Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
How to Kick People Out of a WI-FI Network
https://cdn-images-1.medium.com/max/640/1*vPYR6ARX13Lz2a6gyKjb2Q.png
Disclaimer: This article is for educational purposes and seeks to promote ethical hacking and superior cybersecurity practices in…
Continue reading on Medium »
How to Kick People Out of a WI-FI Network
https://cdn-images-1.medium.com/max/640/1*vPYR6ARX13Lz2a6gyKjb2Q.png
Disclaimer: This article is for educational purposes and seeks to promote ethical hacking and superior cybersecurity practices in…
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
10 Essential Tips for Writing Secure C++ Code: Best Practices and Safer Alternatives
https://cdn-images-1.medium.com/max/2240/1*6cFUTYsrnWz1aUYyOzJTVw.png
C++ is a powerful programming language that has been in use for many years, but it’s not without its risks. Writing secure C++ code is…
Continue reading on Medium »
10 Essential Tips for Writing Secure C++ Code: Best Practices and Safer Alternatives
https://cdn-images-1.medium.com/max/2240/1*6cFUTYsrnWz1aUYyOzJTVw.png
C++ is a powerful programming language that has been in use for many years, but it’s not without its risks. Writing secure C++ code is…
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
10 Effective Tips for Strengthening Security in Fedora Linux
https://cdn-images-1.medium.com/max/2560/1*2Z0kk9gJJFkjNYBsHBfj3Q.png
Fedora Linux is a popular operating system that offers robust security features to protect users’ systems from threats. However, there are…
Continue reading on Medium »
10 Effective Tips for Strengthening Security in Fedora Linux
https://cdn-images-1.medium.com/max/2560/1*2Z0kk9gJJFkjNYBsHBfj3Q.png
Fedora Linux is a popular operating system that offers robust security features to protect users’ systems from threats. However, there are…
Continue reading on Medium »
hacking: security in practice
OSCP priv esc suggestions?
So I've currently failed the OSCP twice. Both times are due to priv esc issues sucking up most of the time.
In my last two attempts I've had initial access to boxes within 30 mins. I just immediately get stuck of priv esc because of the sheer amount of bloat.
I rely a little too much on automated tools honestly. Got any advice to get better at this skill?
submitted by /u/thehunter699
[link] [comments]
OSCP priv esc suggestions?
So I've currently failed the OSCP twice. Both times are due to priv esc issues sucking up most of the time.
In my last two attempts I've had initial access to boxes within 30 mins. I just immediately get stuck of priv esc because of the sheer amount of bloat.
I rely a little too much on automated tools honestly. Got any advice to get better at this skill?
submitted by /u/thehunter699
[link] [comments]
Reddit
r/hacking on Reddit: OSCP priv esc suggestions?
Posted by u/thehunter699 - No votes and no comments
hacking: security in practice
MFP Breach dumps?
Hey all
Don't suppose anyone has seen where to find the MyFitnessPal breach dump?
Have had a wander around some of the usual places.. Telegram etc. No luck.
Thanks :)
submitted by /u/MightBeMouse
[link] [comments]
MFP Breach dumps?
Hey all
Don't suppose anyone has seen where to find the MyFitnessPal breach dump?
Have had a wander around some of the usual places.. Telegram etc. No luck.
Thanks :)
submitted by /u/MightBeMouse
[link] [comments]
Reddit
r/hacking on Reddit: MFP Breach dumps?
Posted by u/MightBeMouse - No votes and no comments
hacking: security in practice
Asking for advice.
For roughly 4 months or so, there has been a person in my college making duplicate instagram accounts of professors and students that have prominent presences there to ruin their reputations, reputation is important in my part of the world. This person is now impersonating a third person, a student which is also my friend. Usually the police would take care of this but it has been several months with no development and i am setting out to collect evidence, find out this persons identity to report it to the authorities and this only.
i am not asking for help, i am just asking for advice on how to approach this situation as this is not within my domain of knowledge or experience. If anyone can tell me about any tools i could use, methods i could approach, courses of action or absolutely anything i would greatly appreciate it.
Edit - they are now sending phishing links to extract money somehow
submitted by /u/hawkyonreddit
[link] [comments]
Asking for advice.
