Hacking Articles Tips Tricks Videos Tutorials

Black Hat Ethical Hacking
Recon Tool: Parth

Recon Tool: ParthPost Views: 48 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/09/Patreon.png Subscribe to Patreon to watch this episode.
Reading Time: 2 Minutes INTRODUCTIONParth by s0md3v is a Heuristic Vulnerable Parameter Scanner. Some HTTP parameter names are more commonly associated with one functionality than others. For example, the parameter “?url=“ usually contains URLs as the value and hence often falls victim to file inclusion, open redirect, and SSRF attacks. Parth can go through your burp history, a list of URLs, or its own discovered URLs to find such parameter names and the risks commonly associated with them. Parth is designed to aid web security testing by helping in the prioritization of components for testing.

https://www.blackhatethicalhacking.com/wp-content/uploads/2022/10/68747470733a2f2f692e6962622e636f2f367762593766542f53637265656e73686f742d323032302d30382d31392d32322d31372d31392e706e67-1024x362.png
See Also: So you want to be a hacker? Complete Offensive Security and Ethical Hacking Course USAGEInstallation: pip3 install parthImport targets from a fileThis option works for all 3 supported import types: Burp Suite history, newline delimited text file or a HTTP request text file. parth -i example.historyImport targets from stdincat urls | parthAn exclusive option –pipe is available when importing targets from stdin. It can be used to output URLs vulnerable to a specific vulnerability. cat urls | parth --pipe xssSupported Issues: lfi, ssrf, sqli, xss, open_redirect, rce
Trending: Offensive Security Tool: Monkey365
Trending: Recon Tool: Collector Find URLs for a domainThis option will make use of CommonCrawl, Open Threat Exchange and Waybackmachine to find URLs of the target domain. parth -t example.comIgnore duplicate parameter namesSame parameter names across all URLs are ignored. parth -ut example.comTrending: Exploit XSS Injections in a one-line powerful Technique Save parameter namesThis option will write all the parameter names found in a file with name params-{target}.txt for later use. parth -pt example.comJSON OutputThe following command will save the result as a JSON object in the specified file. parth -t example.com -o example.jsonClone the repo from here: GitHub Link
Trending: Write up: A primer on OS Command Injection Attacks https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Merch.png Recent Tools* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/10/hakrawler-300x150.png Recon Tool: HakrawlerOctober 21, 2022
Reading Time: 3 minutes

* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/10/Monkey365-300x150.png Offensive Security Tool: Monkey365October 20, 2022
Reading Time: 3 minutes

* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/10/collector-300x150.png Recon Tool: CollectorOctober 14, 2022
Reading Time: 2 minutes

* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/10/VLANPWN-300x150.png Offensive Security Tool: VLANPWNOctober 7, 2022
Reading Time: 2 minutes https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/OffSec-Course.png Offensive Security & Ethical Hacking CourseBegin the learning curve of hacking now!
The post Recon Tool: Parth first appeared on Black Hat Ethical Hacking.

___________________________
@hacking_Attack
@Hacking_Video

Black Hat Ethical Hacking

Recon Tool: Parth | Black Hat Ethical Hacking

Parth is a Heuristic Vulnerable Parameter Scanner. It is designed to aid web security testing by helping in prioritization of components for testing.

6 viewsedited 10:53

Hacking Articles Tips Tricks Videos Tutorials

Photo

Black Hat Ethical Hacking
Windows vulnerable driver blocklist sync issue patched

Windows vulnerable driver blocklist sync issue patchedPost Views: 23 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/09/Patreon.png Subscribe to Patreon to watch this episode.
Reading Time: 3 Minutes Microsoft says it addressed an issue preventing the Windows kernel vulnerable driver blocklist from being synced to systems running older Windows versions.This blocklist (stored in the DriverSiPolicy.p7b file) is designed to block threat actors from dropping legitimate but vulnerable drivers on targets’ systems in Bring Your Own Vulnerable Driver (BYOVD) attacks on HVCI-enabled Windows machines or those running Windows in S Mode.

The flawed drivers are then exploited to escalate privileges in the Windows kernel and execute malicious code, disabling security solutions and taking control of the device.

This is a well-known and popular attack technique amongst threat actors of all skill levels, from ransomware gangs to state-sponsored hacking groups.

Although Microsoft has been advertising its driver blocklist as capable of hardening Windows systems against vulnerable third-party drivers, ANALYGENCE security analyst Will Dormann found that wasn’t the case.

As Dormann discovered, unlike Windows 11 devices, even up-to-date Windows 10 and Windows Server systems were being provided with an outdated list of vulnerable drivers from December 2019, exposing customers who thought they were protected to BYOVD attacks.

Microsoft reluctantly acknowledged his findings and promised to address this issue and update its misleading online support docs.
Thanks for all the feedback. We have updated the online docs and added a download with instructions to apply the binary version directly. We're also fixing the issues with our servicing process which has prevented devices from receiving updates to the policy.

— Jeffrey Sutherland (@j3ffr3y1974) October 6, 2022
See Also: So you want to be a hacker? Complete Offensive Security and Ethical Hacking Course Driver blocklist sync finally fixedMore than a month after Dormann revealed that the list of vulnerable drivers wasn’t kept up to date on Windows 10 and some Windows Server systems, Microsoft has now finally addressed this issue.

“The vulnerable driver list is regularly updated, however we received feedback there has been a gap in synchronization across OS versions,” a Microsoft spokesperson told BleepingComputer.

“We have corrected this and it will be serviced in upcoming and future Windows Updates. The documentation page will be updated as new updates are released.”

Unfortunately, this “gap” meant that the driver blocklist was not synced with any Windows 10 systems since 2019 even though Microsoft kept updating on their end, effectively breaking the feature.

Redmond has addressed the driver blocklist sync issue with the October 2022 preview updates, ensuring that the blocklist is the same across Windows 10 and 11.
Trending: Common and Uncommon types of SQL Injection Trending: Offensive Security Tool: Monkey365 Disabling the driver blocklistMicrosoft also says that starting with the Windows 11 2022 update (version 22H2), the blocklist is enabled by default on all devices.

“Blocking drivers can cause devices or software to malfunction. In rare cases, it leads to a stop error,” Microsoft warned on Tuesday. “There is no guarantee that the blocklist will block every driver that has weaknesses.”

For Windows 10 and Windows 11 21H2, you can disable the driver blocklist by turning off ‘Memory Integrity’ in the ‘Core Isolation’ settings, or if using Windows Defender Application Control (WDAC), disabling it in your configuration.

However, as the driver blockl[...]

___________________________
@hacking_Attack
@Hacking_Video