Kali Linux Tutorials
MobileAudit : SAST and Malware Analysis for Android Mobile APKs


MobileAudit is a SAST and Malware Analysis for Android Mobile APKs.

Django Web application for performing Static Analysis and detecting malware in Android APKs
https://1.bp.blogspot.com/-k2TOBVolCxo/YTIntzJhpaI/AAAAAAAAKqo/dHY9JN7V_o0uM3EQVFE7eLUGaPCUGEOwwCLcBGAsYHQ/s1449/1.png
In each of the scans, it would have the following information:

* Application Info
* Security Info
* Components
* SAST Findings
* Best Practices Implemented
* Virus Total Info
* Certificate Info
* Strings
* Databases
* Files
https://1.bp.blogspot.com/-k5vdRnxvrfY/YTIoB7qdzzI/AAAAAAAAKqw/KSny0cKhw84u61dJy7KXctj09LQ1m3lvQCLcBGAsYHQ/s1212/2.png
For easy access there is a sidebar on the left page of the scan:
https://1.bp.blogspot.com/-3VzDmkOWk8Q/YTIoWHr_9iI/AAAAAAAAKq4/Bcijq11Pp5oi3gQp34mKAWyNbSoqrGcTwCLcBGAsYHQ/s777/4.png
Components
https://1.bp.blogspot.com/-QslEVo1mfzg/YTIolSNA6GI/AAAAAAAAKq8/GaqMg5wimsobolh1Nj-GQsd1qO3L1cqRQCLcBGAsYHQ/s1758/5.png
* db: PostgreSQL 13.2
* nginx: Nginx 1.19.10
* rabbitmq: RabbitMQ 3.8.14
* worker: Celery 5.0.5
* web: Mobile Audit App

Docker Base images

Image is based on python buster. Link to Docker Hub image
ImageTagsBasempast/mobile_audit1.3.8python:3.9.4-bustermpast/mobile_audit1.3.6python:3.9.2-bustermpast/mobile_audit1.3.0python:3.9.1-bustermpast/mobile_audit1.0.0python:3.9.0-buster
Main Features

* Uses Docker for easy deployment in multiplatform environment
* Extract all information of the APK
* Analyze all the source code searching for weaknesses
* All findings are categorized and follows CWE standards
* All findings are categorized and include Mobile Top 10 Risk
* Also highlight the Best Practices in Secure Android Implementation in the APK
* The findings can be edited and the false positives can be triaged and deleted
* All scan results can be exported to PDF
* User authentication and user management
* API v1 with Swagger and ReDoc
* TLS
* Dynamic page reload (WIP)
* LDAP integration
* Export to Markdown
* Export to CSV

Patterns

The application has an engine with different rules and patterns that are used though the findings scanning phase to detect vulnerabilities and/or malicious code into the apk.
These can be activated and deactivated in /pat[...]

hacking: security in practice
Techie spends thousands of dollars and no doubt hundreds of hours to build a machine that fakes handwriting

https://external-preview.redd.it/Qp9UKoQMj3MeZqnnBKi2LnjjCushgMrabpSCMT45lZo.jpg?width=640&crop=smart&auto=webp&s=e7bea91bfce52fedb0814841f66513162add4631 submitted by /u/pinpepnet
[link] [comments]

hacking: security in practice
Hi, guys. In your PC you can turn on god mode with following just some steps. step one: In your desktop press right click and create a new folder. Step two: Rename the folder with this code: GodMode.{ED7BA470-8E54-465E-825C-99712043E01C}

Thank you!

submitted by /u/Jarzis-Hossain-ppp
[link] [comments]

hacking: security in practice
How to use Recon-ng in this recon-ng tutorial, discover open source intelligence and how to easily pivot to new results. Find targets and move to discovering vulnerabilities.

https://external-preview.redd.it/ryL01jI1413tO8YtDTbHdlpodtWftOSQbj4dhoS55RQ.jpg?width=640&crop=smart&auto=webp&s=8adfa54b3a158621df0293f61891200b481b0761 submitted by /u/Way_Tough
[link] [comments]

Hacking on Medium
counterfeit Banknotes for sale.


