some persistence exploits that just never give up generating a session. This is where the -K (uppercase K) comes into the picture. You can use it to terminate all the sessions in your collection as demonstrated.<o:p sessions -K<o:phttps://1.bp.blogspot.com/-aFk9KGnRxng/YOVSabTmzbI/AAAAAAAAxWQ/Zr5unlBWrYkvuoksYV_13cDsOO7LP1OpgCLcBGAsYHQ/s16000/15.png <v:shape<v:imagedata<o:p Upgrading Shell to Meterpreter<o:pWe put off the most important to the last. While performing penetration testing it is possible to use be a situation where the exploit that you use gives you a reverse shell than a meterpreter shell. Although having a reverse shell has its uses but meterpreter shell can help you perform many actions with ease. It includes port forwarding, downloading files from the target machine and uploading files to the target machine, and much more. Hence, by using the -u option you won’t need to run a post-exploitation shell to meterpreter exploit. In the demonstration below we converted an SSH shell into a meterpreter with ease. <o:p sessions<o:psession -u 1<o:psessions<o:phttps://1.bp.blogspot.com/-j0TrAyAYejQ/YOVSd9tqz_I/AAAAAAAAxWY/Gi1Zr6DT3Us3HWnxPWooUdCiiJ_1Mk6RQCLcBGAsYHQ/s16000/16.png <v:shape<v:imagedata<o:p Conclusion<o:pMetasploit is one of the oldest Frameworks in this domain. It was designed in a way to ease the work of a Penetration Tester so that they can focus more on the attacking. Even after working with, it for years, it still surprises me with some hidden quirk that I didn’t know about. I will be continuing this journey and find out more about the legendary Metasploit Framework!<o:p

Kali Linux Tutorials
AWS Pen-Testing Laboratory : Pentesting Lab With A Kali Linux Instance Accessible Via Ssh And Wireguard VPN And With Vulnerable Instances In A Private Subnet

AWS Pen-Testing Laboratory deployed as IaC with Terraform on AWS. It deploys a Kali Linux instance accessible via ssh & wire guard VPN. Vulnerable instances in a private subnet. NOTE: Ids only defined for region “eu-west-1” For other regions, kali ami id must be specified and metasploitable3 id (after building it) Changelog [2021-06-02] AMI IDs […]

The post AWS Pen-Testing Laboratory : Pentesting Lab With A Kali Linux Instance Accessible Via Ssh And Wireguard VPN And With Vulnerable Instances In A Private Subnet appeared first on Kali Linux Tutorials.

Black Hat Ethical Hacking
Western Digital Users Face Another RCE

https://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Western Digital Users Face Another RCEPost Views: 80
Reading Time: 1 Minute
The latest zero-day entails an attack chain that allows an unauthenticated intruder to execute code as root and install a permanent backdoor on the vendor’s network-attached storage (NAS) devices. It’s found in all Western Digital NAS devices running the old, no-longer-supported My Cloud 3 operating system: an OS that the researchers said is “in limbo,” given that Western Digital recently stopped supporting it.
Bad news comes in threes, most particularly for Western Digital customers.

As if things weren’t bad enough for the untold number of Western Digital customers whose data blinked out of existence last month, there’s another zero-day waiting for whoever can’t or won’t upgrade its My Cloud storage devices.

Western Digital has said that its update – My Cloud OS 5 – fixed the bug. Maybe so, but the researchers who found the OS 3 vulnerability, Radek Domanski and Pedro Ribeiro, told security journalist Brian Krebs that OS 5 was a complete rewrite of OS 3 that skewered some popular features and functionality. As such, not all users are likely to upgrade: a presumption underscored by the many users who cited using OS 3 in the support forum when the remote data wipe happened in June.

“It broke a lot of functionality,” Domanski said of OS 5, as quoted by Krebs. “So some users might not decide to migrate to OS 5.”

There is hope. Domanski and Ribeiro have developed and released their own patch that fixes the vulnerabilities they found in OS 3. One problem: It needs to be reapplied every time the device reboots. The Global RCE Data WipeLast month, we saw what a bug like this can lead to: Customers across the world wailed as years – decades, in some cases – of data were remotely wiped off of their old My Book Live and My Book Live Duo devices.

The June attack actually turned out to be two attacks rolled into what at first seemed like one: An old remote-code execution (RCE) bug from 2018 that Western Digital first blamed for the remote wipes, and then a previously unknown zero-day flaw that enabled unauthenticated remote factory-reset device wipes.

