Hacking Articles Tips Tricks Videos Tutorials
471 subscribers
65.9K photos
15 videos
157 files
132K links
Exploit
Pentesting
Hacking
Red Team
Blue Team
Kali Linux
Bug Bounty
Black Hat
Cyber security etc

@Hacking_Video
@Hacking_attack
Download Telegram
A collaborative free open-source Command & Control integration framework that allows developers to concentrate on the core function and goal of their C2.
Explore the docs »

About the project

Problem Statement
The current C2s ecosystem has rapidly grown in order to adapt to modern red team operations (https://www.kitploit.com/search/label/Operations) and diverse needs (further information on C2 selection can be found here (https://www.thec2matrix.com/)). This comes with a lot of overhead work for Offensive Security professionals everywhere. Creating a C2 is already a demanding task, and most C2s available lack an intuitive and easy to use (https://www.kitploit.com/search/label/Easy%20To%20Use) web interface. Most Red Teams must independently administer and understand each C2 in their infrastructure.
Solution
With the belief that community efforts surpass that of any individual, Zuthaka presents a simplified API for fast and clear integration of C2s and provides a centralized management (https://www.kitploit.com/search/label/Management) for multiple C2 instances through a unified interface for Red Team operations.Zuthaka is more than just a collection of C2s, it is also a solid foundation that can be built upon and easily customized to meet the needs of the exercise that needs to be accomplish. This integration framework for C2 allows developers to concentrate on a unique target environment and not have to reinvent the wheel.

___________________________
@hacking_Attack
@Hacking_Video
Built With
Django Rest Framework (https://www.django-rest-framework.org/)Redis (https://redis.io/)ReactJS (https://reactjs.org/)Nginx (https://www.nginx.com/)Docker (https://www.docker.com/)PostgreSQL (https://www.postgresql.org//)
Already Supported C2
CovenantEmpire
Getting Started
Zuthaka is composed of a front-end that exposes a UI for the API of process manager, file manager, shell post-exploitation (https://www.kitploit.com/search/label/Post-Exploitation) modules and general C2 handling, and a back-end, in charge of handling the consistency and availability issues of the C2s instantiated in Zuthaka. Also deployed is Redis as a message broker to handle asynchronously every element in the Agent's UI and an Nginx server.
Prerequisites
The installation of a working Docker instance is necessary for the automatic deployment of the essential infrastructure (https://www.kitploit.com/search/label/Infrastructure) (Zuthaka's frontend and backend, Nginx, Redis). All the desired C2s that need to be handled should be deployed in parallel.
Installation
To build the full Zuthaka project, first download dependencies. git clone https://github.com/pucara/zuthaka
To start the project with the corresponding services, the docker-compose file can be utilized.docker-compose up

Usage

___________________________
@hacking_Attack
@Hacking_Video
After de solution is deployed, the available class handlers will be incorporated on zuthaka for you to use it to integrate your infrastructure.For further information, please refer to the Documentation (https://docs.zuthaka.com/)
Unreleased

Added
service instantiation of C2service creation of listenersservice deletion of listenersservice download of launchersservice agent integrationAutomatic database collection of handler classes"out of the box" listing of ProcessManager and FileManager
Roadmap
service usage of post-exploitation modules
License
Distributed under the BSD-3 clause License. See LICENSE.md for more information.
Contact
Pucara team - @pucara (https://twitter.com/pucara) - contant@pucara.io (mailto:contant@pucara.io)Zuthaka community on discord - Zuthaka (https://zuthaka.com/discord)Project Link: https://github.com/pucarasec/zuthaka

Download Zuthaka (https://github.com/pucarasec/zuthaka)