For roughly 4 months or so, there has been a person in my college making duplicate instagram accounts of professors and students that have prominent presences there to ruin their reputations, reputation is important in my part of the world. This person is now impersonating a third person, a student which is also my friend. Usually the police would take care of this but it has been several months with no development and i am setting out to collect evidence, find out this persons identity to report it to the authorities and this only.
i am not asking for help, i am just asking for advice on how to approach this situation as this is not within my domain of knowledge or experience. If anyone can tell me about any tools i could use, methods i could approach, courses of action or absolutely anything i would greatly appreciate it.
Edit - they are now sending phishing links to extract money somehow
submitted by /u/hawkyonreddit
[link] [comments]
Reddit
r/hacking on Reddit: Asking for advice.
Posted by u/hawkyonreddit - No votes and no comments
Hacking Articles Tips Tricks Videos Tutorials
Photo
hacking: security in practice
Days After Missed Ransomware Deadline, Stolen MN Schools’ Files Appear Online
https://external-preview.redd.it/rL_1FmLUh6VguHHyWOLwWcDKbHziblhcBwqCvrkLF_w.jpg?width=640&crop=smart&auto=webp&s=d987d688c85941fa02fe8cad4eee70f07eb12e45 submitted by /u/mkerbs942
[link] [comments]
Days After Missed Ransomware Deadline, Stolen MN Schools’ Files Appear Online
https://external-preview.redd.it/rL_1FmLUh6VguHHyWOLwWcDKbHziblhcBwqCvrkLF_w.jpg?width=640&crop=smart&auto=webp&s=d987d688c85941fa02fe8cad4eee70f07eb12e45 submitted by /u/mkerbs942
[link] [comments]
APCLdr - Payload Loader With Evasion Features
Payload Loader With Evasion Features. Features: no crt functions imported indirect syscalls using HellHall api hashing using CRC32 hashing algorithm payload encryption using rc4 - payload is saved in .rsrc Payload injection using APC calls - alertable thread Payload execution using APC - alertable thread Execution delation using MsgWaitForMultipleObjects - edit this the total size is 8kb + the payload size compatible with LLVM (clang-cl) Option Usage: Use Builder to update the PayloadFile.pf file, that'll be the encrypted payload to be saved in the .rsrc section of the loader Compile as x64 Release Debugging: Change Linker>SubSystem from /SUBSYSTEM:WINDOWS to /SUBSYSTEM:CONSOLE Set the loader in debug mode (uncomment this) build as release as well Thanks For: https://www.x86matthew.com/view_post?id=writeprocessmemory_apc https://github.com/vxunderground/VX-API Tested with cobalt strike && Havoc on windows 10 Download APCLdr
Read more...
Payload Loader With Evasion Features. Features: no crt functions imported indirect syscalls using HellHall api hashing using CRC32 hashing algorithm payload encryption using rc4 - payload is saved in .rsrc Payload injection using APC calls - alertable thread Payload execution using APC - alertable thread Execution delation using MsgWaitForMultipleObjects - edit this the total size is 8kb + the payload size compatible with LLVM (clang-cl) Option Usage: Use Builder to update the PayloadFile.pf file, that'll be the encrypted payload to be saved in the .rsrc section of the loader Compile as x64 Release Debugging: Change Linker>SubSystem from /SUBSYSTEM:WINDOWS to /SUBSYSTEM:CONSOLE Set the loader in debug mode (uncomment this) build as release as well Thanks For: https://www.x86matthew.com/view_post?id=writeprocessmemory_apc https://github.com/vxunderground/VX-API Tested with cobalt strike && Havoc on windows 10 Download APCLdr
Read more...
Hacking Articles Tips Tricks Videos Tutorials
Photo
Black Hat Ethical Hacking
Offensive Security Tool: OpenRediWrecked
Offensive Security Tool: OpenRediWreckedPost Views: 2 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/12/Patreon.png Subscribe to Patreon to watch this episode.
Reading Time: 3 Minutes DescriptionOpenRediWrecked is written by Chris “SaintDruG” Abou-Chabke from Black Hat Ethical Hacking and it’s designed to help security professionals, Red Teams, Pentesters and Bug Bounty Hunters to detect and exploit open redirect vulnerabilities. It leverages the power of sed, a stream editor, to clean and modify the parameters in the URL, allowing for precise and accurate payload injection. The payloads have been carefully selected and crafted to include encoding techniques that increase the chances of bypassing filters and exploiting the vulnerabilities. The tool provides a simple, easy-to-read, and color-coded output that summarizes the results, highlighting only the vulnerable URLs. The results can be saved for further analysis and reporting purposes. With its advanced logic and efficient payload injection mechanism, this tool is an indispensable asset for anyone who wants to enhance their open redirect testing capabilities.
