This post is about an bug that I found on Meta (aka Facebook) which allows to make any Endpoint as POST request in SMS Captcha flow which…Continue reading on Medium » (https://lokeshdlk77.medium.com/facebook-sms-captcha-was-vulnerable-to-csrf-attack-8db537b1e980?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
HSTP – Simple Hyper Service Transfer Protocol On Networks

HSTP protocol aims to develop a application layer abstraction for the Hyper Service Transfer Protocol.
HSTP is a recursion as nature of HSTP. This protocol implements itself as a interface. On every internet connected device, there is a HSTP instance. That's why the adoption is not needed. HSTP already running top of the internet. We have just now achieved to explain the protocol over protocols on heterogeneous networks. That's why do not compare with web2, web3 or vice versa AbstractHSTP is a application representation interface for heterogeneous networks.

HSTP interface enforces to implement a set of methods to be able to communicate with other nodes in the network. Thus serves, clients, and other nodes can communicate with each other with trust based, end to end encrypted way. By the time the node resolution is based on fastest path resolution algorithm I wrote.

A small overview

Think about, we’re in the situation of one mother and one father lives a happy life. They had a baby! Suddenly, the mother needed to drink pills regularly to cure a disase. The pill is a poison for the baby. The baby is crying and the mother calls father because he is the only trusted person to help the baby. But the father sometime can not stay at home, he needs to do something to feed the baby. Father heard one milkman has fresh and high quality milks for low price. Father decides to try to talk the milkman, milkman deliver the milk to the father, father carry the milk to the mother. Mother give the milk to the baby. Baby is happy now and the baby sleeps, mother see the baby is happy.

The family never buy the milk from outside, this is the first time they buy milk for the baby: (Mom do not know the number of milkman, milkman do not know the home address) As steps:

0) - Baby wants to drink milk.
1) - Baby cries to the mom.
3) - Mom see the baby is crying.
4) - Mom checks the fridge. Mom sees the milk is empty. (Mother is only trusting the Father)
5) - Mom calls the father.
6) - Father calls the milkman.
7) - Milkman delivers the milk to father.
8) - Father delivers the milk to mom.
9) - Mom gives the milk to the baby.
10) - Baby drinks the milk.
11) - Baby is happy.
12) - Baby sleeps.
13) - Mother see the baby is happy and sleeps.
14) - In order to be able to contact the milkman again, the mother asks the father to tell her that she wants the milkman to save the address of the house and the mobile phone of the mother.
15) - Mother calls the father.
16) - Father calls the milkman.
17) - Milkman saves the address of the house and the mobile phone of the mother.

Oops, tomorrow baby wakes up and cries again,
0) - Baby wants to drink milk.
1) - Baby cries to the mom.
2) - Mom see the baby is crying.
3) - Mom checks the fridge. Mom sees the milk is empty. (Mother is trusting the Father had right decision in the first place by giving the address to the milkman, and the milkman had right decision in the first place by saving the address of the house and the mobile phone of the mother.)
4) - Mother calls the milkman (Mother is trusting the Father's decision only)
5) - Milkman delivers the milk to mom.
6) - Mom gives the milk to the baby.
7) - Baby drinks the milk.
8) - Baby is happy.
9) - Baby sleeps.
10) - Mother see the baby is happy and sleeps.
11) - Mother is happy and the mother trust the milkman now. This document you’re reading is a manifest for the internet people to connecting the other people by trusting the service serve the client and the trust only can be maintainable by providing good services. trust is the key, but not enough for survive. the service has to be reliable, consistent, cheap. unless the people will decide to not ask from you again.

So, it’s easy right? It’s so simple to understand, who are those people in the story?

* Baby is a client.
* Mom i[...]

___________________________
@hacking_Attack
@Hacking_Video

s a client.
* Father is a client.
* Milkman is a server.

also,

* Baby could be a server in [TIME].
* Mom is a server for baby.
* Father is a server for mom.
* Milkman is a server for father.
* Milkman is a server for mom.

