hacking: security in practice
is there a way to make metasploit not remove temporary files after en exploit?

I'm kind of knew so please have some mercy

I am trying to use a metasploit exploit on a machine from vulnhub

(here's the link https://www.vulnhub.com/entry/noobbox-1,664/)

and I keep getting the same error message and can't figure out how to fix it.

here is the message

***

[!] You are binding to a loopback address by setting LHOST to 127.0.0.1. Did you want ReverseListenerBindAddress?

[*] Started reverse TCP handler on 127.0.0.1:4444

[*] Authenticating with WordPress using noobbox:5p4c3...

[+] Authenticated with WordPress

[*] Preparing payload...

[*] Uploading payload...

[*] Executing the payload at /wordpress/wp-content/plugins/RltCwMtplH/cUGXwbOAsA.php...

[!] This exploit may require manual cleanup of 'cUGXwbOAsA.php' on the target

[!] This exploit may require manual cleanup of 'RltCwMtplH.php' on the target

[!] This exploit may require manual cleanup of '../RltCwMtplH' on the target

[*] Exploit completed, but no session was created.

***

and here are the options

***

Module options (exploit/unix/webapp/wp_admin_shell_upload):

Name Current Setting Required Description

---- --------------- -------- -----------

PASSWORD 5p4c3 yes The WordPress password to authenticate with

Proxies no A proxy chain of format type:host:port[,type:host:port][...]
RHOSTS 182.66.1.120yes The target host(s), range CIDR identifier, or hosts file with syntax 'file:127.0.0.1yes The listen address (an interface may be specified)

LPORT 1234 yes The listen port

Exploit target:

Id Name

-- ----

0 WordPress

***

I looked at it and searched online and it comes out that what it's saying is that it is not able to remove temporary files that it put there during the exploit, and so it won't finish the exploit. is there a way that I con make not remove the temporary files?

submitted by /u/Public_Beach
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking Articles
Wireless Penetration Testing: SSID Discovery

This article will depict “How to discover SSID for WiFi Network” using several tools designed for Windows and Linux platforms.  SSID discovery is applicable in Wi-fi hacking or penetration testing. Table of Content inSSIDer Wireless NetView Microsoft Network Monitor NetSurveyor Kismet Airodump-ng Wash Wireshark SSID acronym is used for Service

The post Wireless Penetration Testing: SSID Discovery appeared first on Hacking Articles.

___________________________
@hacking_Attack
@Hacking_Video

PCI Penetration Testing Guide vs 11.3 Requirement
https://www.reddit.com/r/Pentesting/comments/orhkf5/pci_penetration_testing_guide_vs_113_requirement/

I was wondering how relevant is 11.3 Requirement and why has it been so long since it's been updated if it is relevant? It has not been updated since 2009 and it has been archived as well (if you check https://www.pcisecuritystandards.org/document_library ) I also find some of the language is a bit contradicting in the requirement vs PCI Penetration Testing Guide document (which has been updated as recently as 2017). Would really appreciate if someone who has vast experience in PCI pentests would give their opinion. submitted by /u/lifesfunn (https://www.reddit.com/user/lifesfunn)
[link] (https://www.reddit.com/r/Pentesting/comments/orhkf5/pci_penetration_testing_guide_vs_113_requirement/) [comments] (https://www.reddit.com/r/Pentesting/comments/orhkf5/pci_penetration_testing_guide_vs_113_requirement/)

___________________________
@hacking_Attack
@Hacking_Video

Systems engineer and admin wants to get into pentesting...
https://www.reddit.com/r/Pentesting/comments/orht4l/systems_engineer_and_admin_wants_to_get_into/

I am a systems engineer and admin who recently thought about the direction in which he should expand his skill set or his career. The cybersecurity division smiled at me a lot, so I’m now trying to figure it out. More precisely, I am currently trying to forge a path for myself to acquire pentesting / ethical hacking skills. I am currently exploring sources of learning that could help me with this, and it's not that easy. Much of the beginner stuff is far too basic for me and the non-beginner resources (at least the ones I've stumbled upon so far) already require certain knowledge in the field that I don't have. About my skills: As a systems engineer, I'm a (self taught) jack of all trades and master of none. Network basis and analysis, Windows (server) environments, including large ADs and multi forests, web applications, Powershell, Bash and Python scripting, Kubernetes / Openshift, basic security knowledge to harden my systems, ... have to do with it regularly and know here minimum the basics to integrate and administer systems. The area where I would most likely see myself as some kind of an expert is the Linux area, especially Red Hat systems. In short, I have extensive and holistic IT knowledge, but it goes only deeper in a few areas. So I look for a book or an online course that assumes that you already have a good foundation of IT knowledge (minus programming; I write Powershell, Bash and Python scripts regularly to make my work easier, but I'm far away from being a programmer ) and takes you straight into the world of ethical hacking / pentesting, without wasting most of the time building the IT base. I would really appreciate a few suggestions as an entry point :-) submitted by /u/NihilisticTanuki (https://www.reddit.com/user/NihilisticTanuki)
[link] (https://www.reddit.com/r/Pentesting/comments/orht4l/systems_engineer_and_admin_wants_to_get_into/) [comments] (https://www.reddit.com/r/Pentesting/comments/orht4l/systems_engineer_and_admin_wants_to_get_into/)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Roadmap to Website Hacking!!

https://cdn-images-1.medium.com/max/988/1*TZccz6nvZdE0ftLZCuxJ0A.png
In this article I’ll be sharing you the complete roadmap for Bug Bounty Hunting.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How to protect yourself from “Pegasus”

https://cdn-images-1.medium.com/max/2600/1*eBUBM5ja0rHw6yG6XpIspg.jpeg
To know more about Pegasus, First, you have to know, what is Pegasus….!!

