Hacking on Medium
Command execution: OWASP top vulnerability

https://cdn-images-1.medium.com/max/2600/1*JYgwaEFfqJre6bhC7u-Qiw.jpeg
what is command execution?

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

5. SSH Socks5 Proxy Tunneling with Dynamic Ports.mp4

Watch Full Course :- https://t.me/joinchat/Sye7C3tuRFfA10yN

🔰 Todays findings 🔰

New QNAP NAS Flaws Exploited In Recent Ransomware Attacks - Patch It!
https://thehackernews.com/2021/04/new-qnap-nas-flaws-exploited-in-recent.html

Google Released Chrome 90 With The Fixes Of Zero-Day Flaw – Update Your Chrome Immediately
https://gbhackers.com/google-released-chrome-90-with-the-fixes-of-zero-day-flaw-update-your-chrome-immediately/

S3 Account Search
https://github.com/WeAreCloudar/s3-account-search

Designing sockfuzzer, a network syscall fuzzer for XNU
https://googleprojectzero.blogspot.com/2021/04/designing-sockfuzzer-network-syscall.html


Duo Two-factor Authentication Bypass
https://sensepost.com/blog/2021/duo-two-factor-authentication-bypass/

___________________________
@hacking_Attack
@Hacking_Video

🔰 Todays findings 🔰

Shopify Account Takeover $22500 Bug Bounty
https://youtu.be/YnKcRN6SBKI

CSRF Testing Guide For Bug Bounty Hunters
https://thexssrat.medium.com/csrf-tesguide-for-bug-bounty-hunters-d14db3462695

Passwordstate Password Manager Update Hijacked to Install Backdoor on Thousands of PCs
https://thehackernews.com/2021/04/passwordstate-password-manager-update.html

QR Codes Popularity May Abused to Deliver Malware and Banking Heists
https://gbhackers.com/qr-codes-popularity-may-abused-to-deliver-malware/

Detecting Jakarta Expression Language injections with CodeQL
https://infosecwriteups.com/detecting-jakarta-expression-language-injections-with-codeql-41c25d45cdb3

My Experience With BugBountyHunt3r — Hands on Bug Bounty Hunting Learning Platform
https://smhtahsin33.medium.com/my-experience-with-bugbountyhunt3r-hands-on-bug-bounty-hunting-learning-platform-9da52a50502d


CocoaPods RCE exploit exposed keys to repo used by three million mobile apps
https://portswigger.net/daily-swig/cocoapods-rce-exploit-exposed-keys-to-repo-used-by-three-million-mobile-apps

___________________________
@hacking_Attack
@Hacking_Video

🔰 Todays findings 🔰

RCE via Internal Access to Adminer Database Management (Critical)
https://ahmdhalabi.medium.com/rce-via-internal-access-to-adminer-database-management-critical-d3dc2a1d392a


Hacking GraphQL for Fun and Profit — Part 2— Methodology and Examples
https://busk3r.medium.com/hacking-graphql-for-fun-and-profit-part-2-methodology-and-examples-5992093bcc24

Critical RCE Bug Found in Homebrew Package Manager for macOS and Linux
https://thehackernews.com/2021/04/critical-rce-bug-found-in-homebrew.html

Ransomware Strain Qlocker Targeting QNAP NAS Flaws – Patch It!
https://cybersecuritynews.com/ransomware-strain-qlocker/

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
Posta - Cross-document Messaging Security Research Tool

https://1.bp.blogspot.com/-u98Xm-VgmHI/YIJbmb2d8zI/AAAAAAAAV8Q/mG6ls42M0wAEJ2xylUocrhHU7Z_GS6e4QCNcBGAsYHQ/s16000/posta_1_benso-posta.png Posta is a tool for researching Cross-document Messaging communication. It allows you to track, explore and exploit postMessagevulnerabilities, and includes features such as replaying messages sent between windows within any attached browser. https://1.bp.blogspot.com/-lUICdel30kM/YIJbreJGzZI/AAAAAAAAV8U/5-kGRqeCqTgrY9iQZUp-06GVmSE0hz-cACNcBGAsYHQ/w640-h298/posta_2_main_page.png Prerequisites* Google Chrome / Chromium
* Node.js (optional) InstallationDevelopment EnvironmentRun Posta in a full development environment with a dedicated browser (Chromium):

