Hacking on Medium
ETHW Core has confirmed that a contract vulnerability attack against a bridge is not a replay…

ETHW Core had confirmed on Sep 16th that the information reported by a security company is not a replay attack against ETHW, but an attack…

Continue reading on Medium »

Hacking on Medium
Hacking SickOS 1.1 — a walkthrough

https://cdn-images-1.medium.com/max/2474/1*7aqzKbAQX87z_XeuxbmLyQ.png
This was a bit of a journey for me, because I got stuck on making an exploit work instead of realising there was an easier way :(

Continue reading on Medium »

Hacking on Medium
ETHW Core 已确认了针对某个桥的合约漏洞攻击，并非针对 ETHW 的重放攻击

ETHW Core 已于9.16日确认了某安全公司汇报的信息不属于针对 ETHW 的重放攻击，而是针对某桥合约漏洞的攻击。我们已通过多种方式与桥取得联系并告知风险。一个典型的例子如下，

Continue reading on Medium »

Hacking on Medium
Uber 16.09.2022 Tarihinde Sosyal Mühendislik Yöntemiyle Nasıl Hacklendi ?

https://cdn-images-1.medium.com/max/671/0*fqAGAb_KQPT4AEGz
Öncelikle Uber şirketini tanımayanlar için bir tanım yapmamız gerekiyor. Uber, modern anlamda taksicilik hizmeti sunan, 58 ülkede ve 300…

Continue reading on Medium »

Exploiting Stack-based Buffer Overflow on Windows x64 | Step by Step explanation | Part-2
https://medium.com/@tejas.kand.45/exploiting-stack-based-buffer-overflow-on-windows-x64-step-by-step-explanation-part-2-b902f56492fa?source=rss------bug_bounty-5

Hello Security folks, Tejas here :) I hope you all are doing great. In previous writeup, we reached at the point where we were able to…Continue reading on Medium » (https://medium.com/@tejas.kand.45/exploiting-stack-based-buffer-overflow-on-windows-x64-step-by-step-explanation-part-2-b902f56492fa?source=rss------bug_bounty-5)

hacking: security in practice
Which OS do you use for daily and hacking?

Hi guys, do you use kali or parrotOS as a daily driver? If not, which OS do you use and I assume you do hacking in VM environment.

submitted by /u/ify0useeke1
[link] [comments]

hacking: security in practice
Deauth change channel

Hello,

How can I use aireplay with deauth option to automatically change channel when the network changes channel? The host i'm testing on changes channel automaticly, how can I adapt my adapter to this?

submitted by /u/Jeroendv9
[link] [comments]

hacking: security in practice
How to auto run an exe(virus) that’s on a usb stick

Yes I’m a script kid. But is there a way that’s doesn’t require the pc to restart that auto runs a script (not an auto run file cuz that requires the pc to restart) I mean a way to just plug a flash drive in and instantly transfer and run the malware on the pc

submitted by /u/banboiyt
[link] [comments]

hacking: security in practice
Is it possible to track down an IP address from a YouTube channel?

There is a YouTuber that has a channel devoted to running from cops in his car where he drives down city roads going speeds in excess of 100mph swerving in and out of traffic.

This guy is going to kill someone eventually, but I’d like to forward his entire channel to the authorities before he can do that.

Is there a method to get his IP from his channel?

submitted by /u/tylerrayskeet
[link] [comments]

SSRF ATTACK LEADING TO AWS METADATA

Hello folks,Continue reading on Medium »
Read more...

SSRF ATTACK LEADING TO AWS METADATA
https://medium.com/@Parag_Bagul/ssrf-attack-leading-to-aws-metadata-e95155fa6c6f?source=rss------bug_bounty-5

Hello folks,Continue reading on Medium » (https://medium.com/@Parag_Bagul/ssrf-attack-leading-to-aws-metadata-e95155fa6c6f?source=rss------bug_bounty-5)

KitPloit - PenTest Tools!
FISSURE - Frequency Independent SDR-based Signal Understanding and Reverse Engineering

