Hacking Articles Tips Tricks Videos Tutorials
Photo
hacking: security in practice
A friend got hacked. What's the best advice?
So here's a little back story to the hacking. A friend of mine had his email hacked about 5 years ago. They quickly got into his Facebook account and stopped his access by changing the password. They hacker was messaging people as my friend asking for money/saying he was in trouble etc etc. My friend sets up a new account, adds all his old friends spreads the word that he is in fact fine and well and lots of people report the old account, facebook do nothing about it and the old account dissappears probably deactivated because the hacker had not much success. Cut to 5 years later and the account reappears. Updates profile pics, cover photos, adds new friends and tries the same tactics as last time. In spite of lots of people reporting this page again Facebook have still decided to do nothing. The difference this time being my friend has recently been diagnosed with cancer. It's a pretty rare form, he's a young guy and as such has recieved a lot of attention through newspapers, media etc. So when the hacker is messaging people they're even more ready to help him. The hacker has been messaging me and even held a video call with me but didn't show their face obviously. I've been acting as though I know nothing about the hacking in the conversations with the hacker but it seems there's very little to be gained. So my question is what can we do? Facebook aren't supportive in spite of many reports. Is there any way to get them out of the email account and regain control?
submitted by /u/davec553
[link] [comments]
A friend got hacked. What's the best advice?
So here's a little back story to the hacking. A friend of mine had his email hacked about 5 years ago. They quickly got into his Facebook account and stopped his access by changing the password. They hacker was messaging people as my friend asking for money/saying he was in trouble etc etc. My friend sets up a new account, adds all his old friends spreads the word that he is in fact fine and well and lots of people report the old account, facebook do nothing about it and the old account dissappears probably deactivated because the hacker had not much success. Cut to 5 years later and the account reappears. Updates profile pics, cover photos, adds new friends and tries the same tactics as last time. In spite of lots of people reporting this page again Facebook have still decided to do nothing. The difference this time being my friend has recently been diagnosed with cancer. It's a pretty rare form, he's a young guy and as such has recieved a lot of attention through newspapers, media etc. So when the hacker is messaging people they're even more ready to help him. The hacker has been messaging me and even held a video call with me but didn't show their face obviously. I've been acting as though I know nothing about the hacking in the conversations with the hacker but it seems there's very little to be gained. So my question is what can we do? Facebook aren't supportive in spite of many reports. Is there any way to get them out of the email account and regain control?
submitted by /u/davec553
[link] [comments]
Stripe’s Two-Factor Authentication (2FA) Bypass
Hello Everyone,Continue reading on InfoSec Write-ups »
Read more...
Hello Everyone,Continue reading on InfoSec Write-ups »
Read more...
Hacking Articles Tips Tricks Videos Tutorials
Photo
KitPloit - PenTest Tools!
Ator - Authentication Token Obtain and Replace Extender
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiSfXQYf0okK438HwSZLkDzfbu8q8y1qW9uctfIAqwiEyY8s1fIbJW64QDADhW2Jv1RMJY1bjEk8xkOMADc8crGh8ip-HKWlOiCzfr76XX0bXWbLyTU-8WkRrTiFHF99c1qVJRFn3FoNeUfqncbIIVOYtd70FbZRQV4Waf7jEaDkAJ1ZnsTWKeytdR9ng/w640-h404/ator.png The plugin is created to help automated scanning using Burp in the following scenarios:
1. Access/Refresh token
2. Token replacement in XML,JSON body
3. Token replacement in cookies
The above can be achieved using complex macro, session rules or Custom Extender in some scenarios. The rules become tricky and do not work in scenarios where the replacement text is either JSON, XML.
Key advantages:
1. We have also achieved in-memory token replacement to avoid duplicate login requests like in both custom extender, macros/session rules.
2. Easy UX to help obtain data (from response) and replace data (in requests) using regex. This helps achieve complex scenarios where response body is JSON, XML and the request text is also JSON, XML, form data etc.
