PyHook is the python implementation of my SharpHook (https://github.com/IlanKalendarov/SharpHook) project, It uses various API hooks in order to give us the desired credentials. PyHook Uses frida (https://www.kitploit.com/search/label/Frida) to inject it's dependencies into the target process
Supported Processes
Process API Call Description Progress mstsc CredUnPackAuthenticationBufferW This will hook into mstsc and should give you Username (https://www.kitploit.com/search/label/Username) and Password DONE runas CreateProcessWithLogonW This will hook into runas and should give you Username, Password and the domain name DONE cmd RtlInitUnicodeStringEx This should hook into cmd and then would be able to filter keywords like: PsExec,password etc.. DONE MobaXterm CharUpperBuffA This will hook into MobaXterm (https://www.kitploit.com/search/label/MobaXterm) and should give you credentials (https://www.kitploit.com/search/label/Credentials) for SSH and RDP logins DONE explorer (UAC Prompt) CredUnPackAuthenticationBufferW This will hook into explorer and should give you Username, Password and the Domain name from the UAC Prompt DONE
Link my blog post covering this topic: https://ilankalendarov.github.io/posts/offensive-hooking
Download PyHook (https://github.com/IlanKalendarov/PyHook)
___________________________
@hacking_Attack
@Hacking_Video
Supported Processes
Process API Call Description Progress mstsc CredUnPackAuthenticationBufferW This will hook into mstsc and should give you Username (https://www.kitploit.com/search/label/Username) and Password DONE runas CreateProcessWithLogonW This will hook into runas and should give you Username, Password and the domain name DONE cmd RtlInitUnicodeStringEx This should hook into cmd and then would be able to filter keywords like: PsExec,password etc.. DONE MobaXterm CharUpperBuffA This will hook into MobaXterm (https://www.kitploit.com/search/label/MobaXterm) and should give you credentials (https://www.kitploit.com/search/label/Credentials) for SSH and RDP logins DONE explorer (UAC Prompt) CredUnPackAuthenticationBufferW This will hook into explorer and should give you Username, Password and the Domain name from the UAC Prompt DONE
Link my blog post covering this topic: https://ilankalendarov.github.io/posts/offensive-hooking
Download PyHook (https://github.com/IlanKalendarov/PyHook)
___________________________
@hacking_Attack
@Hacking_Video
GitHub
GitHub - IlanKalendarov/SharpHook: SharpHook is an offensive API hooking tool designed to catch various credentials within the…
SharpHook is an offensive API hooking tool designed to catch various credentials within the API call. - IlanKalendarov/SharpHook
hacking: security in practice
Is this sub ethical hackers?
Or did I just walk into a anon sub lol
submitted by /u/LastBreathSansPhase3
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
Is this sub ethical hackers?
Or did I just walk into a anon sub lol
submitted by /u/LastBreathSansPhase3
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
Is this sub ethical hackers?
Or did I just walk into a anon sub lol
Hacking Articles Tips Tricks Videos Tutorials
Photo
hacking: security in practice
BlackMatter Strikes Iowa Farmers Cooperative, Demands $5.9M Ransom
https://external-preview.redd.it/WDdiPu26ZhMIh1VEOziz5TqbsqCXuDrf21XoZ7JZAQc.jpg?width=640&crop=smart&auto=webp&s=8c0559b64f4c7ea5b1180385919ea1707a4b5a1b submitted by /u/lboog423
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
BlackMatter Strikes Iowa Farmers Cooperative, Demands $5.9M Ransom
https://external-preview.redd.it/WDdiPu26ZhMIh1VEOziz5TqbsqCXuDrf21XoZ7JZAQc.jpg?width=640&crop=smart&auto=webp&s=8c0559b64f4c7ea5b1180385919ea1707a4b5a1b submitted by /u/lboog423
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
BlackMatter Strikes Iowa Farmers Cooperative, Demands $5.9M Ransom
Posted in r/hacking by u/lboog423 • 2 points and 0 comments
hacking: security in practice
Download PPT used in Adobe connect?
