func GetLocalIp() string
Returns a local IP address of the machine.
func GetGlobalIp() string
Returns a global IP address of the machine.
func IsRoot() bool
Check if user has administrative privilleges.
func Processes() (map[int]string, error)
Returns all processes' PIDs and their corresponding names.
func Iface() string, string
Returns name of currently used wireless interface and it's MAC address.
func Ifaces() []string
Returns slice containing names of all local interfaces.
func Disks() ([]string, error)
Lists local storage devices
func Users() []string, err
Returns list of known users.
func Info() map[string]string
Returns basic system information.
Possible fields: username, hostname, go_os, os,
platform, cpu_num, kernel, core, local_ip, ap_ip, global_ip, mac.
If the field cannot be resolved, it defaults to "N/A" value.
func DnsLookup(hostname string) ([]string, error)
Performs DNS lookup
func RdnsLookup(ip string) ([]string, error)
Performs reverse DNS lookup
func HostsPassive(interval string) []string, err
Passively discovers active hosts on a network using ARP monitoring.
Discovery time can be changed using argument.
func FilePermissions(filename string) (bool,bool)
Checks if file has read and write permissions.
func Portscan(target string, timeout, threads int) []int
Returns list of open ports on target.
func PortscanSingle(target string, port int) bool
Returns true if selected port is open.
func BannerGrab(target string, port int) (string, error)
Grabs a service banner string from a given port.
func Networks() ([]string, error)
Returns list of nearby wireless ne tworks.
Administration functions
func CmdOut(command string) string, error
Execute a command and return it's output.
func CmdOutPlatform(commands map[string]string) (string, error)
Executes commands in platform-aware mode.
For example, passing {"windows":"dir", "linux":"ls"} will execute different command,
based on platform the implant was launched on.
func CmdRun(command string)
Unlike cmd_out(), cmd_run does not return anything, and prints output and error to STDOUT.
func CmdDir(dirs_cmd map[string]string) ([]string, error)
Executes commands in directory-aware mode.
For example, passing {"/etc" : "ls"} will execute command "ls" under /etc directory.
func CmdBlind(command string)
Run command without supervision, do not print any output.
func CreateUser(username, password string) error
Creates a new user on the system.
func Bind(port int)
Run a bind shell on a given port.
func Reverse(host string, port int)
Run a reverse shell.
func SendDataTcp(host string, port int, data string) error
Sends string to a remote host using TCP protocol.
func SendDataUdp(host string, port int, data string) error
Sends string to a remote host using UDP protocol.
func Download(url string) error
Downloads a file from url and save it under the same name.
func CopyFile(src string, dst string) error
Copy a file from one place to another
func CurrentDirFiles() []string, error
Returns list of files from current directory
Evasion functions
func PkillPid(pid int) error
Kill process by PID.
func PkillName(name string) errror
Kill all processes that contain [name].
func PkillAv() err
Kill most common AV processes.
func Wait(interval string)
Does nothing for a given interval of time.
func Remove()
Removes binary from the host.
func SetTtl(interval string)
Set time-to-live of the binary.
Should be launched as goroutine.
func ClearLogs() error
Clears most system logs.
Sandbox detection functions
detection methods return true. ">func SandboxFilepath() bool
Detect sandbox by looking for common sandbox filepaths.
Compatible only with windows.
func SandboxProc() bool
___________________________
@hacking_Attack
@Hacking_Video
Returns a local IP address of the machine.
func GetGlobalIp() string
Returns a global IP address of the machine.
func IsRoot() bool
Check if user has administrative privilleges.
func Processes() (map[int]string, error)
Returns all processes' PIDs and their corresponding names.
func Iface() string, string
Returns name of currently used wireless interface and it's MAC address.
func Ifaces() []string
Returns slice containing names of all local interfaces.
func Disks() ([]string, error)
Lists local storage devices
func Users() []string, err
Returns list of known users.
func Info() map[string]string
Returns basic system information.
Possible fields: username, hostname, go_os, os,
platform, cpu_num, kernel, core, local_ip, ap_ip, global_ip, mac.