See Also: So you want to be a hacker? Offensive Security Courses FeaturesThis tool uses a simple and intuitive flow, making it easy to understand how it works. Here are four key features of OpenRediWrecked.sh:
* Automated payload injection: The tool automates the process of injecting a selection of real-world aimed payloads into the targeted URL, increasing the chances of detecting an open redirect vulnerability.
* Parameters cleaning: The tool uses sed to clean parameters and inject payloads correctly, providing accurate results.
* Encoding Support: The tool supports various encoding techniques, increasing the chances of bypassing filters and triggering the open redirect vulnerability.
* Easy-to-read results: The tool presents the results in a clear and easy-to-read format, including color coding to quickly identify vulnerable URLs. It also saves only the results for vulnerable URLs, making it easier to prioritize remediation efforts.
Trending: Offensive Security Tool: Bypass Url Parser
Trending: Digital Forensics Tool: Email Analyzer Requirements* SED
* GREP
* CURL
* lolcat
* Figlet
To install these tools, you can use the following commands:
For SED: sudo apt-get install sed
For GREP: sudo apt-get install grep
For CURL: sudo apt-get install curl
For lolcat: pip install lolcat
For Figlet: sudo apt-get install -y figlet Installation
* Enter one or multiple URLs, separated by space or new line.
* Download openredirect_payloads.txt file and perform testing against the provided URL(s).
The results will be displayed in the terminal, color-coded for easy identification of vulnerable URLs. The vulnerable URLs will be saved in a file vulnerable_urls.txt in the same folder as the script.
See Also: Write up: How Misconfigurations in Linux can leave you vulnerable to Attackers ScreenshotMain Menuhttps://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/218172516-f88473cd-e9bd-472e-8541-1b2e9c3f91e6-1024x492.png CompatibilityThis tool has been tested on Kali Linux, Ubuntu and MacOS. DisclaimerThis tool is provided for educational and research purposes only. The author of this project is no way responsible for any misuse of this tool. We use it to test under NDA agreements with clients and their consents for pentesting purposes and we never[...]
Offensive Security Tool: OpenRediWrecked
Offensive Security Tool: OpenRediWreckedPost Views: 2 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/12/Patreon.png Subscribe to Patreon to watch this episode.
Reading Time: 3 Minutes DescriptionOpenRediWrecked is written by Chris “SaintDruG” Abou-Chabke from Black Hat Ethical Hacking and it’s designed to help security professionals, Red Teams, Pentesters and Bug Bounty Hunters to detect and exploit open redirect vulnerabilities. It leverages the power of sed, a stream editor, to clean and modify the parameters in the URL, allowing for precise and accurate payload injection. The payloads have been carefully selected and crafted to include encoding techniques that increase the chances of bypassing filters and exploiting the vulnerabilities. The tool provides a simple, easy-to-read, and color-coded output that summarizes the results, highlighting only the vulnerable URLs. The results can be saved for further analysis and reporting purposes. With its advanced logic and efficient payload injection mechanism, this tool is an indispensable asset for anyone who wants to enhance their open redirect testing capabilities.
See Also: So you want to be a hacker? Offensive Security Courses FeaturesThis tool uses a simple and intuitive flow, making it easy to understand how it works. Here are four key features of OpenRediWrecked.sh:
* Automated payload injection: The tool automates the process of injecting a selection of real-world aimed payloads into the targeted URL, increasing the chances of detecting an open redirect vulnerability.
* Parameters cleaning: The tool uses sed to clean parameters and inject payloads correctly, providing accurate results.
* Encoding Support: The tool supports various encoding techniques, increasing the chances of bypassing filters and triggering the open redirect vulnerability.
* Easy-to-read results: The tool presents the results in a clear and easy-to-read format, including color coding to quickly identify vulnerable URLs. It also saves only the results for vulnerable URLs, making it easier to prioritize remediation efforts.