Baby is in trusted hands. Nothing to worry about. They love you, you will understand when you grow up and have a child.

// Technical step explanation soon, but not that hard as you see. What is a HSTP?HSTP is a interface, which is a set of methods that must be implemented by the application layer. The interface is used to communicate with other nodes in the network. The interface is designed to be used in a heterogeneous network. What is a HSTP node?HSTP shall be implemented on any layer of network connected devices/environment.

HSTP node could be a TCP server, HTTP server, static file or contract in any chain. One HSTP node is able to call any other HSTP node. Thus the nodes can call each other freely, they can check their system status, and they can communicate with each other. What kind of abstraction layer for networks?HSTP is already implemented on language level, by people for people. English is mostly adopted language around the Earth. JavaScript could be known also mostly adopted language for browser environments. Solidity is for EVM-based chains, hyperbees for TCP based networks, etc.

HSTP interface shall be applied between any HSTP connected devices/networks.

* [Universe] talks to [Universe] via [HSTP]
* [Kind] universe talks over world.
* [World] Earth talks with sound frequencies and HSTP.
* [Country] X sound frequencies on Xish and HSTP.
* [Community] CommunityX Xish on CommunityXish.

* [Country] Y talks Yish and HSTP.
* [Country] Z talks Zish and HSTP.

* [World] Mars talks with radio frequencies.
* [Bacteria] UUU-1 talks UUU-1ish and HSTP.
* Info: UUU-1 can call, universe/kind/world/Earth/X/CommunityX/query
* [World] Jupiter talks with light frequencies and do not implements HSTP.
* Info: If the Earth wants to talk with Jupiter, we can add one HSTP to Jupiter proxy on universe.
* [Kind] universe talks over atoms and HSTP.
* [Atoms] … and HSTP.
* … and HSTP.
* [Y] … and HSTP.
* Info: [Y] can talk with universe/kind/world/Mars/Bacteria/UUU-1/query
* [Atoms] … and HSTP.
* … and HSTP.
* [Y] … and HSTP.
* Info: [Y] can talk with universe/kind/world/Mars/Bacteria/UUU-1/query Info: Kind universe can talk with Mars, and Mars also can talk with Kind universe. What is the purpose of HSTP?Infinitive scaling options: Any TCP connected device can talk with any other TCP connected device over HSTP. That means any web browser is serve of another HSTP node, and any web browser can call any other web browser.

Uniform application representation interface: HSTP is a uniform interface, which is a set of methods that must be implemented by the application layer.

Heterogeneous networks: Any participant of network is allowing to share the resources with other participants of the network. The resources can be CPU, memory, storage, network, etc.

Conjucation of web versions Since the blockchain technologies calling as web3, people started discussing about the differanciates between the web’s. Comparing is a behaviour for incremental numeric system education’s mindset. Which one is better: none of them. We have to build systems could talk in one uniform protocol, underneath services could be anything. HSTP is aiming for that. What are the components of HSTP?Registry interface Registry interface designed for using on TCP layer, to be able to register top level tld nodes in the network. The first implementation of HSTP TCP relay will resolve hstp/

The registry has two parts of the interface:

* Register method, which is used to register a new node in the network.
* Resolve method, which is used to resolve a node in the network.

Registry implementation needs two HSTP node,

1. Hyperbees

* Heterogen networks will resolve the registry of RPC, TCP, HTTP, HSTP etc.

1.[...]

___________________________
@hacking_Attack
@Hacking_Video

Registry.sol on any EVM based chain. (Ethereum, Binance Smart Chain, Polygon, etc.)

* Registry.sol will resolve the registry of HSTP nodes. That can be relayed over another networks.

