Hacking on Medium
Oopsie — HacktheBox Writeup ( getting root flag without actually being root )

https://cdn-images-1.medium.com/max/899/1*oLF7lYjrjfhsKop3wA6y2w.png
Introduction:

Continue reading on Medium »

___________________________

@hacking_Attack

@Hacking_Video
___________________________

___________________________

@hacking_Attack

@Hacking_Video
___________________________

Hacking on Medium
Writeup: Traceback on Hack The Box

https://cdn-images-1.medium.com/max/600/1*_ufxuDRApB-pNMrRI2L0xg.png
The traceback box is an easy rated machine on hackthebox.eu.

Continue reading on Medium »

___________________________

@hacking_Attack

@Hacking_Video
___________________________

Hacking GraphQL for Fun and Profit — Part 2— Methodology and Examples

Hi everyone!!Continue reading on Medium »
Read more...

___________________________

@hacking_Attack

@Hacking_Video
___________________________

___________________________

@hacking_Attack

@Hacking_Video
___________________________

KitPloit - PenTest Tools!
SlackPirate - Slack Enumeration And Extraction Tool - Extract Sensitive Information From A Slack Workspace

https://1.bp.blogspot.com/-cAx1kRkAo3A/YIJaG6I9rTI/AAAAAAAAV7Y/jO5NHZSI0hUcAu6fiQ5vgciNQbglXmxIwCNcBGAsYHQ/w640-h334/SlackPirate_3_SlackPirate%252520--token.png This is a tool developed in Python which uses the native Slack APIs to extract 'interesting' information from a Slack workspace given an access token.

As of May 2018, Slack has over 8 million customers and that number is rapidly rising - the integration and 'ChatOps' possibilities are endless and allows teams (not just developers!) to create some really powerful workflows and Slack bot/application interactions.
As is the way with corporations large and small, it is not unusual for tools such as Slack to fly under the Information Security governance/policy radar which ultimately leads to precarious situations whereby sensitive and confidential information end up in places they shouldn't be.

The purpose of this tool is two-fold:

* Red-teamers can use this to identify and extract sensitive information, documents, credentials, etc from Slack given a low-privileged account to the organisation's Workspace. This could allow an attacker to pivot on to other systems and/or gain far more intimate knowledge and inner-workings of corporate systems/applications
* Blue-teamers can use this to identify and detect sensitive information on the Workspace that perhaps shouldn't exist on there in the first instance. Blue-teamers can use this information for internal training and awareness purposes by demonstrating the output of the tool and the type of 'things' that could be used and abused by (internal as well as external) attackers.

The tool allows you to easily gather sensitive information for offline viewing at your convenience.

Note: I'm a Python n00b and have no doubt that the script can be optimised and improved massively - please feel free to make pull requests; I'll review and merge them as appropriate! Information GatheringThe tool uses the native Slack APIs to extract 'interesting' information and looks for the following information, today:

* Print to standard output the domains (if any) that are allowed to register for the Workspace - I've seen stale, old and forgotten domains here that can be purchased and used to register for the Workspace
* Links to S3 buckets
* Passwords
* AWS Access/Secret keys
* Private Keys
* Pinned messages across all Channels
* References to links and URLs that could provide further access to sensitive materials - think: Google Docs, Trello Invites, links to internal systems, etc
* Files which could contain sensitive information such as .key, .sh, the words "password" or "secret" embedded in a document, etc Slack CookieThe Slack web application uses a number of cookies - the one of special interest is called, wait for it... d. This dcookie is the same across all Workspaces the victim has access to. What this means in reality is that a single stolen dcookie would allow an attacker to get access to all of the Workspaces the victim is logged-in to; my experience with the Slack web application is that once you are logged in, you'll remain logged in indefinitely. Slack TokenThe Slack API token is a per-workspace token. One token cannot (as far as I know) access other workspaces in the same way the dcookie above allows access to all Workspaces.

For the tool to search for and extract information, you will need to provide it an API token. There are two straight forward ways of doing this:

* Provide the tool a dcookie by using the --cookieflag. The tool will output the associated Workspaces and tokens
* Provide the tool with a token directly by using the --tokenflag. You can find t[...]

