hacking: security in practice
What causes MacBook firmware to lock?

I put a pin in and my MacBook went into firmware lock.

submitted by /u/Typical_Rabbit_
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Automated Tools Sql NINJA
https://medium.com/@pentesterclubpvtltd/automated-tools-sql-ninja-5aaddac63ea7?source=rss------bug_bounty-5

sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking…Continue reading on Medium » (https://medium.com/@pentesterclubpvtltd/automated-tools-sql-ninja-5aaddac63ea7?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Bypassing Blacklists CTF In Kali Linux
https://medium.com/@pentesterclubpvtltd/bypassing-blacklists-ctf-in-kali-linux-58fb3df27b9e?source=rss------bug_bounty-5

Continue reading on Medium » (https://medium.com/@pentesterclubpvtltd/bypassing-blacklists-ctf-in-kali-linux-58fb3df27b9e?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Web Security Academy — OS command injection, simple case

This challenge is from the Web Security Academy by Portswigger. It is under the category “OS command injection”. After starting the lab…Continue reading on Medium »
Read more...

Web Security Academy — OS command injection, simple case
https://r4bb1t.medium.com/web-security-academy-os-command-injection-simple-case-d616708a309c?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

This challenge is from the Web Security Academy by Portswigger. It is under the category “OS command injection”. After starting the lab…Continue reading on Medium » (https://r4bb1t.medium.com/web-security-academy-os-command-injection-simple-case-d616708a309c?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Orderby Limit Sql
https://medium.com/@pentesterclubpvtltd/orderby-limit-sql-e215f89b5412?source=rss------bug_bounty-5

Introduction to SQL Limit Order By The limit clause in Mysql is used to restrict the number of the rows retrieved in the resultset of the…Continue reading on Medium » (https://medium.com/@pentesterclubpvtltd/orderby-limit-sql-e215f89b5412?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Orderby Limit Sql

Introduction to SQL Limit Order By The limit clause in Mysql is used to restrict the number of the rows retrieved in the resultset of the…Continue reading on Medium »
Read more...

Irremovable guest in facebook event — Facebook bug bounty
https://medium.com/@rajeevgyawali92/irremovable-guest-in-facebook-event-facebook-bug-bounty-e10e03c98cd5?source=rss------bug_bounty-5

Hello Everyone, This is Rajiv Gyawali from Butwal, Nepal. This is a story of one of my finding on facebook.Continue reading on Medium » (https://medium.com/@rajeevgyawali92/irremovable-guest-in-facebook-event-facebook-bug-bounty-e10e03c98cd5?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Irremovable guest in facebook event — Facebook bug bounty

Hello Everyone, This is Rajiv Gyawali from Butwal, Nepal. This is a story of one of my finding on facebook.Continue reading on Medium »
Read more...

Non brute-forcing options/strategies to find subdomains
https://www.reddit.com/r/Pentesting/comments/wh2cjw/non_bruteforcing_optionsstrategies_to_find/

I'm fairly new to all of this, and when it comes to subdomain enumeration I normally use some brute-force tool, such as gobuster. I'm curious about other alternatives. In your opinion, what are other options I should consider to find subdomains? And why? submitted by /u/elfauno6 (https://www.reddit.com/user/elfauno6)
[link] (https://www.reddit.com/r/Pentesting/comments/wh2cjw/non_bruteforcing_optionsstrategies_to_find/) [comments] (https://www.reddit.com/r/Pentesting/comments/wh2cjw/non_bruteforcing_optionsstrategies_to_find/)

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
Peetch - An eBPF Playground

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgeual7AaE7FCKVcr9ZDZZuJjgbsFgs6ULCVZyzpIhU6mLdhFVplE84bWxjkgpaIQVmY14ZAUyAXfCN4HrZ6q4K3gGrW35Rn7ceJFfw351RsDklEPd-_R8JR2f0hTNSFYWTclsWygTe8_uotn8tJ4UpzvHnf63wO7Bof8TRwGhqJ4Z5pg8Y-R-rGhM9/w640-h472/eBPF.png peetchis a collection of tools aimed at experimenting with different aspects of eBPF to bypass TLS protocol protections.

Currently, peetch includes two subcommands. The first called dumpaims to sniff network traffic by associating information about the source process with each packet. The second called tlsallows to identify processes using OpenSSL to extract cryptographic keys.

