Hacking on Medium
Hack This Site: Basic Web Challenges — Level 2


Hello and welcome to my series of posts on Web Application security. As part of that journey we are exploring Hack This Site. Hack This…

Continue reading on Medium »

Obfuscating powershell beacons
https://www.reddit.com/r/redteamsec/comments/pqnjhe/obfuscating_powershell_beacons/

<!-- SC_OFF -->Hey community, as a red teamer you constantly have to figure out new techniques and sneaky ways to go undetected. Currently I’m in a task of developing a powershell one liner beacon that should connect back to my Cobalt Strike C2, EDR solutions in the company I’m running this are very strong. I’m not too familiar with obfuscation for this and GitHub solutions I have seen don’t really work or are too popular now so EDRs catch them. Can you recommend up to date methods to obfuscate successfully my shell code in this powershell beacon attempt? <!-- SC_ON --> submitted by /u/slyjose (https://www.reddit.com/user/slyjose)
[link] (https://www.reddit.com/r/redteamsec/comments/pqnjhe/obfuscating_powershell_beacons/) [comments] (https://www.reddit.com/r/redteamsec/comments/pqnjhe/obfuscating_powershell_beacons/)

Admin access !!
https://dewangpanchal98.medium.com/admin-access-799b50694965?source=rss------bug_bounty-5

Hellow folks! I hope you’re well! In this writeup I’ll tell how I become low privilege user to an Admin. So without further delay let’s…Continue reading on Medium » (https://dewangpanchal98.medium.com/admin-access-799b50694965?source=rss------bug_bounty-5)

Android APK Reversing through a Hyper-V configured system, a writeup & guide.
https://masq31.medium.com/android-apk-reversing-through-a-hyper-v-configured-system-a-writeup-guide-a38095c9d001?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hello everyone. I was debating putting this writeup on another site, but I settled with keeping it on medium for the time being. My latest…Continue reading on Medium » (https://masq31.medium.com/android-apk-reversing-through-a-hyper-v-configured-system-a-writeup-guide-a38095c9d001?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux TutorialsTIGMINT : OSINT (Open Source Intelligence) GUI Software Framework
TIGMINT is an OSINT (Open Source Intelligence) software framework with an objective of making cyber investigations more convinient by implementing abstraction mechanisms to hide the background technical complexity also bundling different analysis techniques for social media Intelligence together providing a simple intuitive web interface for the user to work with.

Preview

Modules

Our Team

Documentation

Account Finder

Twitter Analyser

Working Tool Screenshots

Local Setup

Requirements

* Python 3.6;
* beautifulsoup4;
* Nodejs;
* matplotlib;
* pandas;
* NPM;
* nltk;

Windows Setup Issues

For windows users, if the setup fails or application is redirecting to 404 error page always. You can verify the below steps.

* Verify all the modules in requirements.txt are successfully installed using pip3 install -r requirements.txt Command . In windows you have to manually install wordcloud module based on your python version.
WordCloud module download Link   |   StackOverflow Help Thread
Ex: If you had python 3.6 installed, then you have to install wordcloud‑1.8.0‑cp36‑cp36m‑win_amd64.whl module from the above link.
After installing the wordcloud module, run command pip install -r requirements.txt again to check if all requirements are installed successfully.
* Check if all Node requirements are installed using npm install command.

If you still had any problems please open a issue with module name, operating system, input and output and console log. We will try to fix the issue as soon as possible.

Linux Meta-Analysis Requirment

sudo apt install exiftool

The above tool is required to retreive metadata from various file formats.

Installing And Running

Git

git clone https://github.com/TIGMINT/TIGMINT
cd TIGMINT
pip3 install -r requirements.txt
pip3 install –user –upgrade git+https://github.com/twintproject/twint.git@origin/master#egg=twint
npm install
node Api/server.js

Tool not working?

* Update python dependencies. (pip3 install –user –upgrade git+https://github.com/twintproject/twint.git@origin/master#egg=twint)
* Reinstall from the github repo.
* Raise an issue with the error logs. We will fix it asap !.

Using Docker

you can run with docker with this command

docker run –name tigmint -p 3000:3000 k1m0ch1/tigmint

and open the http://localhost:3000

or you can build the image by yourself with command

docker build -t tigmint .


Download

___________________________
@hacking_Attack
@Hacking_Video

From Google Dorking to Information Disclosure

This is a story about how I used google dorking to find sensitive information exposed in a private VDP program. This is a rather short…Continue reading on Medium »
Read more...

Hacking on Medium
What You Need To Know About SolarWinds Cyber Attack


SolarWinds Data Breach (March 2020)

Continue reading on Nerd For Tech »

Hacking on Medium
From Google Dorking to Information Disclosure


This is a story about how I used google dorking to find sensitive information exposed in a private VDP program. This is a rather short…

Continue reading on Medium »

Hacking on Medium
3 Common Tricks Hackers Used to Steal your Money in Blockchain


Popularity of blockchain and cryptocurrencies have been growing dramatically in recent years. Not only the institutional investors, many…

Continue reading on Medium »

Hacking on Medium
Attacking unvalidated redirection and Forward


Introduction

Continue reading on Medium »

From Google Dorking to Information Disclosure
https://mikekitckchan.medium.com/from-google-dorking-to-information-disclosure-5da4f1d771e5?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

This is a story about how I used google dorking to find sensitive information exposed in a private VDP program. This is a rather short…Continue reading on Medium » (https://mikekitckchan.medium.com/from-google-dorking-to-information-disclosure-5da4f1d771e5?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Recommendations for writing custom back doors and obfuscation
https://www.reddit.com/r/Pentesting/comments/pqrir2/recommendations_for_writing_custom_back_doors_and/

I am in my senior year of my Bachelor’s in cybersecurity and network management. I have learned a great deal about system scans, finding unpatched vulnerabilities, and using tools like metasploit or routersploit to exploit known vulnerabilities. I, however am wanting to spend some time learning how to write my own back doors and the best ways to obfuscate them for use in phishing. It seems to me that social engineering is a more effective way for delivering payloads than crossing your fingers and hoping for a zero day or non-existent patch. So here is my question: Do you all recommend me learning up on powershell and then using Java to execute and obfuscate the payload? Or do you all recommend starting with python back doors and doing string obfuscation using python commands? Or do you recommend something completely different? Any and all recommendations and info are greatly appreciated. submitted by /u/Tiny-Personality-887 (https://www.reddit.com/user/Tiny-Personality-887)
[link] (https://www.reddit.com/r/Pentesting/comments/pqrir2/recommendations_for_writing_custom_back_doors_and/) [comments] (https://www.reddit.com/r/Pentesting/comments/pqrir2/recommendations_for_writing_custom_back_doors_and/)

___________________________
@hacking_Attack
@Hacking_Video

BatchQL - GraphQL Security Auditing Script With A Focus On Performing Batch GraphQL Queries And Mutations
http://www.kitploit.com/2021/09/batchql-graphql-security-auditing.html

___________________________
@hacking_Attack
@Hacking_Video