hacking: security in practice
Internet Restricted Country

Hey guys, basically I need your advice.

I am from a country that has the worst internet censorship to the point where most basic stuff like Instagram, Facebook, BBC news and etc are restricted. When we use VPN to avoid block the internet gets soo slow to the point where they can use the internet but with a huge pain a waiting time. However, it happens that one day that VPN stops working at all (maybe they blocking them too). My sister currently located in that country, I can not talk to her via Facetime and etc, so I have to directly call her using apps like Yolla. I spend tons of money to keep a balance to call her directly but she says that these calls are always listened to by authorities. So questions:

1. How can she avoid those blocks, what generally people from countries with heavily restricted internet can do?
2. What my sister can do so they could not listen to help phone talks? Or me maybe.

Thank you, all of you for your response.

p.s I am not a hacker and I am just entry-level at CSC so thought you guys have more experience in those to give me valuable advice.

submitted by /u/nineteen19nineteen19
[link] [comments]

OffensivePipeline - Tool To Download, Compile (Without Visual Studio) And Obfuscate C# Tools For Red Team Exercises
http://www.kitploit.com/2021/03/offensivepipeline-tool-to-download.html

OffensivePipeline allows to download, compile (without Visual Studio) and obfuscate C# tools for Red Team exercises. OffensivePipeline downloads the tool from the git repository, then compiles it with msbuild and finally obfuscates it with ConfuserEx (https://github.com/mkaring/ConfuserEx/tree/v1.4.1).
Examples
List all tools: OffensivePipeline.exe list
Build all tools: OffensivePipeline.exe all
Build a tool OffensivePipeline.exe t toolName

Add new tools
The scripts for downloading the tools are in the Tools folder in yml format. New tools can be added by creating new yml files with the following format: Rubeus.yml file: tool:
- name: Rubeus
description: Rubeus is a C# toolset for raw Kerberos interaction and abuses
gitLink: https://github.com/GhostPack/Rubeus
solutionPath: Rubeus\Rubeus.sln
Requirements for the release version (Visual Studio 2019 is not required)
Microsoft .NET Framework 3.5 Service Pack 1 (for some tools): https://www.microsoft.com/en-us/download/details.aspx?id=22 Build Tools for Visual Studio 2019: https://visualstudio.microsoft.com/thank-you-downloading-visual-studio/?sku=BuildTools&rel=16 Install .NET desktop build tools

Disable the antivirus :D Teste on Windows 10 Pro - Version 20H2 - Build 19042.631
Requirements for build
Net framework 3.5.1 (for some tools): https://www.microsoft.com/en-us/download/details.aspx?id=22 Visual Studio 2019 -> https://visualstudio.microsoft.com/thank-you-downloading-visual-studio/?sku=Community&rel=16 Install .NET desktop build tools
Supported tools
Internal-Monologue: Description: Retrieving NTLM Hashes without Touching LSASS GitLink: https://github.com/eladshamir/Internal-Monologue InveighZero: Description: InveighZero is a C# LLMNR/NBNS/mDNS/DNS/DHCPv6 spoofer and man-in-the-middle (https://www.kitploit.com/search/label/Man-in-the-Middle) tool GitLink: https://github.com/Kevin-Robertson/InveighZero Rubeus: Description: Rubeus is a C# toolset for raw Kerberos interaction and abuses GitLink: https://github.com/GhostPack/Rubeus Seatbelt: Description: Seatbelt is a C# project that performs a number of security oriented host-survey "safety checks" relevant from both offensive and defensive security perspectives. GitLink: https://github.com/GhostPack/Seatbelt SharpChromium: Description: SharpChromium (https://www.kitploit.com/search/label/SharpChromium) is a .NET 4.0+ CLR project to retrieve data from Google Chrome, Microsoft Edge, and Microsoft Edge Beta. Currently, it can extract GitLink: https://github.com/djhohnstein/SharpChromium SharpDPAPI: Description: SharpDPAPI is a C# port of some DPAPI functionality from @gentilkiwi's Mimikatz project. GitLink: https://github.com/GhostPack/SharpDPAPI SharpGPOAbuse: Description: SharpGPOAbuse is a .NET application written in C# that can be used to take advantage of a user's edit rights on a Group Policy Object (GPO) in order to compromise the objects that are controlled by that GPO. GitLink: https://github.com/FSecureLABS/SharpGPOAbuse SharpHound3: Description: C# Rewrite of the BloodHound Ingestor GitLink: https://github.com/BloodHoundAD/SharpHound3 SharpMove: Description: .NET authenticated execution for remote hosts GitLink: https://github.com/0xthirteen/SharpMove SharpRDP: Description: Remote Desktop Protocol (https://www.kitploit.com/search/label/Remote%20Desktop%20Protocol) Console Application for Authenticated Command Execution GitLink: https://github.com/0xthirteen/SharpRDP Sharp-SMBExec: Description: A native C# conversion of Kevin Robertsons Invoke-SMBExec powershell script GitLink: https://github.com/checkymander/Sharp-SMBExec SharpSpray: Description: SharpSpray a simple code set to perform a password spraying attack against all users of a domain using LDAP and is compatible with Cobalt Strike. GitLink: https://github.com/jnqpblc/SharpSpray SharpStay: Description: .NET Persistence GitLink: https://github.com/0xthirteen/SharpStay SharpUp: Description: SharpUp is a C# port of various PowerUp functionality GitLink: https://github.com/GhostPack/SharpUp SharpView: Description: .NET port of PowerView GitLink: https://github.com/tevora-threat/SharpView SharpWMI: Description: SharpWMI is a C# implementation of various WMI functionality. GitLink: https://github.com/GhostPack/SharpWMI ThreatCheck: Description: Modified version of Matterpreter's DefenderCheck GitLink: https://github.com/rasta-mouse/ThreatCheck Watson: Description: Watson is a .NET tool designed to enumerate missing KBs and suggest exploits for Privilege Escalation (https://www.kitploit.com/search/label/Privilege%20Escalation) vulnerabilities. GitLink: https://github.com/rasta-mouse/Watson winPEAS: Description: Privilege Escalation Awesome Scripts SUITE GitLink: https://github.com/carlospolop/privilege-escalation-awesome-scripts-suite

