Dark Reading: Attacks/Breaches
Google Spots New Technique to Sneak Malware Past Detection Tools

The operator behind OpenSUpdater is using a new way to sneak adware and other malware past security tools.

Dark Reading: Attacks/Breaches
Our Eye Is on the SPARROW

How unauthorized users can exploit wireless infrastructures for covert communication.

Dark Reading: Attacks/Breaches
TangleBot Campaign Underscores SMS Threat

The attack targets Android devices and starts with a malicious SMS message that aims to bring malware onto compromised devices.

Dark Reading: Attacks/Breaches
Endpoint Still a Prime Target for Attack

A vast majority of security professionals surveyed think any exploit will start with the endpoint.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Contrast Application Security Platform Scales to Support OWASP Risks

Contrast's platform detects and prevents against OWASP Top Ten risks from development to production with out-of-the-box policy rules and automated compliance reporting.

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
targetedKerberoast : Kerberoast With ACL Abuse Capabilities

targetedKerberoast is a Python script that can, like many others (e.g. GetUserSPNs.py), print “kerberoast” hashes for user accounts that have a SPN set. This tool brings the following additional feature: for each user without SPNs, it tries to set one (abuse of a write permission on the servicePrincipalNameattribute), print the “kerberoast” hash, and delete the temporary SPN set for that operation. This is called targeted Kerberoasting. This tool can be used against all users of a domain, or supplied in a list, or one user supplied in the CLI.

More information about this attack

* The Hacker Recipes – Kerberoast
* The Hacker Recipes – Targeted Kerberoasting

Usage

This tool supports the following authentications

* (NTLM) Cleartext password
* (NTLM) Pass-the-hash
* (Kerberos) Cleartext password
* (Kerberos) Pass-the-key / Overpass-the-hash
* (Kerberos) Pass-the-cache (type of Pass-the-ticket)

Among other things, targetedKerberoast supports multi-level verbosity, just append -v, -vv, … to the command https://s.w.org/images/core/emoji/13.1.0/72x72/1f642.png

usage: targetedKerberoast.py [-h] [-v] [-q] [-D TARGET_DOMAIN] [-U USERS_FILE] [–request-user username] [-o OUTPUT_FILE] [–use-ldaps] [–only-abuse] [–no-abuse] [–dc-ip ip address] [-d DOMAIN] [-u USER]
[-k] [–no-pass | -p PASSWORD | -H [LMHASH:]NTHASH | –aes-key hex key]
Queries target domain for SPNs that are running under a user account and operate targeted Kerberoasting
optional arguments:
-h, –help show this help message and exit
-v, –verbose verbosity level (-v for verbose, -vv for debug)
-q, –quiet show no information at all
-D TARGET_DOMAIN, –target-domain TARGET_DOMAIN
Domain to query/request if different than the domain of the user. Allows for Kerberoasting across trusts.
-U USERS_FILE, –users-file USERS_FILE
File with user per line to test
–request-user username
Requests TGS for the SPN associated to the user specified (just the username, no domain needed)
-o OUTPUT_FILE, –output-file OUTPUT_FILE
Output filename to write ciphers in JtR/hashcat format
–use-ldaps Use LDAPS instead of LDAP
–only-abuse Ignore accounts that already have an SPN and focus on targeted Kerberoasting
–no-abuse Don’t attempt targeted Kerberoasting
authentication & connection:
–dc-ip ip address IP Address of the domain controller or KDC (Key Distribution Center) for Kerberos. If omitted it will use the domain part (FQDN) specified in the identity parameter
-d DOMAIN, –domain DOMAIN
(FQDN) domain to authenticate to
-u USER, –user USER user to authenticate with
secrets:
-k, –kerberos Use Kerberos authentication. Grabs credentials from .ccache file (KRB5CCNAME) based on target parameters. If valid credentials cannot be found, it will use the ones specified in the
command line
–no-pass don’t ask for password (useful for -k)
-p PASSWORD, –password PASSWORD
password to authenticate with
-H [LMHASH:]NTHASH, –hashes [LMHASH:]NTHASH
NT/LM hashes, format is LMhash:NThash
–aes-key hex key AES key to use for Kerberos Authentication (128 or 256 bits)

