KitPloit - PenTest Tools!
Ntlm_Theft - A Tool For Generating Multiple Types Of NTLMv2 Hash Theft Files


http://2.bp.blogspot.com/-Lc-pMQxsfVg/YTVKVhCUJqI/AAAAAAAAt1I/Hsik9IJaHQENyEWH7b1bKIx-2vjj3ttNwCK4BGAYYCw/w640-h336/ntlm_theft_1_example-run-781145.png
A tool for generating multiple types of NTLMv2 hash theft files.

ntlm_theft is an Open Source Python3 Tool that generates 21 different types of hash theft documents. These can be used for phishing when either the target allows smb traffic outside their network, or if you are already inside the internal network.

The benefits of these file types over say macro based documents or exploit documents are that all of these are built using "intended functionality". None were flagged by Windows Defender Antivirus on June 2020, and 17 of the 21 attacks worked on a fully patched Windows 10 host.
ntlm_theft supports the following attack types:

* Browse to Folder Containing
* .url – via URL field
* .url – via ICONFILE field
* .lnk - via icon_location field
* .scf – via ICONFILE field (Not Working on Latest Windows)
* autorun.inf via OPEN field (Not Working on Latest Windows)
* desktop.ini - via IconResource field (Not Working on Latest Windows)

* Open Document
* .xml – via Microsoft Word external stylesheet
* .xml – via Microsoft Word includepicture field
* .htm – via Chrome & IE & Edge img src (only if opened locally, not hosted)
* .docx – via Microsoft Word includepicture field
* .docx – via Microsoft Word external template
* .docx – via Microsoft Word frameset webSettings
* .xlsx - via Microsoft Excel external cell
* .wax - via Windows Media Player playlist (Better, primary open)
* .asx – via Windows Media Player playlist (Better, primary open)
* .m3u – via Windows Media Player playlist (Worse, Win10 opens first in Groovy)
* .jnlp – via Java external jar
* .application – via any Browser (Must be served via a browser downloaded or won’t run)

* Open Document and Accept Popup
* .pdf – via Adobe Acrobat Reader

* Click Link in Chat Program
* .txt – formatted link to paste into Zoom chat
Usecases (Why you want to run this)

ntlm_theft is primarily aimed at Penetration Testers and Red Teamers, who will use it to perform internal phishing on target company employees, or to mass test antivirus and email gateways. It may also be used for external phishing if outbound SMB access is allowed on the perimeter firewall.

I've found it useful while penetration testing to easily see what file types I have available to me, rather than spending time configuring a specific attack as would be used on red teaming engagements. You could send a .rtf or .docx file to the HR department, and a .xlsx spreadsheet doc to the finance department.

Getting Started
These instructions will show you the requirements for and how [...]

hacking: security in practice
How to block text hackcer

Hi,

​

A text hacker is changing the words in every site I type in.

How can I block him?

And is it possible to know his location?

submitted by /u/Survector
[link] [comments]

hacking: security in practice
Subdomain Takeover on AWS S3

https://external-preview.redd.it/YgD7pm4YHSHCfj2y9QA6wVpkcqrFotCmi4aPmkbkM-A.jpg?width=640&crop=smart&auto=webp&s=9a904ce54426070cbc48fc266c4e06adc2e16291 submitted by /u/Way_Tough
[link] [comments]

hacking: security in practice
is there any way to figure out who the owner of a cellphone number is?

first off i have ABSOLUTELY no malicious intent with this at all. also, im sorry if this isnt the right sub for this. feel free to let me know if theres a better one for this kinda thing, i just thought this one might be a good one to ask. basically a while back someone was texting me telling me some things abt a relationship i was in and at the time i thought they were lying or playing a prank on me, but now i have reason to believe they weren’t. i really would just like to know some details abt the situation. i tried texting the number back but not sure if they will respond.

i think it could have been a fake number from google voice or something, i tried 2 different websites/paid for them and it said no results on a name except a location they could be in that wasn’t accurate. i can give more details about what the websites said if needed but i dont think it matters or if its even accurate. i also have an apple phone, their texts appeared green and thats what happens if theyre texting off google voice or something like that.

so i guess im just asking if theres any possible way that i could figure out who it is? if its a fake can i somehow trace their real number of the phone they’re using? any good websites or anything i can do myself? if anyone would like to help me with this privately feel free to send me a private message, im more than happy to pay if you can help me with this.

submitted by /u/jmdeman
[link] [comments]

hacking: security in practice
Tricking a motion detector with a camera?

