The Malware That Swaps Your Address And Drains Your Wallet
https://medium.com/immunefi/the-malware-that-swaps-your-address-and-drains-your-wallet-552915fba542?source=rss------bug_bounty-5

Since at least 2017, cybercriminals have been deploying a type of malware known as “Clipper” malware, which hijacks a user’s clipboard and…Continue reading on Immunefi » (https://medium.com/immunefi/the-malware-that-swaps-your-address-and-drains-your-wallet-552915fba542?source=rss------bug_bounty-5)

Deep Web
My .onion links aren't working

Ive been trying to about 3 hours to try to get on notevil, torch, anihme, alpha bay, dream market and wallstreetmaket and none of them work. I've been lightly browsing for years now and I know all 6 of my links didn't go dead. Is my computer blacklisted?

submitted by /u/kramer361
[link] [comments]

CobaltStrikeParser - Python parser for CobaltStrike Beacon's configuration
http://www.kitploit.com/2021/09/cobaltstrikeparser-python-parser-for.html

Python parser for CobaltStrike (https://www.kitploit.com/search/label/CobaltStrike) Beacon's configuration
Description
Use parse_beacon_config.py for stageless beacons, memory dumps or C2 urls with metasploit (https://www.kitploit.com/search/label/Metasploit) compatibility mode (default true).
Many stageless beacons are PEs where the beacon (https://www.kitploit.com/search/label/Beacon) code itself is stored in the .data section and xored with 4-byte key.
The script tries to find the xor key and data heuristically, decrypt the data and parse the configuration from it. This is designed so it can be used as a library (https://www.kitploit.com/search/label/Library) too. The repo now also includes a small commuincation module (comm.py) that can help with communcating to a C2 server as a beacon.
Usage
usage: parse_beacon_config.py [-h] [--json] [--quiet] [--version VERSION] beacon

Parses CobaltStrike Beacon's configuration from PE, memory dump or URL.

positional arguments:
beacon This can be a file path or a url (if started with http/s)

optional arguments:
-h, --help show this help message and exit
--json Print as json
--quiet Do not print missing or empty settings
--version VERSION Try as specific cobalt version (3 or 4). If not specified, tries both.

Extra
To use the communication poc copy it to the main folder and run it from there. For installing the M2Crypto library (a requirement for the poc) on Windows, it's easiest with installers found online, and not through pip.

Download CobaltStrikeParser (https://github.com/Sentinel-One/CobaltStrikeParser)

CobaltStrikeParser - Python parser for CobaltStrike Beacon's configuration

Python parser for CobaltStrike Beacon's configuration Description Use parse_beacon_config.py for stageless beacons, memory dumps or C2 urls with metasploit compatibility mode (default true). Many stageless beacons are PEs where the beacon code itself is stored in the .data section and xored with 4-byte key. The script tries to find the xor key and data heuristically, decrypt the data and parse the configuration from it. This is designed so it can be used as a library too. The repo now also includes a small commuincation module (comm.py) that can help with communcating to a C2 server as a beacon.Usage usage: parse_beacon_config.py -h --json --quiet --version VERSION beaconParses CobaltStrike Beacon's configuration from PE, memory dump or URL.positional arguments: beacon This can be a file path or a url (if started with http/s)optional arguments: -h, --help show this help message and exit --json Print as json --quiet Do not print missing or empty settings --version VERSION Try as specific cobalt version (3 or 4). If not specified, tries both. Extra To use the communication poc copy it to the main folder and run it from there. For installing the M2Crypto library (a requirement for the poc) on Windows, it's easiest with installers found online, and not through pip. Download CobaltStrikeParser
Read more...

KitPloit - PenTest Tools!
CobaltStrikeParser - Python parser for CobaltStrike Beacon's configuration

https://1.bp.blogspot.com/-KwE-3ozdXpc/YSMpVtUacLI/AAAAAAAAtc0/5T0GdjqXt5MVavSBjXBZaHQ1zLzM3tCFgCNcBGAsYHQ/w640-h204/CobaltStrike.png
Python parser for CobaltStrike Beacon's configuration

Description

Use parse_beacon_config.pyfor stageless beacons, memory dumps or C2 urls with metasploit compatibility mode (default true).
Many stageless beacons are PEs where the beacon code itself is stored in the .datasection and xored with 4-byte key.
The script tries to find the xor key and data heuristically, decrypt the data and parse the configuration from it.

