Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
HACK THE BOX — MetaTwo WALKTHROUGH
https://cdn-images-1.medium.com/max/700/1*W9KKMdPvgTt7E6x7tVYGKQ.png
In this write up we’re going to solve a box on hack the box called “MetaTwo”
Continue reading on Medium »
➖ Sent by @TheFeedReaderBot ➖
HACK THE BOX — MetaTwo WALKTHROUGH
https://cdn-images-1.medium.com/max/700/1*W9KKMdPvgTt7E6x7tVYGKQ.png
In this write up we’re going to solve a box on hack the box called “MetaTwo”
Continue reading on Medium »
➖ Sent by @TheFeedReaderBot ➖
Hacking Articles Tips Tricks Videos Tutorials
Photo
Black Hat Ethical Hacking
Apple security update fixes new iOS zero-day used to hack iPhones
Apple security update fixes new iOS zero-day used to hack iPhonesPost Views: 114 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/12/Patreon.png Subscribe to Patreon to watch this episode.
Reading Time: 3 Minutes In security updates released today, Apple has fixed the tenth zero-day vulnerability since the start of the year, with this latest one actively used in attacks against iPhones.The vulnerability was disclosed in security bulletins released today for iOS/iPadOS 15.7.2, Safari 16.2, tvOS 16.2, and macOS Ventura 13.1, with Apple warning that the flaw “may have been actively exploited” against previous versions.
The bug (CVE-2022-42856) is a type confusion issue in Apple’s Webkit web browser browsing engine.
The flaw was discovered by Clément Lecigne of Google’s Threat Analysis Group, allowing maliciously crafted web content to perform arbitrary code execution on a vulnerable device.
Arbitrary code execution could allow the malicious site to execute commands in the operating system, deploy additional malware or spyware, or perform other malicious actions.
Apple addressed the zero-day vulnerability with improved state handling for the following devices iPhone 6s (all models), iPhone 7 (all models), iPhone SE (1st generation), iPad Pro (all models), iPad Air 2 and later, iPad 5th generation and later, iPad mini 4 and later, and iPod touch (7th generation).
See Also: So you want to be a hacker? Complete Offensive Security and Ethical Hacking Course Patch your iPhones, iPads, and macOS VenturaWhile Apple has disclosed that threat actors actively exploited the vulnerability, they have yet to provide any details on the attacks.
However, as the vulnerability was discovered by Clément Lecigne of Google’s Threat Intelligence Team, we will likely learn more in a future blog post.
This delay in providing details is commonly done to allow users to patch their devices before other threat actors analyze the fixes and develop their own exploits.
Even though this zero-day flaw was likely used in highly-targeted attacks, it is still suggested to install today’s security updates as soon as possible.
Trending: Exploit XSS Injections in a one-line powerful Technique Trending: Offensive Security Tool: Pycrypt This is the tenth zero-day fixed by Apple since the start of the year:
* In October, Apple fixed a zero-day in the iOS Kernel (CVE-2022-42827).
* In September, Apple addressed a flaw in the iOS Kernel (CVE-2022-32917).
* In August, it fixed two more zero-days in the iOS Kernel (CVE-2022-32894) and WebKit (CVE-2022-32893)
* In March, Apple patched two zero-day in the Intel Graphics Driver (CVE-2022-22674) and AppleAVD (CVE-2022-22675).
* In February, Apple released security updates to address another WebKit zero-day bug exploited to target iPhones, iPads, and Macs.
* In January, Apple patched another pair of zero-days allowing code execution with kernel privileges (CVE-2022-22587) and web browsing activity tracking (CVE-2022-22594).
Trending: Kali Linux 2022.4 – New Release adds 6 new tools, Kali NetHunter Update, Azure Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?
If you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com
Source: bleepingcomputer.com Source Link https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Merch.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/12/Images-for-the-News-po[...]