1. Install Posta git clone https://github.com/benso-io/posta
cd posta
npm install2. Launch the dedicated Chromium session using the following command: node posta 3. Click on the Posta extension to navigate to the UI

Dev mode includes a local web server that serves a small testing site and the exploit page. When running in dev mode, you can access the exploit page at http://localhost:8080/exploit/ Chrome ExtensionRun Posta as a Chrome / Chromium Extension:

1. Clone the repo: git clone https://github.com/benso-io/posta.git2. Navigate to chrome://extensions3. Make sure Developer mode is enabled
4. Click on Load unpacked
5. Choose the chrome-extensiondirectory inside Posta and upload it to your browser
6. Load the extension
7. Pin the extension to your browser
8. Browse to the website you would like to examine
9. Click on the Posta extension to navigate to the UI TabsIn the Tabs section we can find our main Origin, with the iframes it hosts and communicates with through the session. We can choose the specific frame by clicking on it, and observe the postMessages related to that frame only. https://1.bp.blogspot.com/-pUHAIcol8_U/YIJbxrWSh4I/AAAAAAAAV8Y/s_kNz0MEZZwTy43rmj0sDZ_-e2Z8QzongCNcBGAsYHQ/w640-h427/posta_3_tabs.png MessagesIn the Messages section, we can inspect all postMessagetraffic being sent from the origin to its iframes, and vice versa. We can select specific communication for further examination by clicking on it. The Listeners area presents the code which is in charge of handling the communication, we can click and copy its contents for JS code observation. https://1.bp.blogspot.com/-ohzfRYjE2uY/YIJb4qn2XzI/AAAAAAAAV8c/4CZs1EArjwU7nP-BmeIUOlmPsOLNNlUFgCNcBGAsYHQ/w640-h138/posta_4_messages.png https://1.bp.blogspot.com/-hFae1u-uSdE/YIJb4-coMkI/AAAAAAAAV8g/Y_wOfdWmSd4PfIpPso5DS5ZG6wapPYwggCNcBGAsYHQ/w640-h86/posta_5_listeners.png ConsoleIn the console section, we can modify the original postMessagetraffic, and replay the messages with the tampered values which will be sent from the Origin to its iframe.

We should make tests and see if we can affect the behavior of the website by changing the postMessagecontent. If we manage to do so, it's time to try and exploit if from a different Origin, by clicking "Simulate exploit". https://1.bp.blogspot.com/-fqNRZLBNbpc/YIJcB1HkbWI/AAAAAAAAV8o/T4s53xS1s3Qke-jq6gQlWr7Lsxy8RVfsgCNcBGAsYHQ/w640-h186/posta_6_console.png https://1.bp.blogspot.com/-8pLHEY8GykE/YIJcB70-EEI/AAAAAAAAV8s/LLUuFWg3HroUi6P_hzvlGQP6lIg7EKVlwCNcBGAsYHQ/w640-h114/posta_7_buttons.png ExploitClick on the "host" button inorder to navigate to the exploitation window. https://1.bp.blogspot.com/-HmBuGmXw-II/YIJcIQ51SQI/AAAAAAAAV80/hlgFN9DyTf8kM-4vZbTzC7MYKeDS7-wrQCNcBGAsYHQ/w640-h94/posta_8_host.png In the Exploit section, Posta will try and host the specified origin as an iframe in order to initiate postMessagecommunication. Most[...]

___________________________
@hacking_Attack
@Hacking_Video

of the time we won't be able to do so, due to X-Frame-Options being enabled on the origin website.

Therefore, in order to continue with our exploitation, we'll need to gain communication reference with our Origin by initiating the window.openmethod, which can be achieved by clicking on "Open as tab".

We have the console to our right which will help us modify and craft our specified payloads and test them in Cross-Origin Communication, initiated by clicking on the Exploit button. https://1.bp.blogspot.com/-brfeCncpUHM/YIJcMT3nzII/AAAAAAAAV88/h-nVqlPlJxwBeKTHsZ6DTVXdvy2R2iuwwCNcBGAsYHQ/w640-h368/posta_9_exploit_area.png Authors* Chen Gour Arie
* Barak Tawily
* Gal Nagli
* Omer Yaron Download Posta

___________________________
@hacking_Attack
@Hacking_Video

How I got my first Blind XSS on Private Program

Hello everyone, I am Raghuveer Singh Chouhan and, this is my first blog on Blind XSS. Today I will explain how I found Blind XSS on a…Continue reading on Medium »
Read more...

