Kali Linux Tutorials
Red-Kube : Red Team K8S Adversary Emulation Based On Kubectl

Red-Kube is a collection of kubectl commands written to evaluate the security posture of Kubernetes clusters from the attacker’s perspective. The commands are either passive for data collection and information disclosure or active for performing real actions that affect the cluster. The commands are mapped to MITRE ATT&CK Tactics to help get a sense of […]

The post Red-Kube : Red Team K8S Adversary Emulation Based On Kubectl appeared first on Kali Linux Tutorials.

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
DFIR-O365RC : PowerShell Module For Office 365 And Azure AD Log Collection

The DFIR-O365RC PowerShell module is a set of functions that allow the DFIR analyst to collect logs relevant for Office 365 Business Email Compromise investigations. The logs are generated in JSON format and retrieved from two main data sources: Office 365 Unified Audit Logs. Azure AD sign-ins logs and audit logs. The two data sources can be queried from […]

The post DFIR-O365RC : PowerShell Module For Office 365 And Azure AD Log Collection appeared first on Kali Linux Tutorials.

___________________________
@hacking_Attack
@Hacking_Video

Install ParamSpider on Kali Linux

ParamSpider : Parameter miner tool.Continue reading on Medium »
Read more...

Install ParamSpider on Kali Linux
https://medium.com/@sherlock297/install-paramspider-on-kali-linux-1c6b76568c3f?source=rss------bug_bounty-5

ParamSpider : Parameter miner tool.Continue reading on Medium » (https://medium.com/@sherlock297/install-paramspider-on-kali-linux-1c6b76568c3f?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Tools: How to conduct free background checks: cocofinder

https://cdn-images-1.medium.com/max/855/1*US8MhSz7g0hTSrDBO8K9yA@2x.jpeg
What is background check

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Web application firewall(WAF) bypass.

https://cdn-images-1.medium.com/max/1200/1*iQ9pIHwzjVgb6sPddaaskA.jpeg
lets break the firewall

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
NVD - A Catalogue of Vulnerabilities

https://cdn-images-1.medium.com/max/1200/1*k5Q-Om8LRwx7Vn1S27dhvA.jpeg
Within the infosec and SecOps community, NVD is a well-known entity, but we realised outside of it, there are few who are aware of its…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Deep Web
What is your favourite deep web search engine and why?

Also, just wondering if there’s a search engine that filters only illegal porn, and nothing else.

Edit. I believe I may be misinterpreted. I meant filters OUT illegal porn

submitted by /u/Financial_Ostrich
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
I lost the password of my zip file

It has some of the material I collected in my undergrad. Is there anyone who can help me out ?

submitted by /u/superfast_turtle
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Amazon devices will soon automatically share your Internet with neighbors

https://external-preview.redd.it/2jw_DUo5d7hhMgEO8uz5klNvJEMysJIE8WYiqz1zwQM.jpg?width=640&crop=smart&auto=webp&s=0a08f935823f51182bd2012d88623c0ec2525ed1 submitted by /u/WomanStache
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

CheeseTools - Self-developed Tools For Lateral Movement/Code Execution
http://www.kitploit.com/2021/05/cheesetools-self-developed-tools-for.html

___________________________
@hacking_Attack
@Hacking_Video

This repository has been made basing onto the already existing MiscTool (https://github.com/rasta-mouse/MiscTools), so big shout-out to rasta-mouse (https://twitter.com/rasta_mouse) for releasing them and for giving me the right motivation to work on them.
CheeseExec
Command Exec / Lateral movement via PsExec-like functionality. Must be running in the context of a privileged user. The tool is based on rasta-mouse (https://twitter.com/rasta_mouse) CsExec, but is designed to allow additional control over the service creation, specifically: Create (Search if the service exists, if not, tries to create it) Start (Search if the service exists and is stopped, if that's the case attempts to start it; if not, tries to create it and start it) Stop (Search if the service exists and is running, if that's the case attempts to stop it) Delete (Search if the service exists and is running, if that's the case attempts to stop it than delete it, otherwise it deletes it) ">CheeseExec.exe
Also see TikiService (https://rastamouse.me/2018/10/amsiscanbuffer-bypass---part-1/).
CheesePS
Cheese PS is Command Exec / Lateral Movement (https://www.kitploit.com/search/label/Lateral%20Movement) framework. It relies on System.Management.Automation.PowerShell to load and run arbitrary code via PowerShell. The tool is natively capable of bypassing common restrictions (https://www.kitploit.com/search/label/Restrictions) creating and using PowerShell runspaces on local or remote targets. Must be running in the context of a privileged user (if using PowerShell Remoting). The tool has been originally made as an enhancement of rasta_mouse (https://twitter.com/rasta_mouse) CsPosh, but grew enough to become a framework on its own, and can now be used as a general PowerShell injector. The idea behind this tool has been summarised in the following article: CheesePS: Abusing the PowerShell Remoting for lateral Movement (https://klezvirus.github.io/RedTeaming/LateralMovement/LateralMovementPSRemoting/) The main functionalities implemented are: BuiltIn CLM Bypass using REGINI BuiltIn AmsiBypass that patches Amsi before executing any other command Permits to specify an alternate PowerShell script for AMSI bypass BuiltIn WldpBypass that patches WLDP before executing assemblies Permits to specify an alternate PowerShell script for WLDP bypass Import modules and script before execution Against a local target: modules are imported via filesystem, smb, or http[s] Against a remote target: modules are loaded directly from the local machine using WS-Management Download binary and execute Standard: Transfer -> Write to disk -> Execute Reflective: Transfer -> Execute from memory Supports AES Encryption (https://www.kitploit.com/search/label/AES%20Encryption) of PS modules, C# assemblies (https://www.kitploit.com/search/label/Assemblies) and other executables to evade detection All imported Modules/Assemblies can be encrypted in transit or at rest, and are decrypted just before usage The following screenshot is a decently accurate schema to describe the tool's workflow:

___________________________
@hacking_Attack
@Hacking_Video