KitPloit - PenTest Tools!
Karton - Distributed Malware Processing Framework Based On Python, Redis And MinIO

https://1.bp.blogspot.com/-M70yae7UU1M/YRIMOxB0jAI/AAAAAAAApsg/68Huf72xtrY5-zMbnE94Q1zvJrVsc8PZgCNcBGAsYHQ/w640-h248/karton.png Distributed malware processing framework based on Python, Redis and MinIO. The ideaKarton is a robust framework for creating flexible and lightweight malware analysis backends. It can be used to connect malware* analysis systems into a robust pipeline with very little effort.

We've been in the automation business for a long time. We're dealing with more and more threats, and we have to automate everything to keep up with incidents. Because of this, we often end up with many scripts stuck together with duck duct tape and WD-40. These scripts are written by analysts in the heat of the moment, fragile and ugly - but they work, and produce intel that must be stored, processed further, sent to other systems or shared with other organisations.

We needed a way to take our PoC scripts and easily insert them into our analysis pipeline. We also wanted to monitor their execution, centralise logging, improve robustness, reduce development inertia... For this exact purpose, we created Karton.

* while Karton was designed with malware analysis in mind, it works nicely in every microservice-oriented project. InstallationInstallation is as easy as a single pip installcommand: pip3 install karton-core In order to setup the whole backend environment you will also need MinIO and Redis, see the docs for details. Example usageTo use karton you have to provide class that inherits from Karton.

None: # Get sample object packed_sample = task.get_resource('sample') # Log with self.log self.log.info(f"Hi {packed_sample.name}, let me analyze you!") ... # Send our results for further processing or reporting task = Task( { "type": "sample", "kind": "raw" }, payload = { "parent": packed_sample, "sample": Resource(filename, unpacked) }) self.send_task(task) if __name__ == "__main__": # Here comes the main loop GenericUnpacker().loop() ">from karton.core import Karton, Task, Resource

class GenericUnpacker(Karton):
"""
Performs sample unpacking
"""
identity = "karton.generic-unpacker"
filters = [
{
"type": "sample",
"kind": "runnable",
"platform": "win32"
}
]

def process(self, task: Task) -> None:
# Get sample object
packed_sample = task.get_resource('sample')
# Log with self.log
self.log.info(f"Hi {packed_sample.name}, let me analyze you!")
...
# Send our results for further processing or reporting
task = Task(
{
"type": "sample",
"kind": "raw"
}, payload = {
"parent": packed_sample,
"sample": Resource(filename, unpacked)
})
self.send_task(task)< br/>
if __name__ == "__main__":
# Here comes the main loop
GenericUnpacker().loop() Karton systemsSome Karton systems are universal and useful to everyone. We decided to share them with the community. kartonThis repository. It contains the karton.systemservice - main service, responsible for dispatching tasks within the system. It also contains the karton.coremodule, that is used as a library by other systems. karton-dashboardA small Flask dashboard for task and queue management and monitoring. karton-classifierThe "router". It recognises samples/files and produces various task types depending on the file format. Thanks to this, other systems may only listen for tasks with a specific format (for example, only ziparchives). karton-archive-extractorGeneric archive unpacker. Archives uploaded into the system wil[...]

___________________________
@hacking_Attack
@Hacking_Video

l be extracted, and every file will be processed individually. karton-config-extractorMalware extractor. It uses Yara rules and Python modules to extract static configuration from malware samples and analyses. It's a fishing rod, not a fish - we don't share the modules themselves. But it's easy to write your own! karton-mwdb-reporterA very important part of the pipeline. Reporter submits all files, tags, comments and other intel produced during the analysis to MWDB. If you don't use MWDB yet or just prefer other backends, it's easy to write your own reporter. karton-yaramatcherAutomatically runs Yara rules on all files in the pipeline, and tags samples appropriately. Rules not included ;). karton-asciimagicKarton system that decodes files encoded with common methods, like hex, base64, etc. (You wouldn't believe how common it is). karton-autoit-ripperA small wrapper around AutoIt-Ripper that extracts embedded AutoIt scripts and resources from compiled AutoIt executables. DRAKVUF SandboxAutomated black-box malware analysis system with DRAKVUF engine under the hood, which does not require an agent on guest OS.

