Hacking on Medium
Remote Command Execution in a Bank Server

https://cdn-images-1.medium.com/max/820/1*OhygrJrIiHrtECKAFfkJAA.png
A detailed article on how I exploited Remote Command Execution (RCE) with the help of the Vulnerability Chain.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Tryhackme -SteelMountain (CTF)

https://cdn-images-1.medium.com/max/1311/1*9wIAV2wV-zs0XD3nV9G-5Q.png
Stage 1 :Enumiration

Continue reading on CodeX »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Hacking with Hydra — A Practical Tutorial

https://cdn-images-1.medium.com/max/2240/1*sLNNCsZ5SMw9Uhp_Efk9Yw.png
Hydra is a fast password cracker used to brute-force and gain access to network services like SSH & FTP.

Continue reading on Stealth Security »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
[HTB] Backdoor write-up

https://cdn-images-1.medium.com/max/679/1*CjASAHpyJhTpvpix6E4RNg.png
this article is about the backdoor box write-up that went offline recently at HTB (HackTheBox).

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

How to Hide Your Website’s Front-End For Increased Security
https://medium.com/the-gray-area/how-to-hide-your-websites-front-end-for-increased-security-76494d657b8a?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

TL;DR- If you’re creating any website to showcase to others, you’ll want to make your site as secure as possible, while staying optimized.Continue reading on The Gray Area » (https://medium.com/the-gray-area/how-to-hide-your-websites-front-end-for-increased-security-76494d657b8a?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
Slicer - Tool To Automate The Boring Process Of APK Recon

___________________________
@hacking_Attack
@Hacking_Video

Option for progression in my current role. Cert advice UK
https://www.reddit.com/r/Pentesting/comments/yyjthh/option_for_progression_in_my_current_role_cert/

I am currently a junior cyber security analyst. I have been using Tryhackme on and off for about a year now, so I’d say that I have at least foundational knowledge of pen testing. There may be an opportunity for me to have training/certs paid for by my company, and I think it would be beneficial to broaden my skills and properly train up in pen testing. I can train for other security certs in my own time and whilst I’m working, so I think it makes more sense to have them pay for something that I can’t do so easily in my day-to-day job. What training/certs would you recommend for someone in my situation? Considering that I won’t necessarily be getting these certs in hopes of a getting a new job, but rather using them as a formalised training plan (although having a cert is always nice). submitted by /u/CannyFatcher (https://www.reddit.com/user/CannyFatcher)
[link] (https://www.reddit.com/r/Pentesting/comments/yyjthh/option_for_progression_in_my_current_role_cert/) [comments] (https://www.reddit.com/r/Pentesting/comments/yyjthh/option_for_progression_in_my_current_role_cert/)

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
AppleAVD deallocateKernelMemoryInternal Missing Surface Lock

https://3.bp.blogspot.com/-BKQJl1oXbqE/WWlvQjSZMJI/AAAAAAAAINE/UWb7sXt4uvssyXVrWpwrINbeIcIr93_vACLcBGAs/s1600/h33.png
In AppleAVD.kext, pixel buffers are mapped by calling AppleAVDUserClient::_mapPixelBuffer, which eventually calls AppleAVD::allocateKernelMemoryInternal. If the buffer is an IOSurface, the function calls IOSurface::deviceLockSurface before allocating memory by calling prepare. But when a pixel buffer is unmapped by calling AppleAVDUserClient::_unmapPixelBuffer, which calls AppleAVD::deallocateKernelMemoryInternal, the IOSurface is not locked before calling complete. This means that mapping and unmapping can occur at the same time, leading to kernel memory corruption. This bug could allow escalation to kernel privileges from a local app.

SHA-256 | fa06dd34c9fcfaf9f03c6a70c7fd7fc078ff6872d40e76e3295731e58256ce8a

Download
Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
AppleAVD AppleAVDUserClient::decodeFrameFig Memory Corruption

https://1.bp.blogspot.com/-93ZP4TpCwBw/WWlu7wGG0SI/AAAAAAAAIJg/yDCONAkAMz8MX1TtbGL6KFo1njFu_UyvACLcBGAs/s1600/h111.png
In the function AppleAVDUserClient::decodeFrameFig, a location in the decoder's IOSurface input buffer is calculated, and then bzero is called on it. The size of this IOSurface's allocation is controllable by the userspace caller, so the calculated pointer can go out of bounds, leading to memory corruption. This issue could potentially allow an unprivileged local application to escalate its privileges to the kernel.

SHA-256 | a9f971c8dcec3381b92b6bafb61fc99c1b1da326eec460ede2682c51580f3f3e

Download
Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Unblob : Extract Files From Any Kind Of Container Formats

Unblob is an accurate, fast, and easy-to-use extraction suite. It parses unknown binary blobs for more than 30 different archive, compression, and file-system formats, extracts their content recursively, and carves out unknown chunks that have not been accounted for.

Unblob is free to use, licensed with the MIT license. It has a Command Line Interface and can be used as a Python library.
This turns unblob into the perfect companion for extracting, analyzing, and reverse engineering firmware images.

Demo
https://raw.githubusercontent.com/onekey-sec/unblob/main/docs/demo.svg

Click Here To Download

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How do I test the BlueKeep exploit?

I want to do the BlueKeep exploit, but I want to do it legally. I know how to do the exploit, I am just trying to figure out how to set up something that is vulnerable to BlueKeep. How can I accomplish this? The only thing I can think of that might work is setting up a VM, but I am not sure how I could make a VM that is vulnerable to BlueKeep. All I can find online is that it needs to be some sort of Windows 7/Windows Server 2008 R2, but I am not sure how to configure it so that it is actually vulnerable.

submitted by /u/TheRealTengri
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
What is Information Securit

Information Security is a huge domain. It contains a lot of aspects in finance, business, human resource protection, health department…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Tryhackme -Alfred (CTF)

https://cdn-images-1.medium.com/max/1315/1*O8IkuqQBfQ1Qnq7qRjKueA.png
Exploit Jenkins to gain an initial shell, then escalate your privileges by exploiting Windows authentication tokens.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Crypto Tricksters are Purchasing Counterfeit Personalities on the Underground market for just $8 —…

https://cdn-images-1.medium.com/max/600/0*ISuRjmhufUQOMkU_.png
https://cryptolatestnewsallovertheworld.blogspot.com/2022/11/crypto-tricksters-are-purchasing.html

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video