Unblob - Extract Files From Any Kind Of Container Formats
http://www.kitploit.com/2022/11/unblob-extract-files-from-any-kind-of.html

___________________________
@hacking_Attack
@Hacking_Video

unblob is an accurate, fast, and easy-to-use extraction suite. It parses unknown binary (https://www.kitploit.com/search/label/Binary) blobs for more than 30 different archive, compression, and file-system formats, extracts their content recursively, and carves out unknown chunks that have not been accounted for. Unblob is free to use, licensed with the MIT license. It has a Command Line Interface and can be used as a Python library.
This turns unblob into the perfect companion for extracting, analyzing, and reverse engineering firmware (https://www.kitploit.com/search/label/Firmware) images. See more at https://unblob.org (https://unblob.org/). Demo

___________________________
@hacking_Attack
@Hacking_Video

Download Unblob (https://github.com/onekey-sec/unblob)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
What is Vulnerability Scanning?

https://cdn-images-1.medium.com/max/2600/1*v3e99FSix-1wPdjqWC0Vbg.jpeg
Discover Weaknesses Automatically

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How to protect your dApps from crypto hacks in 2022

https://cdn-images-1.medium.com/max/2600/1*Yr5y4lt6G5GP6zt7uoGcbw.jpeg
Users losing crypto funds due to malicious activity is not uncommon. Indeed, it is for this reason that researchers recently proposed…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How I bypassed Cloudflare WAF to get my First Bug

https://cdn-images-1.medium.com/max/720/1*MIdUG107hR7anBU0gyKi_w.jpeg
This blog is about how I found my first XSS vulnerability.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

XSS using a username

XSS triggered by exploiting a vulnerable input field of a signup page.Continue reading on Medium »
Read more...

KitPloit - PenTest Tools!
Unblob - Extract Files From Any Kind Of Container Formats

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgQo8GWKOqEwwmOWVLXlzGYJAXDOFEJicyV5EaBPfz0GgXCFEXwHZ1A4EspjjHseTOHZQUI99K-DHEhsq3ovBUy6jhtMSXShUO8AoxHAvDOpN43emqgRNTTW-51ZeELA0FT_Z_EoM7YHG-NflhjsNliQ2u389CFyRl5Xth_hEnQFUfA_WOBAfmWd6Oiww/w640-h180/unblob.png
unblob is an accurate, fast, and easy-to-use extraction suite. It parses unknown binary blobs for more than 30 different archive, compression, and file-system formats, extracts their content recursively, and carves out unknown chunks that have not been accounted for.

Unblob is free to use, licensed with the MIT license. It has a Command Line Interface and can be used as a Python library.
This turns unblob into the perfect companion for extracting, analyzing, and reverse engineering firmware images.

See more at https://unblob.org.
Demo

https://github.com/onekey-sec/unblob/raw/main/docs/demo.svg
Download Unblob

___________________________
@hacking_Attack
@Hacking_Video

XSS using a username
https://sagarsajeev.medium.com/xss-using-a-username-8a8ab1b79a77?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

XSS triggered by exploiting a vulnerable input field of a signup page.Continue reading on Medium » (https://sagarsajeev.medium.com/xss-using-a-username-8a8ab1b79a77?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Attack Simulator for SolarWinds, Codecov, and ua-parser-js breaches
https://www.reddit.com/r/redteamsec/comments/yv140a/attack_simulator_for_solarwinds_codecov_and/