Combined, these two commands make it possible to decrypt TLS exchanges recorded in the PCAPng format. Installationpeetchrelies on several dependencies including non-merged modifications of bcc and Scapy. A Docker image can be easily built in order to easily test peetchusing the following command: docker build -t quarkslab/peetch . Commands Walk ThroughThe following examples assume that you used the following command to enter the Docker image and launch examples within it: docker run --privileged --network host --mount type=bind,source=/sys,target=/sys --mount type=bind,source=/proc,target=/proc --rm -it quarkslab/peetch dumpThis sub-command gives you the ability to sniff packets using an eBPF TC classifier and to retrieve the corresponding PID and process names with: peetch dump
curl/1289291 - Ether / IP / TCP 10.211.55.10:53052 > 208.97.177.124:https S / Padding
curl/1289291 - Ether / IP / TCP 208.97.177.124:https > 10.211.55.10:53052 SA / Padding
curl/1289291 - Ether / IP / TCP 10.211.55.10:53052 > 208.97.177.124:https A / Padding
curl/1289291 - Ether / IP / TCP 10.211.55.10:53052 > 208.97.177.124:https PA / Raw / Padding
curl/1289291 - Ether / IP / TCP 208.97.177.124:https > 10.211.55.10:53052 A / Padding Note that for demonstration purposes, dumpwill only capture IPv4 based TCP segments.

For convenience, the captured packets can be store to PCAPng along with process information using --write: peetch dump --write peetch.pcapng
^C This PCAPng can easily be manipulated with Wireshark or Scapy: scapy
>>> l = rdpcap("peetch.pcapng")
>>> l[0]
<ether<ip<tcp<padding>>>
>>> l[0].comment
b'curl/1289909' tlsThis sub-command aims at identifying process that uses OpenSSl and makes it is to dump several things like plaintext and secrets.

By default, peetch tlswill only display one line per process, the --directionsargument makes it possible to display the exchanges messages: peetch tls --directions
<-
> curl (1291078) 208.97.177.124/443 TLS1.-1 ECDHE-RSA-AES128-GCM-SHA256 Displaying OpenSSL buffer content is achieved with --content. peetch tls --content
<-

0000 47 45 54 20 2F 20 48 54 54 50 2F 31 2E 31 0D 0A GET / HTTP/1.1..
0010 48 6F 73 74 3A 20 77 77 77 2E 70 65 72 64 75 2E Host: www.perdu.
0020 63 6F 6D 0D 0A 55 73 65 72 2D 41 67 65 6E 74 3A com..User-Agent:
0030 20 63 75 72 6C 2F 37 2E 36 38 2E 30 0D 0A 41 63 curl/7.68.0..Ac

-> curl (1290608) 208.97.177.124/443 TLS1.-1 ECDHE-RSA-AES128-GCM-SHA256

0000 48 54 54 50 2F 31 2E 31 20 32 30 30 20 4F 4B 0D HTTP/1.1 200 OK.
0010 0A 44 61 74 65 3A 20 54 68 75 2C 20 31 39 20 4D .Date: Thu, 19 M
0020 61 79 20 32 30 32 32 20 31 38 3A 31 36 3A 30 31 ay 2022 18:16:01
0030 20 47 4D 54 0D 0A 53 65 72 76 65 72 3A 20 41 70 GMT..Server: Ap The --secretsarguments will display TLS Master Secrets extracted from memory. The following example leverages --writeto write master secrets to discuss to simplify decruypti[...]

ng TLS messages with Scapy: $ (sleep 5; curl https://www.perdu.com/?name=highly%20secret%20information --tls-max 1.2 -http1.1) &

# peetch tls --write &
curl (1293232) 208.97.177.124/443 TLS1.2 ECDHE-RSA-AES128-GCM-SHA256

# peetch dump --write traffic.pcapng
^C

# Add the master secret to a PCAPng file
$ editcap --inject-secrets tls,1293232-master_secret.log traffic.pcapng traffic-ms.pcapng

$ scapy
>>> load_layer("tls")
>>> conf.tls_session_enable = True
>>> l = rdpcap("traffic-ms.pcapng")
>>> l[13][TLS].msg
[LimitationsBy design, peetch only supports OpenSSL and TLS 1.2. Download Peetch

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
How to Resolve Permission Issues in CI/CD Pipelines

This Tech Tip outlines how DevOps teams can address security integration issues in their CI/CD pipelines.

Dark Reading: Attacks/Breaches
A Digital Home Has Many Open Doors

Development of digital gateways to protect the places where we live, work, and converse need to be secure and many doors need to offer restricted access.

Dark Reading: Attacks/Breaches
Fresh RapperBot Malware Variant Brute-Forces Its Way Into SSH Servers

Over the past few weeks, a Mirai variant appears to have made a pivot from infecting new servers to maintaining remote access.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
A Ransomware Explosion Fosters Thriving Dark Web Ecosystem

For the right price, threat actors can get just about anything they want to launch a ransomware attack — even without technical skills or any previous experience.

Dark Reading: Attacks/Breaches
Genesis IAB Market Brings Polish to the Dark Web

As the market for initial access brokers matures, services like Genesis — which offers elite access to compromised systems and slick, professional services — are raising the bar in the underground economy.

Dark Reading: Attacks/Breaches
Stolen Data Gives Attackers Advantage Against Text-Based 2FA

With names, email addresses, and mobile numbers from underground databases, one person in five is at risk of account compromise even with SMS two-factor authentication in place.

___________________________
@hacking_Attack
@Hacking_Video