hacking vidhya

🔖Find hidden Endpoints:

javascript:(async function(){let scanningDiv=document.createElement("div");scanningDiv.style.position="fixed",scanningDiv.style.bottom="0",scanningDiv.style.left="0",scanningDiv.style.width="100%",scanningDiv.style.maxHeight="50%",scanningDiv.style.overflowY="scroll",scanningDiv.style.backgroundColor="white",scanningDiv.style.color="black",scanningDiv.style.padding="10px",scanningDiv.style.zIndex="9999",scanningDiv.style.borderTop="2px solid black",scanningDiv.innerHTML="<h4>Scanning...</h4>",document.body.appendChild(scanningDiv);let e=[],t=new Set;async function n(e){try{const t=await fetch(e);return t.ok?await t.text():(console.error(`Failed to fetch ${e}: ${t.status}`),null)}catch(t){return console.error(`Error fetching ${e}:`,t),null}}function o(e){return(e.startsWith("/")||e.startsWith("./")||e.startsWith("../"))&&!e.includes(" ")&&!/[^\x20-\x7E]/.test(e)&&e.length>1&&e.length<200}function s(e){return[...e.matchAll(/['"]((?:\/|\.\.\/|\.\/)[^'"]+)['"]/g)].map(e=>e[1]).filter(o)}async function c(o){if(t.has(o))return;t.add(o),console.log(`Fetching and processing: ${o}`);const c=await n(o);if(c){const t=s(c);e.push(...t)}}const l=performance.getEntriesByType("resource").map(e=>e.name);console.log("Resources found:",l);for(const e of l)await c(e);const i=[...new Set(e)];console.log("Final list of unique paths:",i),console.log("All scanned resources:",Array.from(t)),scanningDiv.innerHTML=`<h4>Unique Paths Found:</h4><ul>${i.map(e=>`<li>${e}</li>`).join("")}</ul>`})();

How intelligence agencies deanonymize messenger users.

Imagine the situation: you are an intelligence officer, and your task is to identify a particularly dangerous blackmailing criminal who appears on the network periodically and only for data transmission. For criminal activities, he started a separate laptop, from which he “cut out” a microphone, speakers and a camera. A reasonable decision, given that the speakers also know how to listen. He uses Tails as an operating system, although Whonix would be worth taking for maximum anonymity. One way or another, all traffic goes through Tor, it does not trust the VPN, and it still needs Tor to work on the Darknet. He uses PGP-encrypted Jabber to communicate, he could also install Telegram, but this is the representative of the old school of criminals. Even if you have access to the Jabber server, you can only get encrypted data and Tor IP addresses. This is useless information. The criminal works on the principle of "silence is gold", he will not say too much, he will not open links or files. It is only known that he must be in the same country with you. It would seem that there is no chance to establish his identity, but this is an illusion, it is possible to establish his identity despite all the measures he takes. The described case is ideal for using a timing attack on the messenger. The first thing you need is a program that will track and record all user logins and logouts. He appeared on the network - the system immediately notes the time, left - the system recorded the exit time. The log looks something like this: a table of inputs and outputs 778a55ce388f80731f7d1.png Now you have a log of his activity in your hands for several days, it's time to use the ORM (operational-search measures) system. Similar systems are at the disposal of the special services of most countries, in Russia it is SORM. You need to find out who connected to the Tor network during these +/- 5 minutes in your country. We know that the target that needs to be deanonymized connected on 04/22/2018 at 11:07 and disconnected at 12:30. At the same time points (+/- 5 minutes), 3,000 people connected to the Tor network and disconnected from it throughout the country. We take these 3000 and see which of them reconnected at 14:17 and disconnected at 16:54, how many people do you think will remain? So, step by step, the circle narrows, and in the end you will be able to calculate the place where the criminal enters the network. The more often he enters the network and the fewer other users at this time, the faster the timing attack will work. What can prevent a timing attack. The constant change of access points to the network makes such an attack meaningless. If the target periodically changes the exit points, this may complicate the search, but is a pre-admissible option and is not capable of confusing the system. We hope that our readers are not wanted criminals and do not have to wander from one cafe with public Wi-Fi to another. However, the second piece of advice against a timing attack should be used by everyone. We are talking about disabling the transfer of status information at the messenger level or establishing a permanent “offline” status. Most instant messengers provide one of these options. This is how it looks in Telegram: 224de1e483719955f516a.png If it is possible to hide your status data in your messenger, hide this information. An additional tool to protect against a timing attack can be to stop turning on the messenger along with connecting to the network. As you can understand from the description of the attack, the time of entry / exit to the network and the appearance on the connection / leaving offline in the messenger are checked. An error is allowed, but it should not be very large. If the target of the attack connects to Tor and starts the messenger only an hour later, it will be very difficult to connect the network login and the status in the messenger. Other than that, timing attacks are completely useless against the anonymous Bitmessage messenger.

