It's python so
#cybersecurity
thorn obsidian
yea
safe bear
The Funimation app is a damned black box in terms of figuring out what's actually playing
thorn obsidian
for your case it might be easier to find a debugger with a python API
but not sure, you could write your own thing too
good learning experience
safe bear
Oh that's a good point
Might focus on getting a transparent proxy setup tho
Sniff dat traffix
thorn obsidian
oh yea, that's always fun
i usually start with that since reverse engineering is a pain most of the time
it's easier to get what you want out of the traffic
you could check out burpsuite, ZAP or mitmproxy
personally i use mitmproxy, which has a python API and an easy way to install CAs
safe bear
Yeah
I got it working as a proxy, but realized I need a transparent one
And doing that on Windows seems to be more complicated than just doing it on one of my laptops with Linux
thorn obsidian
ah yea, you can just force everything into it and it will act like one
it's easy on android with the VPN thing
and linux
safe bear
Yes
So hoping I can see what protocol they're using
Like Jesus christ I just need the show, season, episode name, some art, and the current duration
But I don't think the obfuscation is intentional
safe bear
HTTPS
storm yacht
@thorn obsidian because it's against our rules, not because it's hard
thorn obsidian
is it?
what rules?
storm yacht
rule 5 that covers explicitly ToS and policy violations for external services https://pythondiscord.com/about/rules
thorn obsidian
oh ok
storm yacht
sure, and as a general topic memory injection is fine, but we'd rather not have to drag the server as a whole out of any holes dug for pissing off game devs
safe bear
Any sort of Reverse Engineering or hacking has a high likelihood of violating a ToS/EULA/whatever somewhere.
Yes, I agree
Which is why it's a line we dance 😉
Directly hacking a game to add a extension, especially if it's something against the spirit of a game (like a cheat or related modification), is definitely on the wrong side of that
marble dawn
Just use cloudflare
lament roost
if you're just wanting to use it locally, just listen on 127.0.0.1 then theres no way to connect to it from outside your network for your IP to get leaked
cedar pelican
@solid jewel I mean you could use a DDNS
But you can't hide your IP anyways.
Cause you can just ping it
lament roost
You could probably host it on heroku free tier
lament venture
gdude - Yesterday at 17:24
Just use cloudflare
bär - Yesterday at 17:26
wouldn't I need a domain to use cloudflare?```
worn wraith
I am using Selenium for some testing, however I can see that there is an extension called "Chrome Automation Extension", I am not a fan of extensions as they have way too broad access to my data, can I remove this extension and still use Selenium?
verbal hearth
I think in that case you can use it with FF
worn wraith
I am sorry I dont know what FF means?
thorn obsidian
Firefox
worn wraith
ah, but I wont be able to use it with Chrome?
verbal hearth
I think you need the chrome driver to use it with chrome
worn wraith
hmm
thorn obsidian
thorn obsidian
debian and ubuntu are still on the 2.2.x versions afaik
plus probably some other distros, if you use Arch it should be fine
safe bear
=< 😡
So what's the vulnerability? You run a untrusted video file and bad code executes?
I really dislike when people say "if you care about security stay away from X..."
If you really care about security, stay away from the Internet
high tulip
Is this channel for Security generally, or for Security related things done with python?
fervent patio
i think general security is allowed here, yeah
fervent patio
haha, make sure you check your door 2^32 times before you set off
tight abyss
If it looks like a duck and quacks like a duck, break for it like for a duck.
high tulip
Ok, if general sexurity is allowed, how can i check who tries to connect to my vps? cuz i want to see who tries to hack me xD
is it really ```sh
cat /var/log/auth.log
?
tight abyss
no sexurity 
high tulip
Hahaha xD i've fatfingererd so bad
sry xD
i wont edit that message, this fail is legendary
...hope i dont get banned?
safe bear
😛
safe bear
SSH?
safe bear
There are a few logs I think, honestly don't remember
It's been years since I last cared unfortunately
safe bear
Looks like not by default
But there are ways around that: https://hackernoon.com/how-ive-captured-all-passwords-trying-to-ssh-into-my-server-d26a2a6263ec
Also somewhat unrelated but potentially of interest: https://github.com/foospidy/HoneyPy
high tulip
thx
silent pier
https://twitter.com/ChristoThurston/status/1021696925526122496 And that's why I don't use a quick scan credit card
(Even if it's easy to prevent, and easy to recover from)
lusty flare
the insane part is how slim they are now
they used to be sorta covers that slipped around an existing ATM card slot
now they're little things that slide inside the actual card slot
lusty flare
i always eye up the card slot before using an ATM
the first one you posted i've seen before
super sketchy
i imagine it's impossible to tell if there's one of these in there though
silent pier
Might have like a visible metal piece at the top/bottom i'd assume
like slightly in there
silent pier
Needs to be extracted somehow, unless they use some form of key to extract it
Unless.. it's wireless
Then all hope is lost
lusty flare
i'd assume you'd use a tool to insert / remove it
glad i'm not American though
those fellas are only just getting chip and pin
lusty flare
they use magstripes
:o
which makes card cloning really fucking easy
although they have been shifting towards chip and pin in recent years
because banks don't like fraud i guess
¯_(ツ)_/¯
silent pier
I can't even remember the last time i used one
But i always think about scimming when I do
lusty flare
same
good thing very few of the crooks around here are stupid enough to try pulling it off for an extended period of time
it's more common to see them try and steal the whole fucking ATM
silent pier
lol
simple orchid
@silent pier "Unless.. it's wireless" AIUI wireless ones do exist - using either bluetooth, wifi, or SMS.
silent pier
oof
Imma just not use my card anymore if that's alright
"hey can i wire the money to you for my groceries?... no?.. I'll just eat something of the street, that's fine!"
lusty flare
just put a large boulder in your front garden
then show them pictures of it
they'll believe you're good for it
(That was a legit form of currency on an island somewhere btw)
simple orchid
really they need to get rid of the magnetic stripe - even going to chip based readers won't stop skimmers from reading the stripe
simple orchid
i get so annoyed when i see brand new machines (like the new AMC theater kiosks from like two years ago) that aren't even physically compatible with chip cards and would have to be redesigned
copper mural
Financial institutions in the US are reluctant to change and aren't fined for not doing so
unlike the literal rest of the world.
