Hacking on Medium
Pentester Lab S2–052

https://cdn-images-1.medium.com/max/1787/1*WwxeuV1CAQ8qzWNOxoSzjQ.png
Esta sala é um desafio surpreendentemente simples produzido pela Pentesterlab que tem como objetivo explorar o Struts S2–052…

Continue reading on Medium »

Dark Reading: Attacks/Breaches
Are 100% Security Guarantees Possible?

Large vendors are commoditizing capabilities that claim to provide absolute security guarantees backed up by formal verification. How significant are these promises?

hacking: security in practice
OSCP 2022 - Guide

https://external-preview.redd.it/VXLoxVhZS8mVlfH_t94ovbXrIwMZDbi3XVGvl7cBilk.jpg?width=640&crop=smart&auto=webp&s=1d44909d753ad8d6b5a4f9a36a18c49d70ec430d submitted by /u/DrinkMoreCodeMore
[link] [comments]

hacking: security in practice
Is Installing Kali On The Laptop Or Using Kali Live Through Usb The Same ?

Do They Work Same Or One Works Better than Other Please let me know this difference anyone?

submitted by /u/Fair-Baseball2793
[link] [comments]

hacking: security in practice
hacked

Someone is hacking my reddit account and doing stuff, what can i do ?

submitted by /u/DarKEmbleR
[link] [comments]

Hacking on Medium
Cybersecurity Prologue- IV

https://cdn-images-1.medium.com/max/600/1*KRTY6KPvLSLWXwyqNl_BLw.png
Chapter fourth- “Cybersecurity Threat’’ and “Cybersecurity Architecture” in cybersecurity will WOW you

Continue reading on Bootcamp »

hacking: security in practice
Chineses probably know my Steam password but I don't :(

Okay, so there's two old Steam accounts of mine which i forgot my password, one of them i also lost the authenticator, tried multipled times to reach steam support but i just cant recover them, today i managed to log in a old e-mail of mine and saw that one of the accounts have been heavily tried to log in(from china), and the attempts were only stopped because i have the email guard.
So i want to know how i get to the steam data breach to get my other account lost password. I know there was one in 2011 and one in 2018 i guess.
(If it's illegal just say and then i will not do it yk yk)

TL;DR: I want to know how i download one of the steam data breaches?(my lost acc is in there)

submitted by /u/kil_lme
[link] [comments]

hacking: security in practice
Whats the Best and easiest Hacking Tool to do RAT windows and Linux

title

submitted by /u/myfile10
[link] [comments]

hacking: security in practice
Hacked Ring Cams Used to Record Swatting Victims

submitted by /u/DrinkMoreCodeMore
[link] [comments]

Hacking Articles
Paper HackTheBox Walkthrough

Paper is a Linux machine and is considered an easy box the hack the box. On this box, we will begin with a basic port scan and move laterally. Then we will enumerate domain name and exploit a secrets leaking vulnerability found in the WordPress plugin which will lead us towards secret chat domain. Then we will create a new user account and enumerate all the conversations and take advantage of the bot feature to read the sensitive file which will give us initial foothold to the target machine. Then we will be tasked to gain root access where we will exploit it using policy kit vulnerability found in year 2021 by Kevin Backhouse. Successful execution of the exploit will spawn a root shell. Table of ContentInitial Access

* TCP Port Scan
* Initial Enumeration
* Find Domain Name
* Web Page Enumeration
* Searching For the Exploit
* Secrets leaking Vulnerability Exploitation
* Subdomain Enumeration
* Bot Feature Abuse
* User Flag

Privilege Escalation

* PolicyKit Exploit: CVE-2021-3560
* Root Flag

Let’s exploit it step by step. Initial AccessWe are going to start the assessment with the normal TCP/IP port scanning. TCP Port ScanLet’s start with the port scan. We are using nmap to find out which ports are open and what services are running in the target host. Nmap is a popular port scanning tool come with Kali Linux. In order to perform port scan, we have used –sV flag which performs a service version scan against the target machine.

Flags features:

-sV:  Attempts to determine the service version
nmap  -sV 10.129.74.162
From the nmap scan, we have found there were only three ports open, which is port 22,80 and port 443. As usual HTTP service is running on port 80, HTTPS service is running on port 443 and the SSH service is running on port 22. Both HTTP and HTTPS service is used for the webhosting and the SSH service is used for remote connection. SSH version is the latest, and we did not find any vulnerabilities on SSH version 8.0 and the possible attack we can perform against the SSH service at this stage is bruteforce only which we might not need to do. Instead of thinking about the SSH bruteforce let’s start enumerating port 80 and 443.

https://i0.wp.com/blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgRZb246ahrzPrLy7p8vBU3jJfUB0XqPZ0eEGQg1JaImB8m8C4gmQir10SE818EabllpfLgCkalGNfsu8rnGqacadA_SiBNbVdLbwy453DE15w6kZEJHqE2ZrEO8kRe_tswLKhWaEaJbttBTakJX0N7r_ekjx-oTrp5QbMCZaeAt0tDB10krJf7PH6v4Q/s16000/1.png?w=640&ssl=1