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjT4t0RFwtzAr8epxvyapLlIsIZ6o5UgUrXCikMLFzMwfwTEt-jgx8Wo53j3Mtljygn55DikGOVdJog2Mxt1MKCJQFHUbSqe9uBhjC2ZUGzbpV-rzIdCbaK5yDMEVtbrf5w_lnlemMYKEHL9EViKfeptH1Bnfa8S6hCgRNp7OsFJQQOnO0Z4BnnMHRQCg/w640-h524/FISSURE_6_iq.png Frequency Independent SDR-based Signal Understanding and Reverse Engineering

FISSURE is an open-source RF and reverse engineering framework designed for all skill levels with hooks for signal detection and classification, protocol discovery, attack execution, IQ manipulation, vulnerability analysis, automation, and AI/ML. The framework was built to promote the rapid integration of software modules, radios, protocols, signal data, scripts, flow graphs, reference material, and third-party tools. FISSURE is a workflow enabler that keeps software in one location and allows teams to effortlessly get up to speed while sharing the same proven baseline configuration for specific Linux distributions.

The framework and tools included with FISSURE are designed to detect the presence of RF energy, understand the characteristics of a signal, collect and analyze samples, develop transmit and/or injection techniques, and craft custom payloads or messages. FISSURE contains a growing library of protocol and signal information to assist in identification, packet crafting, and fuzzing. Online archive capabilities exist to download signal files and build playlists to simulate traffic and test systems.

The friendly Python codebase and user interface allows beginners to quickly learn about popular tools and techniques involving RF and reverse engineering. Educators in cybersecurity and engineering can take advantage of the built-in material or utilize the framework to demonstrate their own real-world applications. Developers and researchers can use FISSURE for their daily tasks or to expose their cutting-edge solutions to a wider audience. As awareness and usage of FISSURE grows in the community, so will the extent of its capabilities and the breadth of the technology it encompasses. Getting StartedSupported

There are two branches within FISSURE to make file navigation easier and reduce code redundancy. The Python2_maint-3.7 branch contains a codebase built around Python2, PyQt4, and GNU Radio 3.7; while the Python3_maint-3.8 branch is built around Python3, PyQt5, and GNU Radio 3.8.
Operating SystemFISSURE BranchUbuntu 18.04 (x64)Python2_maint-3.7Ubuntu 18.04.5 (x64)Python2_maint-3.7Ubuntu 18.04.6 (x64)Python2_maint-3.7Ubuntu 20.04.1 (x64)Python3_maint-3.8Ubuntu 20.04.4 (x64)Python3_maint-3.8
In-Progress (beta)
Operating SystemFISSURE BranchUbuntu 22.04 (x64)Python3_maint-3.8
Note: Certain software tools do not work for every OS. Refer to Software And Conflicts

Installation git clone https://github.com/ainfosec/fissure.git
cd FISSURE
git checkout <python2_maint-3.7or <python3_maint-3.8
./install This will automatically install PyQt software dependencies required to launch the installation GUIs if they are not found.

Next, select the option that best matches your operating system (should be detected automatically if your OS matches an option). https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhrm52dZyH9qZMcq2c39Him6LPq8puqNKhm5tRkg3W29IsfEwnvhLipjdW6KlVy28A4J2MIXcMPWqof9qn4U0HbiFQEzFuvammEbyh07qnd7-aSwKmG-J7lGLJNYFzAGankwEmwI7O2ENNr94yeF2WBURO3smDrUMI-WQTudiQ27rYuM8CSR2rjC94zuA/s1600/FISSURE_1_install1b.png Python2_maint-3.7Python3_maint-3.8 https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjWhaCcEdn-kam-m6Q0EW5yOukTVLkYbOPpjLHmYNUmvwBKQJQYaF-M4AD3rRX6zcIw7omuLsRsBNRrWmTz5LMI2P9yDrmcLiggqfQc_IthnZzi5Qp_bIMMBXa-gJaV6HLXCX3_n3-sah0twlNiv0MxF405J79uMvf4DGll81_Vt1iC2Y1OsmL7FijUGQ/s1600/FISSURE_2_install1a.png It is recommended to install FISSURE on a cle[...]

Authentication Bypass — Bypass OTP Verification

Hello everyone, I am Vignesh, a 20-year-old Security Researcher from TamilNadu, India😊.Continue reading on Medium »
Read more...