Hacking Articles Tips Tricks Videos Tutorials
468 subscribers
65.8K photos
15 videos
157 files
132K links
Exploit
Pentesting
Hacking
Red Team
Blue Team
Kali Linux
Bug Bounty
Black Hat
Cyber security etc

@Hacking_Video
@Hacking_attack
Download Telegram
Motivation to learn Cybersecurity

Hi,i am Tejas 14 year old moreover cybersec enthusiast.If you need a mentor or guidence feel free to contact me on twitter.Continue reading on Medium »
Read more...
hacking: security in practice
App Isolation

Is it possible to take an app like Tik Tok and isolate it so that it cannot collect any user or device information, while still being able to functionally use the app?

I know using it on a separate device would achieve the same result but I wondered if this way were possible.

submitted by /u/DemonNecron
[link] [comments]
Alternatives to wmiexec and dealing with EDR?
https://www.reddit.com/r/Pentesting/comments/obinrr/alternatives_to_wmiexec_and_dealing_with_edr/

<!-- SC_OFF -->Sounds like a dumb question, yes, but for context I'm on an internal pen test where an EDR solution (not naming that) is deployed. I've already got around it and managed to get hold of local admins and domain cached credentials, latter I'm leaving to hashcat as they can't be passed around. I know 100% that anything over RDP, and from previous engagements wmiexec, trigger EDR. Targets also do not have any shares available so smbclient can't really be used to poke around underneath it or copy a binary over (though I should be able to with local admin to a main drive). I have a funny feeling that although xfreerdp can be used for pth that it will trigger once I start a session with a legit user. I've probably got enough dirt for the report in terms of configuration improvements but for more of a POC I want to show a command shell, where I can place a payload to talk back to a C2 framework. So, main question is, has anybody been in a similar situation? Were you able to find an alternative to wmiexec? <!-- SC_ON --> submitted by /u/SpaceLionBlues (https://www.reddit.com/user/SpaceLionBlues)
[link] (https://www.reddit.com/r/Pentesting/comments/obinrr/alternatives_to_wmiexec_and_dealing_with_edr/) [comments] (https://www.reddit.com/r/Pentesting/comments/obinrr/alternatives_to_wmiexec_and_dealing_with_edr/)
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
How your typo can get you hacked ?

https://cdn-images-1.medium.com/max/2560/1*HdIwiTM_jB7IdZp3wORwsg.jpeg
Have you ever wondered that your simple typing error can get you in trouble If “No” then start wondering because it can and after going…

Continue reading on Bobble Engineering »
OpenAttack is an open-source Python-based textual adversarial attack toolkit, which handles the whole process of textual adversarial attacking, including preprocessing text, accessing the victim model, generating adversarial examples and evaluation.
Features & Uses
OpenAttack has following features: High usability. OpenAttack provides easy-to-use APIs that can support the whole process of textual adversarial attacks; Full coverage of attack model types. OpenAttack supports sentence-/word-/character-level perturbations and gradient-/score-/decision-based/blind attack models; Great flexibility and extensibility. You can easily attack a customized victim model or develop and evaluate a customized attack model; Comprehensive Evaluation. OpenAttack can thoroughly evaluate an attack model from attack effectiveness, adversarial example quality and attack efficiency. OpenAttack has a wide range of uses, including: Providing various handy baselines for attack models; Comprehensively evaluating attack models using its thorough evaluation metrics; Assisting in quick development of new attack models with the help of its common attack components; Evaluating the robustness of a machine learning (https://www.kitploit.com/search/label/Machine%20Learning) model against various adversarial attacks; Conducting adversarial training to improve robustness of a machine learning model by enriching the training data with generated adversarial examples.
Installation
You can either use pip or clone this repo to install OpenAttack.
1. Using pip (recommended)
pip install OpenAttack
2. Cloning this repo
git clone https://github.com/thunlp/OpenAttack.git
cd OpenAttack
python setup.py install After installation, you can try running demo.py to check if OpenAttack works well: python demo.py