hacking: security in practice
How does Metasploit socks_proxy module work?

I've been trying to learn more about pivoting, one simple pivoting technique is Metasploit socks proxy module with proxychains, I've been looking for an answer all over the internet with no luck. How does the socks proxy module work? and how to use it to chain more that 2 targets. I know that for the first proxy hop I can just run the socks proxy server module with my IP and any port but how does socks proxy server know where to forward the request?

submitted by /u/hazemslife
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How can triggering DNS lookups on a foreign system be a security threat?

In Text4shell (CVE-2022-42889) there are 3 potential security vulnerabilities which are triggered by String substitution marked by specific prefixes, which could lead to problems. One of them is "script" which can lead to code injection, self explainatory.

The other two are "dns" and "url" which according to the CVE "could result in (...) contact with remote servers".

I can't quite understand why pure contact with remote servers is a security concern. How is it exploitable to make dns lookups for the hostname of an ip address via a foreign system? Why should that be a problem? To map out internal structure if its a bigger network?

submitted by /u/mangyCarl3
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Http Injector internet hotshare

Has anybody here used http injector? I've been connected to a good server and i want to share the internet to my laptop, did all the steps to get it (the hotshare and the proxy thing) but i haven't get it already, it doesn't connect. Any tips? I'm a begginer in this shit.

submitted by /u/FernandoJuncal98
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Phone hack

Can your phone get hacked by a fb messenger video call?

submitted by /u/notsonice333
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Pool on the roof - November 28, 2022

Have a no0b question? New to hacking? Looking for a script? Need help with your github project? Something wrong with your payload? Stuck on a CTF or bug bounty?

This is a weekly recurring post to make friends with other hackers, ask questions, and get any type of help you may need.

Make sure to read our wiki as it's full of resources for you.

Keep all beginner questions in this weekly stickied post.

submitted by /u/AutoModerator
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Black Hat Ethical Hacking
5.4 million Twitter users’ stolen data leaked online

5.4 million Twitter users’ stolen data leaked onlinePost Views: 67 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/09/Patreon.png Subscribe to Patreon to watch this episode.
Reading Time: 3 Minutes Over 5.4 million Twitter user records containing non-public information stolen using an API vulnerability fixed in January have been shared for free on a hacker forum.Another massive, potentially more significant, data dump of millions of Twitter records has also been disclosed by a security researcher, demonstrating how widely abused this bug was by threat actors.

The data consists of scraped public information as well as private phone numbers and email addresses that are not meant to be public.
See Also: So you want to be a hacker? Complete Offensive Security and Ethical Hacking Course The Twitter data breachLast July, a threat actor began selling the private information of over 5.4 million Twitter users on a hacking forum for $30,000.

While most of the data consisted of public information, such as Twitter IDs, names, login names, locations, and verified status, it also included private information, such as phone numbers and email addresses.

https://www.bleepstatic.com/images/news/security/d/data-breaches/t/twitter-h1-vuln/forum-post.jpg
Twitter data shared on a hacking forumIn September, and now more recently, on November 24th, the 5.4 million Twitter records have now been shared for free on a hacking forum.
https://www.bleepstatic.com/images/news/security/d/data-breaches/t/twitter/data-shared-online/forum-post.jpg
___________________________
@hacking_Attack
@Hacking_Video

ber, and public scraped data, including the account’s Twitter ID, name, screen name, verified status, location, URL, description, follower count, account creation date, friends count, favorites count, statuses count, and profile image URLs. An even larger data dump privately createdWhile it is concerning that threat actors released the 5.4 million records for free, an even larger data dump was allegedly created using the same vulnerability.

This data dump potentially contains tens of millions of Twitter records consisting of personal phone numbers collected using the same API bug, and public information, including verified status, account names, Twitter ID, bio, and screen name.

The news of this more significant data breach comes from security expert Chad Loder, who first broke the news on Twitter and was suspended soon after posting. Loder subsequently posted a redacted sample of this larger data breach on Mastodon.

“I have just received evidence of a massive Twitter data breach affecting millions of Twitter accounts in EU and US. I have contacted a sample of the affected accounts and they confirmed that the breached data is accurate. This breach occurred no earlier than 2021,” Loder shared on Twitter.
https://www.bleepstatic.com/images/news/security/d/data-breaches/t/twitter/data-shared-online/mastodon-post.jpg
Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/11/Images-for-the-News-posts-9-300x150.png Google pushes emergency Chrome update to fix 8th zero-day this yearNovember 25, 2022
Reading Time: 3 minutes

* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/11/Images-for-the-News-posts-8-2-300x150.png Fake MSI Afterburner targets Windows gamers with miners, info-stealersNovem[...]

___________________________
@hacking_Attack
@Hacking_Video

ber 24, 2022
Reading Time: 4 minutes

* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/11/Images-for-the-News-posts-7-1-300x150.png Google Chrome extension used to steal cryptocurrency, passwordsNovember 23, 2022
Reading Time: 4 minutes

* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/11/Images-for-the-News-posts-6-2-300x150.png Attackers bypass Coinbase and MetaMask 2FA via TeamViewer, fake support chatNovember 22, 2022
Reading Time: 5 minutes
https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/OffSec-Course.png Offensive Security & Ethical Hacking CourseBegin the learning curve of hacking now!
The post 5.4 million Twitter users’ stolen data leaked online first appeared on Black Hat Ethical Hacking.

