Hacking on Medium
Bash — How to display file content without comments
During my Capture The Flag sessions, I have to navigate through a lot of config files which can have a LOT of commented lines, sometimes…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Bash — How to display file content without comments
During my Capture The Flag sessions, I have to navigate through a lot of config files which can have a LOT of commented lines, sometimes…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
Bash — How to display file content without comments
During my Capture The Flag sessions, I have to navigate through a lot of config files which can have a LOT of commented lines, sometimes…
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
How i made the multiple hall of fame in Nokia within 2 minutes
https://cdn-images-1.medium.com/max/600/1*f3yEymFw8K31VyxHk5Pzbg.png
HoF (HALL OF FAME) for reporting a sinlge bug on their several domains through their Nokia vulnerability disclosure
Continue reading on System Weakness »
___________________________
@hacking_Attack
@Hacking_Video
How i made the multiple hall of fame in Nokia within 2 minutes
https://cdn-images-1.medium.com/max/600/1*f3yEymFw8K31VyxHk5Pzbg.png
HoF (HALL OF FAME) for reporting a sinlge bug on their several domains through their Nokia vulnerability disclosure
Continue reading on System Weakness »
___________________________
@hacking_Attack
@Hacking_Video
Medium
How i made the multiple hall of fame in Nokia within 2 minutes
HoF (HALL OF FAME) for reporting a sinlge bug on their several domains through their Nokia vulnerability disclosure
Hacking on Medium
Linux Essential Course In Singapore
Linux Essentials Course and Certification in Singapore 2022
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Linux Essential Course In Singapore
Linux Essentials Course and Certification in Singapore 2022
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
Linux Essential Course In Singapore
Linux Essentials Course and Certification in Singapore 2022
Stored XSS via Upload function at Filename parameter.
https://eslam3kl.medium.com/stored-xss-via-upload-function-at-filename-parameter-6adce8496f3c?source=rss------bug_bounty-5
___________________________
@hacking_Attack
@Hacking_Video
https://eslam3kl.medium.com/stored-xss-via-upload-function-at-filename-parameter-6adce8496f3c?source=rss------bug_bounty-5
___________________________
@hacking_Attack
@Hacking_Video
Medium
Stored XSS via Upload function at Filename parameter.
Stored XSS bug via exploiting the filename parameter through upload function.
Stored XSS bug via exploiting the filename parameter through upload function.Continue reading on Medium » (https://eslam3kl.medium.com/stored-xss-via-upload-function-at-filename-parameter-6adce8496f3c?source=rss------bug_bounty-5)
___________________________
@hacking_Attack
@Hacking_Video
___________________________
@hacking_Attack
@Hacking_Video
Medium
Stored XSS via Upload function at Filename parameter.
Stored XSS bug via exploiting the filename parameter through upload function.
hacking: security in practice
How to add to PATH
I got this while installing AndroRAT: WARNING: The scripts ngrok and pyngrok are installed in '/home/kali/.local/bin' which is not on PATH.
Consider adding this directory to PATH or, if you prefer to suppress this warning, use --no-warn-script-location.
Do I actually need to add this to PATH? If so how do I add it there?
submitted by /u/Dchemist909
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
How to add to PATH
I got this while installing AndroRAT: WARNING: The scripts ngrok and pyngrok are installed in '/home/kali/.local/bin' which is not on PATH.
Consider adding this directory to PATH or, if you prefer to suppress this warning, use --no-warn-script-location.
Do I actually need to add this to PATH? If so how do I add it there?
submitted by /u/Dchemist909
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
How to add to PATH
I got this while installing AndroRAT: WARNING: The scripts ngrok and pyngrok are installed in '/home/kali/.local/bin' which is not on PATH. ...
LDAP Injection and Why it Occurs
https://medium.com/codex/ldap-injection-and-why-it-occurs-1cb4cd666781?source=rss------bug_bounty-5
___________________________
@hacking_Attack
@Hacking_Video
https://medium.com/codex/ldap-injection-and-why-it-occurs-1cb4cd666781?source=rss------bug_bounty-5
___________________________
@hacking_Attack
@Hacking_Video
Medium
LDAP Injection and Why it Occurs
WHAT IS LDAP INJECTION?
