-c, --code=VALUE Code to execute
-e, --encoded Indicates that provided code is base64 encoded
-a, --am-si-bypass=VALUE Uses the given PowerShell script to bypass A-M-S-
I (fs, smb o http[s])
--aX, --encrypted-am-si
Indicates that provided A.M.S.I. bypass is
encrypted
-i, --import=VALUE Imports additional PowerShell modules (fs, smb o
http[s])
--iX, --encrypted-imports
Indicates that provided PowerShell modules are
encrypted
-o, --outstring Append Out-String to code
-r, --redirect Redirect stderr to stdout
-d, --domain=VALUE Domain for alternate credentials
-u, --username=VALUE Us ername for alternate credentials
-p, --password=VALUE Password for alternate credentials
-X, --encrypt=VALUE Encrypt a script with an hardcoded key
-D, --decrypt=VALUE Test decryption of a script with an hardcoded key
-n, --skip-bypass=VALUE Skip A.M.S.I (A), WLDP (W) or ALL (*) Bypass
techniques
-l, --lockdown-escape Try to enable PowerShell FullLanguage mode using
REGINI
-w, --wldp-bypass=VALUE Uses the given PowerShell script to bypass WLDP
(fs, smb o http[s])
--wX, --encrypted-wldp Indicates that provided WLDP bypass is encrypted
-x, --executable=VALUE [Download and] Execute given executable
--xX, --encrypted-executable
Indicates that provided Exe/DLL is encrypted
--xCS, --executable-csharp
Indicates that the executable provided is C# -
(.NET)
-R, --reflective-injection Uses Invoke-ReflectivePEInjection to load the
assmebly from memory (requires Invoke-
ReflectivePEInjection to be imported!)
-P, --powershell-decrypt Force use of PowerShell-based decryption
-k, --encryption-key=VALUE Uses the provided key for encryption/decryption
--ssl Force use of SSL
-h, -?, --help Show Help
Note: If executed without a target, the script will execute against the local machine
Advantages of using the tool against raw PowerShell:
Cleaner, more intuitive command line Automatic bypasses (CLM, AMSI, WLDP) Avoids to perform outbound connections from the remote target (everything is transfered through WS-Management) Supports full encryption in transit Also see AmsiBypass (https://rastamouse.me/2019/08/tikiservice/).
CheeseDCOM
Command Exec / Lateral Movement via DCOM. Must be running in the context of a privileged user. This tool is based on rasta-mouse (https://twitter.com/rasta_mouse) CsDCOM, but it's been improved to add additional methods, adapting to the new research made by Philip Tsukerman. There is also an experimental method to "fix" eventual attempts to disable affected DCOM objects via dcomcfg, but it requires some preconditions in order to work properly. The idea behind this tool has been summarised in the following article: CheeseDCOM: Abusing DCOM for lateral Movement (https://klezvirus.github.io/RedTeaming/LateralMovement/LateralMovementDCOM/) Current Methods: MMC20.Application, ShellWindows, ShellBrowserWindow, ExcelDDE, VisioAddonEx, OutlookShellEx, ExcelXLL, VisioExecLine, OfficeMacro. -m, --method=VALUE Methods: MMC20Application, ShellWindows, ShellBrowserWindow, ExcelDDE, VisioAddonEx, OutlookShellEx, ExcelXLL, VisioExecLine, OfficeMacro -r, --reg, --registry Enable registry manipulation -h, -?, --help Show Help ">Usage:

___________________________
@hacking_Attack
@Hacking_Video

-t, --target=VALUE Target Machine
-b, --binary=VALUE Binary: powershell.exe
-a, --args=VALUE Arguments: -enc
-m, --method=VALUE Methods: MMC20Application, ShellWindows,
ShellBrowserWindow, ExcelDDE, VisioAddonEx,
OutlookShellEx, ExcelXLL, VisioExecLine,
OfficeMacro
-r, --reg, --registry Enable registry manipulation
-h, -?, --help Show Help
Note: If executed with -t ., the script will execute against the local machine Also see Lateral Movement Using DCOM Objects and C# (https://klezvirus.github.io/RedTeaming/LateralMovement/LateralMovementDCOM/)
CheeseRDP
RDP credentials (https://www.kitploit.com/search/label/Credentials) stealer via RDI (reflective DLL injection). Must be running in the context of a privileged user, or a user with SeImpersonatePrivilege. This tool is built on top of RdpThief by MDSec, but it's been fully wrapped in a single C# to enable it to be run via .NET Reflection (Assembly.Load and similar). In this way, it's possible to run it via Covenant, without the struggle of uploading a DLL on the target system. Usage:
CheeseRDP [actions]
Actions:
wait: keep listening for any new mstsc.exe process indefinitely (stop with ctrl-C)
clean: delete the credentials dump file if present
dump: dump the content of the file if present, parsing the credentials in a compact format
Note: If executed without options, the program will try to inject in an active mstsc.exe process (the default wait time is 10 seconds)
Credits
MiscTool (https://github.com/rasta-mouse/MiscTools) by rasta-mouse (https://github.com/rasta-mouse) AmsiBypass (https://github.com/0xB455/AmsiBypass) by 0xB455 (https://github.com/0xB455) RdpThief (https://github.com/0x09AL/RdpThief) by 0x90AL (https://github.com/0x09AL) SharpRDPThief (https://github.com/passthehashbrowns/SharpRDPThief) by passthehashbrowns (https://github.com/passthehashbrowns)

Download CheeseTools (https://github.com/klezVirus/CheeseTools)

___________________________
@hacking_Attack
@Hacking_Video

WALK IN THE SNOW BUT DON’T SHOW YOUR TRACKS!

