Aug 31, 2020

Security Surprises On Firefox Quantum

This morning I've found an scaring surprise on my Firefox Quantum. Casually it was connected to a proxy when an unexpected connection came up, the browser  was connecting to an unknown remote site via HTTP and downloading a ZIP that contains an ELF shared library, without any type of signature on it.

This means two things

1) the owner of that site might spread malware infecting many many people.
2) the ISP also might do that.


Ubuntu Version:


Firefox Quantum version:



The URL: hxxp://ciscobinary.openh264.org/openh264-linux64-0410d336bb748149a4f560eb6108090f078254b1.zip




The zip contains these two files:
  3f201a8984d6d765bc81966842294611  libgmpopenh264.so
  44aef3cd6b755fa5f6968725b67fd3b8  gmpopenh264.info

The info file:
  Name: gmpopenh264
  Description: GMP Plugin for OpenH264.
  Version: 1.6.0
  APIs: encode-video[h264], decode-video[h264]

So there is a remote codec loading system that is unsigned and unencrypted, I think is good to be aware of it.

In this case the shared library is a video decoder, but it would be a vector to distribute malware o spyware massively, or an attack vector for a MITM attacker.




Related articles


  1. Hack Rom Tools
  2. Best Pentesting Tools 2018
  3. Pentest Tools List
  4. Usb Pentest Tools
  5. Pentest Tools For Windows
  6. Hacker Tools List
  7. Hacker Tools 2019
  8. Hacker Tools Hardware
  9. Pentest Automation Tools
  10. Hacking Tools 2020
  11. Ethical Hacker Tools
  12. Hacking Tools
  13. Top Pentest Tools
  14. Nsa Hacker Tools
  15. Hacking Tools Name
  16. What Are Hacking Tools
  17. Pentest Tools Apk
  18. Pentest Automation Tools
  19. Hacker Tools Free
  20. Pentest Tools Bluekeep
  21. Tools For Hacker
  22. Hacker Tools For Windows
  23. World No 1 Hacker Software
  24. Free Pentest Tools For Windows
  25. Hack And Tools
  26. Hacker Tools
  27. Hack Tools Pc
  28. Hack Rom Tools
  29. Pentest Tools
  30. Hacking Tools
  31. Hacker Tools Linux
  32. Pentest Tools Apk
  33. Hacker Tools 2019
  34. Game Hacking
  35. Hack Tools Pc
  36. Install Pentest Tools Ubuntu
  37. Hack Rom Tools
  38. Kik Hack Tools
  39. How To Install Pentest Tools In Ubuntu
  40. Hack Apps
  41. Termux Hacking Tools 2019
  42. Hacker Tools 2019
  43. Hacking Tools For Windows Free Download
  44. Hacker Tools Free
  45. Hacker Tools List
  46. Pentest Tools List
  47. Hacker Tools Mac
  48. Hack Tools Pc
  49. Nsa Hack Tools Download
  50. Top Pentest Tools
  51. Black Hat Hacker Tools
  52. Pentest Tools Download
  53. Hacking Tools Usb
  54. Kik Hack Tools
  55. Hacking App
  56. Blackhat Hacker Tools
  57. Pentest Tools Website Vulnerability
  58. Hacker Tools Apk
  59. Hacker Tools For Pc
  60. New Hack Tools
  61. Hacking Tools 2020
  62. Hacking Tools For Games
  63. Pentest Tools Url Fuzzer
  64. How To Hack
  65. Bluetooth Hacking Tools Kali
  66. Pentest Reporting Tools
  67. Hack Tools Github
  68. Pentest Tools For Mac
  69. Tools For Hacker
  70. Usb Pentest Tools
  71. Pentest Tools For Mac
  72. Hacker Tools Software
  73. Hacking Tools Mac
  74. World No 1 Hacker Software
  75. Hack Tools For Games
  76. Pentest Tools Nmap
  77. Growth Hacker Tools
  78. Hacker Tools Windows
  79. Beginner Hacker Tools
  80. What Is Hacking Tools
  81. Tools For Hacker
  82. Hacker Tools Apk
  83. Pentest Tools Android
  84. Hack Tools
  85. Underground Hacker Sites
  86. Hacking App
  87. Wifi Hacker Tools For Windows
  88. Hacker Security Tools
  89. Nsa Hack Tools
  90. Hackers Toolbox
  91. Wifi Hacker Tools For Windows
  92. Hacks And Tools
  93. Hacking Tools And Software
  94. Pentest Tools For Android
  95. Hack Website Online Tool
  96. Pentest Tools Website
  97. Hack Tool Apk
  98. Hacking Apps
  99. Wifi Hacker Tools For Windows
  100. Hack Tools Github
  101. Hacker Tools Linux
Posted by at