Below is an example what the tool can do.
https://1.bp.blogspot.com/-mNigUfsg-l0/YUGFwEsbFwI/AAAAAAAAK2I/0Uq3AoxuuZkGMuhjljbkM3PgWmWhURrqwCLcBGAsYHQ/s1906/example.png

Download

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Peirates : Kubernetes Penetration Testing Tool

Peirates, a Kubernetes penetration tool, enables an attacker to escalate privilege and pivot through a Kubernetes cluster. It automates known techniques to steal and collect service accounts, obtain further code execution, and gain control of the cluster.

Where Do I Run Peirates?

You run Peirates from a container running on Kubernetes.

Does Peirates Attack A Kubernetes Cluster?

Yes, it absolutely does. Talk to your lawyer and the cluster owners before using this tool in a Kubernetes cluster.

Who Creates Peirates?

InGuardians’ CTO Jay Beale first conceived of Peirates and put together a group of InGuardians developers to create it with him, including Faith Alderson, Adam Crompton and Dave Mayer. Faith convinced us to all learn Golang, so she could implement the tool’s use of the kubectl library from the Kubernetes project. Adam persuaded the group to use a highly-interactive user interface. Dave brought contagious enthusiasm. Together, these four developers implemented attacks and began releasing this tool that we use on our penetration tests.

Modules

Building And Running

If you just want the peirates binary to start attacking things, grab the latest release from the releases page.

However, if you want to build from source, read on!

Get peirates

go get -v “github.com/inguardians/peirates”

Get libary sources if you haven’t already (Warning: this will take almost a gig of space because it needs the whole kubernetes repository)

go get -v “k8s.io/kubectl/pkg/cmd” “github.com/aws/aws-sdk-go”

Build the executable

cd $GOPATH/github.com/inguardians/peirates
./build.sh

This will generate an executable file named peiratesin the same directory.
Download

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
how to compile .afa, .qnd and .flat ?

i'm searching for a way to recompile .flat, .qnd and .afa files, if somebody has an idea on how to do that please hep me

submitted by /u/audaidai
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Haklistgen - Turns Any Junk Text Into A Usable Wordlist For Brute-Forcing
http://www.kitploit.com/2021/09/haklistgen-turns-any-junk-text-into.html

___________________________
@hacking_Attack
@Hacking_Video

Turns any junk text into a usable wordlist for brute-forcing.
Installation
go install github.com/hakluke/haklistgen@latest

Usage Examples
Scrape all words out of an HTTP response to build a directory bruteforce (https://www.kitploit.com/search/label/Bruteforce) wordlist: curl https://wikipedia.org | haklistgen
Pipe a list of subdomains (https://www.kitploit.com/search/label/Subdomains) to it to generate a wordlist for bruteforcing (https://www.kitploit.com/search/label/Bruteforcing) more subdomains: subfinder -silent -d example.com | haklistgen
Piping in a custom JavaScript file could yield some interesting results: curl https://example.com/app.js | haklistgen
You could create a great custom wordlist (https://www.kitploit.com/search/label/Custom%20Wordlist) for a large-scope target doing something like this: hakrawler | anew endpoints.txt | while read url; do curl $url --insecure | haklistgen | anew wordlist.txt; done cat subdomains.txt urls.txt endpoints.txt | haklistgen | anew wordlist.txt; ">subfinder -silent -d hakluke.com | anew subdomains.txt | httpx -silent | anew urls.txt | hakrawler | anew endpoints.txt | while read url; do curl $url --insecure | haklistgen | anew wordlist.txt; done
cat subdomains.txt urls.txt endpoints.txt | haklistgen | anew wordlist.txt;
This would save subdomains to subdomains.txt, then save httpx output to urls.txt, then crawl each url and save the hakrawler output to endpoints.txt, then fetch every URL in endpoints.txt and make a wordlist out of it, concatenating all of the wordlists to wordlist.txt. Then it takes all of the subdomains and urls, and adds words out of the words in those too.

