Hacking Articles Tips Tricks Videos Tutorials

https://b.thumbs.redditmedia.com/AWrl2k8Z-X4w-p8lDOUOtr5Q6YXnQdXCEqwbdAwSEXE.jpg
* Running Kali on a Raspberry Pi 4b
* Target network is 2.4 GHz provided by a Netgear RAX10 using WPA2-Personal
* Target computer is a Windows box connecting to the router via an ASUS USB-AX56 Nano

I can capture handshakes when I turn the target computer's WiFi off and then on again, so my capturing procedure isn't at fault. However, I have not been able to forcibly deauthenticate the target computer via aireplay-ng or mdk4.

sudo aireplay-ng --deauth 0 -a <router-c <victimwlan0mongives me a string of attempts marked with [ 0| 0 ACKs]sudo mdk4 wlan0mon d -B <router-S <victim just hangs with no output until I hit Ctrl+Csudo mdk4 wlan0mon d -S <victim similarly hangs with no outputsudo mdk4 wlan0mon d -B <router spams the screen with deauth messages but none of them include the MAC of the victim

Also of note - both aireplay-ng and MDK claim to be deauthing my C&C box but no handshakes are captured and the connection isn't broken.I don't **think** I'm doing anything wrong, but I'm not getting the results I expect.Is my router just too resilient, or is there something else I should be adding to my attacks to make them more successful?

edit screencap from the router spec sheet. Looks like I'm playing on hard mode when I should be on easy?

https://preview.redd.it/8jxeltcgn73b1.png?width=351&format=png&auto=webp&s=83da51757f15755a405eb27d763ce504693c8cc4

submitted by /u/Shelgeyr1970
[link] [comments]

8 views14:34

hacking: security in practice
Hacking my “smart” toothbrush

submitted by /u/DrinkMoreCodeMore
[link] [comments]

r/hacking on Reddit: Hacking my “smart” toothbrush

Posted by u/DrinkMoreCodeMore - 181 votes and 11 comments

7 views14:34

Hacking Articles Tips Tricks Videos Tutorials

Bug Bounty
https://blog.snoopbees.com/bug-bounty-6b6c9844d7cb?source=rss------bug_bounty-5

5 views15:25

Hacking Articles Tips Tricks Videos Tutorials

6 views15:25

Hacking Articles Tips Tricks Videos Tutorials

วันนี้จะมาพูดถึง Bug bounty ว่าคืออะไร พร้อมกับแพลตฟอร์มที่รวบรวมโปรแกรมที่เข้าร่วมโครงการ bug bounty…Continue reading on SnoopBees » (https://blog.snoopbees.com/bug-bounty-6b6c9844d7cb?source=rss------bug_bounty-5)

6 views15:25

Hacking Articles Tips Tricks Videos Tutorials

KitPloit - PenTest Tools!
Nidhogg - All-In-One Simple To Use Rootkit For Red Teams

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgmwfzqv240jkIhisXrMbsgm3j-ZmNFEnX7G0zfGP5js53wx378tC36F4x0xgcSjBL4wHo6vQR2Pgey2G3qpQQ3gbTHEO1s_LoIkVzoqrFaAUKhyKYeVwLOTd7niZa7_RzABW76Zdeb45e_9tmZofZBl-Jp1-HKaFlJPVz5eOwrhm6gR61IOUIy_EkR4w/w640-h426/h128.png Nidhogg is a multi-functional rootkit for red teams. The goal of Nidhogg is to provide an all-in-one and easy-to-use rootkit with multiple helpful functionalities for red team engagements that can be integrated with your C2 framework via a single header file with simple usage, you can see an example here.

Nidhogg can work on any version of x64 Windows 10 and Windows 11.

This repository contains a kernel driver with a C++ header to communicate with it. Current Features* Process hiding and unhiding
* Process elevation
* Process protection (anti-kill and dumping)
* Bypass pe-sieve
* Thread hiding
* Thread protection (anti-kill)
* File protection (anti-deletion and overwriting)
* File hiding
* Registry keys and values protection (anti-deletion and overwriting)
* Registry keys and values hiding
* Querying currently protected processes, threads, files, registry keys and values
* Arbitrary kernel R/W
* Function patching
* Built-in AMSI bypass
* Built-in ETW patch
* Process signature (PP/PPL) modification
* Can be reflectively loaded
* Shellcode Injection
* APC
* NtCreateThreadEx

* DLL Injection
* APC
* NtCreateThreadEx

* Querying kernel callbacks
* ObCallbacks
* Process and thread creation routines
* Image loading routines
* Registry callbacks

* Removing and restoring kernel callbacks
* ETWTI tampering Reflective loadingSince version v0.3, Nidhogg can be reflectively loaded with kdmapper but because PatchGuard will be automatically triggered if the driver registers callbacks, Nidhogg will not register any callback. Meaning, that if you are loading the driver reflectively these features will be disabled by default:

* Process protection
* Thread protection
* Registry operations PatchGuard triggering featuresThese are the features known to me that will trigger PatchGuard, you can still use them at your own risk.

* Process hiding
* File protecting Basic UsageIt has a very simple usage, just include the header and get started!

#include "Nidhogg.hpp"

int main() {
HANDLE hNidhogg = CreateFile(DRIVER_NAME, GENERIC_WRITE | GENERIC_READ, 0, nullptr, OPEN_EXISTING, 0, nullptr);
// ...
DWORD result = Nidhogg::ProcessUtils::NidhoggProcessProtect(pids);
// ...
}

SetupBuilding the clientTo compile the client, you will need to install CMake and Visual Studio 2022 installed and then just run:

cd <nidhogg\Example
mkdir build
cd build
cmake ..
cmake --build .

Building the driverTo compile the project, you will need the following tools:

* Visual Studio 2022
* Windows Driver Kit

Clone the repository and build the driver. Driver TestingTo test it in your testing environment run those commands with elevated cmd: bcdedit /set testsigning onAfter rebooting, create a service and run the driver:

sc create nidhogg type= kernel binPath= C:\Path\To\Driver\Nidhogg.sys
sc start nidhogg

DebuggingTo debug the driver in your testing environment run this command with elevated cmd and reboot your computer: bcdedit /debug onAfter the reboot, you can see the debugging messages in tools such as DebugView. Resources* Windows Kernel Programming Book
* Kernel Structure Documentation
* Registry Keys Hiding
* Process Signatures
* NtCreateThreadEx Hotfix ContributionsThanks a lot to those people that contributed to this project:

* BlackOfWorld Download Nidhogg

KitPloit - PenTest & Hacking Tools

Nidhogg - All-In-One Simple To Use Rootkit For Red Teams

5 views16:14

Hacking Articles Tips Tricks Videos Tutorials

3 views16:23

Hacking Articles Tips Tricks Videos Tutorials

Photo

Hacking on Medium
Attention Security Researchers: Level Up Your Skills and Join Our Private Bug Bounty Program

https://cdn-images-1.medium.com/max/2600/1*MP_DQbKRZe_h8LUwPTzhEQ.png
Author: Daniel Ventura, Manager — Product Security Incident Response Team (PSIRT)

Continue reading on Adobe Tech Blog »

3 views16:23

Hacking Articles Tips Tricks Videos Tutorials

2 views16:23

Hacking Articles Tips Tricks Videos Tutorials