hacking: security in practice
mercurial.exe doesn't want to open
any ideas on how to make it open?
submitted by /u/Jazz_Like_Card_9975
[link] [comments]
mercurial.exe doesn't want to open
any ideas on how to make it open?
submitted by /u/Jazz_Like_Card_9975
[link] [comments]
reddit
mercurial.exe doesn't want to open
any ideas on how to make it open?
hacking: security in practice
I found a vulnerability in a website that lots of people don’t like (myself included)
What would you do in this situation? I don’t plan on going through with it because I don’t want the FBI knocking on my door.
submitted by /u/OddAtmosphere6303
[link] [comments]
I found a vulnerability in a website that lots of people don’t like (myself included)
What would you do in this situation? I don’t plan on going through with it because I don’t want the FBI knocking on my door.
submitted by /u/OddAtmosphere6303
[link] [comments]
reddit
I found a vulnerability in a website that lots of people don’t...
What would you do in this situation? I don’t plan on going through with it because I don’t want the FBI knocking on my door.
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Hi this is the only link for connect to black . water site
https://cdn-images-1.medium.com/max/1700/1*p54w30fNOMAXtLAPj7lqkw.jpeg
please before click to link you most to learn the cnt of business
Continue reading on Medium »
Hi this is the only link for connect to black . water site
https://cdn-images-1.medium.com/max/1700/1*p54w30fNOMAXtLAPj7lqkw.jpeg
please before click to link you most to learn the cnt of business
Continue reading on Medium »
KnockOutlook - A Little Tool To Play With Outlook
http://www.kitploit.com/2021/09/knockoutlook-little-tool-to-play-with.html
http://www.kitploit.com/2021/09/knockoutlook-little-tool-to-play-with.html
"The best feeling is to win by knockout." - Nonito Donaire
Overview
KnockOutlook is a C# project that interacts with Outlook's COM object in order to perform a number of operations (https://www.kitploit.com/search/label/Operations) useful in red team (https://www.kitploit.com/search/label/Red%20Team) engagements.
Command Line Usage
metadata of every account search : search for the provided keyword in every mailbox save : save a specified mail by its EntryID Examples: KnockOutlook.exe --operation check KnockOutlook.exe --operation contacts KnockOutlook.exe --operation mails --bypass KnockOutlook.exe --operation search --keyword password KnockOutlook.exe --operation save --id {EntryID} --bypass "> __ __ __ ____ __ __ __
/ //_/____ ____ _____/ /__/ __ \__ __/ /_/ /___ ____ / /__
/ ,< / __ \/ __ \/ ___/ //_/ / / / / / / __/ / __ \/ __ \/ //_/
/ /| |/ / / / /_/ / /__/ ,< / /_/ / /_/ / /_/ / /_/ / /_/ / ,<
/_/ |_/_/ /_/\____/\___/_/\_\\____/\__,_/\__/_/\____/\____/_/\_\
Parameters:
--operation : specify the operation to run
--keyword : specify a keyword for the 'search' operation
--id : specify an EntryID for the 'save' operation
--bypass : bypass the Programmatic Access Security settings (requires admin)
Operations:
check : perform a number of checks to ensure operational security
contacts : extract all contacts of every account
mails : extract mailbox metadata of every account
search : search for the provided keyword in every mailbox
save : save a specified mail by its EntryID
Examples:
KnockOutlook.exe --operation check
KnockOutlook.exe --operation contacts
KnockOutlook.exe --operation mails --bypass
KnockOutlook.exe --operation search --keyword password
KnockOutlook.exe --operation save --id {EntryID} --bypass
Operations
check Enumerates the Outlook installation details in order to construct the correct registry key (https://www.kitploit.com/search/label/Registry%20Key) and retrieve the Programmatic Access Security setting. If this value is set to Warn when antivirus (https://www.kitploit.com/search/label/Antivirus) is inactive or out-of-date it queries WMI for any installed antivirus products and parses their current state. contacts Enumerates the contacts of every configured account and extracts the following information: Full Name Email Address mails Enumerates the mails of every configured account and extracts the following metadata: ID Timestamp Subject From To Attachments search Searches inside the mailbox of every configured account using Outlook's built-in search engine and returns the EntryID of mails that contain the provided keyword in their body. save Uses Outlook's built-in Save As mechanism to export a mail referenced by its EntryID.
