Hacking on Medium
Dogcat Writeup — Tryhackme

https://cdn-images-1.medium.com/max/1011/1*w6BDYOVvqaVrReS5vCnWxA.png
Salutare ! Dupa ceva timp, am decis sa vin cu un nou writeup, iar de aceasta data, este un writeup la o masina de pe tryhackme.

Continue reading on Medium »

Deep Web
What did you get from the dark web

submitted by /u/HastpallODBITWSESss1
[link] [comments]

https://preview.redd.it/cy7cpr40ig671.jpg?width=320&crop=smart&auto=webp&s=1e2b4bfaf7a5cbd8b1cf833fc16e87f9b6ffb79e submitted by /u/phoenix_house_junkie
[link] [comments]

Альфа-релиз pSTAKE и Программа вознаграждений за найденные ошибки
https://antropocosmist.medium.com/alfa-pstake-bug-bounty-rus-ddfabd44e19f?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Полное руководствоContinue reading on Medium » (https://antropocosmist.medium.com/alfa-pstake-bug-bounty-rus-ddfabd44e19f?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
InfoSec career path and salaries in UK

Hey everyone, I'll be going to London soon for my masters in Computer science. Though the course is a generic masters without a specialization, i have an inclination towards cyber security (I have intermediate experience in the field thanks to a few internships and my Hack the box practices)

I wanted to know if I should pursue a career in cyber security in the UK? Are the salaries good? Will it take too many years before i earn a good amount? I know CS related careers have a better outlook in the USA in general, but I prefer UK because i like the lifestyle and feel safer there

Thanks in advance

submitted by /u/u_r_a_gabe_itch
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How to Master Python Fast and Easy: A Complete Simple tutorial Based on the Official Documentation of Python

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Student Demonstrates Stealing Passwords with Social Engineering - Hacking Multiplayer Game Server

https://external-preview.redd.it/9hgIGyuHoYQYp26QVj8thi3cEZ2oTOejhYbJYSbbhA8.jpg?width=320&crop=smart&auto=webp&s=7fb140607e840749ceed08be24ff33dfe1a8fae5 submitted by /u/L3av3NoTrac3s
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Thoughts on blackICE and ICEcap?

Stumbled on it recently and got curious of it

submitted by /u/godsrebel
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Introducing Striker and the Payload Automation Libraries
https://www.reddit.com/r/redteamsec/comments/o4endx/introducing_striker_and_the_payload_automation/

submitted by /u/BinaryFaultline (https://www.reddit.com/user/BinaryFaultline)
[link] (http://blog.redxorblue.com/2021/06/introducing-striker-and-payload.html) [comments] (https://www.reddit.com/r/redteamsec/comments/o4endx/introducing_striker_and_the_payload_automation/)

___________________________
@hacking_Attack
@Hacking_Video

NamedPipePTH - Pass The Hash To A Named Pipe For Token Impersonation
http://www.kitploit.com/2021/06/namedpipepth-pass-hash-to-named-pipe.html

___________________________
@hacking_Attack
@Hacking_Video

This project is a PoC code to use Pass-the-Hash for authentication on a local Named Pipe user Impersonation. There also is a blog post for explanation:https://s3cur3th1ssh1t.github.io/Named-Pipe-PTH/ It is heavily based on the code from the projects Invoke-SMBExec.ps1 (https://github.com/Kevin-Robertson/Invoke-TheHash/blob/master/Invoke-SMBExec.ps1) and RoguePotato (https://github.com/antonioCoco/RoguePotato). I faced certain Offensive Security project situations in the past, where I already had the NTLM-Hash of a low privileged user account and needed a shell for that user on the current compromised system - but that was not possible with the current public tools. Imagine two more facts for a situation like that - the NTLM Hash could not be cracked and there is no process of the victim user to execute shellcode in it or to migrate into that process. This may sound like an absurd edge-case for some of you. I still experienced that multiple times. Not only in one engagement I spend a lot of time searching for the right tool/technique in that specific situation. My personal goals for a tool/technique were: Fully featured shell or C2-connection as the victim user-account It must to able to also Impersonate low privileged accounts - depending on engagement goals it might be needed to access (https://www.kitploit.com/search/label/Access) a system with a specific user such as the CEO, HR-accounts, SAP-administrators or others The tool can be used as C2-module The impersonated user unfortunately has no network authentication allowed, as the new process is using an Impersonation (https://www.kitploit.com/search/label/Impersonation) Token which is restricted. So you can only use this technique for local actions with another user. There are two ways to use this technique. Either you can compile \Resources\PipeServerImpersonate.sln and drop the executable on the remote host and connect to the Named Pipe via \Resources\Invoke-NamedPipePTH.ps1:

___________________________
@hacking_Attack
@Hacking_Video

Or you can use the standalone script to stay in memory:

___________________________
@hacking_Attack
@Hacking_Video

If you don't want to drop a binary (https://www.kitploit.com/search/label/Binary) for execution just pass arguments for native Windows (https://www.kitploit.com/search/label/Windows) binaries such as Powershell Invoke-ImpersonateUser-PTH -Username USERNAME -Hash NTLMHASH -Domain DOMAIN -PipeName mypipe -binary "C:\WINDOWS\System32\WindowsPowerShell\v1.0\powershell.exe" -argument "-nop -w 1 -sta -enc BASEBLOB"

Download NamedPipePTH (https://github.com/S3cur3Th1sSh1t/NamedPipePTH)

___________________________
@hacking_Attack
@Hacking_Video

NamedPipePTH - Pass The Hash To A Named Pipe For Token Impersonation

This project is a PoC code to use Pass-the-Hash for authentication on a local Named Pipe user Impersonation. There also is a blog post for explanation:https://s3cur3th1ssh1t.github.io/Named-Pipe-PTH/ It is heavily based on the code from the projects Invoke-SMBExec.ps1 and RoguePotato. I faced certain Offensive Security project situations in the past, where I already had the NTLM-Hash of a low privileged user account and needed a shell for that user on the current compromised system - but that was not possible with the current public tools. Imagine two more facts for a situation like that - the NTLM Hash could not be cracked and there is no process of the victim user to execute shellcode in it or to migrate into that process. This may sound like an absurd edge-case for some of you. I still experienced that multiple times. Not only in one engagement I spend a lot of time searching for the right tool/technique in that specific situation. My personal goals for a tool/technique were: Fully featured shell or C2-connection as the victim user-account It must to able to also Impersonate low privileged accounts - depending on engagement goals it might be needed to access a system with a specific user such as the CEO, HR-accounts, SAP-administrators or others The tool can be used as C2-module The impersonated user unfortunately has no network authentication allowed, as the new process is using an Impersonation Token which is restricted. So you can only use this technique for local actions with another user. There are two ways to use this technique. Either you can compile \Resources\PipeServerImpersonate.sln and drop the executable on the remote host and connect to the Named Pipe via \Resources\Invoke-NamedPipePTH.ps1: Or you can use the standalone script to stay in memory: If you don't want to drop a binary for execution just pass arguments for native Windows binaries such as Powershell Invoke-ImpersonateUser-PTH -Username USERNAME -Hash NTLMHASH -Domain DOMAIN -PipeName mypipe -binary "C:\WINDOWS\System32\WindowsPowerShell\v1.0\powershell.exe" -argument "-nop -w 1 -sta -enc BASEBLOB" Download NamedPipePTH
Read more...

___________________________
@hacking_Attack
@Hacking_Video