If the field cannot be resolved, it defaults to "N/A" value.
func DnsLookup(hostname string) ([]string, error)
Performs DNS lookup
func RdnsLookup(ip string) ([]string, error)
Performs reverse DNS lookup
func HostsPassive(interval string) []string, err
Passively discovers active hosts on a network using ARP monitoring.
Discovery time can be changed using argument.
func FilePermissions(filename string) (bool,bool)
Checks if file has read and write permissions.
func Portscan(target string, timeout, threads int) []int
Returns list of open ports on target.
func PortscanSingle(target string, port int) bool
Returns true if selected port is open.
func BannerGrab(target string, port int) (string, error)
Grabs a service banner string from a given port.
func Networks() ([]string, error)
Returns list of nearby wireless ne tworks.
Administration functions
func CmdOut(command string) string, error
Execute a command and return it's output.
func CmdOutPlatform(commands map[string]string) (string, error)
Executes commands in platform-aware mode.
For example, passing {"windows":"dir", "linux":"ls"} will execute different command,
based on platform the implant was launched on.
func CmdRun(command string)
Unlike cmd_out(), cmd_run does not return anything, and prints output and error to STDOUT.
func CmdDir(dirs_cmd map[string]string) ([]string, error)
Executes commands in directory-aware mode.
For example, passing {"/etc" : "ls"} will execute command "ls" under /etc directory.
func CmdBlind(command string)
Run command without supervision, do not print any output.
func CreateUser(username, password string) error
Creates a new user on the system.
func Bind(port int)
Run a bind shell on a given port.
func Reverse(host string, port int)
Run a reverse shell.
func SendDataTcp(host string, port int, data string) error
Sends string to a remote host using TCP protocol.
func SendDataUdp(host string, port int, data string) error
Sends string to a remote host using UDP protocol.
func Download(url string) error
Downloads a file from url and save it under the same name.
func CopyFile(src string, dst string) error
Copy a file from one place to another
func CurrentDirFiles() []string, error
Returns list of files from current directory
Evasion functions
func PkillPid(pid int) error
Kill process by PID.
func PkillName(name string) errror
Kill all processes that contain [name].
func PkillAv() err
Kill most common AV processes.
func Wait(interval string)
Does nothing for a given interval of time.
func Remove()
Removes binary from the host.
func SetTtl(interval string)
Set time-to-live of the binary.
Should be launched as goroutine.
func ClearLogs() error
Clears most system logs.
Sandbox detection functions
detection methods return true. ">func SandboxFilepath() bool
Detect sandbox by looking for common sandbox filepaths.
Compatible only with windows.
func SandboxProc() bool
___________________________
@hacking_Attack
@Hacking_Video
Detect sandbox by looking for common sandbox processes.
func SandboxSleep() bool
Detect sandbox by looking for sleep-accelleration mechanism.
func SandboxDisk(size int) bool
Detect sandbox by looking for abnormally small disk size.
func SandboxCpu(cores int) bool
Detect sandbox by looking for abnormally small number of cpu cores.
func SandboxRam(ram_mb int) bool
Detect sandbox by looking for abnormally small amount of RAM.
func SandboxMac() bool
Detect sandbox by looking for sandbox-specific MAC address of the localhost.
func SandboxUtc() bool
Detect sandbox by looking for properly set UTC time zone.
func SandboxProcnum(proc_num int) bool
Detect sandbox if small number of running p rocesses
func SandboxTmp(entries int) bool
Detect sandbox if small number of entries under remporary dir
func SandboxAll() bool
Detect sandbox using all sandbox detection methods.
Returns true if any sandbox-detection method returns true.
func SandboxAll_n(num int) bool
Detect sandbox using all sandbox detection methods.
Returns true if at least detection methods return true.
Disruptive functions
is true, erases also partition table. func Forkbomb() Runs a forkbomb. func Shutdown() error Reboot the machine. ">func WifiDisconnect() error
Disconnects from wireless access point
func Wipe() error
Wipes out entire filesystem.
func EraseMbr(device string, partition_table bool) error
Erases MBR sector of a device.
