Hacking Articles Tips Tricks Videos Tutorials
Photo
hacking: security in practice
Insecure Direct Object Mapping or IDOMs is an underrated bug class and way more severe then IDORs
So IDOMs is a category to describe web app bugs that have been around since at least 2008. In different programming languages it's known as different names in Ruby it's called Mass Assignment, in Java and .NET ASPX it's called Data Binding or Reflection Binding. All these bugs have been categorized under the new IDOM name to prevent confusion. How they work is if a framework let's you append new objects depending on the parameters you place in your request they get mapped into the application which is a dangerous practice and the only way to prevent an IDOM is to explicitly whitelist object names in the programming logic so if you don't do this you are automatically vulnerable out of the gate. I've found IDOMs in so many big companies web apps especially java MVC based apps. At a recent blackhat conference in 2022 there was a presentation called "Data Binding 2 Shell" where a bunch of researchers have found severe IDOMs in popular java frameworks that led to RCE so the problem is still very much relevant to this day. Think of IDOM as writing to object data and think of IDOR as reading from object data there opposites of each other.
submitted by /u/TheCrazyAcademic
[link] [comments]
Insecure Direct Object Mapping or IDOMs is an underrated bug class and way more severe then IDORs
So IDOMs is a category to describe web app bugs that have been around since at least 2008. In different programming languages it's known as different names in Ruby it's called Mass Assignment, in Java and .NET ASPX it's called Data Binding or Reflection Binding. All these bugs have been categorized under the new IDOM name to prevent confusion. How they work is if a framework let's you append new objects depending on the parameters you place in your request they get mapped into the application which is a dangerous practice and the only way to prevent an IDOM is to explicitly whitelist object names in the programming logic so if you don't do this you are automatically vulnerable out of the gate. I've found IDOMs in so many big companies web apps especially java MVC based apps. At a recent blackhat conference in 2022 there was a presentation called "Data Binding 2 Shell" where a bunch of researchers have found severe IDOMs in popular java frameworks that led to RCE so the problem is still very much relevant to this day. Think of IDOM as writing to object data and think of IDOR as reading from object data there opposites of each other.
submitted by /u/TheCrazyAcademic
[link] [comments]
Hacking Articles Tips Tricks Videos Tutorials
Photo
hacking: security in practice
Trying to bypass my college firewall(fortinet) but failing.
So we have tried making a wireguard vpn on azure which works completely fine but since azure is too expensive, I got a OVHcloud vps and did the exact same thing but it doesn't work. I cannot connect to the OVH vpn idk why. My friend is the one who setup the server on the vps and I tried connecting to the ssh but then we found out most ports are blocked on my side and seems like 80/443 are from the few that worked. Tried wireguard over 80/443 didn't work. Tried openvpn on tcp mode over 443 didn't work. Tried shadowsocks server over 443 even that didn't friggin work. Oh and all these works fine for my friend over at his home and even for me over mobile data. looking at the logs, the common behaviour seems to be that the server is receiving the handshake but my client side setup cannot receive the handshake back from it therefore connection does not establish or drops right after it establishes. We are basically out of ideas as nothing seems to be working but we know we gotta be doing something wrong as all these methods seems to be used in much more heavy duty bypassing so no way my college can just block all these and the fact that just wireguard alone easily bypasses on azure. Any help would be appreciated.
submitted by /u/XPookachu
[link] [comments]
Trying to bypass my college firewall(fortinet) but failing.
So we have tried making a wireguard vpn on azure which works completely fine but since azure is too expensive, I got a OVHcloud vps and did the exact same thing but it doesn't work. I cannot connect to the OVH vpn idk why. My friend is the one who setup the server on the vps and I tried connecting to the ssh but then we found out most ports are blocked on my side and seems like 80/443 are from the few that worked. Tried wireguard over 80/443 didn't work. Tried openvpn on tcp mode over 443 didn't work. Tried shadowsocks server over 443 even that didn't friggin work. Oh and all these works fine for my friend over at his home and even for me over mobile data. looking at the logs, the common behaviour seems to be that the server is receiving the handshake but my client side setup cannot receive the handshake back from it therefore connection does not establish or drops right after it establishes. We are basically out of ideas as nothing seems to be working but we know we gotta be doing something wrong as all these methods seems to be used in much more heavy duty bypassing so no way my college can just block all these and the fact that just wireguard alone easily bypasses on azure. Any help would be appreciated.
submitted by /u/XPookachu
[link] [comments]
Hacking Articles Tips Tricks Videos Tutorials
Photo
hacking: security in practice
How does a hacker know when they have cracked your password vault?
The recent news of the theft / loss of password vaults and how a hacker can do a brute force offline attack on a password vault got me thinking.
So hacker tries an incorrect password, does something mathematical fail or come back with the answer "no"?
