Introduction Session Hijacking

Session hijacking is defined as taking over an active TCP/IP communication session without the user’s permission. When implemented…Continue reading on Medium »
Read more...

KitPloit - PenTest Tools!
BlackStone - Pentesting Reporting Tool

https://user-images.githubusercontent.com/55983491/182498046-639e515c-8de0-4804-959b-b53145e79109.gif BlackStone project or "BlackStone Project" is a tool created in order to automate the work of drafting and submitting a report on audits of ethical hacking or pentesting.

In this tool we can register in the database the vulnerabilities that we find in the audit, classifying them by internal, external audit or wifi, in addition, we can put your description and recommendation, as well as the level of severity and effort for its correction. This information will then help us generate in the report a criticality table as a global summary of the vulnerabilities found.

We can also register a company and, just by adding its web page, the tool will be able to find subdomains, telephone numbers, social networks, employee emails... https://user-images.githubusercontent.com/55983491/182504746-26c636f4-fe4f-410d-9898-e51f4ae35e6d.png Docker InstallInstall Docker

Install docker-compose
Install BlackStone git clone https://github.com/micro-joan/BlackStone
cd BlackStone
docker-compose up -d User: blackstonePassword: blackstoneManual Install* First we must download an Apache server to host the tool, in my case I use Mamp (I recommend following these steps): https://www.mamp.info/en/downloads/
* We will download the content of this repository and we will have 2 folders (BlackStone and BBDD)
* Once the server starts we will go to c://MAMP/htdocs and paste all the contents of the downloaded folder "BlackStone"
* For the application to work we will have to import the database, we will go to our browser and write "localhost/phpMyAdmin/", you have the database connection file in the folder BlackStone/conexion.php
* We will create a database called blackstone and import the data from the downloaded BBDD folder
* Log in to BlackStone with the username and password "blackstone" UseFirst you need to go to profile settings and add Hunter.io and haveibeenpwned.com tokens: https://user-images.githubusercontent.com/55983491/182502047-36e2b125-de44-463f-8c74-9b8b2cab14e4.gif After having vulnerabilities in the database, we will go to the audited client and we will register a client along with their web page, once registered we can go to customer details and we can see the following information:

THE USE OF THIS APPLICATION IS FOR PROFESSIONAL USE, THE AUTHOR IS NOT RESPONSIBLE FOR A MISUSE EMPLOYED
* Name of business owner
* Social networks of the company owner
* Email and telephone number of the owner of the company
* Exposed password check on the company owner's deep web
* Subdomains of the website as well as information of interest found in google
* Emails of company workers https://user-images.githubusercontent.com/55983491/182502564-02929088-2584-4cd9-9d1a-52ce6cb69f17.gif Once we have the company that we are going to audit registered in the database, we will create a report, adding the date, name of the report and the company to which will be audited. When we register the report, we will give it edit and then we will select the vulnerabilities that we want to appear in the report: https://user-images.githubusercontent.com/55983491/182503343-c1990024-83f2-4c4b-b524-08719d775cac.gif Finally, we will generate the report by clicking on the "overview report" button, and later we will save the page that is generated as ".mht", then we will open it with Word to be able to work on the generated report: https://user-images.githubusercontent.com/55983491/182504065-2a55fac4-b961-4cd8-8d38-1f02c98123fb.gif Download BlackStone

Hacking on Medium
XML External Entity (XXE) Injection Payload List

In this section, we’ll explain what XML external entity injection is, describe some common examples, explain how to find and exploit…

Continue reading on Medium »

Hacking on Medium
XXE Attack : Real life attacks and code examples

XXE (XML External Entity Injection) is a web-based security vulnerability that enables an attacker to interfere with the processing of XML…

Continue reading on Medium »

Hacking on Medium
Practical XPath Injection : Attack and Defense Techniques

Practical XPath Injection Exploits

Continue reading on Medium »

Hacking on Medium
Introduction Session Hijacking

Session hijacking is defined as taking over an active TCP/IP communication session without the user’s permission. When implemented…

Continue reading on Medium »

Hacking on Medium
Security Risk by Accepting Policy Exceptions

https://cdn-images-1.medium.com/max/941/0*qBJv8TwHvMXjLaeN
When an exception to the rule becomes a security breach.

Continue reading on Medium »

hacking: security in practice
Path Traversal

Is path traversal possible in the following python3 code?
import os filename = input("Please enter the filename: ") filename = os.path.join("files/", "file" + filename) with open(filename, 'w') as f: f.write("Hello World")
So the string concatenation is preventing us for just putting '../../../something.txt'. The is no directory file in the files directory only other files which names start with file. Is it possible to break this? If not could there be some other vulnerability?

submitted by /u/JuicyNatural
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

is this channel still helpful?
anonymous poll

👍🏻 – 8
👍👍👍👍👍👍👍 73%

👎 – 3
👍👍👍 27%

👥 11 people voted so far.