Apple security update fixes new iOS zero-day used to hack iPhones
Apple security update fixes new iOS zero-day used to hack iPhonesPost Views: 114 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/12/Patreon.png Subscribe to Patreon to watch this episode.
Reading Time: 3 Minutes In security updates released today, Apple has fixed the tenth zero-day vulnerability since the start of the year, with this latest one actively used in attacks against iPhones.The vulnerability was disclosed in security bulletins released today for iOS/iPadOS 15.7.2, Safari 16.2, tvOS 16.2, and macOS Ventura 13.1, with Apple warning that the flaw “may have been actively exploited” against previous versions.
The bug (CVE-2022-42856) is a type confusion issue in Apple’s Webkit web browser browsing engine.
The flaw was discovered by Clément Lecigne of Google’s Threat Analysis Group, allowing maliciously crafted web content to perform arbitrary code execution on a vulnerable device.
Arbitrary code execution could allow the malicious site to execute commands in the operating system, deploy additional malware or spyware, or perform other malicious actions.
Apple addressed the zero-day vulnerability with improved state handling for the following devices iPhone 6s (all models), iPhone 7 (all models), iPhone SE (1st generation), iPad Pro (all models), iPad Air 2 and later, iPad 5th generation and later, iPad mini 4 and later, and iPod touch (7th generation).
See Also: So you want to be a hacker? Complete Offensive Security and Ethical Hacking Course Patch your iPhones, iPads, and macOS VenturaWhile Apple has disclosed that threat actors actively exploited the vulnerability, they have yet to provide any details on the attacks.
However, as the vulnerability was discovered by Clément Lecigne of Google’s Threat Intelligence Team, we will likely learn more in a future blog post.
This delay in providing details is commonly done to allow users to patch their devices before other threat actors analyze the fixes and develop their own exploits.
Even though this zero-day flaw was likely used in highly-targeted attacks, it is still suggested to install today’s security updates as soon as possible.
Trending: Exploit XSS Injections in a one-line powerful Technique Trending: Offensive Security Tool: Pycrypt This is the tenth zero-day fixed by Apple since the start of the year:
* In October, Apple fixed a zero-day in the iOS Kernel (CVE-2022-42827).
* In September, Apple addressed a flaw in the iOS Kernel (CVE-2022-32917).
* In August, it fixed two more zero-days in the iOS Kernel (CVE-2022-32894) and WebKit (CVE-2022-32893)
* In March, Apple patched two zero-day in the Intel Graphics Driver (CVE-2022-22674) and AppleAVD (CVE-2022-22675).
* In February, Apple released security updates to address another WebKit zero-day bug exploited to target iPhones, iPads, and Macs.
* In January, Apple patched another pair of zero-days allowing code execution with kernel privileges (CVE-2022-22587) and web browsing activity tracking (CVE-2022-22594).
Trending: Kali Linux 2022.4 – New Release adds 6 new tools, Kali NetHunter Update, Azure Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?
If you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com
Source: bleepingcomputer.com Source Link https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Merch.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/12/Images-for-the-News-po[...]
Hacking Articles Tips Tricks Videos Tutorials
Black Hat Ethical Hacking Apple security update fixes new iOS zero-day used to hack iPhones Apple security update fixes new iOS zero-day used to hack iPhonesPost Views: 114 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/12/Patreon.png…
sts-300x150.png New Python malware backdoors VMware ESXi servers for remote accessDecember 13, 2022
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/12/1-300x150.png JSON syntax hack allowed SQL injection payloads to be smuggled past WAFsDecember 12, 2022
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/12/Images-for-the-News-posts-21-300x150.png Cisco discloses high-severity IP phone bug with exploit codeDecember 9, 2022
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/12/Images-for-the-News-posts-20-300x150.png New Zerobot malware has 21 exploits for BIG-IP, Zyxel, D-Link devicesDecember 8, 2022
https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/OffSec-Course.png Offensive Security & Ethical Hacking CourseBegin the learning curve of hacking now!
