Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Investigadores detallan las vulnerabilidades del registro de eventos de Windows: LogCrusher y…
https://cdn-images-1.medium.com/max/1662/0*T53bkuITG97lmvW8
Los investigadores de ciberseguridad han revelado detalles sobre un par de vulnerabilidades en Microsoft Windows, una de las cuales podría…
Continue reading on Medium »
Investigadores detallan las vulnerabilidades del registro de eventos de Windows: LogCrusher y…
https://cdn-images-1.medium.com/max/1662/0*T53bkuITG97lmvW8
Los investigadores de ciberseguridad han revelado detalles sobre un par de vulnerabilidades en Microsoft Windows, una de las cuales podría…
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Dark Web Introduction
https://cdn-images-1.medium.com/max/1920/1*1xMwcThmE2x3lANO4W1JuA.png
This will be the first blog of the Dark Web Documentary Series
Continue reading on Medium »
Dark Web Introduction
https://cdn-images-1.medium.com/max/1920/1*1xMwcThmE2x3lANO4W1JuA.png
This will be the first blog of the Dark Web Documentary Series
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Ghizer TryHackMe Writeup
https://cdn-images-1.medium.com/max/709/1*4EfGStwRBy4EbE4jSwuJCw.png
Ghizer TryHackMe Walkthrough
Continue reading on Medium »
Ghizer TryHackMe Writeup
https://cdn-images-1.medium.com/max/709/1*4EfGStwRBy4EbE4jSwuJCw.png
Ghizer TryHackMe Walkthrough
Continue reading on Medium »
hacking: security in practice
Help to hack (tweak) an application
Hi,
Despite I'm a developer, I'm not very familiar with anything related to hacking. I'm interested in find a way to tweak an application I use to stitch videos (Insta360 Stitcher, freely available on their website) as natively, this app offer to export a stitching using ProRes 4.2.2 HQ, (and other codecs) but do not offer the possibility to use ProRes 4.2.2 Standard. I asked Insta an "official" way to get it working, but there's none without modifying the app. And they don't seem very interested in modifying their app to add this codec to the list.
Actually, this wouldn't suppose "nothing", as this app uses ffmpeg (not sure if ffmpeg.exe is called from Prostitcher.exe or if Prostitcher embeds ffmpeg), but ProRes (422) is managed using profiles, and all of them must be included: Proxy 'apco', LT 'apcs', Standard 'apcn', HQ 'apch'. For some reason, Insta chose to only manage the HQ profile, when I'd like to use the Standard one.
With no clue about how to do this, I firstly thought about the strategy :
* a beautiful hack to add the option to the app : it would be great but being realistic, I can't do that, I'm a noob.
* Looking where the HQ profile is set and changing it to the Standard profile should be easier. Somewhere in the code, the parameter "-profile:v 3" must be used (ProRes 4.2.2 HQ) and I'd like to change it to "-profile:v 2". The problem is this app is not open source, and I don't know where to change that :D
* IF ffmpeg.exe is used by prostitcher.exe as an external tool (it is bundled into Insta360 Stitcher), another option would be check the ffmpeg version, cloning the ffmpeg repo and modify the code to invert the ProRes profiles (where is another question, but as the code is available, it should be possible). The question is : how can I be sure ffmpeg is used? Because executing a stiching from the GUI (the only way to use Insta360 Stitcher), I can see prostitcher.exe is executed in background in the Windows processes, but I can't see ffmpeg. I tried to open prostitcher.exe with an hex editor, and there are lots of reference to ffmpeg inside, but not the "bundle" one, I suppose they are traces from build process, as the path doesn't exist in my machine. I also found references to all the ProRes profiles, but it looked like error messages or usage messages rather than "code".
By the way, prostitcher.exe is a command line executable. I want to think that the GUI invokes this executable passing it some parameters. Is there a way to see which parameters the GUI is passing when it invokes the .exe on Windows? On Linux/Mac, they're listed in the PS command, but on Windows... I can't find them... That could help to know which parameters are needed, too...
So... If someone can help about the best way to achieve my goal, it would be great!
Thanks!
submitted by /u/cheloutevr
[link] [comments]
Help to hack (tweak) an application
Hi,
Despite I'm a developer, I'm not very familiar with anything related to hacking. I'm interested in find a way to tweak an application I use to stitch videos (Insta360 Stitcher, freely available on their website) as natively, this app offer to export a stitching using ProRes 4.2.2 HQ, (and other codecs) but do not offer the possibility to use ProRes 4.2.2 Standard. I asked Insta an "official" way to get it working, but there's none without modifying the app. And they don't seem very interested in modifying their app to add this codec to the list.
Actually, this wouldn't suppose "nothing", as this app uses ffmpeg (not sure if ffmpeg.exe is called from Prostitcher.exe or if Prostitcher embeds ffmpeg), but ProRes (422) is managed using profiles, and all of them must be included: Proxy 'apco', LT 'apcs', Standard 'apcn', HQ 'apch'. For some reason, Insta chose to only manage the HQ profile, when I'd like to use the Standard one.
With no clue about how to do this, I firstly thought about the strategy :
* a beautiful hack to add the option to the app : it would be great but being realistic, I can't do that, I'm a noob.
