Kali Linux Tutorials
MANSPIDER : Spider Entire Networks For Juicy Files Sitting On SMB Shares. Search Filenames Or File Content – Regex Supported!

MANSPIDER will crawl every share on every target system. If provided creds don’t work, it will fall back to “guest”, then to a null session. File Types Supported PDF DOCX XLSX PPTX any text-based format and many more!! Installation Install these dependencies to add additional file parsing capability: #for images (png, jpeg)$ sudo apt install […]

The post MANSPIDER : Spider Entire Networks For Juicy Files Sitting On SMB Shares. Search Filenames Or File Content – Regex Supported! appeared first on Kali Linux Tutorials.

KitPloit - PenTest Tools!
LoGiC.NET - A More Advanced Free And Open .NET Obfuscator Using Dnlib

http://4.bp.blogspot.com/-omIGXli5zo4/YPtaxfDlcgI/AAAAAAAAm2g/ew1he_-qQMUvlN08UY4gfqNQ2KgDAsBxgCK4BGAYYCw/w640-h344/LoGiC.NET_2_after-702574.png

LoGiC.NET is a free and open-source .NET obfuscator that uses dnlib for folks that want to see how obfuscation works with more complex obfuscations than Goldfuscator for example.
Before obfuscation

http://2.bp.blogspot.com/-Kaq-GK_1_1Q/YPtavQ-jrAI/AAAAAAAAm2Y/d8E6S3WPS40SxW9vo5qdLYt5to-rBHjeACK4BGAYYCw/w640-h344/LoGiC.NET_1_before-795320.png

After obfuscation

http://4.bp.blogspot.com/-omIGXli5zo4/YPtaxfDlcgI/AAAAAAAAm2g/ew1he_-qQMUvlN08UY4gfqNQ2KgDAsBxgCK4BGAYYCw/w640-h344/LoGiC.NET_2_after-702574.png

Dependencies

dnlib v3.3.2 : Restore NuGet packages and it'll work (if it doesn't already).
SharpConfigParser : https://github.com/AnErrupTion/LoGiC.NET/raw/master/SharpConfigParser.dll

Current Features

* Renames methods, parameters, properties, fields and events.
* Adds proxy calls.
* Encrypts strings.
* Encodes ints.
* Adds junk methods.
* Prevents application tampering.
* Adds control flow.
* And more!

TODO

* Add an Anti-Emulation and Anti-Debug.
Download LoGiC.NET

Hacking on Medium
Pegasus: A Friend Or a Foe | What is Pegasus? | Dangerous or Not

https://cdn-images-1.medium.com/max/2048/1*_KR8QkJ-T3M7LsYubiZu9w.jpeg
What if I say I can hear your voice calls with your wife OR girlfriend? , or what if I say, I can tell u what your boss said to you in…

Continue reading on Medium »

Hacking on Medium
47 Insanely Useful Websites You Probably Have Never Seen

https://cdn-images-1.medium.com/max/612/0*cnKxVcS5HG90eA-L
These websites will give you a jaw-dropping experience, and you will embrace the ~world wide~ web even more.

Continue reading on Age of Awareness »

LoGiC.NET - A More Advanced Free And Open .NET Obfuscator Using Dnlib

LoGiC.NET is a free and open-source .NET obfuscator that uses dnlib for folks that want to see how obfuscation works with more complex obfuscations than Goldfuscator for example.Before obfuscation After obfuscation Dependencies dnlib v3.3.2 : Restore NuGet packages and it'll work (if it doesn't already). SharpConfigParser : https://github.com/AnErrupTion/LoGiC.NET/raw/master/SharpConfigParser.dll Current Features Renames methods, parameters, properties, fields and events. Adds proxy calls. Encrypts strings. Encodes ints. Adds junk methods. Prevents application tampering. Adds control flow. And more! TODO Add an Anti-Emulation and Anti-Debug. Download LoGiC.NET
Read more...

