Penelope is an advanced shell handler. Its main aim is to replace netcat as shell catcher during exploiting (https://www.kitploit.com/search/label/Exploiting) RCE vulnerabilities. It works on Linux and macOS and the only requirement is Python3. It is one script without 3rd party dependencies and hopefully it will stay that way.
Among the main features are:Auto-upgrade shells to PTY (auto-resize included)Logging interaction with the targetsDownload files from targetsUpload files to targetsUpload preset scripts to targetsSpawn backup shellsMultiple sessionsMultiple listenersCan be imported by exploits and get shell on the same terminal (see extras (https://github.com/brightio/penelope#extras))Penelope can work in conjunction with metasploit (https://www.kitploit.com/search/label/Metasploit) exploits by disabling the default handler with set DisablePayloadHandler TrueIt supports Windows shells but autoupgrade is not implemented yet. However it can accept PTY shells from the excellent project ConPtyShell (https://github.com/antonioCoco/ConPtyShell) of @antonioCoco (https://github.com/antonioCoco). Autoresize of PTY is implemented.
Sample basic usage
reverse shells on 0.0.0.0:4444 penelope.py 5555 # Listening for reverse shells on 0.0.0.0:5555 penelope.py 5555 -i eth0 # Listening for reverse shells on eth0:5555 penelope.py -c target 3333 # Connect to a bind shell on target:3333 ">penelope.py # Listening for reverse shells on 0.0.0.0:4444
penelope.py 5555 # Listening for reverse shells on 0.0.0.0:5555
penelope.py 5555 -i eth0 # Listening for reverse shells on eth0:5555

penelope.py -c target 3333 # Connect to a bind shell on target:3333

Demonstrating random usage (1)
Executing penelope without parameters and getting a reverse shellPressing F12 to detach the session and go to the main menuRun 'recon' command to upload preset privesc scripts to the targetInteracting again with the session, confirming that scripts are uploadedDetaching again with F12 and downloading /etc directory from the targetKill the session and exiting with Ctrl-D

___________________________
@hacking_Attack
@Hacking_Video

Demonstrating random usage (2)
Adding an extra listener and show all listenersInteracting with session 1Spawning 2 extra backup sessionsShowing all sessions

___________________________
@hacking_Attack
@Hacking_Video

Command line options
positional arguments:
PORT Port to listen/connect to depending on -i/-c options. Default: 4444

Reverse or Bind shell?:
-i , --address IP Address or Interface to listen on. Default: 0.0.0.0
-c , --connect Bind shell Host

Hints:
-a, --hints Show sample payloads for reverse shell based on the registered listeners
-l, --interfaces Show the available network interfaces
-h, --help show this help message and exit

Verbosity:
-Q, --silent Show only errors and warnings
-X, --extra-silent Suppress all logging messages

Logging:
-L, --no-log Do not create session log files
-T, --no-timestamps Do not include timestamps on logs

Misc:
-H, --no-history Disable shell history on target
-P, --plain Just land to the menu
-S, --single-session Accommodate only the first created session
-C, --no-attach Disable auto attaching sessions upon creation
-U, --no-upgrade Do not upgrade shells

Debug:
-d, --debug Show debug messages
-NP, --no-python Simulate python absence on target
-NB, --no-bash Simulate bash absence on target

Menu options
, interact with that session interact [sessionID] Interact with a session kill [sessionID|all] Kill a session download ... Download files and folders from the target open ... Download files and folders from the target and open them locally upload ... Upload files and folders to the target. If URL is specified then it is downloaded locally and then uploaded to the target recon [sessionID] Upload preset reconnaissance scripts to the target spawn [sessionID] Spawn a new session. Whether it will be reverse or bind, depends on the current session. upgrade [sessionID] Upgrade the session's shell to "PTY". If it fails attempts to upgrade it to "Advanced". If this fail too, then falls back to "Basic" shell. dir|. [sessionID] Open the session's local folder. If no session is selected, opens the base folder. listeners [ ] Add or stop a Listener. When invoked without parameters, it shows the active Listeners. connect Connect to a bind shell hints Show sample commands to run on the targets to get reverse shell, based on the registered listeners reset Reset the local terminal history Show menu history help [command] Show menu help or help about specific command DEBUG Open debug console SET [ ] Set options. When invoked without parameters it shows current options exit|quit|q|Ctrl+D Exit penelope ">use [sessionID|none]
Select a session

sessions [sessionID]
Show active sessions. When followed by , interact with that
session

interact [sessionID]
Interact with a session

kill [sessionID|all]
Kill a session

download ...
Download files and folders from the target

open ...
Download files and folders from the target and open them locally

upload ...
Upload files and folders to the target. If URL is specified then it is
downloaded locally and then uploaded to the target

recon [sessionID]
Upload preset reconnaissance scripts to the target

spawn [sessionID]
Spawn a new session. Whether it will be reverse or bind, depends on
the current session.

upgrade [sessionID]
Upgrade the session's shell to "PTY". If it fails attempts to upgrade
it to "Advanced". If this fail too, then falls back to "Basic" shell.

dir|. [sessionID]
Open the session's local folder. If no session is selected, opens the
base folder.

listeners [ ]
Add or stop a Listener. When invoked without parameters, it shows the
active Listeners.