Download Haklistgen (https://github.com/hakluke/haklistgen)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
The Key Problem Factors Every Web Application Faces

https://cdn-images-1.medium.com/max/2600/0*a-1-JoSG-XCXvRJ7
This Site is Secure — a myth or reality?

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Google advierte sobre una nueva forma en que los piratas informáticos pueden hacer que el malware…

https://cdn-images-1.medium.com/max/1382/0*ypG8NGOec3rzC_X-
PUBLICADO EN 24 SEPTIEMBRE, 2021POR EHACKING

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Haklistgen - Turns Any Junk Text Into A Usable Wordlist For Brute-Forcing

Turns any junk text into a usable wordlist for brute-forcing.Installation go install github.com/hakluke/haklistgen@latest Usage Examples Scrape all words out of an HTTP response to build a directory bruteforce wordlist: curl https://wikipedia.org | haklistgen Pipe a list of subdomains to it to generate a wordlist for bruteforcing more subdomains: subfinder -silent -d example.com | haklistgen Piping in a custom JavaScript file could yield some interesting results: curl https://example.com/app.js | haklistgen You could create a great custom wordlist for a large-scope target doing something like this: hakrawler | anew endpoints.txt | while read url; do curl $url --insecure | haklistgen | anew wordlist.txt; done cat subdomains.txt urls.txt endpoints.txt | haklistgen | anew wordlist.txt; ">subfinder -silent -d hakluke.com | anew subdomains.txt | httpx -silent | anew urls.txt | hakrawler | anew endpoints.txt | while read url; do curl $url --insecure | haklistgen | anew wordlist.txt; donecat subdomains.txt urls.txt endpoints.txt | haklistgen | anew wordlist.txt; This would save subdomains to subdomains.txt, then save httpx output to urls.txt, then crawl each url and save the hakrawler output to endpoints.txt, then fetch every URL in endpoints.txt and make a wordlist out of it, concatenating all of the wordlists to wordlist.txt. Then it takes all of the subdomains and urls, and adds words out of the words in those too. Download Haklistgen
Read more...

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
Haklistgen - Turns Any Junk Text Into A Usable Wordlist For Brute-Forcing

https://1.bp.blogspot.com/-tAJa4MDz_Co/YUuoLt01PoI/AAAAAAAAvSU/CkAAccSSGBI6r6apc9d3cLcmRkAjTTyCgCNcBGAsYHQ/w640-h373/some_words.png
Turns any junk text into a usable wordlist for brute-forcing.
Installation

go install github.com/hakluke/haklistgen@latest


Usage Examples

Scrape all words out of an HTTP response to build a directory bruteforce wordlist:

curl https://wikipedia.org | haklistgen


Pipe a list of subdomains to it to generate a wordlist for bruteforcing more subdomains:

subfinder -silent -d example.com | haklistgen


Piping in a custom JavaScript file could yield some interesting results:

curl https://example.com/app.js | haklistgen


You could create a great custom wordlist for a large-scope target doing something like this:

hakrawler | anew endpoints.txt | while read url; do curl $url --insecure | haklistgen | anew wordlist.txt; done cat subdomains.txt urls.txt endpoints.txt | haklistgen | anew wordlist.txt; ">subfinder -silent -d hakluke.com | anew subdomains.txt | httpx -silent | anew urls.txt | hakrawler | anew endpoints.txt | while read url; do curl $url --insecure | haklistgen | anew wordlist.txt; done
cat subdomains.txt urls.txt endpoints.txt | haklistgen | anew wordlist.txt;


This would save subdomains to subdomains.txt, then save httpx output to urls.txt, then crawl each url and save the hakrawler output to endpoints.txt, then fetch every URL in endpoints.txtand make a wordlist out of it, concatenating all of the wordlists to wordlist.txt. Then it takes all of the subdomains and urls, and adds words out of the words in those too.
Download Haklistgen

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
What Is the Difference Between Security and Resilience?

Resilience shifts the focus toward eliminating the probable impact of the full attack chain.