The post Apple security update fixes new iOS zero-day used to hack iPhones first appeared on Black Hat Ethical Hacking.
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/12/1-300x150.png JSON syntax hack allowed SQL injection payloads to be smuggled past WAFsDecember 12, 2022
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/12/Images-for-the-News-posts-21-300x150.png Cisco discloses high-severity IP phone bug with exploit codeDecember 9, 2022
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/12/Images-for-the-News-posts-20-300x150.png New Zerobot malware has 21 exploits for BIG-IP, Zyxel, D-Link devicesDecember 8, 2022
https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/OffSec-Course.png Offensive Security & Ethical Hacking CourseBegin the learning curve of hacking now!
The post Apple security update fixes new iOS zero-day used to hack iPhones first appeared on Black Hat Ethical Hacking.
Hacking Articles Tips Tricks Videos Tutorials
Photo
hacking: security in practice
Cloning Car Remote
There are loads of universal garage door remote cloners for sale online, some claim to work with rolling codes.
Just in terms of locking / unlocking the doors... can these be used for cloning car keys? If so:
*
has anyone had much luck
*
is there a list of vunerable makes & models
*
do you need the original keys in hand
*
what specs are essential (for the cloner) and can anyone recommend a good value one?
Thanks guys (purely for research and curiosity).
submitted by /u/Different_Carrot_846
[link] [comments]
Cloning Car Remote
There are loads of universal garage door remote cloners for sale online, some claim to work with rolling codes.
Just in terms of locking / unlocking the doors... can these be used for cloning car keys? If so:
*
has anyone had much luck
*
is there a list of vunerable makes & models
*
do you need the original keys in hand
*
what specs are essential (for the cloner) and can anyone recommend a good value one?
Thanks guys (purely for research and curiosity).
submitted by /u/Different_Carrot_846
[link] [comments]
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking Articles Tips Tricks Videos Tutorials
Photo
hacking: security in practice
This guy created an analog 1G AMPS cell network and it works with his vintage Motorola!
https://external-preview.redd.it/lLUYmAmadfkpaX1dAntoOzLqSdjlh2Nl_Q5GHsF8iO4.jpg?width=320&crop=smart&auto=webp&s=05a93fe31029431cc056a844659c7b579a9b9f72 submitted by /u/MedicalWonder7739
[link] [comments]
This guy created an analog 1G AMPS cell network and it works with his vintage Motorola!
https://external-preview.redd.it/lLUYmAmadfkpaX1dAntoOzLqSdjlh2Nl_Q5GHsF8iO4.jpg?width=320&crop=smart&auto=webp&s=05a93fe31029431cc056a844659c7b579a9b9f72 submitted by /u/MedicalWonder7739
[link] [comments]
Hacking Articles Tips Tricks Videos Tutorials
Photo
hacking: security in practice
Hacking Travel Pass Card Dubai
So Dubai has these NOL cards that can be used for RTA bus services and the metro train. It's an NFC card and the balance is inside the physical card itself and not an online server. You can recharge via special machines that ask you to put the card on the nfc reader, insert cash and then after top up you can remove the card.
Another way you can top up is using the official mobile application. The application first take the amount from your credit/debit card then asks you to put the card under the mobile nfc reader so it can add that amount in the card.
What i was thinking is that can we somehow use a rooted android phone to listen to the data that the application is feeding the nol card for the top up, save it and then use some application reuse the data for unlimited balance in nol cards?
submitted by /u/boboqayum
[link] [comments]
Hacking Travel Pass Card Dubai
So Dubai has these NOL cards that can be used for RTA bus services and the metro train. It's an NFC card and the balance is inside the physical card itself and not an online server. You can recharge via special machines that ask you to put the card on the nfc reader, insert cash and then after top up you can remove the card.