Router interface

For demonstration purposes, we will use the following solidity example:
// SPDX-License-Identifier: GNU-3.0-or-later
pragma solidity ^0.8.0;

import "./HSTP.sol";
import "./ERC165.sol";

enum Operation {
Query,
Mutation
}

struct Response {
uint256 status;
string body;
}

struct Registry {
HSTP resolver;
}

// HSTP/Router.sol
abstract contract Router is ERC165 {
event Log(address indexed sender, Operation operation, bytes payload);
event Register(address indexed sender, Registry registry);
mapping(string => Registry) public routes;

function reply(string memory name, Operation _operation, bytes memory payload) public virtual payable returns(Response memory response) {
emit Log(msg.sender, _operation, payload);
// Traverse upwards and downwards of the tree.
// Tries to find the closest path for given operation.
// If the route is registered on HSTP node, reply from children node.
// If the node do not have the route on this node, ask for parent.
if (routes[name]) {
if (_operation == Operation.Query) {
return this.query(payload);
} else if (_operation == Operation.Mutation) {
return this.mutation(payload);
}
}
return super.reply(name, _operation, payload);
}

function query(string memory name, bytes memory payload) public view returns (Response memory) {
return routes[name].resolver.query(payload);
}

function mutation(string memory name, bytes memory payload) public payable returns (Response memory) {
return routes[name].resolver.mutation(payload);
}

function register(string memory name, HSTP node) public {
Registry memory registry = Registry({
resolver: node
});
emit Register(msg.sender, registry);
routes[name] = registry;
}

function supportsInterface(bytes4 interfaceId) public view virtual override returns (bool) {
return interfaceId == type(HSTP).interfaceId;
}
}
HSTP interface
// SPDX-License-Identifier: GNU-3.0-or-later
pragma solidity ^0.8.0;

import "./Router.sol";

// Stateless Hyper Service Transfer Protocol for on-chain services.
// Will implement: EIP-4337 when it's on final stage.
// https://github.com/ethereum/EIPs/blob/master/EIPS/eip-4337.md
abstract contract HSTP is Router {
constructor(string memory name) {
register(name, this);
}

function query(bytes memory payload)
public
view
virtual
returns (Response memory);

function mutation(bytes memory payload)
public
payable
virtual
returns (Response memory);
}
Example HSTP Node

HSTP node has access to call parent router by super.reply(name, operation, payload) method. HSTP node can also call children nodes by calling this.query(payload) or this.mutation(payload) methods.

A HSTP node can be a smart contract, or a web browser, or a TCP connected device.

Node has full capability of adding more HSTP nodes to the network or itself as sub services. HSTP HSTP
/ \ / \
HSTP HSTP HSTP
/ \
HSTP HSTP
/ /
HSTP HSTP // SPDX-License-Identifier: UNLICENSED
pragma solidity ^0.8.0;

import "hstp/HSTP.sol";

// Stateless Hyper Service Transfer Protocol for on-chain services.
contract Todo is HSTP("Todo") {

struct ITodo {
string todo;
}

function addTodo(ITodo memory request) public payable returns(Response memory response) {
response.body = request.todo;
return response;
}

// Override for HSTP.
function query(bytes memory payload)
public
view
virtual
override
returns (Response memory) {}

function mu[...]

___________________________
@hacking_Attack
@Hacking_Video

tation(bytes memory payload)
public
payable
virtual
override
returns (Response memory) {
(ITodo memory request) = abi.decode(payload, (ITodo));
return this.addTodo(request);
}
} ProposalEthereum proposal is draft now, but the protocol has referance implementation Todo.sol. Awesome web services running top of HSTPFull list here Hello worldYou can test the HSTP and try on remix now. How to play with the protocol?* Copy the source code below to the https://remix.ethereum.org/
* Deploy on any EVM based chain.
* Call the functions and try different network topologies on HSTP.
// SPDX-License-Identifier: UNLICENSED
pragma solidity ^0.8.0;

import "hstp/HSTP.sol";

// Stateless Hyper Service Transfer Protocol for on-chain services.
contract Todo is HSTP("Todo") {

struct TodoRequest {
string todo;
}

function addTodo(TodoRequest memory request) public payable returns(Response memory response) {
response.body = request.todo;
return response;
}