* Looking where the HQ profile is set and changing it to the Standard profile should be easier. Somewhere in the code, the parameter "-profile:v 3" must be used (ProRes 4.2.2 HQ) and I'd like to change it to "-profile:v 2". The problem is this app is not open source, and I don't know where to change that :D
* IF ffmpeg.exe is used by prostitcher.exe as an external tool (it is bundled into Insta360 Stitcher), another option would be check the ffmpeg version, cloning the ffmpeg repo and modify the code to invert the ProRes profiles (where is another question, but as the code is available, it should be possible). The question is : how can I be sure ffmpeg is used? Because executing a stiching from the GUI (the only way to use Insta360 Stitcher), I can see prostitcher.exe is executed in background in the Windows processes, but I can't see ffmpeg. I tried to open prostitcher.exe with an hex editor, and there are lots of reference to ffmpeg inside, but not the "bundle" one, I suppose they are traces from build process, as the path doesn't exist in my machine. I also found references to all the ProRes profiles, but it looked like error messages or usage messages rather than "code".
By the way, prostitcher.exe is a command line executable. I want to think that the GUI invokes this executable passing it some parameters. Is there a way to see which parameters the GUI is passing when it invokes the .exe on Windows? On Linux/Mac, they're listed in the PS command, but on Windows... I can't find them... That could help to know which parameters are needed, too...
So... If someone can help about the best way to achieve my goal, it would be great!
Thanks!
submitted by /u/cheloutevr
[link] [comments]
reddit
Help to hack (tweak) an application
Hi, Despite I'm a developer, I'm not very familiar with anything related to hacking. I'm interested in find a way to tweak an application I use...
Hacking Articles Tips Tricks Videos Tutorials
Photo
hacking: security in practice
DEV-0832 (Vice Society) opportunistic ransomware campaigns impacting US education sector - Microsoft Security Blog
https://external-preview.redd.it/LMf08SltVhCAh_zVM0Zwobm4oE8yGdtoaxlEB7dFx_Y.jpg?width=640&crop=smart&auto=webp&s=7375c9e582cb9da169c7ae39283985e9cc4da1ea submitted by /u/DrinkMoreCodeMore
[link] [comments]
DEV-0832 (Vice Society) opportunistic ransomware campaigns impacting US education sector - Microsoft Security Blog
https://external-preview.redd.it/LMf08SltVhCAh_zVM0Zwobm4oE8yGdtoaxlEB7dFx_Y.jpg?width=640&crop=smart&auto=webp&s=7375c9e582cb9da169c7ae39283985e9cc4da1ea submitted by /u/DrinkMoreCodeMore
[link] [comments]
hacking: security in practice
Metasploitable-like machines for autmatic vulnerability testing
Hey, I'm searching for metasploitable like machines for some test of OpenVas, Qualys and Nessus. I search for everything except web for web I have different plans. In mean time I search vulnhub but I didn't find anything interesting yet.
submitted by /u/TracerP
[link] [comments]
Metasploitable-like machines for autmatic vulnerability testing
Hey, I'm searching for metasploitable like machines for some test of OpenVas, Qualys and Nessus. I search for everything except web for web I have different plans. In mean time I search vulnhub but I didn't find anything interesting yet.
submitted by /u/TracerP
[link] [comments]
reddit
Metasploitable-like machines for autmatic vulnerability testing
Hey, I'm searching for metasploitable like machines for some test of OpenVas, Qualys and Nessus. I search for everything except web for web I have...
I have a small doubt about the Account takeover
https://www.reddit.com/r/Pentesting/comments/ydd5nh/i_have_a_small_doubt_about_the_account_takeover/
<!-- SC_OFF -->1) I have created a new account on some random website (domain.com (https://domain.com/)) through the signup page using email and password. After some time, I manually logged out from the account. 2) Now I have tried to sign-in with the same email but using a different feature called "Login with Google" without giving any password and it took me to the same account which I have created above. So I want to know if this behaviour is normal or is it considered as a valid bug ? If Yes, then what should I do to increase the severity of it ? <!-- SC_ON --> submitted by /u/SatyaKayala (https://www.reddit.com/user/SatyaKayala)
[link] (https://www.reddit.com/r/Pentesting/comments/ydd5nh/i_have_a_small_doubt_about_the_account_takeover/) [comments] (https://www.reddit.com/r/Pentesting/comments/ydd5nh/i_have_a_small_doubt_about_the_account_takeover/)
https://www.reddit.com/r/Pentesting/comments/ydd5nh/i_have_a_small_doubt_about_the_account_takeover/
<!-- SC_OFF -->1) I have created a new account on some random website (domain.com (https://domain.com/)) through the signup page using email and password. After some time, I manually logged out from the account. 2) Now I have tried to sign-in with the same email but using a different feature called "Login with Google" without giving any password and it took me to the same account which I have created above. So I want to know if this behaviour is normal or is it considered as a valid bug ? If Yes, then what should I do to increase the severity of it ? <!-- SC_ON --> submitted by /u/SatyaKayala (https://www.reddit.com/user/SatyaKayala)
[link] (https://www.reddit.com/r/Pentesting/comments/ydd5nh/i_have_a_small_doubt_about_the_account_takeover/) [comments] (https://www.reddit.com/r/Pentesting/comments/ydd5nh/i_have_a_small_doubt_about_the_account_takeover/)
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Testaferros del siglo 21.
https://cdn-images-1.medium.com/max/1200/0*7q8TttH6eWXZQHJ6.jpg
Los testaferros bancarios en 2022.
Continue reading on Medium »
Testaferros del siglo 21.
https://cdn-images-1.medium.com/max/1200/0*7q8TttH6eWXZQHJ6.jpg
Los testaferros bancarios en 2022.
Continue reading on Medium »