Most ATMs to my knowledge are still running on legacy OS (many were xp)
They aren't held liable when they fuck up lives
"You mean our gross negligence caused damage to a bunch of not-rich people? Lol oops"
Look at the Equifax breach
lusty flare
tbh
copper mural
Not a single fucking thing done to those monsters. They even got more contracts from the IRS
lusty flare
Target's breach is a prime example of how Chip and Pin could've prevented massive fraud
copper mural
For literally not upgrading their software after being WARNED of the potential
Exactly.
lusty flare
Loads of ATMs here are still XP Embed, but that's not really a massive problem
I guess the eco system is different in America
Retailers, Banks and card associations would all have to do some rolling out of crap
Retailers and card companys already get into fights over who pays for transaction fees etc
Could you imagine the fight over who pays for the roll out of millions of chip & pin machines?
:D
copper mural
In either case, I'm tired of paying for their negligence lol
lusty flare
We have a national card association in the UK
Basically they set policy and everyone who's part of it has to follow
winged rose
Is there any way to securely store users passwords on their ends?
I'm making a launcher for a game and want to have a save password feature so people don't have to input their password every time they log in
simple orchid
not really
i mean, all the usual ways of doing it, like password managers etc require them to enter a password
winged rose
Yea
simple orchid
well
winged rose
I was hoping that windows and mac may have had some sort of feature that would be similar to Android and iOS's fingerprint sensors
simple orchid
there's OS encryption on some systems which can be set up to just require the user to be logged in and not have their password reset by an admin
winged rose
Yea something like that, I was thinking of
Where the encryption is on and OS level, and I don't have to deal with it
simple orchid
or using the macOS keychain
it may still prompt them for a password but it'd be their OS login password
winged rose
Mhm
lament roost
Well by not making them use their password you’re already kind of forgoing a bit of security. You could store a salted hash and just compare that to the db. It’s probably not the most ideal thing though
But blizzard has managed to do it somehow with their Battle.net launcher. Id look into that probably and see if you could find a way
winged rose
Hmm
The launcher I'm making is 3rd party
So it needs to send the request to the server using a login API
Its a good idea but not possible in my scenario
tight abyss
On Ubuntu and probably most other Linux desktop systems, you can store secrets in the user's keyring, which is encrypted on disk and gets automatically unlocked when the user logs in to their system account.
Probably the same thing as Random said about Mac keychain
e.g. Chrome uses that for passwords too by default
or Wifi passwords
winged rose
Yea thats what I was thinking of using
Though, the primary platform I'm using is windows
But i could support it on those platforms
lament roost
you could also encrypt the passwords on their own system on windows using like RSA or Bcrypt or something, but its kinda risky I suppose
winged rose
Looks like Windows does have some encryption tools
But they look like a PITA
There is some Encrypted File System, which seems to be outdated
And then there are some functions that work for windows 7 onward
Similar to the Keychains in MacOS and Linux
Also looks like they're very low-level and no one has made a library for python as of right now
lament roost
You could write it using the api calls
winged rose
I could
I don't know C though
Im sure its not that hard to just route the calls though
lament roost
there's a python API for making system calls
winged rose
Didn't know that
lament roost
its pywin32 i believe
tawdry iris
any thoughts on the T2 chip on the macbook ?
The T2 chip has a secure enclave processor, which is used to manage security keys. It also features a dedicated encryption engine for the SSD.
thorn obsidian
https://misc0110.net/web/files/netspectre.pdf
netspectre: read arbitrary memory over the network
thorn obsidian
any thoughts about "Violent Python: A Cookbook for Hackers, Forensic Analysts, ...", is it worth it to read it in 2018?
alternatives?
thorn obsidian
i know KnownError (one of our mods) recommended that book
thorn obsidian
@safe bear sup?
safe bear
@thorn obsidian yes, it's still worth reading even now
It's python 2.7 but the techniques and packages should still work with python 3
In fact, I think I did use 3 when I was doing teaching using it, just had to make a few changes
rigid moon
Any "Requests" lib experts?
thorn obsidian
rigid moon
I'm getting this when trying to post to a service (not sure how to format on here sorry)
("bad handshake: Error([('SSL routines', 'ssl3_read_bytes', 'sslv3 alert handshake failure')],)",)
the server, im trying to connect POST to only supports TLS
im trying to force use of TLS 1.1 through the PoolManager but the error still says ssl3?
The code
Also, I can get a response with cURL thru the cmd, or a client like Insomnia, so the certificates are ok, but I just cant figure out whats wrong with requests....
the whole code of the file
I've googled around for days, tried a lot of different approaches, but this sslv3 error is killing me 😦
heres the curl command also if it helps
curl -v --header "Content-Type: application/json" --request POST https://mss.cpc.getswish.net/swish-cpcapi/api/v1/paymentrequests --cert Swish Merchant Test Certificate 1231181189.p12:swish --cert-type p12 --cacert Swish TLS Root CA.pem --tlsv1.1 --data @old kite_data.txt
lusty flare
DEFCON is on next week. 👌
orchid notch
is his lordship gonna go there
lusty flare
no, but i'm gonna watch the shit out of it
safe bear
I'll be there
Being antisocial
Just like half the attendees
And of course, the ever-present feeling of inferiority
This time though I'm definitely going to go hardcore on the IOT and possibly ICS villages
Might bring laptop with straight bare-metal Fedora or possibly Kali
Trying to do shit through a directly mapped interface into a VMware VM works, but it's a fucking pain
lament roost
Gonna bring a laptop running barebones windows 98
safe bear
Why
lament roost
security through age
safe bear
Exploits don't stop working
You should connect that to the DEFCON Open WiFi network and see how fast it gets owned
Though I feel there are some people who do exactly that just for kicks
lament roost
Yeah I mean it would just be for kicks
safe bear
So might end up bringing 3 laptops...
