KitPloit - PenTest Tools!
InlineExecute-Assembly - A PoC Beacon Object File (BOF) That Allows Security Professionals To Perform In Process .NET Assembly Execution


https://1.bp.blogspot.com/-CwR1NpKuyd4/YUObnj1bvzI/AAAAAAAAuvo/jTm7kjPutFA9rMwYWJtmittz4F4lid6LgCNcBGAsYHQ/w640-h418/InlineExecute.png
InlineExecute-Assembly is a proof of concept Beacon Object File (BOF) that allows security professionals to perform in process .NET assembly execution as an alternative to Cobalt Strikes traditional fork and run execute-assembly module. InlineExecute-Assembly will execute any assembly with the entry point of Main(string[] args)or Main(). This should allow you to run most released tooling without any prior modification needed.

The BOF will automatically determine which Common Language Runtime (CLR) is needed to be loaded into the process for your assembly (v2.0.50727 or v4.0.30319) prior to execution and in most cases, should exist gracefully if any issues arise. The BOF also supports several flags which allow the operator to dictate several behaviors prior to .NET execution which include, disabling AMSI via in memory patching, disabling and restoring ETW via in memory patching, customization of the CLR App Domain name to be created, whether to create and direct console output of your assembly to a named pipe or mailslot, and allows the operator to switch the default entry point of Main(string[] args) to Main(). More details on usage, use cases, and possible detections can be found below and https://sec urityintelligence.com/posts/net-execution-inlineexecute-assembly/.

Lastly the advantage of executing our .NET assemblies in the same process as our beacon implant is that we avoid the default behavior of Cobalt Strike's execute-assembly module which creates a new process to then load/inject the CLR/.NET assembly. However, other opsec considerations still exist, for example, does the process we are executing within normally load the CLR or does the .NET assembly we are executing have any known signatures? Therefore, the disadvantage is that if something does get detected and killed, for example by AMSI, your beacon is also killed.
Subject References

This tool wouldn't exist without being able to piggyback off some really great research, tools, and code already published by members of the security community. So thank you. Lastly, if you feel anyone has been left out below, please let me know and I will be sure to get them added.

* HostingCLR - here - CLR/Executing assembly logic
* Dotnet-Loader-Shellcode - (by @modexpblog) - here - All around great research including on COM Interfaces for executing .NET in C -> Real MVP[...]

hacking: security in practice
About Website in inside

Its hard to find where website is created on what platform?

submitted by /u/tedasr
[link] [comments]

hacking: security in practice
I Noticed My School District Has SSL Decryption, Could it Decrypt a VPN?

My school district and all of the wifi at my school has a very strict website blocker (which, for some reason, even blocks google.com so I can't use Google Docs), so I use a VPN to bypass it. Though I don't really know how much the details matter, I'm using PrivateVPN, in 'Stealth Mode', which I think just means it uses port 443 (Normally the VPN is blocked unless I use stealth mode, but it might just block all connections to port 1194). One time, though, when I had the VPN off (I forgot to turn it on), I noticed on the blocked page that one of the links was ssldecrypt2.myschool.district. I'm now more glad I'm using a VPN, for privacy reasons as well, but I'm wondering, since there's already ssl decryption, could that same decryption also decrypt a VPN? And would it matter if it's on port 443? Sorry if this has a simple answer, I might just be missing something big. TIA!

submitted by /u/fun840
[link] [comments]

hacking: security in practice
Looking for advice.

Hello, I recently purchased a storage unit at an auction (the kind you see on storage wars) and was curious if anyone had an idea on how I could get into the various electronics I found. (I have everything but Linux based computers out of it)

submitted by /u/Thatonensoutherner
[link] [comments]

Hacking on Medium
ROOTME WALKTHROUGH — TRYHACKME.COM — CTF FOR BEGINNERS


Hi there, welcome to my write-up as I go through the RootMe room on TryHackMe.

Continue reading on Medium »

Deep Web
What Was It Like To Browse The Deep Web In The Early to Mid 2010s

submitted by /u/SoldierSam1
[link] [comments]

Hacking on Medium
Brooklyn Nine Nine-TryHackMe-Writeup.


Writeup de la maquina Brooklyn en try hack me.

Continue reading on Medium »

Hacking on Medium
Latest Atlassian Confluence Flaw Exploited To Breach Jenkins Project Server


Being a project manager is like being an artist, you have the different colored project streams combining into a work of art.

