Kali Linux TutorialsHuan : Encrypted PE Loader Generator
Huan is an encrypted PE Loader Generator that I developed for learning PE file structure and PE loading processes. It encrypts the PE file to be run with different keys each time and embeds it in a new section of the loader binary. Currently, it works on 64 bit PE files.

How It Works?

First, Huan reads the given PE file and encrypts it with CBC mode AES-128 encryption algorithm. For the encryption, I used Tiny AES in C and prepared a padding code for the requirement of this library. When the encryption is complete, it compiles the loader using the Visual Studio compiler (MsBuild.exe) and creates an executable. After that, it creates a section (called .huan) on that executable, and embed the encrypted content, size information, IV and symmetric key. Both keys are created randomly for each copy of the loader. The layout of this section can be seen below.

When the loader is executed, it first takes the image base of itself by reading the Process Environment Block. After learning the image base, it parses the loaded copy of itself to find .huansection. Then, it decrypts the whole content, buffers it, and loads the binary which relies on the memory.

Quick Demo


Download

[Metasploit]Upgrade Normal Shell To Meterpreter Shell
https://binamrapandey.medium.com/metasploit-upgrade-normal-shell-to-meterpreter-shell-2f09be895646?source=rss------bug_bounty-5

After we got access to the machine, sometimes we get Meterpreter Shell immediately after exploitation.Continue reading on Medium » (https://binamrapandey.medium.com/metasploit-upgrade-normal-shell-to-meterpreter-shell-2f09be895646?source=rss------bug_bounty-5)

Kali Linux 2021.3 - Penetration Testing and Ethical Hacking Linux Distribution
http://www.kitploit.com/2021/09/kali-linux-20213-penetration-testing.html

Time for another Kali Linux release! – Kali Linux 2021.1. This release has various impressive updates.
A summary of the changes (https://bugs.kali.org/changelog_page.php) since the 2021.2 release from June (https://www.kali.org/blog/kali-linux-2021-2-release/) are:OpenSSL - Wide compatibility by default - Keep reading for what that meansNew Kali-Tools site - Following the footsteps of Kali-Docs, Kali-Tools has had a complete refreshBetter VM support in the Live image session - Copy & paste and drag & drop from your machine into a Kali VM by defaultNew tools - From adversary emulation, to subdomain takeover to Wi-Fi attacksKali NetHunter smartwatch - first of its kind, for TicHunter ProKDE 5.21 - Plasma desktop received a version bump 

More info here (https://www.kali.org/blog/kali-linux-2021-3-release/).


Download Kali Linux 2021.1 (https://www.kali.org/downloads/)

Kali Linux 2021.3 - Penetration Testing and Ethical Hacking Linux Distribution

Time for another Kali Linux release! – Kali Linux 2021.1. This release has various impressive updates.A summary of the changes since the 2021.2 release from June are:OpenSSL - Wide compatibility by default - Keep reading for what that meansNew Kali-Tools site - Following the footsteps of Kali-Docs, Kali-Tools has had a complete refreshBetter VM support in the Live image session - Copy & paste and drag & drop from your machine into a Kali VM by defaultNew tools - From adversary emulation, to subdomain takeover to Wi-Fi attacksKali NetHunter smartwatch - first of its kind, for TicHunter ProKDE 5.21 - Plasma desktop received a version bump More info here.Download Kali Linux 2021.1
Read more...

10 golden minutes for taking over a Chess.com account

Hi folks, this is the second write-up about finding bugs on Chess.com. You can find the first one here.
Chess.com is the most famous…
Read more...

Bug-Bounty Getting started & some tips

Collection of resources and some tips for Bug bounty By (@boomneroli)
Read more...

Exposing Millions of IRCTC Passengers' ticket details.

Hi There,
Read more...

hacking: security in practice
Is there a way for I to make a GigaSpark out of my raspberry pi pico

I wanted to run a mac script with my pico and I made it into a ducky and it could not run mac script. I researched a little more and I saw GigaSpark work.

submitted by /u/_MiloDoesStuff
[link] [comments]

hacking: security in practice
Upgrade Normal Shell to meterpreter shell[Writeup]

Hey guys,
I have just written a new article on "Upgrading to meterpreter shell".

Here's the link:- https://binamrapandey.medium.com/metasploit-upgrade-normal-shell-to-meterpreter-shell-2f09be895646

Please give it a read.

submitted by /u/AdParty7461
[link] [comments]

Hacking on Medium
[Metasploit]Upgrade Normal Shell To Meterpreter Shell


After we got access to the machine, sometimes we get Meterpreter Shell immediately after exploitation.

Continue reading on Medium »

Hacking on Medium
Hack Your Sleep 100%

Enjoying Quality Sleep. Inside this eBook, you will discover the Topics

Continue reading on Medium »

How to Run BurpSuite API with a script?
https://mafiaguy.medium.com/how-to-run-burpsuite-api-with-a-script-5932f4bea9de?source=rss------bug_bounty-5