Object Model Guard Bypass
The --bypass switch can be used in conjunction with contacts, mails, search and save operations given the fact that the current process is running with high integrity level. It will attempt to snapshot the current security policy of Outlook, patch it in a way that the Programmatic Access Security prompt is auto-allowed and finally revert it to its initial state after the operation has finished.
Output
All operations will output basic information on screen. The contacts and mails operations will output results in JSON format to a Gzip compressed file. The save operation will export the requested mail in .MSG format. All filenames are randomly generated during runtime. By default, Outlook's Secure Temp Folder is used as a destination for all exported files.
Authors
eks (https://twitter.com/eks_perience) psof (https://github.com/psof)
Download KnockOutlook (https://github.com/eksperience/KnockOutlook)
Overview
KnockOutlook is a C# project that interacts with Outlook's COM object in order to perform a number of operations (https://www.kitploit.com/search/label/Operations) useful in red team (https://www.kitploit.com/search/label/Red%20Team) engagements.
Command Line Usage
metadata of every account search : search for the provided keyword in every mailbox save : save a specified mail by its EntryID Examples: KnockOutlook.exe --operation check KnockOutlook.exe --operation contacts KnockOutlook.exe --operation mails --bypass KnockOutlook.exe --operation search --keyword password KnockOutlook.exe --operation save --id {EntryID} --bypass "> __ __ __ ____ __ __ __
/ //_/____ ____ _____/ /__/ __ \__ __/ /_/ /___ ____ / /__
/ ,< / __ \/ __ \/ ___/ //_/ / / / / / / __/ / __ \/ __ \/ //_/
/ /| |/ / / / /_/ / /__/ ,< / /_/ / /_/ / /_/ / /_/ / /_/ / ,<
/_/ |_/_/ /_/\____/\___/_/\_\\____/\__,_/\__/_/\____/\____/_/\_\
Parameters:
--operation : specify the operation to run
--keyword : specify a keyword for the 'search' operation
--id : specify an EntryID for the 'save' operation
--bypass : bypass the Programmatic Access Security settings (requires admin)
Operations:
check : perform a number of checks to ensure operational security
contacts : extract all contacts of every account
mails : extract mailbox metadata of every account
search : search for the provided keyword in every mailbox
save : save a specified mail by its EntryID
Examples:
KnockOutlook.exe --operation check
KnockOutlook.exe --operation contacts
KnockOutlook.exe --operation mails --bypass
KnockOutlook.exe --operation search --keyword password
KnockOutlook.exe --operation save --id {EntryID} --bypass
Operations
check Enumerates the Outlook installation details in order to construct the correct registry key (https://www.kitploit.com/search/label/Registry%20Key) and retrieve the Programmatic Access Security setting. If this value is set to Warn when antivirus (https://www.kitploit.com/search/label/Antivirus) is inactive or out-of-date it queries WMI for any installed antivirus products and parses their current state. contacts Enumerates the contacts of every configured account and extracts the following information: Full Name Email Address mails Enumerates the mails of every configured account and extracts the following metadata: ID Timestamp Subject From To Attachments search Searches inside the mailbox of every configured account using Outlook's built-in search engine and returns the EntryID of mails that contain the provided keyword in their body. save Uses Outlook's built-in Save As mechanism to export a mail referenced by its EntryID.
Object Model Guard Bypass
The --bypass switch can be used in conjunction with contacts, mails, search and save operations given the fact that the current process is running with high integrity level. It will attempt to snapshot the current security policy of Outlook, patch it in a way that the Programmatic Access Security prompt is auto-allowed and finally revert it to its initial state after the operation has finished.
Output
All operations will output basic information on screen. The contacts and mails operations will output results in JSON format to a Gzip compressed file. The save operation will export the requested mail in .MSG format. All filenames are randomly generated during runtime. By default, Outlook's Secure Temp Folder is used as a destination for all exported files.