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Pegasus Spyware, come controllare se i nostri dispositivi Android sono stati infettati

https://cdn-images-1.medium.com/max/1280/1*OQjELTrwVB2maCyg1ApGxg.png
Per supportarmi potete seguirmi ed abbonarvi al mio canale Thorrwulf su Twitch, con prime è gratis.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

https://preview.redd.it/3gwb1t5gsed71.jpg?width=640&crop=smart&auto=webp&s=78475fc49d8c5e81c60147263cf46c2b3c7fbc8b submitted by /u/StruggleDowntown7433
[link] [comments]

Deep Web
Would I be safe just using tails and my wifi?

Or are there more precautions I should be aware of? Thanks

submitted by /u/Guigsy79
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Rconn - Rconn Is A Multiplatform Program For Creating Generic Reverse Connections

rconn (reverse connection) is a multiplatform program for creating reverse connections. It lets you consume services that are behind NAT and/or firewall without adding firewall rules or port-forwarding. This is achieved by creating a connection from the node behind the firewall/NAT to a port on your local machine, and then a port is exposed in your machine through which you can connect to the service that is behind firewall/NAT. All traffic is routed through the initial connection that was opened by the machine behind firewall/NAT.Building Build with: go build. Explanation Say your IP address is 11.11.11.11, and you've got machine 22.22.22.22 behind firewall/NAT and you want to connect to it via RDP. First you'd have to make sure your RDP server is running, normally on 3389. Now the problem is you can't connect to 3389 from outside because of NAT or firewall. Then in your local machine you'd have to run this: rconn -s 1111 2222 And in the machine behind firewall/NAT you'd have to run this: rconn -c 11.11.11.11 1111 127.0.0.1 3389 Now you can connect to your own port 2222 with an RDP client, this will effectively be same as connecting to 22.22.22.22:3389. Usually most firewalls allow all outbound traffic but if this is not the case then you can try 80 or 443 instead of 1111. Download Rconn
Read more...

___________________________
@hacking_Attack
@Hacking_Video

Rconn - Rconn Is A Multiplatform Program For Creating Generic Reverse Connections
http://www.kitploit.com/2021/07/rconn-rconn-is-multiplatform-program.html

___________________________
@hacking_Attack
@Hacking_Video

rconn (r[everse] conn[ection]) is a multiplatform (https://www.kitploit.com/search/label/Multiplatform) program for creating reverse (https://www.kitploit.com/search/label/Reverse) connections. It lets you consume services that are behind NAT and/or firewall (https://www.kitploit.com/search/label/Firewall) without adding firewall rules or port-forwarding. This is achieved by creating a connection from the node behind the firewall/NAT to a port on your local machine, and then a port is exposed in your machine through which you can connect to the service that is behind firewall/NAT. All traffic (https://www.kitploit.com/search/label/Traffic) is routed through the initial connection that was opened by the machine behind firewall/NAT.
Building
Build with: go build.
Explanation

___________________________
@hacking_Attack
@Hacking_Video

Say your IP address is 11.11.11.11, and you've got machine 22.22.22.22 behind firewall/NAT and you want to connect to it via RDP. First you'd have to make sure your RDP server is running, normally on 3389. Now the problem is you can't connect to 3389 from outside because of NAT or firewall. Then in your local machine you'd have to run this: rconn -s 1111 2222 And in the machine behind firewall/NAT you'd have to run this: rconn -c 11.11.11.11 1111 127.0.0.1 3389 Now you can connect to your own port 2222 with an RDP client, this will effectively be same as connecting to 22.22.22.22:3389. Usually most firewalls (https://www.kitploit.com/search/label/Firewalls) allow all outbound traffic but if this is not the case then you can try 80 or 443 instead of 1111.

Download Rconn (https://github.com/jafarlihi/rconn)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How to create yor own pandemic causing virus

If you want to create your own virus this is how you would do it. Mind you, when I say "create" I mean "modify." Even the famous coronavirus was not "created" but rather just a modified version of the virus that existed in bats. It is actually impossible to create a virus because the virus is a living thing, and we can't create life from non-life (yet, if ever). So it's actually very simple and you can do it from home. Here is what you will need:

1. a sick animal
2. a few healthy animals
3. a healthy male and female human
4. a humid dark room between 65-75 F

So the goal here is to recreate the conditions in nature that would cause a mutation. What you would need to do is put 1-3 in the humid dark room and make them fight and scratch each other and eat each others shit and piss until the male and human female get sick. Now you have caused a mutation and you can let the two human subjects out into a wet market or somewhere that it would have an easy time spreading and bam, you have a pandemic.

submitted by /u/redtardio
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video