Debating whether to bring old HP with Fedora that's beefy but also big and heavy (and less than optimial battery life)
Or put linux on old Surface Pro 2
Which there's apparently an entire active subreddit dedicated to: https://www.reddit.com/r/SurfaceLinux/
safe bear
You have to make a custom transport adapter
The link has an example, it's pretty straightforward
thorn obsidian
remember to only allow localhost when running stuff on Tor
https://twitter.com/ydklijnsma/status/1025796349541769217
also WPA has a new attack and OpenSSH RSA keys are kinda shit
https://latacora.singles/2018/08/03/the-default-openssh.html
https://twitter.com/hashcat/status/1025786562666213377
ed25519 ftw
rigid moon
@safe bear thanks for the reply, I should have elaborated as I did in my previous questions, if you scroll up just a little bit you'see see the screen and the code
I've tried with adapters, I've tried using urllib3 directly without requests. I've also tried specifying cipher suites as well
and I still can't make a POST to this damned service
using python
tall haven
damn, still stuck on that?
have you tried setting up a new venv maybe?
or using a completely different computer
maybe setting up a vm
just throwing out options
gotta try to narrow down the issue
rigid moon
Yeh 😄 don't have another PC available at the moment
tall haven
you could try a vm
tall haven
are you on windows rn?
if so, may even want to try another os
if it's possible, I can attempt to make a post request with your code tomorrow
on my machine
rigid moon
im on ubuntu 18.04
rigid moon
I'm basically trying to implement third party payment on my website
so i guess its kinda strict when it comes to security
which is good, but im too much of a noob still 😄
tall haven
yeah fair enough
I suspected you wouldnt be able to just send everything over
but making a vm would be equivalent to having me try it
so just do that
rigid moon
i do get a different error now after reinstalling urllib3 and requests
SysCallError(104, 'ECONNRESET')
wasnt able to find anything that helps as it is quite a broad error
but a VM seems like the next logical step so thanks
tall haven
that error seems like a step backwards lol
rigid moon
i guess, what I found out is that it basically just means that the connection was closed at an unexpected time
basically the server said - f*** off
tall haven
could just mean that the connection timed out
rigid moon
it just baffles me how simple it is to call this via cURL, and yet all these libraries, openssl, pyopenssl, urllib3, requests cant do it...
might end up using curl in my code....
tall haven
it's probably not that difficult and you're experiencing some strange error
that or there is some really crucial error in your code
but i wouldnt know
rigid moon
well i've used requests before successfully
but never to a service where i had to have physical cert files and a bundle file on the client computer
so i guess im doing something wrong here
marble dawn
python doesn't use the OS's cert bundle afaik
marble dawn
I don't remember how it works, but don't rely on the OS cert stores
rigid moon
ok so I noticed this now
"If verify is set to a path to a directory, the directory must have been processed using the c_rehash utility supplied with OpenSSL."
i've obviously have not done anything like that to the directory im pointing the parameter to
..
i'll try a new VM anyway before trying anything else, maybe it'll just work straight after that, would not be surprised
venv*
tall haven
well it says directory
you're pointing to a file
or rather you're supplying a path to a file
not to a directory
rigid moon
oh yeh ur right
rigid moon
@marble dawn would you able to recommend a website/book where I could get a good understanding of how certs are used in Linux? I'm quite lost right now
marble dawn
Gotta be honest, it's an area of security I try to avoid
because it really can be a pain
rigid moon
i can see that, I've been trying to read up on it but theres so much stuff I dont get
guess you just learn these type of things over the years
marble dawn
It's a very corporate thing to need
You see it a lot when you're working with Amazon services and projects like Elasticsearch
I dunno what was wrong with RSA keys, but whatever
marble dawn
fervent patio
looks right
fervent patio
huh, just found this. https://medium.com/@grandaddie11/hack-the-first-https-youtu-be-o4-2wss1dn8-dae8301ee71c
fervent patio
and apparently this was that server's response, but it got deleted lmao https://medium.com/discord-bots/minor-security-vulnerability-reported-on-august-4-hacker-who-we-believe-to-be-cory-redmond-20aa9978e513
fervent patio
oh yeah it's an article.
silent pier
lemem get into it then :P
fervent patio
oh, they made another response https://medium.com/discord-bots/minor-security-vulnerability-reported-on-august-4-2e2d92269488
safe bear
@rigid moon iirc you can manually specify the cert paths to use in requests and urllib3
Check the docs, I'm on phone right now unfortunately
Unless of course I'm misunderstanding the issue
silent pier
I dont know who to lean towards in this case
Mostly cause I don't know if this "local change" is true or not
fervent patio
yeah, exactly. they've given no evidence that it's actually been fixed though, so that's why i believe the first story more.
silent pier
Yeah
thorn obsidian
nice security thing for the discord bot
i've broken a few of them and never had someone get that angry
silent pier
Bots involving paying?
thorn obsidian
ye
silent pier
Some people are louder than others ¯_(ツ)_/¯
cedar pelican
@commands.command(name='calc', aliases=['calculate'])
async def calc(self, ctx, *args):
"""A simple command which does calculations.
Examples:
/calc 6 * 4 -- multiply
/calc 6 + 5 -- add
/calc 8 / 2 -- divide
/calc 6 - 4 -- subtract"""
if len(args) > 10:
await ctx.send("That calc is to long!")
test = " ".join(args).split()
for item in range(0, len(test)):
if item % 2 == 0:
pass
else:
if test[item] not in self.operators:
await ctx.send("Nice try :>")
for item in args:
try:
int(item)
except Exception:
if item not in self.operators:
title = f"{item} is not a valid operator or number"
text = "Do another calc with `/help calc`!"
embed = await store.embed(ctx, self.bot, title, text)
await ctx.send(content='', embed=embed)
return
else:
pass
try:
total = eval("".join(args))
except ZeroDivisionError:
await ctx.send(content="Don't try and divide by zero please ;D")
return
Break my code!
cedar pelican
@thorn obsidian edited the new version
orchid notch
All of us using Linux 4.9+ might be interested in this: https://www.kb.cert.org/vuls/id/962459
thorn obsidian
@cedar pelican
cedar pelican
@thorn obsidian it says dont divide by 0 please
cedar pelican
@thorn obsidian what do you mean?
thorn obsidian
You might want to give the full snippet
orchid notch
SyntaxError
SpamError
worthy flame
i just put the whole computer security industry out of buisness
orchid notch
most of it security isnt really about deleting viruses
worthy flame
that was a joke if you didnt know
silent pier
@cedar pelican Did you check for 0 input, or just say "pretty please dont divide by 0"
safe bear
Two days till DEF CON kiddos
silent pier
?
