2019-01-30 Random Interesting Shit

Categories Hacker Shit, News Feed Stuff, Random Musings, Security Stuff, Stuff To Learn

Today’s Principle to Follow:
Principle #22: All the Thoughts and Planning in the World are of Limited Use.
   There are too many variables for anyone to truly know the outcome of almost any event. Something that seems like it should fail often succeeds. And something that seems like it should work often does not. Planning and thinking ahead are good to do. They help us be prepared. Sometimes, however, people find comfort in thinking more and more, and analyzing possibilities more and more, and they get caught in a rut. Rather than progressing and stepping out into the real world and risk making mistakes, they stay in their comfort zone, and delay action.
   
   We need to catch ourselves if we enter such a rut. We need to see it for what it is and push ourselves to try something, and to accept whatever outcome happens. Of course, if the stakes are super high and it is a matter of life and death, it is probably wise to have a complete plan from beginning to end to make sure no unforeseen problems arise. In other cases, remember that there is always a lot to learn from trying something and making a mistake, and then making corrections as we go.



iCloud Possibly Suffered A Privacy Breach Last Year That Apple Kept a Secret
https://thehackernews.com/2019/01/icloud-privacy-breach.html
#hackerstuff #HackThePlanet


Authorities shut down xDedic marketplace for selling hacked servers

Authorities shut down xDedic marketplace for selling hacked servers


#hackerstuff #HackThePlanet


The Fuzzing Project – When your Memory Allocator hides Security Bugs
https://blog.fuzzing-project.org/65-When-your-Memory-Allocator-hides-Security-Bugs.html
#hackerstuff #HackThePlanet


Basic Electron Framework Exploitation
https://www.contextis.com/en/blog/basic-electron-framework-exploitation
#hackerstuff #HackThePlanet


Double exposure: 24 million loan records also exposed on open Amazon S3 bucket

Double exposure: 24 million loan records also exposed on open Amazon S3 bucket


#hackerstuff #HackThePlanet


pompa – a fully-featured spear-phishing toolkit, designed to be used in deployments of any size.
https://github.com/m1nl/pompa/wiki
#hackerstuff #HackThePlanet


2019-01-29 Random Interesting Shit

Categories Hacker Shit, News Feed Stuff, Random Musings, Security Stuff, Stuff To Learn

Today’s Principle to Follow:
Principle #21: Plenty of Ideas are Great in Theory, but Fail Horribly in Practice.
   Ideas are fun to discuss, and to play around with in our minds, but to really know the value of an idea we have to test it somehow. Often times one test run isn’t enough. An idea might appear to be good at first, and later turn out to be unsustainable, Some ideas require help from many sources, but the more people or agencies that get involved in making an idea run, the more chances there are for problems that put a stop to it. Communism is a good example of an idea that did not go as planned. It was though that this system would sustain everyone and keep all of society satisfied in many countries. However, the reality was that the system was vulnerable to corruption, and it discouraged people from doing their best work because they wouldn’t be rewarded for it.
   
   Most ideas involve people in some way. For example, people will come up with the idea, execute the idea, and they will use the end product or the end system. The issue is that people at all stages tend to be unpredictable and they make mistakes. You can’t know for sure what people want, and how they will react to something new, and you also can’t account for unforeseen challenges along the way to making an idea happen. Be careful with your new ideas. Test them on a smaller scale before you invest heavily into them.



Fucking Homepage Words of Wisdom of the Fucking Day:
Let the improvement of yourself keep you so busy that you have no time to criticize others.
#FuckingHomepage


An Analyst’s Review of Top Cyber Certs

An Analyst’s Review of Top Cyber Certs


#hackerstuff #HackThePlanet


What If Your VPN Keeps Logs and Why You Should Care

What If Your VPN Keeps Logs and Why You Should Care


#hackerstuff #HackThePlanet


Meet Aztarna, a tool to find vulnerable Internet connected robots

Meet Aztarna, a tool to find vulnerable Internet connected robots


#hackerstuff #HackThePlanet


#2176 7z AES encryption – IV randomness issues
https://sourceforge.net/p/sevenzip/bugs/2176/
#hackerstuff #HackThePlanet


2019-01-25 Random Interesting Shit

Categories Hacker Shit, News Feed Stuff, Random Musings, Security Stuff, Stuff To Learn

Today’s Principle to Follow:
Principle #20: Use Your Talents and Abilities for Your Own Purpose.
   Live for your own causes, and you will accomplish more than if you live for the cause of someone else. People in our lives that try to help us on the right path mean well, but we have to live our own lives. It is very easy to suggest to someone that they might like doing X, or they might like the money in Y, or that there is a lot of demand in Z right now. Trends come and go. One big money making field now could be nonexistent in 10 years or less. the people who know us best can sometimes offer useful guidance. However, you should keep in mind that you are the one who needs to put in the effort, show up to work, and deal with any challenges along the way, not whoever recommended a certain path.