Authors
eks (https://twitter.com/eks_perience) psof (https://github.com/psof)
Download KnockOutlook (https://github.com/eksperience/KnockOutlook)
Deep Web
Genuine Question
So I offered services on the Deep Web, however, I actually had an associate of mine do the posting or any related activity for me. Unfortunately he has recently passed away which leaves me without a source of income. How would I go about searching for sites on a TOR browser to find an acceptable website.
submitted by /u/EliteBurglar
[link] [comments]
Genuine Question
So I offered services on the Deep Web, however, I actually had an associate of mine do the posting or any related activity for me. Unfortunately he has recently passed away which leaves me without a source of income. How would I go about searching for sites on a TOR browser to find an acceptable website.
submitted by /u/EliteBurglar
[link] [comments]
reddit
Genuine Question
So I offered services on the Deep Web, however, I actually had an associate of mine do the posting or any related activity for me. Unfortunately...
OpenZeppelin Bug Fix Postmortem
https://medium.com/immunefi/openzeppelin-bug-fix-postmortem-66d8c89ed166?source=rss------bug_bounty-5
https://medium.com/immunefi/openzeppelin-bug-fix-postmortem-66d8c89ed166?source=rss------bug_bounty-5
SummaryContinue reading on Immunefi » (https://medium.com/immunefi/openzeppelin-bug-fix-postmortem-66d8c89ed166?source=rss------bug_bounty-5)
KnockOutlook - A Little Tool To Play With Outlook
"The best feeling is to win by knockout." - Nonito Donaire Overview KnockOutlook is a C# project that interacts with Outlook's COM object in order to perform a number of operations useful in red team engagements.Command Line Usage metadata of every account search : search for the provided keyword in every mailbox save : save a specified mail by its EntryID Examples: KnockOutlook.exe --operation check KnockOutlook.exe --operation contacts KnockOutlook.exe --operation mails --bypass KnockOutlook.exe --operation search --keyword password KnockOutlook.exe --operation save --id {EntryID} --bypass "> _ _ _ _ _ _ _ / //_/_ _ _/ /_/ _ \_ _/ /_/ /_ _ / /_ / ,< / _ \/ _ \/ _/ //_/ / / / / / / _/ / _ \/ _ \/ //_/ / /| |/ / / / /_/ / /_/ ,< / /_/ / /_/ / /_/ / /_/ / /_/ / ,< /_/ |_/_/ /_/\_/\_/_/\_\\_/\_,_/\_/_/\_/\_/_/\_\Parameters: --operation : specify the operation to run --keyword : specify a keyword for the 'search' operation --id : specify an EntryID for the 'save' operation --bypass : bypass the Programmatic Access Security settings (requires admin)Operations: check : perform a number of checks to ensure operational security contacts : extract all contacts of every account mails : extract mailbox metadata of every account search : search for the provided keyword in every mailbox save : save a specified mail by its EntryIDExamples: KnockOutlook.exe --operation check KnockOutlook.exe --operation contacts KnockOutlook.exe --operation mails --bypass KnockOutlook.exe --operation search --keyword password KnockOutlook.exe --operation save --id {EntryID} --bypass Operations check Enumerates the Outlook installation details in order to construct the correct registry key and retrieve the Programmatic Access Security setting. If this value is set to Warn when antivirus is inactive or out-of-date it queries WMI for any installed antivirus products and parses their current state. contacts Enumerates the contacts of every configured account and extracts the following information: Full Name Email Address mails Enumerates the mails of every configured account and extracts the following metadata: ID Timestamp Subject From To Attachments search Searches inside the mailbox of every configured account using Outlook's built-in search engine and returns the EntryID of mails that contain the provided keyword in their body. save Uses Outlook's built-in Save As mechanism to export a mail referenced by its EntryID. Object Model Guard Bypass The --bypass switch can be used in conjunction with contacts, mails, search and save operations given the fact that the current process is running with high integrity level. It will attempt to snapshot the current security policy of Outlook, patch it in a way that the Programmatic Access Security prompt is auto-allowed and finally revert it to its initial state after the operation has finished. Output All operations will output basic information on screen. The contacts and mails operations will output results in JSON format to a Gzip compressed file. The save operation will export the requested mail in .MSG format. All filenames are randomly generated during runtime. By default, Outlook's Secure Temp Folder is used as a destination for all exported files. Authors eks psof Download KnockOutlook
Read more...
