Hacking on Medium
Announcing sec3 WatchTower: Smart Monitor for Smart Contracts

https://cdn-images-1.medium.com/max/2600/1*HgbhDSSry0sJxw87o-SCzQ.png
We are glad to announce the first release of sec3 WatchTower: an in-situ threat monitoring service for Solana smart contracts to detect…

Continue reading on Coinmonks »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Immunefi’s Guide to Crypto Phishing Attacks (and the Hackers Who Plot Them)

https://cdn-images-1.medium.com/max/2600/1*FQzzjVFTJlczV1cVW5HyQQ.jpeg
When it comes to crypto hacks and heists, blackhat hackers favor phishing attacks as their main intrusion vector. This trend is…

Continue reading on Immunefi »

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Rekono : Execute Full Pentesting Processes Combining Multiple Hacking Tools Automatically

Rekono combines other hacking tools and its results to execute complete pentesting processes against a target in an automated way. The findings obtained during the executions will be sent to the user via email or Telegram notifications and also can be imported in Defect-Dojo if an advanced vulnerability management is needed. Moreover, Rekono includes a Telegram bot that can be used to perform executions easily from anywhere and using any device. Features* Combine hacking tools to create pentesting processes* Execute pentesting processes* Execute pentesting tools* Review findingsand receive them via emailor Telegramnotifications
* Use Defect-Dojointegration to import the findings detected by Rekono
* Execute toolsand processesfrom Telegram Bot* Wordlistsmanagement Why Rekono?Do you ever think about the steps that you follow when start a pentesting? Probably you start performing some OSINT tasks to gather public information about the target. Then, maybe you run hosts discovery and ports enumeration tools. When you know what the target exposes, you can execute more specific tools for each service, to get more information and maybe, some vulnerabilities. And finally, if you find the needed information, you will look for a public exploit to get you into the target machine. I know, I know, this is an utopic scenario, and in the most cases the vulnerabilities are found due to the pentester skills and not by scanning tools. But before using your skills, how many time do you spend trying to get as information as possible with hacking tools? Probably, too much.

Why not automate this process and focus on find vulnerabilities using your skills and the information that Rekono sends you? Supported tools* theHarvester
* EmailHarvester
* EmailFinder
* Nmap
* Sslscan
* SSLyze
* SSH Audit
* SMBMap
* Dirsearch
* GitLeaks & GitDumper
* Log4j Scanner
* CMSeeK
* OWASP JoomScan
* OWASP ZAP
* Nikto
* SearchSploit
* Metasploit

Thanks to all the contributors of these amazing tools! InstallationDockerExecute the following commands in the root directory of the project:

docker-compose build
docker-compose up -d

If you need more than one tool running at the same time, you can set the number of executions-worker instances:

docker-compose up -d –scale executions-worker=5 Using Rekono CLIIf your system is Linux, you can use rekono-cli to install Rekono in your system

pip3 install rekono-cli
rekono install ConfigurationYou can configure Rekono using two main methods: config.yamlfile and environemnt variables. The properties will be obtained in the following priority:

1. From environment variables
2. From configuration file. You can use the config.yamlas template
3. Default value

Rekono supports the following properties:
Environment VariableConfiguration PropertyDefault ValueDescriptionREKONO_HOMEN/A/opt/rekono or where the source code livesPath to the Rekono homeRKN_FRONTEND_URLfrontend.urlhttp://127.0.0.1:3000URL used to include links to the Rekono frontend in the notificationsRKN_DB_NAMEdatabase.namerekonoDatabase nameRKN_DB_USERdatabase.userN/ADatabase userRKN_DB_PASSWORDdatabase.passwordN/ADatabase passwordRKN_DB_HOSTdatabase.host127.0.0.1Database hostRKN_DB_PORTdatabase.port5432Database portRKN_RQ_HOSTrq.host127.0.0.1Redis Queue hostRKN_RQ_PORTrq.port6379Redis Queue [...]

portRKN_EMAIL_HOSTemail.host127.0.0.1SMTP hostRKN_EMAIL_PORTemail.port587SMTP portRKN_EMAIL_USERemail.userN/ASMTP userRKN_EMAIL_PASSWORDemail.passwordN/ASMTP passwordRKN_TELEGRAM_BOTtelegram.botRekonoTelegram Bot name to be included in the frontendRKN_TELEGRAM_TOKENtelegram.tokenN/ATelegram Bot token. How to get one?RKN_DD_URLdefect-dojo.urlhttp://127.0.0.1:8080Defect-Dojo URLRKN_DD_API_KEYdefect-dojo.api-keyN/ADefect-Dojo API keyN/Adefect-dojo.verifyTrueIndicate if Defect-Dojo certificate should be verifiedN/Adefect-dojo.tags[rekono]Tags included in the items created by Rekono in Defect-DojoN/Adefect-dojo.product-typeRekono ProjectProduct type naem related to products created by Rekono in Defect-DojoN/Adefect-dojo.test-typeRekono Findings ImportTest type name related to tests created by Rekono in Defect-DojoN/Adefect-dojo.testRekono TestTest name related to findings imported by Rekono in Defect-DojoRKN_OTP_EXPIRATION_HOURSsecurity.otp-expiration-hours24Expiration time in hours for One Time Passwords created by RekonoRKN_UPLOAD_FILES_MAX_MBsecurity.upload-files-max-mb500MB limit for files uploaded to Rekono. For example, wordlists filesRKN_TRUSTED_PROXYN/AFalseIndicate if Rekono is running with a trusted reverse proxyRKN_ALLOWED_HOSTSsecurity.allowed-hosts[localhost, 127.0.0.1, ::1]Hosts allowed to access RekonoRKN_SECRET_KEYsecurity.secret-keyGenerated randomlySecurity key used to sign JWT tokens
To configure also the Rekono frontend based on the previous properties, you can run the following command:

This command will add this properties to the rekono/frontend/.envfile:

* VUE_APP_DEFECTDOJO: Enable or disable Defect-Dojo integration features in the frontend
* VUE_APP_DEFECTDOJO_URL: Defect-Dojo URL
* VUE_APP_TELEGRAM_BOT: Name of the Telegram Bot to be displayed in the UI

Of course, you can also configure this properties in the rekono/frontend/.envfile directly Download

Kali Linux Tutorials
Toxssin : An XSS Exploitation Command-Line Interface And Payload Generator

Toxssin is an open-source penetration testing tool that automates the process of exploiting Cross-Site Scripting (XSS) vulnerabilities. It consists of an https server that works as an interpreter for the traffic generated by the malicious JavaScript payload that powers this tool (toxin.js).

This project started as (and still is) a research-based creative endeavor to explore the exploitability depth that an XSS vulnerability may introduce by using vanilla JavaScript, trusted certificates and cheap tricks. Screenshotshttps://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhlPabedtDD-ZOiOU1uaesF6sGkCM69KJGagr8kQt1SM_vOofPsRv-dShg-j94T7y8Q3KtaWiWLgDXe9YqLPv14MoUZ-pi5N7SL1_VhPYfw7fJa54Hd6GLhHNGvNgLCZUoUOSvr_VoS6Ge5RYzy3b1CwF5ldiVUxQ_VN_GnQGsPkIGTLiPUXSSOIxfe/s952/68747470733a2f2f7261772e6769746875622e636f6d2f74336c336d61636875732f746f787373696e2f6d61737465722f53637265656e73686f74732f746f787373696e2d312e706e67.png CapabilitiesBy default, toxssin intercepts:

* cookies (if HttpOnly not present),
* keystrokes,
* paste events,
* input change events,
* file selections,
* form submissions,
* server responses,
* table data (static as well as updates),

Most importantly, toxssin:

* attempts to maintain XSS persistence while the user browses the website by intercepting http requests & responses and re-writing the document,
* supports session management, meaning that, you can use it to exploit reflected as well as stored XSS,
* supports custom JS script execution against sessions,
* automatically logs every session. Installation & Usagegit clone https://github.com/t3l3machus/toxssin
cd ./toxssin
pip3 install -r requirements.txt

To start toxssin.py, you will need to supply ssl certificate and private key files.

