kup is your logs. Once the XSS has completed, this shell will redirect the user back to the root(/) of the webserver. So, youll steal sessions if someone finds this, can even beef it up to execute commands on the server on behalf of the user, or drop a reverse shell on the users browser through Beef or another method. The possibilities are legit endless. Images of use casesIn browser, navigated to without the proper user-agent string. (1st level of auth) https://1.bp.blogspot.com/-odNT4UQnV0Y/YKr6M6tLhNI/AAAAAAAAWSQ/2ajxxEnvGJ4hz0OkWCqOSntPs37ytf5DQCNcBGAsYHQ/w640-h230/slopShell_12_in_browser.jpeg Use in the terminal, which is how this was designed to work, using curl with the -vH "User-Agent: sp1.1" switches. https://1.bp.blogspot.com/-b59MZj4LePU/YKr6TK1xtuI/AAAAAAAAWSU/czKo-Gt_QLANppD4NcvBjuIxdF_B2e_uQCNcBGAsYHQ/w640-h502/slopShell_13_use_in_terminal.jpeg Obfuscated script example: https://1.bp.blogspot.com/-5p7MqI1lypQ/YKr6Y5hYoII/AAAAAAAAWSY/esITLucZiVAOjODjuBHpbA5aDiTvyksngCNcBGAsYHQ/w640-h236/slopShell_14_obfuscated_script.png Generation 2 obfuscated script: https://1.bp.blogspot.com/-LzwuUUdXe4w/YKr6dBnQQfI/AAAAAAAAWSg/iiOeScRZBOonCWrubI0yYnGdt0Nj1SdTQCNcBGAsYHQ/w640-h240/slopShell_15_obfuscated_gen2.png Interacting through the client scriptOnce the client script is complete, you as the operator will not need to interact though curl to utilize this shell. There will be a client script that you can use to execute all commands/control over. In addition to this client script, there is a dropper. This dropper will ensure the script is run at start up even if the website is removed. Including some call home functions, obfuscation if it is requested on a level from 1 to 3, with 3 being the highest as every function will be rot ciphered and then encoded in base64 within the whole file being base64 encoded with a random name assigned to the file itself. This can help avoid signature detection. EncryptionOnce the encryption routine is fully worked out, the dropper script will be encrypted, and highly obfuscated. Example output: Base64 decoded: also a test 123
Re-Encoded: YWxzbyBhIHRlc3QgMTIz
Key: 4212bd1ff1d366f23ca77021706a9a29cb824b45f82ae312bcf220de68c76760289f1d5550aa341002f1cfa9831e871e
Key Length: 96
Encryption Result:
Array
(
[original] => also a test 123
[key] => 4212bd1ff1d366f23ca77021706a9a29cb824b45f82ae312bcf220de68c76760289f1d5550aa341002f1cfa9831e871e
[encrypted] => meIHs/y6_U7U~7(M
[base64_Encoded] => bWVJSAAdcw4veTZfVQU3VX43KE0=
)
Decrypt Test:
Array
(
[key] => 4212bd1ff1d366f23ca77021706a9a29cb824b45f82ae312bcf220de68c76760289f1d5550aa341002f1cfa9831e871e
[encrypted] => meIHs/y6_U7U~7(M
[decrypted] => YWxzbyBhIHRlc3QgMTIz
[base64_decoded] => also a test 123
[original] => also a test 123
) AdditionalThis was going to remain private. But I decided otherwise.

Do not abuse this shell, and get a signature attached to it, this is quite stealthy right now since its brand new.

I as the maintainer, am in no way responsible for the misuse of this product. This was published for legitmate penetration testing/red teaming purposes, and/or for educational value. Know the applicable laws in your country of residence before using this script, and do not break the law whilst using this. Thank you and have a nice day.

If you have enjoyed this script, its is obligatory that you follow me and throw a star on this repo... because future editions will have more features(or bugs) depending on how you look at it. Download slopShell

___________________________
@hacking_Attack
@Hacking_Video

NodeJS Deserialization for beginners eli5
https://sinsinology.medium.com/nodejs-deserialization-for-beginners-eli5-af886abc50d5?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Deserialization vulnerabilities exist in most languages, frameworks, and platforms, and in this post, we are going to give a brief and…Continue reading on Medium » (https://sinsinology.medium.com/nodejs-deserialization-for-beginners-eli5-af886abc50d5?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Bug Bounty Short Tips as image
https://sinsinology.medium.com/bug-bounty-short-tips-as-image-b4075523e4ef?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Here I will post my own bug bounty image cheat sheets and others, in case you’ve missed anyContinue reading on Medium » (https://sinsinology.medium.com/bug-bounty-short-tips-as-image-b4075523e4ef?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

CafeBazaar and Subdomain Takeover
https://sinsinology.medium.com/cafebazaar-and-subdomain-takeover-a0ab61a19ce8?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
OSWP Review

The Offensive Security Wireless Professional is an ethical hacking certification offered by Offensive Security that teaches wireless penetration testing techniques, specifically for WEP, WPA, and WPA2.

It comes with the Offensive Security Wireless Attacks video and PDF course, which aims to prepare students for the exam. In this article, I take the time to talk about my experience with this certification, the pros and cons of the course, thoughts after taking and passing the exam, etc.

https://steflan-security.com/offensive-security-wireless-professional-oswp-review/

submitted by /u/cantchooseone96
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
iPhone disabling multiple times while in pocket

My iPhone keeps disabling while in my pocket, it barely lets me type & my Instagram account has uploaded a picture without my interaction. Is this likely that I’ve been hacked and what can I do? I’m a newbie with this stuff so apologies for my lack of knowledge.

submitted by /u/SeeingManAboutADog
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Learn Social Engineering From Scratch

https://external-preview.redd.it/xEy0pSZmdWt-ZPzsN4AfQ7RQcTgBFtP2AnVxL3_RYdk.jpg?width=640&crop=smart&auto=webp&s=f2e007f6fa47daaaccb3dbcbc2ac1d9b8858c47a submitted by /u/ezsou
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
HTTPS/HSTS bypass using bettercap

Hi guys so I’m pretty new to the whole own testing world and have been using a course to get to grips with everything. I’ve gotten to a section that is supposed to cause HTTPS sites to change to a HTTP with a MITM attack. It’s the hstshijack command however no matter what I try the link just won’t seem to revert to HTTP. The HSTS links aren’t changing either can someone please help! I’m using Kali Linux.

submitted by /u/JC2K99
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
What happens if I continually upload auto-generated 12 hours 4K videos to YouTube in order to take all their place?

I've never had an intention to hack YouTube, but there're two ways to satisfy mu curiosity:

1. Try and see what happens. This can lead to the real problems, so - nope.
2. Ask somewhere like this.

So I'm basically wondering how YouTube is secured from it. If I just write a program that generates random pixels every frame throughout 12 hours with 4K resolution, and generate hundreds of videos, add some white noise and name it like "White Noise + Screen Noise Relaxation Video #1/2/3/...", and upload it daily from multiple accounts. Will it create at least minor problems for them?

submitted by /u/maksimkuzmin
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

The Tale of Information Disclosure via error reporting
https://gupta-bless.medium.com/the-tale-of-information-disclosure-via-error-reporting-9b36b45c2693?source=rss------bug_bounty-5

The biggest regret of professional hackers when they were beginners and their advice.

I was surfing Reddit and stumbled on this post which I found very interesting and thought it might be helpful for beginners who’re…Continue reading on Medium »
Read more...

The Tale of Information Disclosure via error reporting

What is error reporting?Continue reading on Medium »
Read more...