KitPloit - PenTest Tools!
LoGiC.NET - A More Advanced Free And Open .NET Obfuscator Using Dnlib

http://4.bp.blogspot.com/-omIGXli5zo4/YPtaxfDlcgI/AAAAAAAAm2g/ew1he_-qQMUvlN08UY4gfqNQ2KgDAsBxgCK4BGAYYCw/w640-h344/LoGiC.NET_2_after-702574.png

LoGiC.NET is a free and open-source .NET obfuscator that uses dnlib for folks that want to see how obfuscation works with more complex obfuscations than Goldfuscator for example.
Before obfuscation

http://2.bp.blogspot.com/-Kaq-GK_1_1Q/YPtavQ-jrAI/AAAAAAAAm2Y/d8E6S3WPS40SxW9vo5qdLYt5to-rBHjeACK4BGAYYCw/w640-h344/LoGiC.NET_1_before-795320.png

After obfuscation

http://4.bp.blogspot.com/-omIGXli5zo4/YPtaxfDlcgI/AAAAAAAAm2g/ew1he_-qQMUvlN08UY4gfqNQ2KgDAsBxgCK4BGAYYCw/w640-h344/LoGiC.NET_2_after-702574.png

Dependencies

dnlib v3.3.2 : Restore NuGet packages and it'll work (if it doesn't already).
SharpConfigParser : https://github.com/AnErrupTion/LoGiC.NET/raw/master/SharpConfigParser.dll

Current Features

* Renames methods, parameters, properties, fields and events.
* Adds proxy calls.
* Encrypts strings.
* Encodes ints.
* Adds junk methods.
* Prevents application tampering.
* Adds control flow.
* And more!

TODO

* Add an Anti-Emulation and Anti-Debug.
Download LoGiC.NET

Hacking on Medium
Pegasus: A Friend Or a Foe | What is Pegasus? | Dangerous or Not

https://cdn-images-1.medium.com/max/2048/1*_KR8QkJ-T3M7LsYubiZu9w.jpeg
What if I say I can hear your voice calls with your wife OR girlfriend? , or what if I say, I can tell u what your boss said to you in…

Continue reading on Medium »

Hacking on Medium
47 Insanely Useful Websites You Probably Have Never Seen

https://cdn-images-1.medium.com/max/612/0*cnKxVcS5HG90eA-L
These websites will give you a jaw-dropping experience, and you will embrace the ~world wide~ web even more.

Continue reading on Age of Awareness »

LoGiC.NET - A More Advanced Free And Open .NET Obfuscator Using Dnlib

LoGiC.NET is a free and open-source .NET obfuscator that uses dnlib for folks that want to see how obfuscation works with more complex obfuscations than Goldfuscator for example.Before obfuscation After obfuscation Dependencies dnlib v3.3.2 : Restore NuGet packages and it'll work (if it doesn't already). SharpConfigParser : https://github.com/AnErrupTion/LoGiC.NET/raw/master/SharpConfigParser.dll Current Features Renames methods, parameters, properties, fields and events. Adds proxy calls. Encrypts strings. Encodes ints. Adds junk methods. Prevents application tampering. Adds control flow. And more! TODO Add an Anti-Emulation and Anti-Debug. Download LoGiC.NET
Read more...

LoGiC.NET - A More Advanced Free And Open .NET Obfuscator Using Dnlib
http://www.kitploit.com/2021/07/logicnet-more-advanced-free-and-open.html

LoGiC.NET is a free and open-source .NET obfuscator (https://www.kitploit.com/search/label/Obfuscator) that uses dnlib for folks that want to see how obfuscation (https://www.kitploit.com/search/label/Obfuscation) works with more complex obfuscations than Goldfuscator for example.
Before obfuscation

After obfuscation

Dependencies
dnlib v3.3.2 : Restore NuGet packages and it'll work (if it doesn't already).
SharpConfigParser : https://github.com/AnErrupTion/LoGiC.NET/raw/master/SharpConfigParser.dll
Current Features
Renames methods, parameters, properties, fields and events. Adds proxy calls. Encrypts strings. Encodes ints. Adds junk methods. Prevents application tampering. Adds control flow. And more!
TODO
Add an Anti-Emulation and Anti-Debug.