___________________________

@hacking_Attack

@Hacking_Video
___________________________

his by viewing the source of the Workspace URL and doing a search for XOXThe token will look something like this: api_token: "xoxs-x-x-x-x"Make a copy of that and pass that in to the script using the --tokenflag. BuildingThe script has been developed, tested and confirmed working on Python 3.5, 3.6 and 3.7. A quick test on Python 2 presented some compatibility issues. Linux with virtualenv* git clone https://github.com/emtunc/SlackPirate* pip install virtualenv* virtualenv SlackPirate* source SlackPirate/bin/activate* pip install -r requirements.txt* ./SlackPirate.py --helpLinux without virtualenv* git clone https://github.com/emtunc/SlackPirate* chmod +x SlackPirate.py* pip install -r requirements.txt* ./SlackPirate.py --helpWindows with virtualenv* git clone https://github.com/emtunc/SlackPirate* pip install virtualenv* virtualenv SlackPirate* SlackPirate\Scripts\activate.bat* pip install -r requirements.txt* python SlackPirate.py --helpWindows without virtualenv* git clone https://github.com/emtunc/SlackPirate* pip install -r requirements.txt* python SlackPirate.py --helpUsagepython3 SlackPirate.py --help* Display the help menu - this includes information about all scan modules you can explicitly select or ignore python3 SlackPirate.py --interactive* Interactive mode instructs the tool to allow you to provide a token or cookie, and choose scans to run through a console UI rather than via command line arguments. python3 SlackPirate.py --cookie This will do the following:

* Find any associated Workspaces that can be accessed using that cookie
* Connect to any Workspaces that were returned
* Look for API Tokens in each returned Workspace
* Print to standard output for use in the next command python3 SlackPirate.py --token This will do the following:

* Check Token validity and only continue if Slack returns True* Print to standard output if the token supplied has admin, owner or primary_owner privileges
* Print to standard output if the tool found any @domains that can be used to register for the Slack Workspace (you may be surprised by what you find here - if you're lucky you'll find an old, unused, registerable domain here)
* Dump team access logs in .json format if the token provided is a privileged token
* Dump the user list in .json format
* Find references to S3 buckets
* Find references to passwords and other credentials
* Find references to AWS keys
* Find references to private keys
* Find references to pinned messages across all Slack channels
* Find references to interesting URLs and links
* Lastly, the tool will attempt to download files based on pre-defined keywords python3 SlackPirate.py --token * This will instruct the tool to only run the S3 scan python3 SlackPirate.py --token * This will instruct the tool to run all scans apart from the S3 scan python3 SlackPirate.py --token * Verbose mode will output files in .CSV - will provide a lot more information such as channel names, usernames, perma-links and more. Screenshotshttps://1.bp.blogspot.com/-KDRsoQT1B1I/YIJaPg9nNBI/AAAAAAAAV7g/dAT9YhzG1OQOdZXwy0lLyIAcA4kK9yUbACNcBGAsYHQ/w640-h334/SlackPirate_3_SlackPirate%252520--token.png https://1.bp.blogspot.com/-ptWJUtV8Qyo/YIJaPtdvtvI/AAAAAAAAV7c/dBAkJvbFVEYu_QRzNT4xUGuhswxf8ursACNcBGAsYHQ/w640-h96/SlackPirate_2_SlackPirate%252520--cookie.png Join the conversationA public Slack Workspace has been set-up where anyone can join and discuss new features, changes, feature requests or s[...]

___________________________

@hacking_Attack

@Hacking_Video
___________________________

imply ask for help. Here's the invite link: https://join.slack.com/t/slackpirate/shared_invite/zt-6o3d9tjq-PhbMxtM2o5ALgFkOB9V_dg Download SlackPirate

___________________________

@hacking_Attack

@Hacking_Video
___________________________

This repository is primarily maintained by Omar Santos and includes thousands of resources related to ethical hacking / penetration testing, digital forensics and incident response (DFIR), vulnerability research, exploit development, reverse engineering, and more.

