Skip to content

The Garden Society Newsletter

From the nadir of dispair comes the beginning of greatness.

Written by :|February 17, 2019

Linux Bomb Walkthrough – Part2 (Phases 1-3) – mcb101

https://mcb101.blog/2019/02/16/linux-bomb-walkthrough-part2-phases-1-3/

Share this:

Twitter
Facebook

Like this:

Like Loading...

Current Operational Materials

Reliable Datagram Sockets (RDS) – rds_atomic_free_op NULL pointer dereference Privilege Escalation (Metasploit) – Linux local Exploit
NSA Offers Guidance on Mitigating Cloud Flaws
Anatomy of a Facebook-Hosted Phishing Attack
Cryptomining Malware Vivin Uses Pirated Software as Attack Vector – Security Boulevard
Amazon Engineer Leaked Private Encryption Keys. Outside Analysts Discovered Them in Minutes
Ghislaine Maxwell’s personal emails were HACKED and could be leaked
GitHub – newrelic/rusty-hog: A suite of secret scanners built in Rust for performance. Based on TruffleHog (https://github.com/dxa4481/truffleHog) which is written in Python.
On Web-Security and -Insecurity: CVE-2020-2655 JSSE Client Authentication Bypass
Vivin Nets Thousands of Dollars Using Cryptomining Malware | Threatpost
Pwn2Own Miami Contestants Haul in $180K for Hacking ICS Equipment | Threatpost
YARASAFE – Automatic Binary Function Similarity Checks with Yara
Safari’s Intelligent Tracking Protection is misspelled, says Google: It should be Dumb Browser Stalking Enabler • The Register
SANS Institute: Reading Room – Securing Code
How to Build an Automated Recon Pipeline with Python and Luigi – Part I (Setup and Scope)
Owner of DDoS mitigation firm launched DDoS attacks on others

Where did that shit go

Search for:

Hacking

Ethical Hacking Bundle!! 100+ hours content. Just have a look :)
submitted by /u/patidarayush11 [link] [comments]
INTRODUCING: HOW TO HACK Q&A WEEKENDS
As many of you have noticed and suggested our mod team has decided to make a little change. We are now encouraging hacking questions on Saturdays and Sundays! During the week we will still be encouraging mostly informative, news and tutorial based information... Your all knowing mod team still recommends cross posting with r/howtohack but we are now opening […]
How hackers make themselves untraceable, Metasploit Timestomp Module
submitted by /u/mrhackerco [link] [comments]
Brother forgot his password, have tried making a new admin and restarting through safe mode can't use a recovery drive as we don't have a recovery drive
submitted by /u/deckers_phising [link] [comments]
Top Web Browser Extensions for Hackers and Security Researchers
submitted by /u/mrhackerco [link] [comments]
Minecraft Hacks?
Hello! Does anyone have any Minecraft hacks? I’d really like to spice things up, but it’s kinda difficult to find hacks for it that are still available submitted by /u/plagueflea [link] [comments]
If you are interested Windows Memory Exploitation I am doing an up-to-date series on it!
submitted by /u/hexabin [link] [comments]
Use LeakPeek.com to find your compromised passwords, found in leaked online databases!
This site lets you check for your email in any leaked databases, to see if your accounts are at risk of being compromised from using the same public passwords. (+ lots more features) Make sure to check it out: leakpeek.com submitted by /u/LeakPeek [link] [comments]
How do you see posts on a private account on twitter without following
I’m trying to find a way to be able to see the posts on a private meme page without following them on twitter. submitted by /u/Chips_and_Smokes [link] [comments]
Creating an automated auto dialer (War Games Project)
I'm interested in doing a modern remake of the popular War Games (1983) computer phone re-dialer. Curious to hear how you'd go about it. I have a method in mind but shortcuts are always welcome. submitted by /u/dav_ooh [link] [comments]
How to APK Mining for extract information about upcoming releases???
Hello guys!!! Like the title said i want to know please the process of extracting information about upcoming releases from game apk!!! Someone can help me please??? im really need ty!!! submitted by /u/RobertoMM1986 [link] [comments]
Private Twitter
Is there a way to see a private account and read protected tweets? submitted by /u/ImpressiveCut1 [link] [comments]
Metasploitable 2
Would you recommend metasploitable 2 for a beginner? I just got VBox set up with Kali, and was wondering what a good pen test set up would consist of. How did you guys set up labs in your beginning stages. FYI I'm more into netsec than webapp. submitted by /u/SnxE13 [link] [comments]
CodeRed | Stream Premium Cybersecurity Courses | Learn Anytime Anywhere
submitted by /u/steve_sage [link] [comments]
Windows Exploit Development Part 1: Vanilla Buffer Overflows
submitted by /u/hexabin [link] [comments]
Issues with Running the Nemty & Shadow Ransomware on Windows 7
Running the Shade & Nemty ransomware respectively. Both of the times I encountered this same issue. Does both the ransomware require Internet connection to execute it? I turned off all adapters to prevent it from spreading to my host machine and my other devices. Or should I run it on Windows 10 rather than running it on Windows 7? https://preview.redd.i […]
Am I taking correct precautions when testing malware?
I am not sure if this the correct subreddit to ask this. But I'd like to know if I am taking correct precautions when testing malware. Currently, I am testing the Petya ransomware and I am doing an analysis on that. I am running it on a Windown 7 VM on VirtualBox. These are some of the steps I have taken On the Host Machine (Windows 10), I have gone to […]
Trying to learn cyber defense
Long story short I’ve been hacked before on Android as well as iOS and I run my devices locked down as much as possible. This has all pushed me into wanting to learn how devices are hacked and how to proactively defend against that. That has taken me into testing Linux distros etc for more open source privacy and security. Now the question: what programming […]
Is it possible to use a fake number for whatsapp
Title says it all, is there any method for whatsapp mobile or web ? submitted by /u/Wdr93 [link] [comments]
Another website seized by FBI in coordination with NCA,Netherlands police , northern ireland police and german agencies.
A very popular website used by everybody in the industry for checking pwned email ids and accounts, has been recently seized by the Federal Bureau of an investigation For selling breached Data submitted by /u/justin_cdi [link] [comments]