thorn obsidian
thorn obsidian
Twitter
some snapchat source code
https://github.com/DzMohaipa/Source-SCCamera
linux kernel TCP denial of service
https://www.kb.cert.org/vuls/id/962459
https://blog.varonis.com/koadic-lol-malware-meets-python-based-command-and-control-c2-server-part-i/
this is pretty interesting
on another note bugcrowd does some security courses now
https://www.bugcrowd.com/university/
tall haven
keep seeing things that make me glad I chose KeePass
thorn obsidian
i can post some things that would make you wished you used something better i guess
RCE in 2017
they haven't been audited and their code has some clunky old areas
would probably be careful with any of the web integration
also this happened
https://hotforsecurity.bitdefender.com/blog/hacker-demands-nothing-after-infecting-hong-kong-department-of-health-with-ransomware-20187.html
thorn obsidian
i haven't seen much on bitwarden, but it's maintained by a company that looks reputable
personally i just use https://www.passwordstore.org/
marble dawn
I needed the org support, and the TOTP support is pretty nice
tall haven
Interesting
But I'm not worried
Two of the 3 cve's were for keepass 1
the other is for 2 but is just a man in the middle for auto updates
which i dont enable anyway
thorn obsidian
i know the first two are too old, but the CVE with updates is notable since it's networking
there were issues since keepass1 with networking that kinda followed the project
look into their weird HTTP server API thing more, that was full of bugs
tall haven
what thing is that?
thorn obsidian
can't remember exactly, it's some feature they had until recently that allowed applications to interact wiith keepass and request passwords or something
thorn obsidian
here are some other things noted in 2015, i forgot they basically ignored the fact that HMAC exists for a while
https://news.ycombinator.com/item?id=9727297
Hacker News
it's quite possible that the project has grown better since these exploits/issues but idk
personally still wouldn't use it
too lazy to do source code review
tall haven
I'm not stubborn I'm always open to switch to something else
thorn obsidian
it's up to you, i don't think keepass is horribly insecure but i feel like it's probably not a good option
tall haven
I'm currently a dirty windows user though
thorn obsidian
as mentioned above bitwarden is cool
thorn obsidian
works on windows with pretty UI and security capable team behind it
plus it's opensource
tall haven
yeah keepass ui is ugly
north rover
@thorn obsidian keepasshttp is deprecated iirc, keepassxc has a new thing
thorn obsidian
yea but they continued to include it by default until 2017
¯_(ツ)_/¯
plus they weren't even compiling their code with errors or address sanatization for a while
what kind of security project ignores address sanatization compile flags? worse yet, ignores warnings from the compiler?
north rover
hmm
well i‘ve been using keepassxc for a while now
initially used 1password but its a subscription model
kpxc works very very nicely
tall haven
idk why I'm so hesitant about having it all be on the cloud like with bitwarden
thorn obsidian
iirc you can do a local archive
thorn obsidian
i know for a fact you can deploy it locally within your own network, but i think you can also just do a completely local archive
tall haven
I should still have it on the cloud for off-site backups
and to make it convenient to use on mobile
north rover
i haven‘t felt the need to sync my passwords over the cloud
even if, my kpxc database is in my icloud drive
tall haven
yeah neither have I
north rover
but I don‘t use 99% of my passwords on my mobile device
thorn obsidian
i mean, if you want consistent mobile/laptop support it's a must
but for that a friend told me you can use syncthing (p2p file sync) and just have it sync up when the devices join the same network
so when you get home everything can sync
without servers
thorn obsidian
it should work with both
he uses pass, same as me
syncthing only cares about files
just sync the entire archive
thorn obsidian
currently i do filesystem encryption on important documents
but the drives i'm using for backups aren't FDE
for various reasons, mostly compatability and because they're old drives
north rover
ah
mine aren‘t either, but they‘re encrypted and the checksum is verified where applicable
thorn obsidian
thinking about outsourcing to cloud as a second backup solution though
backup to the backups
north rover
hmm
tall haven
do you currently have any off site backups?
north rover
nope
tall haven
same 
thorn obsidian
technically no, i like to keep my drives with me
north rover
unless i leave my rpi at home haha
thorn obsidian
if the house burns down oh well
north rover
then technicallyyes
tall haven
are all your backup drives always connected to your system?
thorn obsidian
but i've been looking at stuff like siacoin for a while now, had my eye on it since early last year, been thinking about using it to backup stuff for cheap
thorn obsidian
it should have tbh
north rover
soneone recommended me acloud provider named rsync
thorn obsidian
waiting for filecoin, IPFS powered stuff, they're taking forever to launch
north rover
brb
thorn obsidian
i've seen rsync but i wouldn't use them tbh
p2p distributed encrypted storage > centralized datacenters
it's cheaper anyway
thorn obsidian
tall haven
do you just spend a few hours every day reading these 😄 ?
you must have some news feed for these set up, right?
thorn obsidian
i don't have any custom news feeds
i just hang around lots of security people
although i should make some RSS feed readers, i was going to at some point
but yea i spend like 4 hours a day reading about security tbh
i still have like 6 articles i'm reading
tbh the sad part about all of this is that everything i've posted is like a week and a half of news
not even digging into old stuff, it's all very recent
tall haven
sim swapping is basically social engineering yeah?
north rover
CC backups: https://www.reddit.com/r/linux/comments/42feqz/i_asked_here_for_the_optimal_backup_solution_and/czbeuby
north rover
2 cents per GB/month - 40 GB minimum, paid annually
if you use borg / attic only that is
taken from https://www.rsync.net/products/attic.html, interesting
thorn obsidian
@north rover sia is like 0.05c per TB per month
something close to that anyway
network has 4.6 PB of storage
north rover
wat
tall haven
what do you guys do for data redundancy btw?
north rover
um
well, my documents are in iCloud Drive and in my backups, so those are somewhat redundant-ized I guess
apart from that not much
tall haven
I've looked into stuff here and there
drives arent that expensive these days
this talk has stirred up some motivation to figure this stuff out
I need to find people to flood with my questions
or find good resources to read
on creating a home backup solution
I don't need to be ultra paranoid or have enterprise level backup solution
upbeat palm
@thorn obsidian Elliot Alderson...No wonder you're here
You seems to be security enthusiast
safe bear
Figures the one week I don't check the weekly US-CERT email there are KeePass vulnerabilities
Oh, wait, never mind
1 CVE in 2012, 2 in 2017
That seems pretty good to me
storm yacht
oh you use KeePass too?
