I. OverviewContinue reading on Medium » (https://medium.com/@andykhangvn/intigritis-july-0722-xss-challenge-writeup-d94e01a00a15?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Try Hack Me | Brooklyn Nine Nine

https://cdn-images-1.medium.com/max/1920/0*vAE-lH_f2qJ6LaJF.jpg
Brooklyn Nine Nine is very easy room on Try Hack Me, mainly focusing on good enumeration techniques. Usage of predefined tools such as…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
TryHackMe: C0lddbox Writeup

https://cdn-images-1.medium.com/max/2600/0*Qpvew7lNLFi34fmT
A machine that showcases the WordPress exploitation and using SUID find binary to escalate our privileges to root.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
PR-DNSd - Passive-Recursive DNS Daemon

https://blogger.googleusercontent.com/img/a/AVvXsEhczPfUXK-C9SGRwVyjCaV2wOMhQYaatAO36meWvK3QDnqy5Vje9lezAHa3bcmNIaoHz7Jwfyr2bh2PKLfhAijuRFWS_Al5yDMFFuaI4YahJqdymQYDakYTZHhlSK_gJ0jOcRxb5_g2gZj8Jbgk38LdnBrQ2evpYkph4PSJQ7XQXLG_skUJ1KTJP3kU=w640-h360

Passive-Recursive DNS daemon.
Quickstart

nameserver 127.0.0.1 | sudo tee /etc/resolv.conf dig google.com dig -x $(dig +short google.com)">go get github.com/korc/PR-DNSd
sudo setcap cap_net_bind_service,cap_sys_chroot=ep go/bin/PR-DNSd
go/bin/PR-DNSd -upstream 9.9.9.9:53 -listen 127.0.0.1:53
echo nameserver 127.0.0.1 | sudo tee /etc/resolv.conf
dig google.com
dig -x $(dig +short google.com)

If you can't use setcap, you have to use -chroot ""and -listen :options, or run as root.

Use cases

* run as local host DNS service, to fix your netstat/tcpview/lsof etc. output
* as enterprise-internal DNS server, to also be able to do meaningful EDR/IR and log analysis
* as cloud service, to also collect Passive DNS data from non-enterprise (home, BYOD etc.) devices
* hint: you probably want to configure DDoS protection options

* in cloud as DNS-over-TLS server, to additionally provide private DNS for supporting devices (ex: Android 9's private DNS setting)
* ex: domain pattern based firewall/proxy configuration for mobile devices
Running as your own private server for Android9's Private DNS settings

After appropriate setcap, run:

PR-DNSd -tlslisten :853 -cert YOUR_SERVER_CRT_KEY_PEM -upstream 1.1.1.1:53 -store pr-dnsd

Options

-cert string
TCP-TLS listener certificate (required for tls listener)
-chroot string
chroot to directory after start (default "/var/tmp")
-count int
Count of replies allowed before debounce delay is applied (default 100)
-ctmout string
Client timeout for upstream queries
-debounce string
Required time duration between UDP replies to single IP to prevent DoS (default "200ms")
-key string
TCP-TLS certificate key (default same as -cert value)
-listen string
listen address (default ":53")
-silent
Don't report normal data
-store string
Store PTR data to specified file
-tlslisten string
TCP-TLS listener address (default ":853")
-upstream string
upstream DNS serv er (tcp-tls:// prefix for DoT) (default "1.1.1.1:53")
(with tls and chroot, ensure ca-certificates and resolv.conf in chroot are properly set up)

Download PR-DNSd

___________________________
@hacking_Attack
@Hacking_Video

PR-DNSd - Passive-Recursive DNS Daemon
http://www.kitploit.com/2022/07/pr-dnsd-passive-recursive-dns-daemon.html

