hacking: security in practice
Hacking Android Devices over internet Without APKs or Social Engineering

https://external-preview.redd.it/9zkpDRRTj9b3ZfTwvw8BivmMqBucd_XKhaJOGnYW2CM.jpg?width=320&crop=smart&auto=webp&s=034c68400272273b6a187acc7ad8b0580d747599 submitted by /u/I_AM_MORBIUS
[link] [comments]

Open Redirect Vulnerability: A Potential Threat to User Security

A Bug Bounty Report on the Risks of Unvalidated URL Redirections in Websites and ApplicationsContinue reading on System Weakness »
Read more...

Dark Reading: Attacks/Breaches
Post-Quantum Satellite Protection Rockets Towards Reality

A successful multi-orbit cryptography test beamed quantum-agile data up to two different satellites and back down to Earth.

Kali Linux Tutorials
FindUncommonShares A Python Equivalent Of PowerView’s Invoke-ShareFinder.ps1 Allowing To Quickly Find Uncommon Shares In Vast Windows Domains

FindUncommonShares.py is a Python equivalent of PowerView’s Invoke-ShareFinder.ps1 allowing to quickly find uncommon shares in vast Windows Domains. Features* Only requires a low privileges domain user account.
* Automatically gets the list of all computers from the domain controller’s LDAP.
* Ignore the hidden shares (ending with $) with --ignore-hidden-shares.
* Multithreaded connections to discover SMB shares.
* Export results in JSON with IP, name, comment, flags and UNC path with --export-json <file.json.
* Export results in XLSX with IP, name, comment, flags and UNC path with --export-xlsx <file.xlsx.
* Export results in SQLITE3 with IP, name, comment, flags and UNC path with --export-sqlite <file.db.
* Iterate on LDAP result pages to get every computer of the domain, no matter the size. Usage$ ./FindUncommonShares.py -h
FindUncommonShares v2.5 - by @podalirius_

usage: FindUncommonShares.py [-h] [--use-ldaps] [-q] [--debug] [-no-colors] [-I] [-t THREADS] [--export-xlsx EXPORT_XLSX] [--export-json EXPORT_JSON] [--export-sqlite EXPORT_SQLITE] --dc-ip ip address [-d DOMAIN] [-u USER] [--no-pass | -p PASSWORD | -H [LMHASH:]NTHASH | --aes-key hex key] [-k]

Find uncommon SMB shares on remote machines.

optional arguments:
-h, --help show this help message and exit
--use-ldaps Use LDAPS instead of LDAP
-q, --quiet Show no information at all.
--debug Debug mode.
-no-colors Disables colored output mode
-I, --ignore-hidden-shares
Ignores hidden shares (shares ending with $)
-t THREADS, --threads THREADS
Number of threads (default: 20)

Output files:
--export-xlsx EXPORT_XLSX
Output XLSX file to store the results in.
--export-json EXPORT_JSON
Output JSON file to store the results in.
--export-sqlite EXPORT_SQLITE
Output SQLITE3 file to store the results in.

Authentication & connection:
--dc-ip ip address IP Address of the domain controller or KDC (Key Distribution Center) for Kerberos. If omitted it will use the domain part (FQDN) specified in the identity parameter
-d DOMAIN, --domain DOMAIN
(FQDN) domain to authenticate to
-u USER, --user USER user to authenticate with

Credentials:
--no-pass Don't ask for password (useful for -k)
-p PASSWORD, --password PASSWORD
Password to authenticate with
-H [LMHASH:]NTHASH, --hashes [LMHASH:]NTHASH
NT/LM hashes, format is LMhash:NThash
--aes-key hex key AES key to use for Kerberos Authentication (128 or 256 bits)
-k, --kerberos Use Kerberos authentication. Grabs credentials from .ccache file (KRB5CCNAME) based on target parameters. If valid credentials cannot be found, it will use the ones specified in the command line Examples :$ ./FindUncommonShares.py -u 'user1' -d 'LAB.local' -p 'P@ssw0rd!' --dc-ip 192.168.2.1
FindUncommonShares v2.5 - by @podalirius_

[>] Extracting all computers ...
[+] Found 2 computers.

[>] Enumerating shares ...
[>] Found 'Users' on 'DC01.LAB.local'
[>] Found 'WeirdShare' on 'DC01.LAB.local' (comment: 'Test comment')
[>] Found 'AnotherShare' on 'PC01.LAB.local'
[>] Found 'Users' on 'PC01.LAB.local
$ Each JSON entry looks like this:
{
"computer": {
"fqdn": "DC01.LAB.local",
"ip": "192.168.1.1"
}, "share": {
"name": "ADMIN$",
"comment": "Remote Admin",
"hidden": true,
"uncpath": "\\\\192.168.1.46\\ADMIN$\\",
"type": {
"stype_value": 2147483648,
"stype_flags": [
"STYPE_DISKTREE",
"STYPE_TEMPORARY"
]
}
}
} Click Here To Download

Kali Linux Tutorials
GPT_Vuln-analyzer : Uses ChatGPT API And Python-Nmap Module To Use The GPT3 Model To Create Vulnerability Reports Based On Nmap Scan Data

GPT_Vuln-analyzer uses ChatGPT API and Python-Nmap module to use the GPT3 model to create vulnerability reports based on Nmap scan data.