Trending: Offensive Security Tool: Bypass Url Parser
Trending: Digital Forensics Tool: Email Analyzer Requirements* SED
* GREP
* CURL
* lolcat
* Figlet
To install these tools, you can use the following commands:
For SED: sudo apt-get install sed
For GREP: sudo apt-get install grep
For CURL: sudo apt-get install curl
For lolcat: pip install lolcat
For Figlet: sudo apt-get install -y figlet Installation
git clone https://github.com/blackhatethicalhacking/OpenRediWrecked.gitcd OpenRediWreckedchmod +x OpenRediWrecked.sh./OpenRediWrecked.sh* The script will prompt you to provide the target URL(s) to test for open redirect vulnerabilities.* Enter one or multiple URLs, separated by space or new line.
* Download openredirect_payloads.txt file and perform testing against the provided URL(s).
The results will be displayed in the terminal, color-coded for easy identification of vulnerable URLs. The vulnerable URLs will be saved in a file vulnerable_urls.txt in the same folder as the script.
See Also: Write up: How Misconfigurations in Linux can leave you vulnerable to Attackers ScreenshotMain Menuhttps://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/218172516-f88473cd-e9bd-472e-8541-1b2e9c3f91e6-1024x492.png CompatibilityThis tool has been tested on Kali Linux, Ubuntu and MacOS. DisclaimerThis tool is provided for educational and research purposes only. The author of this project is no way responsible for any misuse of this tool. We use it to test under NDA agreements with clients and their consents for pentesting purposes and we never[...]
Hacking Articles Tips Tricks Videos Tutorials
Photo
Black Hat Ethical Hacking
Pwn2Own Vancouver 2023: Zero-Day Exploits Revealed for Tesla Model 3, Windows 11, and macOS
Pwn2Own Vancouver 2023: Zero-Day Exploits Revealed for Tesla Model 3, Windows 11, and macOSPost Views: 56 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/12/Patreon.png Subscribe to Patreon to watch this episode.
Reading Time: 3 Minutes Synacktiv Strikes Gold with Tesla TOCTOU Attack and macOS Privilege EscalationAt Pwn2Own Vancouver 2023, security researchers brought their A-game, demonstrating zero-day exploits and exploit chains for some of the most popular products in enterprise applications, enterprise communications, local escalation of privilege (EoP), server, virtualization, and automotive categories. The event took place between March 22 and March 24, with contestants vying for $1,080,000 in cash and prizes, including a Tesla Model 3 car.
The first day of the contest saw Adobe Reader fall victim to a six-bug logic chain exploit chain that allowed Abdul Aziz Hariri of Haboob SA to bypass a banned API list on macOS and earn $50,000. STAR Labs targeted Microsoft’s SharePoint team collaboration platform with their zero-day exploit chain and won $100,000. They also successfully hacked Ubuntu Desktop with a previously known exploit, earning $15,000. Synacktiv won $100,000 and a Tesla Model 3 after successfully executing a TOCTOU attack against the Tesla Gateway in the Automotive category. They also managed to escalate privileges on Apple macOS and earned $40,000.
That wraps up the first day of #P2OVancouver 2023! We awarded $375,000 (and a Tesla Model 3!) for 12 zero-days during the first day of the contest. Stay tuned for day two of the contest tomorrow! #Pwn2Own pic.twitter.com/UTvzqxmi8E
— Zero Day Initiative (@thezdi) March 22, 2023
See Also: So you want to be a hacker? Offensive Security, Bug Bounty Courses Qrious Security Cracks Oracle VirtualBox with OOB Read and Buffer OverflowQrious Security’s Bien Pham also had his day at the event, hacking Oracle VirtualBox using an OOB Read and a stacked-based buffer overflow exploit chain, which earned him $40,000. Marcin Wiązowski hacked Windows 11 using an improper input validation zero-day, which came with a $30,000 prize.
The second day of the contest targeted Microsoft Teams, Oracle VirtualBox, the Tesla Model 3 Infotainment Unconfined Root, and Ubuntu Desktop. On the final day of the event, researchers attempted to hack Microsoft Teams, Windows 11, VMware Workstation, and Ubuntu Desktop.
