Hacking on Medium
BNB Chain Halted After Being Hacked, Estimated $536 Million Compromised

https://cdn-images-1.medium.com/max/1592/1*0gFp7UTq-0LZNA6BLFqlQg.png
A wallet worth more than $536 million started experiencing unusual activity, causing the BNB Chain to come to a complete halt.

Continue reading on Ambros App »

___________________________
@hacking_Attack
@Hacking_Video

Cloudfox - Automating Situational Awareness For Cloud Penetration Tests
http://www.kitploit.com/2022/10/cloudfox-automating-situational.html

___________________________
@hacking_Attack
@Hacking_Video

CloudFox helps you gain situational awareness in unfamiliar cloud environments. It’s an open source command line (https://www.kitploit.com/search/label/Command%20Line) tool created to help penetration testers and other offensive security professionals find exploitable attack paths in cloud infrastructure. CloudFox helps you answer the following common questions (and many more): What regions is this AWS account using and roughly how many resources are in the account? What secrets are lurking in EC2 userdata or service specific environment variables? What actions/permissions does this [principal] have? What roles trusts are overly permissive or allow cross-account assumption? What endpoints/hostnames/IPs can I attack from an external starting point (public internet)? What endpoints/hostnames/IPs can I attack from an internal starting point (assumed breach within the VPC)? What filesystems can I potentially mount from a compromised resource inside the VPC?
Quick Start CloudFox is modular (you can run one command at a time), but there is an aws all-checks command that will run the other aws commands for you with sane defaults: cloudfox aws --profile [profile-name] all-checks

___________________________
@hacking_Attack
@Hacking_Video

CloudFox is designed to be executed by a principal with limited read-only permissions, but it's purpose is to help you find attack paths that can be exploited in simulated compromise scenarios (aka, objective based penetration testing). For the full documentation please refer to our wiki (https://github.com/BishopFox/CloudFox/wiki). Supported Cloud Providers Provider CloudFox Commands AWS 15 Azure 2 (alpha) GCP Support Planned Kubernetes Support Planned Install Option 1: Download the latest binary release (https://github.com/BishopFox/cloudfox/releases) for your platform. Option 2: Install Go (https://golang.org/doc/install), clone the CloudFox repository and compile from source # git clone https://github.com/BishopFox/cloudfox.git
...omitted for brevity...
# cd ./cloudfox
# go build .
# ./cloudfox
Prerequisites AWS AWS CLI installed Supports AWS profiles, AWS environment variables, or metadata retrieval (on an ec2 instance) A principal with one recommended policies attached (described below) Recommended attached policies: SecurityAudit + CloudFox custom policy (https://github.com/BishopFox/cloudfox/blob/main/misc/aws/cloudfox-policy.json) Additional policy notes (as of 09/2022): Policy Notes CloudFox custom policy (https://github.com/BishopFox/cloudfox/blob/main/misc/aws/cloudfox-policy.json) Has a complete list of every permission cloudfox uses and nothing else arn:aws:iam::aws:policy/SecurityAudit Covers most cloudfox checks but is missing newer services or permissions like apprunner:*, grafana:*, lambda:GetFunctionURL, lightsail:GetContainerServices arn:aws:iam::aws:policy/job-function/ViewOnlyAccess Covers most cloudfox checks but is missing newer services or permissions like AppRunner:*, grafana:*, lambda:GetFunctionURL, lightsail:GetContainerServices - and is also missing iam:SimulatePrincipalPolicy. arn:aws:iam::aws:policy/ReadOnlyAccess Only missing AppRunner, but also grants things like "s3:Get*" which can be overly permissive. arn:aws:iam::aws:policy/AdministratorAccess This will work just fine with CloudFox, but if you were handed this level of access as a penetration tester, that should probably be a finding in itself :) Azure Viewer or similar permissions applied.
Supported CommandsProviderCommand NameDescriptionAWSall-checks (https://github.com/BishopFox/cloudfox/wiki/AWS-Commands#all-checks)Run all of the other commands using reasonable defaults. You'll still want to check out the non-default options of each command, but this is a great place to start.AWSaccess-keys (https://github.com/BishopFox/cloudfox/wiki/AWS-Commands#access-keys)Lists active access keys for all users. Useful for cross referencing a key you found with which in-scope account it belongs to.AWSbuckets (https://github.com/BishopFox/cloudfox/wiki/AWS-Commands#filesystems)Lists the buckets in the account and gives you handy commands for inspecting them further.AWSecr (https://github.com/BishopFox/cloudfox/wiki/AWS-Commands#ecr)List the most recently pushed image URI from all repositories. Use the loot file to pull selected images down with docker/nerdctl for inspection.AWSendpoints (https://github.com/BishopFox/cloudfox/wiki/AWS-Commands#endpoints)Enumerates endpoints from various services. Scan these endpoints from both an internal and external position to look for things that don't require authentication, are misconfigured, etc.AWSenv-vars (https://github.com/BishopFox/cloudfox/wiki/AWS-Commands#env-vars)Grabs the environment variables from services that have them (App Runner, ECS, Lambda, Lightsail containers, Sagemaker are supported. If you find a sensitive secret, use cloudfox iam-simulator AND pmapper to see who has access to them.AWSfilesystems (https://github.com/BishopFox/cloudfox/wiki/AWS-Commands#filesystems)Enumerate the EFS and FSx filesystems that you might be able to mount without creds (if you have the right network access).