Another way you can top up is using the official mobile application. The application first take the amount from your credit/debit card then asks you to put the card under the mobile nfc reader so it can add that amount in the card.
What i was thinking is that can we somehow use a rooted android phone to listen to the data that the application is feeding the nol card for the top up, save it and then use some application reuse the data for unlimited balance in nol cards?
submitted by /u/boboqayum
[link] [comments]
Hacking Articles Tips Tricks Videos Tutorials
Photo
KitPloit - PenTest Tools!
FarsightAD - PowerShell Script That Aim To Help Uncovering (Eventual) Persistence Mechanisms Deployed By A Threat Actor Following An Active Directory Domain Compromise
https://blogger.googleusercontent.com/img/a/AVvXsEhJP8tw6l0QoEBdruA4N4Er85BrYaWKhJzKkkedilz9sHAmKJJI868hwqmHptnGoKzz4_m-IWfNzHr3VVnwN2fxpVQHDz4tF0GWa5zyh2EhMKNL6l1vf5C_A7NWcIdY_FH86AQLwnNzMnkEWZYVwreeTBgWT577M7IlC9cxFq3tRQPR_FR_Xug8YX8idw=w640-h360
The script produces CSV / JSON file exports of various objects and their attributes, enriched with timestamps from replication metadata. Additionally, if executed with replication privileges, the
For more information, refer to the SANS DFIR Summit 2022 introductory slides. Prerequisite
On Windows 10 / 11, the module can be installed through the
May take a while on larger domain.
Non-default (as defined in the Microsoft documentation) ACLs are identified and potentially dangerous ACEs are highlighted.
The following notable parameters are retrieved: certificate template publish status, certificate usage, if the subject is constructed from user-supplied data, and access control (enrollment / modification).
FarsightAD - PowerShell Script That Aim To Help Uncovering (Eventual) Persistence Mechanisms Deployed By A Threat Actor Following An Active Directory Domain Compromise
https://blogger.googleusercontent.com/img/a/AVvXsEhJP8tw6l0QoEBdruA4N4Er85BrYaWKhJzKkkedilz9sHAmKJJI868hwqmHptnGoKzz4_m-IWfNzHr3VVnwN2fxpVQHDz4tF0GWa5zyh2EhMKNL6l1vf5C_A7NWcIdY_FH86AQLwnNzMnkEWZYVwreeTBgWT577M7IlC9cxFq3tRQPR_FR_Xug8YX8idw=w640-h360
FarsightADis a PowerShell script that aim to help uncovering (eventual) persistence mechanisms deployed by a threat actor following an Active Directory domain compromise.The script produces CSV / JSON file exports of various objects and their attributes, enriched with timestamps from replication metadata. Additionally, if executed with replication privileges, the
Directory Replication Service (DRS)protocol is leveraged to detect fully or partially hidden objects.For more information, refer to the SANS DFIR Summit 2022 introductory slides. Prerequisite
FarsightADrequires PowerShell 7and the ActiveDirectorymodule updated for PowerShell 7.On Windows 10 / 11, the module can be installed through the
Optional Featuresas RSAT: Active Directory Domain Services and Lightweight Directory Services Tools. Already installed module can be updated with: Add-WindowsCapability -Online -Name Rsat.ServerManager.Tools~~~~0.0.1.0 If the module is correctly updated, Get-Command Get-ADObjectshould return: CommandType Name Version Source
----------- ---- ------- ------
Cmdlet Get-ADObject 1.0.X.X ActiveDirectory Basic usage. .\FarsightAD.ps1
Invoke-ADHunting [-Server <dc_ip] [-Credential <ps_credential] [-ADDriveName <ad_drive_name] [-OutputFolder <output_folder] [-ExportType <csv] AD Hunting cmdletsCmdlet Synopsis Invoke-ADHuntingExecute all the FarsightAD AD hunting cmdlets (mentionned below). Export-ADHuntingACLDangerousAccessRightsExport dangerous ACEs, i.e ACE that allow takeover of the underlying object, on all the domain's objects. May take a while on larger domain.