➖➖➖➖➖➖➖➖➖➖➖➖➖➖➖➖➖➖➖➖➖

https://github.com/The-Art-of-Hacking/h4cker/
➖➖➖➖➖➖➖➖➖➖➖➖➖➖➖➖➖➖➖➖➖

___________________________

@hacking_Attack

@Hacking_Video
___________________________

https://github.com/imadr/Unity-game-hacking/blob/master/README.md

___________________________

@hacking_Attack

@Hacking_Video
___________________________

https://svch0st.medium.com/ctf-methods-and-tool-92febcac2ff4

___________________________

@hacking_Attack

@Hacking_Video
___________________________

hacking: security in practice
Anyway to bypass the passcode on a IPod Touch (4th generation) without erasing the data?

Note: I’m not asking anyone to hack for me nor am I inquiring about someone else’s device, this is my own device and I want to get access to it myself

So, here’s the situation: I have an old old iPod touch that has precious data on it that I’d like to regain access to. Unfortunately, because it’s so old and because I was so young while using it, there’s a lot working against me here

*
the power button and home button do not work. The only way to turn it on is by plugging it in and having the screen light up

*
there are no known backups available due to me switching devices over the years

*
of course, I don’t remember the passcode. It’s at a 2k+ minute wait time.

*
I don’t know the iCloud account that’s on the device or the Apple ID. It doesn’t seem to be my current one.
Is there any sort of software or tricks that I can use to get passed this passcode without losing the data on it? Or is there anyway to find out what iCloud account is on a device? I’m new to hacking so sorry if this seems like a dumb set of questions.

I’m aware that I’m possibly just SOL, but would still appreciate any insight.

Edit: I’ve gotten a few “it’s totally not yours, you know nothing about the device” comments so I’d like to clarify that I got and used this iPod when I was like 12, and it’s been a lifetime since then. Sometimes people legit forget things

submitted by /u/sunset_bowlevard
[link] [comments]

___________________________

@hacking_Attack

@Hacking_Video
___________________________

___________________________

@hacking_Attack

@Hacking_Video
___________________________

Kali Linux Tutorials
Defeat-Defender : Powerful Batch Script To Dismantle Complete Windows Defender Protection

Defeat-Defender is a powerfull batch file to disable windows defender,firewall,smartscreen and execute the payload. Usage Edit Defeat-Defender.bat on this line https://github.com/swagkarna/Defeat-Defender/blob/93823acffa270fa707970c0e0121190dbc3eae89/Defeat-Defender.bat#L72 and replace the direct url of your payload Run the script “run.vbs” . It will ask for Admin Permission.If permission Granted The script will work Silently without console windows… After It Got Admin Permission […]

The post Defeat-Defender : Powerful Batch Script To Dismantle Complete Windows Defender Protection appeared first on Kali Linux Tutorials.

___________________________

@hacking_Attack

@Hacking_Video
___________________________

How I found Cross-Site-Scripting (Reflected) on more than 300 systems!

Hey everyone, welcome to my second write-up. If you didn’t read my first, you can find it…Continue reading on Medium »
Read more...

___________________________

@hacking_Attack

@Hacking_Video
___________________________

___________________________

@hacking_Attack

@Hacking_Video
___________________________

___________________________

@hacking_Attack

@Hacking_Video
___________________________

Hacking on Medium
Exploiting Web Cache Poisoning

https://cdn-images-1.medium.com/max/802/1*4vJ16VBtnaNN_3WISbdyaw.png
What is the need of cache?

Continue reading on Medium »

___________________________

@hacking_Attack

@Hacking_Video
___________________________

___________________________

@hacking_Attack

@Hacking_Video
___________________________

Hacking on Medium
Hacking GraphQL for Fun and Profit — Part 2— Methodology and Examples

https://cdn-images-1.medium.com/max/700/1*w5nR3P3nr4Yqah-trrTdPg.png
Hi everyone!!

Continue reading on Medium »

___________________________

@hacking_Attack

@Hacking_Video
___________________________