Hacking on Medium
Ethical Hacking (part 2.0/20): Network scanning in depth with examples and tools

https://cdn-images-1.medium.com/max/1920/1*AVhKZICqoNVxvZ_Pvm9adA.jpeg
Note: This article is being updated regularly. The latest update is as of 01/06/2021

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Online DNS reconnaissance with Robtex

https://cdn-images-1.medium.com/max/1173/1*PzUdyKDaLUZW03LIgLGOzg.png
DNS reconnaissance is a piece of the data-gathering stage on a penetration test engagement. When a penetration tester is playing out, DNS…

Continue reading on Purple TEAM »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Analysis of the Vulnerability Found in the vaults.sx Smart Contract

https://cdn-images-1.medium.com/max/1200/1*PlUsMWqAojyIiZq-Vt4gMw.png
Our analysis on the EOS SX vault attack in May 2021.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Deep Web
Alternative to Tor Browser

Hello, I'm looking to install a browser/os directly through Linux (Debian/Buster) on a Chromebook. I have Tor and would like to explore other options.

TIA

submitted by /u/MycoMitch
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Python Cybersecurity - Zip File Password Cracker

https://external-preview.redd.it/UNSX5AN2H8qNUzK9UBvzZXd95n5QNjJaDBhMfl62i4U.jpg?width=320&crop=smart&auto=webp&s=9b47285a1e6d1957866b8d53f09c1573a831bfd5 submitted by /u/EssayPuzzle
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Best YouTube channels to learn Ethical Hacking 2021

Made this fresh list of ethical hacking YouTube channels you might like these as well.

https://youtu.be/IU1QVNpFASA

submitted by /u/dominatevil
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

PE Reflection
https://www.reddit.com/r/redteamsec/comments/nq48ao/pe_reflection/

submitted by /u/dmchell (https://www.reddit.com/user/dmchell)
[link] (https://0xdarkvortex.dev/research/feature-update/2021/06/01/PE-Reflection-Long-Live-The-King/) [comments] (https://www.reddit.com/r/redteamsec/comments/nq48ao/pe_reflection/)

___________________________
@hacking_Attack
@Hacking_Video

<GeoCash MainNet transition >

As you know, the process of moving GeoCash on the BSC mainnet has begun. The new version of the GeoCash app is now live on BSC; however…Continue reading on Medium »
Read more...

https://geodb.medium.com/geocash-mainnet-transition-aeb1760f8b0f?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

As you know, the process of moving GeoCash on the BSC mainnet has begun. The new version of the GeoCash app is now live on BSC; however…Continue reading on Medium » (https://geodb.medium.com/geocash-mainnet-transition-aeb1760f8b0f?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Meat Producer JBS USA Hit By Ransomware Attack

The company says recovery from the attack may delay transactions with customers and suppliers.

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Quick Take on Smishing

https://cdn-images-1.medium.com/max/600/1*gsIIXsBtqkR-kYZkr0KtTQ.jpeg
Smishing: Why Text-Based Phishing Should Be on Every CISO’s Radar — Paul Richards, ThreatPost, 4/27/2021

Continue reading on Hybrid Analyst »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Writeup Response box

https://cdn-images-1.medium.com/max/900/0*CTYApwNuncCiVOh2.png
This Box is Ranked as Medium I hope You will Have Fun While Hacking it.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
Dent - A Framework For Creating COM-based Bypasses Utilizing Vulnerabilities In Microsoft's WDAPT Sensors

https://1.bp.blogspot.com/-loxYtPpgihM/YLax1HfzVaI/AAAAAAAAWgU/ll5sJXIgScY8XiSYSZp8cnKGRZAasZu3ACNcBGAsYHQ/s320/Dent_1_dent.png More InformationIf you want to learn more about the techniques utlized in this framework please take a look at this article. DescriptionThis framework generates code to exploit vulnerabilties in Microsoft Defender Advanced Threat Protection's Attack Surface Reduction (ASR) rules to execute shellcode without being detected or prevented. ASR was designed to be the first line of defense, detecting events based on actions that violate a set of rules. These rules focus on specific behavior indicators on the endpoint that are often associated with an attacker’s Tactics, Techniques, or Procedures (TTPs). These rules have a heavy focus on the Microsoft Office suite, as this is a common attack vector for establishing a remote foothold on an endpoint. A lot of the rule-based controls focus on network-based or process-based behavior indicators that stand out from the normal business operation. These rules focus on either the initial compromise of a system or a technique that can severely impact an organization (e.g., disclosure of credentials or ransomware). They cover a large amount of the common attack surface and focus on hampering known techniques used to compromise assets.

Dent takes advantage of several vulnerabilities to bypass these resticive controls to execute payloads on an endpoint without being blocked or effectively detected by Microsoft Defender Advanced Threat Protection sensors. The article above outlines this vulnerabilties that are STILL present in Microsoft Defender Advanced Threat Protection even after disclosure. InstallThe first step as always is to clone the repo, then build it go build Dent.go Help./Dent -h

________ __
\______ \ ____ _____/ |_
| | \_/ __ \ / \ __\
| | \ ___/| | \ |
/_______ /\___ >___| /__|
\/ \/ \/
(@Tyl0us)

"Call someone a hero long enough, and they'll believe it. They'll become it.
They have no choice. Let them call you a monster, and you become a monster."
Usage of ./Dent:
-C string
Name of the COM object.
-N string
Name of the XLL playload when it's writen to disk.
-O string
Name of the output file. (default "output.txt")
-P string
Path of the DLL for your COM object. (Either use \\ or '' around the path)
-U string
URL where the base64 encoded XLL payload is hosted.
-show
Display the script in the terminal. WeaponizingThis framwork is intended for exploiting vulnerabilities and deficiencies in Microsoft Defender Advanced Threat Protection, because of that it does not actually generate any payloads/implants. In order to generate those, you can use a large number of tools publicly availalble, however all research, development and testing was done using ScareCrow. Microsoft Defender Advanced Threat Protection doesn't rely on userland hooking for telemetry rather it utilized various other mechanisms such as kernel callbacks. From testing, this framework works extremely well at bypassing Microsoft Defender Advanced Threat Protection to execute shellcode. TechniquesAt the time of release there are currently two techniques. I will be constantly adding different ones that utilize these vulnerabilities in different ways peroidically so please stay tuned for more. Fake COM Object ModeCOM objects are often created when an application is being installed on to a system. Once created, any application or script can call them, however this isn't the only way to create them. By modifying/creating registry keys into the HKEY_CLASSES_ROOTsection of the Windows Registry, we can[...]

___________________________
@hacking_Attack
@Hacking_Video