This is designed so it can be used as a library too.

The repo now also includes a small commuincation module (comm.py) that can help with communcating to a C2 server as a beacon.
Usage

usage: parse_beacon_config.py [-h] [--json] [--quiet] [--version VERSION] beacon

Parses CobaltStrike Beacon's configuration from PE, memory dump or URL.

positional arguments:
beacon This can be a file path or a url (if started with http/s)

optional arguments:
-h, --help show this help message and exit
--json Print as json
--quiet Do not print missing or empty settings
--version VERSION Try as specific cobalt version (3 or 4). If not specified, tries both.


Extra

To use the communication poc copy it to the main folder and run it from there. For installing the M2Crypto library (a requirement for the poc) on Windows, it's easiest with installers found online, and not through pip.
Download CobaltStrikeParser

Comment j’ai exploité une vulnérabilité qui m’a permis d’envoyer des sms en illimité (Sql…
https://medium.com/@anysanchez_5412/comment-jai-exploit%C3%A9-une-vuln%C3%A9rabilit%C3%A9-qui-m-a-permis-d-envoyer-des-sms-en-illimit%C3%A9-sql-581951f972e7?source=rss------bug_bounty-5

Vous vous demandez peut-être, à quoi ça servirait d’envoyer des sms en illimité ? À faire du social engineering bien sûr ou du phishing…Continue reading on Medium » (https://medium.com/@anysanchez_5412/comment-jai-exploit%C3%A9-une-vuln%C3%A9rabilit%C3%A9-qui-m-a-permis-d-envoyer-des-sms-en-illimit%C3%A9-sql-581951f972e7?source=rss------bug_bounty-5)

Uncle Rat’s Talks about Knoxss
https://thexssrat.medium.com/uncle-rats-talks-about-knoxss-70c756f799fa?source=rss------bug_bounty-5

IntroductionContinue reading on Medium » (https://thexssrat.medium.com/uncle-rats-talks-about-knoxss-70c756f799fa?source=rss------bug_bounty-5)

كيف قدرت ان احصل على معلومات الادمن بفكرة بسيطة
https://medium.com/@muh3ammed/%D9%83%D9%8A%D9%81-%D9%82%D8%AF%D8%B1%D8%AA-%D8%A7%D9%86-%D8%A7%D8%AD%D8%B5%D9%84-%D8%B9%D9%84%D9%89-%D9%85%D8%B9%D9%84%D9%88%D9%85%D8%A7%D8%AA-%D8%A7%D9%84%D8%A7%D8%AF%D9%85%D9%86-%D8%A8%D9%81%D9%83%D8%B1%D8%A9-%D8%A8%D8%B3%D9%8A%D8%B7%D8%A9-358cc1e3b8e8?source=rss------bug_bounty-5

حاول تفكر خارج الصندوقContinue reading on Medium » (https://medium.com/@muh3ammed/%D9%83%D9%8A%D9%81-%D9%82%D8%AF%D8%B1%D8%AA-%D8%A7%D9%86-%D8%A7%D8%AD%D8%B5%D9%84-%D8%B9%D9%84%D9%89-%D9%85%D8%B9%D9%84%D9%88%D9%85%D8%A7%D8%AA-%D8%A7%D9%84%D8%A7%D8%AF%D9%85%D9%86-%D8%A8%D9%81%D9%83%D8%B1%D8%A9-%D8%A8%D8%B3%D9%8A%D8%B7%D8%A9-358cc1e3b8e8?source=rss------bug_bounty-5)

hacking: security in practice
I will cashapp someone 50 bucks to log into my old SoundCloud and delete the pfp

I thought it was funny in 8th grade but it’s not now

submitted by /u/Revolutionary_Toe291
[link] [comments]

hacking: security in practice
Cloning an RFID Tag to avoid paying for a duplicate

The apartment complex i live at utilizes Dormakaba Saffire RFID locks for security on the main entrance and the apartment unit deadbolts. They only supplied me with one RFID tag, and are telling me I need to pay a $250 fee to get a second tag.

Is this RFID system one that I could use this to clone myself a new tag with? And if I clone my current tag, will that render my old tag useless? (as in, does the system assign a new pass key to the tag every time I use a reader?)

submitted by /u/pspjoker
[link] [comments]

hacking: security in practice
Proxyware

u guys have something about proxyware to study?

submitted by /u/dogras420
[link] [comments]