The Hacker News
Here's A New Forum for Cybersecurity Leaders Outside of the Fortune 2000

Perhaps due to the nature of the position, the InfoSec leadership roles tend to be solitary ones. CISOs, or their equivalent decision-makers in organizations without the role, have so many constant drains on their attention – keeping their knowledge fresh, building plans to secure their organizations further – that they often find themselves on an island.
It’s even more challenging for

___________________________
@hacking_Attack
@Hacking_Video

Bug Bounty Tool List

Bug Bounty Tool List Which are useful for HuntingContinue reading on Medium »
Read more...

hacking: security in practice
The ransomware surge ruining lives. BBC speaks to 2 victim organisations hit with crippling ransomware attacks. New Ransomware Task Force launched to attempt to end the boom.

https://external-preview.redd.it/kbda38_SG_l_i5K9zaFjdXtMlLlwk2jZsJfEJBUGVkI.jpg?width=640&crop=smart&auto=webp&s=5a22794715d5c6d17bd451f1f7c13cdc500aa446 submitted by /u/tides977
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Are any Hak5 tools really worth it?

So, since I was a child I've been obsessed with computers. Learning to build them with my dad was always my favorite thing to do when I was younger. I finally took the step and wanted to take my knowledge even deeper, and took a 6 month Network Engineering program. I've always wanted to be a hacker, and during my program my interest shifted from wanting to build networks to wanting to keep them secure. More specifically, Red Teaming is what interests me as well as hug bounties. I've known about Hak5 for as long as I can remember, but I was never able to purchase any of their tools due to financial reasons.. Well I make a bit more money now than I use to lol, but I was just curious if any of these tools are actually worth it and practical? For example, isn't it possible to achieve the same things that a WiFi pineapple can with just a good wireless adapter and some tools in Linux? Another tool I was interested in was the USB Rubber Ducky, but upon further research I've found that the target machine needs to load drivers which can take up to 60 seconds. Not at all like the 8-15 seconds & pwned advertising. The only other one I'm quite interested in is the Bash Bunny, but it's out of stock.

submitted by /u/quave210
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
detection

When using a linux program, how do you remain anonymous while pentesting?

IS proxy chaining the only way, is there a books or way to study this to get more familiar with this practice or skill set?

submitted by /u/Man_Chi1d
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Hacking bot

https://external-preview.redd.it/vYmq51PBoYcuoGFmzXzhijntWb5-AfdP0oFeBjc9rrY.jpg?width=320&crop=smart&auto=webp&s=d613f3355a64b53aa999aa61af9af134853b673e submitted by /u/FireandFlames2002
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Deep Web
sat cheat

are there places that people can access the sat packets ahead of time

submitted by /u/Feisty-Ad9710
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Top 5 Extensions For Hackers

https://www.hackingcage.com/2021/04/TOP-5-EXTENSIONS-FOR-HACKER.htmlContinue reading on Medium »
Read more...

Hacking on Medium
Bug Bounty Tool List

https://cdn-images-1.medium.com/max/765/1*e8fGhrKvmK052vDLNqUfug.png
Bug Bounty Tool List Which are useful for Hunting

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Top 5 Extensions For Hackers

https://cdn-images-1.medium.com/max/1080/1*9KqEXnM0cZ3HNLD4ASVp3Q.jpeg
https://www.hackingcage.com/2021/04/TOP-5-EXTENSIONS-FOR-HACKER.html

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

2FA bypass with burp suit
Join @Hacking_Video

Introduction

Burp has various tools to help make our testing better and faster. In the following scenario we will be using a couple of tools in conjunction with one another to maximize our potential for finding bugs fast.

2FA broken logic



This time it appears we are testing on a blog. Here's what we know:

Your credentials: wiener:peter

Victim's username: carlos

You also have access to the email server to receive your 2FA verification code. (See the email client button)



Let's start by clicking around as we usually do and exploring the application. We should login and as we try this, we notice we need to enter our 2FA code. Let's investigate this flow further.

It seems the most interesting call of this process is a POST to /login2.php where we enter our mfa-code which seems to be our multi factor authentication code. Also notice there is a cookie 'verify' to determine who's MFA code is being checked.



Let's log out of the account and send the POST request to the intruder. Since we can declare who's 2FA code we are checking we might be able to change that username and brute force the 2FA code since it's only a 4 digit code. 

We need to make sure a code is being generated first. To trigger this process we need to send the GET request to /login2.php to the repeater and change that verify parameter to our victim's login.



We will login again and intercept the requests. the first call will go to /login.php, let that one go through to start the 2FA process. as a second call we will send a call to /login2.php, this is to activate the 2FA process.



We can then enter an incorrect 2FA code so we have the request that we need. Let's send this to the repeater.



We are now going to try and brute force the 2FA code. This is only possible because the server checks who's 2FA is being entered by the verify cookie.

We need to change the verify parameter to "carlos" like we did on the GET /login2.php call before and we need to enter a parameter on the 2FA code.



We can do this using the numbers parameter but we have to make sure we set several parameters correctly.



This will ensure that we are always entering 4 digits, at a step of 1 at a time with a min of 0000 and a max of 9999. Now we can start the attack, eventually a response different from the others will come back. 



We can open our request in the browser by right clicking it



Copy that URL, paste it in your browser and suddenly you will be logged in as carlos. This is happening because the login process only serves to trigger the MFA process but we can also trigger that process for anyone else by just changing the verify cookie. Ones we activated the MFA process, we can easily brute force it because there's no rate limit on the server.

In this case it's a 302 status code but it could also have been a different length only or it could even be that all requests give a 302, in that case we can also follow the redirect.



___________________________
@hacking_Attack
@Hacking_Video