Hacking Articles Tips Tricks Videos Tutorials
468 subscribers
65.8K photos
15 videos
157 files
132K links
Exploit
Pentesting
Hacking
Red Team
Blue Team
Kali Linux
Bug Bounty
Black Hat
Cyber security etc

@Hacking_Video
@Hacking_attack
Download Telegram
Exploiting Cisco AnyConnect to Gain System Priv
https://www.reddit.com/r/redteamsec/comments/14hr2jp/exploiting_cisco_anyconnect_to_gain_system_priv/

<!-- SC_OFF -->In this week's video, I exploit Cisco AnyConnect to gain system privileges. Using this POC CVE-2023-20178 (https://github.com/Wh04m1001/CVE-2023-20178) I show how quickly you could move from user to system privileges. Check it out. https://youtu.be/nr_j5TOeNj4 <!-- SC_ON --> submitted by /u/Infosecsamurai (https://www.reddit.com/user/Infosecsamurai)
[link] (https://www.reddit.com/r/redteamsec/comments/14hr2jp/exploiting_cisco_anyconnect_to_gain_system_priv/) [comments] (https://www.reddit.com/r/redteamsec/comments/14hr2jp/exploiting_cisco_anyconnect_to_gain_system_priv/)
Hacking Articles Tips Tricks Videos Tutorials
Photo
Kali Linux Tutorials
Wa-Tunnel : Tunneling Internet Traffic Over Whatsapp

DisclaimerUsing this library may get your WhatsApp account banned, use with a temporary number or at your own risk.

This is a Baileys based piece of code that lets you tunnel TCP data through two Whatsapp accounts.

This can be usable in different situations, for example network carriers that give unlimited whatsapp data or airplanes where you also get unlimited social network data.

It’s using Baileys since it’s a WS based multi-device whatsapp library and therefore could be used in android in the future, using Termux for example.

The idea is to use it with a proxy setup on the server like this: [Client (restricted access) -> Whatsapp -> Server -> Proxy -> Internet]

Apologizes in advance since Javascript it’s not one of my primary coding languages :/

Use only for educational purpose. How does it work?It sends TCP network packages through WhatsApp text and file messages, depending on the amount of characters it splits them into different text messages or files.

To not get timed out by WhatsApp by default it’s limited at 20k characters per message, at the moment it’s hardcoded in wasocket.js. I have done multiple tests and anything below that may get you banned for sending too many messages and any above 80k may timeout.

If a network package is over the limit (20k chars by default) it will be sent as a file if enabled. Also if multiple network packages are cached it will use the same cryteria.

File messages are sent as binary files, TCP responses are concatenated with a delimiter and compressed using brotli to reduce data usage.

It caches TCP socket responses to group them and send the maximum amount of data in a message therefore reducing the amount of messages, improving the speed and reducing the probability of getting banned. Performance improvementsBefore: (without files and no response caching) curl -x localhost:12345 https://www.youtube.com
- 50-80 messages
- 30-40 seconds
After: (with files and response caching) curl -x localhost:12345 https://www.youtube.com
- 6-8 messages
- 7-15 seconds
In case you are not allowed to send files use the --disable-filesflag when starting the server and client to disable this functionality. Why?I got the idea While travelling through South America network data on carriers is usually restricted to not many GBs but WhatsApp is usually unlimited, I tried to create this library since I didn’t find any usable at the date. SetupYou must have access to two Whatsapp accounts, one for the server and one for the client. You can forward a local port or use an external proxy. Server sideClone the repository on your server and install node dependencies.

1. cd path/to/wa-tunnel2. npm installThen you can start the server with the following command where port is the proxy port and host is the proxy host you want to forward. And number is the client WhatsApp number with the country code alltogether and without +. npm run server host port number You can use a local proxy server like follows: npm run server localhost 3128 12345678901 Or you can use a normal proxy server like follows: npm run server 192.168.0.1 3128 12345678901 Client SideClone the repository on your server and install node dependencies.

1. cd path/to/wa-tunnel2. npm installThen you can start the server with the following command where port is the local port where you will connect and number is the server WhatsApp number with the country code alltogether and without +. npm run client port number For example npm run client 8080 1234567890 UsageThe first time you open the script Baileys will ask you to scan the QR code with the whatsapp app, after that the session[...]
Hacking Articles Tips Tricks Videos Tutorials
Kali Linux Tutorials Wa-Tunnel : Tunneling Internet Traffic Over Whatsapp DisclaimerUsing this library may get your WhatsApp account banned, use with a temporary number or at your own risk. This is a Baileys based piece of code that lets you tunnel TCP data…
is saved for later usage.

It may crash, that’s normal after that just restart the script and you will have your client/server ready!

Once you have both client and server ready you can test using curl and see the magic happen. curl -v -x proxyHost:proxyPort https://httpbin.org/ip With the example commands would be: curl -v -x localhost:8080 https://httpbin.org/ip It has been tested also with a normal browser like Firefox, it’s slow but can be used.

You can also forward other protocol ports like SSH by setting up the server like this: npm run server localhost 22 12345678901 And then connect to the server by using in the client: ssh root@localhost -p 8080 Usage on AndroidTo use on Android, you can use it with Termux using the following commands: pkg update && pkg upgrade
pkg install git nodejs -y
git clone https://github.com/aleixrodriala/wa-tunnel.git
cd wa-tunnel
npm install
LicenseMIT Click Here To Download
Please consider following and supporting us to stay updated with the latest info
msLDAPDump simplifies LDAP enumeration in a domain environment by wrapping the lpap3 library from Python in an easy-to-use interface. Like most of my tools, this one works best on Windows. If using Unix, the tool will not resolve hostnames that are not accessible via eth0 currently.
Binding Anonymously Users can bind to LDAP anonymously through the tool and dump basic information about LDAP, including domain naming context, domain controller (https://www.kitploit.com/search/label/Domain%20Controller) hostnames, and more.