safe bear
Been using it since like 2010-11-ish
storm yacht
whoa nice
fervent patio
ooh good word 👌
clever cobalt
I really wanna use KeePass but I'm too lazy, which sure as hell is probably the dumbest reason not to use some extra security lol
My issue with KeePass though is like, what do I do if I'm not on my home computer and need to log onto something? How do you KeePass users generally handle that?
safe bear
Ok, so here's my current system
storm yacht
(I use OneDrive myself)
clever cobalt
..Damn
@safe bear Can you expand on the "I also have KeePass configured to use a secure desktop for password entry" 😃
clever cobalt
Ooooh, cool, wasn't aware of that at all, thanks my friend 😃
safe bear
It's the same system Windows UAC uses to prevent malware from tricking you into clicking "Yes" at admin prompts
Honestly, it should be enabled by default
clever cobalt
Err, one last question if you don't mind, you mentioned LastPass, how does that come in play? I googled LastPass quickly but I'm not sure how it fits in into the whole workflow 😄
safe bear
So I don't have to open KeePass and copy all the time
I can just click the little button on the form fields
clever cobalt
Oh, I see
Damn, that's a hell of a setup you got there bud
Making me feel like some technology illiterate person
clever cobalt
You are an inspiration, thank you.
clever cobalt
😄
upbeat palm
@thorn obsidian Directly into device...wow
thorn obsidian
yea
thorn obsidian
idk, depends on what you're doing
upbeat palm
A cyber security enthusiast
lusty flare
Try some CTF's
Do a bunch of reading about stuff
Grasp the common attack types
idk
I've just been reading some of the DEFCON slides :3
There's going to be a cool talk on Fax still being a thing
Looks like there's a nice one for shell commands / useful things in it
I suspect the one on domain / certificate registration will be interesting too
If you were interested in doing some CTF type stuff
upbeat palm
@lusty flare Yup, I know about CTF
Thanks for information
thorn obsidian
i wouldn't go with vulnhub, the systems get old and repetitive very quickly
UnknownError showed me this last year, very great tool
https://github.com/cliffe/SecGen
upbeat palm
Insecure?
thorn obsidian
yes, it's basically a personalized CTF generator
it creates systems with intentional exploits and you get to find them
thorn obsidian
nah, public information is free
when you work up some skills check out https://hackthebox.eu/ too
apart from that i recommend reading up on OWASP top 10 exploits
and how they work
OWASP Top 10 2017 The Ten Most Critical Web Application Security Risks
this is a lot of info so feel free to take some time
lusty flare
ah nice @thorn obsidian
upbeat palm
Well,is it possible to make a ransomware (just for test don't ban me mods) in python?I know C and C++ are consider for malware development
But can we?
tight abyss
Malware is anything that harms the user. So yes, surely you can program something harmful in every language.
lusty flare
bet you could write it in bash
someone does a remote shell execute
all of a sudden
ransome'd
tight abyss
sure
lament roost
Hell I remember old batch script malware
upbeat palm
What type of?
upbeat palm
Any cyptoanalyst?
I have a encrypted message and I'm trying to solve it but I can't
tight abyss
You can just post it here or in one of the off-topic channels and see if somebody can solve the challenge.
Don't expect too much though.
orchid notch
@upbeat palm no need to wait for somebody just post your question, if somebody knows the solution he will tell you
upbeat palm
@orchid notch I didn't get it..you mean I don't have to rely on someone for every answers
You're right, Thanks
Will post in a minute
05171606.05161220.16'12.1810161118.0510.132005.1605.241313.22101220.100405;.05171606.05161220.1612.1810161118.0510.0605241121.0409.241121.0617100405;.16.22072422142021.05171606!.
Encryption consist on 1 negative number 1 neutral number and all others are positive numbers.
velvet isle
@upbeat palm what kinda encryption is that
Can't be binary 🤔
Hm
Looks like a key is needed
upbeat palm
I'm also confused
I think I have to decrypt it by applying some freaking logic
You play CTFs?
orchid notch
@upbeat palm thats a text consisting of a row of 2 digit pairs, i guess the 16'12 could be an I'm. And if 16 is the i 1605 might be an is? so i guess its just substitution of letters with numbers in a certain pattern. About the pattern im not sure
tight abyss
Yeah, Nix' guess seems pretty reasonable so far.
It's not a simple caesar cipher though, where we just have a constant offset for all letters.
Here would be the output assuming two-digit pairs and a constant offset on the latin uppercase alphabet:
