Hacking on Medium
DevSecOps 101: Pre-commit hooks with Talisman and gofindapis

https://cdn-images-1.medium.com/max/1000/0*p1OAgpzosgv2hmlO
Introduction

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Laptop Suggestion for hacking/programming

Hey guys , I want to get a laptop mainly for hacking & programming,I was thinking about having more cores but don't know which brand to go, (windows only below 900$ or 75k INR) can you guys share your suggestions(laptop names) regarding this.

submitted by /u/vinay737
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Learn How To Modify Windows ISOs to make your own Windows 10 "Lite"

Original XDA Thread:

https://forum.xda-developers.com/t/how-to-make-a-lite-or-modded-windows-iso-tool-premade-lite-win-10-iso.4496967/

Hello Friends~!

Today I bring you a guide that teaches you how to use a built in Windows program called Dism.exe to remove unwanted installed programs on windows installation isos. You are also able to embed your own apps. Works on all Windows!

For a full walkthrough with pics, video, download links, and sources, see my XDA thread above!

submitted by /u/Long-Cap6202
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Bought a used PC from a friend of a friend

I bought a pc from a guy a year or two ago. It never occurred to me that he could have installed some kind of spyware. Is there a way I can check for this?

I’ve run several full scans on windows defender which haven’t shown anything but I’m still worried there might be something hiding.

Maybe I’m just paranoid

submitted by /u/North_Ad_2067
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

OAuth 2.0 Hacking
https://gowthamaraj-rajendran.medium.com/oauth-2-0-hacking-67e5d2b9b495?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

OAuth is an open authorization protocol, which allows accessing the resources of the resource owner by enabling the client applications on…Continue reading on Medium » (https://gowthamaraj-rajendran.medium.com/oauth-2-0-hacking-67e5d2b9b495?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Chaos Malware Resurfaces With All-New DDoS & Cryptomining Modules

The previously identified ransomware builder has veered in an entirely new direction, targeting consumers and business of all sizes by exploiting known CVEs through brute-forced and/or stolen SSH keys.

Dark Reading: Attacks/Breaches
Malwarebytes Expands OneView Platform for MSPs

Malwarebytes achieves 250% year-over-year MSP partner growth, introduces new modules to enhance protection, detection, and resolution of threats for SMBs.

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
OAuth 2.0 Hacking

https://cdn-images-1.medium.com/max/1280/0*a3CkALHAV_Cd3i7N.jpg
OAuth is an open authorization protocol, which allows accessing the resources of the resource owner by enabling the client applications on…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Pax : CLI Tool For PKCS7 Padding Oracle Attacks

Pax, Exploit padding oracles for fun and profit!

Pax (PAdding oracle eXploiter) is a tool for exploiting padding oracles in order to:

* Obtain plaintext for a given piece of CBC encrypted data.
* Obtain encrypted bytes for a given piece of plaintext, using the unknown encryption algorithm used by the oracle.

This can be used to disclose encrypted session information, and often to bypass authentication, elevate privileges and to execute code remotely by encrypting custom plaintext and writing it back to the server.

As always, this tool should only be used on systems you own and/or have permission to probe!

Installation

Download from releases, or install with Go:

go get -u github.com/liamg/pax/cmd/pax

Example Usage

If you find a suspected oracle, where the encrypted data is stored inside a cookie named SESS, you can use the following:

pax decrypt –url https://target.site/profile.php –sample Gw3kg8e3ej4ai9wffn%2Fd0uRqKzyaPfM2UFq%2F8dWmoW4wnyKZhx07Bg%3D%3D –block-size 16 –cookies “SESS=Gw3kg8e3ej4ai9wffn%2Fd0uRqKzyaPfM2UFq%2F8dWmoW4wnyKZhx07Bg%3D%3D”

This will hopefully give you some plaintext, perhaps something like:

{“user_id”: 456, “is_admin”: false}

It looks like you could elevate your privileges here!

You can attempt to do so by first generating your own encrypted data that the oracle will decrypt back to some sneaky plaintext:

pax encrypt –url https://target.site/profile.php –sample Gw3kg8e3ej4ai9wffn%2Fd0uRqKzyaPfM2UFq%2F8dWmoW4wnyKZhx07Bg%3D%3D –block-size 16 –cookies “SESS=Gw3kg8e3ej4ai9wffn%2Fd0uRqKzyaPfM2UFq%2F8dWmoW4wnyKZhx07Bg%3D%3D” –plain-text ‘{“user_id”: 456, “is_admin”: true}’

This will spit out another base64 encoded set of encrypted data, perhaps something like:

dGhpcyBpcyBqdXN0IGFuIGV4YW1wbGU=

Now you can open your browser and set the value of the SESScookie to the above value. Loading the original oracle page, you should now see you are elevated to admin level.
Download

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Looking for password to a zip file. Anybody know it?