Continue reading on rootissh »

¿Cómo usar FFUF, por donde empezar?
https://4rthur.medium.com/c%C3%B3mo-usar-ffuf-por-donde-empezar-52d0ffa46abf?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Una técnica muy interesante dentro de las pruebas de penetración es el descubrimiento de directorios por fuerza bruta. He estado probando…Continue reading on Medium » (https://4rthur.medium.com/c%C3%B3mo-usar-ffuf-por-donde-empezar-52d0ffa46abf?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Deep Web
How do you install Kleopatra and GPA on tails?

or is there an easier method nowadays?

submitted by /u/Globislove
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Aspiring undergrad college student documenting every day in his life until he gets his dream red-team job
https://www.reddit.com/r/redteamsec/comments/prq4jl/aspiring_undergrad_college_student_documenting/

I am the maker of this blog, and didn't really know where to share and propagate the blog. It is just a personal project of mine for those interested in watching me grow from a zero to a hero both in maturity and in technical skill. I'm not exactly a zero in general IT, but for IT security and red-teaming I am. I'll copy and paste this post to the discord as well for whoever is interested. My entire life story and current situation is contained within the first blog post. Obviously I wouldn't give any hardcore personal identifiable life experiences and give away my true identity. submitted by /u/Hyperion_Mobius (https://www.reddit.com/user/Hyperion_Mobius)
[link] (https://www.reddit.com/r/redteamsec/comments/prq4jl/aspiring_undergrad_college_student_documenting/) [comments] (https://www.reddit.com/r/redteamsec/comments/prq4jl/aspiring_undergrad_college_student_documenting/)

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
MobileAudit : SAST and Malware Analysis for Android Mobile APKs


MobileAudit is a SAST and Malware Analysis for Android Mobile APKs.

Django Web application for performing Static Analysis and detecting malware in Android APKs
https://1.bp.blogspot.com/-k2TOBVolCxo/YTIntzJhpaI/AAAAAAAAKqo/dHY9JN7V_o0uM3EQVFE7eLUGaPCUGEOwwCLcBGAsYHQ/s1449/1.png
In each of the scans, it would have the following information:

* Application Info
* Security Info
* Components
* SAST Findings
* Best Practices Implemented
* Virus Total Info
* Certificate Info
* Strings
* Databases
* Files
https://1.bp.blogspot.com/-k5vdRnxvrfY/YTIoB7qdzzI/AAAAAAAAKqw/KSny0cKhw84u61dJy7KXctj09LQ1m3lvQCLcBGAsYHQ/s1212/2.png
For easy access there is a sidebar on the left page of the scan:
https://1.bp.blogspot.com/-3VzDmkOWk8Q/YTIoWHr_9iI/AAAAAAAAKq4/Bcijq11Pp5oi3gQp34mKAWyNbSoqrGcTwCLcBGAsYHQ/s777/4.png
Components
https://1.bp.blogspot.com/-QslEVo1mfzg/YTIolSNA6GI/AAAAAAAAKq8/GaqMg5wimsobolh1Nj-GQsd1qO3L1cqRQCLcBGAsYHQ/s1758/5.png
* db: PostgreSQL 13.2
* nginx: Nginx 1.19.10
* rabbitmq: RabbitMQ 3.8.14
* worker: Celery 5.0.5
* web: Mobile Audit App

Docker Base images

Image is based on python buster. Link to Docker Hub image
ImageTagsBasempast/mobile_audit1.3.8python:3.9.4-bustermpast/mobile_audit1.3.6python:3.9.2-bustermpast/mobile_audit1.3.0python:3.9.1-bustermpast/mobile_audit1.0.0python:3.9.0-buster
Main Features

* Uses Docker for easy deployment in multiplatform environment
* Extract all information of the APK
* Analyze all the source code searching for weaknesses
* All findings are categorized and follows CWE standards
* All findings are categorized and include Mobile Top 10 Risk
* Also highlight the Best Practices in Secure Android Implementation in the APK
* The findings can be edited and the false positives can be triaged and deleted
* All scan results can be exported to PDF
* User authentication and user management
* API v1 with Swagger and ReDoc
* TLS
* Dynamic page reload (WIP)
* LDAP integration
* Export to Markdown
* Export to CSV

Patterns

The application has an engine with different rules and patterns that are used though the findings scanning phase to detect vulnerabilities and/or malicious code into the apk.
These can be activated and deactivated in /pat[...]

hacking: security in practice
Techie spends thousands of dollars and no doubt hundreds of hours to build a machine that fakes handwriting

https://external-preview.redd.it/Qp9UKoQMj3MeZqnnBKi2LnjjCushgMrabpSCMT45lZo.jpg?width=640&crop=smart&auto=webp&s=e7bea91bfce52fedb0814841f66513162add4631 submitted by /u/pinpepnet
[link] [comments]

hacking: security in practice
Hi, guys. In your PC you can turn on god mode with following just some steps. step one: In your desktop press right click and create a new folder. Step two: Rename the folder with this code: GodMode.{ED7BA470-8E54-465E-825C-99712043E01C}

Thank you!

submitted by /u/Jarzis-Hossain-ppp
[link] [comments]