Download OffensivePipeline (https://github.com/Aetsu/OffensivePipeline)

Dark Reading: Attacks/Breaches
Verkada Attacker Charged With Wire Fraud, Conspiracy in US

Swiss national Till Kottmann and co-conspirators are accused of breaking into dozens of US companies and government entities.

Hacking on Medium
Утилиты Linux, которые мы используем, не зная о них

https://cdn-images-1.medium.com/max/1200/1*nHeZNERn7wrHWk9CxsQWCQ.png
В OS Linux существует ряд инс­тру­мен­тов результат работы которых видели многие

Continue reading on Medium »

Hacking on Medium
Hack The Box — Academy — Write Up

https://cdn-images-1.medium.com/max/600/1*E9GkHDHtM8RsLxc0D3wBcg.png
Academy is an easy difficulty Linux machine that features an Apache server hosting a PHP website. The website is found to be the HTB Academy…

Continue reading on Medium »

Hacking on Medium
CTFs Passo a Passo — PARTE 2 — Lista De Rooms — TryHackMe

Esta é uma lista de rooms gratuitas que criei para você, do site TryHackMe, levando você do iniciante ao médio. O objetivo desse guia é…

Continue reading on roxlmz »

Hacking on Medium
El nuevo error de zoom para compartir pantalla permite que otros usuarios accedan a aplicaciones…

https://cdn-images-1.medium.com/max/1104/0*TUyFN4jZW2vQTYsi
Una falla recientemente descubierta en la función de compartir pantalla de Zoom puede filtrar accidentalmente información confidencial a…

Continue reading on Medium »

KitPloit - PenTest Tools!
OffensivePipeline - Tool To Download, Compile (Without Visual Studio) And Obfuscate C# Tools For Red Team Exercises

https://1.bp.blogspot.com/-rE0u73muQuY/YE6H5C_EIZI/AAAAAAAAVmw/Bua9alQCLKoQU2ElfOlHCStyQeE1H5X7QCNcBGAsYHQ/w640-h288/OffensivePipeline_1_2021-02-18-20-54-21.png OffensivePipeline allows to download, compile (without Visual Studio) and obfuscate C# tools for Red Team exercises.

OffensivePipeline downloads the tool from the git repository, then compiles it with msbuild and finally obfuscates it with ConfuserEx. Examples* List all tools: OffensivePipeline.exe list * Build all tools: OffensivePipeline.exe all * Build a tool OffensivePipeline.exe t toolName https://1.bp.blogspot.com/-jwefLcOfEHQ/YE6IHgNNsrI/AAAAAAAAVm0/ai1guvgBJvY-GaWAlSZAKC3w8qx2ofw2gCNcBGAsYHQ/w640-h326/OffensivePipeline_2_2021-02-18-20-58-21.png Add new toolsThe scripts for downloading the tools are in the Tools folder in yml format. New tools can be added by creating new yml files with the following format:

