Hacking on Medium
HOW TO PERFORM A RCE HACKING ATTACK ON A SYSTEM

https://cdn-images-1.medium.com/max/1920/1*x-n27S5qCWuRN6XLFPlBEw.jpeg
Originally published on Learnhub

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Bayanay – Python Wardriving Tool

Bayanay is a Python Wardriving tool. WarDriving is the act of navigating, on foot or by car, to discover wireless networks in the surrounding area.

Features

Wardriving is done by combining the SSID information obtained with scapy using the HTML5 geolocation feature.

Usage

I cannot be held responsible for the malicious use of the vehicle.

ssidBul.py has been tested via TP-LINK TL WN722N.

Selenium 3.11.0 and Firefox 59.0.2 are used for location.py. Firefox geckodriver is located in the directory where the codes are.

SSID and MAC names and location information were created and changed in the test environment.

ssidBul.py and location.py must be run concurrently.

ssidBul.py result:

20 March 2018 11:48PM|9c:b2:b2:11:12:13|ECFJ3M

20 March 2018 11:48PM|c0:25:e9:11:12:13|T7068

Here is a screenshot of allowing location information while running location.py:
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhyfQRUaQcll3jnmkrlrhyjCVvYOgWhAI8Iq3oUSzHSgzcJ9vBr2JfkDzQ4dFBZFPL3XY5h9hotZowHY8apCgLC6LdsJIdauSHnCYYU_lpl-9hZT_n36brWdhwQqTlIr6wd8CI4sTv8QRVHTWSe6l28r50PYeHXsZweRLi2MsRr9QRWa_3h-DSJYsWy/s728/Bayanay.png
The screenshot of the location information is as follows:
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhAuozKnMvnvkQYv-GSskR6SUZcx5wCz5ckMUl-xM6rSKGkGlGaZSX8L5MQopJ4GEcokZoewnNuWtkNhXc7o6qyxm-UlntWgWnv2iryprKz9F422wwjRGvR8XTLlOzw9WjiQPOGN8zSDfkFkpqZs5Tz8L6EDZgtXtJMg16rj_D3cFCETbSuMN72A8Fl/s1310/Bayanay-1.png
konum.py result:

lat=38.8333635|lon=34.759741899|20 March 2018 11:47PM

lat=38.8333635|lon=34.759741899|20 March 2018 11:48PM

lat=38.8333635|lon=34.759741899|20 March 2018 11:48PM

lat=38.8333635|lon=34.759741899|20 March 2018 11:48PM

lat=38.8333635|lon=34.759741899|20 March 2018 11:48PM

lat=38.8333635|lon=34.759741899|20 March 2018 11:49PM

lat=38.8333635|lon=34.759741899|20 March 2018 11:49PM

After the data collection processes, the following output is obtained as a result of running wardriving.py:

lat=38.8333635|lon=34.759741899|20 March 2018 11:48PM|9c:b2:b2:11:12:13|ECFJ3M

lat=38.8333635|lon=34.759741899|20 March 2018 11:48PM|c0:25:e9:11:12:13|T7068
Click Here To Download

___________________________
@hacking_Attack
@Hacking_Video

Gcash Vulnerability Walkthrough
https://nmochea.medium.com/gcash-vulnerability-walkthrough-c7c938163dfb?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Advisory: Update your Gcash App now to the latest version.Continue reading on Medium » (https://nmochea.medium.com/gcash-vulnerability-walkthrough-c7c938163dfb?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Tryhackme Lian_Yu Makine Çözümü
https://medium.com/@barisures/tryhackme-lian-yu-makine-%C3%A7%C3%B6z%C3%BCm%C3%BC-6fd1e3689e89?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Açıklama: Selam arkadaşlar, Tryhackme platformunda bulunan ‘Lian_Yu’ isimli makinenin çözümünü sizinle paylaşıyor olacağım. Bu makinede…Continue reading on Medium » (https://medium.com/@barisures/tryhackme-lian-yu-makine-%C3%A7%C3%B6z%C3%BCm%C3%BC-6fd1e3689e89?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Different Types of Hackers to be Aware
https://blog.bugzero.io/different-types-of-hackers-to-be-aware-656e68c37bdd?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

A Definitive GuideContinue reading on Bug Zero » (https://blog.bugzero.io/different-types-of-hackers-to-be-aware-656e68c37bdd?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Front-Run a Smart Contract
https://blog.bugzero.io/front-run-a-smart-contract-499d3534eece?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Blockchain data are theoretically immutable. It is offered as an inherent feature to safeguard data integrity from attackers.Continue reading on Bug Zero » (https://blog.bugzero.io/front-run-a-smart-contract-499d3534eece?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Black Hat Ethical Hacking
Intel confirms leaked Alder Lake BIOS Source Code is authentic

Intel confirms leaked Alder Lake BIOS Source Code is authenticPost Views: 30 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/09/Patreon.png Subscribe to Patreon to watch this episode.
Reading Time: 3 Minutes Intel has confirmed that a source code leak for the UEFI BIOS of Alder Lake CPUs is authentic, raising cybersecurity concerns with researchers.Alder Lake is the name of Intel’s 12th generation Intel Core processors, released in November 2021.