And when they do attempt the correct password, what result comes back and says "bingo, you're in!"?
submitted by /u/tallmansix
[link] [comments]
How does a hacker know when they have cracked your password vault?
The recent news of the theft / loss of password vaults and how a hacker can do a brute force offline attack on a password vault got me thinking.
So hacker tries an incorrect password, does something mathematical fail or come back with the answer "no"?
And when they do attempt the correct password, what result comes back and says "bingo, you're in!"?
submitted by /u/tallmansix
[link] [comments]
Hacking Articles Tips Tricks Videos Tutorials
Photo
hacking: security in practice
hacking my own mac :\
i forgot my mac's password (macbook air 2017). i have seen the reset and press "s" thing but it doesnt seem to work with me (i restarted my macbook while pressing "s". am i doing anything wrong?). or can i just creat a new user mac user profile? btw i dont have an apple id :\
submitted by /u/Bestsurviviopro
[link] [comments]
hacking my own mac :\
i forgot my mac's password (macbook air 2017). i have seen the reset and press "s" thing but it doesnt seem to work with me (i restarted my macbook while pressing "s". am i doing anything wrong?). or can i just creat a new user mac user profile? btw i dont have an apple id :\
submitted by /u/Bestsurviviopro
[link] [comments]
0xbaDc0dE MEV Bot Hack Analysis
https://medium.com/immunefi/0xbadc0de-mev-bot-hack-analysis-30b9031ff0ba?source=rss------bug_bounty-5
https://medium.com/immunefi/0xbadc0de-mev-bot-hack-analysis-30b9031ff0ba?source=rss------bug_bounty-5
IntroductionContinue reading on Immunefi » (https://medium.com/immunefi/0xbadc0de-mev-bot-hack-analysis-30b9031ff0ba?source=rss------bug_bounty-5)
Dexalot HackenProof Bug Bounty
https://medium.com/dexalot/dexalot-hackenproof-bug-bounty-b85a48ef9637?source=rss------bug_bounty-5
https://medium.com/dexalot/dexalot-hackenproof-bug-bounty-b85a48ef9637?source=rss------bug_bounty-5
Dexalot ek non-custodial, decentralized cryptocurrency exchange hai jisme ek Central Limit Order Book capability hai. Avalanche dwara…Continue reading on Dexalot » (https://medium.com/dexalot/dexalot-hackenproof-bug-bounty-b85a48ef9637?source=rss------bug_bounty-5)
which websites are those breaches for?
https://www.reddit.com/r/redteamsec/comments/10l700y/which_websites_are_those_breaches_for/
<!-- SC_OFF -->MY_2021_09_02_23_28_rz385l.zip/_Files/@gmail part2.txt [Part 3 of 11] DE___2020_04_05___19_43___1Idy2T6VTS.rar/DE___2020_04_05___19_43___1Idy2T6VTS/Forms_List.txt note: found on intelx.io (https://intelx.io/) <!-- SC_ON --> submitted by /u/Odaymard (https://www.reddit.com/user/Odaymard)
[link] (https://www.reddit.com/r/redteamsec/comments/10l700y/which_websites_are_those_breaches_for/) [comments] (https://www.reddit.com/r/redteamsec/comments/10l700y/which_websites_are_those_breaches_for/)
https://www.reddit.com/r/redteamsec/comments/10l700y/which_websites_are_those_breaches_for/
<!-- SC_OFF -->MY_2021_09_02_23_28_rz385l.zip/_Files/@gmail part2.txt [Part 3 of 11] DE___2020_04_05___19_43___1Idy2T6VTS.rar/DE___2020_04_05___19_43___1Idy2T6VTS/Forms_List.txt note: found on intelx.io (https://intelx.io/) <!-- SC_ON --> submitted by /u/Odaymard (https://www.reddit.com/user/Odaymard)
[link] (https://www.reddit.com/r/redteamsec/comments/10l700y/which_websites_are_those_breaches_for/) [comments] (https://www.reddit.com/r/redteamsec/comments/10l700y/which_websites_are_those_breaches_for/)
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Get Ready for a Mindset Reset for Your 2
Hit the subscribe button so we can keep entertaining you.
Continue reading on Medium »
Get Ready for a Mindset Reset for Your 2
Hit the subscribe button so we can keep entertaining you.
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Get 100 Followers in a few hours!! #100FollowersChallenge
https://cdn-images-1.medium.com/max/1280/1*_AnNfjH32GCYF3VgJTb5BQ.jpeg
I will follow everyone who follows me back.
Continue reading on Medium »
Get 100 Followers in a few hours!! #100FollowersChallenge
https://cdn-images-1.medium.com/max/1280/1*_AnNfjH32GCYF3VgJTb5BQ.jpeg
I will follow everyone who follows me back.
Continue reading on Medium »