___________________________
@hacking_Attack
@Hacking_Video
Hacking Articles Tips Tricks Videos Tutorials
Photo
KitPloit - PenTest Tools!
Zuthaka - An Open Source Application Designed To Assist Red-Teaming Efforts, By Simplifying The Task Of Managing Different APTs And Other Post-Exploitation Tools

https://1.bp.blogspot.com/-Vrk7pWUcXy4/YSRke2MGrVI/AAAAAAAAtxQ/sfHuL2UXIOQ4hjtkfeUcuEp-Tc5OUF4VwCNcBGAsYHQ/w640-h174/zuthaka_1.png A collaborative free open-source Command & Control integration framework that allows developers to concentrate on the core function and goal of their C2. Explore the docs » About the projectProblem StatementThe current C2s ecosystem has rapidly grown in order to adapt to modern red team operations and diverse needs (further information on C2 selection can be found here). This comes with a lot of overhead work for Offensive Security professionals everywhere. Creating a C2 is already a demanding task, and most C2s available lack an intuitive and easy to use web interface. Most Red Teams must independently administer and understand each C2 in their infrastructure. SolutionWith the belief that community efforts surpass that of any individual, Zuthaka presents a simplified API for fast and clear integration of C2s and provides a centralized management for multiple C2 instances through a unified interface for Red Team operations.

Zuthaka is more than just a collection of C2s, it is also a solid foundation that can be built upon and easily customized to meet the needs of the exercise that needs to be accomplish. This integration framework for C2 allows developers to concentrate on a unique target environment and not have to reinvent the wheel. https://1.bp.blogspot.com/-h9VYQDjhP8Y/YSRkli74TrI/AAAAAAAAtxU/XcpeOyc7h08N39rIvygf8SqQYXw_GsfbwCNcBGAsYHQ/w640-h362/zuthaka_5_draw-infrastructure.jpeg Built With* Django Rest Framework
* Redis
* ReactJS
* Nginx
* Docker
* PostgreSQL Already Supported C2* Covenant
* Empire Getting StartedZuthaka is composed of a front-end that exposes a UI for the API of process manager, file manager, shell post-exploitation modules and general C2 handling, and a back-end, in charge of handling the consistency and availability issues of the C2s instantiated in Zuthaka. Also deployed is Redis as a message broker to handle asynchronously every element in the Agent's UI and an Nginx server. PrerequisitesThe installation of a working Docker instance is necessary for the automatic deployment of the essential infrastructure (Zuthaka's frontend and backend, Nginx, Redis). All the desired C2s that need to be handled should be deployed in parallel. InstallationTo build the full Zuthaka project, first download dependencies. git clone https://github.com/pucara/zuthaka To start the project with the corresponding services, the docker-compose file can be utilized. docker-compose up Usagehttps://1.bp.blogspot.com/-IX0KSDVaLyg/YSRks9ewHRI/AAAAAAAAtxY/BUpjcXn2wPoUn1wiiRcRScmuVcX9O-UFQCNcBGAsYHQ/w640-h316/zuthaka_6_demozuthaka.gif After de solution is deployed, the available class handlers will be incorporated on zuthaka for you to use it to integrate your infrastructure.

For further information, please refer to the Documentation UnreleasedAdded* service instantiation of C2
* service creation of listeners
* service deletion of listeners
* service download of launchers
* service agent integration
* Automatic database collection of handler classes
* "out of the box" listing of ProcessManager and FileManager Roadmap* service usage of post-exploitation modules LicenseDistributed under the BSD-3 clause License. See LICENSE.mdfor more information. ContactPucara team - @pucara - contant@pucara.io

Zuthaka community on discord - Zuthaka

Project Link: https://github.com/pucarasec/zuthaka Download Zuthaka

___________________________
@hacking_Attack
@Hacking_Video
Zuthaka - An Open Source Application Designed To Assist Red-Teaming Efforts, By Simplifying The Task Of Managing Different APTs And Other Post-Exploitation Tools

