Have you ever been curious about the data an app sends from your phone to its server? You are in the right place, we are going to detail…Continue reading on Medium » (https://ndungunjenga96.medium.com/unmasking-communication-between-an-android-app-and-its-server-ssl-pinning-bypass-a470400e73ad?source=rss------bug_bounty-5)
___________________________
@hacking_Attack
@Hacking_Video
___________________________
@hacking_Attack
@Hacking_Video
Medium
Unmasking Communication Between an Android App and its Server(SSL PINNING BYPASS)
Have you ever been curious about the data an app sends from your phone to its server? You are in the right place, we are going to detail…
Shepard - In Progress Persistent Download/Upload/Execution Tool Using Windows BITS
http://www.kitploit.com/2021/06/shepard-in-progress-persistent.html
___________________________
@hacking_Attack
@Hacking_Video
http://www.kitploit.com/2021/06/shepard-in-progress-persistent.html
___________________________
@hacking_Attack
@Hacking_Video
KitPloit - PenTest & Hacking Tools
Shepard - In Progress Persistent Download/Upload/Execution Tool Using Windows BITS
This is an IN PROGRESS persistance tool using Windows (https://www.kitploit.com/search/label/Windows) Background Intelligent Transfer Service (BITS). Functionality: File Download, File Exfiltration, File Download + Persistent Execution Usage: run shepard.exe as Administrator with the following command line (https://www.kitploit.com/search/label/Command%20Line) arguments -d remoteLocation, writePath: regular file download to a local path of your choice -e remoteLocation, localPath: regular file upload from a local path of your choice (only sends to IIS server, this is a limitation with BITS) -dr remoteLocation, writePath, [optionalFileArgs]: file download to a path of your choice, and will attempt to maintain persitance. The downloaded file will attempt to run with optionalFileArgs and BITS will check back every 30 seconds to make sure the file is still running on the compromised system. Running this executable with no arguments or an incorrect amount of arguments will cause shepard to exit cleanly.
BINDSHELL
The server (victim) is written using C#. It listens on port 6006. Usage: run shepardsbind_serv.exe with no arguments. The client (attacker) is written using Python and takes one argument: the IP address of the victim's machine. Usage: run shepardsbind_recv.py with one argument: Running shepardsbind_recv.py with no arguments will return an error. The prompt will look like: %SBS%
Using them in conjunction
The only executable that must be on the victim's machine is shepard.exe. Host the download bindshell (https://www.kitploit.com/search/label/Bindshell) executable to a publicly accessible place. Shepard will download and run the bindshell executable, and the user can now use the python reciever. If the shell is found and killed, it will restart after 30 seconds. Last steps in progress: finding out how to rerun shepard.exe to redownload in case the shell executable is deleted. Most likely will use a service
Download Shepard (https://github.com/d3adzo/shepard)
___________________________
@hacking_Attack
@Hacking_Video
BINDSHELL
The server (victim) is written using C#. It listens on port 6006. Usage: run shepardsbind_serv.exe with no arguments. The client (attacker) is written using Python and takes one argument: the IP address of the victim's machine. Usage: run shepardsbind_recv.py with one argument: Running shepardsbind_recv.py with no arguments will return an error. The prompt will look like: %SBS%
Using them in conjunction
The only executable that must be on the victim's machine is shepard.exe. Host the download bindshell (https://www.kitploit.com/search/label/Bindshell) executable to a publicly accessible place. Shepard will download and run the bindshell executable, and the user can now use the python reciever. If the shell is found and killed, it will restart after 30 seconds. Last steps in progress: finding out how to rerun shepard.exe to redownload in case the shell executable is deleted. Most likely will use a service
Download Shepard (https://github.com/d3adzo/shepard)
___________________________
@hacking_Attack
@Hacking_Video
KitPloit - PenTest & Hacking Tools
Leading source of security tools, hacking tools, cybersecurity and network security. Learn about new tools and updates in one place.
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
BugGyaan Blog
https://cdn-images-1.medium.com/max/600/1*XkF_HyTRl8GzXO9RLY1spA.png
Welcome to the BugGyaan Blog!