___________________________
@hacking_Attack
@Hacking_Video

For example, this is useful when you have ec:RunInstance but not iam:PassRole.AWSiam-simulator (https://github.com/BishopFox/cloudfox/wiki/AWS-Commands#iam-simulator)Like pmapper, but uses the IAM policy simulator. It uses AWS's evaluation logic, but notably, it doesn't consider transitive access via privesc, which is why you should also always also use pmapper.AWSinstances (https://github.com/BishopFox/cloudfox/wiki/AWS-Commands#instances)Enumerates useful information for EC2 Instances in all regions like name, public/private IPs, and instance profiles. Generates loot files you can feed to nmap and other tools for service enumeration.AWSinventory (https://github.com/BishopFox/cloudfox/wiki/AWS-Commands#inventory)Gain a rough understanding of size of the account and preferred regions.AWSoutbound-assumed-roles (https://github.com/BishopFox/cloudfox#outbound-assumed-roles)List the roles that have been assumed by principals in this account. This is an excellent way to find outbound attack paths that lead into other accounts.AWSpermissions (https://github.com/BishopFox/cloudfox/wiki/AWS-Commands#permissions)Enumerates IAM permissions associated with all users and roles. Grep this output to figure out what permissions a particular principal has rather than logging into the AWS console and painstakingly expanding each policy attached to the principal you are investigating.AWSprincipals (https://github.com/BishopFox/cloudfox/wiki/AWS-Commands#principals)Enumerates IAM users and Roles so you have the data at your fingertips.AWSrole-trusts (https://github.com/BishopFox/cloudfox/wiki/AWS-Commands#role-trusts)Enumerates IAM role trust policies so you can look for overly permissive role trusts or find roles that trust a specific service.AWSroute53 (https://github.com/BishopFox/cloudfox/wiki/AWS-Commands#route53)Enumerate all records from all route53 managed zones. Use this for application and service enumeration.AWSsecrets (https://github.com/BishopFox/cloudfox/wiki/AWS-Commands#secrets)List secrets from SecretsManager and SSM. Look for interesting secrets in the list and then see who has access to them using use cloudfox iam-simulator and/or pmapper.Azureinstances-map (https://github.com/BishopFox/cloudfox/wiki/Azure-Commands#instances-map)Enumerates useful information for Compute instances in all available resource groups and subscriptionsAzurerbac-map (https://github.com/BishopFox/cloudfox/wiki/Azure-Commands#rbac-map)Enumerates Role Assignments for all tenantsAuthorsCarlos Vendramini (https://github.com/carlosvendramini-bf)Seth Art (@sethsec (https://twitter.com/sethsec))ContributingWiki - How to Contribute (https://github.com/BishopFox/cloudfox/wiki#how-to-contribute)TODOAWS - Add support for GovCloud and China regionsAWS - Add support for hardcoded region (which would override the default of looking in every region)FAQHow does CloudFox compare with ScoutSuite, Prowler, Steampipe's AWS Compliance Module, AWS Security Hub, etc.CloudFox doesn't create any alerts or findings, and doesn't check your environment for compliance to a baseline or benchmark. Instead, it simply enables you to be more efficient during your manual penetration testing activities. If gives you the information you'll likely need to validate whether an attack path is possible or not.Why do I see errors in some CloudFox commands?Services that don't exist in all regions - CloudFox currently makes the same API calls to every region. However, not all regions support all services. For instance, services like Appstream and AWS Grafana are only supported in a subset of the total regions. In the future, we plan to make CloudFox aware of which services run in each region.You don't have permission - Another reason you might see errors if you don't have permissions to make calls that CloudFox is making. Either because the policy doesn't allow it (e.g., SecurityAudit doesn't allow all of the permissions CloudFox needs. Or, it might be an SCP that is