3. Scan speed - the scan speed increases considerably because there are no extra login requests. There is something called the "Trigger Request" which is the error condition (also includes regex) when the login requests are triggered. The error condition can include (response code = 401 and body contains "Unauthorized request")
The inspiration for the plugin is from ExtendedMacro plugin: https://github.com/FrUh/ExtendedMacro Blogs1. Authentication Token Obtain and Replace (ATOR) Burp Plugin - Part1 - Single step login sequence and single token extraction
2. Authentication Token Obtain and Replace (ATOR) Burp Plugin - Part2 - Multi step login sequence and multiple extraction Getting Started1. Install Java and Maven
2. Clone the repository
3. Run the "mvn clean install" command in cloned repo of where pom.xml is present
4. Take the generated jar with dependencies from the target folder Prerequisites1. Make sure java environment is setup in your machine.
2. Confgure the Burp Suite to listen the Proxy traffic
3. Configure the java environment from extender tab of BURP
For usage with test application (Install this testing application (Tiredful application) from https://github.com/payatu/Tiredful-API) Steps1. Identify the request which provides the error
2. Identify the Error Pattern (details in section below)
3. Obtain the data from the response using regex (see sample regex values)
4. Replace this data on the request (use same regex as step 3 along with the variable name) Error Pattern:Totally there are 4 different ways you can specify the error condition.
1. Status Code: 401, 400
2. Error in Body: give any text from the body content (Example: Access token expired)
3. Error in Header: give any text from header(Example: Unauthorized)
4. Free Form: use this to give multiple condition (st=400 && bd=Access token expired || hd=Unauthorized) Regex with samples1. Use Authorization: Bearer \w* to match Authorization: Bearer AXXFFPPNSUSSUSSNSUSN
2. Use Authorization: Bearer ([\w+_-.]*) to match Authorization: Bearer AXX-F+FPPNS.USSUSSNSUSN Break down into end to end tests1. Finding the Invalid request:
* http://HOST:PORT/api/v1/exams/MQ==/ with invalid Bearer token.
2. Identifying Error Pattern:
* The above request will give you 401, here error condition is Status Code = 401
3. Match regex with request data
* Authorization: Bearer \w* - this regex will match access token which is passed.
4. Replacement - How to replace
* Replace the matched text(step 3 regex) with extracted value (Extraction configuration discussed in below, say varibale name is "token")
* Authorization: Bearer token - extracted token will be replaced. Usage with test applicationIdea : Record the Tiredful application request in BURP, [...]
Ator - Authentication Token Obtain and Replace Extender
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiSfXQYf0okK438HwSZLkDzfbu8q8y1qW9uctfIAqwiEyY8s1fIbJW64QDADhW2Jv1RMJY1bjEk8xkOMADc8crGh8ip-HKWlOiCzfr76XX0bXWbLyTU-8WkRrTiFHF99c1qVJRFn3FoNeUfqncbIIVOYtd70FbZRQV4Waf7jEaDkAJ1ZnsTWKeytdR9ng/w640-h404/ator.png The plugin is created to help automated scanning using Burp in the following scenarios:
1. Access/Refresh token
2. Token replacement in XML,JSON body
3. Token replacement in cookies
The above can be achieved using complex macro, session rules or Custom Extender in some scenarios. The rules become tricky and do not work in scenarios where the replacement text is either JSON, XML.
Key advantages:
1. We have also achieved in-memory token replacement to avoid duplicate login requests like in both custom extender, macros/session rules.
2. Easy UX to help obtain data (from response) and replace data (in requests) using regex. This helps achieve complex scenarios where response body is JSON, XML and the request text is also JSON, XML, form data etc.