Export-ADHuntingACLDefaultFromSchemaExport the ACL configured in the defaultSecurityDescriptor attribute of Schema classes. Non-default (as defined in the Microsoft documentation) ACLs are identified and potentially dangerous ACEs are highlighted.
Export-ADHuntingACLPrivilegedObjectsExport the ACL configured on the privileged objects in the domain and highlight potentially dangerous access rights. Export-ADHuntingADCSCertificateTemplatesExport information and access rights on certificate templates. The following notable parameters are retrieved: certificate template publish status, certificate usage, if the subject is constructed from user-supplied data, and access control (enrollment / modification).
Export-ADHuntingADCSPKSObjectsExport information and access rights on sensitive PKS objects (NTAuthCertificates, certificationAuthority, and pKIEnrollmentService). Export-ADHuntingGPOObjectsAndFilesACLExport ACL access rights information on GPO objects and files, highlighting GPOs are applied on privileged users or computers. Export-ADHuntingGPOSettingsExport information on various settings configured by GPOs that could be leveraged for persistence (privileges and logon rights, restricted groups membership, scheduled and immediate tasks V1 / V2, machine and user logon / logoff scripts). Export-ADHuntingHiddenObjectsWithDRSRepDataExport the objects' attributes that are accessible through replication ([...]
Hacking Articles Tips Tricks Videos Tutorials
KitPloit - PenTest Tools! FarsightAD - PowerShell Script That Aim To Help Uncovering (Eventual) Persistence Mechanisms Deployed By A Threat Actor Following An Active Directory Domain Compromise https://blogger.googleusercontent.com/img/a/AVvXsEhJP8tw6l0Q…
with the Directory Replication Service (DRS) protocol) but not by direct query.
Access control are not taken into account for replication operations, which allows to identify access control blocking access to specific objects attribute(s).
Only a limited set of sensitive attributes are assessed.
The certificates are parsed to retrieve a number of parameters: certificate validity timestamps, certificate purpose, certificate subject and eventual SubjectAltName(s), ...
A number of parameters are retrieved for each trust: transivity, SID filtering, TGT delegation.
More information on each cmdlet usage can be retrieved using
The
*
*
*
*
The functions to parse Key Credentials are from the
*
The AD CS[...]
Access control are not taken into account for replication operations, which allows to identify access control blocking access to specific objects attribute(s).
Only a limited set of sensitive attributes are assessed.
Export-ADHuntingKerberosDelegationsExport the Kerberos delegations that are considered dangerous (unconstrained, constrained to a privileged service, or resources-based constrained on a privileged service). Export-ADHuntingPrincipalsAddedViaMachineAccountQuotaExport the computers that were added to the domain by non-privileged principals (using the ms-DS-MachineAccountQuota mechanism). Export-ADHuntingPrincipalsCertificatesExport parsed accounts' certificate(s) (for accounts having a non empty userCertificate attribute). The certificates are parsed to retrieve a number of parameters: certificate validity timestamps, certificate purpose, certificate subject and eventual SubjectAltName(s), ...
Export-ADHuntingPrincipalsDontRequirePreAuthExport the accounts that do not require Kerberos pre-authentication. Export-ADHuntingPrincipalsOncePrivilegedExport the accounts that were once member of privileged groups. Export-ADHuntingPrincipalsPrimaryGroupIDExport the accounts that have a non default primaryGroupID attribute, highlighting RID linked to privileged groups. Export-ADHuntingPrincipalsPrivilegedAccountsExport detailed information about members of privileged groups. Export-ADHuntingPrincipalsPrivilegedGroupsMembershipExport privileged groups' current and past members, retrieved using replication metadata. Export-ADHuntingPrincipalsSIDHistoryExport the accounts that have a non-empty SID History attribute, with resolution of the associated domain and highlighting of privileged SIDs. Export-ADHuntingPrincipalsShadowCredentialsExport parsed Key Credentials information (of accounts having a non-empty msDS-KeyCredentialLink attribute). Export-ADHuntingPrincipalsTechnicalPrivilegedExport the technical privileged accounts (SERVER_TRUST_ACCOUNT and INTERDOMAIN_TRUST_ACCOUNT). Export-ADHuntingPrincipalsUPNandAltSecIDExport the accounts that define a UserPrincipalName or AltSecurityIdentities attribute, highlighting potential anomalies. Export-ADHuntingTrustsExport the trusts of all the domains in the forest. A number of parameters are retrieved for each trust: transivity, SID filtering, TGT delegation.