We always win
https://www.reddit.com/r/redteamsec/comments/wim2c3/we_always_win/

submitted by /u/entropydaemon8 (https://www.reddit.com/user/entropydaemon8)
[link] (https://i.redd.it/6ohdeqay26r81.jpg) [comments] (https://www.reddit.com/r/redteamsec/comments/wim2c3/we_always_win/)

___________________________
@hacking_Attack
@Hacking_Video

Hacking Articles
Containers Vulnerability Scanner: Trivy

This article talks about Trivy, which is a simple and comprehensive vulnerability scanner for containers and other artifacts, suitable for Continuous Integration and Testing. Table of Contents* Introduction
* Installation
* Scanning Git Repository
* Scanning Container Image
* Scanning Filesystem
* Scanning the running Containers
* Embed Trivy in Dockerfile IntroductionTrivy is an open-source tool by aqua security to scan for vulnerabilities and misconfiguration errors. This tool works at various levels: it can evaluate Infrastructure as Code, inspect container images, deliver configuration file assistance, analyze Kubernetes implementations, and review the code in a Git repository. With the ease of usage, trivy can be simply be integrated in CI/CD pipeline (DevSecOps) by installing and adding binary to the project. Trivy offers complete visibility across programming language and operating system packages and has a wide database of vulnerabilities which allows quick scans of critical CVEs. With various new advancements in the tool, it has helped pen-testers and cybersecurity researchers to ensure continuous scans making the process of DevSecOps faster and more efficient. InstallationThe installation is quite simple. Follow the below-given commands to install Trivy from the official repository on your ubuntu machine.
sudo apt-get install wget apt-transport-https gnupg lsb-release
wget -qO - https://aquasecurity.github.io/trivy-repo/deb/public.key | sudo apt-key add -
echo deb https://aquasecurity.github.io/trivy-repo/deb $(lsb_release -sc) main | sudo tee /etc/apt/sources.list.d/trivy.list
https://i0.wp.com/blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjJJkmu8GHT6Sc3frJXUPfeVBigSPD-zukZSLUYdIXtmsp-zS_qRN9PUYwLS5xhKbtbM6QGrdfoFcbL8wNEx0_qdMmy3JSpIa88KRSUUXWJxJaF7wDPx_p6BmjZ26_FZEP4ngq3BaTxd-NNEjOXb2AqcaykIWro_LJUMAwYnJsXcIPOc-UZ2bA4e4d8wA/s16000/1.png?w=640&ssl=1
sudo apt-get update
sudo apt-get install trivy
Once the tool has been installed and updated, you are ready to scan files.

https://i0.wp.com/blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjzrw0eCdhpJKAmzs63C5DUzL1uSrbgI-G9UF-b-4b_SbzsXXsPEPxQNWvY_QDc_AVUqfkz6W8RWjnTtEiUXY-dAF_jR_eRrAn8-NMdDaxRpEpRyxT8b0wz7PGbt1kaxEa_-0U1uyIsBJiz_jpNxvwrb5uBWQe_cqCshH0chJofNEXnqzhp03oMRrRz9g/s16000/2.png?w=640&ssl=1 Scanning Git RepositoryAs I have described above, we can use trivy for scanning security loopholes among multiple platforms.

If you are using Git Repository and you can scan git file directly without downloading the entire package.
sudo trivy repo https://github.com/appsecco/dvna
https://i0.wp.com/blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEibXzPYjbgZM0yzwwlDT2gbU1y46lklKuVSoSJ-OQPNhYKg20n0xa31g5eHFZ6oKmINtWHMyMOCmDxpfkUixrOtKv-X3byU-Q92Ec-zY1XFZ_zyoyGoyw6NP2ct4Xwm4GNfoIMXz6DwTL-6MsxIerV2wWib0QVskBWbmfKuXuSXzrHTSorHh1CEVfxhRg/s16000/3.png?w=640&ssl=1 Scanning Container ImageWith the ever-growing threats to docker security, Trivy is one of the best tools available in the market for scanning Container Images.

You can easily run a quick scan on the docker images to report any vulnerabilities by following the below-given steps.

Step1: Check the Image ID of the Container image you want to scan.
sudo docker images
Step2: Use the below-given command to scan the container image.
sudo trivy image 4621d4fe2959
https://i0.wp.com/blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiCRH0VJ3sf6qBDs6EadNv0tZe_SfLEtDU0rdYlZXh-rnrO1KNGqSIDLO9LWWTcmvFSFUasmf4TOmb0tqdGFwYW4Z0sXQmm_sEzgqn-XpNJVB3FG478rjsa6iRtHqAiTmI17UxbNkEMPJuJvCxcB4OGJd3Gi3BYYbKTsDBjW6OcPnsJYxBwNA0-qwRNQw/s16000/4.png?w=640&ssl=1

You can also scan the images for a particular severity of vulnerabilities and save the report in text format using the below-given command.
sudo trivy image --severity HIGH 4621d4fe2959 > result.txt
tail resul[...]

