Web Cache Poisoning: A Tale of chaining unkeyed inputs

Hello fellow hunters, i hope you all are doing good and learning new things daily :) . I am writing today about a lab/mission i solved by…Continue reading on InfoSec Write-ups »
Read more...

Python Issue
https://www.reddit.com/r/Pentesting/comments/njhhpa/python_issue/

Using Python3.9 -- Not sure if this is related to a specific distro or if this needs to go to a Python subreddit but.....I was working on a CyberSecLabs box and found an SQLi python script. The script works up to the point of actually cracking the password. I've seen the writeup for it and I know the script can in fact crack it; but I'm wondering why it keeps failing. ​ I've tried this on a Kali VM, and my hard-install Parrot Security OS. The error that keeps popping up is: File "/usr/lib/python3.9/codecs.py", line 322, in decode (result, consumed) = self._buffer_decode(data, self.errors, final) UnicodeDecodeError: 'utf-8' codec can't decode byte 0xf1 in position 923: invalid continuation byte I've looked up the error and while there are plenty of posts about this error, they're all for something different with different reason of occurring and not a lot of troubleshooting fixes. Can anyone shed some light on this error? I understand I can skip this script and find another way to crack the password but at this point, this bothers me and I'd like to get a better understanding of this error and how to go about fixing it, if possible. submitted by /u/pelmic93 (https://www.reddit.com/user/pelmic93)
[link] (https://www.reddit.com/r/Pentesting/comments/njhhpa/python_issue/) [comments] (https://www.reddit.com/r/Pentesting/comments/njhhpa/python_issue/)

___________________________
@hacking_Attack
@Hacking_Video

Web Cache Poisoning: A Tale of chaining unkeyed inputs
https://infosecwriteups.com/web-cache-poisoning-a-tale-of-chaining-unkeyed-inputs-6e3cb026bd23?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hello fellow hunters, i hope you all are doing good and learning new things daily :) . I am writing today about a lab/mission i solved by…Continue reading on InfoSec Write-ups » (https://infosecwriteups.com/web-cache-poisoning-a-tale-of-chaining-unkeyed-inputs-6e3cb026bd23?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

AMSITrigger - The Hunt For Malicious Strings
http://www.kitploit.com/2021/05/amsitrigger-hunt-for-malicious-strings.html

___________________________
@hacking_Attack
@Hacking_Video

Hunting for Malicious Strings

Usage:
AMSI calls (xmas tree mode) -d, --debug Show Debug Info -m, --maxsiglength=VALUE Maximum signature Length to cater for, default=2048 -c, --chunksize=VALUE Chunk size to send to AMSIScanBuffer, default=4096 -h, -?, --help Show Help ">-i, --inputfile=VALUE Powershell filename
-u, --url=VALUE URL eg. https://10.1.1.1/Invoke-NinjaCopy.ps1
-f, --format=VALUE Output Format:
1 - Only show Triggers
2 - Show Triggers with Line numbers
3 - Show Triggers inline with code
4 - Show AMSI calls (xmas tree mode)
-d, --debug Show Debug Info
-m, --maxsiglength=VALUE Maximum signature Length to cater for,
default=2048
-c, --chunksize=VALUE Chunk size to send to AMSIScanBuffer,
default=4096
-h, -?, --help Show Help
For details see https://www.rythmstick.net/posts/amsitrigger

Download AMSITrigger (https://github.com/RythmStick/AMSITrigger)

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
AMSITrigger - The Hunt For Malicious Strings

https://1.bp.blogspot.com/-Vlzn49ifpjY/YKS5N-yR7vI/AAAAAAAAWPA/Qnlnzsc9JEs4YO-7KV6BkQYfN9muTXlHQCNcBGAsYHQ/w640-h270/amsitrigger.gif
Hunting for Malicious Strings

Usage:

AMSI calls (xmas tree mode) -d, --debug Show Debug Info -m, --maxsiglength=VALUE Maximum signature Length to cater for, default=2048 -c, --chunksize=VALUE Chunk size to send to AMSIScanBuffer, default=4096 -h, -?, --help Show Help ">-i, --inputfile=VALUE Powershell filename
-u, --url=VALUE URL eg. https://10.1.1.1/Invoke-NinjaCopy.ps1
-f, --format=VALUE Output Format:
1 - Only show Triggers
2 - Show Triggers with Line numbers
3 - Show Triggers inline with code
4 - Show AMSI calls (xmas tree mode)
-d, --debug Show Debug Info
-m, --maxsiglength=VALUE Maximum signature Length to cater for,
default=2048
-c, --chunksize=VALUE Chunk size to send to AMSIScanBuffer,
default=4096
-h, -?, --help Show Help


For details see https://www.rythmstick.net/posts/amsitrigger
Download AMSITrigger

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
10 Signs You’ve Been Working In Infosec Too Long

https://cdn-images-1.medium.com/max/960/1*-O5zl0WE7oUQwavsUbJShA.jpeg
When your mom calls you ask her three security questions to verify her identity

Continue reading on Medium »

Hacking on Medium
Web Cache Poisoning: A Tale of chaining unkeyed inputs

https://cdn-images-1.medium.com/max/2600/1*0E1tfiiTvku35JS9BfIDVg.png
Hello fellow hunters, i hope you all are doing good and learning new things daily :) . I am writing today about a lab/mission i solved by…

Continue reading on InfoSec Write-ups »

Hacking on Medium
What nobody tells you about spam calls and emails

https://cdn-images-1.medium.com/max/2600/1*LWzp_7nAjktxVcJBzfraug.jpeg
I watched a YouTube video yesterday where a YouTuber went into elaborate detail to track and find the criminals who were stealing a lot of…

Continue reading on Medium »

Hacking on Medium
How to Create A SQL database in Python

Hi everyone! Today’s blog will cover python and SQL. Now, if you don’t know what python or sql is, that’s okay, we’ll cover it. Let’s get…

Continue reading on Medium »