Hacking on Medium
Hello World!

https://cdn-images-1.medium.com/max/2240/1*94TQOVHh6Z0GWtUYGFKw2A.png
Hi! I am Akshita, a beginner in information security and an aspiring pentester. Thank you for taking out time to read my first blog where…

Continue reading on Medium »

Hacking on Medium
QRコード決済普及する日本、セキュリティ対策は？

https://cdn-images-1.medium.com/max/725/1*SF19-HC_hgssfc1Yz3UypA.png
少し遅い出発、日本のキャッシュレス化

Continue reading on Medium »

Hacking on Medium
Getting start with Aquarium

https://cdn-images-1.medium.com/max/600/1*ymy8lhYk4Ey3UqE6_V3qsw.png
So what is Aquarium? This project is aiming to provide an easy-to-use storage appliance that is backing by Ceph. If you are already using…

Continue reading on Medium »

Hacking on Medium
WORST WESTERN HOTEL: 1

https://cdn-images-1.medium.com/max/1351/1*4kt-AzuYaPFnHAnMRkD4HQ.png
Vulnhub Walkthrough

Continue reading on Medium »

Hacking on Medium
DeepSloth: researchers created the first DDoS attack on Artificial intelligence

https://cdn-images-1.medium.com/max/900/0*jKF50GbwqgGeN1kR.jpg
DeepSloth Attack: Scientists at the University of Maryland have developed a new antagonistic attack that can force machine learning…

Continue reading on Medium »

Hacking on Medium
Mastering Ncat for Fun and Profit

https://cdn-images-1.medium.com/max/2600/0*Eyibb17N1iHh3Ad8
Practical ncat — commands, usage, and real-word application

Continue reading on InfoSec Write-ups »

Filename Leads to Path Traversal

Hello..! My Name Is Surya Sesank.M. I Am Freelancer & Pentester. Today I am Going to Share Path Traversal that leads to Sensitive…Continue reading on Medium »
Read more...

Filename Leads to Path Traversal
https://sesanknagamunukutla.medium.com/filename-leads-to-path-traversal-185e6193daeb?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hello..! My Name Is Surya Sesank.M. I Am Freelancer & Pentester. Today I am Going to Share Path Traversal that leads to Sensitive…Continue reading on Medium » (https://sesanknagamunukutla.medium.com/filename-leads-to-path-traversal-185e6193daeb?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Qvm-Create-Windows-Qube - Spin Up New Windows Qubes Quickly, Effortlessly And Securely
http://www.kitploit.com/2021/05/qvm-create-windows-qube-spin-up-new.html

___________________________
@hacking_Attack
@Hacking_Video

Installation
Download the installation script (https://raw.githubusercontent.com/elliotkillick/qvm-create-windows-qube/master/install.sh) by opening the link, right-clicking and then selecting "Save [Page] as..." Copy install.sh into Dom0 by running the following command in Dom0: qvm-run -p --filter-escape-chars --no-color-output "cat '/home/user/Downloads/install.sh'" > install.sh Review the code of install.sh to ensure its integrity Safer with escape character filtering enabled above; qvm-run disables it by default when output is a file Run chmod +x install.sh && ./install.sh Note that this will install packages in the global default TemplateVM, which is fedora-XX by default Review the code of the resulting qvm-create-windows-qube.sh A more streamlined and secure installation process with packaging will be shipping with Qubes R4.1.
Usage
-a -h, --help -c, --count Number of Windows qubes with given basename desired -t, --template Make this qube a TemplateVM instead of a StandaloneVM -n, --netvm NetVM for Windows to use -s, --seamless Enable seamless mode persistently across reboots -o, --optimize Optimize Windows by disabling unnecessary functionality for a qube -y, --spyless Configure Windows telemetry settings to respect privacy -w, --whonix Apply Whonix recommended settings for a Windows-Whonix-Workstation -p, --packages Comma-separated list of packages to pre-install (see available packages at: https://chocolatey.org/packages) -i, --iso Windows media to automatically install and setup -a, --answer-file Settings for Windows installation ">Usage: ./qvm-create-windows-qube.sh [options] -i -a
-h, --help
-c, --count Number of Windows qubes with given basename desired
-t, --template Make this qube a TemplateVM instead of a StandaloneVM
-n, --netvm NetVM for Windows to use
-s, --seamless Enable seamless mode persistently across reboots
-o, --optimize Optimize Windows by disabling unnecessary functionality for a qube
-y, --spyless Configure Windows telemetry settings to respect privacy
-w, --whonix Apply Whonix recommended settings for a Windows-Whonix-Workstation
-p, --packages Comma-separated list of packages to pre-install (see available packages at: https://chocolatey.org/packages)
-i, --iso Windows media to automatically install and setup
-a, --answer-file Settings for Windows installation

Downloading Windows ISO
The windows-media/isos/download-windows.sh script (in windows-mgmt) securely downloads the official Windows ISO to be used by qvm-create-windows-qube.
Creating Windows VM

