[InfectedHost1] (2) [InfectedHost1] ":akxr whoami" -----> [InfectedHostN] (n) [InfectedHostN] ":axkr whoami" -----> ............... ................................. -----> ............... Both [InfectedHost1] and [InfectedHostN] execute command and they try to send it to another nodes with preamble preserved '> (1) [TCP_client] ":akxr whoami" -----> [InfectedHost1]
(2) [InfectedHost1] ":akxr whoami" -----> [InfectedHostN]
(n) [InfectedHostN] ":axkr whoami" -----> ...............
................................. -----> ...............

Both [InfectedHost1] and [InfectedHostN] execute command and they try to send it to another nodes with preamble preserved
Reverse connections
An interactive reverse shell can be established with NeuraxReverse(). It will receive commands from hostname specified inside .ReverseListener in a form of ":". Protocol that is used is defined under .ReverseProto If NeuraxOpenComm() was started before calling this function, each command will behave as described in above section. If it was not, commands will be executed locally. Note: this function should be also runned as goroutine to prevent blocking caused by infinite loop used for receiving.
Cleaning up
Whenever "purge" command is received by a node, it resends this command to all other nodes, removes itself from host and quits. This behaviour can be also commenced using NeuraxPurge() executed somewhere in the source.
Wordlist creation
If spread vector of your choice is based on some kind of bruteforce, it is good to have a proper wordlist prepared. Storing words in a text-file on client side (https://www.kitploit.com/search/label/Client%20Side) isn't really effective, so you can mutate a basic wordlist using NeuraxWordlist(...words) []string. To permute a set of given words, use NeuraxWordlistPermute(..words) []string
Setting time-to-live
If you want your binary to remove itself after given time, use NeuraxSetTTL() at the beginnig of your code. This function should be launched as a goroutine. For example: go NeuraxSetTTL("2m") will make the binary run NeuraxPurgeSelf() after 2 minutes from initial execution.
Using multiple stagers at once
If you would like to chain all stagers available for given platform, set .Stager to "chain".
Moving the dropped binary
If you need to copy the binary after initial execution, use NeuraxMigrate(path string). It will copy the binary under path, remove current binary and execute newly migrated one.

Download Neurax (https://github.com/redcode-labs/Neurax)

git Exposed
https://leonardoprudenci.medium.com/git-exposed-7edb5fdd532?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Olá, recentemente encontrei uma pasta .git exposta em um programa de Bug Bounty público, e gostaria de mostrar como você consegue explorar…Continue reading on Medium » (https://leonardoprudenci.medium.com/git-exposed-7edb5fdd532?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
JBS CEO Says Company Paid $11M in Ransom

The decision to pay attackers was a difficult one, CEO Andre Nogueira said in a statement.

Dark Reading: Attacks/Breaches
Healthcare Device Security Firm COO Charged with Hacking Medical Center

Vikas Singla, chief operating officer of security firm that provides products and services to the healthcare industry, faces charges surrounding a cyberattack he allegedly conducted against Duluth, Ga.-based Gwinnett Medial Center.

Dark Reading: Attacks/Breaches
'Fancy Lazarus' Criminal Group Launches DDoS Extortion Campaign

The group has re-emerged after a brief hiatus with a new email campaign threatening a DDoS attack against businesses that don't pay ransom.

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How to choose a password that’s hard to crack

https://cdn-images-1.medium.com/max/2000/1*jsPwwpussCPUTJ14XR0dgw.jpeg
No, “company name + 123” probably isn’t the best password

Continue reading on Geek Culture »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
git Exposed

https://cdn-images-1.medium.com/max/600/1*XKk7ouV5C4QxbBIPhKTthg.jpeg
Olá, recentemente encontrei uma pasta .git exposta em um programa de Bug Bounty público, e gostaria de mostrar como você consegue explorar…

Continue reading on Medium »