🐙🐙🐙

🐙🐙🐙

Today in Sports

TWGrappler | Hack Twitter Accounts
Expert finds Starbucks API Key exposed online ... ...
Hack This Site
Spy Dialer
When the waters were changed
Analysis of CVE-2019-14994 – Jira Service Desk Path Traversal leads to Massive Information Disclosure | Sam Curry
Pwning VMWare, Part 1: RWCTF 2018 Station-Escape | nafod
Hack The Box - Heist | 0xRick
[LEAKED] IDA Pro 7.2 + HexRays 2 (x64) - Discussions / Questions / Reverse Engineering - R0 CREW
GitHub - The-Cracker-Technology/ANDRAX-Mobile-Pentest: ANDRAX The first and unique Penetration Testing platform for Android smartphones

Translate

Blackhat

Best crypter for a rat?
I use nanocore unicorn release because i need reverse proxy. What is the best crypter that i can buy now? I used quasar 1.3 but the person has to run in admin so that wont work i thin. I just look for a good crypter?????? submitted by /u/Freekshow144 [link] [comments]
Interactive hacking demo of TikTok XSS vulnerability
submitted by /u/gyanchawdhary [link] [comments]
Critical Authentication Bypass Vulnerability in InfiniteWP Client Plugin (+POC)
submitted by /u/netsec_burn [link] [comments]
Need opinions/sources on how create a database of phished passwords
So to make it simple I want to create a script that automatically adds a any new passwords that have been phished to a database (of sorts) on a text document. I am currently using Hidden Eye to phish passwords (https://github.com/DarkSecDevelopers/HiddenEye). I'm not sure how complicated this would be or if it's even possible but I just need someon […]
REing software that requires a login to be activated. Anyway around that?
Hi guys, So I have been poking around with RE (reverse engineering) and I wanted to see if I could bypass the login requirement of any particular 64bit exe in order to be activated. Keep in mind, I'm trying to see if I can bypass this login requirement while allowing the software to be connected to the internet. Any advice or tips would be greatly appre […]
PoC - CVE-2020-0601 crypt32.dll
submitted by /u/netsec_burn [link] [comments]
Does anyone know of a good file gathering script or service, Im looking for something that will search through multiple different file hosters for a specific file. Thank you
submitted by /u/Limitbreaker213 [link] [comments]
How safe are the sessions that come with pythons flask framework?
The sessions that come out of the box with flask store the information you pass to it as well as a signature. It can be easily decrypted. But where does the signature come from? And where is it store on server side? Is it possible to guess the signature and thereby inject cookies? submitted by /u/ChiroNika [link] [comments]
Deceiving blue teams using anti-forensic techniques
submitted by /u/adamziaja_com [link] [comments]
Manually Unpacking the UPX Packer [Malware Analysis Techniques] [video]
submitted by /u/kindredsec [link] [comments]
SHA-1 is a Shambles
submitted by /u/netsec_burn [link] [comments]
Breaking PHP's mt_rand() with 2 values and no bruteforce
submitted by /u/netsec_burn [link] [comments]
GitHub - in0finite/EncryptedDllLoader: Encrypts and loads encrypted DLLs. Can be used to hide the DLL code.
submitted by /u/in0finite [link] [comments]
SerenityOS hacked in a 36c3 CTF (Exploit and write-up)
submitted by /u/netsec_burn [link] [comments]
Scraping Malware Off of Pastebin [Video]
submitted by /u/kindredsec [link] [comments]
Bashar Bachir Infection Chain Analysis
submitted by /u/kindredsec [link] [comments]
Razer products automatically installing and running software
Hey so I recently got a new wireless mouse from razer and of course whenever you plug in a new mouse it will install some drivers. However these "drivers" somehow installed razer synapse on my PC. They installed a whole program with no authorization, completely auto-run and I can't help but feel this could be easily exploitable. My question is […]
Ring doorbell vulnerable to traditional deauth attack
submitted by /u/netsec_burn [link] [comments]
Malware Analysis | WSHRAT Visual Basic RAT [video]
submitted by /u/kindredsec [link] [comments]
So, which one of you tried to SQL inject an HV supply site?
submitted by /u/lyncs- [link] [comments]

:p

The Past

The Past

Post navigation

Previous Post Linux Bomb Walkthrough – Part1 (Setup) – mcb101

Next Post GitHub – Frichetten/CVE-2019-5736-PoC: PoC for CVE-2019-5736

Privacy & Cookies: This site uses cookies. By continuing to use this website, you agree to their use.
To find out more, including how to control cookies, see here: Cookie Policy

%d bloggers like this: