lunes, 13 de abril de 2020

DOWNLOAD XSSTRIKE – ADVANCED XSS EXPLOITATION SUITE

XSSTRIKE – ADVANCED XSS EXPLOITATION SUITE

XSStrike is really advanced XSS exploitation and detection suite, which contains a very powerful XSS fuzzer and provides no false positive results using fuzzy matching. XSStrike is the first XSS scanner that generates its own payloads. Download xsstrike and test it out.
It also has built in an artificial intelligent enough to detect and break out of various contexts.

FEATURES:

  • Powerful Fuzzing Engine
  • Context Breaking Intelligence
  • AI Payload Generation
  • GET & POST Methods Support
  • Cookie Support
  • WAF Fingerprinting
  • Handcrafted Payloads to Filter and WAF Evasion
  • Hidden Parameter Discovery
  • Accurate Results

DOWNLOAD XSSTRIKE – ADVANCED XSS EXPLOITATION SUITE

Click here to download xsstrike.

Related word


Hacking Freemium Games - The Evolution Of PC Game Cheating

This post is going to be a rather strange post compared to previous ones. But bear with me, in the middle of the post you will see why this post fits the IT security topic.

I'm also terribly sorry for not posting recently, but I was busy with my SPSE and SLAE certification. Both are recommended for Python and Assembly noobs like me. But back to this post.

A little bit of history

Cheating in games started as help for game testers. By using invincibility or infinite ammo testers were able to test the game quicker, which meant less money spent on testing. I personally use cheat codes in games, depending on my mood. Sometimes it feels good to slash all the opponents while I'm invincible, sometimes it is more fun to play the game without cheats. One can argue whether cheating in games is OK or not, but I believe it depends, there is no black or white. But one thing is for sure, it is part of the gaming industry. There is huge demand for cheats. There were even cheat books printed on paper...


The different types of cheats (on PC)

There are different types of cheats in PC gaming. Following is a noncomplete list of these cheats:

Cheat codes

The good old IDDQD type of cheats. These are left in the game by the developers intentionally. Nothing interesting here.

Edit memory

This is my favorite. I will talk about this at the end of the post. Whenever a user launches a new program, the program's whole memory is accessible (read/write) to every other program launched by the user. And since the memory stores the current game state (health, ammo, armor, etc.), these values can be changed easily. In the good old times, there were POKE commands to do this cheats, and the memory address to write into was published by people who found where the game stores the most critical states about the game.

Code injection

This is like patching the game code. For example, one can change the "DEC (pointer to your current health)" instruction with NOP (do nothing), thus becoming invincible. In multi-player cheats, there is the aimbot to help you aim at enemies, wallhack to see through the wall, increase hitbox of the enemy for smoother hit, or in MMORPGs, one can write macros to collect items while the player is not online. I would say the so-called "trainers" more or less fit into this category and the previous one.

Saved game editor

The first time a kid meets a hex-editor (just like the co-author of this blog did with SIM City when he was 10 years old - David). It can teach a lot about file structures, the hexadecimal numeral system, etc. Fun times. 

Hacking game server

Not very common, but even more fun. Warning: endless trolling possibilities in multi-player games ahead :) How to hack a game server? Well, I think this might deserve another full blog post ...

Network traffic hacking

One last necessary type of cheating is to modify network traffic between the client and the game server. AFAIK SSL is not universal in gaming, so stunnel is not needed for this hack, but ettercap can help in changing the communication.

Why cheating becomes more critical (and challenging)?

Now in the age of in-app-payments, the game creators are no longer thinking about cheats as funny things but something to be destroyed to the ground. Because cheating decreases its revenue. Or not. At least they think it does. To quote Wikipedia here, "cheating in such games is nonetheless a legal grey area because there are no laws against modifying software which is already owned, as detailed in the Digital Millennium Copyright Act." 

A lot of online games include anti-cheating components like PunkBuster, nProtect GameGuard, or Valve Anti-Cheat. This whole cheating/anti-cheating industry is the same as the virus/anti-virus industry. A cat and mouse game.

Freemium games

If you have not played with "freemium" games, you should watch South Park season 18, episode 6. - "Freemium Isn't Free." If you did play with freemium games, you definitely have to watch it :) There are many problems with freemium games. It is free to install, free to play. The first 3-4 hours might be fun to play. But after that, it turns out it is impossible to advance in the game without paying money for it. And by spending cash, I mean spending a LOT! Let's have a look at today's example, an arcade racing video game.


For 99.99 USD, you can get 3 000 000 credit. For almost double the price of a new PC game, you can get these credits. In this particular game, I estimate one have to play ~6-24 hours constantly to get this amount of credit. But by playing ~6 hours, I mean 6 hours without progress in the game! Kind of boring. And what do you get from 3 000 000 credit? You can buy one of the most expensive cars, but can't tune them fully. You have to play more (without progress) or buy more. But guess what, there are more cars you can't buy by only playing the game. Those are only available via in-app-purchase.


Even though the player has 58 765 533 credits, it is not possible to buy this car. Only available through real money.


So, what are your possibilities? You are either Richie Rich, and can afford the money to buy these. Or you can be insane, and try to play the game without in-app-purchase. Or give up the game and try another freemium ... Or, you can try to hack the game!

Hack all the freemium games!

Although I was not playing this racing game from day one, I was able to witness the evolution of the cheats against this game. The cheats which worked in one day was not working one month later. The game is continuously updated to defeat the newly published cheats.

Noob start

So, I want to hack this game, what is the first thing a noob like me does? Bing it! Google it! 
From the first page result, let's check this tool:


While trying to download that, I just have to give my email address to spammers, or my mobile number will be subscribed to premium rate text messages. What fun.


Another "cheat" program will install malware/adware on your computer. Never ever try these programs. They are fake 99% of the time and after installing those you will have another problem, not just how to hack freemium games.

Beginners start - Cheat engine

When I first heard about hacking games in memory, I visualized hours of OllyDBG/ImmunityDBG/(insert your favorite Windows debugger here). It turned out, there are some specialized tools to help you with cheating the game. No assembly knowledge required. My favourite tool is CheatEngine. I highly recommend to download it and spend 10 minutes to get past the built-in tutorial levels to get a feeling about this tool. It's super duper awesome.



When I first tried to hack this game myself, I scanned the memory for my actual credit and tried to change that, no luck. Keep reading, you will see what happened.

The second cheat I tried with cheat engine was something like this
  1. Start the game, play the first level, and check how many credits is paid for winning the race. Pro tip: use dual display for full-screen game cheating.
  2. Restart the same level, attach Cheat Engine to the game's process
  3. Scan the memory for the same value at the beginning of the race
  4. Scan the memory for the same value at the end of the game. The intersect of the first and second scan includes the real value where the credit is stored for winning the race.
  5. Change the values (both the real one and some false positives) to something big
  6. Watch the game to crash
  7. Be amazed at the money you received
Nowadays, most of the cheats on YouTube does not work. Except for these kind of cheats. I don't want to recreate that tutorial, so you should watch it first then come back.



Are you back? Great. Do you have any idea what have you just seen? No? Well, in this case, don't try this at home. Copy-pasting assembly code from random internet posts and running on your computer is always a bad idea. It is precisely as risky as downloading free programs from random internet sites.

Although I have not seen people trolling others with this cheat engine type of shellcode, I think the time will come when these will be turned into something terrible. These shellcodes might work, or might harm your computer. The good news is, we can have a look at the code and analyze it. 

When you open CheatEngine and try to define a new custom type, you are greeted with a skeleton assembly code. I don't want to detail what all the skeleton code does, let's just focus on the difference between the skeleton code and the code used in the video. This is the "decrypt function":

xor eax, 0baadf00d
rol eax, 0e

What does it mean? The actual credit is encrypted in memory. If you want to scan it in memory, you won't be able to find it. But! The encryption is rotating the value to the right (ROR) with 0xE (14 in decimal), and after that, it is XOR-ed with 0xbaadf00d. Decrypting it is the inverse of the functions in reverse order (in this particular case, the order does not matter, but that's not the point). The inverse function of XOR is XOR, and the inverse function of ROR (rotate right) is ROL (rotate left). Now that we analyzed the assembly code, we can be sure that it is safe to execute. Just follow the video and see your coins falling from the sky. For free. In a freemium game. Have fun!

Encrypt memory - applications at financial institutions

Another exciting thing is that I don't recall any thick client applications in the financial industry encrypting the values in memory. And I agree, there are more significant problems with thick client applications than not encrypting the essential values in memory. But still, some thick client applications are regularly updated, maintained. Maybe it is a good idea to encrypt the values in memory. It will make attackers' life harder. Not impossible, but harder. Perhaps the developers of these applications should learn from the gaming industry (or from malware developers for that matter) because it is a shame that an arcade racing game or an FPS is protected better than an application responsible for transacting millions of dollars. Just think about the RAM scraping malware stealing millions of credit card data ...

Moral of the story

Cheating is part of the gaming history, and the freemium games are trying to take away the cheats from the gamers because they want money. Thanks to CheatEngine and some clever hacks, these programs can be still beaten. And guess what, there is CheatEngine for Android - although it did not work for me on the latest Android. And sometimes, hacking all kinds of applications can be more comfortable with CheatEngine, compared to traditional debuggers.

Also, always check the code before executing it! And when you find something cool, publish it, so everyone could enjoy the games!


Related news


SANS SEC575 Mentor Class

Hi everyone,

Great news! I will be mentoring SANS 575: Mobile Device Security and Ethical Hacking in Luxembourg on Thursday evenings 18:00-20:00, starting from January 15, 2015.

Mentor classes are special, 10 week-format SANS classroom sessions that give the students time to absorb and master the same material with the guidance of a trained security professional.

Students receive all the same course materials used at SANS conferences and study at a more leisurely pace, so students will have:
  • Hardcopy set of SANS course books
  • Mentor Program study materials
  • Weekly Mentor led sessions
Prior to the weekly Mentor-led classroom sessions, students study SANS course material at their own pace. Each week, students meet with other professionals in their hometown area and the SANS mentor, who leads topical discussions pointing out the most salient features of the weekly material studied, provides hands-on demonstrations, and answer questions. The Mentor's goal is to help student's grasp the more difficult material, master the exercises, demonstrate the tools and prepare for GIAC certification.

On SANS SEC575, we will learn about mobile device infrastructures, policies and management, we will see the security models of the different platforms, like the data storage and file system architecture. We will also see how to unlock, root and jailbreak mobile devices in order to prepare them for data extraction and further testing. In the second half of the course, we will learn how to perform static and dynamic mobile application analysis, the usage of automated application analysis tools and how to manipulate application behavior. Last but not least, we will see how to perform mobile penetration testing that includes fingerprinting mobile devices, wireless network probing and scanning, attacking wireless infrastructures, using network manipulation attacks and attacks against mobile applications and back-end applications.

For more info, here is the link for the class: http://www.sans.org/mentor/class/sec575-luxembourg-15jan2015-david-szili
My Mentor bio: http://www.sans.org/mentor/bios#david-szili 

Information on the class, special discounts and applying for the class: szili_(dot)_david_(at)_hotmail_(dot)_com

Additional info can be also found at: https://www.sans.org/mentor
Some special price is also available for this course. A few examples: http://www.sans.org/mentor/specials

Best regards,
David

Such low price. Very SANS. Much learning. Wow!

Continue reading


  1. Hacker Tools Mac
  2. Hack Tools 2019
  3. Pentest Tools Subdomain
  4. Termux Hacking Tools 2019
  5. Hack Tools Pc
  6. Pentest Tools For Android
  7. Hacking Apps
  8. Pentest Tools Nmap
  9. Hack And Tools
  10. Nsa Hack Tools
  11. Hacker Tools Apk Download
  12. Nsa Hack Tools Download
  13. Hacker Tools Hardware
  14. Hacker Tools Free Download
  15. Free Pentest Tools For Windows
  16. Hacker Hardware Tools
  17. Pentest Tools Tcp Port Scanner
  18. Pentest Tools Android
  19. Hacking Tools Download
  20. Pentest Tools Linux
  21. How To Install Pentest Tools In Ubuntu
  22. Hacking Tools Kit
  23. Hack Tools 2019
  24. Hacker Tools Apk
  25. Install Pentest Tools Ubuntu
  26. Tools 4 Hack

miércoles, 8 de abril de 2020

Harlequins: Not Sure If Good

Harlequins are decent at best.

I'm just going to come out and say it:  I don't think Harlequins are looking too good from a competitive standpoint.  With the book firmly in hand now, I don't see quite as much value from them compared to Dark Eldar when the army first got teased.

Before I completely put them aside, just note that I think there are a few things that Harlequins bring to the table.  These are few, they're niche, and they're certainly conditional, but I think Harlequins can have some interesting options that no one else can really pull off.  For example, when you look at some of the things that Soaring Spite can do with their Masque Form, you'll know that the army will be able to move 16"+6" and still shoot with 6" Fusion Pistols without penalty for 28" threat range.  This awesomeness simply cannot be ignored.  Similarly, if you take Faolchu's Talon for your Soaring Spite Warlord, you can move an additional 6" in your movement, and when you blow up, nothing happens.  No explosion, no models dying, you just roll out of your drive-by mobile and find another joyride to blow people up in.  This is great and all, but it's also very niche.  Hell, even their big fancy Webway Gate wants me to drop multiple Talos or a fat unit of Grots out of them instead.

So here's where I have problems with the army:  They're melee Horrors.  They're melee-based units that cost a ton but still have the same statline as those little pink dudes.  You have an army of 1W T3 4++ melee Horrors that desperately want to be relevant in a meta filled with resilience and anti-alpha.  Everyone and their mother knows that T3 and 4++ with a single wound just get absolutely murdered by almost any type of shooting and even below-average melee fillers that play much better in attrition simply because of the points.  Harlequins are great if you think that killing MEQ with 3+ for almost 30 points is great.  You know what else is 30 points?  A Grot, and a Grot comes with so much more resilience because a single Grotesque can be T6 with 4 wounds and 4++ with FNP.  Speaking of 4W, this is actually much bigger than people realize.  It takes 2 D2 shots to kill, out of kill scope of D3 weapons, and makes D6 weapons very nervous.  It's pretty much the sweetest spot for being infuriating at 30ppm.  When it comes to bashing in a Marine's face, a Grot does just as much damage but can stay alive much longer vs. almost any kind of shooting and any kind of melee.  In fact, Harlequin melee stopped being relevant ever since stronger alternatives came out:  Genestealers, Grotesques, Dawneagle Shield-Captains, the list goes on and on.  Hell, even Wyches are better for the points if you want a melee option.  Marines are dead easy to kill with any competitive army worth their salt because single-wound that cost a lot are just not cost-effective in today's meta.  Attrition matters and Harlequins play the game the worst out of all the units in the game.  Every other army that wants to be in melee does it better for the cost.  For me, since I play Dark Eldar in a very shooty manner, why bother being in melee if you can shoot them to death from far away?  My T3 5+ AS with an FNP Warrior that cost 6 points is looking a lot more cost-effective next to a 28-point Harlequin with a Fusion Pistol and an Embrace.  You are essentially paying a premium for a luxury that's not needed.

Arguably the best Form in the book.

This brings me to match-up.  In any given competitive setting, you're going to be looking at your local meta or even the greater meta (GTs or national events) and comparing yourself to all the other armies out there.  You have to factor in the fact that Harlequins are not cheap, not in the slightest.  Their unit choices are limited already, but what you pay for is a unit that's not very durable but has a ton of bad match-ups.  If you run into a Tyranid list with a lot of Genestealers for example, you know for the points that you're going to fight an attrition battle that you're not going to like.  If you're fighting a lot of Gaunts, forget about it because you already lost the points game here (anything with Fearless sucks).  God forbid you to run into a unit of Wyches, or even worse, a unit of Grots.  With Meat Mountain being so popular these days, just running into a unit that you're not going to be able to really hurt while still taking assloads of damage in return is going to suck.  The worst part is when you start thinking about this from a points perspective.  Having Harlequins killing cheap fodder units is a waste of time and it's only going to get you shot up afterward and killed.  A canny opponent is just going to spread out his line so he sets up kill zones for your units afterward (why Midnight Sorrow might be pretty decent).  IG carparks are going to be super annoying and so are most armies with cheap armor and plentiful shooting.  I feel very confident with my pure Kabal army vs. any army that takes a decent amount of Harlequins for example.  When you bleed expensive models, your firepower and melee threat goes down a ton.  That's one of the reasons why I prayed to the dice gods that GW was going to give the army -1 To Hit all-around.  Alas, this was not to be.  Instead, you have to pay up the ass in CPs and bet on Psychic powers or other instances to keep your basic stuff alive long enough to be relevant.

Harlequins are points-prohibitive.  If you take them, you won't have a lot of anything else.  If you want to run them in any meaningful way, you will take them as a Battalion.  You will already need multiple HQs to get the most of your army like the Shadowseer and Troupe Master, and Troupes just naturally fill in the rest of the core choices.  The difficult part here is getting into a points zone where you can still be relevant and be a threat to the enemy without costing an arm and a leg.  It's not just the points that matter here, it's about being relevant and a threat to the enemy.  What I mean by this is that you need to pack anti-tank in any competitive list as well as being a threat in melee because that's what you're taking Harlequins for.  The army, in general, is bi-polar.  If you want them to be a strong AT threat, you take Fusion Pistols.  If you want them to be a big melee threat, you mix up Caress and Embrace.  The problem is that they both go on the same model and when that model dies, he takes both of those upgrades with him.  Some people argue saying that you can take them stock, or leave specials off them as extra wounds, but why the hell would you do that?  If you're just looking at a few models that can do damage, Wyches can fill that role for much cheaper.  Unfortunately, you have this current situation where both ranged and melee special weapons cost a good deal of points on an already expensive model to begin. This is why the attrition factor sucks so much for this army.  It's not very durable and every model lost feels like chunks out of the army's total strength compared to other armies.  Hell, most would agree with me when I say that Soaring Spite is arguably the best Form right now for Harlequins, but what people talk about but don't consider is how many points a boat filled with Fusion Pistol Troupes really are.  If you want to decrease the cost by removing Fusion Pistols, you lose out on the Form's benefits.  You cut the melee weapons and you're now a glorified Wych.  Grats.  More importantly, for how many points you're spending trying to make this clusterfuck work, you're also taking away points from allies who can possibly perform the same role better.  Case in point, you can buy an entire Black Heart Spearhead for less than 500 points if you just want something to shoot.

Too much, too little.

So what am I getting at here?  It means that if you put a lot of points into Harlequins, you need them to be a decent standalone force.  But if you need them to be standalone, in the fact that you need your points to also equate out to the ability to kill tanks and infantry, then you're simply increasing the cost of each Troupe unit.  Taking a deeper dive:  For 500 points, I can buy a Black Heart Spearhead with 3x Ravagers with Dissies on all of them.  What do Dissies do?  They can pretty much wreck anything because this buys the army 27 BS3+ S5 AP-3 D2 shots that can threaten GEQ, MEQ, multi-wound, single-wound, high-armor, whatever, you name it.  This is just from shooting because you're not counting access to Agents of Vect, Living Muse, Cunning, or FNP on all your vehicles.  You put 500 points into a Harlequin force and what do you get?  You do the math and get back to me with exactly what firepower you have in shooting and in melee and see if the numbers pay off for you.  First, you need to be a certain distance from the enemy to threaten them with AT Fusion Pistols, then you need to be in combat to get the most out of them.  To get in, you have to brave the Overwatch, hope none of your 28 point models die, roll to get in, and then you can really shine.  You have to play much cleaner, much more precise and pray for some good ol' dice rolls because there's a lot that can go wrong.  With Grots, you just push models forward and results happen.  With Ravagers, it's the same thing, but you don't need to commit because you're 36" away from your target.  With Harlequins, it's all risk, and I hate risk.  And so do most competitive players.