Download Free Courses
Data Science Fundamentals with Python & SQL Specialization

https://s3.eu-central-1.wasabisys.com/courseupload/2021/04/Screen-Shot-2021-04-19-at-9.46.39-AM.png Data Science Fundamentals with Python and SQL Specialization — Coursera — Free download
Build the Foundation for your Data Science career. Develop hands-on experience with Jupyter, Python, SQL. Perform Statistical Analysis on real data sets.
WHAT YOU WILL LEARN
* Working knowledge of Data Science Tools such as Jupyter Notebooks, R Studio, GitHub, Watson Studio
* Python programming basics including data structures, logic, working with files, invoking APIs, and libraries such as Pandas and Numpy
* Statistical Analysis techniques including Descriptive Statistics, Data Visualization, Probability Distribution, Hypothesis Testing and Regression
* Relational Database fundamentals including SQL query language, Select statements, sorting & filtering, database functions, accessing multiple tables
Data science is one of the hottest professions of the decade, and the demand for data scientists who can analyze data and communicate results to inform data driven decisions has never been greater. This Specialization from IBM will help anyone interested in pursuing a career in data science by teaching them fundamental skills to get started in this in-demand field.

The specialization consists of 4 self-paced online courses that will provide you with the foundational skills required for Data Science, including open source tools and libraries, Python, Statistical Analysis, SQL, and relational databases. You’ll learn these data science pre-requisites through hands-on practice using real data science tools and real-world data sets.

Upon successfully completing these courses, you will have the practical knowledge and experience to delve deeper in Data Science and work on more advanced Data Science projects.
DOWNLOAD
Filename: Coursera – Data Science Fundamentals with Python and SQL.zip (download) Filesize: 670.95 MB
Course Content: https://www.coursera.org/specializations/data-science-fundamentals-python-sql

Download Free Courses
Learn How to Make Viral Website and Get Huge Traffic

https://s3.eu-central-1.wasabisys.com/courseupload/2021/04/Screen-Shot-2021-04-19-at-9.44.06-AM.png Learn How to Make Viral Website and Get Huge Traffic — Udemy — Last updated 1/2021 — Free download
In This Course you will Learn How To Make Viral website and Blog . You Do not need do do anything On website What you’ll learn*

Anybody Learn this course who want to Create a awesome website
*

You will Learn Everything In Hosting Panel
*

How to Install WordPress In single Click
*

how to Set up your bussiness email with webmail
*

WordPress dashboard Secret Settings
*

Install Theme With Css code
*

Create Logo and Favicon for your website
*

How to Create auto Viral Website
*

How to Create auto affiliate website in 30 seconds
*

How to Create Menu with secret customizations
*

Footer secret customization Requirements*

Only Internet
*

Laptop Or pc
Description
In This  Amazing Course you will Learn How To Make a Viral Website and Blog. You do not need do do anything On the website.

If you are struggling To make Revenue From Website and Affiliate Marketing so this is the Right Course For you Because you will Learn Each and Everything.

You will Learn

* how to install WordPress
* how to install premium Theme with css code
* how to write amazing SEO post wth the new way
* how to make affiliate website without touching your finger
* how to get traffic
* how to install premium plugins which will give you more traffic

Theme customization

After Creating awesome blog and website, you will start generating traffic less than 3 days only. There are so many affiliate network on internet, you can monetize your blog or website. i would like to introduce some amazing affiliate network which i am using

* Maxbounty
* amazon
* Adworkmedia
* Clickbank
* peerfly

These are top affiliate networks, you can join and start earning money within few weeks fully autopilot mode.

How to Create Viral Content That Generates 2,500 Visitors Per Day

and the mean of viral is The word “viral” means “relating to a piece of content that is circulated rapidly and widely from one web user to another.” In other words, you want to create great content that’s intended to be shared across social networks and spread – like a virus

f that’s the case, then to achieve virality, you have to carefully craft your content creator strategy and execute with attention to the details. To a large extent, the quality of the work that you do will determine how far your content gets shared.

and you will learn a magic course step by step and make a huge revenue per month.