If is true, erases also partition table.
func Forkbomb()
Runs a forkbomb.
func Shutdown() error
Reboot the machine.
Requirements
"github.com/google/gopacket"
"github.com/google/gopacket/layers"
"github.com/google/gopacket/pcap"
"github.com/robfig/cron"
"github.com/anvie/port-scanner"
"github.com/matishsiao/goInfo"
"github.com/fatih/color"
"github.com/minio/minio/pkg/disk"
"github.com/dustin/go-humanize"
"github.com/mitchellh/go-ps"
Disclaimer
Developers are not responsible for any misuse regarding this tool. Use it only against systems that you are permitted to attack.
Download Coldfire (https://github.com/redcode-labs/Coldfire)
___________________________
@hacking_Attack
@Hacking_Video
func SandboxSleep() bool
Detect sandbox by looking for sleep-accelleration mechanism.
func SandboxDisk(size int) bool
Detect sandbox by looking for abnormally small disk size.
func SandboxCpu(cores int) bool
Detect sandbox by looking for abnormally small number of cpu cores.
func SandboxRam(ram_mb int) bool
Detect sandbox by looking for abnormally small amount of RAM.
func SandboxMac() bool
Detect sandbox by looking for sandbox-specific MAC address of the localhost.
func SandboxUtc() bool
Detect sandbox by looking for properly set UTC time zone.
func SandboxProcnum(proc_num int) bool
Detect sandbox if small number of running p rocesses
func SandboxTmp(entries int) bool
Detect sandbox if small number of entries under remporary dir
func SandboxAll() bool
Detect sandbox using all sandbox detection methods.
Returns true if any sandbox-detection method returns true.
func SandboxAll_n(num int) bool
Detect sandbox using all sandbox detection methods.
Returns true if at least detection methods return true.
Disruptive functions
is true, erases also partition table. func Forkbomb() Runs a forkbomb. func Shutdown() error Reboot the machine. ">func WifiDisconnect() error
Disconnects from wireless access point
func Wipe() error
Wipes out entire filesystem.
func EraseMbr(device string, partition_table bool) error
Erases MBR sector of a device.
If is true, erases also partition table.
func Forkbomb()
Runs a forkbomb.
func Shutdown() error
Reboot the machine.
Requirements
"github.com/google/gopacket"
"github.com/google/gopacket/layers"
"github.com/google/gopacket/pcap"
"github.com/robfig/cron"
"github.com/anvie/port-scanner"
"github.com/matishsiao/goInfo"
"github.com/fatih/color"
"github.com/minio/minio/pkg/disk"
"github.com/dustin/go-humanize"
"github.com/mitchellh/go-ps"
Disclaimer
Developers are not responsible for any misuse regarding this tool. Use it only against systems that you are permitted to attack.
Download Coldfire (https://github.com/redcode-labs/Coldfire)
___________________________
@hacking_Attack
@Hacking_Video
GitHub
GitHub - google/gopacket: Provides packet processing capabilities for Go
Provides packet processing capabilities for Go. Contribute to google/gopacket development by creating an account on GitHub.