Trending: A primer on OS Command Injection Attacks Trending: Offensive Security Tool: Bypass Url Parser Contestants Aim to Apple Safari, Mozilla, VirtualBox, and moreAfter the event, vendors have 90 days to create and release security fixes for all reported flaws before Trend Micro’s Zero Day Initiative publicly discloses them. Last year’s Vancouver Pwn2Own contest saw security researchers earn $1,155,000 after hacking Windows 11 six times, Ubuntu Desktop four times, and successfully demonstrating three Microsoft Teams zero-days. They also reported several zero-days in Apple Safari, Oracle Virtualbox, and Mozilla Firefox, and hacked the Tesla Model 3 Infotainment System. With Pwn2Own Vancouver 2023 raising the stakes even higher, the security community eagerly awaits next year’s event.
Trending: Kali Linux 2023.1 – Adds Kali Purple for defensive security, python updates, new tools Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?
If you want to express your idea in an article cont[...]
Pwn2Own Vancouver 2023: Zero-Day Exploits Revealed for Tesla Model 3, Windows 11, and macOS
Pwn2Own Vancouver 2023: Zero-Day Exploits Revealed for Tesla Model 3, Windows 11, and macOSPost Views: 56 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/12/Patreon.png Subscribe to Patreon to watch this episode.
Reading Time: 3 Minutes Synacktiv Strikes Gold with Tesla TOCTOU Attack and macOS Privilege EscalationAt Pwn2Own Vancouver 2023, security researchers brought their A-game, demonstrating zero-day exploits and exploit chains for some of the most popular products in enterprise applications, enterprise communications, local escalation of privilege (EoP), server, virtualization, and automotive categories. The event took place between March 22 and March 24, with contestants vying for $1,080,000 in cash and prizes, including a Tesla Model 3 car.
The first day of the contest saw Adobe Reader fall victim to a six-bug logic chain exploit chain that allowed Abdul Aziz Hariri of Haboob SA to bypass a banned API list on macOS and earn $50,000. STAR Labs targeted Microsoft’s SharePoint team collaboration platform with their zero-day exploit chain and won $100,000. They also successfully hacked Ubuntu Desktop with a previously known exploit, earning $15,000. Synacktiv won $100,000 and a Tesla Model 3 after successfully executing a TOCTOU attack against the Tesla Gateway in the Automotive category. They also managed to escalate privileges on Apple macOS and earned $40,000.
That wraps up the first day of #P2OVancouver 2023! We awarded $375,000 (and a Tesla Model 3!) for 12 zero-days during the first day of the contest. Stay tuned for day two of the contest tomorrow! #Pwn2Own pic.twitter.com/UTvzqxmi8E
— Zero Day Initiative (@thezdi) March 22, 2023
See Also: So you want to be a hacker? Offensive Security, Bug Bounty Courses Qrious Security Cracks Oracle VirtualBox with OOB Read and Buffer OverflowQrious Security’s Bien Pham also had his day at the event, hacking Oracle VirtualBox using an OOB Read and a stacked-based buffer overflow exploit chain, which earned him $40,000. Marcin Wiązowski hacked Windows 11 using an improper input validation zero-day, which came with a $30,000 prize.
The second day of the contest targeted Microsoft Teams, Oracle VirtualBox, the Tesla Model 3 Infotainment Unconfined Root, and Ubuntu Desktop. On the final day of the event, researchers attempted to hack Microsoft Teams, Windows 11, VMware Workstation, and Ubuntu Desktop.
Trending: A primer on OS Command Injection Attacks Trending: Offensive Security Tool: Bypass Url Parser Contestants Aim to Apple Safari, Mozilla, VirtualBox, and moreAfter the event, vendors have 90 days to create and release security fixes for all reported flaws before Trend Micro’s Zero Day Initiative publicly discloses them. Last year’s Vancouver Pwn2Own contest saw security researchers earn $1,155,000 after hacking Windows 11 six times, Ubuntu Desktop four times, and successfully demonstrating three Microsoft Teams zero-days. They also reported several zero-days in Apple Safari, Oracle Virtualbox, and Mozilla Firefox, and hacked the Tesla Model 3 Infotainment System. With Pwn2Own Vancouver 2023 raising the stakes even higher, the security community eagerly awaits next year’s event.
Trending: Kali Linux 2023.1 – Adds Kali Purple for defensive security, python updates, new tools Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?
If you want to express your idea in an article cont[...]