)
#Add variable called cmd with value “calc.exe” to the worksheet
cmd = macro.variable(“cmd”, “calc.exe”)
#Add EXEC formula with argument cmd
macro.formula(“EXEC”, cmd)
#Dump to CSV
print(macro.to_csv())

Result:

cmd=”calc.exe”;
=URUCHOM.PROGRAM(cmd);

For now, only the English and Polish language is supported. If you want to use another language you need to add translations in the excel4lib/lang/langs directory.

For sure, you will need to create a formula that takes another formula as an argument. You can do this by using Excel4Macro.argument function.

from excel4lib.macro import *
macro = Excel4Macro(“test.csv”)
#Add variable called cmd with value “calc” to the worksheet
cmd_1 = macro.variable(“cmd”, “calc”)
#Add cell containing .exe as value
cmd_2 = macro.value(“.exe”)
#Create CONCATENATE formula that CONCATENATEs cmd_1 and cmd_2
exec_arg = macro.argument(“CONCATENATE”, cmd_1, cmd_2)
#Pass CONCATENATE call as argument to EXEC formula
macro.formula(“EXEC”, exec_arg)
#Dump to CSV
print(macro.to_csv())

Result:

cmd=”calc”;
.exe;
=EXEC(CONCATENATE(cmd,R2C1));

As you can see “.exe” string was passed to CONCATENATE formula as R2C1. R2C1 is address of “.exe” value (ROW number 2 and COLUMN number 1). excel4lib returns references to formulas, values as addresses. References to variables are returned as their names. You probably noted that Excel4Macro class adds formulas, variables, values to the worksheet automaticly in order in which these objects are created and that the start address is R1C1. What if you want to place formulas in another column or row? You can do this by calling Excel4Macro.set_cords function.

from excel4lib.macro import *
macro = Excel4Macro(“test.csv”)
#Column 1
#Add variable called cmd with value “calc” to the worksheet
cmd_1 = macro.variable(“cmd”, “calc”)
#Add cell containing .exe as value
cmd_2 = macro.value(“.exe”)
#Column 2
#Change cords to columns 2
macro.set_cords(2,1)
exec_arg = macro.argument(“CONCATENATE”, cmd_1, cmd_2)
#Pass CONCATENATE call as argument to EXEC formula
exec_call = macro.formula(“EXEC”, exec_arg)
#Column 1
#Back to column 1. Change cords to column 1 and row 3
macro.set_cords(1,3)
#GOTO EXEC call
macro.goto(exec_call)
#Dump to CSV
print(macro.to_csv())

Result:

cmd=”calc”;=EXEC(CONCATENATE(cmd,R2C1));
.exe;;
=GOTO(R1C2);; Download

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
pWnOS v1.1 Walkthrough

I just published pWnOS v1.1

​

https://medium.com/@sarangiprateek80/pwnos-v1-1-b526345d7c92

submitted by /u/psarangi112
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
What are the most exploited vulnerabilities in LINUX by hackers?

https://cdn-images-1.medium.com/max/1280/1*g4_jjKZ5VtJ-sj1k7VwoSA.png
LINUX KERNEL?

Continue reading on rootissh »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Cyber laws in India and the CIA triad

https://cdn-images-1.medium.com/max/1200/0*lHSbWj3OPMPDgQeC.png
In the late 90s, when we came out of the era of landlines, the internet evolved as the medium of transferring information.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

5min 400$ using Google Dork
https://medium.com/@fcwdbrqmr/5min-400-using-google-dork-1df6bbe0f9fc?source=rss------bug_bounty-5

Hey hunters! This writeup is my first writeup I’ll share with you how I get 400$ in 5min using google dorks. So, Let’s get start. This my…Continue reading on Medium » (https://medium.com/@fcwdbrqmr/5min-400-using-google-dork-1df6bbe0f9fc?source=rss------bug_bounty-5)

Kali Linux Tutorials
Rootend : A *Nix Enumerator And Auto Privilege Escalation Tool

Rootend is a python *nix Enumerator & Auto Privilege Escalation tool.

For a full list of our tools, please visit our website https://www.twelvesec.com/

Written by:

* nickvourd (twitter)
* maldevel (twitter)
* servo

Usage

._
_ /_ _ | | _ / / _
| | \ \/ \/ // | |\ \/ // _ \ _____ _/ _ _/ \ | | \ /\ /| |\ /\ / / \ /\ ___
|| \/_/ __ >/_/ __ > /__ >___ >
\/ \/ \/ \/ \/
rootend v.2.0.2 – Enumeration & Automation Privilege Escalation tool.
rootend is an open source tool licensed under GPLv3.
Affected systems: *nix.
Written by: @nickvourd of @twelvesec.
Special thanks to @maldevel & servo.
https://www.twelvesec.com/
Please visit https://github.com/twelvesec/rootend for more..
optional arguments:
-h, –help show this help message and exit
-v, –version show version and exit
-a, –auto automated privilege escalation process
-m, –manual system enumeration
-n, –nocolor disable color
-b, –banner show banner and exit
-s, –suid suid binary enumeration
-w, –weak weak permissions of files enumeration
-p, –php PHP configuration files enumeration
-c, –capabilities capabilities enumeration
-f, –full-writables world writable files enumeration
usage examples:
./rootend.py -a
./rootend.py -m
./rootend.py -v
./rootend.py -b
Specific categories usage examples:
./rootend.py -a -s
./rootend.py -m -w
./rootend.py -a -s -p
./rootend.py -m -w -c -p
./rootend.py -a -s -c -p -f
*Use the above arguments with -n to disable color.