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
BugGyaan Blog
https://cdn-images-1.medium.com/max/600/1*XkF_HyTRl8GzXO9RLY1spA.png
Welcome to the BugGyaan Blog!
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
BugGyaan Blog
Welcome to the BugGyaan Blog!
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Reverse Engineering | TryHackMe Writeup
https://cdn-images-1.medium.com/max/1680/1*325iRMMQV2gupfGta-J7bQ.png
A very simple room with three task that have us reverse engineering some simple programs to finds passwords. To prepare, all we have to do…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Reverse Engineering | TryHackMe Writeup
https://cdn-images-1.medium.com/max/1680/1*325iRMMQV2gupfGta-J7bQ.png
A very simple room with three task that have us reverse engineering some simple programs to finds passwords. To prepare, all we have to do…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
Reverse Engineering | TryHackMe Writeup
A very simple room with three task that have us reverse engineering some simple programs to finds passwords. To prepare, all we have to do…
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Impacket Deep Dives Vol. 2: Attacking Kerberos
https://cdn-images-1.medium.com/max/658/1*7gvpl8RjVao0BsZLjghuqA.png
There are lots of tools out there for attacking Kerberos, but lots of them are written in PowerShell, so they don’t work well with Linux.
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Impacket Deep Dives Vol. 2: Attacking Kerberos
https://cdn-images-1.medium.com/max/658/1*7gvpl8RjVao0BsZLjghuqA.png
There are lots of tools out there for attacking Kerberos, but lots of them are written in PowerShell, so they don’t work well with Linux.
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
Impacket Deep Dives Vol. 2: Attacking Kerberos
There are lots of tools out there for attacking Kerberos, but lots of them are written in PowerShell, so they don’t work well with Linux.
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
HackTheBox Writeup — ScriptKiddie
https://cdn-images-1.medium.com/max/1920/0*atA_G5fdJQzFLbFn
Hello Guys , I am Faisal Husaini. My username on HTB is “fa1sal” . Also join me on discord.
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
HackTheBox Writeup — ScriptKiddie
https://cdn-images-1.medium.com/max/1920/0*atA_G5fdJQzFLbFn
Hello Guys , I am Faisal Husaini. My username on HTB is “fa1sal” . Also join me on discord.
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
HackTheBox Writeup — ScriptKiddie
Hello Guys , I am Faisal Husaini. My username on HTB is “fa1sal” . Also join me on discord.
Hacking Articles Tips Tricks Videos Tutorials
Photo
KitPloit - PenTest Tools!
Shepard - In Progress Persistent Download/Upload/Execution Tool Using Windows BITS
https://1.bp.blogspot.com/-iYsKmrcpAhU/YLc08wdJYXI/AAAAAAAAXqs/Ljc79r_4CjQdUY5hYAlGS-ZPCvWBhgJaQCNcBGAsYHQ/w640-h360/malware.png
This is an IN PROGRESS persistance tool using Windows Background Intelligent Transfer Service (BITS).
Functionality: File Download, File Exfiltration, File Download + Persistent Execution
Usage: run shepard.exe as Administrator with the following command line arguments
-d remoteLocation, writePath: regular file download to a local path of your choice
-e remoteLocation, localPath: regular file upload from a local path of your choice (only sends to IIS server, this is a limitation with BITS)
-dr remoteLocation, writePath, [optionalFileArgs]: file download to a path of your choice, and will attempt to maintain persitance. The downloaded file will attempt to run with optionalFileArgs and BITS will check back every 30 seconds to make sure the file is still running on the compromised system.
Running this executable with no arguments or an incorrect amount of arguments will cause shepard to exit cleanly.
BINDSHELL
The server (victim) is written using C#. It listens on port 6006.
Usage: run shepardsbind_serv.exe with no arguments.