ThunderCats Hack the FSB | Your Taxes Didn’t Pay For This Op
https://www.reddit.com/r/redteamsec/comments/nvf5b5/thundercats_hack_the_fsb_your_taxes_didnt_pay_for/
submitted by /u/dmchell (https://www.reddit.com/user/dmchell)
[link] (https://labs.sentinelone.com/thundercats-hack-the-fsb-your-taxes-didnt-pay-for-this-op/) [comments] (https://www.reddit.com/r/redteamsec/comments/nvf5b5/thundercats_hack_the_fsb_your_taxes_didnt_pay_for/)
___________________________
@hacking_Attack
@Hacking_Video
https://www.reddit.com/r/redteamsec/comments/nvf5b5/thundercats_hack_the_fsb_your_taxes_didnt_pay_for/
submitted by /u/dmchell (https://www.reddit.com/user/dmchell)
[link] (https://labs.sentinelone.com/thundercats-hack-the-fsb-your-taxes-didnt-pay-for-this-op/) [comments] (https://www.reddit.com/r/redteamsec/comments/nvf5b5/thundercats_hack_the_fsb_your_taxes_didnt_pay_for/)
___________________________
@hacking_Attack
@Hacking_Video
reddit
ThunderCats Hack the FSB | Your Taxes Didn’t Pay For This Op
Posted in r/redteamsec by u/dmchell • 3 points and 0 comments
Hacking Articles Tips Tricks Videos Tutorials
Photo
Kali Linux Tutorials
Best WordPress Appointment Booking Plugins
WordPress is the most opted CMS around the world. As per stats, around 63.8% of CMS websites use WordPress. Why? Well, there are countless choices for themes and plugins that WordPress offers. Moreover, aspects like drag and drop editor, responsiveness, etc., make them more demanding. And these can be used to design and develop the […]
The post Best WordPress Appointment Booking Plugins appeared first on Kali Linux Tutorials.
___________________________
@hacking_Attack
@Hacking_Video
Best WordPress Appointment Booking Plugins
WordPress is the most opted CMS around the world. As per stats, around 63.8% of CMS websites use WordPress. Why? Well, there are countless choices for themes and plugins that WordPress offers. Moreover, aspects like drag and drop editor, responsiveness, etc., make them more demanding. And these can be used to design and develop the […]
The post Best WordPress Appointment Booking Plugins appeared first on Kali Linux Tutorials.
___________________________
@hacking_Attack
@Hacking_Video
Kali Linux Tutorials
Best WordPress Appointment Booking Plugins - Kali Linux Tutorials
WordPress is the most opted CMS around the world. As per stats, around 63.8% of CMS websites use WordPress. Why? Well, there are countless choices for themes and plugins that WordPress offers. Moreover, aspects like drag and drop editor, responsiveness, etc.…
Hacking Articles Tips Tricks Videos Tutorials
Photo
Dark Reading: Attacks/Breaches
Phished Account Credentials Mostly Verified in Hours
Almost two-thirds of all phished credentials are verified by attackers within a day and then used in a variety of schemes, including business email compromise and targeting other users with malicious code.
___________________________
@hacking_Attack
@Hacking_Video
Phished Account Credentials Mostly Verified in Hours
Almost two-thirds of all phished credentials are verified by attackers within a day and then used in a variety of schemes, including business email compromise and targeting other users with malicious code.
___________________________
@hacking_Attack
@Hacking_Video
Dark Reading: Attacks/Breaches
Colonial Pipeline CEO: Ransomware Attack Started via Pilfered 'Legacy' VPN Account
No multifactor authentication was attached to the stolen VPN password used by the attackers, Colonial Pipeline president & CEO Joseph Blount told a Senate committee today.
___________________________
@hacking_Attack
@Hacking_Video
Colonial Pipeline CEO: Ransomware Attack Started via Pilfered 'Legacy' VPN Account
No multifactor authentication was attached to the stolen VPN password used by the attackers, Colonial Pipeline president & CEO Joseph Blount told a Senate committee today.
___________________________
@hacking_Attack
@Hacking_Video
Dark Reading
Colonial Pipeline CEO: Ransomware Attack Started via Pilfered 'Legacy' VPN Account
No multi-factor authentication was attached to the stolen VPN password used by the attackers, Colonial Pipeline president & CEO Joseph Blount told a Senate committee today.