Hello guyz! I hope all of you doing well during this pandemic process. I am Mustafa from Turkey and working a company as a Penetration…Continue reading on Medium »
Read more...

Hacking on Medium
WALK IN THE SNOW BUT DON’T SHOW YOUR TRACKS!

https://cdn-images-1.medium.com/max/668/1*O0eebrvtP15JzgNSkA3R0A.jpeg
Hello guyz! I hope all of you doing well during this pandemic process. I am Mustafa from Turkey and working a company as a Penetration…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Weekly Shot 4 - Ad-Vanced YouTube

https://cdn-images-1.medium.com/max/600/1*_h9NIOtqw08-kjVh6KKB6w.png
In this week’s shot, we’ll be taking a look at an app to take the YouTube experience on your smartphone to a whole new level. It would be…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Ethical Hacking

https://cdn-images-1.medium.com/max/1170/1*OCVNtsDskViRoyQtogH4Pg.jpeg
Ethical Hacking is an authorized practice of bypassing system security to identify potential data breaches and threats in a network. The…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacker Noon - Medium
The Easiest Way To Build Your IoT Dashboard

How to use the data Internet of Things generates? Why we need to analyze it? And finally, what tools to use to build an information system?
Read the full story

___________________________
@hacking_Attack
@Hacking_Video

Download Free Courses
Full Stack Web Development Bootcamp with React and Python

https://s3.eu-central-1.wasabisys.com/courseupload/2021/05/Screen-Shot-2021-05-06-at-9.38.16-AM.png Full Stack Web Development Bootcamp with React and Python — Udemy — Last updated 4/2021 — Free download
Practical full stack web development bootcamp: JavaScript, React, Python, Flask, API, Git and VS Code
What you’ll learn
*

What is API and how API works
*

How to build Single Page Application using React
*

Connect frontend application written in React with backend application written in Python
*

How to build backend API service
*

Use Python Flask for building backend API service
*

Use React Components, props and state
Requirements

*

Basic software development knowledge
*

Basic programming skills
Description
This is the React and Python Flask Full Stack Web Development Bootcamp. It is a practical course where you will start building real application from the first lecture. Application will consist of the frontend and backend parts. The frontend will be built using JavaScript React. The backend API will be built using Python Flask.

The practical full stack web development bootcamp includes: JavaScript, React, Python, Flask, API, Git and VS Code

During the creation of the frontend app you will perform the following practical tasks:

1. Initialize a React app using create-react-app
2. Create different React Components
3. Use useEffect and useState React hooks
4. Adjust favicon.ico in the frontend app
5. Create and insert an svg logo
6. Making API request to the Unsplash API
7. Using React props and state

While making an API app you will perform the following practical tasks:

1. Create a Python virtual environment using pipenv
2. Install and use Python packages such as Flask, dotenv and Requests
3. Creating Flask routes
4. Making external API calls from the Flask app
5. Accepting requests from the clients

You will also learn how to use following applications:

1. Visual Studio Code
2. Git and GitHub
3. Postman

With this course you will get lifetime-long access to more than 100 lectures and tens of practical exercises. After the course you will become a full stack web developer with practical knowledge about JavaScript React and Python Flask.

You will also get 30-days money-back guarantee. No questions asked!

Don’t wait and join the course now!
Who this course is for:

* Web developers
* Frontend developers
* Backend developers
* Full stack developers
DOWNLOAD
Filename: Full Stack Web Development Bootcamp with React and Python.part3.rar (download) Filesize: 741.27 MB
Course Content: https://www.udemy.com/course/full-stack-web-development-bootcamp/

___________________________
@hacking_Attack
@Hacking_Video

Using Nmap during Reconnaissance phase?
https://www.reddit.com/r/Pentesting/comments/noccqe/using_nmap_during_reconnaissance_phase/

Would Nmap be used during the reconnaissance phase or scanning phase for acquiring more information about the ports open ect? I have read some sources that say during reconnaissance phase you shouldn't be interacting with the target and others that say you should find out details using software such as nmap submitted by /u/Axolotlfc (https://www.reddit.com/user/Axolotlfc)
[link] (https://www.reddit.com/r/Pentesting/comments/noccqe/using_nmap_during_reconnaissance_phase/) [comments] (https://www.reddit.com/r/Pentesting/comments/noccqe/using_nmap_during_reconnaissance_phase/)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
What Microsoft Officials Know About Russia's Phishing Hack Targeting USAID

https://external-preview.redd.it/NjyytGUXv2vtBtcD6b_F_6NFtnHt1enAwXJNvDIcaqM.jpg?width=640&crop=smart&auto=webp&s=b78255dd0b487ea9750e854506c03cf992010e06 submitted by /u/Akkeri
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

RECOMMENDED BOOKS FOR BUG HUNTING

Today I’m gonna share some books for bug hunting for beginners.Continue reading on Medium »
Read more...

Kali Linux Tutorials
Eyeballer : Convolutional Neural Network For Analyzing Pentest Screenshots

Eyeballer is meant for large-scope network penetration tests where you need to find “interesting” targets from a huge set of web-based hosts. Go ahead and use your favorite screenshotting tool like normal (EyeWitness or GoWitness) and then run them through Eyeballer to tell you what’s likely to contain vulnerabilities, and what isn’t. Example Labels Old-Looking […]

The post Eyeballer : Convolutional Neural Network For Analyzing Pentest Screenshots appeared first on Kali Linux Tutorials.

___________________________
@hacking_Attack
@Hacking_Video