LoGiC.NET - A More Advanced Free And Open .NET Obfuscator Using Dnlib
http://www.kitploit.com/2021/07/logicnet-more-advanced-free-and-open.html

LoGiC.NET is a free and open-source .NET obfuscator (https://www.kitploit.com/search/label/Obfuscator) that uses dnlib for folks that want to see how obfuscation (https://www.kitploit.com/search/label/Obfuscation) works with more complex obfuscations than Goldfuscator for example.
Before obfuscation

After obfuscation

Dependencies
dnlib v3.3.2 : Restore NuGet packages and it'll work (if it doesn't already).
SharpConfigParser : https://github.com/AnErrupTion/LoGiC.NET/raw/master/SharpConfigParser.dll
Current Features
Renames methods, parameters, properties, fields and events. Adds proxy calls. Encrypts strings. Encodes ints. Adds junk methods. Prevents application tampering. Adds control flow. And more!
TODO
Add an Anti-Emulation and Anti-Debug.

Download LoGiC.NET (https://github.com/AnErrupTion/LoGiC.NET)

Ligolo-ng: An advanced, yet simple, tunneling tool that uses a TUN interface.
https://www.reddit.com/r/redteamsec/comments/otagu1/ligolong_an_advanced_yet_simple_tunneling_tool/

submitted by /u/TNPitsecurity (https://www.reddit.com/user/TNPitsecurity)
[link] (https://github.com/tnpitsecurity/ligolo-ng) [comments] (https://www.reddit.com/r/redteamsec/comments/otagu1/ligolong_an_advanced_yet_simple_tunneling_tool/)

Good all in one source for walkthroughs on the latest Windows RCE and LPE exploits?
https://www.reddit.com/r/Pentesting/comments/ot86cr/good_all_in_one_source_for_walkthroughs_on_the/

<!-- SC_OFF -->I’ve got some free time over the next two days and need to catch up on the latest Windows RCE and LPE exploits. Anyone know of a good blogger or streamer that covers all/most of them with walkthroughs? Of course I can Google it, just wondering if anyone had found one good source of this type of thing vs wading through countless search results. <!-- SC_ON --> submitted by /u/subsonic68 (https://www.reddit.com/user/subsonic68)
[link] (https://www.reddit.com/r/Pentesting/comments/ot86cr/good_all_in_one_source_for_walkthroughs_on_the/) [comments] (https://www.reddit.com/r/Pentesting/comments/ot86cr/good_all_in_one_source_for_walkthroughs_on_the/)

Guide to Web Application Penetration Testing.
https://www.reddit.com/r/Pentesting/comments/ot8ncr/guide_to_web_application_penetration_testing/

<!-- SC_OFF -->We have covered the process of Penetration Testing in other articles, today we are taking a deeper look at an important type of Penetration testing which is Web Application Penetration Testing. Right from what it is to the steps and methods to perform it, here is your complete guide to Web Application Penetration Testing. ​ https://preview.redd.it/vmq9nqh83yd71.png?width=512&format=png&auto=webp&s=9637bc534d4962c6b36f9e0bdbeb0c9476d432dc Web Application Penetration Testing (https://www.vistainfosec.com/blog/guide-to-web-application-penetration-testing/) is a type of ethical hacking engagement which is designed to test the security, architecture, design and configuration of web applications. This process to the web application or the underlying web server / database identifies Cyber Security threats that could lead to unauthorized users gaining low-level access leading to confidential information being leaked. <!-- SC_ON --> submitted by /u/stephen90147 (https://www.reddit.com/user/stephen90147)
[link] (https://www.reddit.com/r/Pentesting/comments/ot8ncr/guide_to_web_application_penetration_testing/) [comments] (https://www.reddit.com/r/Pentesting/comments/ot8ncr/guide_to_web_application_penetration_testing/)

hacking: security in practice
Password cracking - sequential vs random

Is it generally faster to try to brute force a password sequentially (aaaaaaaa, aaaaaaab, etc.) or just randomly?

I'd have thought guessing randomly would be more likely to stumble on the correct password than sequentially doing so but haven't been able to find any info about this?

submitted by /u/53uhwGe6JGCw
[link] [comments]