Windows 10
./qvm-create-windows-qube.sh -n sys-firewall -oyp firefox,notepadplusplus,office365proplus -i win10x64.iso -a win10x64-pro.xml work-win10 ./qvm-create-windows-qube.sh -n sys-firewall -oyp steam -i win10x64.iso -a win10x64-pro.xml game-console
Windows Server 2019
./qvm-create-windows-qube.sh -n sys-firewall -oy -i win2019-eval.iso -a win2019-datacenter-eval.xml fs-win2019
Windows 10 LTSC
A more stable, minified, secure and private version of Windows 10 officially provided by Microsoft ./qvm-create-windows-qube.sh -n sys-firewall -oyp firefox,notepadplusplus,office365proplus -i win10x64-ltsc-eval.iso -a win10x64-ltsc-eval.xml work-win10 ./qvm-create-windows-qube.sh -n sys-whonix -oyw -i win10x64-ltsc-eval.iso -a win10x64-ltsc-eval.xml anon-win10
Windows 7
Not recommended because Windows 7 is no longer supported by Microsoft, however, it's the only desktop OS the Qubes GUI driver (in Qubes Windows Tools) supports if seamless window integration or dynamic resizing is required See the Security > Windows > Advisories section below for more info ./qvm-create-windows-qube.sh -n sys-firewall -soyp firefox,notepadplusplus,office365proplus -i win7x64-ultimate.iso -a win7x64-ultimate.xml work-win7
Security

___________________________
@hacking_Attack
@Hacking_Video

qvm-create-windows-qube is "reasonably secure" as Qubes (https://www.qubes-os.org/) would have it. windows-mgmt is air gapped The entirety of the Windows qube setup process happens is done air gapped There is an exception for installing packages at the very end of the Windows qube installation Entire class of command injection (https://www.kitploit.com/search/label/Command%20Injection) vulnerabilities (https://www.kitploit.com/search/label/vulnerabilities) eliminated in the Dom0 shell script by not letting it parse any output from the untrusted windows-mgmt qube Only exit codes are passed by qvm-run; no variables This also mitigates the fallout of another Shellshock (https://en.wikipedia.org/wiki/Shellshock_(software_bug)) Bash vulnerability Downloading of the Windows ISOs is made secure by enforcing: ISOs are downloaded straight from Microsoft controlled subdomains of microsoft.com HTTPS TLS 1.2/1.3 HTTP public key pinning (HPKP) to whitelist the website's certificate instead of relying on certificate authorities (CAs) Qubes aims to "distrust the infrastructure" (https://www.qubes-os.org/faq/#what-does-it-mean-to-distrust-the-infrastructure) Remember, transport security = encryption * authentication (This allows for the utmost authentication) SHA-256 verification of the files after download Windows is treated as an untrusted guest operating system the entire way through All commits by the maintainers are always signed with their respective PGP keys Should signing ever cease, assume compromise Current maintainer 1: Elliot Killick (https://github.com/elliotkillick) PGP key: 018F B9DE 6DFA 13FB 18FB 5552 F9B9 0D44 F83D D5F2 Current maintainer 2: Frédéric Pierret (https://github.com/fepitre) (No Keybase account) PGP key: 9FA6 4B92 F95E 706B F28E 2CA6 4840 10B5 CDC5 76E2 Mostly concerned with Qubes R4.1 support See the release4.1 branch and qubes-mgmt-salt-windows-mgmt (https://github.com/fepitre/qubes-mgmt-salt-windows-mgmt) The impact of any theoretical vulnerabilities in handling of the Windows ISO (e.g. vulnerability (https://www.kitploit.com/search/label/Vulnerability) in filesystem parsing) or answer file is limited to windows-mgmt
Windows

Maintenance
Don't forget to apply any applicable updates upon creation of your Windows qube. Microsoft frequently builds up-to-date ISOs for current versions of Windows, such as Windows 10. For these Windows versions, it's recommended to periodically visit the official Microsoft site download-windows.sh provides to get a fresh Windows image out of the box.
Advisories
Windows 7 and Windows Server 2008 R2 reached end of life (EOL) on January 14, 2020 (https://support.microsoft.com/en-us/help/4057281/windows-7-support-will-end-on-january-14-2020). Updates for these OSs are still available with Extended Security Updates (ESUs) if paid for. Office 365 for these OSs will continue getting security updates at no additional cost until January 2023 (https://support.office.com/en-us/article/windows-7-end-of-support-and-office-78f20fab-b57b-44d7-8368-06a8493f3cb9). If RDP is to be enabled on a Windows 7 qube (not default) then make sure it is fully up-to-date because the latest Windows 7 ISO Microsoft offers is unfortunately still vulnerable to BlueKeep (https://en.wikipedia.org/wiki/BlueKeep) and related DejaBlue vulnerabilities. A critical vulnerability in Windows 10 and Windows Server 2016/2019 cryptography was recently disclosed (https://media.defense.gov/2020/Jan/14/2002234275/-1/-1/0/CSA-WINDOWS-10-CRYPT-LIB-20190114.PDF). This allows any and all cryptography in these OSs (including HTTPS; the little padlock in your browser) to be easily intercepted. When Microsoft releases an updated ISO, the direct links in download-windows.sh will be updated but until then please update your qubes if they run the aforementioned OSs.
Privacy

___________________________
@hacking_Attack
@Hacking_Video