connect
Connect to a bind shell

hints
Show sample commands to run on the targets to get reverse shell, based
on the registered listeners

reset
Reset the local terminal

history
Show menu history

help [command]
Show menu help or help about specific command

DEBUG
Open debug console

SET [ ]

___________________________
@hacking_Attack
@Hacking_Video

Set options. When invoked without parameters it shows current options

exit|quit|q|Ctrl+D
Exit penelope

Extras
There are also included two sample exploit simulation (https://www.kitploit.com/search/label/Simulation) scripts to demonstrate how penelope can be imported and get shell on the same terminal. Furthermore, one bash script is included that automatically upgrades Unix shells to PTY using xdotool.
TODO

Features
currently download/upload/spawn/upgrade commands are supported only on Unix shells. Will implement those commands for Windows shells too.port forwardingpersistenceedit command: open the remote file locally, make changes and upon saving, upload it to targetability to specify a list of commands to run automatically on target and/or the main menuan option switch for disable all logging, not only sessions.execute a local script on target and get the output on a local filemain menu autocompletion for short commandsdownload/upload progress bardownload/upload autocompletionIPv6encryptionUDP
Bugs
Ctrl-C on main menu has not the expected behaviour yet. However can still stop commands like 'download'.Session logging: when executing commands with alternate buffers like nano on target, then when cat the log it seems corrupted. However the data are still there.
Misc
apply some PEP8consider autorunning bash -l on new shellsbetter way to handle duplicate downloads
Limitations
emojis don't appear on mate-terminal (parrot OS)download command: path links are not clickable on qterminal (Kali Linux)penelope menu commands and PTY autoresize operate on the same socket. This could be an advantage but it has a side effect that for example if nano is open on target, then detaching the session and attempt a download, penelope copes with that by sending Ctrl-Z -> Ctrl-E -> Ctrl-U. Then must run fg to get the process back. Maybe consider to spawn extra socket for controling the session in the future. However, if before executing a menu command, the target's terminal if left on a clear state, then there is no problem.
Thanks to
Cristian Grigoriu - @crgr (https://github.com/crgr) for inspiring me to automate the PTY upgrade process. This is how this project was born.Paul Taylor - @bao7uo (https://github.com/bao7uo) for advising me that penelope should not be shipped without the ability to connect to a bind shell.

Download Penelope (https://github.com/brightio/penelope)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Game domains like .io are blocked on my school network

Could I get some help with bypassing it? I know there is a way I'm just not into this type of stuff I only know how to build Pc's lol

submitted by /u/Deluxecucumba
[link] [comments]
➖ Sent by @TheFeedReaderBot ➖

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Looking for CTF team members/enthusiasts

I'm not sure if this is the right place, but figured worth a shot.

I haven't done CTFs in a couple of years due to life changes, work, etc, but I'd like to start doing them again for fun and skill honing/development.

Ideally I'd like to find a couple of people to start a small team of people to work on CTFs and problems, as well as hobbyist projects, from time to time and keep each other engaged and improving. I'm not looking to spend 24+ hrs on events, but just a couple of hours a day as available since life keeps me pretty busy.

If you know anyone, or are interested, please let me know. Prefer USA based people, and I live in the ET timezone.

submitted by /u/vitafortisnk
[link] [comments]
➖ Sent by @TheFeedReaderBot ➖

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Red Teaming Hardware

Hi Everyone

I'm interested in physical red teaming tools such as the USB Kill and USB Samurai. Can you guys please advise where I can find similar tools for red teaming exercises

Thank you

submitted by /u/messi1_0-
[link] [comments]
➖ Sent by @TheFeedReaderBot ➖

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Beginner Guide To Exploit Server Side Request Forgery (SSRF) Vulnerability — Indonesia

https://cdn-images-1.medium.com/max/802/0*Ey8ZXRAnTb-caH9F.png
Service Side Request Forgery (SSRF) sederhana nya adalah serangan yang dimana server akan melakukan request untuk si attacker baik itu ke…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
GOLDENEYE: 1 Kernal Exploit [Without Metasploit]

https://cdn-images-1.medium.com/max/1366/1*1v0-NVslDWykbB8dQOY_pQ.png
They say this is the OSCP type practice vulnerable machine.The intermediate level machine.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
HackTheBox — Previse Writeup

https://cdn-images-1.medium.com/max/600/0*6X4F86uQ83anl-ZR.png
So this is my write-up on one of the HackTheBox machines called Previse. Let’s go!

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
“Defend the Web” write-up (Crypt2 / Crypt — cracking Caesar cipher encryption)

https://cdn-images-1.medium.com/max/1545/1*aHVz2XLDAQ56AyBCAqxp6A.png
A Caesar cipher, also known as Caesar’s cipher, the shift cipher, Caesar’s code, or Caesar shift in cryptography, is one of the most basic…

Continue reading on Purple TEAM »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
“Defend the Web” write-up (Sid / Intro — cookie tampering)

https://cdn-images-1.medium.com/max/1423/1*CrGGnVxpRB9OMcIxbIZSnQ.png
While temporary cookies are primarily used to store the session identifier, many applications also utilize them to store additional…

Continue reading on Purple TEAM »

___________________________
@hacking_Attack
@Hacking_Video

Apple Hall Of Fame
https://medium.com/@sagarjana2/apple-hall-of-fame-d148832cbbaf?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video