Download LoGiC.NET (https://github.com/AnErrupTion/LoGiC.NET)

Ligolo-ng: An advanced, yet simple, tunneling tool that uses a TUN interface.
https://www.reddit.com/r/redteamsec/comments/otagu1/ligolong_an_advanced_yet_simple_tunneling_tool/

submitted by /u/TNPitsecurity (https://www.reddit.com/user/TNPitsecurity)
[link] (https://github.com/tnpitsecurity/ligolo-ng) [comments] (https://www.reddit.com/r/redteamsec/comments/otagu1/ligolong_an_advanced_yet_simple_tunneling_tool/)

Good all in one source for walkthroughs on the latest Windows RCE and LPE exploits?
https://www.reddit.com/r/Pentesting/comments/ot86cr/good_all_in_one_source_for_walkthroughs_on_the/

<!-- SC_OFF -->I’ve got some free time over the next two days and need to catch up on the latest Windows RCE and LPE exploits. Anyone know of a good blogger or streamer that covers all/most of them with walkthroughs? Of course I can Google it, just wondering if anyone had found one good source of this type of thing vs wading through countless search results. <!-- SC_ON --> submitted by /u/subsonic68 (https://www.reddit.com/user/subsonic68)
[link] (https://www.reddit.com/r/Pentesting/comments/ot86cr/good_all_in_one_source_for_walkthroughs_on_the/) [comments] (https://www.reddit.com/r/Pentesting/comments/ot86cr/good_all_in_one_source_for_walkthroughs_on_the/)

Guide to Web Application Penetration Testing.
https://www.reddit.com/r/Pentesting/comments/ot8ncr/guide_to_web_application_penetration_testing/

<!-- SC_OFF -->We have covered the process of Penetration Testing in other articles, today we are taking a deeper look at an important type of Penetration testing which is Web Application Penetration Testing. Right from what it is to the steps and methods to perform it, here is your complete guide to Web Application Penetration Testing. ​ https://preview.redd.it/vmq9nqh83yd71.png?width=512&format=png&auto=webp&s=9637bc534d4962c6b36f9e0bdbeb0c9476d432dc Web Application Penetration Testing (https://www.vistainfosec.com/blog/guide-to-web-application-penetration-testing/) is a type of ethical hacking engagement which is designed to test the security, architecture, design and configuration of web applications. This process to the web application or the underlying web server / database identifies Cyber Security threats that could lead to unauthorized users gaining low-level access leading to confidential information being leaked. <!-- SC_ON --> submitted by /u/stephen90147 (https://www.reddit.com/user/stephen90147)
[link] (https://www.reddit.com/r/Pentesting/comments/ot8ncr/guide_to_web_application_penetration_testing/) [comments] (https://www.reddit.com/r/Pentesting/comments/ot8ncr/guide_to_web_application_penetration_testing/)

hacking: security in practice
Password cracking - sequential vs random

Is it generally faster to try to brute force a password sequentially (aaaaaaaa, aaaaaaab, etc.) or just randomly?

I'd have thought guessing randomly would be more likely to stumble on the correct password than sequentially doing so but haven't been able to find any info about this?

submitted by /u/53uhwGe6JGCw
[link] [comments]

hacking: security in practice
How to deaktivate Windows Defender

So I have this computer and I wanna get the admin password. I tryed to use a boot USB-Stick and change the utilman.exe with the cmd.exe, so i could change the password later on, as i did a few times before.

But the problem now is that Windows Defender blocks it. When i try to open it, Windows Defender delets the utilman.exe (cmd.exe copy). I tryed to change the register and set the CmdLine and the SetupType, but the pc won't start. I also tryed to edit utilman.exe over the registery, but when i do that and click on it, windows defender just deleats the dword. I realy ned help and sorry for my bad english

Edit: I also tryed secureboot, but when i do that, the consol will close it sealf again after 0,5-1s

submitted by /u/Inspector_Hairy
[link] [comments]

Cross Site Scripting (XSS)
https://akash-venky091.medium.com/cross-site-scripting-xss-c52256c2d7?source=rss------bug_bounty-5