GandCrab ransomware and Ursnif virus spreading via MS Word macros
https://thehackernews.com/2019/01/microsoft-gandcrab-ursnif.html
#hackerstuff #HackThePlanet


Hacker demonstrates how to remotely Jailbreak iPhone X

Hacker demonstrates how to remotely Jailbreak iPhone X


#hackerstuff #HackThePlanet


Google URL Inspection Tool flaw lets anyone inspect URLs without authorization

Google URL Inspection Tool flaw lets anyone inspect URLs without authorization


#hackerstuff #HackThePlanet


What the Fuzz
https://labs.mwrinfosecurity.com/blog/what-the-fuzz/
#hackerstuff #HackThePlanet


SubDomainizer – A tool to find subdomains and interesting things hidden inside, external Javascript files of page, and Github.
https://github.com/nsonaniya2010/SubDomainizer
#hackerstuff #HackThePlanet


sshtranger_things.py: OpenSSH scp arbitrary file write PoC (CVE-2019-6111)
https://sintonen.fi/advisories/scp-client-multiple-vulnerabilities.txt
https://gist.github.com/mehaase/63e45c17bdbbd59e8e68d02ec58f4ca2
#hackerstuff #HackThePlanet


Playing CTFs for fun and profit (but mostly fun)
https://rayoflightz.github.io/ctfs/2019/01/23/why-to-play-ctfs.html
#hackerstuff #HackThePlanet


2019-01-24 Random Interesting Shit

Categories Hacker Shit, News Feed Stuff, Random Musings, Security Stuff, Stuff To Learn

Today’s Principle to Follow:
Principle #19: Do Not Restrict Your Own Potential.
   If you expand you mind into believing that you can achieve something greater, then you can. The greatest minds never accept that they are only smart enough to reach a certain level of accomplishment. They push beyond any boundaries. They push themselves further and further until they make progress. Then they rest and do it again the next day. They learn every day, an they think about problems they believe are critical every day.
   
   Einstein is well known to have thought bout the speed of light and the nature of space-time every day. When his mind grappled with a problem, he didn’t let it go until he understood it fully. Despite that he is one of the most well-known geniuses, he didn’t learn to talk until he was four, and he failed many classes in his youth. Einstein would have had just as much reason as anyone else to believe that he wasn’t cut out to be a genius. But he did not let anything stop him from what he wanted to achieve, and he will never be forgotten for his contribution to the world. Do not restrict yourself. Do not set limits on what you are capable of. You are capable of more than you know.



Bugcrowd LevelUp 0x03 2019 YouTube Playlist

#hackerstuff #HackThePlanet


2019-01-23 Random Interesting Shit

Categories Hacker Shit, News Feed Stuff, Random Musings, Security Stuff, Stuff To Learn

Today’s Principle to Follow:
Principle #18: Know the Difference Between Mistakes and Failure.
   Many people have a fear of making mistakes and failing. But we should realize that they are not the same thing. Mistakes are errors we make, but they help us learn something new. Failure is giving up on ourselves, or being too scared to take a risk and give ourselves a real chance for success.
   
   Often when we make mistakes, someone is there to tell us how foolish we were. Really, making mistakes is a natural and essential part of learning. Don’t worry about people who tease you or discourage you when you make mistakes. They are ignorant to think that mistakes are a sign of failure or of doing something wrong. Often, people who make the most mistakes and who learn from them, are the ones that are the most successful and innovative in their field. The Wright Brothers for example, learned to make better and better planes through trial and error. They had countless crashes, but they learn from them, and they changed the world. Of course, you don’t always need to make every mistake yourself. You can learn from seeing other people make mistakes too.
   
   You should learn to see patterns in the kinds of mistakes you tend to make. Analyze the kinds of mistakes you are more prone to making, and ask yourself why they happen. Mistakes are learning tools. To fail is to five up on something prematurely. To fail is to avoid risks so much that you never make mistakes, and to never allow yourself to success in any important way.



Chinese Hacker Publishes PoC for Remote iOS 12 Jailbreak On iPhone X
https://thehackernews.com/2019/01/ios12-jailbreak-exploit.html
#hackerstuff #HackThePlanet


Someone Hacked PHP PEAR Site and Replaced the Official Package Manager
https://thehackernews.com/2019/01/php-pear-hacked.html
#hackerstuff #HackThePlanet


Critical RCE Flaw in Linux APT Allows Remote Attackers to Hack Systems
https://thehackernews.com/2019/01/linux-apt-http-hacking.html
#hackerstuff #HackThePlanet


Frappé Technologies ERPNext Server Side Template Injection
https://medium.com/bugbountywriteup/frapp%C3%A9-technologies-erpnext-server-side-template-injection-74e1c95ec872
#hackerstuff #HackThePlanet


An OSCP (Offensive Security Certified Professional) Journey

OSCP (Offensive Security Certified Professional) Yolculuğum


#hackerstuff #HackThePlanet


CVE-2019-6260: Gaining control of BMC from the host processor

CVE-2019-6260: Gaining control of BMC from the host processor


#hackerstuff #HackThePlanet


BreakFree – Escaping Restricted Environments and Bypassing DLP
https://www.sixgen.io/single-post/2019/01/22/BreakFree
#hackerstuff #HackThePlanet


DarkHydrus Phishery tool spreading malware using Google Drive

DarkHydrus Phishery tool spreading malware using Google Drive


#hackerstuff #HackThePlanet


Open source library – Idiomatic nmap bindings for go developers
https://github.com/Ullaakut/nmap
#hackerstuff #HackThePlanet


EvlzCTF
https://evlzctf.in/
#hackerstuff #HackThePlanet


Python Tutorial – || Zip Cracking || Bruteforce || Code Walk-through || Hacking/Info-Sec

#hackerstuff #HackThePlanet