What's up guys,
So i´m currently takiing some courses that are given by way of adobe connect (web conferences), where the presenter shares PPT each day and I was wondering if there is anyone knows how to get a hold of the actual PPT presentation used (presenter does not enable content share).
I know there's a way because I've seen one guy do it somehow and share it from time to time but can't figure out how.
Any ideas? Thanks!
p.s. im not a hacker or anything close to it
submitted by /u/dhroa
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
Download PPT used in Adobe connect?
What's up guys,
So i´m currently takiing some courses that are given by way of adobe connect (web conferences), where the presenter shares PPT each day and I was wondering if there is anyone knows how to get a hold of the actual PPT presentation used (presenter does not enable content share).
I know there's a way because I've seen one guy do it somehow and share it from time to time but can't figure out how.
Any ideas? Thanks!
p.s. im not a hacker or anything close to it
submitted by /u/dhroa
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
Download PPT used in Adobe connect?
What's up guys, So i´m currently takiing some courses that are given by way of adobe connect (web conferences), where the presenter shares PPT...
1*GVSxg9BAJMVjVRAioufqoA.gif
34.3 KB
Hacking on Medium
Exploiting Critical SQL Injection Vulnerability
Hi Guys,
Continue reading on Medium »
Exploiting Critical SQL Injection Vulnerability
Hi Guys,
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Deep Web
Freedom Hosting Admin Sentenced to 27 Years in Prison
https://external-preview.redd.it/Bn5uT7ReHZJQod0Xb7NNDib52YJdtbLxqLNJEjcA3F4.jpg?width=640&crop=smart&auto=webp&s=b943d43a1f6e23f3df7e5690a765cfd5084d8dbf submitted by /u/kirby__000
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
Freedom Hosting Admin Sentenced to 27 Years in Prison
https://external-preview.redd.it/Bn5uT7ReHZJQod0Xb7NNDib52YJdtbLxqLNJEjcA3F4.jpg?width=640&crop=smart&auto=webp&s=b943d43a1f6e23f3df7e5690a765cfd5084d8dbf submitted by /u/kirby__000
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
Freedom Hosting Admin Sentenced to 27 Years in Prison
Posted in r/deepweb by u/kirby__000 • 1 point and 0 comments
PyHook - An Offensive API Hooking Tool Written In Python Designed To Catch Various Credentials Within The API Call
PyHook is the python implementation of my SharpHook project, It uses various API hooks in order to give us the desired credentials. PyHook Uses frida to inject it's dependencies into the target processSupported Processes Process API Call Description Progress mstsc CredUnPackAuthenticationBufferW This will hook into mstsc and should give you Username and Password DONE runas CreateProcessWithLogonW This will hook into runas and should give you Username, Password and the domain name DONE cmd RtlInitUnicodeStringEx This should hook into cmd and then would be able to filter keywords like: PsExec,password etc.. DONE MobaXterm CharUpperBuffA This will hook into MobaXterm and should give you credentials for SSH and RDP logins DONE explorer (UAC Prompt) CredUnPackAuthenticationBufferW This will hook into explorer and should give you Username, Password and the Domain name from the UAC Prompt DONE Link my blog post covering this topic: https://ilankalendarov.github.io/posts/offensive-hooking Download PyHook
Read more...
___________________________
@hacking_Attack
@Hacking_Video
PyHook is the python implementation of my SharpHook project, It uses various API hooks in order to give us the desired credentials. PyHook Uses frida to inject it's dependencies into the target processSupported Processes Process API Call Description Progress mstsc CredUnPackAuthenticationBufferW This will hook into mstsc and should give you Username and Password DONE runas CreateProcessWithLogonW This will hook into runas and should give you Username, Password and the domain name DONE cmd RtlInitUnicodeStringEx This should hook into cmd and then would be able to filter keywords like: PsExec,password etc.. DONE MobaXterm CharUpperBuffA This will hook into MobaXterm and should give you credentials for SSH and RDP logins DONE explorer (UAC Prompt) CredUnPackAuthenticationBufferW This will hook into explorer and should give you Username, Password and the Domain name from the UAC Prompt DONE Link my blog post covering this topic: https://ilankalendarov.github.io/posts/offensive-hooking Download PyHook
Read more...