More information on each cmdlet usage can be retrieved using
Get-Help -Full <cmdlet. DemoFully / partially hidden objects detectionhttps://blogger.googleusercontent.com/img/a/AVvXsEj2Hi1uCcT0L4k7UGquBMt34ztVXgb32pZov-2s3iu-KdSPfjlOsHPaasG02V5SwjGWxAhsaJ2adRHyXsplOiZOAtuEBUR1X0eWMEYEROUbcmvvWw8aWbDSR-NfbtLpv_LwN_T6VFkOqPS2unuHC3tUQkS11jG07XyqXQPTsD4XY5NcK-ZNdwK4FMfKtw=w640-h360 Adding a fully hidden user https://blogger.googleusercontent.com/img/a/AVvXsEhJP8tw6l0QoEBdruA4N4Er85BrYaWKhJzKkkedilz9sHAmKJJI868hwqmHptnGoKzz4_m-IWfNzHr3VVnwN2fxpVQHDz4tF0GWa5zyh2EhMKNL6l1vf5C_A7NWcIdY_FH86AQLwnNzMnkEWZYVwreeTBgWT577M7IlC9cxFq3tRQPR_FR_Xug8YX8idw=w640-h360 Hiding the SID History attribute of an user https://blogger.googleusercontent.com/img/a/AVvXsEiNlm3yuREDZ5Sn0l6mXSvOsoNOhfH_EjiXm-CKT77gag18fcqAWvNt6PHBRMk68IZkP9gO3mBOKLyXHdY_kfAHMg76D3oB82GV-gxzvIINILcJzSvk1pYM1HSMWfWyCIxD5hmxnFnYR1i8awRKpin586t1sReKbiTlqJ_yylzQLeIayBKcPAuLFn8loA=w640-h360 Uncovering the fully and partially hidden users with Export-ADHuntingHiddenObjectsWithDRSRepData Acknowledgements* The
C#code for DRSrequests was adapted from:*
MakeMeEnterpriseAdminby @vletoux.*
Mimikatzby @gentilkiwi and @vletoux.*
SharpKatzby @b4rtik.*
The functions to parse Key Credentials are from the
ADComputerKeys PowerShell module.*
The AD CS[...]
Hacking Articles Tips Tricks Videos Tutorials
with the Directory Replication Service (DRS) protocol) but not by direct query. Access control are not taken into account for replication operations, which allows to identify access control blocking access to specific objects attribute(s). Only a limited…
related persistence is based on work from:
* Certified Pre-Owned by Will Schroeder (@harmj0y) and Lee Christensen (@tifkin_)
* Microsoft ADCS – Abusing PKI in Active Directory Environment by Jean Marsault (@iansus)
*
The function to parse Service Principal Name is based on work from Adam Bertram. Thanks* Antoine Cauchois (@caucho_a) for the proofreading, testing and ideas. AuthorThomas DIOT (Qazeer) LicenceCC BY 4.0 licence - https://creativecommons.org/licenses/by/4.0/ Download FarsightAD
* Certified Pre-Owned by Will Schroeder (@harmj0y) and Lee Christensen (@tifkin_)
* Microsoft ADCS – Abusing PKI in Active Directory Environment by Jean Marsault (@iansus)
*
The function to parse Service Principal Name is based on work from Adam Bertram. Thanks* Antoine Cauchois (@caucho_a) for the proofreading, testing and ideas. AuthorThomas DIOT (Qazeer) LicenceCC BY 4.0 licence - https://creativecommons.org/licenses/by/4.0/ Download FarsightAD
Hacking Articles Tips Tricks Videos Tutorials
Photo
Kali Linux Tutorials
R4Ven : Track IP And GPS Location
Track User’s Smartphone/Pc Ip And Gps Location.