___________________________
@hacking_Attack
@Hacking_Video

t.txt
https://i0.wp.com/blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjL1lofqNvke1zc6tUuf6RG6RY6HSMFEz3FeeZSWJ9lsXzeQwFu9AxiSD7ZZpEq-OJ6X2Nu417L_iBkMhqP_jJmY5vIRGJVR13_cEokB6ErVe1eAJ4HfGpQDeTDDGGHvOexSo8LmBtOJHJdW8yFVC9U5_HHTbMttApIgwUr00PfHz9OKOzV9qhEgWJKVw/s16000/5.png?w=640&ssl=1 Scanning Filesystem Trivy can be used to scan a filesystem (such as a host machine, a virtual machine image, or an unpacked container image filesystem).

(Note: We are using vulnerable-node from Filesystem for this practical.)

Use the below-given command to scan any filesystem for vulnerabilities.
trivy conf services/
https://i0.wp.com/blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEglKpRjy3nKSAKVj4RmiyB4IP459DTh09_DMu6rFao3kOpTGQzsMOT2cxt5AXa5PsxbveSnxuo4GuT48SSHWemARoHET8xl28XWiSdpQDrQgFOvHYsgy4k6K0aOKkng9w42elgWHQDhFbDkt6gd7RNJ5ckr3NRSaMEInOdCVWi5P_bChIx9JdnY56lmMQ/s16000/6.png?w=640&ssl=1 Scanning the running ContainersYou can quickly scan the running container from inside. Follow the below-given steps to scan a docker file.

Step1: Run the docker file that you want to scan.
sudo docker run -it alpine
Step2: Add Trivy scanner to the file and run it.
apk add curl \
&& curl -sfL https://raw.githubusercontent.com/aquasecurity/trivy/main/contrib/install.sh | sh -s -- -b /usr/local/bin \    && trivy filesystem --exit-code 1 --no-progress /
https://i0.wp.com/blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh7ZlI5RltN-TQxOoQs_cDHRUjwGNf7RRiU7ZTARriPW1Ssv_d0jTCl7sc7xRprm_9HV2_ddsDzratEfm9PCTnNeThs3DkRodaxocewZBWls-iR8wxvmsgiumuokSZgXIN_5mcsZ9P7n1kbK1uJC5a_v4QxCJJ8HaGLS9zG3MC7GkIL8iMdStVrCmxeVQ/s16000/7.png?w=640&ssl=1 Embed Trivy in DockerfileYou can also scan the image as part of the build process by embedding Trivy in the Dockerfile. This approach can be used to update Dockerfiles currently using Aqua’s Micro scanner. Follow the below-given steps to scan the docker file while building it.

Step1: Add trivy to the docker file.
FROM alpine:3.7
 RUN apk add curl \
    && curl -sfL https://raw.githubusercontent.com/aquasecurity/trivy/master/contrib/install.sh | sh -s -- -b /usr/local/bin \
    && trivy filesystem --exit-code 1 --no-progress /
Step2 : Build the image.
sudo docker build -t vulnerable image .
https://i0.wp.com/blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhBWSgJKezqdBEDhXlPlfzX_MNnPvm17-IR1nZ7iv1ywcU9Ut73bIr3vyESN_3zqaBzmPFrC6786oDjyEZeOQdnczNZ2Z1meptDBkFf2TiCSaTvO9EEbupcg6I3NoNmBBI628VHmmWDAtFLfR2u5X3vI6r7XJwopIZryOH3I1B8WLCVik1MIhECwgKYMw/s16000/8.png?w=640&ssl=1

It will scan the docker file while the image is being built and give the report as shown below.

https://i0.wp.com/blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjSe8EsDwrbg88ex0nty9RfdKaZkemAcg7zRMIcSMUkls8ITjwqeugATPz3Gix-AeDw8lpqMI9yDUOo3L8HIc2o2HjH3mpyhnw2ge_MlgIMCQ_tyvSY-Hz3mG-4DgpMOArxBngY60S0d8oP76lNzo3uPVny3xyvA9WhuX8qGUyrjHjuD2WzQ6I7-bAMrw/s16000/9.png?w=640&ssl=1

Thanks for reading the article.

Author: Mukund Mehrotra is a cybersecurity researcher, technical writer and an enthusiastic pen-tester at Hacking Articles. Contact here.

The post Containers Vulnerability Scanner: Trivy appeared first on Hacking Articles.

___________________________
@hacking_Attack
@Hacking_Video