Hi all,

I downloaded a .rar file of the Pipl database leak but it requires a password to open. Anyone happen to know the password? The file name is US-PPL#_toprakbilen90. Sound familiar to anyone?

submitted by /u/ItsAllPartofTheShow
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
this will get buried, but can anybody possibly find the password to this site?

http://incredibleworldtv.com/ I've been trying for months, but to no avail. I've just now found my fan site for the tv show "you asked for it". it features a ton of old log posts about the show and I want to see them again. if anybody could help, please do.

submitted by /u/hambuiscuit
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Using salts and hash when getting a plaintext password.

Has anybody tried cracking a plain text password if you have the salt and hash combination using Hashcat? May I know how to do it? I'm starting to learn this one.

​

Thanks!

submitted by /u/SS-CoCoNuT
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Black Hat Ethical Hacking
New Chaos malware infects Windows, Linux devices for DDoS attacks

New Chaos malware infects Windows, Linux devices for DDoS attacksPost Views: 2 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/08/Patreon-1.png Subscribe to Patreon to watch this episode.
Reading Time: 3 Minutes A quickly expanding botnet called Chaos is targeting and infecting Windows and Linux devices to use them for cryptomining and launching DDoS attacks.This Go-based malware can also infect various architectures, including x86, x86-64, AMD64, MIPS, MIPS64, ARMv5-ARMv8, AArch64, and PowerPC, used by a wide range of devices from small office/home office routers and enterprise servers.

Even though it mainly propagates by attacking devices unpatched against various security vulnerabilities and SSH brute-forcing, Chaos will also use stolen SSH keys to hijack more devices.

It also backdoors hijacked devices by establishing a reverse shell that will allow the attackers to reconnect at any time for further exploitation.
See Also: So you want to be a hacker? Complete Offensive Security and Ethical Hacking Course
While analyzing around 100 samples discovered in the wild, security researchers Danny Adamitis, Steve Rudd, and Stephanie Walkenshaw at Lumen’s Black Lotus Labs found that Chaos is written in Chinese and uses China-based command-and-control (C2) infrastructure.

They also found that the botnet is targeting an extensive array of industries and has expanded exponentially since it was first spotted in April.

“Using Lumen global network visibility, Black Lotus Labs enumerated the C2s and targets of several distinct Chaos clusters, including a successful compromise of a GitLab server and a spate of recent DDoS attacks targeting the gaming, financial services and technology, and media and entertainment industries – as well as DDoS-as-a-service providers and a cryptocurrency exchange,” the researchers said.

“While the botnet infrastructure today is comparatively smaller than some of the leading DDoS malware families, Chaos has demonstrated rapid growth in the last few months.”
https://www.bleepstatic.com/images/news/u/1109292/2022/Chaos_botnet_growth.png
___________________________
@hacking_Attack
@Hacking_Video

Chaos C2 servers on Lumen’s global backbone to block them from sending or receiving data from infected devices.

Network defenders are advised to monitor for Chaos infections and connections to suspicious servers using indicators of compromise shared on GitHub and to keep their systems patched against newly disclosed security vulnerabilities the malware might start targeting.

Remote workers and router owners should install security updates and patches as soon as possible and change default passwords on all their devices.

“While the shift to Go-based malware has been underway for the last few years, there are few strains that demonstrate the breadth of Chaos in terms of the wide array of architectures and operating systems it was designed to infect,” they concluded.

“Not only does it target enterprise and large organizations but also devices and systems that aren’t routinely monitored as part of an enterprise security model, such as SOHO routers and FreeBSD OS.

“And with a significant evolution from its predecessor, Chaos is achieving rapid growth since the first documented evidence of it in the wild.”
Trending: Revolut hack: personal and banking data exposed
Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?

If you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com
Source: bleepingcomputer.com Source Link https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Merch.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/09/Images-for-the-News-posts-4-1-300x150.png New malware dropper called NullMixer infects Windows machinesSeptember 28, 2022
Reading Time: 4 minutes

* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/09/Images-for-the-News-posts-3-2-300x150.png New Erbium password-stealing malware spreads as game cracks, cheatsSeptember 27, 2022
Reading Time: 4 minutes

* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/09/Images-for-the-News-posts-3-1-300x150.png Microsoft SQL servers hacked with FARGO ransomware attacksSeptember 26, 2022
Reading Time: 4 minutes

* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/09/Images-for-the-News-posts-2-1-300x150.png Python’s Tarfile path traversal bug from 2007 still present in 350k open source reposSeptember 23, 2022
Reading Time: 3 minutes
https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/OffSec-Course.png Offensive Security & Ethical Hacking CourseBegin the learning curve of hacking now!
The post New Chaos malware infects Windows, Linux devices for DDoS attacks first appeared on Black Hat Ethical Hacking.

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Friendship with Google : Dorks

https://cdn-images-1.medium.com/max/2600/1*yv9_F6EfnpkoQOSatgGZkQ.png
Taking help from our friend Google for recon or information gathering.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video