WHAT IS LDAP INJECTION?Continue reading on CodeX » (https://medium.com/codex/ldap-injection-and-why-it-occurs-1cb4cd666781?source=rss------bug_bounty-5)
___________________________
@hacking_Attack
@Hacking_Video
___________________________
@hacking_Attack
@Hacking_Video
Medium
LDAP Injection and Why it Occurs
WHAT IS LDAP INJECTION?
Hacking Articles Tips Tricks Videos Tutorials
Photo
KitPloit - PenTest Tools!
DeathSleep - A PoC Implementation For An Evasion Technique To Terminate The Current Thread And Restore It Before Resuming Execution, While Implementing Page Protection Changes During No Execution
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEierHTTP4Pj3H2xPVCaKwYvLXRxzGts64sX47BNeX88REEulwHtQVOV9tP0GIGYQ5RkPO9sy1O172BhIqgr0E6ssx3Echh1P5njQjeaRMdFpq76zdammU0m2lbOUlFsS3lXvvl7Z5C6kFGfCcGKyjKbprM5yMcYJYrHkbXKf8TuT3_4rxzyYfUFM-HAqw/w640-h360/DeathSleep_1_ezgif-5-ee95c9b3b0.gif
A PoC implementation for an evasion technique to terminate the current thread and restore it before resuming execution, while implementing page protection changes during no execution.
Intro
Sleep and obfuscation methods are well known in the maldev community, with different implementations, they have the objective of hiding from memory scanners while sleeping, usually changing page protections and even adding cool features like encrypting the shellcode, but there is another important point to hide our shellcode, and is hiding the current execution thread. Spoofing the stack is cool, but after thinking a little about it I thought that there is no need to spoof the stack… if there is no stack :)
The usability of this technique is left to the reader to assess, but in any case, I think it is a cool way to review some topics, and learn some maldev for those who, like me, are starting in this world.
The main implementation showed here holds everything that we need to take out of the stack in the data section, as global variables, but an impletementation moving everything to the heap will be published soon. It aims to show some key modifications that needs to be done to make this code pic and injectable.
This repository is mirrored between GitHub and GitLab.
Download DeathSleep
___________________________
@hacking_Attack
@Hacking_Video
DeathSleep - A PoC Implementation For An Evasion Technique To Terminate The Current Thread And Restore It Before Resuming Execution, While Implementing Page Protection Changes During No Execution
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEierHTTP4Pj3H2xPVCaKwYvLXRxzGts64sX47BNeX88REEulwHtQVOV9tP0GIGYQ5RkPO9sy1O172BhIqgr0E6ssx3Echh1P5njQjeaRMdFpq76zdammU0m2lbOUlFsS3lXvvl7Z5C6kFGfCcGKyjKbprM5yMcYJYrHkbXKf8TuT3_4rxzyYfUFM-HAqw/w640-h360/DeathSleep_1_ezgif-5-ee95c9b3b0.gif
A PoC implementation for an evasion technique to terminate the current thread and restore it before resuming execution, while implementing page protection changes during no execution.
Intro
Sleep and obfuscation methods are well known in the maldev community, with different implementations, they have the objective of hiding from memory scanners while sleeping, usually changing page protections and even adding cool features like encrypting the shellcode, but there is another important point to hide our shellcode, and is hiding the current execution thread. Spoofing the stack is cool, but after thinking a little about it I thought that there is no need to spoof the stack… if there is no stack :)
The usability of this technique is left to the reader to assess, but in any case, I think it is a cool way to review some topics, and learn some maldev for those who, like me, are starting in this world.
The main implementation showed here holds everything that we need to take out of the stack in the data section, as global variables, but an impletementation moving everything to the heap will be published soon. It aims to show some key modifications that needs to be done to make this code pic and injectable.
This repository is mirrored between GitHub and GitLab.