"The best feeling is to win by knockout." - Nonito Donaire Overview KnockOutlook is a C# project that interacts with Outlook's COM object in order to perform a number of operations useful in red team engagements.Command Line Usage metadata of every account search : search for the provided keyword in every mailbox save : save a specified mail by its EntryID Examples: KnockOutlook.exe --operation check KnockOutlook.exe --operation contacts KnockOutlook.exe --operation mails --bypass KnockOutlook.exe --operation search --keyword password KnockOutlook.exe --operation save --id {EntryID} --bypass "> _ _ _ _ _ _ _ / //_/_ _ _/ /_/ _ \_ _/ /_/ /_ _ / /_ / ,< / _ \/ _ \/ _/ //_/ / / / / / / _/ / _ \/ _ \/ //_/ / /| |/ / / / /_/ / /_/ ,< / /_/ / /_/ / /_/ / /_/ / /_/ / ,< /_/ |_/_/ /_/\_/\_/_/\_\\_/\_,_/\_/_/\_/\_/_/\_\Parameters: --operation : specify the operation to run --keyword : specify a keyword for the 'search' operation --id : specify an EntryID for the 'save' operation --bypass : bypass the Programmatic Access Security settings (requires admin)Operations: check : perform a number of checks to ensure operational security contacts : extract all contacts of every account mails : extract mailbox metadata of every account search : search for the provided keyword in every mailbox save : save a specified mail by its EntryIDExamples: KnockOutlook.exe --operation check KnockOutlook.exe --operation contacts KnockOutlook.exe --operation mails --bypass KnockOutlook.exe --operation search --keyword password KnockOutlook.exe --operation save --id {EntryID} --bypass Operations check Enumerates the Outlook installation details in order to construct the correct registry key and retrieve the Programmatic Access Security setting. If this value is set to Warn when antivirus is inactive or out-of-date it queries WMI for any installed antivirus products and parses their current state. contacts Enumerates the contacts of every configured account and extracts the following information: Full Name Email Address mails Enumerates the mails of every configured account and extracts the following metadata: ID Timestamp Subject From To Attachments search Searches inside the mailbox of every configured account using Outlook's built-in search engine and returns the EntryID of mails that contain the provided keyword in their body. save Uses Outlook's built-in Save As mechanism to export a mail referenced by its EntryID. Object Model Guard Bypass The --bypass switch can be used in conjunction with contacts, mails, search and save operations given the fact that the current process is running with high integrity level. It will attempt to snapshot the current security policy of Outlook, patch it in a way that the Programmatic Access Security prompt is auto-allowed and finally revert it to its initial state after the operation has finished. Output All operations will output basic information on screen. The contacts and mails operations will output results in JSON format to a Gzip compressed file. The save operation will export the requested mail in .MSG format. All filenames are randomly generated during runtime. By default, Outlook's Secure Temp Folder is used as a destination for all exported files. Authors eks psof Download KnockOutlook
Read more...
Hacking Articles Tips Tricks Videos Tutorials
Photo
KitPloit - PenTest Tools!
KnockOutlook - A Little Tool To Play With Outlook
https://1.bp.blogspot.com/-BfS9tLWrgVk/YRwgNAKayZI/AAAAAAAAq3Q/QNKoPNCajbMfRKPZ9lYVHslbOdvrzoyhQCNcBGAsYHQ/w640-h284/Outlook.jpg "The best feeling is to win by knockout." - Nonito Donaire OverviewKnockOutlook is a C# project that interacts with Outlook's COM object in order to perform a number of operations useful in red team engagements. Command Line Usagemetadata of every account search : search for the provided keyword in every mailbox save : save a specified mail by its EntryID Examples: KnockOutlook.exe --operation check KnockOutlook.exe --operation contacts KnockOutlook.exe --operation mails --bypass KnockOutlook.exe --operation search --keyword password KnockOutlook.exe --operation save --id {EntryID} --bypass ">
check
Enumerates the Outlook installation details in order to construct the correct registry key and retrieve the Programmatic Access Security setting.