As Ars Technica’s Dan Goodin detailed in a fascinating writeup, Ars and Derek Abdine, CTO at security firm Censys, analyzed logs from affected devices and found that the devices seemed to have been caught in some kind of tug-of-war, in what Abdine hypothesized might have been a struggle between multiple attackers for control of the compromised devices.
See Also: Kaseya ransomware supply chain attack: What you need to know The Latest Zero DayNow comes this one, the latest bug, reported last week by Krebs. It’s a third, similarly serious zero-day vulnerability in a much broader range of newer Western Digital My Cloud NAS boxes. Domanski and Ribeiro originally planned to present it at the Pwn2Own hacking contest in Tokyo last year.

They never did: As vendors tend to do, Western Digital pushed out an update a mere week before the pair – who hack together as Flashback Team – were going to present. Given that the update squashed their bug, the researchers couldn’t compete. Pwn2Own rules stipulate that exploits work against the latest firmware or software supported for a targeted device.

But in February, they did publish the attack chain they pieced together, shown in the YouTube video below. The duo gave Western Digital “a taste of their own medicine,” giving the company just one week to fix the vulnerability as a mirror to that one week the OS 5 update dropped leading up to the Pwn2Own event.
Why so little time[...]

Hacking on Medium
Enter the Grey Zone

https://cdn-images-1.medium.com/max/2600/1*4QXzZnSwV9OlWVeobM4rmw.png
We often mistake Hollywood’s dramatic interpretation of cyberwarfare for reality.In fact, it is prosaic, pervasive and already shaping…

Continue reading on The Conflict issue — Weapons of Reason »

Hacking on Medium
Learn Ethical Hacking for free

Hey guys I know Many of you want to pursue hacking as your career but you don’t from where you should start here I will teach you…

Continue reading on Medium »

Hacking on Medium
How Likely Is It Your Smart Home Will Be Attacked By Hackers?

Don’t imagine that it’s only the unlucky few who get caught out by hackers penetrating their Smart Home Automation security protocols…

Continue reading on Medium »

Hacking on Medium
How to Save WhatsApp Chat from Hacking?

https://cdn-images-1.medium.com/max/600/0*h4RL3j5RLBdmJC6_.jpg
Jeff Bezos is within the information. Saudi crown prince Mohammed bin Salman is inside the news. Why? Due to the fact, WhatsApp. Now…

Continue reading on Medium »

Hacking on Medium
Keep your friends close…

https://cdn-images-1.medium.com/max/2600/0*vjdiwkbtb0eGbvWs
This isn’t fiction, but a warning for those of you who are on social media. Which, I’m thinking is a lot more people these days than not.

Continue reading on Medium »

GitDump - A Pentesting Tool That Dumps The Source Code From .Git Even When The Directory Traversal Is Disabled
http://www.kitploit.com/2021/07/gitdump-pentesting-tool-that-dumps.html

GitDump dumps the source code from .git when the directory traversal (https://www.kitploit.com/search/label/Directory%20Traversal) is disabled
Requirements
Python3
Tested on
Windows Kali Linux
What it does
Dump source code from website/.git directory when directory traversal is disabled.
How it works
Fetch all common files (.git/index, .git/HEAD, .git/ORIG_HEAD, etc.). Find as many objects (sha1) as possible by analyzing .git/packed-refs, .git/index, etc. Download idx and pack files. Now you can run git checkout -- . to retrieve source code.
How to Use
python3 git-dump.py https://website.com/.git/ Create the output directory and dump all the .git files in it. After running above script type: cd output && git checkout -- . It will recover all source code.
TODO
Search through git repository for secrets (https://www.kitploit.com/search/label/Secrets) by digging deep into commit history (https://www.kitploit.com/search/label/History) and branches. Credits Sean B. Palmer for his index file parser. (https://github.com/sbp/gin)

Download GitDump (https://github.com/Ebryx/GitDump)

Hacking Articles
Meterpreter for Pentester: Sessions

In this series of articles, we will be focusing on the various mechanisms of the Metasploit Framework that can be used by Penetration Testers. Today we are going to learn about the session’s command of the Metasploit Framework.  Sessions command helps us to interact and manipulate the various sessions created

The post Meterpreter for Pentester: Sessions appeared first on Hacking Articles.