Aug 30, 2020

BurpSuite Introduction & Installation



What is BurpSuite?
Burp Suite is a Java based Web Penetration Testing framework. It has become an industry standard suite of tools used by information security professionals. Burp Suite helps you identify vulnerabilities and verify attack vectors that are affecting web applications. Because of its popularity and breadth as well as depth of features, we have created this useful page as a collection of Burp Suite knowledge and information.

In its simplest form, Burp Suite can be classified as an Interception Proxy. While browsing their target application, a penetration tester can configure their internet browser to route traffic through the Burp Suite proxy server. Burp Suite then acts as a (sort of) Man In The Middle by capturing and analyzing each request to and from the target web application so that they can be analyzed.











Everyone has their favorite security tools, but when it comes to mobile and web applications I've always found myself looking BurpSuite . It always seems to have everything I need and for folks just getting started with web application testing it can be a challenge putting all of the pieces together. I'm just going to go through the installation to paint a good picture of how to get it up quickly.

BurpSuite is freely available with everything you need to get started and when you're ready to cut the leash, the professional version has some handy tools that can make the whole process a little bit easier. I'll also go through how to install FoxyProxy which makes it much easier to change your proxy setup, but we'll get into that a little later.

Requirements and assumptions:

Mozilla Firefox 3.1 or Later Knowledge of Firefox Add-ons and installation The Java Runtime Environment installed

Download BurpSuite from http://portswigger.net/burp/download.htmland make a note of where you save it.

on for Firefox from   https://addons.mozilla.org/en-US/firefox/addon/foxyproxy-standard/


If this is your first time running the JAR file, it may take a minute or two to load, so be patient and wait.


Video for setup and installation.




You need to install compatible version of java , So that you can run BurpSuite.