___________________________
@hacking_Attack
@Hacking_Video
Ilan Kalendarov
Offensive API Hooking
Introduction
Difficulty in finding jobs
https://www.reddit.com/r/Pentesting/comments/psvgyz/difficulty_in_finding_jobs/
Hello friends, I'm a Linux systems administrator with +12y experience. Also having worked as Security Analyst and Security Admin for around 5y in total. 2 years ago I decided to move to offensive security. September 1st I took my OSCP credential, since then, I'm looking for a formal position in ethical hacking/pentesting/red pill team; there's a LOT of available jobs, but I couldn't found any country accepting people from outside - for many reasons that you guys may know (citizenship, TS/SCI clearance, etc.) even for remote jobs. 2 months ago I left my 5 years job at IBM to focus on my offensive security career. Now I'm afraid to not be able to have a job in this area. Could you guys please give me a direction? I really appreciate PS: I also have a dozen other certificates (as RHCE, AWS DevOps Engineer...) and I live in Brazil. submitted by /u/brunoanjoz (https://www.reddit.com/user/brunoanjoz)
[link] (https://www.reddit.com/r/Pentesting/comments/psvgyz/difficulty_in_finding_jobs/) [comments] (https://www.reddit.com/r/Pentesting/comments/psvgyz/difficulty_in_finding_jobs/)
___________________________
@hacking_Attack
@Hacking_Video
https://www.reddit.com/r/Pentesting/comments/psvgyz/difficulty_in_finding_jobs/
Hello friends, I'm a Linux systems administrator with +12y experience. Also having worked as Security Analyst and Security Admin for around 5y in total. 2 years ago I decided to move to offensive security. September 1st I took my OSCP credential, since then, I'm looking for a formal position in ethical hacking/pentesting/red pill team; there's a LOT of available jobs, but I couldn't found any country accepting people from outside - for many reasons that you guys may know (citizenship, TS/SCI clearance, etc.) even for remote jobs. 2 months ago I left my 5 years job at IBM to focus on my offensive security career. Now I'm afraid to not be able to have a job in this area. Could you guys please give me a direction? I really appreciate PS: I also have a dozen other certificates (as RHCE, AWS DevOps Engineer...) and I live in Brazil. submitted by /u/brunoanjoz (https://www.reddit.com/user/brunoanjoz)
[link] (https://www.reddit.com/r/Pentesting/comments/psvgyz/difficulty_in_finding_jobs/) [comments] (https://www.reddit.com/r/Pentesting/comments/psvgyz/difficulty_in_finding_jobs/)
___________________________
@hacking_Attack
@Hacking_Video
reddit
Difficulty in finding jobs
Hello friends, I'm a Linux systems administrator with +12y experience. Also having worked as Security Analyst and Security Admin for...
hacking: security in practice
Anyone know how to fix this Beef-xss problem im having?
Heres the log
[i] GeoIP database is missing
[i] Run geoipupdate to download / update Maxmind GeoIP database
[*] Please wait for the BeEF service to start.
[*]
[*] You might need to refresh your browser once it opens.