// Override for HSTP.
function query(bytes memory payload)
public
view
virtual
override
returns (Response memory) {}

function mutation(bytes memory payload)
public
payable
virtual
override
returns (Response memory) {
(TodoRequest memory todoRequest) = abi.decode(payload, (TodoRequest));
return this.addTodo(todoRequest);
}
} Click Here To Download

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
hacking a cell phone camera

What information does one need in order to hack a cell phone camera? Are there any signs of it being done?

submitted by /u/Neat-Weird9996
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Termux-YTD2.0 : The Fastest YouTube Downloader for Termux

https://cdn-images-1.medium.com/max/600/0*80m-MMzYq8UrN0hO.png
Hey guys 🙋🏻‍♂️, so 2 Years ago I made a YouTube downloader name The tool is working perfectly fine the only issue is that the speed of…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How you’re being tracked..

https://cdn-images-1.medium.com/max/600/1*YUFVMU57bBmeRbLEhvlAow.png
In this collection of weblog posts, I will let you know approximately how mega businesses music you Starting with google

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Security Smart Contract: tx.origin

https://cdn-images-1.medium.com/max/1334/1*F-0iIae4JAlC6SXBuxGVoA.png
Don´t use tx.origin, don´t use tx.origin, don´t use tx.origin…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
OSINT Terminal User Interface

https://cdn-images-1.medium.com/max/1103/1*soPrPigAQ-OPbDfGZd0zvw.gif
Open Source Intelligence Terminal User Interface. OSINT from your favorite services in a friendly terminal user interface, written in Rust

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
A $500+ Open Redirect Bounty in Under 10 Minutes

https://cdn-images-1.medium.com/max/1200/1*8phIebV3Bs-lWUDciLLW-w.jpeg
This post is a quick guide on how to utilize the Open Redirect bug on any sites you test, including a real-world step-by-step.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Network Penetration Testing Service In Singapore

https://cdn-images-1.medium.com/max/820/0*x78_1hYVgaB96KIM.jpg
Network Penetration Testing Service In Singapore

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Black Hat Ethical Hacking
Microsoft 365 Message Encryption Can Leak Sensitive Info

Microsoft 365 Message Encryption Can Leak Sensitive InfoPost Views: 50 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/09/Patreon.png Subscribe to Patreon to watch this episode.
Reading Time: 3 Minutes Researchers have discovered what they call a vulnerability in Microsoft 365, tied to the use of a broken or risky cryptographic algorithm. It could be exploited to infer some or all the content of encrypted email messages.A Flawed Crypto ApproachMicrosoft 365 (formerly Office 365) offers a method of sending encrypted messages (Office 365 Message Encryption, or OME) using Electronic Codebook (ECB), a mode of operation known to expose certain structural information about messages.

WithSecure principal security consultant Harry Sintonen wrote in an Oct. 14 posting that if an attacker had access to enough emails using OME, it’s possible to access leaked information by analyzing the frequency of repeating patterns in individual messages and then matching those patterns with those in other encrypted emails and files.

“This could impact anyone using OME, if the attachment in question has the properties that make it decipherable in this way,” he tells Dark Reading. “Of course, for the extraction to be possible, the adversary first needs to get access to the actual encrypted email message.”

Sintonen explains that even if the files did not have a larger structure that could directly be revealed, there is still possibility of fingerprinting files.

“If a file has some repeating blocks, you could construct a fingerprint from the relation of these repeating blocks,” he says. “You can then scan the encrypted email messages for these fingerprints. If found, you know that this email message included the specific file.”

He adds that it’s also possible to leverage artificial intelligence (AI) to find similar fingerprints to find content that is related, perhaps part of a set of similar files.
See Also: So you want to be a hacker? Complete Offensive Security and Ethical Hacking Course Microsoft: No Fix ForthcomingIn January 2022, Sintonen shared his research findings with Microsoft. Microsoft acknowledged the problem and compensated Sintonen as part of its vulnerability rewards program but decided against fixing it.