3. Scan speed - the scan speed increases considerably because there are no extra login requests. There is something called the "Trigger Request" which is the error condition (also includes regex) when the login requests are triggered. The error condition can include (response code = 401 and body contains "Unauthorized request")
The inspiration for the plugin is from ExtendedMacro plugin: https://github.com/FrUh/ExtendedMacro Blogs1. Authentication Token Obtain and Replace (ATOR) Burp Plugin - Part1 - Single step login sequence and single token extraction
2. Authentication Token Obtain and Replace (ATOR) Burp Plugin - Part2 - Multi step login sequence and multiple extraction Getting Started1. Install Java and Maven
2. Clone the repository
3. Run the "mvn clean install" command in cloned repo of where pom.xml is present
4. Take the generated jar with dependencies from the target folder Prerequisites1. Make sure java environment is setup in your machine.
2. Confgure the Burp Suite to listen the Proxy traffic
3. Configure the java environment from extender tab of BURP
For usage with test application (Install this testing application (Tiredful application) from https://github.com/payatu/Tiredful-API) Steps1. Identify the request which provides the error
2. Identify the Error Pattern (details in section below)
3. Obtain the data from the response using regex (see sample regex values)
4. Replace this data on the request (use same regex as step 3 along with the variable name) Error Pattern:Totally there are 4 different ways you can specify the error condition.
1. Status Code: 401, 400
2. Error in Body: give any text from the body content (Example: Access token expired)
3. Error in Header: give any text from header(Example: Unauthorized)
4. Free Form: use this to give multiple condition (st=400 && bd=Access token expired || hd=Unauthorized) Regex with samples1. Use Authorization: Bearer \w* to match Authorization: Bearer AXXFFPPNSUSSUSSNSUSN
2. Use Authorization: Bearer ([\w+_-.]*) to match Authorization: Bearer AXX-F+FPPNS.USSUSSNSUSN Break down into end to end tests1. Finding the Invalid request:
* http://HOST:PORT/api/v1/exams/MQ==/ with invalid Bearer token.
2. Identifying Error Pattern:
* The above request will give you 401, here error condition is Status Code = 401
3. Match regex with request data
* Authorization: Bearer \w* - this regex will match access token which is passed.
4. Replacement - How to replace
* Replace the matched text(step 3 regex) with extracted value (Extraction configuration discussed in below, say varibale name is "token")
* Authorization: Bearer token - extracted token will be replaced. Usage with test applicationIdea : Record the Tiredful application request in BURP, [...]
Hacking Articles Tips Tricks Videos Tutorials
KitPloit - PenTest Tools! Ator - Authentication Token Obtain and Replace Extender https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiSfXQYf0okK438HwSZLkDzfbu8q8y1qW9uctfIAqwiEyY8s1fIbJW64QDADhW2Jv1RMJY1bjEk8xkOMADc8crGh8ip-HKWlOiCzfr76XX0bXWbLyTU…
configure the ATOR extender, check whether token is replaced by ATOR.
1. Open the testing application in browser which you configured with BURP
* Generate a token from http://HOST:PORT/handle-user-token/
* Send the request http://HOST:PORT/api/v1/exams/MQ==/ by passing Authorization Beaer token(get it from above step)
2. Add the ATOR jar file as a extender in BURP
3. Right Click on the request(/handle-user-token) in Proxy history and send it to Authentication Token Optain and Replace Extender
4. Add the new entry in Extraction configuration by selecting the "access_token" value and give name as "token"(it may be any name) Note: For this application,one request is enough to generate a token.Token can also get generated after multiple requests
5. TRIGGER CONDITION:
* Macro steps will get executed if the condition is matched.
* After execution of steps, replace the incoming request by taking values from "Pattern" and "Replacement Area" if specified.
* For our testing,
* Error condition is 401(Status Code)
* Pattern is "Authorization: Bearer \w*" (Specify the regex Pattern how you want to replace with extraction values)
* Replacement Area is "Authentication: Bearer <name"
* Click on "Add" Button.
6. For this example, one replacement is enough to make the incoming request as valid but you can add mutiple replacement for a single condition.
7. Hit the invalid request from Repeater and check the req/res flows in either FLOW/Logger++
* Invalid Bearer token(http://HOST:PORT/api/v1/exams/MQ==/) from Repeater makes the response as 401.