Download DeathSleep
___________________________
@hacking_Attack
@Hacking_Video
KitPloit - PenTest & Hacking Tools
DeathSleep - A PoC Implementation For An Evasion Technique To Terminate The Current Thread And Restore It Before Resuming Execution…
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
The /proc directory - Part 1
https://cdn-images-1.medium.com/max/1881/1*LLNV5r9Wf8Qoe4-WQL4HgA.png
If you are familiar with working with GNU/Linux, you will know how important it is to know the status of a system by inspecting its…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
The /proc directory - Part 1
https://cdn-images-1.medium.com/max/1881/1*LLNV5r9Wf8Qoe4-WQL4HgA.png
If you are familiar with working with GNU/Linux, you will know how important it is to know the status of a system by inspecting its…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
The /proc directory - Part 1
If you are familiar with working with GNU/Linux, you will know how important it is to know the status of a system by inspecting its…
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Who Is A White Hat Hacker?
https://cdn-images-1.medium.com/max/1200/0*8LPVOzFx8_z9OKH3
When you hear hacking or hackers, you probably picture a bad scene of someone trying to break into websites or company data and hijacking…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Who Is A White Hat Hacker?
https://cdn-images-1.medium.com/max/1200/0*8LPVOzFx8_z9OKH3
When you hear hacking or hackers, you probably picture a bad scene of someone trying to break into websites or company data and hijacking…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
Who Is A White Hat Hacker?
When you hear hacking or hackers, you probably picture a bad scene of someone trying to break into websites or company data and hijacking…
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
100 Essential Cybersecurity Concepts That Every Developer Must Know (Part 2: 11–20)
https://cdn-images-1.medium.com/max/2600/0*iaRDMS3rBOuRWJjB
Your go-to checklist for building secure applications
Continue reading on Level Up Coding »
___________________________
@hacking_Attack
@Hacking_Video
100 Essential Cybersecurity Concepts That Every Developer Must Know (Part 2: 11–20)
https://cdn-images-1.medium.com/max/2600/0*iaRDMS3rBOuRWJjB
Your go-to checklist for building secure applications
Continue reading on Level Up Coding »
___________________________
@hacking_Attack
@Hacking_Video
Medium
100 Essential Cybersecurity Concepts That Every Developer Must Know (Part 2: 11–20)
Your go-to checklist for building secure applications
Introduction to Threat Intelligence ETW
https://www.reddit.com/r/redteamsec/comments/xgp2up/introduction_to_threat_intelligence_etw/
submitted by /u/dmchell (https://www.reddit.com/user/dmchell)
[link] (https://undev.ninja/introduction-to-threat-intelligence-etw/) [comments] (https://www.reddit.com/r/redteamsec/comments/xgp2up/introduction_to_threat_intelligence_etw/)
___________________________
@hacking_Attack
@Hacking_Video
https://www.reddit.com/r/redteamsec/comments/xgp2up/introduction_to_threat_intelligence_etw/
submitted by /u/dmchell (https://www.reddit.com/user/dmchell)
[link] (https://undev.ninja/introduction-to-threat-intelligence-etw/) [comments] (https://www.reddit.com/r/redteamsec/comments/xgp2up/introduction_to_threat_intelligence_etw/)
___________________________
@hacking_Attack
@Hacking_Video
Reddit
From the redteamsec community on Reddit: Introduction to Threat Intelligence ETW
Explore this post and more from the redteamsec community
Evading WinDefender ATP credential-theft: kernel version
https://www.reddit.com/r/redteamsec/comments/xgp3cc/evading_windefender_atp_credentialtheft_kernel/
submitted by /u/dmchell (https://www.reddit.com/user/dmchell)
[link] (https://b4rtik.github.io/posts/evading-windefender-atp-credential-theft-kernel-version/) [comments] (https://www.reddit.com/r/redteamsec/comments/xgp3cc/evading_windefender_atp_credentialtheft_kernel/)
___________________________
@hacking_Attack
@Hacking_Video
https://www.reddit.com/r/redteamsec/comments/xgp3cc/evading_windefender_atp_credentialtheft_kernel/
submitted by /u/dmchell (https://www.reddit.com/user/dmchell)
[link] (https://b4rtik.github.io/posts/evading-windefender-atp-credential-theft-kernel-version/) [comments] (https://www.reddit.com/r/redteamsec/comments/xgp3cc/evading_windefender_atp_credentialtheft_kernel/)
___________________________
@hacking_Attack
@Hacking_Video
reddit
Evading WinDefender ATP credential-theft: kernel version
Posted in r/redteamsec by u/dmchell • 19 points and 0 comments