0 FRQG FQMU Q'M SKQLS FK NUF QF YNN WKMU KEF; FRQG FQMU QM SKQLS FK GFYLV EJ YLV GRKEF; Q WHYWOUV FRQG!
1 GSRH GRNV R'N TLRMT GL OVG RG ZOO XLNV LFG; GSRH GRNV RN TLRMT GL HGZMW FK ZMW HSLFG; R XIZXPVW GSRH!
2 HTSI HSOW S'O UMSNU HM PWH SH APP YMOW MGH; HTSI HSOW SO UMSNU HM IHANX GL ANX ITMGH; S YJAYQWX HTSI!
3 IUTJ ITPX T'P VNTOV IN QXI TI BQQ ZNPX NHI; IUTJ ITPX TP VNTOV IN JIBOY HM BOY JUNHI; T ZKBZRXY IUTJ!
4 JVUK JUQY U'Q WOUPW JO RYJ UJ CRR AOQY OIJ; JVUK JUQY UQ WOUPW JO KJCPZ IN CPZ KVOIJ; U ALCASYZ JVUK!
5 KWVL KVRZ V'R XPVQX KP SZK VK DSS BPRZ PJK; KWVL KVRZ VR XPVQX KP LKDQA JO DQA LWPJK; V BMDBTZA KWVL!
6 LXWM LWSA W'S YQWRY LQ TAL WL ETT CQSA QKL; LXWM LWSA WS YQWRY LQ MLERB KP ERB MXQKL; W CNECUAB LXWM!
7 MYXN MXTB X'T ZRXSZ MR UBM XM FUU DRTB RLM; MYXN MXTB XT ZRXSZ MR NMFSC LQ FSC NYRLM; X DOFDVBC MYXN!
8 NZYO NYUC Y'U ASYTA NS VCN YN GVV ESUC SMN; NZYO NYUC YU ASYTA NS ONGTD MR GTD OZSMN; Y EPGEWCD NZYO!
9 OAZP OZVD Z'V BTZUB OT WDO ZO HWW FTVD TNO; OAZP OZVD ZV BTZUB OT POHUE NS HUE PATNO; Z FQHFXDE OAZP!
10 PBAQ PAWE A'W CUAVC PU XEP AP IXX GUWE UOP; PBAQ PAWE AW CUAVC PU QPIVF OT IVF QBUOP; A GRIGYEF PBAQ!
11 QCBR QBXF B'X DVBWD QV YFQ BQ JYY HVXF VPQ; QCBR QBXF BX DVBWD QV RQJWG PU JWG RCVPQ; B HSJHZFG QCBR!
12 RDCS RCYG C'Y EWCXE RW ZGR CR KZZ IWYG WQR; RDCS RCYG CY EWCXE RW SRKXH QV KXH SDWQR; C ITKIAGH RDCS!
13 SEDT SDZH D'Z FXDYF SX AHS DS LAA JXZH XRS; SEDT SDZH DZ FXDYF SX TSLYI RW LYI TEXRS; D JULJBHI SEDT!
14 TFEU TEAI E'A GYEZG TY BIT ET MBB KYAI YST; TFEU TEAI EA GYEZG TY UTMZJ SX MZJ UFYST; E KVMKCIJ TFEU!
15 UGFV UFBJ F'B HZFAH UZ CJU FU NCC LZBJ ZTU; UGFV UFBJ FB HZFAH UZ VUNAK TY NAK VGZTU; F LWNLDJK UGFV!
16 VHGW VGCK G'C IAGBI VA DKV GV ODD MACK AUV; VHGW VGCK GC IAGBI VA WVOBL UZ OBL WHAUV; G MXOMEKL VHGW!
17 WIHX WHDL H'D JBHCJ WB ELW HW PEE NBDL BVW; WIHX WHDL HD JBHCJ WB XWPCM VA PCM XIBVW; H NYPNFLM WIHX!
18 XJIY XIEM I'E KCIDK XC FMX IX QFF OCEM CWX; XJIY XIEM IE KCIDK XC YXQDN WB QDN YJCWX; I OZQOGMN XJIY!
19 YKJZ YJFN J'F LDJEL YD GNY JY RGG PDFN DXY; YKJZ YJFN JF LDJEL YD ZYREO XC REO ZKDXY; J PARPHNO YKJZ!
20 ZLKA ZKGO K'G MEKFM ZE HOZ KZ SHH QEGO EYZ; ZLKA ZKGO KG MEKFM ZE AZSFP YD SFP ALEYZ; K QBSQIOP ZLKA!
21 AMLB ALHP L'H NFLGN AF IPA LA TII RFHP FZA; AMLB ALHP LH NFLGN AF BATGQ ZE TGQ BMFZA; L RCTRJPQ AMLB!
22 BNMC BMIQ M'I OGMHO BG JQB MB UJJ SGIQ GAB; BNMC BMIQ MI OGMHO BG CBUHR AF UHR CNGAB; M SDUSKQR BNMC!
23 COND CNJR N'J PHNIP CH KRC NC VKK THJR HBC; COND CNJR NJ PHNIP CH DCVIS BG VIS DOHBC; N TEVTLRS COND!
24 DPOE DOKS O'K QIOJQ DI LSD OD WLL UIKS ICD; DPOE DOKS OK QIOJQ DI EDWJT CH WJT EPICD; O UFWUMST DPOE!
25 EQPF EPLT P'L RJPKR EJ MTE PE XMM VJLT JDE; EQPF EPLT PL RJPKR EJ FEXKU DI XKU FQJDE; P VGXVNTU EQPF!
Now the digit pairs range from 4 to 24...
with this distribution:
Counter({5: 12, 16: 11, 10: 7, 6: 5, 12: 5, 20: 5, 11: 4, 17: 4, 18: 4, 24: 4, 4: 3, 13: 3, 21: 3, 22: 3, 7: 1, 9: 1, 14: 1})
@upbeat palm What do you mean by "Encryption consist on 1 negative number 1 neutral number and all others are positive numbers."? Also is there any context or additional info about the message? Can we assume it is English?
Also note how the first half of the first tow phrases is the same
5 17 16 6 5 16 12 20 16 ' 12 18 10 16 11 18 5 10 13 20 5 16 5 24 13 13 22 10 12 20 10 4 5
5 17 16 6 5 16 12 20 16 12 18 10 16 11 18 5 10 6 5 24 11 21 4 9 24 11 21 6 17 10 4 5
16 22 7 24 22 14 20 21 5 17 16 6 !
(except the apostrophe missing in the second)
Well.... solved it @orchid notch @upbeat palm 😁
orchid notch
how @tight abyss
tight abyss
The key is
{4: 'U', 5: 'T', 6: 'S', 7: 'R', 9: 'P', 10: 'O', 11: 'N', 12: 'M', 13: 'L', 14: 'K', 16: 'I', 17: 'H', 18: 'G', 20: 'E', 21: 'D', 22: 'C', 24: 'A'}
roll face on keyboard
makes sense?
???
success!
tight abyss
THIS TIME I'M GOING TO LET IT ALL COME OUT; THIS TIME IM GOING TO STAND UP AND SHOUT; I CRACKED THIS!
I'll give creds tho, that's pretty cool
tight abyss
as you guessed, substitution cipher on pairs of two digits
After I had the list of numbers, it was mostly building a dictionary and trying some values to form words
common English letters and the number distribution in the message helped
but after a while I got annoyed and simply threw it into https://www.guballa.de/substitution-solver
worked 👍
silent pier
Did not even know github did that, cool
orchid notch
its new
orchid notch
the decryption or github?
marble dawn
we have linters for this too
velvet isle
@orchid notch the decryption
upbeat palm
@tight abyss Goddamn....Dude
You rock
Thanks Thanks Thanks
upbeat palm
You mean like VPNs? @velvet isle
upbeat palm
I use NordVPN
orchid notch
Jesus Christ Nord VPN
velvet isle
It's OP
orchid notch
I get commercials for that like every 2nd page I visit
upbeat palm
@orchid notch ?
velvet isle
Lol
orchid notch
the other half is udemy..
velvet isle
^
upbeat palm
Mobile OS - Resurrection Remix
VPN - NordVPN
Password Manager - KeePassX
Browser - Firefox & Firefox Focus
Search Engine - DuckDuckGo
Instant Messaging - Signal
XPrivacyLua and etc.