Creating high-quality viral content may not be for everyone. It’s a difficult task, especially when you’re just starting out. For example, if you’re creating visual content or video content, you need to invest in good equipment and sharpen your video editing skills as wel

Practically useful content: After collecting information about the content on the Times home page (i.e., author’s fame, content release timing, writing complexity, author’s gender and length) to determine what factors were most often found in great content that went viral, the researchers concluded that content that is useful in a practical way has a high chance of going viral. This may mean adapting your digital marketing campaign in a way that puts valuable content first.

When it comes to visual content and images that get shared the most, a research experiment by BufferApp found that viral images trigger surprise. This indicates that one of the key things that make images go viral is an element of surprise

his explains how a music video, released by Psy, a previously little-known Korean singer, rocked the world. Within a month, the Gangnam Style [...]

hacking: security in practice
A more or less complete guide on a FUD payload

**Before I start: this guide will not feature any commands so you cant really copy and paste. This is not for skids.

AV evasion is an important factor in almost all engagements. You cant really use any pre-made package such as msfvenom or veil as it will alway be detected by one of the following parts of a GOOD antivirus program.

Part 1: The raw, basic hash check. On Linux you can easely check the md5 of a file from the CLI. This will show a unique string of characters that is specific to that piece of code, written in that specific way. AV programms have a central database of unacceptable hashes. This is actaully easy to bypass. You can add comments or useless functions (ones that add and multiply numbers for example) to change that. I also reccomend to change the names of all variables.

Part 2: A sandbox check. Here your programm will run in a simulated enviroment. It might sound complex but its easyer than you think to bypass. First of all, some programms dont even do that on some code- from my experience some compiled languages dont invoke a sandbox enviroment. Not only that, but the sandbox enviroment does not last forever. It usually sits there for about five seconds and if anything is flagged, the file is removed, if not, the file is let to run free. Bypassing that is not that hard. You can sandwich a sleep function between math or system data collection (such as seeing if its a Nvidia or AMD gpu for example).

Part 3: The network trace. Some more popular AV programs will also see the traffic on your network. Unless some settings are changed on the handler or the process is not migrated to something legitimate so that the network traffic blends in, it will be flagged. This is what I am dealing with right now. My current solution is to either obfuscate the network traffic (would appriciate input on that) or to migrate the process ASAP.

​

TL; DR: change source code, add sleep and delay functions and migrate the process.

submitted by /u/StillPackage4369
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
AirDrop bugs expose Apple users’ email addresses, phone numbers

https://external-preview.redd.it/LKpkPA1pqavGR9tbAQBRtB5_C80gxVRcEra7XMYtBwc.jpg?width=640&crop=smart&auto=webp&s=1c3030055a93bd9c924f8312056bfa5797d1e65e submitted by /u/brownrawbottle
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How to evade anti-virus?

Hi,

I was working on creating a payload with SET. And using social engineering or other means I was able to get it to the targetted device. However, I am not able to evade detection by anti-virus anyway. Can u recommend me in what should I modify that I evade detection from Gmail as well as the host anti virus

submitted by /u/Crafty-Blacksmith-99
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Are there any actual ways to remove an ICloud lock?

I have seen people that say it doesn't exist and others that do. Can someone clarify whether there are any that actually work?

submitted by /u/peculiarcrewmate
[link] [comments]

hacking: security in practice
Does anyone know what's up with Global Resource Systems LLC?

The only facts I've got on them are: Global Resource Systems LLC is a shadowy company that took over a large block of the DoD's IP addresses in the final minutes of Trump's presidency.

Everything else is speculation. And there is a lot of speculation.

submitted by /u/UserNamesCanBe20Char
[link] [comments]

Kali Linux Tutorials
IRTriage : Incident Response Triage – Windows Evidence Collection For Forensic Analysis

Scripted collection of system information valuable to a Forensic Analyst. IRTriage will automatically “Run As ADMINISTRATOR” in all Windows versions except WinXP. The original source was Triage-ir v0.851 an Autoit script written by Michael Ahrendt. Unfortunately Michael’s last changes were posted on 9th November 2012 I let Michael know that I have forked his project: […]

The post IRTriage : Incident Response Triage – Windows Evidence Collection For Forensic Analysis appeared first on Kali Linux Tutorials.

___________________________
@hacking_Attack
@Hacking_Video