WhatsApp ….. + 4571506070 CÁILÍOCHT Grád A Nótaí bainc góchumtha do-aitheanta le díol.

Continue reading on Medium »

Hacking on Medium
The Starting line of cyber security

As I move towards my goals of becoming a CEH, I realize the path that I have taken to become a infosec anylast is not like everyone else’s…

Continue reading on Medium »

KitPloit - PenTest Tools!
PS2EXE - Module To Compile Powershell Scripts To Executables


https://1.bp.blogspot.com/-_KxV4jubhaU/YUOcgzhpbJI/AAAAAAAAuvw/Sc0xmixjtXoKF7G1bAmJ0ibxfmIDEAIxwCNcBGAsYHQ/w640-h280/PS2EXE.JPG
Overworking of the great script of Ingo Karstein with GUI support. The GUI output and input is activated with one switch, real windows executables are generated. With Powershell 5.x support and graphical front end.

Module version.
You find the script based version here (https://github.com/MScholtes/TechNet-Gallery) and here: PS2EXE-GUI: "Convert" PowerShell Scripts to EXE Files with GUI.

Author: Markus Scholtes

Version: 1.0.10

Date: 2021-04-10

Installation

PS C:\> Install-Module ps2exe

(on Powershell V4 you may have to install PowershellGet before) or download from here: https://www.powershellgallery.com/packages/ps2exe/.

Usage

Invoke-ps2exe .\source.ps1 .\target.exe

or

ps2exe .\source.ps1 .\target.exe

compiles "source.ps1" into the executable target.exe (if ".\target.exe" is omitted, output is written to ".\source.exe").

or start Win-PS2EXE for a graphical front end with

Win-PS2EXE

Parameter

ps2exe [-inputFile] '<file_name' [[-outputFile] '<file_name'] [-prepareDebug]
[-x86|-x64] [-lcid <id] [-STA|-MTA] [-noConsole] [-UNICODEEncoding]
[-credentialGUI] [-iconFile '<filename'] [-title ''] [-description '<description']
[-company '<company'] [-product '<product'] [...]

how do i make a python back door for research?
https://www.reddit.com/r/Pentesting/comments/prtkrd/how_do_i_make_a_python_back_door_for_research/

<!-- SC_OFF -->hello i have been learning python for some time no but i want to learn back doors in python and i know its not a good way to do it because "its not obfuscate and it gets detected" im not hacking any one and this is me just simply pen testing on myself and trying to learn any way. i want to learn it and the ins and outs of how it works and not just "control c then control v" it so if there are any english videos, ebooks or forums it would be very help full. and if there are better languages to learn in the future (i know there are) i just want to learn python right now btw this is my first post on reddit and this forum so if it breaks and rules just remove it. thxs <!-- SC_ON --> submitted by /u/gallacticscambaiter (https://www.reddit.com/user/gallacticscambaiter)
[link] (https://www.reddit.com/r/Pentesting/comments/prtkrd/how_do_i_make_a_python_back_door_for_research/) [comments] (https://www.reddit.com/r/Pentesting/comments/prtkrd/how_do_i_make_a_python_back_door_for_research/)

Kali Linux TutorialsCobaltStrikeParser : Python parser for CobaltStrike Beacon’s configuration
CobaltStrikeParser is a Python parser for CobaltStrike Beacon’s configuration.

Use parse_beacon_config.py for stageless beacons, memory dumps or C2 urls with metasploit compatibility mode (default true).
Many stageless beacons are PEs where the beacon code itself is stored in the .data section and xored with 4-byte key.
The script tries to find the xor key and data heuristically, decrypt the data and parse the configuration from it.

This is designed so it can be used as a library too.

The repo now also includes a small commuincation module (comm.py) that can help with communcating to a C2 server as a beacon.

Usage

usage: parse_beacon_config.py [-h] [–json] [–quiet] [–version VERSION] beacon
Parses CobaltStrike Beacon’s configuration from PE, memory dump or URL.
positional arguments:
beacon This can be a file path or a url (if started with http/s)
optional arguments:
-h, –help show this help message and exit
–json Print as json
–quiet Do not print missing or empty settings
–version VERSION Try as specific cobalt version (3 or 4). If not specified, tries both.