Hacking on Medium
Installing the DVWA to try hacking on

https://cdn-images-1.medium.com/max/1920/1*GnDX6KO1W2lNdSEG0QaBlg.png
Introduction

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Ethernet no está muerto: hasta 400Gbps a través de fibra.

https://cdn-images-1.medium.com/max/1192/0*bgYsvWodfGfO6SOI
PUBLICADO EN 10 JUNIO, 2021POR EHACKING

Continue reading on Medium »

KitPloit - PenTest Tools!
Neurax - A Framework For Constructing Self-Spreading Binaries

https://1.bp.blogspot.com/-V8i4IVrC9q0/YL1vJ805J0I/AAAAAAAAZ80/EYeeOBnjiSQypvcsXxdj4TMvdl9BGRh1wCNcBGAsYHQ/w640-h76/Neurax_1_neurax.png A framework that aids in creation of self-spreading software Requirementsgo get -u github.com/redcode-labs/Coldfirego get -u github.com/yelinaung/go-haikunatorNew in v. 2.0* New wordlist mutators + common passwords by country
* Improvised passive scanning
* .FastScanoption that makes active scans a bit quicker
* Wordlists are created strictly in-memory
* NeuraxScan()accepts a callback function instead of channel as an argument.
* NeuraxScan()scans in infinite loop with possibility to set interval between each scan of whole subnet/pool of targets
* Reverse-DNS lookup for targets that are not in IP format
* Extraction of target candidates from ARP cache
* Possibility to scan only a selected list of targets + prioritizing specific targets (such as default gateways)
* Possibility to specify interface and timeout when using passive network scan.
* Improved command stager (can be optionally executed with elevated privilleges / multiple times)
* Few changes of options' names
* NeuraxConfig.became N.(cause it's shorter to type)
* Functions for random memory allocation + binary migration
* Possibility to chain multiple stagers (ex. wget+ curl)
* Volume and complexity of created wordlist can be easily tuned (with options such as .WordlistExpand)
* Possibility to set time-to-live of created binary UsageWith help of Neurax, Golang binaries can spread on local network without using any external servers.

Diverse config options and command stagers allow rapid propagation across various wireless environments. Example code*/ } ">package main
import . "github.com/redcode-labs/Neurax"

func main(){

//Specify serving port and stager to use
N.Port = 5555
N.Stager = "wget"

//Start a server that exposes the current binary in the background
go NeuraxServer()

//Copy current binary to all logical drives
NeuraxDisks()

//Create a command stager that should be launched on target machine
//It will download, decode and execute the binary
cmd_stager := NeuraxStager()

/* Now you have to somehow execute the command generated above.
You can use SSH bruteforce, some RCE or whatever else you want ;> */

} List of config entriesName Description Default value N.Stager Name of the command stager to use random, platform-compatibleN.StagerSudo If true, Linux cmd stagers are executed with elevated privilleges falseN.StagerRetry Number of times to re-execute the command stager 0N.Port Port to serve on 6741N.Platform Platform to target detected automaticallyN.Path The path under which binary is saved on the host randomN.FileName Name under which downloaded binary should be served and then saved randomN.Base64 Encode the transferred binary in base64 falseN.CommPort Port that is used by binaries to communicate with each other 7777N.CommProto Protocol for communication between nodes "udp"N.ReverseListener Contains "<host:<port"of remote reverse shell handler not specifiedN.ReverseProto Protocol to use for reverse connection "udp"N.ScanRequiredPort NeuraxScan() treats host as active only when it has a specific port opened noneN.ScanPassive NeuraxScan() detects hosts using passive ARP traffic monitoring falseN.ScanPassiveTimeout NeuraxScan() monitors ARP layer this amount of seconds 50 secondsN.ScanPassiveIface In[...]

KitPloit - PenTest Tools!
Neurax - A Framework For Constructing Self-Spreading Binaries

___________________________
@hacking_Attack
@Hacking_Video