by China-based company MiCODUS.

Successful abuse of the bugs could see attackers “cut fuel to an entire fleet of commercial or emergency vehicles”, use GPS data “to monitor and abruptly stop vehicles on dangerous highways”, or “track individuals or demand ransom payments to return disabled vehicles to working condition”, according to research (PDF) from BitSight.
See Also: So you want to be a hacker? Complete Offensive Security and Ethical Hacking Course Huge attack surfaceAccording to the cybersecurity firm, the MiCODUS MV720 provides theft protection and fleet management functionality to customers in at least in 169 countries, including a Fortune 50 energy company, a national military in South America, a federal government in Western Europe, a national law enforcement agency in Western Europe, and a nuclear power plant operator.

Alarmingly, BitSight said Umbelino also uncovered security issues associated with the firm’s cloud-based device management interface for the web, iOS, and Android, a finding which means other MiCODUS GPS tracking models could also be insecure. If MiCODUS’ own figures are accurate, that equates to 1.5 million potentially vulnerable devices worldwide.

With security patches yet to materialize, BitSight has urged users to “immediately stop using or disable any MiCODUS MV720 GPS trackers until a fix is made available”.

A security advisory from the US Cybersecurity and Infrastructure Security Agency (CISA) said that “no known public exploits specifically target these vulnerabilities” in the MV720 GPS tracker.
Trending: How Misconfigurations in Linux can leave you vulnerable to Attackers Trending: Recon Tool: WayMore Authentication issuesTwo critical authentication issues in the API server, both notching a CVSS score of 9.8, enable “an attacker to send SMS commands directly to the GPS tracker as if they were coming from the GPS owner’s mobile number”.

One bug relates to a hard-coded master password (CVE-2022-2107) and the other, resulting from improper authentication (CVE-2022-2141), potentially enables manipulator-in-the-middle (MitM) attacks.

The devices and the mobile interface are preconfigured with the default password ‘123456’, which BitSight classed as a high severity (CVSS 8.1) issue, although CISA declined to assign a CVE. “There is no mandatory rule to change the password nor is there any claiming process”, according to BitSight, which found that 94.5% of 1,000 responding device IDs still had the default password.

With the device ID easily predictable and the server seemingly lacking password brute force mitigations such as rate-limiting, attackers can easily access random GPS trackers.

A high severity (CVSS 7.5) reflected cross-site scripting (XSS) vulnerability affecting the main web server, meanwhile, could enable attackers to “fully compromise the device”.

The main web server also contains a pair of authenticated insecure direct object reference vulnerabilities, tracked as CVE-2022-34150 (CVSS 7.1) and CVE-2022-[...]

___________________________
@hacking_Attack
@Hacking_Video

Black Hat Ethical Hacking
OSINT Tool: SARENKA

OSINT Tool: SARENKAPost Views: 15 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/05/Patreon.png Subscribe to Patreon to watch this episode.
Reading Time: 4 Minutes
SARENKA by pawlaczyk is an Open Source Intelligence (OSINT) tool that helps you obtain and understand Attack Surface.

The main goal is gathering information from search engines for Internet-connected devices (https://censys.io/, https://www.shodan.io/). It scraps data about Common Vulnerabilities and Exposures (CVE), Common Weakness Enumeration (CWE) and also has database where CVEs are mapped to CWE.

It returns data about the local machine – local installed software (from Windows Registry), local network information (python libraries, popular cmd commands). For now the application has also simple tools like hash calculator, shannon entropy calculator and very simple port scanner.

In Red-Teaming, OSINT has proven to reveal often times, lots of sensitive documents, and information that an organization/person had no idea was there, and it plays a crucial role in your Pentesting process in the early stages that will help you determine and decide the way you will conduct your attack plan. Features* gets data from https://censys.io/ by ip
* gets data from https://www.shodan.io/ by ip
* gets DNS data
* gets WHOIS data
* banner grabbing
* finds CVEs by CWE
* generates pdf report

You can also:

* calculate hashes based on user string
* calculate shannon entropy based on user string
* check is port open|closed (instead always use nmap if you can – it is slow)
See Also: So you want to be a hacker? Complete Offensive Security and Ethical Hacking Course InstallationTeam tests application on Windows 10 and Kali Linux with Python 3.8.

