Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
Resetting vending machine NFC key data

Years ago I got a key for vending machines to grab coffee and a friend of a friend had taken the key, modified and made it possible through Mifare Classic Tools on Smartphone to bring the Key to the phone via NFC, reset it and in practice have infinite money. Anyone know the process to change the key? the friend I'm talking about I have no more way to contact him otherwise I would have asked him

submitted by /u/itsm3tt
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Resetting vending machine NFC key data

Years ago I got a key for vending machines to grab coffee and a friend of a friend had taken the key, modified and made it possible through Mifare...

11 viewsedited 11:01

7 views11:56

Hacking Articles Tips Tricks Videos Tutorials

Photo

KitPloit - PenTest Tools!
OSRipper - AV Evading OSX Backdoor And Crypter Framework

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjgbR92Al9Iu7-v4Ki-Atw6q3w8R3epKooAWQ5K4feSMG2gsDCpPFUzwQvIBZHKAQll8IhsoX_DF3PhrJGfa6HOPUzIdSNUrENcm9hWtL9IM8CzSlv7J5McZvN1822KuRntsQPgIM73X_OZiaQnrgBo2omRcr1HbjiiRzmsdvgng1yKKvebWKhf-0dZlA/s16000/OSRipper_1_OSRipper.png OSripper is a fully undetectable Backdoor generator and Crypter which specialises in OSX M1 malware. It will also work on windows but for now there is no support for it and it IS NOT FUD for windows (yet at least) and for now i will not focus on windows.

You can also PM me on discord for support or to ask for new features SubGlitch1#2983 Features* FUD (for macOS)
* Cloacks as an official app (Microsoft, ExpressVPN etc)
* Dumps; Sys info, Browser History, Logins, ssh/aws/azure/gcloud creds, clipboard content, local users etc. (more on Cedric Owens swiftbelt)
* Encrypted communications
* Rootkit-like Behaviour
* Every Backdoor generated is entirely unique DescriptionPlease check the wiki for information on how OSRipper functions (which changes extremely frequently) https://github.com/SubGlitch1/OSRipper/wiki

Here are example backdoors which were generated with OSRipper https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj06eulcwA3cFF-LHX-87KhIJo45Naa70fncqKpjU46vsiT5wprhGdT18yzMO3fg3hciMMFyBlxx-mBIzt1Es-emEtOqaJz7-M8HhpPs218c6penNJRAOGP3YXF3Fm8jpEu4Hrd555rV6rc81KTJ2moGHsECfYg6nZLK-Exo83j5rW_2leLKsolLlgLGg/w470-h640/OSRipper_3_example.png https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh1_n3eqs-u1R7A-7gpkBA5nJXACaKRNd2YKVZgDtO7HgIcn1EsTKm1Z2JeyDa1fZ0fjYRuGvyOJGbxd8cKEa7X1CjdoQ45FhsQm9s9z54exYkj1_YTQSApbcWDC1R2ZWgaVoY_2npfW50pyL35YKnCk9BTvnZqPvTsvF54ec1CH19uX30aGbA2E_9xYA/w640-h390/OSRipper_4_vt.png https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEip3h53atetp7WHcekT2iEVypTbmEKLlrrSV9WxEZ41utdqF_AfI4SeN5ovGrI1biRvJTDUsIBOMPXF-XdjfgnzzRW0x_XoQINlAZhTv_6oIe1wrcLVxbhoXOXhPLVw3cGXPc2QezS6iJ0o6jvA7aC3sA5xCPU0rlqk6B3X-qcFmajK1wDyEEnQOSBAPg/w640-h376/OSRipper_5_vt_app.png macOS .apps will look like this on vt Getting StartedDependenciesYou need python. If you do not wish to download python you can download a compiled release. The python dependencies are specified in the requirements.txt file.

Since Version 1.4 you will need metasploit installed and on path so that it can handle the meterpreter listeners. InstallingLinux

apt install git python -y
git clone https://github.com/SubGlitch1/OSRipper.git
cd OSRipper
pip3 install -r requirements.txt

Windows

git clone https://github.com/SubGlitch1/OSRipper.git
cd OSRipper
pip3 install -r requirements.txt

or download the latest release from https://github.com/SubGlitch1/OSRipper/releases/tag/v0.2.3 Executing programOnly this sudo python3 main.py ContributingPlease feel free to fork and open pull repuests. Suggestions/critisizm are appreciated as well Roadmapv0.1*
✅Get down detection to 0/26 on antiscan.me

*
✅Add Changelog

*
✅Daemonise Backdoor

*
✅Add Crypter

*
✅Add More Backdoor templates

*
✅Get down detection to at least 0/68 on VT (for mac malware) v0.2*
✅Add AntiVM

* [] Implement tor hidden services
*
✅Add Logger

*
✅Add Password stealer

* [] Add KeyLogger
*
✅Add some new evasion options

*
✅Add SilentMiner

* [] Make proper C2 server v0.3Coming soon HelpJust open a issue and ill make sure to get back to you Changelog*
0.2.1

* OSRipper will now pull all information from the Target and send them to the c2 server over sockets. This includes information like browser history, passwords, system information, keys and etc.

*
0.1.6

* Proccess will now trojanise itself as com.apple.system.monitor and drop to /Users/Shared

*
0.1.5

* Added Crypter[...]

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest & Hacking Tools

OSRipper - AV Evading OSX Backdoor And Crypter Framework

8 viewsedited 11:56

Hacking Articles Tips Tricks Videos Tutorials

KitPloit - PenTest Tools! OSRipper - AV Evading OSX Backdoor And Crypter Framework https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjgbR92Al9Iu7-v4Ki-Atw6q3w8R3epKooAWQ5K4feSMG2gsDCpPFUzwQvIBZHKAQll8IhsoX_DF3PhrJGfa6HOPUzIdSNUrENcm9hWtL9IM8CzSl…

*
0.1.4

* Added 4th Module

*
0.1.3

* Got detection on VT down to 0. Made the Proccess invisible

*
0.1.2

* Added 3rd module and listener

*
0.1.1

* Initial Release LicenseMIT AcknowledgmentsInspiration, code snippets, etc.

* htr
* swiftbelt SupportI am very sorry to even write this here but my finances are not looking good right now. If you appreciate my work i would really be happy about any donation. You do NOT have to this is solely optional

BTC: 1LTq6rarb13Qr9j37176p3R9eGnp5WZJ9T DisclaimerI am not responsible for what is done with this project. This tool is solely written to be studied by other security researchers to see how easy it is to develop macOS malware. Download OSRipper

___________________________
@hacking_Attack
@Hacking_Video

9 viewsedited 11:56

Hacking Articles Tips Tricks Videos Tutorials

Hacking on Medium
A succinct overview of the profanity tool vulnerability — Wintermute

A flaw in the Profanity tool, which was utilised by Wintermute to create the private key and the Ethereum account, may have allowed for…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Medium

A succinct overview of the profanity tool vulnerability — Wintermute

A flaw in the Profanity tool, which was utilised by Wintermute to create the private key and the Ethereum account, may have allowed for…

9 viewsedited 13:25

Hacking Articles Tips Tricks Videos Tutorials

9 views13:25

Hacking Articles Tips Tricks Videos Tutorials

Photo

Hacking on Medium
Immunefi Raises $24m for Series A to Secure Web3

https://cdn-images-1.medium.com/max/1200/1*QljSi7Pg0Ij2CRkYdS0vbw.png
Today, we’re announcing that we’ve raised $24m for our Series A round, led by Framework Ventures and joined by other investors like…

Continue reading on Immunefi »

___________________________
@hacking_Attack
@Hacking_Video