“The report was not considered meeting the bar for security servicing, nor is it considered a breach,” the computing giant responded. “No code change was made and so no CVE was issued for this report.”

Bud Broomhead, CEO at Viakoo, a provider of automated IoT cyber-hygiene, says he thinks Microsoft choosing not to fix it either means that there is a new message encryption capability soon to be released, or that the “fix” would need to be a complete rewrite of this capability.

“It could also be that usage of this feature [is] of low enough or limited enough that Microsoft would decline to fix it,” he adds. “Even if Microsoft declines to fix this, it should at least remove or restrict the use of message encryption within Office 365 until a better solution is available to users.”

And indeed, companies can mitigate the problem by not using the OME feature — but even that does not eliminate the risk entirely.

“If they have been using OME encryption and this issue is determined to be a problem, they have no other recourse than ceasing to use the problematic service — OME — and replace it with another, secure solution,” Sintonen says.

This, however, doesn’t remedy the fact that large amounts of poorly encrypted email messages may linger in various parts of the Internet and could be analyzed by actors who gain access to them.
Trending: How to Exploit “improper error handling” in Web Applica[...]

___________________________
@hacking_Attack
@Hacking_Video

tions Trending: Offensive Security Tool: VLANPWN Senders, Recipients at Risk?Broomhead notes that for many years the fear has been that encrypted data that was previously exfiltrated may someday be decrypted and exploited.

“For threat actors who have harvested large amounts of encrypted Microsoft Office 365 email messages, that day may be today,” he says, adding that he thinks it’s clearly “a bug of high severity.”

“Both senders and recipients are at risk — especially with people outside the organization, the desire to use encryption may have been to protect trade or other organizational secrets,” Broomhead says.

That said, the need to have a large number of encrypted emails to use this vulnerability narrows the victimology — by definition it would be larger organizations who felt the need to encrypt large numbers of email messages. And, highly sensitive information usually already has additional layers of data protection, Mike Parkin, senior technical engineer at Vulcan Cyber, points out.

“Those who require truly secure email have other options they can use,” Parkin says. “For example, using GPG encryption and sending the encrypted message as an attachment.”

He says that as a result, most business users won’t be affected by the level of data leakage here, unless they are in the habit of sending highly sensitive, and time sensitive, information through Microsoft 365.

“It’s sufficient to keep most expected threats at bay but wouldn’t be adequate versus a well-resourced state or state-sponsored threat actor,” he says. “High-value communications require highly secure cryptographic algorithms and protocols. In practice, the encryption[s] available in Office 365 are enough for most users.”

On the flip side, Parkin notes that people can come to rely on basic encryption keeping their information safe, and anything that gives a potential threat actor insight into that secure communication is problematic.

“Ideally, encrypted traffic shouldn’t reveal anything about the contents of the message beyond the sender and receiver information required to get it point to point,” he says.
Trending: Critical RCE Vulnerability Found in vm2 Sandbox Library Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?

If you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com
Source: darkreading.com Source Link https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Merch.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/10/Images-for-the-News-posts-6-300x150.png GitLab patches RCE bug in GitHub import functionOctober 14, 2022
Reading Time: 3 minutes

* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/10/Images-for-the-News-posts-5-300x150.png New npm timing attack could lead to supply chain attacksOctober 13, 2022
Reading Time: 4 minutes

* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/10/Images-for-the-News-posts-4-300x150.png Critical RCE Vulnerability Found in vm2 Sandbox LibraryOctober 12, 2022
Reading Time: 3 minutes

* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/10/Images-for-the-News-posts-3-300x150.png Zimbra remote code execution vulnerability actively exploited in the wildOctober 11, 2022
Reading Time: 3 minutes
https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/OffSec-Course.png Offensive Security & Ethical Hacking CourseBegin the learning curve of hacking now!
The post Microsoft 365 Message Encryption Can Leak Sensitive Info first appeared on Black Hat Ethical Hacking.

___________________________
@hacking_Attack
@Hacking_Video