* Extender will match this condition and start running the recorded steps, extract the "access_token"
* Replace the access token(from step ii) in actual response(from Repeater) and makes this invalid request as valid.
* In the repeater console, you see 200 OK response.
8. Do the Step7 again and check the flow
* This time extender will not invoke the steps because existing token is valid and so it uses that. Built With* SWING - Used to add panel ContributingPlease read CONTRIBUTING.md for details on our code of conduct, and the process for submitting pull requests to us. Versioningv1.0 Authors* **https://github.com/FrUh/ExtendedMacro ** - Initial work
Authors from Synopsys - Ashwath Reddy (@ka3hk) and Manikandan Rajappan (@rmanikdn) LicenseThis software is released by Synopsys under the MIT license. Acknowledgments* https://github.com/FrUh/ExtendedMacro ExtendedMacro was a great start - we have modified the UI to handle more complex scenarios. We have also fixed bugs and improved speed by replacing tokens in memory. Demo VideoATOR v2.0.0:UI Panel was splitted into 4 different configuration. Check out the code from v2 or use the executable from v2/bin.
1. Error Condition - Find the error condition req/res and add trigger condition [Can be statuscode/text in body content/text in header]. Multiple condition can also be added.
2. Obtain Token: Find all the req/res to get the token. It can be single or multiple request (do replacement accordingly)
3. Error Condition Replacement: Mark the trigger condition and also mark the place on request where replacement needs to taken (map the extraction)
4. Preview: Dry run it before configure for scan. Download Ator
1. Open the testing application in browser which you configured with BURP
* Generate a token from http://HOST:PORT/handle-user-token/
* Send the request http://HOST:PORT/api/v1/exams/MQ==/ by passing Authorization Beaer token(get it from above step)
2. Add the ATOR jar file as a extender in BURP
3. Right Click on the request(/handle-user-token) in Proxy history and send it to Authentication Token Optain and Replace Extender
4. Add the new entry in Extraction configuration by selecting the "access_token" value and give name as "token"(it may be any name) Note: For this application,one request is enough to generate a token.Token can also get generated after multiple requests
5. TRIGGER CONDITION:
* Macro steps will get executed if the condition is matched.
* After execution of steps, replace the incoming request by taking values from "Pattern" and "Replacement Area" if specified.
* For our testing,
* Error condition is 401(Status Code)
* Pattern is "Authorization: Bearer \w*" (Specify the regex Pattern how you want to replace with extraction values)
* Replacement Area is "Authentication: Bearer <name"
* Click on "Add" Button.
6. For this example, one replacement is enough to make the incoming request as valid but you can add mutiple replacement for a single condition.
7. Hit the invalid request from Repeater and check the req/res flows in either FLOW/Logger++
* Invalid Bearer token(http://HOST:PORT/api/v1/exams/MQ==/) from Repeater makes the response as 401.
* Extender will match this condition and start running the recorded steps, extract the "access_token"
* Replace the access token(from step ii) in actual response(from Repeater) and makes this invalid request as valid.
* In the repeater console, you see 200 OK response.
8. Do the Step7 again and check the flow
* This time extender will not invoke the steps because existing token is valid and so it uses that. Built With* SWING - Used to add panel ContributingPlease read CONTRIBUTING.md for details on our code of conduct, and the process for submitting pull requests to us. Versioningv1.0 Authors* **https://github.com/FrUh/ExtendedMacro ** - Initial work
Authors from Synopsys - Ashwath Reddy (@ka3hk) and Manikandan Rajappan (@rmanikdn) LicenseThis software is released by Synopsys under the MIT license. Acknowledgments* https://github.com/FrUh/ExtendedMacro ExtendedMacro was a great start - we have modified the UI to handle more complex scenarios. We have also fixed bugs and improved speed by replacing tokens in memory. Demo VideoATOR v2.0.0:UI Panel was splitted into 4 different configuration. Check out the code from v2 or use the executable from v2/bin.