Initial Enumeration

We begin enumeration by accessing port 80 and 443 over browser. Webpage does not have many interesting things. From the web page, we found it is showing default page of CentOS.
htttp://10.129.74.162
https://i0.wp.com/blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgpmVzL26cqrALLxWTo1V5u8CIMbmgqcSsjZWBteqKQ55YbZX4SF6xYs5QkTLBv9U9SrGE3wmpJRvVVMIovg2xjBdNse88CQV-jqS06ceUrewhei1xOXKdyUXXITwxsfooeaITaFKCym3UenwC3cxUy4_LHbKjALNVs8nUs0kn4MYnsMxc12BFoBHsmQQ/s16000/2.png?w=640&ssl=1

Find Domain Name
curl -I 10.129.74.162
Flags features:

-I: Include protocol response headers in the output

Further enumeration of the output result, we see X-backend-server revealed its domain name which is office.paper We have used Kali inbuilt tool called curl. https://everything.curl.dev/project

https://i0.wp.com/blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEil3DhSHT205uFuScczyTDvVUcgZgk1RiJ5Z2cGiggSoV2EqJh2oa2_YVm_LSuJMnkgjgJj6auZdtYm7F3Zj7vT_yLpHpVoGgFo9e6txxVp9iUoXx-znzKeBjUy3s8JnGfh2y8_E0yCLutv0c92ShX6_RNZ0jexiu0dhGRlTjGsMN4qBhwDp8an3U2Uaw/s16000/3.png?w=640&ssl=1

After finding the domain name we are adding it to /etc/hosts file in the attacking machine. To add to host’s file you can use any text editor such as leafpad, gedit, nano or vim.

Why do we need to add domain in the local hosts file?

The /etc/hosts file contains a mapping of IP addresses to[...]

Hacking Articles
Pandora HackTheBox Walkthrough

SummaryPandora is a Linux machine and is considered an easy box by the hack the box but indeed it is not. With this box, we will need to perform another port scan instead of being relied on only TCP ports results. Then we will dig into SNMP protocol and find out very interesting information for us which will lead us to an initial foothold to the target machine. Then we will need to perform Horizontal privilege escalation and local port forward to enumerate service running on the target’s internal port. Then we will exploit the admin console which is vulnerable to SQL injection and upload a malicious file to get a reverse shell as a different user. In the post-exploitation phase, we will abuse the SUID binary using path hijacking technique. Table of ContentInitial Access

* TCP Port Scan
* Enumeration
* UDP Port Scan
* SNMP Enumeration
* User Shell as Daniel

Horizontal Privilege Escalation

* Enumeration
* Port Forwarding
* CVE-2021-32099 SQL injection Exploitation
* File Upload
* User Flag

Privilege Escalation

* SSH Key Generate
* SUID Path hijack
* Root Flag

Let’s exploit it step by step. Initial AccessWe are going to start the assessment with the TCP/IP port scanning. TCP Port ScanLet’s start with the port scan. We are using nmap to find out which ports are open so we can begin our port and service analyse. Nmap is a popular port scanning tool come with Kali Linux. In order to perform port scan, we have used -sC and -sV flags.

Flags features:

-sC   : Scans with default NSE scripts

-sV   :  Attempts to determine the service version

Command used:
nmap -sC -sV 10.129.26.243
https://i0.wp.com/blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEggzEIOKKimE5TO1DEb1dOq1Ced9FfQ8yxFD_3qWtKitCIJhWX73NUNykwZV7qG1H-x_YZDGqQUagpjMCzorKJ21k4vkmh0BpM-cE_7qwPmeJqdTSS6qnmxwZZS_G7u7H8Yo9JH29XA5s1FfDUDZ1OYwTDsn7XrGgKuTEqOMd_S_PcwtYX0p40Yx7uoPg/s16000/1.png?w=640&ssl=1

From the nmap scan, we have found there were only two ports open, which are port 80 and port 22. As usual HTTP service is running on port 80 and the SSH service is running on port 22. Http service is used for Webhosting and the SSH service is used for remote connection. SSH version is the latest and does not look vulnerable and the possible attack we can perform against the SSH service at this stage is bruteforce only which we might not need to. Instead of thinking about the SSH bruteforce let’s start enumerating port 80. EnumerationWe begin enumeration by accessing port 80 over the browser. The webpage does not have many interesting things, but we can see the domain name is available there which is Panda.htb. Next thing we can analyse what this website is made for, and what it does. Remember every website is created for some purpose with this mindset we assumed this website is serving games and network monitoring solutions.
htttp://10.129.26.243
https://i0.wp.com/blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiqOXWdV-BU1atzeRt_jEHloQrnFNDjLuJdrer05e-OY-zJLwxnjpbd6eh5rRxVbDgjc4X2nY6E8cORDvyAy9Byn5GXrVPpmSRCvWYfWsEQjrWdLHx7zE2YZ7jg8Nb4uth35ULKEDAESt0ykZNiU1JxQKNh0ZdhBmJTZtsR5R84ZAL31y40rjRBwcMVug/s16000/2.png?w=640&ssl=1 UDP Port Scan Got stuck for some time as we did not get any lead to get a foothold into the target system, we decided to perform a UDP port scan. When we do a normal nmap scan, it only scans TCP ports but not UDP so many time UDP ports may lead us to interesting findings. After the completion of the UDP port scan, we found that SNMP port is open on its default port which is port 161. Now we can go for further enumeration against the SNMP port but let’s talk about SNMP first.

What is SNMP and what it is used for?

Simple Network Management Protocol (SNMP) is a networking protocol used for the monitoring and management of the network-connected end devices in the internet protocol netwo[...]