While hunting for bugs on Main Web Apps, I encounter tons of interesting APIs.Continue reading on Medium » (https://bendtheory.medium.com/finding-and-exploiting-unintended-functionality-in-main-web-app-apis-6eca3ef000af?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
LG Electronics' North American subsidiary server was hacked by a ransomware attack

https://external-preview.redd.it/Y8CcYKA40N8MulXuJDguxwVAgR1cQmMlgBEEE-kG3oo.jpg?width=640&crop=smart&auto=webp&s=9ff7f2e2984e760c1d28ebf8bd1410d2b55c3260 submitted by /u/kimchifriedhard
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
I was screen recording some online classes, which is prohibited to be screen recording. But I have to so that I could make my schedule more flexible. But on the other day, I was caught by them and they let me to delete the video immediately and do not spread. How do they know I was recording?

I was literally caught by them for screen recording and I was terrified and thought my Mac was being hacked. How do they know I was recording? Is there any a way to avoid that? I really need make that recording. My schedule is very tight and that online class is very important to me as well. What should I do?

submitted by /u/FatasticAI
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
A Friend Believes An Ex Is Manipulating Data Against Them

This might be unusual and maybe I'm in the wrong location. Regardless, I would appreciate any guidance you can provide.

A friend of mine has joint custody with an ex whom they are not on friendly terms with. The ex has bragged before about local government entities having laughable security and while not an admission, my friend believes the ex has broken into systems belonging to local government organizations and messed with her accounts on them. The ex works for a tech company, it's unknown if they have used those resources to assist. So far there is only a suspicion.

I'm not intent or willing to do anything illegal, but I am asking is there anything my friend can do to get the organizations to take her claims of possible hacking seriously and investigate their logs and records? Any advice is appreciated.

submitted by /u/StinzorgaKingOfBees
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Dragos discovered a Florida water utility contractor hosting malicious code on their website

submitted by /u/mBGP
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Features or tools required in portable device.

Hi, I am designing a portable device for hackers(like a smartphone). Please suggest the features that are required.

It will be open sourcee.

submitted by /u/Winter_Youth_1740
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
$500 as My First Bounty

https://cdn-images-1.medium.com/max/794/1*kBpQNeMsay9X4wqPb-qoGA.png
Hello Hackers!

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Finding and Exploiting Unintended Functionality in Main Web App APIs

https://cdn-images-1.medium.com/max/631/1*prKbMk2bhZbCM-9RwY-ABQ.png
While hunting for bugs on Main Web Apps, I encounter tons of interesting APIs.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How to hack your ex-girlfriend’s Instagram account

Don’t

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Life’s a Peach (Fuzzer): How to Build and Use GitLab’s Open-Source Protocol Fuzzer

https://cdn-images-1.medium.com/max/2600/1*AyMBV8PMe_1mv0d3Cei9Hw.png
This article aims to demonstrate an end-to-end application of Peach Fuzzer, from build, to deployment, to vulnerability discovery.

Continue reading on CSG @ GovTech »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Who’s in your Facebook and Instagram accounts?

https://cdn-images-1.medium.com/max/2600/0*PNSVxX7rJ4GB3_rP
What to do if you receive a notification about a suspicious login to your Facebook or Instagram account.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Black Hat Ethical Hacking
Windows PoC Exploit Released for Wormable RCE

https://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Windows PoC Exploit Released for Wormable RCEPost Views: 127
Reading Time: 1 Minute
A researcher has released a proof-of-concept (PoC) exploit for CVE-2021-31166, a use-after-free, highly critical vulnerability in the HTTP protocol stack (http.sys) that could lead to wormable remote code execution (RCE).
Microsoft discovered the flaw internally, releasing a patch in its May 11 Patch Tuesday update. This was the most severe bug in that batch: an http.sysissue that requires neither user authentication nor user interaction to exploit. An exploit would allow RCE with kernel privileges or a denial-of-service (DoS) attack.

According to a tweet from Microsoft’s Justin Campbell, the vulnerability was found by @_mxms and @fzzyhd1.
Fortunately this http.sys bug was an internal find by our team. This one thanks to @_mxms, @fzzyhd1 and everyone who contributes to our tooling and automation. https://t.co/0ru9BQMaJ9

— Justin Campbell (@metr0) May 13, 2021
See Also: Microsoft, Google Clouds Hijacked for Gobs of Phishing http.sysenables Windows and applications to communicate with other devices; it can be run standalone or in conjunction with Internet Information Services (IIS). Microsoft Advises Priority Patching“In most situations, an unauthenticated attacker could send a specially crafted packet to a targeted server utilizing the HTTP Protocol Stack (http.sys) to process packets,” Microsoft explained in its advisory. Given that the vulnerability is wormable, Microsoft recommends prioritizing the patching of affected servers.

“With a CVSS score of 9.8, the vulnerability announced has the potential to be both directly impactful and is also exceptionally simple to exploit, leading to a remote and unauthenticated denial-of-service (Blue Screen of Death) for affected products,” McAfee’s Steve Povolny said in an analysis of the flaw at the time.

Povolny explained that the problem lies in how Windows improperly tracks pointers while processing objects in network packets containing HTTP requests. The vulnerability only affects the latest versions of Windows 10 and Windows Server, meaning that the exposure for internet-facing enterprise servers is “fairly limited,” he said. That’s because many of these systems run Long Term Servicing Channel (LTSC) versions, such as Windows Server 2016 and 2019, which aren’t susceptible to this flaw. Public Exploit for Wormable Security BugResearcher Axel Souchet, who used to work for Microsoft, published the PoC to GitHub, noting that the bug happens in http!UlpParseContentCoding, where the function has a local LIST_ENTRYand appends an item to it. “When it’s done, it moves it into the Request structure; but it doesn’t NULLout the local list,” he explained. “The issue with that is that an attacker can trigger a code path that frees every [entry] of the local list, leaving them dangling in the Request object.”
See Also: Offensive Security Tool: EyeWitness This isn’t the first PoC exploit for CVE-2021-31166 that Souchet has released, but this is the first wormable one. Over the weekend, he released a PoC that only locked the impacted Windows system as long as it’s running an IIS server. That initial exploit shows how an attacker can leverage the flaw to cause DoS on a targeted system by sending it specially crafted packets.
I've built a PoC for CVE-2021-31166 the "HTTP Protocol Stack Remote Code Execution Vulnerability": https://t.co/8mqLCByvCp https://s.w.org/images/core/emoji/13.0.1/72x72/1[...]

___________________________
@hacking_Attack
@Hacking_Video