Hacking on Medium
RED TEAM TUTORIALS — №4

https://cdn-images-1.medium.com/max/1000/0*K4hKkHzmmifrXqjL
Bypassing Windows Defender — Meterpreter edition

Continue reading on Medium »

Hacking on Medium
Cybersecurity

https://cdn-images-1.medium.com/max/2600/0*F3YzIP09GKAr1tCU
First Large Area

Continue reading on Medium »

KitPloit - PenTest Tools!
Swift-Attack - Unit Tests For Blue Teams To Aid With Building Detections For Some Common macOS Post Exploitation Methods

http://2.bp.blogspot.com/-aWl6BmFOZho/YNDQ4oMVGeI/AAAAAAAAcic/FaLbGO4M5tMlWl1o3EnecgPw5Y6Yr0NyACK4BGAYYCw/w640-h206/Swift-Attack_1_swiftattack-792260.png Unit tests for blue teams to aid with building detections for some common macOS post exploitation methods. I have included some post exploitation examples using both command line history and on disk binaries (which should be easier for detection) as well as post exploitation examples using API calls only (which will be more difficult for detection). The post exploitation examples included here are not all encompassing. Instead these are just some common examples that I thought w ould be useful to conduct unit tests around. I plan to continue to add to this project over time with additional unit tests.

All of these tests run locally and return results to stdout (i.e., Swift-Attack does not connect to a server). Steps:git clone https://github.com/cedowens/Swift-Attack

*
Ensure you have installed swift and developer tools (can install from the mac app store)

*
open the xcodeproj file in XCode

*
Build in XCode

*
The compiled app will be dropped to something like: Users//Library/Developer/Xcode/DerivedData/Swift-Attack-[random]/Build/Products/Debug/Swift-Attack.app

*
cd to the directory above

*
cd Swift-Attack.app/Contents/MacOS (you can run the macho from here or copy it elsewhere and run...up to you)

*
grant the Swift-Attack macho full disk access to ensure you can run all of the tests without TCC issues

*
run the following to remove any quarantine attributes:
xattr -c Swift-Attack

* Run Swift-Attack:

./Swift-Attack -h http://2.bp.blogspot.com/-aWl6BmFOZho/YNDQ4oMVGeI/AAAAAAAAcic/FaLbGO4M5tMlWl1o3EnecgPw5Y6Yr0NyACK4BGAYYCw/w640-h206/Swift-Attack_1_swiftattack-792260.png Usage:You can run Swift-Attack with a single option or multiple options

./Swift-Attack [option1] [option2]...

*
I also included a simple macro.txt file (unobfuscated) for testing parent-child relationships around office macro executions on macOS. I did not obfuscate it since the focus is on parent-child relationship visibility/detection. If you want to test with an obfuscated macro, I have a repo at github.com/cedowens/MacC2 that contains an obfuscated macro.

*
I also did not include any persistence items, since in my opinion it is best to just clone and test persistence using Leo Pitt's persistent JXA repo https://github.com/D00MFist/PersistentJXA. This repo is by far the most comprehensive and current repo that I know of for macOS persistence.

*
I recently ported some of the PersistentJXA repos over to Swift: https://github.com/cedowens/Persistent-Swift Unit Tests Included:*
Prompt using osascript binary

*
Prompt via API calls

*
Clipboard dump using osascript binary

*
Clipboard dump using API calls

*
Screenshot using screencapture binary

*
Screenshot using API calls

*
Shell commands

*
Dumping zsh history

*
Security tool enumeration

*
Grabbing system info using osascript binary

*
Grabbing system info via API calls

*
Dumping ssh, aws, gcp, and azure keys on disk

*
Dumping browser history (Chrome, Safari, Firefox)

*
Dumping Quarantine history

*
Office Macro: I included a simple office macro that connects to local host. Note: the macro will invoke curl to make a GET request using python to http://127.0.0.1/testing when executed by clicking the "Enable Macros" button. This will allow you to test detections for parent-child relationships around macro execution. Note: this simple test does not include any obfuscation, since the test is really more geared towards parent-child relationships. You can use ano[...]

ther repo of mine at https://github.com/cedowens/MacC2 to test with obfuscated macros. To use, just simply paste the contents of "macro.txt" into an office Doc, save as a macro enabled document or as 97-2004 document format (ex: .doc, .xls, etc.), and click "Enable Macros" when opening the doc to execute.