[*]
[*] Web UI: http://127.0.0.1:3000/ui/panel
[*] Hook:
[*] Example:
● beef-xss.service - beef-xss
Loaded: loaded (/lib/systemd/system/beef-xss.service; disabled; vendor preset: disabled)
Active: failed (Result: exit-code) since Tue 2021-09-21 20:33:54 EDT; 3s ago
Process: 1241 ExecStart=/usr/share/beef-xss/beef (code=exited, status=1/FAILURE)
Main PID: 1241 (code=exited, status=1/FAILURE)
CPU: 1.159s
Sep 21 20:33:54 kali beef[1241]: [20:33:54][*] Browser Exploitation Framework (BeEF) 0.5.0.0
Sep 21 20:33:54 kali beef[1241]: [20:33:54] | Twit: u/beefproject
Sep 21 20:33:54 kali beef[1241]: [20:33:54] | Site: https://beefproject.com
Sep 21 20:33:54 kali beef[1241]: [20:33:54] | Blog: http://blog.beefproject.com
Sep 21 20:33:54 kali beef[1241]: [20:33:54] |_ Wiki: https://github.com/beefproject/beef/wiki
Sep 21 20:33:54 kali beef[1241]: [20:33:54][*] Project Creator: Wade Alcorn (@WadeAlcorn)
Sep 21 20:33:54 kali beef[1241]: -- migration_context()
Sep 21 20:33:54 kali systemd[1]: beef-xss.service: Main process exited, code=exited, status=1/FAILURE
Sep 21 20:33:54 kali systemd[1]: beef-xss.service: Failed with result 'exit-code'.
Sep 21 20:33:54 kali systemd[1]: beef-xss.service: Consumed 1.159s CPU time.
[*] Opening Web UI (http://127.0.0.1:3000/ui/panel) in: 5... 4... 3... 2... 1...
┌──(kali㉿kali)-[~]
└─$
submitted by /u/o1blique1
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
Anyone know how to fix this Beef-xss problem im having?
Heres the log
[i] GeoIP database is missing
[i] Run geoipupdate to download / update Maxmind GeoIP database
[*] Please wait for the BeEF service to start.
[*]
[*] You might need to refresh your browser once it opens.
[*]
[*] Web UI: http://127.0.0.1:3000/ui/panel
[*] Hook:
[*] Example:
● beef-xss.service - beef-xss
Loaded: loaded (/lib/systemd/system/beef-xss.service; disabled; vendor preset: disabled)
Active: failed (Result: exit-code) since Tue 2021-09-21 20:33:54 EDT; 3s ago
Process: 1241 ExecStart=/usr/share/beef-xss/beef (code=exited, status=1/FAILURE)
Main PID: 1241 (code=exited, status=1/FAILURE)
CPU: 1.159s
Sep 21 20:33:54 kali beef[1241]: [20:33:54][*] Browser Exploitation Framework (BeEF) 0.5.0.0
Sep 21 20:33:54 kali beef[1241]: [20:33:54] | Twit: u/beefproject
Sep 21 20:33:54 kali beef[1241]: [20:33:54] | Site: https://beefproject.com
Sep 21 20:33:54 kali beef[1241]: [20:33:54] | Blog: http://blog.beefproject.com
Sep 21 20:33:54 kali beef[1241]: [20:33:54] |_ Wiki: https://github.com/beefproject/beef/wiki
Sep 21 20:33:54 kali beef[1241]: [20:33:54][*] Project Creator: Wade Alcorn (@WadeAlcorn)
Sep 21 20:33:54 kali beef[1241]: -- migration_context()
Sep 21 20:33:54 kali systemd[1]: beef-xss.service: Main process exited, code=exited, status=1/FAILURE
Sep 21 20:33:54 kali systemd[1]: beef-xss.service: Failed with result 'exit-code'.
Sep 21 20:33:54 kali systemd[1]: beef-xss.service: Consumed 1.159s CPU time.
[*] Opening Web UI (http://127.0.0.1:3000/ui/panel) in: 5... 4... 3... 2... 1...
┌──(kali㉿kali)-[~]
└─$
submitted by /u/o1blique1
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
Anyone know how to fix this Beef-xss problem im having?
Heres the log \[i\] GeoIP database is missing \[i\] Run geoipupdate to download / update Maxmind GeoIP database \[\*\]...