___________________________
@hacking_Attack
@Hacking_Video

How to get EDRs ?
https://www.reddit.com/r/redteamsec/comments/z6tmgt/how_to_get_edrs/

Hi ! Red Teamers, how to you get EDRs to test your payloads ? I understand it is essential to test your payloads but getting EDR seems to be the real challenge. Do you have some solutions known to be easier to get than others ? Or have more interesting detection capabilities which are good to test your payloads on ? submitted by /u/hegusung (https://www.reddit.com/user/hegusung)
[link] (https://www.reddit.com/r/redteamsec/comments/z6tmgt/how_to_get_edrs/) [comments] (https://www.reddit.com/r/redteamsec/comments/z6tmgt/how_to_get_edrs/)

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Ox4Shell : Deobfuscate Log4Shell Payloads With Ease

Ox4Shell is a tool for deobfuscate Log4Shell payloads with ease.

Description

Since the release of the Log4Shell vulnerability (CVE-2021-44228), many tools were created to obfuscate Log4Shell payloads, making the lives of security engineers a nightmare.

This tool intends to unravel the true contents of obfuscated Log4Shell payloads.

We recommend running Ox4Shellwith a provided file (-f) rather than an inline payload (-p), because certain shell environments will escape important characters, therefore will yield inaccurate results.

Usage

To run the tool simply:
~/Ox4Shell » python ox4shell.py --help
usage: ox4shell [-h] [-d] [-m MOCK] [--max-depth MAX_DEPTH] [--decode-base64] (-p PAYLOAD | -f FILE)

____ _ _ _____ _ _ _
/ __ \ | || | / ____| | | | |
| | | |_ _| || || (___ | |__ ___| | |
| | | \ \/ /__ _\___ \| '_ \ / _ \ | |
| |__| |> < | | ____) | | | | __/ | |
\____//_/\_\ |_||_____/|_| |_|\___|_|_|

Ox4Shell - Deobfuscate Log4Shell payloads with ease.
Created by https://oxeye.io

General:
-h, --help Show this help message and exit
-d, --debug Enable debug mode (default: False)
-m MOCK, --mock MOCK The location of the mock data JSON file that replaces certain values in the payload (default: mock.json)
--max-depth MAX_DEPTH
The maximum number of iteration to perform on a given payload (default: 150)
--decode-base64 Payloads containing base64 will be decoded (default: False)

Targets:
Choose which target payloads to run Ox4Shell on

-p PAYLOAD, --payload PAYLOAD
A single payload to deobfuscate, make sure to escape '$' signs (default: None)
-f FILE, --file FILE A file containing payloads delimited by newline (default: None)
Mock Data

The Log4j library has a few unique lookup functions, which allow users to look up environment variables, runtime information on the Java process, and so forth. This capability grants threat actors the ability to probe for specific information that can uniquely identify the compromised machine they targeted.

Ox4Shell uses the mock.jsonfile to insert common values into certain lookup function, for example, if the payload contains the value ${env:HOME}, we can replace it with a custom mock value.

The default set of mock data provided is:
{
"hostname": "ip-127.0.0.1",
"env": {
"aws_profile": "staging",
"user": "ubuntu",
"pwd": "/opt/",
"path": "/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/lib/jvm/java-1.8-openjdk/jre/bin:/usr/lib/jvm/java-1.8-openjdk/bin"
},
"sys": {
"java.version": "16.0.2",
"user.name": "ubuntu"
},
"java": {
"version": "Java version 16.0.2",
"runtime": "OpenJDK Runtime Environment (build 1.8.0_181-b13) from Oracle Corporation",
"vm": "OpenJDK 64-Bit Server VM (build 25.181-b13, mixed mode)",
"os": "Linux 5.10.47-linuxkit unknown, architecture: amd64-64",
"locale": "default locale: en_US, platform encoding: UTF-8",
"hw": "processors: 1, architecture: amd64-64"
}
}

Click Here To Download

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Forwarding ports over UPnP without router access.

https://cdn-images-1.medium.com/max/720/1*2TE3g30e5Iz9JfQAXo6cnQ.png
UPnP (Universal Plug and Play) is a set of protocols so that devices or services (UPnP is commonly used in IoT, consoles, online games and…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Behind the SMS Bombing Application

https://cdn-images-1.medium.com/max/685/1*Q6ARUdzs9Tcyr902W5gazA.png
Almost everyone has used or has been a victim of SMS/Call bombing attacks.

Continue reading on InfoSec Write-ups »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
A Step-By-Step Guide to Crack Wifi Password with Python

https://cdn-images-1.medium.com/max/1124/1*hLJ5eL7JMzZNbQfPxcnQ1A.png
This article aims to guide curious ones like you, techy or non-techy gaining easy wifi access anywhere you go with python. Let’s dive in…

Continue reading on Level Up Coding »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
To defeat cyberattackers you need to get to know them better

https://cdn-images-1.medium.com/max/1200/1*o9Dbp8GiKb4ZKa4GoOuwZg.jpeg
While it may not involve bombs and bullets, you’re at war with cyberattackers. The best way to defeat them is to know how they’ll attack.

Continue reading on Nerd For Tech »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
TryHackMe writeup: BadByte

https://cdn-images-1.medium.com/max/966/0*U3rvar97WQdWSQaD.png
That lassie with the dragon tattoo took a bad byte — but nothing more than she can chew ;-)

Continue reading on InfoSec Write-ups »

___________________________
@hacking_Attack
@Hacking_Video