2019-04-22 Random Interesting Shit

Categories Hacker Shit, Information Technology, Security Stuff, Stuff To Learn

The Weather Channel goes offline after ransomware attack

The Weather Channel goes offline after ransomware attack


#hackerstuff #HackThePlanet


WannaCry hero MalwareTech pleads guilty to writing banking malware

WannaCry hero MalwareTech pleads guilty to writing banking malware


#hackerstuff #HackThePlanet


viewgen – a ViewState tool capable of generating both signed and encrypted payloads with leaked validation keys
https://github.com/0xACB/viewgen
#hackerstuff #HackThePlanet


2019-04-19 Random Interesting Shit

Categories Hacker Shit, News Feed Stuff, Security, Security Stuff, Stuff To Learn

Facebook Stored Millions of Instagram Users’ Passwords in Plaintext
https://thehackernews.com/2019/04/instagram-password-plaintext.html
#hackerstuff #HackThePlanet


Unmasked: What 10 million passwords reveal about the people who choose them
https://wpengine.com/unmasked/
#hackerstuff #HackThePlanet


Osmedeus – Fully automated offensive security tool for reconnaissance and vulnerability scanning
https://github.com/j3ssie/Osmedeus
#hackerstuff #HackThePlanet


Hacker Breaks Into French Government’s New Secure Messaging App
https://thehackernews.com/2019/04/france-Tchap-secure-messenger.html
#hackerstuff #HackThePlanet


2019-04-18 Random Interesting Shit

Categories Hacker Shit, News Feed Stuff, Random Musings, Security Stuff, Stuff To Learn

Facebook Collected Contacts from 1.5 Million Email Accounts Without Users’ Permission
https://thehackernews.com/2019/04/facebook-email-database.html
#hackerstuff #HackThePlanet


Drop-by-Drop: Bleeding through libvips (CVE-2019-6976)

Drop-by-Drop: Bleeding through libvips


#hackerstuff #HackThePlanet


pipetap.sh – This script invokes tcpdump over ssh piping to STDOUT, allowing remote use of wireshark
https://github.com/ShadowHatesYou/pipetap.sh
#hackerstuff #HackThePlanet


Reverse-engineering Broadcom wireless chipsets
https://blog.quarkslab.com/reverse-engineering-broadcom-wireless-chipsets.html
#hackerstuff #HackThePlanet


2019-04-17 Random Interesting Shit

Categories Hacker Shit, News Feed Stuff, Random Musings, Security Stuff, Stuff To Learn

Over 100 Million JustDial Users’ Personal Data Found Exposed On the Internet
https://thehackernews.com/2019/04/justdial-hacked-data-breach.html
#hackerstuff #HackThePlanet


Hackers exploiting unpatched Chrome bug to target 500M iPhone users

Hackers exploiting unpatched Chrome bug to target 500M iPhone users


#hackerstuff #HackThePlanet


“Digital Doppelgangers” to bypass anti-fraud protection

Crooks are selling “Digital Doppelgangers” to bypass anti-fraud protection


#hackerstuff #HackThePlanet


Password Spraying- Common mistakes and how to avoid them
https://medium.com/@adam.toscher/password-spraying-common-mistakes-and-how-to-avoid-them-3fd16b1a352b
#hackerstuff #HackThePlanet


Microsoft Edge Uses a Secret Trick And Breaks Internet Explorer’s Security
https://blog.0patch.com/2019/04/microsoft-edge-uses-secret-trick-and.html
#hackerstuff #HackThePlanet


Arjun – HTTP parameter discovery suite
https://github.com/s0md3v/Arjun
#hackerstuff #HackThePlanet


My Personal OSINT Techniques, Part 1 of 2: Key & Layer, Contingency Seeding
https://0x00sec.org/t/my-personal-osint-techniques-part-1-of-2-key-layer-contingency-seeding/13033
#hackerstuff #HackThePlanet


Explicit is better than implicit.
Simple is better than complex.
Complex is better than complicated.
Flat is better than nested.
Sparse is better than dense.
Readability counts.
Special cases aren’t special enough to break the rules.
Although practicality beats purity.
Errors should never pass silently.
Unless explicitly silenced.
In the face of ambiguity, refuse the temptation to guess.
There should be one — and preferably only one — obvious way to do it.
Although that way may not be obvious at first unless you’re Dutch.
Now is better than never.
Although never is often better than “right” now.
If the implementation is hard to explain, it’s a bad idea.
If the implementation is easy to explain, it may not be a good idea.
Namespaces are one honking great idea — let’s do more of those!


How NOT to use the PAM trust – Leveraging Shadow Principals for Cross Forest Attacks
https://www.labofapenetrationtester.com/2019/04/abusing-PAM.html
#hackerstuff #HackThePlanet


Forgot about this site… 😀
Hacker Test – Test your hacking skills
http://www.hackertest.net/
#hackerstuff #HackThePlanet


2019-04-16 Random Interesting Shit

Categories Hacker Shit, News Feed Stuff, Random Musings, Security Stuff, Stuff To Learn

Scranos: New Rapidly Evolving Rootkit-Enabled Spyware Discovered
https://thehackernews.com/2019/04/scranos-rootkit-spyware.html
#hackerstuff #HackThePlanet


Top VPNs found improperly securing cookies & tokens

Top VPNs found improperly securing cookies & tokens


#hackerstuff #HackThePlanet


Federal jury convicts malware creators of hijacking 400,000 computers
https://www.digitaltrends.com/computing/malware-creators-convicted-hijacked-40k-computers/
#hackerstuff #HackThePlanet


Privilege Escalation in ManageEngine ADManager Plus 6.6
https://research.digitalinterruption.com/2019/04/15/privilege-escalation-in-manageengine-admanager-plus-6/
#hackerstuff #HackThePlanet


DACL Permissions Overwrite Privilege Escalation (CVE-2019-0841)
https://krbtgt.pw/dacl-permissions-overwrite-privilege-escalation-cve-2019-0841/
#hackerstuff #HackThePlanet


How does Tor really work?
https://skerritt.blog/how-does-tor-really-work/
#hackerstuff #HackThePlanet #TOR