*
Installer Package: I included TestInstaller.pkg file to test for detections around a basic installer package. This installer package includes a preinstall script which runs in bash and drops com.simple.agent.plist to /Library/LaunchDaemons/ and drops test.js (simple popup prompt) to /Library/Application Support/. The com.simple.agent.plist file simply runs osascript against /Library/Application Support/test.js. It also includes a postinstall script which runs in bash and loads the com.simple.agent.plis using launchctl load. While holding the Control button click Open on TestInstaller.pkg to run it. TestInstaller.pkg will drop the aforementioned files as root.

*
CVE-2021-30657 Bypass Payloads: Two sample payloads (both make curl requests to localhost when detonated) to test two different types of payloads that abuse cve-2021-30657. More info here: https://cedowens.medium.com/macos-gatekeeper-bypass-2021-edition-5256a2955508 Download Swift-Attack

Install Go Lang on Ubuntu Server

▶ Visit : https://golang.org/dl/ ▶ Download : wget https://golang.org/dl/go1.16.5.linux-amd64.tar.gz ▶ Extract : rm -rf /usr/local/go &&…Continue reading on Medium »
Read more...

what is bug bounty ? How do you become a bug bounty? - (B)-HACKER

Continue reading on Medium »
Read more...

Testnet Update II

Last Friday, we deployed on Mumbai (Polygon Testnet) and have seen very encouraging user metrics over the past four days. Here’s an updateContinue reading on MonoX »
Read more...

what is bug bounty ? How do you become a bug bounty? - (B)-HACKER
https://biharihacker.medium.com/what-is-bug-bounty-how-do-you-become-a-bug-bounty-b-hacker-5e9aad1f38b7?source=rss------bug_bounty-5

Continue reading on Medium » (https://biharihacker.medium.com/what-is-bug-bounty-how-do-you-become-a-bug-bounty-b-hacker-5e9aad1f38b7?source=rss------bug_bounty-5)

Testnet Update II
https://medium.com/monoswap/testnet-update-ii-490c8baf6882?source=rss------bug_bounty-5

Last Friday, we deployed on Mumbai (Polygon Testnet) and have seen very encouraging user metrics over the past four days. Here’s an updateContinue reading on MonoX » (https://medium.com/monoswap/testnet-update-ii-490c8baf6882?source=rss------bug_bounty-5)

https://b.thumbs.redditmedia.com/mqVZXji2wtfGaW0NrlIEYD5_RIFKxi-OOW-U3n4rWuA.jpg I believe the only thing this criminal wants is to make me get worried and press the file. The file is a .exe file, and there is no blackmailing threat. Thus, this guy ain't getting anything out of this in the first place if I don't press the file.

​

https://preview.redd.it/4oa9suvxlt671.png?width=1587&format=png&auto=webp&s=bcb6680bc35f95e7367d10252e70e5dc82b76ddf

submitted by /u/GrabThatPencil
[link] [comments]

hacking: security in practice
Where can i start to learn?

Hello I am a business undergrad student looking to get into the world of cybersecurity. My end goal is to become employable in this field at some point down the line. But for starters i cant find any good place to start learning these things. I am currently looking for free sources but please do post sources even if it is priced. Any information is welcome and Thanks in advance.

submitted by /u/notpasingpasta
[link] [comments]

hacking: security in practice
Looking for good sources of general computer/hacking/history knowledge

Hello! I am wondering if anyone can offer some good sources (books / movies / podcasts etc.) for any of the following topics:

* information on large scale exploitations that altered the way computer systems are built
* general history of computers and hacking
* information on how common/known hacks work on a lower level (cross site scripting, ddos, phishing, wifi hacks etc.)

I've been learning a lot about programming in the past couple months, and just recently learned about penetration testing and that got me wondering how a lot of computer things might work on a lower level, and how people have come to exploit those things. Would be open to anything you thought might fit in that vein.

Thanks in advance! : D

submitted by /u/AmoryVain
[link] [comments]

hacking: security in practice
TryHackMe subscription giveaway by THREAT CON in honor of pride month

To celebrate pride month THREAT CON is giving away away 5 vouchers for one month premium subscription of TryHackMe. To participate in the giveaway like and share the post from any of their social media channels and make sure you're following them.
Social media links:
https://twitter.com/THREAT_CON/status/1407321077345181697
https://www.facebook.com/threatcon/photos/a.1086739991506847/1882118308635674/
https://www.linkedin.com/posts/threat-con_pride-pridemonth-threatcon2021-activity-6813088108872032256-s6QS

submitted by /u/itsplane
[link] [comments]