SARENKA requires:

* Python Clone repository$ git clone https://github.com/pawlaczyk/sarenka.gitGo to application directory$ cd ./sarenkaCreate venv$ python3 -m venv envActivate venvPowershell $ ./env/Scripts/Activate.ps1cmd $ ./env/Scripts/activate.batInstall requirements$ pip3 install -r ./requirements.txtBuild application with sarenka.py script$ python ./sarenka/sarenka.pyGetting startedPlease create accounts on services:

* https://account.shodan.io/register
* https://censys.io/register Application – default http://localhost:8000/https://www.blackhatethicalhacking.com/wp-content/uploads/2022/07/SS.png
Add user credentials at “Settings”

https://www.blackhatethicalhacking.com/wp-content/uploads/2022/07/SS1-1.png
See Also: Recon Tool: WayMore Screenshotshttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/07/SS2-1.png
https://www.blackhatethicalhacking.com/wp-content/uploads/2022/07/SS3-1.png
https://www.blackhatethicalhacking.com/wp-content/uploads/2022/07/SS4-1.png
https://www.blackhatethicalhacking.com/wp-content/uploads/2022/07/SS5-1.png
https://www.blackhatethicalhacking.com/wp-content/uploads/2022/07/SS6-2.png
https://www.blackhatethicalhacking.com/wp-content/uploads/2022/07/swagger.png
Download: GitHub Link
See Also: Write up: How Misconfigurations in Linux can leave you vulnerable to Attackers https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Merch.png Recent Tools* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/07/waymore-300x150.png Recon Tool: WayMoreJuly 15, 2022
Reading Time: 9 minutes

* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/07/Pagodo-300x150.png OSINT Tool: PagodoJuly 8, 2022
Reading Time: 6 minutes

* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/07/Axiom-300x150.png Offensive Security Tool: AxiomJuly 1, 2022
Reading Time: 3 minutes

* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/HTTPLoot-300x150.png Offensive Security Tool: HTTPLootJune 24, 2022
Reading Time: 5 minutes https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/OffSec-Course.png Offensive Security & Ethical Hacking CourseBegin the learning curve of hacking now!
The post OSINT Tool: SARENKA first appeared on Black Hat Ethical Hacking.

33944 (CVSS 6.5).

“Having a centralized dashboard to monitor GPS trackers with the ability to enable or disable a vehicle, monitor speed, routes and leverage other features” is as potentially dangerous as it is useful, suggested BitSight.

“Unfortunately, the MiCODUS MV720 lacks basic security protections”, and with only “limited testing, BitSight uncovered a multitude of flaws affecting all components of the GPS tracker ecosystem”.

BitSight said it first disclosed the flaws to the vendor on September 9, 2021, and after responding initially, MiCODUS failed to reply to multiple subsequent requests for updates, both from BitSight and CISA. BitSight published its findings yesterday (July 19).
Trending: Microsoft Teams security vulnerability left users open to XSS via flawed stickers feature Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?

If you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com
Source: portswigger.net Source Link https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Merch.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/07/Images-for-the-News-posts-1-300x150.png ‘Password extraction risk’ in identity provider Okta disputedJuly 20, 2022
Reading Time: 3 minutes

* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/07/Images-for-the-News-posts-300x150.png ‘Endemic’ Log4j bug set to persist in the wild for at least a decadeJuly 19, 2022
Reading Time: 3 minutes

* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/07/Untitled-design-1-300x150.png Emerging H0lyGh0st Ransomware Tied to North KoreaJuly 18, 2022
Reading Time: 4 minutes

* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/07/ezgif.com-gif-maker-3-1-300x150.jpg Microsoft Teams security vulnerability left users open to XSS via flawed stickers featureJuly 15, 2022
Reading Time: 3 minutes
https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/OffSec-Course.png Offensive Security & Ethical Hacking CourseBegin the learning curve of hacking now!
The post Zero-day flaws in GPS tracker pose surveillance, fuel cut-off risks to vehicles first appeared on Black Hat Ethical Hacking.