@orchid notch Really?
upbeat palm
🤔
velvet isle
@upbeat palm can you give me some info on ressurection remix?
orchid notch
its a more configurable free custom ROM
velvet isle
Agh
upbeat palm
It's a combination of several other ROMs @orchid notch +1
You'll like it
Which one you're using? @velvet isle @orchid notch
upbeat palm
Oh...Both S7...cool
Maybe he's using stock, I guess
orchid notch
as i see resurrection is gplv3 though
so it shouldnt have those conflicts
although gplv3 is a pretty viral license
like one part of your code is gplv3? everything must be changed to gplv3 according to gplv3
which was why lineage on s7 was discontinued
upbeat palm
Seems to be... Although making ROMs are easy but debugging is the hard part
That's why your lineage os expired
orchid notch
no my lineage was 7.something and didnt get the 8 upgrade because of the device tree they used being under gplv3
and them not wanting to change the entire lineage codebase to that
parts of lineage are oreo nowdays
upbeat palm
So...They discontinued your device ROM update...Fair move
Yup
upbeat palm
Lineage OS is best but give try to others as well @orchid notch
velvet isle
Keep your os safe while using it
upbeat palm
?
upbeat palm
Oh...
Yesterday I was watching "Who am I:No System is Safe" protagonist was damn cool... It's based on Hacking
velvet isle
A movie ?
upbeat palm
Yup, German movie
velvet isle
I'll check it out
upbeat palm
I got an invite of private torrent tracker every Udemy, Lynda, PluralSight etc. courses are available for download
velvet isle
Hmm
orchid notch
the movie gets a bit unrealistic at some point
upbeat palm
Yeah,a little confusing
At least a little catchy than Mr.Robot
I have CLRS in my Amazon cart 😂
upbeat palm
Damn
orchid notch
paid yt i guess?
upbeat palm
Gotta say 1st season of Mr.Robot was total confusing
upbeat palm
2nd is FBI hacking
velvet isle
He hacked the FBI ?
upbeat palm
That part was amazing
orchid notch
the 3rd season is the best for me
upbeat palm
Yup,by writing malware in C and Darlene spread it with the help of Angela
@orchid notch Still stucked on 2😅
orchid notch
in the 3rd series theyll teach angela to "hack" and infiltrate the FBI again via placing some hardware n stuff
among other stuff
i lost track somewhere in two like 3 months ago so i just watched 2 and three in the last two weeks
velvet isle
FBI needs to be more conscious of their environment I think
Because in reality like that they get hacked
orchid notch
even in real life that wouldve been extremly hard to defend
dont know if this is considered spoiler but they bascially have their own floor inside a companies building angela works in so they teach angela to hack and she then places a femto cell to catch all the traffic and stuff from fbi mobiles on that floor
like @velvet isle how would you actively prevent somebody who has access to the building from placing a tiny hardware device on your floor
orchid notch
on what
velvet isle
I might have set up CCTV and a warning sign for whoever goes near the room
orchid notch
see
upbeat palm
Social engineering was the main attack😂
upbeat palm
Not that one.... I mean she manipulated that FBI guy who asked her for lunch... Remember?
velvet isle
She seduced him ?
orchid notch
wait
was the femto one in season 2
so hard to keep track of seasons when you watch 2 in 10 days
velvet isle
I never watched it before
upbeat palm
@orchid notch Yup,he made it from a guy computer who hired him for transferring his website (Tor one)
orchid notch
did already get revealed what actually happened to elliot during that time?
upbeat palm
Nope... Downloading E08
Main twist was all that time he's in prison...But why/how?
upbeat palm
I wanna know
orchid notch
they caught him hacking something he said yep yep and yep to everything they accused him
=> prison
he wanted to go to prison
velvet isle
🤔
orchid notch
for
reasons
which make pretty much the story of season 3
it isnt actually clear anymore whos good and whos evil in s3 tbh
upbeat palm
Oh..
orchid notch
there are three sides
upbeat palm
Damn....So confusing
Have you watched Rick and Morty?
orchid notch
yes
some time ago
but thats not #cybersecurity anymore more like #ot0-fear-of-python
velvet isle
Lol
velvet isle
👋
orchid notch
i am actually surprised we didnt get shoo shhoed outta here when we started series talking
upbeat palm
No one was awake, I guess😂
orchid notch
well
ok to be fair thane cant really be called awake even when he is online but still
upbeat palm
That's moderator work...So they are busy
storm yacht
@orchid notch @upbeat palm @velvet isle 
upbeat palm
@storm yacht Umm...Sorry😅
orchid notch
Oh fuck it's Lucy
upbeat palm
Her profile pic is intimidating😨
upbeat palm
We will....And sorry again
@storm yacht
silent pier
https://www.uib.no/en/course/INF143 uu, does this sound fun?
thorn obsidian
upbeat palm
@silent pier Online classes?
silent pier
No, courses at my uni
upbeat palm
Your University..wow
thorn obsidian
this paper title lol
Peek-a-Boo: I see your smart home activities, even encrypted!
https://arxiv.org/pdf/1808.02741.pdf
upbeat palm
@thorn obsidian Cache poisoning,you tried?
thorn obsidian
have i tried cache poisoning?
paper is about metadata leaks in encrypted IoT connections btw ^^
above 90% accuracy on most stuff which is pretty crazy
it's getting real 👀
https://www.fifthdomain.com/global/europe/2018/08/07/german-cyberwarriors-assert-right-to-hack-back-when-attacked/
upbeat palm
@thorn obsidian encryption algorithms were weak, I guess
thorn obsidian
nah
it's a side channel attack
the encryption works fine (not fully finished the paper yet)
upbeat palm
Oh...
thorn obsidian
basically using stuff like data size analysis along with machine learning you can infer actions without decrypting anything
upbeat palm
Hmm...like using other stuff time,cache data,power monitoring attacks?