___________________________
@hacking_Attack
@Hacking_Video

blocking you.You can always look in the ~/.cloudfox/cloudfox-error.log file to get more information on errors.Prior work and other related projectsSmogCloud (https://github.com/BishopFox/smogcloud) - Inspiration for the endpoints commandSummitRoute's AWS Exposable Resources (https://github.com/SummitRoute/aws_exposable_resources) - Inspiration for the endpoints commandSteampipe (https://steampipe.io/) - We used steampipe to prototype many cloudfox commands. While CloudFox is laser focused on helping cloud penetration testers, steampipe is an easy way to query any and all of your cloud resources.Principal Mapper (https://github.com/nccgroup/PMapper) - Inspiration for, and a strongly recommended partner to the iam-simulator commandCloudsplaining (https://github.com/salesforce/cloudsplaining) - Inspiration for the permissions commandScoutSuite (https://github.com/nccgroup/ScoutSuite) - Excellent cloud security benchmark tool. Provided inspiration for the --userdata functionality in the instances command, the permissions command, and many othersProwler (https://github.com/prowler-cloud/prowler) - Another excellent cloud security benchmark tool.Pacu (https://github.com/RhinoSecurityLabs/pacu) - Excellent cloud penetration testing tool. PACU has quite a few enumeration commands similar to CloudFox, and lots of other commands that automate exploitation tasks (something that CloudFox avoids by design)CloudMapper (https://github.com/duo-labs/cloudmapper) - Inspiration for the inventory command and just generally CloudFox as a whole

Download Cloudfox (https://github.com/BishopFox/cloudfox)

___________________________
@hacking_Attack
@Hacking_Video

PSScriptAnalyzer: SAST Tool for PowerShell Script
https://codewithvamp.medium.com/psscriptanalyzer-sast-tool-for-powershell-script-f2317e51e6e0?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

PowerShell Script Analyzer, also known as PSScriptAnalyzer, is a static code analysis tool (SAST tool), which examines the PowerShell…Continue reading on Medium » (https://codewithvamp.medium.com/psscriptanalyzer-sast-tool-for-powershell-script-f2317e51e6e0?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Got scammed on Vinted

I tried to sell something then the “buyer” asked for my e-mail and i gave it to her because Im new on the app and didnt know i shouldnt give out my e-mail. Then i got a fake e-mail and a link i clicked on But my browser couldnt open it. It says: “BAD REQUEST The browser (or proxy) sent a request that this server could not understand. “ Am i safe?

submitted by /u/Idekwhatimdoing666
[link] [comments]

hacking: security in practice
EP000: Operation Aurora | HACKING GOOGLE

https://external-preview.redd.it/OpFxagmxwYWLAIu40cZMAgXqg5KMQDQaaQUNjykwx-o.jpg?width=320&crop=smart&auto=webp&s=3787b2a19615ccaf4f864fb6921f9f067edbe1e0 submitted by /u/MrMeta3
[link] [comments]

Dark Reading: Attacks/Breaches
We Can Save Security Teams From Crushing Workloads. Will We?

Today, the processing of mountain-high stacks of alarms is considered "security." That system is failing customers and the cybersecurity workforce.

Dark Reading: Attacks/Breaches
CyberRatings.org Invites Industry Participation in Forthcoming Enterprise Firewall and Data Center Firewall Tests

Test methodologies published today, and their scope includes security effectiveness, performance, stability and reliability, and total cost of ownership.

Software Development Life Cycle
https://blog.bugzero.io/software-development-life-cycle-fc3f06b162c3?source=rss------bug_bounty-5

What is Software?Continue reading on Bug Zero » (https://blog.bugzero.io/software-development-life-cycle-fc3f06b162c3?source=rss------bug_bounty-5)

Cybersecurity Vs Social Engineering: What’s the Difference?
https://blog.bugzero.io/cybersecurity-vs-social-engineering-whats-the-difference-b4f142fbaecd?source=rss------bug_bounty-5