The tool hosts a fake website which uses an iframe to display a legit website and, if the target allows it, it will fetch the Gps location
This tool is a Proof of Concept and is for Educational Purposes Only.
Using this tool, you can find out what information a malicious website can gather about you and your devices and why you shouldn’t click on random links or grant permissions like Location to them.
On link click
+ it wil automatically fetch ip address and device information
! if location permission allowed, it will fetch exact location of target.
Limitation
- It will not work on laptops or phones that have broken GPS,
# browsers that block javascript,
# or if the user is mocking the GPS location.
- Safari - auto block location permission
- Brave - auto block location permission
- Firefox - after a recent update this browser became very weird it allows location permission but it's not accurate at all.
+ Best work with Chrome browser and location accuracy will be more accurate if you use this on a smartphone.
IP location vs GPS location
- Geographic location based on IP address is NOT accurate,
# Does not provide the location of the target.
# Instead, it provides the approximate location of the ISP (Internet service provider) + GPS fetch almost exact location because it uses longitude and latitude coordinates.
@@ Once location permission is granted @@
# accurate location information is recieved to within 20 to 30 meters of the user's location.
# (it's almost exact location)
Installation
git clone https://github.com/spyboy-productions/r4ven.git
cd r4ven
pip3 install -r requirements.txt
python3 r4ven.py
enter your discord webhook url (set up a channel in your discord server with webhook integration)
https://support.discord.com/hc/en-us/articles/228383668-Intro-to-Webhooks
if not have discord account and sever make one, it’s free.
https://discord.com/
Snapshots
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgkh4jNn-MNqxGPUCnAMhIcrS7ywz5tN2wYyofkwNJwK_9hWmVPi02apvH4_pwqzbZyUzcfO0o2EZe0Jfls6nkyT6rIxhQGMYvsQC7gDKnLG47awkzZXmpyyJBOegeiRxwQ2jXgAoKLcI4iMCb_ca21SAU7XaFjhPR5Ahvwr1ZFurDVgl9hoWej7eBS/s3012/R4Ven1.png https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh_sPIM62N57WlFdZz6qmVX-OUn8ePMNWhC-5aArFnLkPfXQrBV2xrdzgraFByxmLkpF_E_FfL8JwMALJdjuPURp9AoJaEJVBbuVmJ_opowtvT_lZI2hhiyE9KNOyaC-fp8DH3rVVeayUd0ezVZeuYFuUJ87I8tOS0rwci2H2Ft0wwK8zSyIbdNpPbJ/s3360/R4Ven2.png https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi2mi1-ptM0D5XEInmFaZ5ynoQ400XGdMCPGcpQzJQfU8OcozRGJ_ONtDa1ShnfGxnkz76MbHwbFmR-IjuzQeEpt94yHYrR0sRM8CIhwodB9mhmhi4qpkSa7XpzHunb5qeqvS10WoSfM0uXAeJohoc5YJBF5Uw1Y_iCPdpu76z6YeRyhHgJo1DThfep/s1732/R4Ven3.png https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhrWsBohPNmlB_-j9eKyaIlDsddivfbUVL497M8o61MWuTG-vF2ye6sJ760KN6QVnv5D3hOS7gH5tVMyI9NGUydgoeQvOMOFgkFzJ5t08SuVJn4E240lU1mlEubD43q9RhNX9UKM1DVHlNYVH3Luq96uUNFZj22xhEURFRw_8jw3PIKU8W3AkHrIcQJ/s2276/R4Ven4.png
Click Here To Download
R4Ven : Track IP And GPS Location
Track User’s Smartphone/Pc Ip And Gps Location.