More articles


  1. Pentest Tools Github
  2. Pentest Tools For Ubuntu
  3. Hacking Tools And Software
  4. Hack App
  5. Hacking Tools For Pc
  6. Hacking Tools For Windows Free Download
  7. Nsa Hack Tools Download
  8. Hacker Tools Mac
  9. Computer Hacker
  10. Hacking Apps
  11. How To Install Pentest Tools In Ubuntu
  12. Hack Tools Mac
  13. Hacker Tools Apk
  14. Hacking Tools Free Download
  15. Hack Apps
  16. Hacking Apps
  17. Top Pentest Tools
  18. Hacker Tools Free
  19. Easy Hack Tools
  20. Beginner Hacker Tools
  21. Hack Tools For Mac
  22. Hacker Tools Apk
  23. Hacker Tools 2020
  24. Free Pentest Tools For Windows
  25. New Hacker Tools
  26. Hacker Tools Software
  27. Hacking Tools And Software
  28. Hacker Tools Mac
  29. Hacking Tools Kit
  30. Tools 4 Hack
  31. Hack Apps
  32. Hack Tool Apk
  33. Hacker Hardware Tools
  34. Hack Tools Github
  35. Pentest Tools For Android
  36. Pentest Tools Open Source
  37. Hack Tool Apk
  38. Hacking Tools Name
  39. Pentest Tools Review
  40. Hacker Tools Online
  41. Hack Tool Apk
  42. Pentest Tools Subdomain
  43. Hack Apps
  44. Hacker Tool Kit
  45. Hacker Tools For Ios
  46. Hacker Tools Github
  47. Pentest Tools Windows
  48. Top Pentest Tools
  49. Hacking Tools Name
  50. Install Pentest Tools Ubuntu
  51. Hacker Tools
  52. Hack Tools Mac
  53. Hack Tools Pc
  54. Hacking Tools Kit
  55. Usb Pentest Tools
  56. Hacking Tools
  57. Hacking Tools Github
  58. Nsa Hacker Tools
  59. Hackers Toolbox
  60. Hacking Tools Name
  61. Pentest Tools For Android
  62. Install Pentest Tools Ubuntu
  63. Pentest Automation Tools
  64. Hacking Tools 2019
  65. Hacking Tools And Software
  66. Pentest Tools Open Source
  67. Hack Rom Tools
  68. What Is Hacking Tools
  69. Hack Tools Pc
  70. Hacking Tools Kit
  71. Easy Hack Tools
  72. Hacker Tools For Windows
  73. Hacking Apps
  74. Hack Tools
  75. Hacker Tools 2020
  76. Usb Pentest Tools
  77. Hacking Tools 2019
  78. Tools 4 Hack
  79. Hacker Tools For Pc
  80. Hack Tools For Ubuntu
  81. Hacking Tools For Windows
  82. Pentest Recon Tools
  83. Hack And Tools
  84. Hacking Tools Usb
  85. Hacker Tools Online
  86. Pentest Tools For Ubuntu
  87. Free Pentest Tools For Windows
  88. Pentest Tools For Mac
  89. Free Pentest Tools For Windows
  90. Growth Hacker Tools
  91. Pentest Tools Website Vulnerability
  92. Hacking Tools For Windows
  93. Termux Hacking Tools 2019
  94. Hack Tools For Pc
  95. Hacking Tools For Kali Linux
  96. Kik Hack Tools
  97. Hacker Tools 2019
  98. Pentest Tools Bluekeep
  99. Best Hacking Tools 2019
  100. Blackhat Hacker Tools
  101. Hacker Tools For Ios
  102. Hacker Tools For Mac
  103. Github Hacking Tools
  104. Pentest Tools Download
  105. Pentest Tools For Android
  106. New Hacker Tools
  107. Hacking Tools For Games
  108. Hack Tools For Ubuntu
  109. Hacking Tools For Games
  110. Hacker Tools For Mac
  111. Hacker Tools 2020
  112. Black Hat Hacker Tools
  113. Pentest Tools Url Fuzzer
  114. Hacking App
  115. Hack App
  116. Pentest Tools Alternative
  117. Hacker Tools For Mac
  118. Hacker Tool Kit
  119. Hacking Tools Mac
  120. Pentest Tools Nmap
  121. Pentest Tools Github
  122. Pentest Tools List
  123. New Hacker Tools
  124. Hacker Hardware Tools
  125. Hacker Tools Hardware
  126. Hacker Tools For Ios
  127. Hack Rom Tools
  128. Physical Pentest Tools
  129. Hacking Tools Github
  130. Hack Tools 2019
  131. Hacker
  132. Tools 4 Hack
  133. Pentest Tools
  134. Wifi Hacker Tools For Windows
  135. Pentest Automation Tools
  136. Hack Tools
  137. Pentest Tools Tcp Port Scanner
  138. Hacker Tools For Pc
  139. Nsa Hack Tools Download
  140. Hacks And Tools
  141. Ethical Hacker Tools
  142. Hacking Tools Pc
Posted by at

Ophcrack


" Ophcrack is an open source (GPL license) program that cracks Windows LM hashes using rainbow tables. The program includes the ability to import the hashes from a variety of formats, including dumping directly from the SAM files of Windows. There is also a Live CD version which automates the retrieval, decryption, and cracking of passwords from a Windows system. Rainbow tables for LM hashes of alphanumeric passwords are provided for free by the developers. These tables can crack 99.9% of alphanumeric passwords of up to 14 characters in usually a few seconds, and at most a few minutes. Larger rainbow tables (for LM hashes of passwords with all printable characters, including symbols and space) are available for purchase from Objectif Securité. Starting with version 2.3, Ophcrack also cracks NT hashes. This is necessary if generation of the LM hash is disabled (this is default on Windows Vista), or if the password is longer than 14 characters (in which case the LM hash is not stored)." read more...

Website: http://ophcrack.sourceforge.net

Related articles
Posted by at

Aug 29, 2020

DMitry: Deepmagic Information Gathering Tool


"DMitry (Deepmagic Information Gathering Tool) is a UNIX/(GNU)Linux Command Line Application coded in C. DMitry has the ability to gather as much information as possible about a host. Base functionality is able to gather possible subdomains, email addresses, uptime information, tcp port scan, whois lookups, and more." read more...