Hi there,

Again I post this in hacking, as it would be something illegal but the purpose is completely legitimate.

I'm at a co-working space that at night have the lights of a room triggered by a motion detector (there are 3 of them in the room), the issue is that as I'm studying I'm not moving from the position and lights keep turning off , as soon as I move a bit the chair the lights turn on again. I can't stand this to be honest , either turn them on or turn them off , but don't play around with me as it's drawing my attention.

How can I trick one of this motion sensors to detect always movement in a room with the devices I have with me? I would need a pendulum or something like that , but that is not feasible , I could set up the phone to flash directly to the motion sensor each time it turns off (periodically) , but there is no flash light apps that I have found that do that periodically.

I just sticked some post-its see if at least it detect no motion at all for a while and then it turns off completely.

Any ideas?

submitted by /u/brohermano
[link] [comments]

Hacking on Medium
MICROSOFT LANZÓ EL INICIO DE SESIÓN SIN CONTRASEÑA


PUBLICADO EN 17 SEPTIEMBRE, 2021 POR EHACKING

Continue reading on Medium »

Monitors Walkthrough — Hackthebox
https://sadc0d3r.medium.com/monitors-walkthrough-hackthebox-7ce2d37f5190?source=rss------bug_bounty-5

Hi guy My Name is Ahmed (SadC0d3r)Continue reading on Medium » (https://sadc0d3r.medium.com/monitors-walkthrough-hackthebox-7ce2d37f5190?source=rss------bug_bounty-5)

Monitors Walkthrough — Hackthebox

Hi guy My Name is Ahmed (SadC0d3r)Continue reading on Medium »
Read more...

Deep Web
Where can I read the WSJ, Bloomberg, and the economist for free or how can I bypass the subscription

submitted by /u/AlexVentures
[link] [comments]

hacking: security in practice
Is it possible to do an inspect element on a certain site, but on every computer on a certain IP address?

For example if there's nothing but a page that says "I like chicken" and you inspect element to make it say something else, when you refresh the page, it's gone.

I'm wondering if it's possible to make it stay there for an IP address that is your own (not someone elses). to modify the website so it looks the same on the website owners side, but can be modified on your side and any computers connected to your IP.

I had this idea quickly but I doubt it is possible.

submitted by /u/SicariusREAL
[link] [comments]

hacking: security in practice
So how do I bypass an expensive router

So my dad has a router that allows Him to control everything and has a power trip whenever he is mad for no reason, all I'm asking is that I bypass the wifi shutdown or something that allows me to control it myself

TL:DR MY dad is an asshole and doesn't allow me to do anything if he is mad and I want a comeback

submitted by /u/blkdmn1
[link] [comments]

hacking: security in practice
(WINDOWS 10 OFF TOPIC)How do i disable windows smart screen check apps and files without admin permissions?

it says "the setting is managed by your administrator" and i want to download something. How do i do it? i cant run registry editor, and command prompt because i already tried it. please help.

submitted by /u/Flameex1087
[link] [comments]

hacking: security in practice
Best language to learn first for Black Hat 🎩 Script Kitty 🐈‍⬛

Hi I am interested in WiFi hacking, absolute beginner to computers. Any info helps.

View Poll

submitted by /u/The_Abramelin
[link] [comments]

Hacking on Medium
What is Ethical Hacking | Cybersecurity | ethical hacking course


Ethical Hacking

Continue reading on Medium »

Hacking on Medium
What is the “Mozi Botnet”?


According to researchers, the Mozi botnet, a peer-to-peer (P2P) malware infamous for taking over Netgear, D-Link, and Huawei routers, has…

Continue reading on rootissh »

A small change, and things go in your hand : Story of a $250 bounty
https://fardeen-ahmed.medium.com/a-small-change-and-things-go-in-your-hand-story-of-a-250-bounty-5ddc43c31463?source=rss------bug_bounty-5