___________________________
@hacking_Attack
@Hacking_Video

Passive-Recursive DNS daemon.
Quickstart nameserver 127.0.0.1 | sudo tee /etc/resolv.conf dig google.com dig -x $(dig +short google.com)">go get github.com/korc/PR-DNSd
sudo setcap cap_net_bind_service,cap_sys_chroot=ep go/bin/PR-DNSd
go/bin/PR-DNSd -upstream 9.9.9.9:53 -listen 127.0.0.1:53
echo nameserver 127.0.0.1 | sudo tee /etc/resolv.conf
dig google.com
dig -x $(dig +short google.com) If you can't use setcap, you have to use -chroot "" and -listen : options, or run as root. Use cases run as local host DNS service, to fix your netstat/tcpview/lsof etc. output as enterprise-internal DNS server, to also be able to do meaningful EDR/IR and log analysis as cloud service, to also collect Passive DNS data from non-enterprise (home, BYOD etc.) devices hint: you probably want to configure DDoS protection (https://www.kitploit.com/search/label/Protection) options in cloud as DNS-over-TLS server, to additionally provide private DNS for supporting devices (ex: Android 9's private DNS setting) ex: domain pattern based firewall/proxy configuration for mobile devices Running as your own private server for Android9's Private DNS settings After appropriate setcap, run: PR-DNSd -tlslisten :853 -cert YOUR_SERVER_CRT_KEY_PEM -upstream 1.1.1.1:53 -store pr-dnsd Options -cert string
TCP-TLS listener (https://www.kitploit.com/search/label/Listener) certificate (required for tls listener)
-chroot string
chroot to directory (https://www.kitploit.com/search/label/Directory) after start (default "/var/tmp")
-count int
Count of replies allowed before debounce delay is applied (default 100)
-ctmout string
Client timeout for upstream queries
-debounce string
Required time duration between UDP replies to single IP to prevent DoS (default "200ms")
-key string
TCP-TLS certificate key (default same as -cert value)
-listen string
listen address (default ":53")
-silent
Don't report normal data
-store string
Store PTR data to specified file
-tlslisten string
TCP-TLS listener address (default ":853")
-upstream string
upstream DNS serv er (tcp-tls:// prefix for DoT) (default "1.1.1.1:53")
(with tls and chroot, ensure ca-certificates and resolv.conf in chroot are properly set up)


Download PR-DNSd (https://github.com/korc/PR-DNSd)

___________________________
@hacking_Attack
@Hacking_Video

Looking for an old website..
https://www.reddit.com/r/Pentesting/comments/wd4hl6/looking_for_an_old_website/

There was a hacker run website which was formerly "omg.lol". Obviously the tools they would offer, I would never use for nefarious or illegal purposes. That being said the site is now the URL for some meme-diabetes garbage app. The original site had memory stick keyloggers for PCs and keyloggers and backdoors into iPhone via power cable. I'm sure this is a shot in the dark but it was worth a try. submitted by /u/muh_fuckin_uhh (https://www.reddit.com/user/muh_fuckin_uhh)
[link] (https://www.reddit.com/r/Pentesting/comments/wd4hl6/looking_for_an_old_website/) [comments] (https://www.reddit.com/r/Pentesting/comments/wd4hl6/looking_for_an_old_website/)

___________________________
@hacking_Attack
@Hacking_Video

VAPT — Common & Uncommon Interview Questions! Episode-1

Here are some of the amazing interview questions that we came across and wanted to share with you.Continue reading on Medium »
Read more...

Intigriti’s July 0722 XSS Challenge Writeup

I. OverviewContinue reading on Medium »
Read more...

Responder Starting Point HacktheBox Walkthrough
https://medium.com/@wesecure1337/responder-starting-point-hackthebox-walkthrough-dad2224629c3?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Responder Starting Point is a very good Challenge by HackTheBox. In this article we are going exploit it.Continue reading on Medium » (https://medium.com/@wesecure1337/responder-starting-point-hackthebox-walkthrough-dad2224629c3?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Dear all pen testers I have a few questions for you all that I would love to hear the answers to:
https://www.reddit.com/r/Pentesting/comments/wd7m1w/dear_all_pen_testers_i_have_a_few_questions_for/

1: is a college degree required for this field, could I get a job by just hardcore studying it right out of highschool? 2: How much do or did you make starting out yearly salary? 3: How many hours a week do you work? 4: do you have to have your own machine or software in order to “pen test” or are there softwares that can do it for you? 5: for those of you who work remote, when you are paid, do they take taxes out? Or do they send you the 1099 form for that? submitted by /u/boxing1414 (https://www.reddit.com/user/boxing1414)
[link] (https://www.reddit.com/r/Pentesting/comments/wd7m1w/dear_all_pen_testers_i_have_a_few_questions_for/) [comments] (https://www.reddit.com/r/Pentesting/comments/wd7m1w/dear_all_pen_testers_i_have_a_few_questions_for/)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How to identify types of chips in cards and cloning them?

Main Question:

I've got a bus pass for work as a newbie software engineer. intrigued in the system, as it was prosseing both the payment and bus pass (pysical card) on what looked like the same receiver, I was wondering whether or not they had they had same chip but differnet instruftions... idk?

​

Side note:

I was wanting to clone my card anyway as I loose it alot and having spares would be a big relief. Does anyone how how I would do this?

submitted by /u/SadMongoos
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
duplicate android kernel bug

submitted by /u/ParkingMobile2095
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Have any recommendations on articles/videos on decompiling old Win3.0/DOS games? Ghidra?

I recently stumbled upon a few floppy disks of super old MS DOS games, and I'm looking to learn how to use Ghidra or some other tools to decompile those games, embedded assets, and other stuff. I want to try re-compiling them with custom tweaks. Or maybe code injection? Let me know if you have any ideas or recommendations. DrainStorm is one of them. I've also got Chips Challenge, the original. Ski Free. Some real random goodies.

submitted by /u/natesovenator
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video