HackTalk http://blog.hacktalk.net HackTalk Security Fri, 03 Feb 2012 15:10:25 +0000 en hourly 1 http://wordpress.org/?v=3.3.1 vulnerability-lab.com XSS Vulnerability http://blog.hacktalk.net/vulnerability-lab-com-xss-vulnerability/ http://blog.hacktalk.net/vulnerability-lab-com-xss-vulnerability/#comments Fri, 03 Feb 2012 15:10:25 +0000 connection http://blog.hacktalk.net/?p=1131 Earlier today I tried to contact the people over at http://vulnerability-lab.com about an XSS vulnerability I found on their site (ironic) but it appears they want nothing to do with me. Praise Full-Disclosure.

Vulnerability-lab.com XSS - HackTalk Security

The Irony Of A Site For Disclosing Site Being Itself Vuln To Something So Trivial

 

Basically I tried to report this issue to them through a private message on youtube and then a follow request on twitter (so I could DM them) but to no avail. Eventually rem0ve joined freenode and messaged me and told me he didn’t want to be cooperative with me or even be friendly. Sometimes being a prick just makes you look like an idiot.

 

Cya In Cyberspace :D

]]> http://blog.hacktalk.net/vulnerability-lab-com-xss-vulnerability/feed/ 1 From Reverse Shell To Reverse PTY Shell http://blog.hacktalk.net/from-reverse-shell-to-reverse-pty-shell/ http://blog.hacktalk.net/from-reverse-shell-to-reverse-pty-shell/#comments Tue, 31 Jan 2012 00:50:58 +0000 connection http://blog.hacktalk.net/?p=1127 This post will be very brief and just cover a little known technique for spawning a pseudo-terminal which allows for executing commands such as su, sudo, ssh, telnet, etc.

I won’t get into how you would get an interactive reverse shell spawned as I’m sure you guys all already have your favorite methods instead this mini-tutorial starts off after your netcat listener goes crazy with the new reverse shell you just spawned. Without being able to use su, sudo, ssh, and stuff like nano/vim this shell pretty much sucks so let’s go ahead and upgrade it with this $up3r 31337 0dayz . Lol honestly it’s just something that has been done by python programmers for years now:

python -c 'import pty; pty.spawn("/bin/bash");'

What this does is starts the python interpreter and executes everything in the single  quotes. Inside the single quotes we import the code to create a pseudo-terminal. After loading this code we use a psuedo-terminal to spawn a bash shell while gives you a pseudo-terminal bash shell which allows you to nano, vim, ssh, whatever you want.

Bit of warning, don’t just press Ctrl+C if you wanna exit out of things, in fact, generally speaking before using any escape sequence prepend it with Ctrl+V. Ctrl+V lets you print the literal character to stdin. If you want to use Ctrl+C type Ctrl+V Ctrl+C [enter] and it’ll cause the pseudo-terminal to execute the Ctrl+C as opposed to just killing your netcat connection :P

 

Enjoy.

 

Cya in Cyberspace

]]> http://blog.hacktalk.net/from-reverse-shell-to-reverse-pty-shell/feed/ 0 How to do it wrong http://blog.hacktalk.net/how-to-do-it-wrong/ http://blog.hacktalk.net/how-to-do-it-wrong/#comments Fri, 27 Jan 2012 22:36:29 +0000 connection http://blog.hacktalk.net/?p=1124 Share

As I’m sure many of you HackTalkers have read, UFC.com was recently defaced which led to Dana White essentially daring Anonymous to do it again.

More after the fold

I see stuff like this time and time again, a hacking forum will get pwned by some group and after picking up the pieces, the site which got hacked will talk crap about their attackers and essentially dare them to try it again. Inevitably the site will be hacked again because the administrators of the site are still leaving gaping security holes in their site. This is something that has been done time and time again.

This doesn’t relate only to hacking either. In pretty much every walk of life, if someone kicked your ass once you can be certain they can do it again, especially if you egg them on.

This was the case with Dana White who egged Anonymous on to try to hack UFC again and even went so far as insulting Anonymous members.

Shortly after egging them on Dana White once again became a household name as his name was all over the twittersphere attached to a very interesting link: http://pastebin.com/D1zRYSYd Dana White was dox’d. Anonymous didn’t stop there though, in their response to Dana’s comments they went ahead and defaced UFC once again (for the hat trick) and posted this : http://www.cyberwarnews.info/2012/01/27/ufc-website-hacked-and-defaced-by-anonymous-after-dana-white-starts-trouble-opufc

In the end if you have a target on your back and you’ve already been owned, why talk crap; it’s only going to get you messed with more and it will give your attackers fuel with which to continue attacking until they eventually get through.

 

Cya in cyberspace.

 

Share

]]> http://blog.hacktalk.net/how-to-do-it-wrong/feed/ 1 Tweets for 2012-01-26 http://blog.hacktalk.net/tweets-for-2012-01-26/ http://blog.hacktalk.net/tweets-for-2012-01-26/#comments Thu, 26 Jan 2012 06:00:00 +0000 connection http://blog.hacktalk.net/tweets-for-2012-01-26/ Share