If you don’t own a domain with a trusted certificate, you can issue and use self-signed certificates with the following command (although this won’t take you far):

openssl req -x509 -newkey rsa:2048 -keyout key.pem -out cert.pem -days 365

It is strongly recommended to run toxssin with a trusted certificate (see How to get a Valid Certificate in this document). That said, you can start the toxssin server like this:

python3 toxssin.py -u https://your.domain.com -c /your/certificate.pem -k /your/privkey.pem

Visit the project’s wiki for additional information. XSS Exploitation ObstaclesIn my experience, there are 4 major obstacles when it comes to Cross-Site Scripting attacks attempting to include external JS scripts:

1. the “Mixed Content” error, which can be resolved by serving the JavaScript payload via https (even with a self-signed certificate).
2. the “NET::ERR_CERT_AUTHORITY_INVALID” error, which indicates that the server’s certificate is untrusted / expired and can be bypassed by using a certificate issued by a trusted Authority.
3. Cross-origin resource sharing (CORS), which is handled appropriately by the toxssin server.
4. Content-Security-Policyheader with the script-srcset to specific domain(s) only will block scripts with cross-domain src from loading. Toxssin relies on the eval()function to deliver its poison, so, if the website has a CSP and the unsafe-evalsource expression is not specified in the script-srcdirective, the attack will most likely fail (i’m working on a second poison delivery method to work around this).

Note: The “Mixed Content” error can of course occur when the target website is hosted via http and the JavaScript payload via https. This limits the scope of toxssin to https only webistes, as (by default) toxssin is started with ssl only. Download

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Botnets in the Age of Remote Work

Here are some strategies for protecting the business against botnets poised to take advantage of remote-work vulnerabilities.

Dark Reading: Attacks/Breaches
Defenders Be Prepared: Cyberattacks Surge Against Linux Amid Cloud Migration

Ransomware in particular poses a major threat, but security vendors say there has been an increase in Linux-targeted cryptojacking, malware, and vulnerability exploits as well, and defenders need to be ready.

Dark Reading: Attacks/Breaches
3 Critical Steps for Reducing Cloud Risk

Having a better understanding of how clouds are built, connected, and managed helps organizations mitigate risks and reduce attack surfaces.

hacking: security in practice
DNS brute force enumerate

Hi to everyone, I've been using Gobuster DNS to enumerate subdomains, but I see other people using other tools and getting more interesting things than me. Which tool is the best to enumerate subdomains using dictionaries? Do you recommend any command in specific?

submitted by /u/Former_Ad2083
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Why do you go to hackercons and what do you love about them? Is there anything you haven't see you wish would be implemented?

As the title suggests, curious about why people go to hackercons, what they hope to get out of them, what they love about them and things you'd like to see more of at cons. :)

submitted by /u/square_wave_
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
What's your workflow/what software do you use for re/pwn?

I'm interested in how other people work so maybe I can borrow some ideas. Personally I'm mostly interested in ctfs and I only use Ghidra, Gdb with pwndbg and a text editor (currently using emacs). When the Ghidra decompiler is hard to understand I sometimes paste the binary into dogbolt to look at the hexrays decompiler.

I thought about using Radare a lot but its hard to find a use case for it... for static analysis I already use Ghidra, even though Radare can use the Ghidra decompiler for me it looks like its better integrated in Ghidra. For dynamic analysis Gdb with pwndbg feels faster for inspecting the stack etc.

Now I'm thinking about learning angr and frida. I'm writing this post partially to check how popular and useful those are among other people, hah.

submitted by /u/fullcoomer_human
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How hard is to shut down tor websites?

Dark web markets are thriving with drugs, guns and even human slaves. How hard for governments to shut them down? These websites got to be in someones computer or server. Is it hard to track? Is there a government who does not cooperate with others and let's this kind of shit happen under their jurisdiction?

UPD: Can't you just block the entire tor network for the country?

submitted by /u/1Blue3Brown
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

New Bug Bounty Alert: Welcome InsureDAO
https://hatsfinance.medium.com/new-bug-bounty-alert-welcome-insuredao-3868d2bdad48?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

A new partnership with InsureDAO begins! A couple months back we announced our beginner partnership with InsureDAO allowing projects to be…Continue reading on Medium » (https://hatsfinance.medium.com/new-bug-bounty-alert-welcome-insuredao-3868d2bdad48?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
noPac - Exploiting CVE-2021-42278 And CVE-2021-42287 To Impersonate DA From Standard Domain User

___________________________
@hacking_Attack
@Hacking_Video