* Rubeus.yml file: tool:
- name: Rubeus
description: Rubeus is a C# toolset for raw Kerberos interaction and abuses
gitLink: https://github.com/GhostPack/Rubeus
solutionPath: Rubeus\Rubeus.slnRequirements for the release version (Visual Studio 2019 is not required)* Microsoft .NET Framework 3.5 Service Pack 1 (for some tools): https://www.microsoft.com/en-us/download/details.aspx?id=22
* Build Tools for Visual Studio 2019: https://visualstudio.microsoft.com/thank-you-downloading-visual-studio/?sku=BuildTools&rel=16
* Install .NET desktop build tools https://1.bp.blogspot.com/-MXyYKJfoXkk/YE6IOrAIHFI/AAAAAAAAVm8/BVfKCswGC-I-E5ISmdu7qXmUqh94mTPLACNcBGAsYHQ/w640-h322/OffensivePipeline_3_lib01.png * Disable the antivirus :D
* Teste on Windows 10 Pro - Version 20H2 - Build 19042.631 Requirements for build* Net framework 3.5.1 (for some tools): https://www.microsoft.com/en-us/download/details.aspx?id=22
* Visual Studio 2019 -> https://visualstudio.microsoft.com/thank-you-downloading-visual-studio/?sku=Community&rel=16
* Install .NET desktop build tools Supported tools* Internal-Monologue:
* Description: Retrieving NTLM Hashes without Touching LSASS
* GitLink: https://github.com/eladshamir/Internal-Monologue

* InveighZero:
* Description: InveighZero is a C# LLMNR/NBNS/mDNS/DNS/DHCPv6 spoofer and man-in-the-middle tool
* GitLink: https://github.com/Kevin-Robertson/InveighZero

* Rubeus:
* Description: Rubeus is a C# toolset for raw Kerberos interaction and abuses
* GitLink: https://github.com/GhostPack/Rubeus

* Seatbelt:
* Description: Seatbelt is a C# project that performs a number of security oriented host-survey "safety checks" relevant from both offensive and defensive security perspectives.
* GitLink: https://github.com/GhostPack/Seatbelt

* SharpChromium:
* Description: SharpChromium is a .NET 4.0+ CLR project to retrieve data from Google Chrome, Microsoft Edge, and Microsoft Edge Beta. Currently, it can extract
* GitLink: https://github.com/djhohnstein/SharpChromium

* SharpDPAPI:
* Description: SharpDPAPI is a C# port of some DPAPI functionality from @gentilkiwi's Mimikatz project.
* GitLink: https://github.com/GhostPack/SharpDPAPI

* SharpGPOAbuse:
* Description: SharpGPOAbuse is a .NET application written in C# that can be used to take advantage of a user's edit rights on a Group Policy Object (GPO) in order to compromise the objects that are controlled by that GPO.
* GitLink: https://github.com/FSecureLABS/SharpGPOAbuse

* SharpHound3:
* Description: C# Rewrite of the BloodHound Ingestor
* GitLink: https://github.com/BloodHoundAD/SharpHound3

* SharpMove:
* Description: .NET authenticated execution for remote hosts
* GitLink: https://github.com/0xthirteen/SharpMov[...]

e

* SharpRDP:
* Description: Remote Desktop Protocol Console Application for Authenticated Command Execution
* GitLink: https://github.com/0xthirteen/SharpRDP

* Sharp-SMBExec:
* Description: A native C# conversion of Kevin Robertsons Invoke-SMBExec powershell script
* GitLink: https://github.com/checkymander/Sharp-SMBExec

* SharpSpray:
* Description: SharpSpray a simple code set to perform a password spraying attack against all users of a domain using LDAP and is compatible with Cobalt Strike.
* GitLink: https://github.com/jnqpblc/SharpSpray

* SharpStay:
* Description: .NET Persistence
* GitLink: https://github.com/0xthirteen/SharpStay

* SharpUp:
* Description: SharpUp is a C# port of various PowerUp functionality
* GitLink: https://github.com/GhostPack/SharpUp

* SharpView:
* Description: .NET port of PowerView
* GitLink: https://github.com/tevora-threat/SharpView

* SharpWMI:
* Description: SharpWMI is a C# implementation of various WMI functionality.
* GitLink: https://github.com/GhostPack/SharpWMI

* ThreatCheck:
* Description: Modified version of Matterpreter's DefenderCheck
* GitLink: https://github.com/rasta-mouse/ThreatCheck

* Watson:
* Description: Watson is a .NET tool designed to enumerate missing KBs and suggest exploits for Privilege Escalation vulnerabilities.
* GitLink: https://github.com/rasta-mouse/Watson

* winPEAS:
* Description: Privilege Escalation Awesome Scripts SUITE
* GitLink: https://github.com/carlospolop/privilege-escalation-awesome-scripts-suite Download OffensivePipeline