  • @Wh1t3Rabbit anytime :) #
  • @ashby hacktalk.net :) #
  • @ashby the blog is at blog.hacktalk.net but I haven't been keeping up with it lately, hope to get back to blogging VERY soon #
  • @ashby yea it's pretty nice in there and some really knowledgeable people too #
  • @ashby check out IRChon #
  • How are you tweeps tonight ? #
  • New Exploit [webapps] – WordPress http://t.co/4cdDpKv8 #Exploit #
  • @Dawseeeyy Glad to hear you are doing good :) #
  • @grap3_ap3 Pretty okay I guess, contemplating wtf to do tbh #
  • #SOTU I don't have anything to say about it just wondering how many new followers I'll get by using this hashtag. Bring On The Bots! #
  • HackTalk Forum Daily is out! http://t.co/QLiogMNK #
  • Confessions of a Google junkie (or, Privacy? What privacy?): A lot has been made of Google's new privacy policy … http://t.co/kjylbjZk #
  • @c0rrupt_net old and fake #
  • @MrAnonymous2600 KF? #
  • Windstream's customer database used by employee for identity theft: A now-former Windstream employee is in jail … http://t.co/T3dcPd7A #

Share

]]> http://blog.hacktalk.net/tweets-for-2012-01-26/feed/ 0 Tweets for 2012-01-25 http://blog.hacktalk.net/tweets-for-2012-01-25/ http://blog.hacktalk.net/tweets-for-2012-01-25/#comments Wed, 25 Jan 2012 06:00:00 +0000 connection http://blog.hacktalk.net/tweets-for-2012-01-25/ Share

  • RT @k3170Makan: Added some google dorks to my blog,check out the top of the right column @hacktalkblog @grap3_ap3 @philippdowling @WokoFreak #
  • New Exploit [webapps] – DirectAdmin ADD Sub Domain CSRF Exploit: http://t.co/lq9QwXmZ #Exploit #
  • @ctrl1T Thanks for your follow as well :) #
  • @realytcracker haha nice #
  • @realytcracker Like a boss #
  • 15 leaders in smart grid security: Security concerns for the intelligent power distribution system will require … http://t.co/IVoxhLEV #
  • New Exploit [papers] – A Backdoor in the Next Generation Active Directory: http://t.co/kDugXo6P #Exploit #
  • RT @k3170Makan: PhpBridges Blog System SQL injection: inurl:"members.php?id=*" + intext:"Warning:" | intext:"MySQL" #
  • @jadedsecurity @purehate_ yea but you should be used to it by now #
  • @jadedsecurity @purehate_ NOU!!! <31337 #
  • @jadedsecurity Don't make me order pizza to your hotel room. ph33r! #
  • @jadedsecurity #SoDMMeYourHotelInfoOrFuckYou or gimme a paypal donate button :P #
  • RT @k3170Makan: You can extend that last one by specifying more popular php shells #
  • @jadedsecurity :P #
  • @bl0nde_b0ricua haha omg YES!!! I can't remember how many of those things I had to stop using cause I lost a single piece of lead #
  • New Exploit [webapps] – Stoneware WebNetwork6 Multiple Vulnerabilities – [CVE: 2012-0286]: http://t.co/bWrTIaqn #Exploit #
  • "Can't keep a pet like a house cat or lap dog. The only thing sittin on my couch is a laptop" – Int80 #
  • Global spam declines as malware encounters pick up: report: Enterprise users experienced an average of 339 malwa… http://t.co/b0R2n0cf #
  • @bl0nde_b0ricua haha I ended up just saving the tips so if I lost one I had spares :P #
  • @M3TALH3AD71 or an arrow to the knee #
  • BrowserID testing waters, but missing pieces weaken story: The Mozilla Foundation is finally testing its Browser… http://t.co/tnp5RvUT #
  • Which twitter user do YOU guys follow for the latest and greatest database leaks? #

Share

]]> http://blog.hacktalk.net/tweets-for-2012-01-25/feed/ 0 Tweets for 2012-01-24 http://blog.hacktalk.net/tweets-for-2012-01-24/ http://blog.hacktalk.net/tweets-for-2012-01-24/#comments Tue, 24 Jan 2012 06:00:00 +0000 connection http://blog.hacktalk.net/tweets-for-2012-01-24/ Share

Share

]]> http://blog.hacktalk.net/tweets-for-2012-01-24/feed/ 0 Tweets for 2012-01-23 http://blog.hacktalk.net/tweets-for-2012-01-23/ http://blog.hacktalk.net/tweets-for-2012-01-23/#comments Mon, 23 Jan 2012 06:00:00 +0000 connection http://blog.hacktalk.net/tweets-for-2012-01-23/ Share

Share

]]> http://blog.hacktalk.net/tweets-for-2012-01-23/feed/ 0 Tweets for 2012-01-22 http://blog.hacktalk.net/tweets-for-2012-01-22/ http://blog.hacktalk.net/tweets-for-2012-01-22/#comments Sun, 22 Jan 2012 06:00:00 +0000 connection http://blog.hacktalk.net/tweets-for-2012-01-22/ Share

Share

]]> http://blog.hacktalk.net/tweets-for-2012-01-22/feed/ 0 Tweets for 2012-01-21 http://blog.hacktalk.net/tweets-for-2012-01-21/ http://blog.hacktalk.net/tweets-for-2012-01-21/#comments Sat, 21 Jan 2012 06:00:00 +0000 connection http://blog.hacktalk.net/tweets-for-2012-01-21/ Share

Share

]]> http://blog.hacktalk.net/tweets-for-2012-01-21/feed/ 0 Tweets for 2012-01-20 http://blog.hacktalk.net/tweets-for-2012-01-20/ http://blog.hacktalk.net/tweets-for-2012-01-20/#comments Fri, 20 Jan 2012 06:00:00 +0000 connection http://blog.hacktalk.net/tweets-for-2012-01-20/ Share

Share

]]> http://blog.hacktalk.net/tweets-for-2012-01-20/feed/ 0