hacking: security in practice
Removing google review job

Per title hiring

submitted by /u/SchemeSuccessful7640
[link] [comments]

A story of Host Header injection

Hii all, I am back with a new hacking story . A few days ago, I was hunting on one of the VPD program Where i find a host-head injection…Continue reading on Medium »
Read more...

A story of Host Header injection
https://medium.com/@milanjain7906/a-story-of-host-header-injection-c977adbf0889?source=rss------bug_bounty-5

Hii all, I am back with a new hacking story . A few days ago, I was hunting on one of the VPD program Where i find a host-head injection…Continue reading on Medium » (https://medium.com/@milanjain7906/a-story-of-host-header-injection-c977adbf0889?source=rss------bug_bounty-5)

Decrypt WEP Traffic using Bruteforce with Insufficient IVs
https://www.reddit.com/r/redteamsec/comments/xdu7q1/decrypt_wep_traffic_using_bruteforce_with/

submitted by /u/tbhaxor (https://www.reddit.com/user/tbhaxor)
[link] (https://tbhaxor.com/decrypt-wep-traffic-with-insufficient-ivs/) [comments] (https://www.reddit.com/r/redteamsec/comments/xdu7q1/decrypt_wep_traffic_using_bruteforce_with/)

Hacking on Medium
A story of Host Header injection

https://cdn-images-1.medium.com/max/1000/1*J2WdmbbhQdLxOSyN3-B6HA.jpeg
Hii all, I am back with a new hacking story . A few days ago, I was hunting on one of the VPD program Where i find a host-head injection…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Your system response time can be used to crack passwords — timing attack

Sample

Continue reading on ByteSizeSecurity »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Every Mouse Click You Make, I’ll Be Watching You ☠☠

https://cdn-images-1.medium.com/max/2600/0*9fEK7FmxQIB5p7ph
Be very careful what you search for on the Internet. Search engines aren’t the only ones that track your online habits. So does every…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
PersistenceSniper : Powershell Script That Can Be Used By Blue Teams, Incident Responders And System Administrators

PersistenceSniper is a Powershell module that can be used by Blue Teams, Incident Responders and System Administrators to hunt persistences implanted in Windows machines. The script is also available on Powershell Gallery. The tool is under active development with new releases coming out by the week, so make sure to use the up-to-date version! The WhyWhy writing such a tool, you might ask. Well, for starters, I tried looking around and I did not find a tool which suited my particular use case, which was looking for known persistence techniques, automatically, across multiple machines, while also being able to quickly and easily parse and compare results. Sure, Sysinternals’ Autoruns is an amazing tool and it’s definitely worth using, but, given it outputs results in non-standard formats and can’t be run remotely unless you do some shenanigans with its command line equivalent, I did not find it a good fit for me. Plus, some of the techniques I implemented so far in PersistenceSniper have not been implemented into Autoruns yet, as far as I know. Anyway, if what you need is an easy to use, GUI based tool with lots of already implemented features, Autoruns is the way to go, otherwise let PersistenceSniper have a shot, it won’t miss it https://s.w.org/images/core/emoji/14.0.0/72x72/1f642.png UsageUsing PersistenceSniper is as simple as firing up Powershell as Administrator and running:

PS C:> git clone https://github.com/last-byte/PersistenceSniper
PS C:> Import-Module .\PersistenceSniper\PersistenceSniper\PersistenceSniper.psd1
PS C:> Find-AllPersistence

If you prefer sticking to the Powershell Gallery version (which is automatically updated through a Github action every time a new version is pushed here on Github), open up Powershell as Administrator and run:

PS C:> Install-Module PersistenceSniper
PS C:> Import-Module PersistenceSniper
PS C:> Find-AllPersistence

If you need a detailed explanation of how to use the tool or which parameters are available and how they work, PersistenceSniper’s Find-AllPersistencesupports Powershell’s help features, so you can get detailed, updated help by using the following command after importing the module:

Get-Help -Name Find-AllPersistence -Full

If you only want to check for a single persistence technique, you can rely on Find-AllPersistence‘s PersistenceMethodparameter. Say, for example, you only want to check for persistences implanted through the Run and RunOnce registry keys:

PS C:> Find-AllPersistence -PersistenceMethod RunAndRunOnce

The PersistenceMethodparameter uses Powershell’s ValidateSetdirective, so you can tab through it instead of writing down the persistence method of choice.