A collaborative free open-source Command & Control integration framework that allows developers to concentrate on the core function and goal of their C2. Explore the docs »About the projectProblem StatementThe current C2s ecosystem has rapidly grown in order to adapt to modern red team operations and diverse needs (further information on C2 selection can be found here). This comes with a lot of overhead work for Offensive Security professionals everywhere. Creating a C2 is already a demanding task, and most C2s available lack an intuitive and easy to use web interface. Most Red Teams must independently administer and understand each C2 in their infrastructure.SolutionWith the belief that community efforts surpass that of any individual, Zuthaka presents a simplified API for fast and clear integration of C2s and provides a centralized management for multiple C2 instances through a unified interface for Red Team operations.Zuthaka is more than just a collection of C2s, it is also a solid foundation that can be built upon and easily customized to meet the needs of the exercise that needs to be accomplish. This integration framework for C2 allows developers to concentrate on a unique target environment and not have to reinvent the wheel. Built WithDjango Rest FrameworkRedisReactJSNginxDockerPostgreSQLAlready Supported C2CovenantEmpireGetting StartedZuthaka is composed of a front-end that exposes a UI for the API of process manager, file manager, shell post-exploitation modules and general C2 handling, and a back-end, in charge of handling the consistency and availability issues of the C2s instantiated in Zuthaka. Also deployed is Redis as a message broker to handle asynchronously every element in the Agent's UI and an Nginx server.PrerequisitesThe installation of a working Docker instance is necessary for the automatic deployment of the essential infrastructure (Zuthaka's frontend and backend, Nginx, Redis). All the desired C2s that need to be handled should be deployed in parallel.InstallationTo build the full Zuthaka project, first download dependencies. git clone https://github.com/pucara/zuthakaTo start the project with the corresponding services, the docker-compose file can be utilized.docker-compose upUsage After de solution is deployed, the available class handlers will be incorporated on zuthaka for you to use it to integrate your infrastructure.For further information, please refer to the DocumentationUnreleasedAddedservice instantiation of C2service creation of listenersservice deletion of listenersservice download of launchersservice agent integrationAutomatic database collection of handler classes"out of the box" listing of ProcessManager and FileManagerRoadmapservice usage of post-exploitation modulesLicenseDistributed under the BSD-3 clause License. See LICENSE.md for more information.ContactPucara team - @pucara - contant@pucara.ioZuthaka community on discord - ZuthakaProject Link: https://github.com/pucarasec/zuthakaDownload Zuthaka
Read more...

___________________________
@hacking_Attack
@Hacking_Video
Web OSINT Tryhackme Walkthrough

Hello guys and welcome back , Ayush this side, today we’ll talk about one of the tryhackme room web osint, this is an amazing room for…
Read more...
hacking: security in practice
nmap scan to a random website while I was learning this tool

Hello everyone,

While I was leaning ethical hacking / nmap tool, I followed the various step that IT guy was doing, and I run a scan on the same website he did (something like Udemy).

Later on I figured out that I’m flagged, and I didn’t know yet about hiding with something like proxy chains.

Now the question his:

Am I in trouble for something like this? Even if I was stupidly following that guy tutorial and that’s it?

I’m not from US

Thanks!

submitted by /u/davidetakotako
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video
hacking: security in practice
How Data Transmitted Network Interface Card to Web Browser In Practical

Hello, I want to learn the process of transmission of data coming from the internet deeply.

For example, I write a domain and press enter in my browser after that the data I received come to my Network Interface Card, I am not well informed about that but I think the firmware of the Network Interface Card passes the data to the device driver I think after that the device driver passes the data to the browser.

I want to learn the whole process from the physical layer to the application layer.

But I want to learn it not theoretically. I want to see the firmware codes, device driver codes, and so on.
I am using Linux, probably the nic firmware codes are closed source and maybe hard to reverse.
How can I learn the whole process, Are there any resources? Am I need to read a book like Linux Device Drivers?
My goal is to find vulnerabilities in this transmission process.

submitted by /u/pacman0026
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video