The client (attacker) is written using Python and takes one argument: the IP address of the victim's machine. Usage: run shepardsbind_recv.py with one argument: Using them in conjunction
The only executable that must be on the victim's machine is shepard.exe. Host the download bindshell executable to a publicly accessible place. Shepard will download and run the bindshell executable, and the user can now use the python reciever. If the shell is found and killed, it will restart after 30 seconds. Last steps in progress: finding out how to rerun shepard.exe to redownload in case the shell executable is deleted. Most likely will use a service
Download Shepard
___________________________
@hacking_Attack
@Hacking_Video
Shepard - In Progress Persistent Download/Upload/Execution Tool Using Windows BITS
https://1.bp.blogspot.com/-iYsKmrcpAhU/YLc08wdJYXI/AAAAAAAAXqs/Ljc79r_4CjQdUY5hYAlGS-ZPCvWBhgJaQCNcBGAsYHQ/w640-h360/malware.png
This is an IN PROGRESS persistance tool using Windows Background Intelligent Transfer Service (BITS).
Functionality: File Download, File Exfiltration, File Download + Persistent Execution
Usage: run shepard.exe as Administrator with the following command line arguments
-d remoteLocation, writePath: regular file download to a local path of your choice
-e remoteLocation, localPath: regular file upload from a local path of your choice (only sends to IIS server, this is a limitation with BITS)
-dr remoteLocation, writePath, [optionalFileArgs]: file download to a path of your choice, and will attempt to maintain persitance. The downloaded file will attempt to run with optionalFileArgs and BITS will check back every 30 seconds to make sure the file is still running on the compromised system.
Running this executable with no arguments or an incorrect amount of arguments will cause shepard to exit cleanly.
BINDSHELL
The server (victim) is written using C#. It listens on port 6006.
Usage: run shepardsbind_serv.exe with no arguments.
The client (attacker) is written using Python and takes one argument: the IP address of the victim's machine. Usage: run shepardsbind_recv.py with one argument: Using them in conjunction
The only executable that must be on the victim's machine is shepard.exe. Host the download bindshell executable to a publicly accessible place. Shepard will download and run the bindshell executable, and the user can now use the python reciever. If the shell is found and killed, it will restart after 30 seconds. Last steps in progress: finding out how to rerun shepard.exe to redownload in case the shell executable is deleted. Most likely will use a service
Download Shepard
___________________________
@hacking_Attack
@Hacking_Video
KitPloit - PenTest & Hacking Tools
Shepard - In Progress Persistent Download/Upload/Execution Tool Using Windows BITS
Shepard - In Progress Persistent Download/Upload/Execution Tool Using Windows BITS
This is an IN PROGRESS persistance tool using Windows Background Intelligent Transfer Service (BITS). Functionality: File Download, File Exfiltration, File Download + Persistent Execution Usage: run shepard.exe as Administrator with the following command line arguments -d remoteLocation, writePath: regular file download to a local path of your choice -e remoteLocation, localPath: regular file upload from a local path of your choice (only sends to IIS server, this is a limitation with BITS) -dr remoteLocation, writePath, optionalFileArgs: file download to a path of your choice, and will attempt to maintain persitance. The downloaded file will attempt to run with optionalFileArgs and BITS will check back every 30 seconds to make sure the file is still running on the compromised system. Running this executable with no arguments or an incorrect amount of arguments will cause shepard to exit cleanly.BINDSHELL The server (victim) is written using C#. It listens on port 6006. Usage: run shepardsbind_serv.exe with no arguments. The client (attacker) is written using Python and takes one argument: the IP address of the victim's machine. Usage: run shepardsbind_recv.py with one argument: Running shepardsbind_recv.py with no arguments will return an error. The prompt will look like: %SBS% Using them in conjunction The only executable that must be on the victim's machine is shepard.exe. Host the download bindshell executable to a publicly accessible place. Shepard will download and run the bindshell executable, and the user can now use the python reciever. If the shell is found and killed, it will restart after 30 seconds. Last steps in progress: finding out how to rerun shepard.exe to redownload in case the shell executable is deleted. Most likely will use a service Download Shepard
Read more...
