We check ourselves for hacking!

Good day! Today we will show you Loki, a scanner that allows you to detect signs of hacking. The entire operation of the scanner is based on three detection methods.

1. By file names (compliance with the regular expression of the full path of the file).
2. Verification by Yara rules (search for compliance with Yara signatures by the contents of files and process memory);
3. Checking hashes (comparing scanned files with hashes (MD5, SHA1, SHA256) of known malicious files);

Let's go!

1. To ins

tall, use:
 sudo pip2 install psutil netaddr pylzma colorama
$ git clone https://github.com/Neo23x0/Loki

$ cd Loki/
2. Use is carried out by entering the following command:
$ python2 loki-upgrader.py
$ python2 loki.py -h

Managing our own local web server

MyServer is your own locally running server. On it you can set up PHP, Apache, MySQL on Android, Linux, Ubuntu or other operating systems. With MyServer, you can set up and test your website, regardless of the technologies used in its development.

Installation

$ git clone https://github.com/rajkumardusad/MyServer.git
$ cd MyServer
$ chmod +x install

launch

$ sh install (or ./install)
$ myserver start

Syntax

$ myserver -s localhost 8080 /home/www

Brute-force Instagram accounts

Pure-L0G1C is a handy utility for carrying out a password brute-force attack on IS accounts.
The work of the program is organized through a proxy, in order to ensure anonymity.
If successful, it creates an account.txt file in the folder that contains all the data found.

Installation:

• apt update && apt upgrade - y
• apt install python python-pip git
• git clone https://github.com/Pure-L0G1C/Instagram
• cd Pure-L0G1C

Launch:

• python3 instagram.py <login> <wordlist> <mode>

<login> victim login
<wordlist> file with passwords, it can be found on the Internet
<mode> brute force mode:
-m a number, which can be 0, 1, 2, or 3. The default is zero.

Modes
0 - 64 passwords at a time
1 - 128 passwords at a time
2 - 256 passwords at a time
3 - 512 passwords at a time

​Protection against DDoS attacks!

Good day! Today we will show you one very interesting project that is designed to protect against DOS and DDoS attacks. This project is called Anti-DDOS. In fact, it uses all the necessary protection configurations, but it only works on the Linux operating system.

Let's go!

1. To install, use:
git clone https://github.com/ismailtasdelen/Anti-DDOS.git
2. Use is carried out by entering the following commands:
cd Anti-DDOS
$ bash ./anti-ddos.sh

With Anti-DDOS, you can take the necessary steps to protect your servers and applications from this type of attack.

Useful software only for the smartest kids!💾‌‌

🔖 S.E. Note. The Book of Secret Knowledge.

🖖🏻 Hello user_name.

• Today I am sharing with you a very useful repo, which contains a huge amount of information for every taste. The information will be useful to all readers of our community and not only.

• Guides, tools, articles, various cheat sheets, blogs, life hacks and more: https://github.com/trimstray/the-book-of-secret-knowledge

​📦 Ready-made VM images for quick deployment and experimentation.

🖖🏻 Hello user_name.

• Today I

have selected for you a list of repositories with ready-made images for VirtualBox and VMWare virtual machines. Very handy for quick deployment as test benches.

• Free VirtualBox Images from the developers of VirtualBox.
• A collection of prebuilt VMs from Oracle.
• Absolutely any VM configurations based on Linux and Open Sources.
• VMware image with older versions of Windows (98, 2000, XP)

• VM on iOS and MacOS:
https://getutm.app
https://mac.getutm.app
Images:
https://mac.getutm.app/gallery/
https://github.com/utmapp/vm-downloads/releases

Your S.E.‌‌

​✉️ Silence and SMS Ping. Find out the status of the subscriber and encrypt SMS messages.

This information can be important in certain circumstances.

🖖🏻 Hello user_name.

• Let's tak

e a little break from the #SI topic and talk about some useful #Android apps. Today we will talk about software, thanks to which you can stay in touch without the presence of the Internet and maintain the confidentiality of correspondence. In addition, we will talk about an interesting application that will allow you to find out the status of a subscriber.

• Let's start with the SMS Ping application: In simple words, thanks to this application you can send a silent SMS to any phone number and find out the status of the target (online / offline). The SMS message will not be displayed to the person who received the request, but you can determine whether your contact's phone is working or not.

• Application is open source: https://github.com/itds-consulting/android-silent-ping-sms
• You can download it here: https://f-droid.org/ru/packages/com.itds.sms.ping/

• Now let's talk about Silence: This is an application that allows you to easily encrypt SMS and local database, replaces the standard SMS application, uses the Signal encryption protocol and is open source. As already mentioned, the tool will help you stay in touch if there are problems with the Internet connection and will ensure the confidentiality of correspondence.

• Official site: https://silence.im/
• Source code: https://git.silence.dev/Silence/Silence-Android/
• Download here: https://f-droid.org/packages/org.smssecure.smssecure/

‼️ Do not forget about our selection of offline messengers, share this information with family and friends and stay in touch. Your S.E. #Android #Privacy‌‌

Exploit Pack Pro 15.07
#exploit‌‌


Exploit Pack Pro 15.07 (as instructed to use in VM)

#exploit‌‌

Burp Pro 2022.2 +
#soft #burp #web‌‌


Burp Pro 2022.2 + detailed installation instructions inside


#soft #burp #web‌‌

+ profiles for Burp Bounty‌‌

EvilCorp

#malware #report‌‌


A cool analysis of the tools of the sensational group EvilCorp

#malware #report‌‌

CVE-2022-21971: Windows Runtime RCE

https://github.com/0vercl0k/CVE-2022-21971

#git #exploit #pentest

CVE-2022-0847: Linux Kernel LPE ("Dirty Pipe")

https://github.com/antx-code/CVE-2022-0847

#git #exploit #pentest

This document details the tactics and tools of APT Orangeworm and Shamoon, as well as the connections between the groups.

#apt #malware #report‌‌

Delegating Kerberos to bypass Kerberos delegation limitation.



#ad #pentest #redteam #blueteam‌‌

Insomnihack 2022 - Delegating Kerberos.pdf

CVE-2022-27666: Linux LPE ("this vulnerability affects the latest Ubuntu, Fedora, and Debian")

https://github.com/plummm/CVE-2022-27666

#git #exploit #pentest

Spring4Shell Proof Of Concept:

https://github.com/BobTheShoplifter/Spring4Shell-POC

#git #exploit #pentest