This is a Proof Of Concept application that demostrates how AI can be used to generate accurate results for vulnerability analysis and also allows further utilization of the already super useful ChatGPT.



Requirements

* Python 3.10
* All the packages mentioned in the requirements.txt file
* OpenAi api



Usage

* First Change the “API__KEY” part of the code with OpenAI api key
openai.api_key = "__API__KEY" # Enter your API key
* second install the packages
pip3 install -r requirements.txt
or
pip install -r requirements.txt
* run the code python3 gpt_vuln.py or if windows run python gpt_vuln.py

Supported in both windows and linux



Understanding the code

Profiles:
ParameterReturn dataDescriptionNmap Commandp1jsonEffective Scan-Pn -sV -T4 -O -Fp2jsonSimple Scan-Pn -T4 -A -vp3jsonLow Power Scan-Pn -sS -sU -T4 -A -vp4jsonPartial Intense Scan-Pn -p- -T4 -A -vp5jsonComplete Intense Scan-Pn -sS -sU -T4 -A -PE -PP -PS80,443 -PA3389 -PU40125 -PY -g 53 --script=vuln
The profile is the type of scan that will be executed by the nmap subprocess. The Ip or target will be provided via argparse. At first the custom nmap scan is run which has all the curcial arguments for the scan to continue. nextly the scan data is extracted from the huge pile of data which has been driven by nmap. the “scan” object has a list of sub data under “tcp” each labled according to the ports opened. once the data is extracted the data is sent to openai API davenci model via a prompt. the prompt specifically asks for an JSON output and the data also to be used in a certain manner.

The entire structure of request that has to be sent to the openai API is designed in the completion section of the Program.
def profile(ip):
nm.scan('{}'.format(ip), arguments='-Pn -sS -sU -T4 -A -PE -PP -PS80,443 -PA3389 -PU40125 -PY -g 53 --script=vuln')
json_data = nm.analyse_nmap_xml_scan()
analize = json_data["scan"]
# Prompt about what the quary is all about
prompt = "do a vulnerability analysis of {} and return a vulnerabilty report in json".format(analize)
# A structure for the request
completion = openai.Completion.create(
engine=model_engine,
prompt=prompt,
max_tokens=1024,
n=1,
stop=None,
)
response = completion.choices[0].text
return response


Advantages

* Can be used in developing a more advanced systems completly made of the API and scanner combination
* Can increase the effectiveness of the final system
* Highly productive when working with models such as GPT3
Click Here To Download

Hacking on Medium
Bypassing Multiple CSRF-Tokens

https://cdn-images-1.medium.com/max/1076/1*f1sPXftZbDwbXncSRVWZyw.png
As a programmer, I have always been fascinated by the world of hacking and cybersecurity. In particular, I have spent countless hours…

Continue reading on Medium »

Hacking on Medium
How To Find Hidden Directories In Web Pages.

https://cdn-images-1.medium.com/max/1280/1*MgWPn2SSQLfT1voWdYn5vw.png
What is Gobuster ?

Continue reading on Medium »

Hacking on Medium
7 Things To Do To Keep Your Account Safe Even After Compromised Credentials

https://cdn-images-1.medium.com/max/2000/0*6TBXx-NImui3ouvF.jpeg
Account Compromise Is Extremely Common In Recent Times. In This Article, I Explore How To Keep Accounts Away From Fraudsters’ Hands Even…

Continue reading on Medium »

Hacking on Medium
picoCTF writeup: Introductory web application injections

https://cdn-images-1.medium.com/max/969/1*XRAP3UxI5eSMykpE55SrTg.png
In this article, I will be discussing XXE injection and SQL injection attacks that I did for picoCTF 2023

Continue reading on InfoSec Write-ups »

Hacking on Medium
Hack The Box Horizontall Writeup

https://cdn-images-1.medium.com/max/1942/0*oaA_G47TxefiVl2F.png
Horizontall is an easy Linux box created by wall99 on Hack The Box and was released on the 28th Aug 2021. Hello world, welcome to haxez…

Continue reading on Medium »

Role of AI in Cybersecurity
https://medium.com/@nimmughal799/role-of-ai-in-cybersecurity-15d87e53c97?source=rss------bug_bounty-5

As technology continues to advance, so too do the methods by which cybercriminals seek to exploit vulnerabilities in our digital…Continue reading on Medium » (https://medium.com/@nimmughal799/role-of-ai-in-cybersecurity-15d87e53c97?source=rss------bug_bounty-5)

hacking: security in practice
Anyone remember the drive by virus from like 10-15 years ago that requested money from you or the FBI was breaking down your door after the time limit? 🤣

Funniest shit ever, friend of mine brought it up. Happened to them, still has the picture he took when his laptop cam took his picture! Man looked like a deer in headlights.

submitted by /u/TKOx13
[link] [comments]