___________________________
@hacking_Attack
@Hacking_Video
This is an IN PROGRESS persistance tool using Windows Background Intelligent Transfer Service (BITS). Functionality: File Download, File Exfiltration, File Download + Persistent Execution Usage: run shepard.exe as Administrator with the following command line arguments -d remoteLocation, writePath: regular file download to a local path of your choice -e remoteLocation, localPath: regular file upload from a local path of your choice (only sends to IIS server, this is a limitation with BITS) -dr remoteLocation, writePath, optionalFileArgs: file download to a path of your choice, and will attempt to maintain persitance. The downloaded file will attempt to run with optionalFileArgs and BITS will check back every 30 seconds to make sure the file is still running on the compromised system. Running this executable with no arguments or an incorrect amount of arguments will cause shepard to exit cleanly.BINDSHELL The server (victim) is written using C#. It listens on port 6006. Usage: run shepardsbind_serv.exe with no arguments. The client (attacker) is written using Python and takes one argument: the IP address of the victim's machine. Usage: run shepardsbind_recv.py with one argument: Running shepardsbind_recv.py with no arguments will return an error. The prompt will look like: %SBS% Using them in conjunction The only executable that must be on the victim's machine is shepard.exe. Host the download bindshell executable to a publicly accessible place. Shepard will download and run the bindshell executable, and the user can now use the python reciever. If the shell is found and killed, it will restart after 30 seconds. Last steps in progress: finding out how to rerun shepard.exe to redownload in case the shell executable is deleted. Most likely will use a service Download Shepard
Read more...
___________________________
@hacking_Attack
@Hacking_Video
Hacking Articles Tips Tricks Videos Tutorials
Photo
Black Hat Ethical Hacking
VMware Sounds Ransomware Alarm Over Critical Severity Bug
https://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg VMware Sounds Ransomware Alarm Over Critical Severity BugPost Views: 402
Reading Time: 1 Minute
VMware patched a critical bug impacting its vCenter Server platform with a severity rating of 9.8 out of 10. The company said the flaw could allow a remote attacker to exploit its products and take control of a company’s affected system.
VMware went a step further on Tuesday, calling on IT security teams – already on high alert over an uptick in costly and destructive ransomware attacks – to patch systems fast.
“In this era of ransomware it is safest to assume that an attacker is already inside the network somewhere, on a desktop and perhaps even in control of a user account, which is why we strongly recommend declaring an emergency change and patching as soon as possible,” wrote VMware’s Bob Plankers, technical marketing architect in a Tuesday post. Critical Bug Impacts Critical Mass?The vulnerability, tracked as CVE-2021-21985, impacts vCenter Server platforms, which is in widespread use and used to administer VMware’s market leading vSphere and ESXi host products.
Claire Tills, a senior research engineer with Tenable wrote in a post commenting on the bug, “patching these flaws should be a top priority. Successful exploitation would allow an attacker to execute arbitrary commands on the underlying vCenter host.”
See Also: PDF Feature ‘Certified’ Widely Vulnerable to Attack Tills note exploiting the vulnerability is trivial. All an attacker would need to do is be able to access vCenter Server over port 443, she wrote. “Even if an organization has not exposed vCenter Server externally, attackers can still exploit this flaw once inside a network.”
Kenna Security’s director of security research Jerry Gamblin, however noted estimates of how many networks are vulnerable attacks is relatively small.
“Some early research from Rapid 7 shows that only around 6K’s VCenters are exposed directly to the internet, which makes the ‘blast radius’ tiny and the initial entry point into a network unlikely with this pair of CVES,” Gamblin wrote in an email commentary to Threatpost.
Gamblin is referring to both the critical CVE-2021-21985 bug and a second vulnerability reported by VMware on Tuesday, CVE-2021-21986. This second bug has a medium CVSS severity rating of 6.5 and is tied to an authentication mechanism issue in vCenter Server plugins.
See Also: Offensive Security Tool: Snallygaster Breaking Down the Critical BugWorkarounds and updates are available to mitigate both flaws, according to VMware.