Download: http://packetstormsecurity.org/UNIX/misc/DMitry-1.2a.tar.gz

Related links


  1. Pentest Tools Online
  2. Hacker Tools Mac
  3. Hacker Tools Mac
  4. Blackhat Hacker Tools
  5. Pentest Tools Github
  6. Tools For Hacker
  7. Hack Tools For Games
  8. Hacker Tools Software
  9. Hack Tools 2019
  10. Hacking Tools Free Download
  11. Wifi Hacker Tools For Windows
  12. Hacker Tools Github
  13. Hacker Tools For Windows
  14. Pentest Tools For Ubuntu
  15. Hacker Tools Online
  16. Hacker Tools For Pc
  17. Hacker Tool Kit
  18. Tools 4 Hack
  19. Wifi Hacker Tools For Windows
  20. Hack Tools For Games
  21. Wifi Hacker Tools For Windows
  22. Hacking Tools Usb
  23. Hacking Tools For Windows
  24. Pentest Tools Url Fuzzer
  25. Hacker Tools Apk Download
  26. Pentest Tools Website Vulnerability
  27. Pentest Box Tools Download
  28. Game Hacking
  29. Growth Hacker Tools
  30. Hacking Tools Github
  31. Hackers Toolbox
  32. Pentest Tools Windows
  33. Hacking Tools 2019
  34. Tools Used For Hacking
  35. Game Hacking
  36. World No 1 Hacker Software
  37. Hak5 Tools
  38. Hack Tool Apk
  39. Hack Tools
  40. Pentest Tools Open Source
  41. Hacker Tools Apk
  42. Pentest Box Tools Download
  43. Hack Tools For Windows
  44. Pentest Tools Website Vulnerability
  45. Hack Tools Github
  46. Hacking Tools For Pc
  47. Hacker Tools 2020
  48. Pentest Tools Subdomain
  49. Hacking Tools For Games
  50. Hack Tools For Mac
  51. Hacking Tools For Mac
  52. Hacker Tools Linux
  53. Hacking Tools 2019
  54. Pentest Tools Website Vulnerability
  55. Hacking Tools Free Download
  56. Hack Tools
  57. Termux Hacking Tools 2019
  58. Hacker Tools Hardware
  59. Hackers Toolbox
  60. Beginner Hacker Tools
  61. Hacker Tools For Ios
  62. Pentest Tools Subdomain
  63. Pentest Tools For Ubuntu
  64. Hacking Tools
  65. Hack Tools For Games
  66. Best Hacking Tools 2020
  67. Underground Hacker Sites
  68. Nsa Hack Tools
  69. Hacker Tools For Windows
  70. Hacker Tools Software
  71. Hacking Tools Mac
  72. Hacker Security Tools
  73. Hacker Tools For Windows
  74. Hacker Tools Mac
  75. Hack Rom Tools
  76. Hacking Tools 2019
  77. Pentest Tools For Android
  78. Hacker Tools Linux
  79. Hackers Toolbox
  80. New Hacker Tools
  81. Computer Hacker
  82. Hack And Tools
  83. Hacking Tools Kit
  84. Hack Apps
  85. Pentest Tools Open Source
  86. Hacking Tools Download
  87. Hacking Tools 2020
  88. Pentest Tools Website Vulnerability
  89. Pentest Tools Tcp Port Scanner
  90. Hacker Tools For Mac
  91. Hak5 Tools
  92. Hacker Tools Linux
  93. Kik Hack Tools
  94. Pentest Tools Subdomain
  95. Pentest Tools Linux
  96. Hack Tools Pc
  97. Hacking Tools Kit
  98. Hacks And Tools
  99. Pentest Tools
  100. Hacking Apps
  101. Hacking Tools Github
  102. Pentest Automation Tools
  103. Hacking Tools For Pc
  104. Nsa Hack Tools
  105. Hacking Tools For Mac
  106. Hacker Tools Hardware
  107. What Are Hacking Tools
  108. Pentest Tools Bluekeep
  109. Hacker Tools Hardware
  110. How To Hack
  111. Physical Pentest Tools
  112. Hacker Hardware Tools
  113. Hack Tools For Mac
  114. Pentest Tools For Mac
  115. Pentest Tools Online
  116. Hacking Tools Online
  117. Pentest Tools Bluekeep
Posted by at

BeEF: Browser Exploitation Framework


"BeEF is the browser exploitation framework. A professional tool to demonstrate the real-time impact of XSS browser vulnerabilities. Development has focused on creating a modular structure making new module development a trivial process with the intelligence residing within BeEF. Current modules include the first public Inter-protocol Exploit, a traditional browser overflow exploit, port scanning, keylogging, clipboard theft and more." read more...


Website: http://www.bindshell.net/tools/beef


More information
Posted by at
Subscribe to: Posts (Atom)