Version

2.0.2

Supports

* Python 2.x
* Python 3.x

Tested on

* Python 2.7.18rc1
* Python 3.8.2

Modes

* Manual
* Auto

Exploitation Categories

Suid Binaries

* General Suids
* Suids for reading files
* Suids for creating file as root
* Limited Suids
* Custom Suids

Weak Permissions

* /etc/passwd
* /etc/shadow
* apache2.conf
* httpd.conf
* redis.conf
* /root

Weak Ownership

* /etc/passwd
* /etc/shadow
* apache2.conf
* httpd.conf
* redis.conf
* /root

Capabilities

* General Capabilities
* Custom Capabilities
* With CAP_SETUID

Interesting Files

* PHP Configuration Files
* World Writable Files
Download

5min 400$ using Google Dork

Hey hunters! This writeup is my first writeup I’ll share with you how I get 400$ in 5min using google dorks. So, Let’s get start. This my…Continue reading on Medium »
Read more...

Google Dorks - A Tracker

Summary :Continue reading on Medium »
Read more...

PoW-Shield - Project Dedicated To Fight DDoS And Spam With Proof Of Work, Featuring An Additional WA

Project dedicated to provide DDoS protection with proof-of-workDescription PoW Shield provides DDoS protection on OSI application layer by acting as a proxy that utilizes proof of work between the backend service and the end user. This project aims to provide an alternative to general captcha methods such as Google's ReCaptcha that has always been a pain to solve. Accessing a web service protected by PoW Shield has never been easier, simply go to the url, and your browser will do the rest of the verification automatically for you. PoW Shield aims to provide the following services bundled in a single webapp / docker image: proof of work authentication ratelimiting and ip blacklisting web application firewall Story on Medium How it Works So basically, PoW Shield works as a proxy in front of the actual web app/service. It conducts verification via proof-of-work and only proxies authorized traffic through to the actual server. The proxy is easily installable, and is capable of protecting low security applications with a WAF. Here’s what happens behind the scenes when a user browses a PoW Shield-protected webservice: The server generates a random hex-encoded “prefix” and sends it along with the PoW Shield page to the client. Browser JavaScript on the client side then attempts to brute-force a “nonce” that when appended with the prefix, can produce a SHA256 hash with the number of leading zero-bits more than the “difficulty” D specified by the server. i.e. SHA256(prefix + nonce)=0…0xxxx (binary, with more than D leading 0s) Client-side JavaScript then sends the calculated nonce to the server for verification, if verification passes, the server generates a cookie for the client to pass authentication. The server starts proxying the now authenticated client traffic to the server with WAF filtering enabled. Usage nodejs and docker Configuration environment variables Features Web Service Structure Proxy Functionality PoW Implementation Dockerization IP Blacklisting Ratelimiting Unit Testing WAF Implementation Multi-Instance Syncing (Redis) References Proof-of-work by Fedor Indutny (PoW utility functions) Shadowd by Zesecure (WAF rules) License BSD 3-Clause License Copyright (c) 2021, RuiSiang All rights reserved. Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met: Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer. Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution. Neither the name of the copyright holder nor the names of its contributors may be used to endorse or promote products derived from this software without specific prior written permission. THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. Download PoW-Shield
Read more...

Phishing in a home lab?
https://www.reddit.com/r/redteamsec/comments/pv5960/phishing_in_a_home_lab/

<!-- SC_OFF -->I have a lab of 10 windows computers, security onion and a pfsense firewall. I want too add an windows machine on the Wan side of the firewall to act as am email server, then another firewall to finish the network so my kali box is technically outside. Do you guys know if I can run exchange in a vm and if so how much ram it's going to need to function? I would like to tie it into ad but have read you need 2 servers on as an edge to forward to the real server inside the ad forest. If exchange is out of the question what is an email server I can run in a vm that will have some Anti-Malware/ anti-spam protections? Preferable it could be forwarded to sec onion on av running on the box could shut down bad files. <!-- SC_ON --> submitted by /u/JonOwensWrites (https://www.reddit.com/user/JonOwensWrites)
[link] (https://www.reddit.com/r/redteamsec/comments/pv5960/phishing_in_a_home_lab/) [comments] (https://www.reddit.com/r/redteamsec/comments/pv5960/phishing_in_a_home_lab/)

hacking: security in practice
Did shaking right-click in the browser mean that my pc infected with something?

I have notice that when i right-click to inspect in chrome browse, the right-click opened start shaking, and sometimes reddit page only chake in some points. Is this similar to an malware or attack, because i know one attack shake the all browser or change the image with Metasploit, I'm noob in hacking but i need to know if my pc infected.

1. Operating system Debian
2. Browser chrome

submitted by /u/afrolicios
[link] [comments]

hacking: security in practice
MDK3 and Airgeddon not working

I tried a experiment to jam my wifi network, i tried MDK3 airgeddon-MDK4 and aireplay but they work but the network also still works, help would be appreciated. (I use a wirless network adapter that supports monitor mode)

submitted by /u/-The-Moon-
[link] [comments]

Google Dorks - A Tracker
https://shahjerry33.medium.com/google-dorks-a-tracker-a59c7aad237f?source=rss------bug_bounty-5

Summary :Continue reading on Medium » (https://shahjerry33.medium.com/google-dorks-a-tracker-a59c7aad237f?source=rss------bug_bounty-5)