z0rs

name: Recon

on:
  push:
    branches: [master]

jobs:
  scan-and-deploy:
    runs-on: ubuntu-latest
    steps:

z0rs

(async function () {
    const delay = ms => new Promise(resolve => setTimeout(resolve, ms));

    async function scrollToLoadMore() {
        console.log("Scrolling to load more replies...");
        window.scrollTo(0, document.body.scrollHeight); // Scroll ke bawah
        await delay(2000);
    }

z0rs

package main

import (
	"bufio"
	"crypto/tls"
	"fmt"
	"net/http"
	"net/url"
	"os"

z0rs

Incident Summary

This report outlines the compromise of a WordPress server exploited through a vulnerable plugin by a threat actor. The attack, simulated in HackTheBox's Sherlock: Ultimatum challenge, targeted a known vulnerability in the Ultimate Member plugin, enabling the attacker to create a backdoor admin account and gain full control over the server. This detailed report examines the attack timeline, indicators of compromise (IoCs), and post-exploitation activities.

---

1. Objective

The objective of this investigation was to analyze the compromise of a WordPress server suspected of being attacked via a vulnerable plugin. The aim was to identify the exploit, document the attacker's methods, and gather actionable intelligence for remediation.

z0rs

const deleteTweetsBetweenDates = async (startDate, endDate) => {
  const processedButtons = new Set();
  const delay = (ms) => new Promise(resolve => setTimeout(resolve, ms));

  console.log("Script started");

  while (true) {
    console.log("Looking for tweets...");

    const deleteButtons = Array.from(document.querySelectorAll('[data-testid="caret"]'))

z0rs

Penetration Testing Report for Target System 192.168.8.4 - August 2024

Date: August 13, 2024
Pentester: Eno Leriand

---

Table of Contents

1. Report Overview

• 1.1 Executive Summary

z0rs

iRemoval Pro adalah salah satu alat yang digunakan untuk melakukan bypass Activation Lock dan mendapatkan akses penuh ke perangkat iOS. Cara kerja alat ini biasanya melibatkan serangkaian langkah teknis yang memanfaatkan kerentanan dalam sistem iOS untuk menghapus atau memodifikasi file tertentu yang terkait dengan Activation Lock.

Cara Kerja iRemoval Pro

1. Jailbreak Perangkat:

   • Langkah pertama adalah melakukan jailbreak pada perangkat menggunakan tools seperti checkra1n. Jailbreak memberikan akses root ke file sistem iOS.

2. Modifikasi File Sistem:

   • Setelah jailbreak, iRemoval Pro menggunakan akses root untuk mencari dan memodifikasi file-file tertentu yang mengendalikan Activation Lock.

z0rs

Dalam kasus ini, interface yang aktif adalah wlp2s0 dengan IP 192.168.8.2(ip addr) dan gateway 192.168.8.1 (ip route show).

Step 1: Install Tools

Pastikan arpspoof, sslsplit, dan dsniff. Ini biasanya tersedia di Arch Linux.

sudo pacman -S dsniff sslsplit

Step 2: ARP Spoofing

z0rs

#!/bin/bash

# Variables
HOSTAPD_CONF="/etc/hostapd/hostapd.conf"
DNSMASQ_CONF="/etc/dnsmasq.conf"
HOTSPOT_IP="192.168.20.1"
DHCP_RANGE_START="192.168.20.10"
DHCP_RANGE_END="192.168.20.50"

z0rs

3. Man-in-the-Middle (MITM) Attack

Tools: ettercap, mitmproxy, Wireshark

Langkah-langkah:

A. ARP Spoofing dengan Ettercap

1. Install Ettercap:

   sudo apt-get install ettercap-graphical