If this value is set to
*
contacts
Enumerates the contacts of every configured account and extracts the following information:
* Full Name
* Email Address
*
mails
Enumerates the mails of every configured account and extracts the following metadata:
* ID
* Timestamp
* Subject
* From
* To
* Attachments
*
search
Searches inside the mailbox of every configured account using Outlook's built-in search engine and returns the
*
save
Uses Outlook's built-in
It will attempt to snapshot the current security policy of Outlook, patch it in a way that the Programmatic Access Security prompt is auto-allowed and finally revert it to its initial state after the operation has finished. OutputAll operations will output basic information on screen.
The
The
All filenames are randomly generated during runtime.
By default, Outlook's S[...]
KnockOutlook - A Little Tool To Play With Outlook
https://1.bp.blogspot.com/-BfS9tLWrgVk/YRwgNAKayZI/AAAAAAAAq3Q/QNKoPNCajbMfRKPZ9lYVHslbOdvrzoyhQCNcBGAsYHQ/w640-h284/Outlook.jpg "The best feeling is to win by knockout." - Nonito Donaire OverviewKnockOutlook is a C# project that interacts with Outlook's COM object in order to perform a number of operations useful in red team engagements. Command Line Usagemetadata of every account search : search for the provided keyword in every mailbox save : save a specified mail by its EntryID Examples: KnockOutlook.exe --operation check KnockOutlook.exe --operation contacts KnockOutlook.exe --operation mails --bypass KnockOutlook.exe --operation search --keyword password KnockOutlook.exe --operation save --id {EntryID} --bypass ">
__ __ __ ____ __ __ __
/ //_/____ ____ _____/ /__/ __ \__ __/ /_/ /___ ____ / /__
/ ,< / __ \/ __ \/ ___/ //_/ / / / / / / __/ / __ \/ __ \/ //_/
/ /| |/ / / / /_/ / /__/ ,< / /_/ / /_/ / /_/ / /_/ / /_/ / ,
/_/ |_/_/ /_/\____/\___/_/\_\\____/\__,_/\__/_/\____/\____/_/\_\
Parameters:
--operation : specify the operation to run
--keyword : specify a keyword for the 'search' operation
--id : specify an EntryID for the 'save' operation
--bypass : bypass the Programmatic Access Security settings (requires admin)
Operations:
check : perform a number of checks to ensure operational security
contacts : extract all contacts of every account
mails : extract mailbox metadata of every account
search : search for the provided keyword in every mailbox
save : save a specified mail by its EntryID
Examples:
KnockOutlook.exe --operation check
KnockOutlook.exe --operation contacts
KnockOutlook.exe --operation mails --bypass
KnockOutlook.exe --operation search --keyword password
KnockOutlook.exe --operation save --id {EntryID} --bypass Operations* check
Enumerates the Outlook installation details in order to construct the correct registry key and retrieve the Programmatic Access Security setting.
If this value is set to
Warn when antivirus is inactive or out-of-dateit queries WMI for any installed antivirus products and parses their current state.*
contacts
Enumerates the contacts of every configured account and extracts the following information:
* Full Name
* Email Address
*
mails
Enumerates the mails of every configured account and extracts the following metadata:
* ID
* Timestamp
* Subject
* From
* To
* Attachments
*
search
Searches inside the mailbox of every configured account using Outlook's built-in search engine and returns the
EntryIDof mails that contain the provided keyword in their body.*
save
Uses Outlook's built-in
Save Asmechanism to export a mail referenced by its EntryID. Object Model Guard BypassThe --bypassswitch can be used in conjunction with contacts, mails, searchand saveoperations given the fact that the current process is running with high integrity level.It will attempt to snapshot the current security policy of Outlook, patch it in a way that the Programmatic Access Security prompt is auto-allowed and finally revert it to its initial state after the operation has finished. OutputAll operations will output basic information on screen.
The
contactsand mailsoperations will output results in JSON format to a Gzip compressed file.The
saveoperation will export the requested mail in .MSGformat.All filenames are randomly generated during runtime.
By default, Outlook's S[...]