On Friday, a Twitter user named ‘freak’ posted links to what was said to be the source code for Intel Alder Lake’s UEFI firmware, which they claim was released by 4chan.

The link led to a GitHub repository named ‘ICE_TEA_BIOS’ that was uploaded by a user named ‘LCFCASD.’ This repository contained what was described as the ‘BIOS Code from project C970.’
https://www.bleepstatic.com/images/news/security/i/intel/alder-lake-source-code-leak/github-project.jpg
Security researchers concernedWhile Intel has downplayed the security risks of the source code leak, security researchers warn that the contents could make it easier to find vulnerabilities in the code.

“The attacker/bug hunter can hugely benefit from the leaks even if leaked OEM implementation is only partially used in the production,” explains hardware security firm Hardened Vault.

“The Insyde’s solution can help the security researchers, bug hunters (and the attackers) find the vulnerablity and understand the result of reverse engineering easily, which adds up to the long-term high risk to the users.”

Positive Technologies hardware researcher Mark Ermolov also warned that the leak included a KeyManifest private encryption key, a private key used to secure Intel’s Boot Guard platform.
A very bad thing happened: now, the Intel Boot Guard on the vendor's platforms can no longer be trusted… ☹️ pic.twitter.com/K5mXcp5ipW

— Mark Ermolov (@_markel___) October 8, 2022
While it is not clear if the leaked private key is used in production, if it is, hackers could potentially use it to modify the boot policy in Intel firmware and byp[...]

___________________________
@hacking_Attack
@Hacking_Video

ass hardware security.

BleepingComputer has contacted Intel, Insyde, and Lenovo with questions about the leak and whether the private keys were used in production.

We will update this article with any responses as we learn more.
Trending: Microsoft SQL servers hacked with FARGO ransomware attacks Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?

If you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com
Source: bleepingcomputer.com Source Link https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Merch.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/10/Images-for-the-News-posts-1-1-300x150.png Linux Kernel 5.19.12 bug could damage Intel laptop displaysOctober 7, 2022
Reading Time: 3 minutes

* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/10/Images-for-the-News-posts-2-300x150.png Microsoft SQL servers backdoored with new malwareOctober 6, 2022
Reading Time: 4 minutes

* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/10/Images-for-the-News-posts-1-300x150.png Researchers get $46k in bounties for Akamai misconfiguration vulnerabilityOctober 5, 2022
Reading Time: 3 minutes

* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/10/Images-for-the-News-posts-300x150.png Microsoft confirms zero-day exploits against Exchange Server in ‘limited’ attacksOctober 4, 2022
Reading Time: 3 minutes
https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/OffSec-Course.png Offensive Security & Ethical Hacking CourseBegin the learning curve of hacking now!
The post Intel confirms leaked Alder Lake BIOS Source Code is authentic first appeared on Black Hat Ethical Hacking.

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
whats the best website or anything to dox someone/ get the most info on them

Let me know if i came to the right place!, Probably not one of the best places to come and ask for help, I'm coming to you guys because i want to dox (get contact information) from this one person, I've done it before but obviously l've had to pay but the main reason I want to do it again and im coming here is because this random female keeps stalking me and has been obsessed with me for the longest and she's sending people my personal pictures. It all started because once she broke up with her ex, months later i started talking to him (her ex) but i didn't know about her all I knew was she was a crazy ex and she ended up getting into the dude's social media and found my n*des and sent them to me and was blackmailing me and ended up sending them to just random people and it got to the point where I had to deactivate my instagram and everything else because she was sending them to people I follow, mind you i follow my niece and brother and she was close to sending it to them mind you my niece is seriously 10 year old. So I did what was best. So if you guys know any websites that can help me the most. What I have about her is her fake instagram and Snapchat and once I have her information i would like to call her parents because from what i know she's underage while me and the person i was talking to are +18, im just trying to be at peace I honestly can't even sleep right because of her. So if you have anything that could help me please Imk. If there is a community that I should ask for better answers Imk please i don't use Reddit that much.

submitted by /u/moesyny
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
making a crypter

recenty, I've been curious about how crypters are made, and I cannot find out how to create my own in Golang, I want it to do the following, take the executable as input, then encrypt it using XOR/AES, and the problem here is about the stub, how can the encrypted executable decrypt itself in the memory?

submitted by /u/Leblancless
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Pool on the roof - October 10, 2022

Have a no0b question? New to hacking? Looking for a script? Need help with your github project? Something wrong with your payload? Stuck on a CTF or bug bounty?

This is a weekly recurring post to make friends with other hackers, ask questions, and get any type of help you may need.

Make sure to read our wiki as it's full of resources for you.

Keep all beginner questions in this weekly stickied post.

submitted by /u/AutoModerator
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video