The SUNSPOT (http://crowdstrike.com/blog/sunspot-malware-technical-analysis/) malware, Codecov breach (https://about.codecov.io/security-update/), and lot of compromised open-source packages (like was the case with ua-parser-js (https://github.com/advisories/GHSA-pjwm-rvh2-c87w)) target the CI/ CD pipeline to modify release build or exfiltrate credentials. As part of writing tests for Harden Runner GitHub Action (https://github.com/step-security/harden-runner), which prevents such attacks, there was a need to write attack simulator for these attacks. You can check out the attack simulator here: https://github.com/step-security/attack-simulator It has information and relevant links about these attacks at one place. There are a set of GitHub Actions workflows that simulate the steps from these attacks. There is also a malware simulator npm package which simulates behavior of typical compromised npm packages using preinstall step. Wanted to share in case one is looking for similar attack simulator for attacks on CI/ CD pipelines. submitted by /u/varunsh-coder (https://www.reddit.com/user/varunsh-coder)
[link] (https://www.reddit.com/r/redteamsec/comments/yv140a/attack_simulator_for_solarwinds_codecov_and/) [comments] (https://www.reddit.com/r/redteamsec/comments/yv140a/attack_simulator_for_solarwinds_codecov_and/)

___________________________
@hacking_Attack
@Hacking_Video

P1 Bounties: Cross-Site Scripting (XSS) Tips And Tricks
https://medium.com/the-gray-area/p1-bounties-cross-site-scripting-xss-tips-and-tricks-10bf84daff38?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

TL;DR- A guide on what XSS is, how to find it, how to exploit it, and then how to make the most money off of it.Continue reading on The Gray Area » (https://medium.com/the-gray-area/p1-bounties-cross-site-scripting-xss-tips-and-tricks-10bf84daff38?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Appshark : Static Taint Analysis Platform To Scan Vulnerabilities In An Android App

Appshark is a static taint analysis platform to scan vulnerabilities in an Android app. PrerequisitesAppshark requires a specific version of JDK — JDK 11. After testing, it does not work on other LTS versions, JDK 8 and JDK 16, due to the dependency compatibility issue. Building/Compiling AppSharkWe assume that you are working in the root directory of the project repo. You can build the whole project with the gradle tool.
$ ./gradlew build -x test
After executing the above command, you will see an artifact file AppShark-0.1.1-all.jarin the directory build/libs. Running AppSharkLike the previous step, we assume that you are still in the root folder of the project. You can run the tool with
$ java -jar build/libs/AppShark-0.1.1-all.jar config/config.json5
The config.json5has the following configuration contents.
{
"apkPath": "/Users/apks/app1.apk",
"out": "out",
"rules": "unZipSlip.json",
"maxPointerAnalyzeTime": 600
}
Each JSON field is explained below.

* apkPath: the path of the apk file to analyze
* out: the path of the output directory
* rules: the path(s) of the rule file(s), can be more than 1 rules
* maxPointerAnalyzeTime: the timeout duration in seconds set for the analysis started from an entry point
* debugRule: specify the rule name that enables logging for debugging

If you provide a configuration JSON file which sets the output path as outin the project root directory, you will find the result file out/results.jsonafter running the analysis. Interpreting the ResultsBelow is an example of the results.json.
{
"AppInfo": {
"AppName": "test",
"PackageName": "net.bytedance.security.app",
"min_sdk": 17,
"target_sdk": 28,
"versionCode": 1000,
"versionName": "1.0.0"
},
"SecurityInfo": {
"FileRisk": {
"unZipSlip": {
"category": "FileRisk",
"detail": "",
"model": "2",
"name": "unZipSlip",
"possibility": "4",
"vulners": [
{
"details": {
"position": "$r31",
"entryMethod": "$r3",
"url": "/Volumes/dev/zijie/appshark-opensource/out/vuln/1-unZipSlip.html",
"target": [
"$r3",
"pf{obj{java.lang.StringBuilder}(unknown)->@data}",
"$r11",
"$r31"
]
},
"hash": "ec57a2a3190677ffe78a0c8aaf58ba5aee4d2247",
"possibility": "4"
},
{
"details": {
"position": "$r34",
"entryMethod": "$r3",
"url": "/Volumes/dev/zijie/appshark-opensource/out/vuln/2-unZipSlip.html",
"target": [
"$r3",
"pf{obj{java.lang.StringBuilder}(unknown)->@data}",
"___________________________
@hacking_Attack
@Hacking_Video