1. Error Condition - Find the error condition req/res and add trigger condition [Can be statuscode/text in body content/text in header]. Multiple condition can also be added.
2. Obtain Token: Find all the req/res to get the token. It can be single or multiple request (do replacement accordingly)
3. Error Condition Replacement: Mark the trigger condition and also mark the place on request where replacement needs to taken (map the extraction)
4. Preview: Dry run it before configure for scan. Download Ator
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
how can someone hack into your phone | Tec-hacks
https://cdn-images-1.medium.com/max/600/0*I_JioiF2eWtp1xeH.jpg
As technology continues to advance and become an integral part of our daily lives, it’s important to be aware of the potential threats to…
Continue reading on Medium »
how can someone hack into your phone | Tec-hacks
https://cdn-images-1.medium.com/max/600/0*I_JioiF2eWtp1xeH.jpg
As technology continues to advance and become an integral part of our daily lives, it’s important to be aware of the potential threats to…
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Cybersecurity Book Bundle
https://cdn-images-1.medium.com/max/1200/1*ywJxResCIgm4me4lRL0GnA.jpeg
Cybersecurity Book Bundle (affiliate)
Continue reading on Medium »
Cybersecurity Book Bundle
https://cdn-images-1.medium.com/max/1200/1*ywJxResCIgm4me4lRL0GnA.jpeg
Cybersecurity Book Bundle (affiliate)
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
An Anatomy of a Quasi-APTs: What does a Typical Quasi-APT Attack Look Like, and How do Attackers…
https://cdn-images-1.medium.com/max/1024/0*jp1kQqaGjyMUALzQ.png
Advanced Persistent Threats (APTs) are a type of cyberattack that targets specific organizations or individuals, often for political or…
Continue reading on Medium »
An Anatomy of a Quasi-APTs: What does a Typical Quasi-APT Attack Look Like, and How do Attackers…
https://cdn-images-1.medium.com/max/1024/0*jp1kQqaGjyMUALzQ.png
Advanced Persistent Threats (APTs) are a type of cyberattack that targets specific organizations or individuals, often for political or…
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
hacking: security in practice
Samsung S22
Hi everyone,
I found a Samsung S22 on a bus stop 1 month ago. I waited to see if the owner will call to give it back but no news.
So I will use it for me. I launch the reinitilization process but the protection via the model lock and the synchronization with gmail adress block me.
Do you know if it is possible and how I can force the reinitilization?
Thanks a lot for your help.
submitted by /u/Boonty88
[link] [comments]
➖ Sent by @TheFeedReaderBot ➖
Samsung S22
Hi everyone,
I found a Samsung S22 on a bus stop 1 month ago. I waited to see if the owner will call to give it back but no news.
So I will use it for me. I launch the reinitilization process but the protection via the model lock and the synchronization with gmail adress block me.
Do you know if it is possible and how I can force the reinitilization?
Thanks a lot for your help.
submitted by /u/Boonty88
[link] [comments]
➖ Sent by @TheFeedReaderBot ➖
Hacking Articles Tips Tricks Videos Tutorials
Photo
hacking: security in practice
Cat Feeder with paw print sensor? yay or nay?
submitted by /u/dindresto
[link] [comments]
➖ Sent by @TheFeedReaderBot ➖
Cat Feeder with paw print sensor? yay or nay?
submitted by /u/dindresto
[link] [comments]
➖ Sent by @TheFeedReaderBot ➖
PENTEST TALES: Smuggling Blind XSS through an Admin Portal’s front door
“The User-Agent is your best friend!”Continue reading on Medium »
Read more...
“The User-Agent is your best friend!”Continue reading on Medium »
Read more...
PayloadsAllTheThings: A Comprehensive Resource for Security Researchers and Bug Bounty Hunters
In today’s digital age, staying vigilant and protecting your online presence from potential cyber threats is crucial.Continue reading on Medium »
Read more...
In today’s digital age, staying vigilant and protecting your online presence from potential cyber threats is crucial.Continue reading on Medium »
Read more...