thorn obsidian
yea basically
if the network traffic suddenly spikes every day at the same time it probably means your coffee machine just starting brewing the morning coffee, or the smart heater just kicked in, or the lights turned on
stuff like that
upbeat palm
So basically the time and power consumption thing and other factors
Which will result in abnormal activity in IoTs
Using these factors to exploit IoTs
thorn obsidian
paper on abusing CTORS for anti-debugging in C
https://www.exploit-db.com/papers/13234/
tight abyss
rip
orchid notch
An a bit reading makes everyone of us feel happy and secure again
Well everyone without VIA CPU
thorn obsidian
yea, it's not an insane issue
but pretty cool, this extends his research from about 2013 when he made sandsifter
which is neat
upbeat palm
Making a custom RAT is possible but which language is preferable?
thorn obsidian
english, mostly
cedar pelican
@upbeat palm google
upbeat palm
🤔
lament roost
You’re not going to get an answer to that question here.
upbeat palm
Okay
safe bear
@thorn obsidian Have you heard of Model-specific Registers (MSRs)?
I went to the talk by xoreaxeaxeax
Basically he was trying to find hidden MSRs, namely ones that were password-protected
Didn't make much progress though
Unlike last year with SandSifter
But thus is the nature of research, and it's cool he's continuing to go down this rabbit hole...
Because at this point, we definitely definitely cannot trust Intel to do the right thing
north rover
What‘s a MSR?
thorn obsidian
i haven't, but i think i've heard it mentioned before @safe bear
afaik it's some meme magic place in the CPU where you can store values
but idk
safe bear
Undocumented CPU registers
Used internally by the CPU or by firmware makers Intel/other CPU maker has a relationship with
He did mention finding a reference to a Intel i5 one in a bunch of firmwares, I think that's his next step
The current example of a password-protected MSR is the AMD K7 and K8 tho
I didn't go to this one, but may be of interest as well: https://media.defcon.org/DEF CON 26/DEF CON 26 presentations/Christopher Domas/DEFCON-26-Christopher-Domas-GOD-MODE- UNLOCKED-hardware-backdoors-in-x86-CPUs.pdf
upbeat palm
Defcon...wow
safe bear
Yes
civic sparrow
does anyone know any obfuscation techniques with python?
safe bear
base64.b64encode()
safe bear
That's super basic and trivial to reverse for anyone that knows anything
upbeat palm
@safe bear You ever participated or visited in defcon?
thorn obsidian
i'm sure he has, everyone has been to defcon at least once
silent pier
o/ I have not
upbeat palm
Same...
lament venture
not everyone is a nerd
safe bear
@upbeat palm I was just at DEF CON 26 a few days ago, and I went to the 24 and 25 as well
upbeat palm
Darn...Am I the only one who'snever gonna attend defcon as defcon was not gonna held in my country
safe bear
There was one in China for the first time this year
upbeat palm
I'm damn sure it's not going to happen in India
Probably not in upcoming 10-15 years
copper mural
An 11 year-old hacked the voting system used in a lot of US states
I want to read more about that
orchid notch
the CCC (ehtical hacker group in germany) published a patch for the really outdated voting software used in Germany after they broke into it to proof it was weakly secured last elections. Although they published the patches weeks before and they were discussed in media and stuff they were never applied afaik. So if bascially any organization would have wanted to manipulate our election that wouldnt have been hard at all
copper mural
Our elections are a fucking joke in the US
Tampered with by Russia (proven by every Intelligence agency we have)
Children can hack our elections if they want to
upbeat palm
Lol,kinda true
storm yacht
cough
orchid notch
🏃
safe bear
Election hacking is on-topic
storm yacht
to an extent
safe bear
That extent is 100%
storm yacht
besides the fact that this continues to be a primarily Python oriented channel, general comments about the state of election security are probably better suited to off-topic channels unless they're generating useful discussion, which besides maybe Nix's comment they did not seem to be
safe bear
Wrong channel bud
velvet isle
agh
safe bear
Here, something that's on-topic: https://github.com/SpiderLabs/social_mapper
It's written in Python
thorn obsidian
i seen this but
honestly i don't want to star it
i have lots of stuff starred but that's on another level of weird that i just can't do on a public profile
orchid notch
https://github.com/calebmadrigal/trackerjacker I've discovered this tool on GitHub yesterday, seems pretty useful for some stuff
thorn obsidian
cool
velvet isle
@orchid notch someone just sent that in a security group and another person was like, "that's in Kali"
😂
safe bear
Oh, trackerjacker
Ran across that a number of months ago, seemed pretty cool
Passive mapping of Wi-Fi networks
However, the MAC addresses Mobile devices use to search for APs have been randomized for the last few years, at least on iOS and Android
@thorn obsidian The use case for Social Mapper is doing OSINT in the recon phase of an assessment
safe bear
@thorn obsidian Well you can use it to populate a phishing campaign management tool like FiercePhish: https://github.com/Raikia/FiercePhish
lusty flare
My absolutely favourite part of this
Australian police seized two of his computers last year, and found files and information on how he accessed servers in a folder called “hacky hack hack,”```OpSec 👌
tall current
If I put all my incriminating info in my trap folders then I will never get caught
lusty flare
I put all my criminal documents in a folder called "Not criminal documents"
tall haven
put it into "New folder"
lament roost
~~put it into 
~~
upbeat palm
@lusty flare Pretty catchy name
silent pier
I just leave it on my desktop, but all renamed and reskinned to internet explorer
How long until this is broken as well
velvet isle
lol
upbeat palm
@silent pier This is turned out to be a forum
proper owl
what is the safest method for saving user profiles / data?
orchid notch
Inside a database with all passwords etc hashed with a good algorithm like bcrypt (and ofc that one salted) and not allowing connections from external networks to the database
Would be my best guess
But the solution usually depends on what you want to store for which purpose and how it has to be accessible
safe bear
Yes, a database is a good option. Need to take care with access controls to said database, ensure it's protected adequately at the network level, ensure passwords are encrypted (bcrypt is good) and salted.
silent pier
And it uses prepared statements 
safe bear
Yeah, input sanitization and prepared statements are critical
Stored procedures if you want to be really cautious
upbeat palm
@orchid notch ++
Which encryption?
AES or SHA?