Coming soon: karton-misp-pusherA reporter, that submits observed events to MISP.

This is how these systems can be used to form a basic malware analysis pipeline: https://1.bp.blogspot.com/-M70yae7UU1M/YRIMOxB0jAI/AAAAAAAApsg/68Huf72xtrY5-zMbnE94Q1zvJrVsc8PZgCNcBGAsYHQ/w640-h248/karton.png Download Karton

___________________________
@hacking_Attack
@Hacking_Video

Deep Web
where to find deep web websites

what can i use to find deepweb websites?

submitted by /u/Clorox_bleach_spray
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Dump for the conti ransomeware gang?

Is there a dump of the original files anywhere?

submitted by /u/jesus-da-wizard
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Which language?

I know this is super super cliche but I’m not sure which language to go for.

I messed around and am still playing with python a lot, I don’t know it too well but still.

I wanna get into hacking, not for anything unethical but I want the skills for it.

I hear Java or JavaScript but I’m not sure what’s good for effectiveness and for a beginner like me.

All help is appreciated and feel free to ask questions!

submitted by /u/Polypgb
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
API For Apple Air Tag?

Hey has anyone developed a API or something to get the GPS location of an Air tag they own? Im trying to make my own tracker using google maps to access on my android or windows device but can't since apple wont offer such

submitted by /u/SteinsGates
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Microsoft Exchange email hack was caused by China, U.S. says

https://external-preview.redd.it/cYw1jQqe-r2TOpOKFCTleiqzvVx5kFJ70PJXjfJLW8w.jpg?width=640&crop=smart&auto=webp&s=574ec6ea0e19d773952d7d311ed512c31587f050 submitted by /u/snooshoe
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Dexfolio x Immunifi: $12,000 Bug Bounty
https://dexfolio.medium.com/dexfolio-x-immunifi-12-000-bug-bounty-366061b9ad16?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

With the largest hack in DEFI history — $600M stolen through Poly Network—every project should be thinking about how to make their funds…Continue reading on Medium » (https://dexfolio.medium.com/dexfolio-x-immunifi-12-000-bug-bounty-366061b9ad16?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
The Biggest Hack in crypto history

11th August 2021
The Biggest Hack in cryptocurrency history!

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Twitter algorithm found something?
https://medium.com/@rajkumar.rksen/twitter-algorithm-found-something-ae8c052a34eb?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Twitter algorithm had found the preferring lighter, slimmer and younger faces. A graduate student from Switzerland was awared $3000 by…Continue reading on Medium » (https://medium.com/@rajkumar.rksen/twitter-algorithm-found-something-ae8c052a34eb?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Deep Web
can i earn money on the deep web if so how?

submitted by /u/oliviapd1221
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Is Hackerone a joke?

There are some elite guys on there that really know there stuff. But something wild I've noticed is that some of the programs like Uber will accept and award a hackers submission, but another hacker who found another issue that is similar but not exactly the same nor duplicate will get rejected. And now to make matters worse, Hackerone does managed hacking for the companies so the Hackers submission is reviewed by HackerOne before being accepted or not and Hackerone staff can say "We don't see any security violation here".

Example, is a 2FA bypass some other Hacker found for the same program. And if I find a 2FA bypass in another process/login for the same company, or even a different company that has that in-scope, the Hackerone staff will reject it all because my signal rate isn't as high as other hackers that also found that same issue for other companies or same company I did. So it is all like a joke lol

submitted by /u/Holierthanhe
[link] [comments]

hacking: security in practice
How do I flash a rubber ducky?

I can't find any tutorials from later than 2017 for this. All of the old ones include using an adapter from Micro-SD to USB. That didn't come in my shipment though, so I don't know what to do

submitted by /u/LordDerptCat123
[link] [comments]