Hacking Articles Tips Tricks Videos Tutorials
KitPloit - PenTest Tools! KnockOutlook - A Little Tool To Play With Outlook https://1.bp.blogspot.com/-BfS9tLWrgVk/YRwgNAKayZI/AAAAAAAAq3Q/QNKoPNCajbMfRKPZ9lYVHslbOdvrzoyhQCNcBGAsYHQ/w640-h284/Outlook.jpg "The best feeling is to win by knockout." - Nonito…
ecure Temp Folder is used as a destination for all exported files. Authors* eks
* psof Download KnockOutlook
* psof Download KnockOutlook
Writting Better Pentest Reports w/ Examples!
https://www.reddit.com/r/redteamsec/comments/pgsvtw/writting_better_pentest_reports_w_examples/
submitted by /u/OwlClan (https://www.reddit.com/user/OwlClan)
[link] (https://lockboxx.blogspot.com/2021/08/cptc-better-pentest-reports-w-examples.html) [comments] (https://www.reddit.com/r/redteamsec/comments/pgsvtw/writting_better_pentest_reports_w_examples/)
https://www.reddit.com/r/redteamsec/comments/pgsvtw/writting_better_pentest_reports_w_examples/
submitted by /u/OwlClan (https://www.reddit.com/user/OwlClan)
[link] (https://lockboxx.blogspot.com/2021/08/cptc-better-pentest-reports-w-examples.html) [comments] (https://www.reddit.com/r/redteamsec/comments/pgsvtw/writting_better_pentest_reports_w_examples/)
hacking: security in practice
We have a USB outlet in our lockers at school. Any thoughts on what to use it for?
Output of the thing is 5V 1A, so not enough to power raspberry pi. School leaves power to the lockers on all-night, so long hacking ops shouldn't be a problem.
submitted by /u/PinguSearchesAnIglo
[link] [comments]
We have a USB outlet in our lockers at school. Any thoughts on what to use it for?
Output of the thing is 5V 1A, so not enough to power raspberry pi. School leaves power to the lockers on all-night, so long hacking ops shouldn't be a problem.
submitted by /u/PinguSearchesAnIglo
[link] [comments]
reddit
We have a USB outlet in our lockers at school. Any thoughts on...
Output of the thing is 5V 1A, so not enough to power raspberry pi. School leaves power to the lockers on all-night, so long hacking ops shouldn't...
hacking: security in practice
Roommate caught fucking with my phone?
Hi! I don't have any experience hacking, but I live with a couple roommates that I don't know (short term type deal) I left my iphone in the common area for a few minutes while I ran to the basement to check laundry, I think he was only messing with it for a couple seconds, but when I came back up, his (jailbroken) iPad was under my phone.
Is there anything he could have done in those couple of seconds? seems weird that he would pick up my plugged in iPhone, and put his iPad under it. I don't trust him at all, and just wanna double check.
Thanks from a Noob!
submitted by /u/causing-a-ruckus
[link] [comments]
Roommate caught fucking with my phone?
Hi! I don't have any experience hacking, but I live with a couple roommates that I don't know (short term type deal) I left my iphone in the common area for a few minutes while I ran to the basement to check laundry, I think he was only messing with it for a couple seconds, but when I came back up, his (jailbroken) iPad was under my phone.
Is there anything he could have done in those couple of seconds? seems weird that he would pick up my plugged in iPhone, and put his iPad under it. I don't trust him at all, and just wanna double check.
Thanks from a Noob!
submitted by /u/causing-a-ruckus
[link] [comments]
reddit
Roommate caught fucking with my phone?
Hi! I don't have any experience hacking, but I live with a couple roommates that I don't know (short term type deal) I left my iphone in the...
hacking: security in practice
Starting ethical Hacking course next week, any advice?
What websites or programs would you recommend I use as I start? Any advice helps also. Thanks :)
submitted by /u/TuneAway
[link] [comments]
Starting ethical Hacking course next week, any advice?
What websites or programs would you recommend I use as I start? Any advice helps also. Thanks :)
submitted by /u/TuneAway
[link] [comments]
reddit
Starting ethical Hacking course next week, any advice?
What websites or programs would you recommend I use as I start? Any advice helps also. Thanks :)