You know what else is risky?  Conditional effects.  When you look at Harlequins, almost everything in the army requires you to be within 6", roll something to enable (Veiled Path), cast a psychic power, drop multiple Strategems across multiple phases, or something else.  Most of these things can fail to bad luck, some can be outright countered (Vect, Denied), and others can be counter-played sufficiently to really take the wind out of your sails.  The best counter to melee-oriented armies is proper spacing and understanding threat range and averages.  A good player with solid understanding of melee threat range and bubble-wraps will be murderous to Harlequins.  In general, the army is almost too much fluff and not enough consistency when it comes to a lot of their army mechanics and that is a huge risk to competitive players looking to win a GT.  The variables are already great, with matchups and different strength of schedules and players, so you don't need more randomness.  It's almost like you're playing Orks, but you're trying to build a competitive army so you took Eldar or Dark Eldar allies and they're all looking at you like WTF, you took up half of my army points?  A common theme within competitive armies is that they're consistent in their performance.  Just look at some of the discussions around Harlequins being a competitive threat.  It always starts with:  Oh first you take this, then you do this, then you cast this, then you play this Strategem, and then you shoot and lel you embark back in your transport!  Yeah, that's nice, but I play Prophets of Flesh and my entire army has 4++.  That's what consistency looks like and that's why it wins games.  That's why Meat Mountain is doing so much work right now.  That is until people figure out how to beat it.

There is a mild saving grace for the army though, is that they're Battle Brothers with both Dark Eldar and Eldar.  I would say that both of these armies are very competitive with a multitude of unit options.  Eldar arguably has the best psykers (Doom, Jinx) in the game, Shining Spears, Dark Reapers, Wave Serpents, and both the Hemlock and Crimson Hunter Exarch are insane.  Dark Eldar can run Meat Mountain down your throat and cost-effective Kabal units, Ravager Spearheads, Agents of Vect, and CP manipulation up the wazoo.  There is a lot of good stuff in both of these armies, but ultimately it comes down to the points question all over again.  Is Harlequins competitive enough to share the same points as these armies here if you're trying to build competitive?  Only time will tell.  Personally, I think the best Harlequin lists will be the ones mixed with either Eldar or Dark Eldar.  Cegorach knows that I've been trying to make it work.

I really hope I made some solid points here.  Don't get me wrong, I own a ton of the little fuckers and I love them to death, but they're definitely more of a fluffy choice than a competitive choice for me.  There are just too many good unit choices out there that makes army building with them difficult.  I know, I've been trying to design a good army list with Harlequins/DE and/or Eldar for the last couple of days and it's mind-boggling.  When I have something good, I'll show it off.

domingo, 5 de abril de 2020

ICO Covid-19

ICO Covid-19
 

ICO Covid-19

La línea de avales estatales para financiación para Pymes afectadas por la crisis sanitaria del Covid-19 ya han liberado sus fondos.

¿Para qué?

Atender las necesidades de financiación de empresas y autónomos para:

- Pago de salarios.

- Facturas.

- Necesidades de circulante.

- Necesidades de liquidez por pago de obligaciones financieras y tributarias.

¿Importe máximo?

Sin importe máximo pero determinadas por el impacto de la actual crisis sanitaria y económica en la operativa de cada empresa.

¿Tipo de operaciones?

Préstamos, reestructuraciones y circulante.

Si te interesa, podemos ayudarte a gestionar la liquidez que necesitas para sobrevivir a esta crisis.

Haz clic aquí para que te llamemos.

Un saludo,

Carina

miércoles, 1 de abril de 2020

Liquidez para Pymes

Financiación de liquidez
 

En estos momentos más que nunca, muchos clientes nos plantean problemas de tesorería derivados de la situación actual. Incluso las empresas que siguen trabajando tienen que ser más flexibles en sus plazos de cobro a clientes y pago a proveedores.

La primera reacción de muchos empresarios para estos problemas de circulante es buscar un préstamo, un colchón de liquidez que les dé mayor seguridad a la hora de operar.

Teniendo en cuenta las líneas de avales del gobierno, los préstamos son una buena opción, pero no son la única.

Otra buena opción para gestionar el circulante de tu empresa son el factoring y el confirming.

Con el factoring puedes reducir tus plazos de cobro a clientes y minimizar así las tensiones de tesorería derivadas de tener que aguantar durante 30, 60 o 90 días (si no más) las facturas emitidas hasta cobrarlas.

Con el confirming y el confirming pronto pago puedes ofrecer a tu proveedor la opción de cobrar antes sin que se resienta tu tesorería.

Estas son las líneas que más están favoreciendo las entidades a la hora de financiar el circulante de las Pymes.

Si quieres que te ayudemos a sobrevivir a esta crisis...

Haz clic aquí para que te llamemos.

Un saludo,

Alba