Extra

To use the communication poc copy it to the main folder and run it from there. For installing the M2Crypto library (a requirement for the poc) on Windows, it’s easiest with installers found online, and not through pip.


Download

PS2EXE - Module To Compile Powershell Scripts To Executables
http://www.kitploit.com/2021/09/ps2exe-module-to-compile-powershell.html

You find the script based version here (https://github.com/MScholtes/TechNet-Gallery) and here: PS2EXE-GUI: "Convert" (https://gallery.technet.microsoft.com/PS2EXE-GUI-Convert-e7cb69d5)PowerShell (https://www.kitploit.com/search/label/PowerShell) Scripts to EXE Files with GUI. Author: Markus Scholtes Version: 1.0.10 Date: 2021-04-10
Installation
Install-Module ps2exe ">PS C:\> Install-Module ps2exe (on Powershell V4 you may have to install PowershellGet before) or download from here: https://www.powershellgallery.com/packages/ps2exe/.
Usage
Invoke-ps2exe .\source.ps1 .\target.exe or ps2exe .\source.ps1 .\target.exe compiles "source.ps1" into the executable target.exe (if ".\target.exe" is omitted, output is written to ".\source.exe"). or start Win-PS2EXE for a graphical front end with Win-PS2EXE
Parameter
' [[-outputFile] ''] [-prepareDebug] [-x86|-x64] [-lcid ] [-STA|-MTA] [-noConsole] [-UNICODEEncoding] [-credentialGUI] [-iconFile ''] [-title ''] [-description ''] [-company ''] [-product ''] [-copyright ''] [-trademark ''] [-version ''] [-configFile] [-noOutput] [-noError] [-noVisualStyles] [-requireAdmin] [-supportOS] [-virtualize] [-longPaths] ">ps2exe [-inputFile] '' [[-outputFile] ''] [-prepareDebug]
[-x86|-x64] [-lcid ] [-STA|-MTA] [-noConsole] [-UNICODEEncoding]
[-credentialGUI] [-iconFile ''] [-title ''] [-description '']
[-company ''] [-product ''] [-copyright ''] [-trademark '']
[-version ''] [-configFile] [-noOutput] [-noError] [-noVisualStyles] [-requireAdmin]
[-supportOS] [-virtualize] [-longPaths] debugging x86 or x64 = compile for 32-bit or 64-bit runtime only lcid = location ID for the compiled executable. Current user culture if not specified STA or MTA = 'Single Thread Apartment' or 'Multi Thread Apartment' mode noConsole = the resulting executable will be a Windows Forms app without a console window UNICODEEncoding = encode output as UNICODE in console mode credentialGUI = use GUI for prompting credentials (https://www.kitploit.com/search/label/Credentials) in console mode iconFile = icon file name for the compiled executable title = title information (displayed in details tab of Windows Explorer's properties dialog) description = description information (not displayed, but embedded in executable) company = company information (not displayed, but embedded in executable) product = product information (displayed in details tab of Windows Explorer's properties dialog) copyright = copyright information (displayed in details tab of Windows Explorer's properties dialog) trademark = trademark information (displayed in details tab of Windows Explorer's properties dialog) version = version information (displayed in details tab of Windows Explorer's properties dialog) configFile = write config file (.exe.config) noOutput = the resulting executable will generate no standard output (includes verbose and information channel) noError = the resulting executable will generate no error output (includes warning and debug channel) noVisualStyles = disable visual styles for a generated windows GUI application (only with -noConsole) requireAdmin = if UAC is enabled, compiled executable run only in elevated context (UAC dialog appears if required) supportOS = use functions of newest Windows versions (execute [Environment]::OSVersion to see the difference) virtualize = application virtualization (https://www.kitploit.com/search/label/Virtualization) is activated (forcing x86 runtime) longPaths = enable long paths ( > 260 characters) if enabled on OS (works only with Windows 10) "> inputFile = Powershell script that you want to convert to executable (file has to be UTF8 or UTF16 encoded)