How to perform static analysis of JavaScript files?

Hi readers, hope you are doing well. This is my first medium article which explains how to actually perform a static analysis on…Continue reading on Medium »
Read more...

Hacking on Medium
GRANDPA — HackTheBox WriteUp

https://cdn-images-1.medium.com/max/894/1*TgoucjX9QEvZb512uOtN3Q.png
This box is a part of TJnull’s list of boxes. I am doing these boxes as a part of my preparation for OSCP. I will be sharing the writeups…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
PEGASUS —WHAT HOW WHO?

https://cdn-images-1.medium.com/max/1000/1*ypbbrRyGqpyx7OVQvez-nA.png
What exactly is ‘Pegasus’?

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
(MAC book os)Loaded 1 password hash. Then it says only 5 candidates buffered for the current salt. Now it’s on proceeding with incremental: ASCII

How long does this process take? Anything I need to do or just wait?

submitted by /u/Chakra23
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
About some screenshots that appeared in my desktop

Hey guys, I need help with some screenshots that appeared in my desktop. I just realized it appeared in my desktop and I can't remember taking these screenshots, I'm kinda bugged by that, because I don't know the pattern of the way it's named:
- ScreenCapture20210813_204636_815.bmp
- ScreenCapture20210813_204637_174.bmp
- ScreenCapture20210813_204631_914.bmp
- ScreenCapture20210813_204635_392.bmp

(It's 4 screenshots, taken/saved at the same time apparently ~9:46:35 AM~)
I tried saving some screenshots, but I can't find this name pattern.
Any of you guys can recognize this name pattern?
If needed I can provide any info about logs or about these images.
Glad for the help! :)

submitted by /u/pedpedro25
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Securing SDLC

https://cdn-images-1.medium.com/max/663/1*aQJYgFDIHJZLrydECRZylg.png
Implement Security Testing in your SDLC

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How do hackers exploit the Internet to achieve their goals?

https://cdn-images-1.medium.com/max/800/0*3kp4XEnffyGPQ2TI.png
Fake domains, millions of insecure devices, and public websites like Twitter and GitHub

Continue reading on Emergent Phenomena »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Local File Inclusion

https://cdn-images-1.medium.com/max/778/1*ibIfUWbIUALiZFjhSOsx3w.png
The Awesome room for basic understanding of Local File Inclusion

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Real-Time Threat Detection: Why This Is The Future Of Cybersecurity

https://cdn-images-1.medium.com/max/2600/0*V1VKDyxZ9t9RoV8X
Real-time threat detection enhances architecture security by identifying any malicious activity that compromises your IT infrastructure…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
The Most Common Types of Malware And How To Deal With Them

https://cdn-images-1.medium.com/max/2600/0*Ze_-0IGdyvWUksdD
Web browsing is becoming commonplace for everyone, but there are still risks when using the Internet. Unfortunately, not every user is…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

BUG HUNTING METHODOLOGY FOR BEGINNERS

In this write up I am going to describe the path I walked through the bug hunting from the beginner level. This write-up is purely for new…
Read more...

Bantam - A PHP Backdoor Management And Generation tool/C2 Featuring End To End Encrypted Payload Streaming Designed To Bypass WAF, IDS, SIEM Systems
http://www.kitploit.com/2021/08/bantam-php-backdoor-management-and.html

___________________________
@hacking_Attack
@Hacking_Video

An advanced PHP backdoor management tool, with a lightweight server footprint, multi-threaded communication, and an advanced payload generation (https://www.kitploit.com/search/label/Payload%20Generation) and obfuscation tool. Features end to end encryption (https://www.kitploit.com/search/label/End%20To%20End%20Encryption) with request unique encryption keys, and payload streaming designed to bypass WAF, IDS, SIEM systems. It incorporates several payload randomization (https://www.kitploit.com/search/label/Randomization) and obfuscation techniques to help prevent detection when encryption is not possible. Bantam is an ideal tool for linux PHP post exploitation (https://www.kitploit.com/search/label/Post%20Exploitation) privesc making it a breeze to upload enumeration scripts. Bantam also has a plugin system making it easy to add scripts and features to the ui. It is programmed in C# and runs on windows, and Linux using wine.
Features

End to end request & response encryption - encryption flow (https://github.com/gellin/bantam/blob/master/documentation/encryption.png)
AES-256 bit encryption on request & response data using openssl or mcrypt Response encryption keys are newly generated and embedded into the request payload for every request making every response unique, preventing detection from WAF and IDS systems Request encryption keys can be embedded using a pre-shared key/iv, or use a pre-shared key with a randomly generated IV that is passed through a known request variable making every request signature unique
Main form - [img] (https://github.com/gellin/bantam/blob/master/documentation/forms/main.png)
Get Shell Information - [img] (https://github.com/gellin/bantam/blob/master/documentation/forms/main.png) Add Shell - [img] (https://github.com/gellin/bantam/blob/master/documentation/forms/add_shell.png) Eval tool - Opens a text editor that will eval the input text as a php payload Remote port scanner - Uses the bantam server to scan remote ports PHPInfo viewer - Opens the phpinfo page in an html window Self Editor - Edit the Bantam code stored on the server Linux - Helpful cmds and files. Dynamically included from settings.xml (https://github.com/gellin/bantam/blob/master/bantam/settings/settings.xml) (passwd, ps aux, ifconfig, ..etc) Wndows - Helpful cmds and files. Dynamically included from settings.xml (https://github.com/gellin/bantam/blob/master/bantam/settings/settings.xml) (net user, hosts, ipconfig, ..etc) Windows Screenshot Grabber - Grabs a screenshot of the current screen Plugins - Dynamically include a php payload into the ui to be executed by setting up a plugin into the settings.xml (https://github.com/gellin/bantam/blob/master/bantam/settings/settings.xml) Reset connection - Removes the current shell and session info from ui, re-adds the shell and tests the connection Update ping - Updates the ping to the selected shell Edit settings - Opens the current shell settings into the ui to modify Copy url - Copyies the shell url to the clipboard Remove - Removes the shell from the ui Save Shells to xml Open Saved Shells from XML
Reverse Shell - [img] (https://github.com/gellin/bantam/blob/master/documentation/forms/reverse_shell.png)
Spawns a reverse shell to the indicated IP/Port Methods supported - perl, netcat, netcat with pipe, telnet with pipe, php, bash, python, barrage(all) Bypass disabled_functions & open_basedir with chankro (https://github.com/TarlogicSecurity/Chankro/)
Backdoor generator - [img] (https://github.com/gellin/bantam/blob/master/documentation/forms/backdoor_gen.png)
Generates a php backdoor payload tailored for your settings
User Agent Switcher
Randomize or customize the useragent used in requests
Proxy Settings
Supports Socks and HTTP proxies
Mass Execute

___________________________
@hacking_Attack
@Hacking_Video