PersistenceSniper’s Find-AllPersistencereturns an array of objects of type PSCustomObject with the following properties:

$PersistenceObject = [PSCustomObject]@{
‘ComputerName’ = $ComputerName
‘Technique’ = $Technique
‘Classification’ = $Classification
‘Path’ = $Path
‘Value’ = $Value
‘Access Gained’ = $AccessGained
‘Note’ = $Note
‘Reference’ = $Reference
‘Signature’ = Find-CertificateInfo (Get-ExecutableFromCommandLine $Value)
‘IsBuiltinBinary’ = Get-IfBuiltinBinary (Get-ExecutableFromCommandLine $Value)
‘IsLolbin’ = Get-IfLolBin (Get-ExecutableFromCommandLine $Value)
}

This allows for easy output formatting and filtering. Let’s say you only want to see the persistences that will allow the attacker to regain access as NT AUTHORITY\SYSTEM (aka System):

PS C:> Find-AllPersistence | Where-Object “Access Gained” -EQ “System”
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjoyVEAWzT8w7wj68BR7jAfdMHR4y1wuiH9ZXw6a10Rjdx-cBpFEt1zPVdT9W08n0egP0_gklMhrEsrAf2wMwVPZyFR6Al7lAfgQ_tY-N8g62GtT96xM-RZKkNZiaK7Xv9v[...]

___________________________
@hacking_Attack
@Hacking_Video

5PTAx1ZjCusT5kE_A3WvBPqkvTZr7GL-dkob3U8BuwFyUKLDgdQx4aMY/s1115/fr.png
Of course, being PersistenceSniper a Powershell-based tool, some cool tricks can be performed, like passing its output to Out-GridViewin order to have a GUI-based table to interact with.
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEinTcuYz1vNEnStLkaeAw18B3BflHqATLRAI9ZNza6u44AtFA1nVF_q5RuRHanQ4Y6iQWQhv9ifTjHm1R9Gf8GJkWAooVXzaQ1hg85E5ivulSvfz4vfgWuTm90sWZFXaUkAo16ztkaQ8towFyYYmk_m0njCpN64Do1ZjVtpK7L16T_uJ4tVf7ls_BBy/s1107/68747470733a2f2f626c6f672e6e6f74736f2e70726f2f696d672f66696e64616c6c70657273697374656e63656578616d706c6530332e706e67.png Interpreting resultsAs already introduced, Find-AllPersistenceoutputs an array of Powershell Custom Objects. Each object has the following properties, which can be used to filter, sort and better understand the different techniques the function looks for:

* ComputerName: this is fairly straightforward. If you run Find-AllPersistencewithout a -ComputerNameparameter, PersistenceSniper will run only on the local machine. Otherwise it will run on the remote computer(s) you specify;
* Technique: this is the name of the technique itself, as it’s commonly known in the community;
* Classification: this property can be used to quickly identify techniques based on their MITRE ATT&CK technique and subtechnique number. For those techniques which don’t have a MITRE ATT&CK classification, other classifications are used, the most common being Hexacorn’s one since a lot of techniques were discovered by him. When a technique’s source cannot be reliably identified, the “Uncatalogued Technique N.#” classification is used;
* Path: this is the path, on the filesystem or in the registry, at which the technique has been implanted;
* Value: this is the value of the registry property the techniques uses, or the name of the executable/library used, in case it’s a technique which relies on planting something on the filesystem;
* Access Gained: this is the kind of access the technique grants the attacker. If it’s a Run key under HKCU for example, the access gained will be at a user level, while if it’s under HKLM it will be at system level;
* Note: this is a quick explanation of the technique, so that its workings can be easily grasped;
* Reference: this is a link to a more in-depth explanation of the technique, should the analyst need to study it more;
* Signature: this property reports information on the signature of the binary associated with the persistence technique found;
* IsBuiltinBinary: this boolean property reports if the binary associated with the persistence technique found is normally found on the Operating System and is considered builtin;
* IsLolbin: this boolean property is set to True if the the binary associated with the persistence technique found is a LOLBin. Dealing with false positivesLet’s face it, hunting for persistence techniques also comes with having to deal with a lot of false positives. This happens because, while some techniques are almost never legimately used, many indeed are by legit software which needs to autorun on system boot or user login.

This poses a challenge, which in many environments can be tackled by creating a CSV file containing known false positives. If your organization deploys systems using something like a golden image, you can run PersistenceSniper on a system you just created, get a CSV of the results and use it to filter out results on other machines. This approach comes with the following benefits:

* Not having to manage a whitelist of persistences which can be tedious and error-prone;
* Tailoring the false positives to the organizations, and their organizational units, which use the tool;
* Making it harder for attackers who want to blend in false positives by not publicly disclosing them in the tool’s code. Find-AllPersistencecomes with parameters allowing direct output of the findings to a CSV file, while also being able to t[...]

___________________________
@hacking_Attack
@Hacking_Video

ake a CSV file as input and diffing the results.

PS C:> Find-AllPersistence -DiffCSV false_positives.csv Looking for persistences by taking incremental snapshotsOne cool way to use PersistenceSniper my mate Riccardo suggested is to use it in an incremental way: you could setup a Scheduled Task which runs every X hours, takes in the output of the previous iteration through the -DiffCSVparameter and outputs the results to a new CSV. By keeping track of the incremental changes, you should be able to spot within a reasonably small time frame new persistences implanted on the machine you are monitoring. Persistence techniques implemented so farThe topic of persistence, especially on Windows machines, is one of those which see new discoveries basically every other week. Given the sheer amount of persistence techniques found so far by researchers, I am still in the process of implementing them. So far the following 34 techniques have been implemented successfully:

* Run Key
* RunOnce Key
* Image File Execution Options
* Natural Language Development Platform 6 DLL Override Path
* AEDebug Keys
* Windows Error Reporting Debugger
* Windows Error Reporting ReflectDebugger
* Command Prompt AutoRun
* Explorer Load
* Winlogon Userinit
* Winlogon Shell
* Windows Terminal startOnUserLogin
* AppCertDlls DLL Injection
* App Paths Hijacking
* ServiceDll Hijacking
* Group Policy Extensions DLLs
* Winlogon MPNotify
* CHM Helper DLL
* Hijacking of hhctrl.ocx
* Startup Folder
* User Init Mpr Logon Script
* AutodialDLL Winsock Injection
* LSA Extensions DLL
* ServerLevelPluginDll DNS Server DLL Hijacking
* LSA Authentication Packages DLL
* LSA Security Packages DLL
* Winlogon Notify Packages DLL
* Explorer Tools Hijacking
* .NET DbgManagedDebugger
* ErrorHandler.cmd Hijacking
* WMI Subscriptions
* Windows Services
* Terminal Services InitialProgram
* Accessibility Tools Backdoor Download

___________________________
@hacking_Attack
@Hacking_Video

Burp Suite Extensions to help you Pentest
https://medium.com/@capturethebugs/burp-suite-extensions-to-help-you-pentest-a37b6085d76f?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

IntroductionContinue reading on Medium » (https://medium.com/@capturethebugs/burp-suite-extensions-to-help-you-pentest-a37b6085d76f?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Burp Suite Extensions to help you Pentest

IntroductionContinue reading on Medium »
Read more...

hacking: security in practice
RFID tags

I'm thinking about getting a RFID key fob that has multiple keys. They offer ranges from uid, cuid, t5577, 8268, and ufuid. Could anyone help explain what these cards would do? So far, my research says that uid is better than ufuid and cuid is better than uid for size, but it has a little more encryption than the uid card. Also, simple examples (like usecase per card type) would be great if you can provide them!

submitted by /u/Its_GameOver
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video