How i was able to bypass parental pin of showmax
https://abdulsec.medium.com/how-i-was-able-to-bypass-parental-pin-of-showmax-e6d6ec3af92d?source=rss------bug_bounty-5
Showmax is an online subscription video on demand service which launched in South Africa on 19 August 2015. Showmax is employing a…Continue reading on Medium » (https://abdulsec.medium.com/how-i-was-able-to-bypass-parental-pin-of-showmax-e6d6ec3af92d?source=rss------bug_bounty-5)
___________________________
@hacking_Attack
@Hacking_Video
https://abdulsec.medium.com/how-i-was-able-to-bypass-parental-pin-of-showmax-e6d6ec3af92d?source=rss------bug_bounty-5
Showmax is an online subscription video on demand service which launched in South Africa on 19 August 2015. Showmax is employing a…Continue reading on Medium » (https://abdulsec.medium.com/how-i-was-able-to-bypass-parental-pin-of-showmax-e6d6ec3af92d?source=rss------bug_bounty-5)
___________________________
@hacking_Attack
@Hacking_Video
Medium
How i was able to bypass parental pin of showmax
Showmax is an online subscription video on demand service which launched in South Africa on 19 August 2015. Showmax is employing a…
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Discussing Nation-State Cyber Intentions
https://cdn-images-1.medium.com/max/600/1*YwAZP8IQMnavXreOiYkEhQ.jpeg
Chaos for the Sake of Chaos? Yes, Nation-States Are That Cynical — Adam Darrah, Dark Reading, 6/2/2021
Continue reading on Hybrid Analyst »
___________________________
@hacking_Attack
@Hacking_Video
Discussing Nation-State Cyber Intentions
https://cdn-images-1.medium.com/max/600/1*YwAZP8IQMnavXreOiYkEhQ.jpeg
Chaos for the Sake of Chaos? Yes, Nation-States Are That Cynical — Adam Darrah, Dark Reading, 6/2/2021
Continue reading on Hybrid Analyst »
___________________________
@hacking_Attack
@Hacking_Video
Medium
Discussing Nation-State Cyber Intentions
Chaos for the Sake of Chaos? Yes, Nation-States Are That Cynical — Adam Darrah, Dark Reading, 6/2/2021
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
PG — My-CMSMS— Walkthrough (Offensive Security Proving Grounds Play Boxes)
https://cdn-images-1.medium.com/max/600/1*_TTnT3KVrdE9RK90eg-jOg.png
Introduction
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
PG — My-CMSMS— Walkthrough (Offensive Security Proving Grounds Play Boxes)
https://cdn-images-1.medium.com/max/600/1*_TTnT3KVrdE9RK90eg-jOg.png
Introduction
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
PG — My-CMSMS— Walkthrough (Offensive Security Proving Grounds Play Boxes)
Introduction
KitPloit - PenTest Tools!
ColdFire - Golang Malware Development Library
___________________________
@hacking_Attack
@Hacking_Video
ColdFire - Golang Malware Development Library
___________________________
@hacking_Attack
@Hacking_Video
KitPloit - PenTest & Hacking Tools
ColdFire - Golang Malware Development Library
How i was able to bypass parental pin of showmax
Showmax is an online subscription video on demand service which launched in South Africa on 19 August 2015. Showmax is employing a…Continue reading on Medium »
Read more...
Showmax is an online subscription video on demand service which launched in South Africa on 19 August 2015. Showmax is employing a…Continue reading on Medium »
Read more...
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Federales ejecutaron en secreto una aplicación de chat encriptada falsa y arrestaron a más de 800…
https://cdn-images-1.medium.com/max/998/0*VmVu_kNhXJZ3tuWD.jpg
PUBLICADO EN 8 JUNIO, 2021 POR EHACKING
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Federales ejecutaron en secreto una aplicación de chat encriptada falsa y arrestaron a más de 800…
https://cdn-images-1.medium.com/max/998/0*VmVu_kNhXJZ3tuWD.jpg
PUBLICADO EN 8 JUNIO, 2021 POR EHACKING
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
Federales ejecutaron en secreto una aplicación de chat encriptada falsa y arrestaron a más de 800 delincuentes.
PUBLICADO EN 8 JUNIO, 2021 POR EHACKING
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
FBI HACKING?!!?!? Did they h4x0r Bitcoin?
No. No they did not.
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
FBI HACKING?!!?!? Did they h4x0r Bitcoin?
No. No they did not.
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
FBI HACKING?!!?!? Did they h4x0r Bitcoin?
No. No they did not.