“The vSphere Client (HTML5) contains a remote code execution vulnerability due to lack of input validation in the Virtual SAN Health Check plug-in which is enabled by default in vCenter Server,” VMware’s security bulletin states for the critical (CVE-2021-21985) bug. “The affected Virtual SAN Health Check plug-in is enabled by default in all vCenter Server deployments, whether or not vSAN is being used.”
VMware’s Virtual San (or vSAN) is a software-defined storage solution that typically supports hyper-converged infrastructure. The Health Check plug-in “checks to monitor the status of cluster components, diagnose issues, and troubleshoot problems,” according to a VMware description of the tool.
VMware credited the researcher identified only as “Ricter Z” of 360 Noah Lab for finding the bug. See Also: Hacking Stories: Xbox UndergroundSource: threatpost.com (Click Link)Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/06/Untitle[...]
___________________________
@hacking_Attack
@Hacking_Video
VMware Sounds Ransomware Alarm Over Critical Severity Bug
https://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg VMware Sounds Ransomware Alarm Over Critical Severity BugPost Views: 402
Reading Time: 1 Minute
VMware patched a critical bug impacting its vCenter Server platform with a severity rating of 9.8 out of 10. The company said the flaw could allow a remote attacker to exploit its products and take control of a company’s affected system.
VMware went a step further on Tuesday, calling on IT security teams – already on high alert over an uptick in costly and destructive ransomware attacks – to patch systems fast.
“In this era of ransomware it is safest to assume that an attacker is already inside the network somewhere, on a desktop and perhaps even in control of a user account, which is why we strongly recommend declaring an emergency change and patching as soon as possible,” wrote VMware’s Bob Plankers, technical marketing architect in a Tuesday post. Critical Bug Impacts Critical Mass?The vulnerability, tracked as CVE-2021-21985, impacts vCenter Server platforms, which is in widespread use and used to administer VMware’s market leading vSphere and ESXi host products.
Claire Tills, a senior research engineer with Tenable wrote in a post commenting on the bug, “patching these flaws should be a top priority. Successful exploitation would allow an attacker to execute arbitrary commands on the underlying vCenter host.”
See Also: PDF Feature ‘Certified’ Widely Vulnerable to Attack Tills note exploiting the vulnerability is trivial. All an attacker would need to do is be able to access vCenter Server over port 443, she wrote. “Even if an organization has not exposed vCenter Server externally, attackers can still exploit this flaw once inside a network.”
Kenna Security’s director of security research Jerry Gamblin, however noted estimates of how many networks are vulnerable attacks is relatively small.
“Some early research from Rapid 7 shows that only around 6K’s VCenters are exposed directly to the internet, which makes the ‘blast radius’ tiny and the initial entry point into a network unlikely with this pair of CVES,” Gamblin wrote in an email commentary to Threatpost.
Gamblin is referring to both the critical CVE-2021-21985 bug and a second vulnerability reported by VMware on Tuesday, CVE-2021-21986. This second bug has a medium CVSS severity rating of 6.5 and is tied to an authentication mechanism issue in vCenter Server plugins.
See Also: Offensive Security Tool: Snallygaster Breaking Down the Critical BugWorkarounds and updates are available to mitigate both flaws, according to VMware.
“The vSphere Client (HTML5) contains a remote code execution vulnerability due to lack of input validation in the Virtual SAN Health Check plug-in which is enabled by default in vCenter Server,” VMware’s security bulletin states for the critical (CVE-2021-21985) bug. “The affected Virtual SAN Health Check plug-in is enabled by default in all vCenter Server deployments, whether or not vSAN is being used.”
VMware’s Virtual San (or vSAN) is a software-defined storage solution that typically supports hyper-converged infrastructure. The Health Check plug-in “checks to monitor the status of cluster components, diagnose issues, and troubleshoot problems,” according to a VMware description of the tool.
VMware credited the researcher identified only as “Ricter Z” of 360 Noah Lab for finding the bug. See Also: Hacking Stories: Xbox UndergroundSource: threatpost.com (Click Link)Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/06/Untitle[...]
___________________________
@hacking_Attack
@Hacking_Video