The tool hosts a fake website which uses an iframe to display a legit website and, if the target allows it, it will fetch the Gps location
(latitude and longitude)of the target along with IP Addressand Device Information.This tool is a Proof of Concept and is for Educational Purposes Only.
Using this tool, you can find out what information a malicious website can gather about you and your devices and why you shouldn’t click on random links or grant permissions like Location to them.
On link click
+ it wil automatically fetch ip address and device information
! if location permission allowed, it will fetch exact location of target.
Limitation
- It will not work on laptops or phones that have broken GPS,
# browsers that block javascript,
# or if the user is mocking the GPS location.
- Safari - auto block location permission
- Brave - auto block location permission
- Firefox - after a recent update this browser became very weird it allows location permission but it's not accurate at all.
+ Best work with Chrome browser and location accuracy will be more accurate if you use this on a smartphone.
IP location vs GPS location
- Geographic location based on IP address is NOT accurate,
# Does not provide the location of the target.
# Instead, it provides the approximate location of the ISP (Internet service provider) + GPS fetch almost exact location because it uses longitude and latitude coordinates.
@@ Once location permission is granted @@
# accurate location information is recieved to within 20 to 30 meters of the user's location.
# (it's almost exact location)
Installation
git clone https://github.com/spyboy-productions/r4ven.git
cd r4ven
pip3 install -r requirements.txt
python3 r4ven.py
enter your discord webhook url (set up a channel in your discord server with webhook integration)
https://support.discord.com/hc/en-us/articles/228383668-Intro-to-Webhooks
if not have discord account and sever make one, it’s free.
https://discord.com/
Snapshots
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgkh4jNn-MNqxGPUCnAMhIcrS7ywz5tN2wYyofkwNJwK_9hWmVPi02apvH4_pwqzbZyUzcfO0o2EZe0Jfls6nkyT6rIxhQGMYvsQC7gDKnLG47awkzZXmpyyJBOegeiRxwQ2jXgAoKLcI4iMCb_ca21SAU7XaFjhPR5Ahvwr1ZFurDVgl9hoWej7eBS/s3012/R4Ven1.png https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh_sPIM62N57WlFdZz6qmVX-OUn8ePMNWhC-5aArFnLkPfXQrBV2xrdzgraFByxmLkpF_E_FfL8JwMALJdjuPURp9AoJaEJVBbuVmJ_opowtvT_lZI2hhiyE9KNOyaC-fp8DH3rVVeayUd0ezVZeuYFuUJ87I8tOS0rwci2H2Ft0wwK8zSyIbdNpPbJ/s3360/R4Ven2.png https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi2mi1-ptM0D5XEInmFaZ5ynoQ400XGdMCPGcpQzJQfU8OcozRGJ_ONtDa1ShnfGxnkz76MbHwbFmR-IjuzQeEpt94yHYrR0sRM8CIhwodB9mhmhi4qpkSa7XpzHunb5qeqvS10WoSfM0uXAeJohoc5YJBF5Uw1Y_iCPdpu76z6YeRyhHgJo1DThfep/s1732/R4Ven3.png https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhrWsBohPNmlB_-j9eKyaIlDsddivfbUVL497M8o61MWuTG-vF2ye6sJ760KN6QVnv5D3hOS7gH5tVMyI9NGUydgoeQvOMOFgkFzJ5t08SuVJn4E240lU1mlEubD43q9RhNX9UKM1DVHlNYVH3Luq96uUNFZj22xhEURFRw_8jw3PIKU8W3AkHrIcQJ/s2276/R4Ven4.png
Click Here To Download