HUNT Suite is a collection of Burp Suite Pro/Free and OWASP ZAP extensions Source/Credit: https://github.com/bugcrowd/HUNT @hacking_vidhya

Some free sauce on reverse engineering Deobfuscation : https://gist.github.com/0xdevalias/d8b743efb82c0e9406fc69da0d6c6581 https://www2.cs.arizona.edu/~debray/Publications/unflatten.pdf https://dev.to/pragativerma18/understanding-javascript-deobfuscation-in-web-scraping-5c2f JS Reversal https://steakenthusiast.github.io/ https://dev.to/jurooravec/7-tips-for-reverse-engineering-minified-typescript-javascript-4p64 https://thejunkland.com/blog/using-llms-to-reverse-javascript-minification.html WASM Reversal https://www.youtube.com/watch?v=BTLLPnW4t5s https://f-viktor.github.io/ https://anee.me/reversing-web-assembly-wasm-dd59eb2a52d4 https://github.com/ducphanduyagentp/ctf-challs https://www.usenix.org/system/files/sec20-lehmann.pdf JavaScript Virtualization Machines (JSVM) https://www.mitchellzakocs.com/blog/tigress https://svebaa.github.io/personal/blog/opaque-predicates/ https://andreabergia.com/series/stack-based-virtual-machines/ https://www.youtube.com/playlist?list=PLTsf9UeqkRebOYdw4uqSN0ugRShSmHrzH https://jwillbold.com/posts/obfuscation/2019-06-16-the-secret-guide-to-virtualization-obfuscation-in-javascript/ https://github.com/jwillbold/rusty-jsyc https://t.me/The7HacX https://github.com/Kechinator/jsvm https://www.youtube.com/playlist?list=PL-6mGXhyHSEuVjGB10RF-yGLMIX-2yLNG https://synthesis.to/2021/10/21/vm_based_obfuscation.html https://www.usenix.org/legacy/event/woot09/tech/full_papers/rolles.pdf https://services.phaidra.univie.ac.at/api/object/o:1649486/preview https://www.youtube.com/playlist?list=PLP29wDx6QmW5DdwpdwHCRJsEubS5NrQ9b https://www.youtube.com/watch?v=FdnjENjdu0Q https://www.botting.rocks/shapesecuritys-javascript-vm-part-1/ https://www.botting.rocks/shapesecuritys-javascript-vm-part-2/ https://eprints.lancs.ac.uk/id/eprint/89498/1/DSVMP_C_S.pdf https://www.youtube.com/watch?v=DRH0oRFwFiM @hacking_vidhya

Real

𝗣𝗮𝘆𝗹𝗼𝗮𝗱 𝗪𝗶𝘇𝗮𝗿𝗱 🤖 - AI assistant that utilizes GPT-3.5 and GPT-4 language models to interpret and generate cybersecurity payloads. https://github.com/ANG13T/payload-wizard @hacking_vidhya

try our ai now https://aistudio.instagram.com/ai/1433221740856989/?utm_source=share

40 Windows Command Prompt commands you need to know 👇 1. ipconfig 2. ipconfig /all 3. findstr 4. ipconfig /release 5. ipconfig /renew 6. ipconfig /displaydns 7. clip 8. ipconfig /flushdns 9. nslookup 10. cls 11. getmac /v 12. powercfg /energy 13. powercfg /batteryreport 14. assoc 15. chkdsk /f 16. chkdsk /r 17. sfc /scannow 18. DISM /Online /Cleanup /CheckHealth 19. DISM /Online /Cleanup /ScanHealth 20. DISM /Online /Cleanup /RestoreHealth 21. tasklist 22. taskkill 23. netsh wlan show wlanreport 24. netsh interface show interface 25. netsh interface ip show address | findstr "IP Address" 26. netsh interface ip show dnsservers 27. netsh advfirewall set allprofiles state off 28. netsh advfirewall set allprofiles state on 29. ping 30. ping -t 31. tracert 32. tracert -d 33. netstat 34. netstat -af 35. netstat -o 36. netstat -e -t 5 37. route print 38. route add 39. route delete 40. shutdown /r /fw /f /t 0 @hacking_vidhya

HTTP PUT method is enabled🤡🤡

Introduction to Malware Analysis and Reverse Engineering Source: https://class.malware.re

"@coinescrowe available for sale! 🚀 If you're interested, DM @err0ryuk to buy. Don't miss out on this opportunity! 💰💼 #Crypto #Escrow #ForSale"

Narcoogle search engine A Darknet Market Search Engine that allows you to search over 2,250+ Vendors, see 500,000+ Reviews, and 875,000+ Total Sales! Onion: http://narcooqom5mfevbeb6gck5tg5y2g2f5grywcu7cp4b3bvsmlvph66wqd.onion Clearnet: https://narcoogle.cc #darknet #deepweb #underworld #market @hacking_vidhya