___________________________
@hacking_Attack
@Hacking_Video

Android App Pentest #1 Setup Certificate Burpsuite ke Emulator Android

Burpsuite adalah tool yang sangat sering di gunakan untuk melakukan Penetration Test / Bug bounty. Burpsuite digunakan sebagai penengah…Continue reading on Medium »
Read more...

RESim - Reverse Engineering Software Using A Full System Simulator
http://www.kitploit.com/2022/07/resim-reverse-engineering-software.html

___________________________
@hacking_Attack
@Hacking_Video

Reverse engineering using a full system simulator. Dynamic analysis by instrumenting simulated hardware using Simics Trace process trees, system calls and individual programs Reverse execution to selected breakpoints and events Integrated with IDA Pro(tm) debugging client Fuzz with a customized AFL, injecting directly into simulated memory RESim is a dynamic system analysis tool that provides detailed insight into processes, programs and data flow within networked computers. RESim simulates networks of computers through use of the Simics'[1] platform’s high fidelity models of processors, peripheral devices (e.g., network interface cards), and disks. The networked simulated computers load and run targeted software copied from images extracted from the physical systems being modeled. Broadly, RESim aids reverse engineering (https://www.kitploit.com/search/label/Reverse%20Engineering) and vulnerability analysis (https://www.kitploit.com/search/label/Vulnerability%20Analysis) of networks of Linux-based systems by inventorying processes in terms of the programs they execute and the data they consume. Data sources include files, device interfaces and inter-process communication mechanisms. Process execution and data consumption is documented through dynamic analysis (https://www.kitploit.com/search/label/Dynamic%20Analysis) of a running simulated system without installation or injection of software into the simulated system, and without detailed knowledge of the kernel hosting the processes. RESim also provides interactive visibility into individual executing programs through use of a custom plug-in to the IDA Pro disassembler/debugger. The disassembler/debugger allows setting breakpoints to pause the simulation at selected events in either future time, or past time. For example, RESim can direct the simulation state to reverse until the most recent modification of a selected memory address.
Reloadable checkpoints may be generated at any point during system execution.
A RESim simulation can be paused for inspection, e.g., when a specified process is scheduled for execution, and subsequently continued, potentially with altered memory or register state. The analyst can explicitly modify memory or register content, and can also dynamically augment memory based on system events, e.g., change a password file entry when read by the su program. Analysis is performed entirely through observation of the simulated target system’s memory and processor state, without need for shells, software injection, or kernel symbol tables. The analysis is said to be external because the analysis observation functions have no effect on the state of the simulated system. RESim has been integrated with the American Fuzzing Lop (AFL) fuzzer. This fuzzing system injects fuzzed data directly into the application read buffer, simplifying the fuzzing setup and workflow. RESim automatically replays and analyzes any detected crashes, identifying the causes of crashes, e.g., corruption of execution control. Please refer to the RESim User's Guide (https://github.com/mfthomps/RESim/blob/master/docs/RESim-UsersGuide.pdf) for additional information. A brief demonstration of RESim can be seen here: (https://nps.box.com/s/rf3n104ualg38pon6b7fm6m6wqk9zz50) RESim is based on a software vetting and forensic analysis (https://www.kitploit.com/search/label/Forensic%20Analysis) platform created for the DARPA Cyber Grand Challenge. That repo is here: https://github.com/mfthomps/cgc-monitor. A paper describing that work is at https://www.sciencedirect.com/science/article/pii/S1742287618301920 And a fine summary of the use of Simics in the CGC Monitor is at https://software.intel.com/content/www/us/en/develop/blogs/simics-software-automates-cyber-grand-challenge-validation.html [1]Simics is a full system simulator sold by Wind River, which holds all relevant trademarks.

Download RESim (https://github.com/mfthomps/RESim)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
This Bugs Could Let Attackers Disrupt Vehicles Remotely

https://cdn-images-1.medium.com/max/728/0*RU3YRhOf2_8Em1DR
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning of a handful of unpatched security vulnerabilities in MiCODUS…

Continue reading on System Weakness »

___________________________
@hacking_Attack
@Hacking_Video