Usage
How do you use StreamDivert? Run the the tool with administrative privileges: streamdivert.exe config_file [-f] [-v] The config file contains entries for streams you want to have diverted. En example config file: 10.0.1.49 445 //Divert all inbound TCP connections to port 445 (SMB) coming from 10.0.1.51 to a local SOCKS server tcp < 445 10.0.1.51 -> socks //Divert all inbound TCP connections to port 445 (SMB) coming from fe80::f477:846a:775d:d37 to fe80::20c:29ff:fe6f:88ff port 445 tcp < 445 fe80::f477:846a:775d:d37 -> fe80::20c:29ff:fe6f:88ff 445 //Divert all inbound TCP connections to port 445 (SMB) to 10.0.1.48 port 445 tcp < 445 0.0.0.0 -> 10.0.1.48 445 //Divert all inbound UDP connections to to port 53 (DNS) to 10.0.1.49 port 53 udp < 53 0.0.0.0 -> 10.0.1.49 53 //Divert all inbound ICMP packets coming from 10.0.1.50 to 10.0.1.49 icmp < 10.0.1.50 -> 10.0.1.49 //Divert all outbound TCP connections to 10.0.1.50, port 80 to 10.0.1.49 port 8080 tcp > 10.0.1.50 80 -> 10.0.1.49 8080 //Send all packets going to 10.0.1.50 port 80 and prefer interface 9 to send them. If the interface does not exist or is not up, the packets are send from the default interface. tcp > 10.0.1.50 80 -> 10.0.1.50 80 interface 9 //Force all packets going to 10.0.1.50 port 80 over interface 9, or drop the packets if the interface does not exist or is not up. tcp > 10.0.1.50 80 -> 10.0.1.50 80 force interface 9 //Divert all outbound UDP connection to port 53 (DNS) to 10.0.1.49 port 53 udp > 0.0.0.0 53 -> 10.0.1.49 53 ">//Divert all inbound TCP connections to port 445 (SMB) coming from 10.0.1.50 to 10.0.1.49 port 445 tcp < 445 10.0.1.50 -> 10.0.1.49 445 //Divert all inbound TCP connections to port 445 (SMB) coming from 10.0.1.51 to a local SOCKS server tcp < 445 10.0.1.51 -> socks //Divert all inbound TCP connections to port 445 (SMB) coming from fe80::f477:846a:775d:d37 to fe80::20c:29ff:fe6f:88ff port 445 tcp < 445 fe80::f477:846a:775d:d37 -> fe80::20c:29ff:fe6f:88ff 445 //Divert all inbound TCP connections to port 445 (SMB) to 10.0.1.48 port 445 tcp < 445 0.0.0.0 -> 10.0.1.48 445 //Divert all inbound UDP connections to to port 53 (DNS) to 10.0.1.49 port 53 udp < 53 0.0.0.0 -> 10.0.1.49 53 //Divert all inbound ICMP packets coming from 10.0.1.50 to 10.0.1.49 icmp < 10.0.1.50 -> 10.0.1.49 //Divert all outbound TCP connections to 10.0.1.50, port 80 to 10.0.1.49 port 8080 tcp > 10.0.1.50 80 -> 10.0.1.49 8080 //Send all packets going to 10.0.1.50 port 80 and prefer interface 9 to send them. If the interface does not exist or is not up, the packets are send from the default interface. tcp > 10.0.1.50 80 -> 10.0.1.50 80 interface 9 //Force all packets going to 10.0.1.50 port 80 over interface 9, or drop the packets if the interface does not exist or is not up. tcp > 10.0.1.50 80 -> 10.0.1.50 80 force interface 9 //Divert all outbound UDP connection to port 53 (DNS) to 10.0.1.49 port 53 udp > 0.0.0.0 53 -> 10.0.1.49 53 The [-f] flag, when present, will modify the Windows Firewall (https://www.kitploit.com/search/label/Firewall) to add an exception for the application to properly redirect incoming traffic to another port. The [-v] flag control the logging (https://www.kitploit.com/search/label/Logging) verbosity. When provided, StreamDivert will log details about redirected packets and streams.
Some Use Cases
Diverting outbound C&C traffic to a local socket for dynamic (https://www.kitploit.com/search/label/Dynamic) malware analysis. Diverting inbound SMB connections of a compromised host to Responder/ ntlmrelayx (usefull in penetration tests). Routing traffic over reserved ports. Usefull when a network firewall is in between. For example... Routing a meterpreter (https://www.kitploit.com/search/label/Meterpreter) shell over port 445. Running a SOCKS server on port 3389. ...
Help! My packets/ connections are not correctly diverted!

___________________________
@hacking_Attack
@Hacking_Video

One thing to keep in mind when configuring diverted connections is that you don't have conflicting diverted streams. Given the following example config file: 10.0.1.50 icmp > 10.0.1.49 -> 10.0.1.48 ">icmp < 0.0.0.0 -> 10.0.1.50 icmp > 10.0.1.49 -> 10.0.1.48 Those two diverted streams will conflict with eachother, as packets for the first diverted stream will also be picked up by the second packet 'diverter'. Generally you will only run into these issues with UDP and ICMP and using wildcards. Also note that diverting an IPv4 to an IPv6 address and vice versa is not supported for UDP and ICMP traffic.
Contributing to StreamDivert
Features wanted: IP range support ...

Download StreamDivert (https://github.com/jellever/StreamDivert)

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
StreamDivert - Redirecting (Specific) TCP, UDP And ICMP Traffic To Another Destination

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Women and People of Color Experience More Cyber Threats

Researchers explore how people across different demographics feel about their privacy and security online, with worrying results.

Dark Reading: Attacks/Breaches
7 Ways to Thwart Malicious Insiders

Malicious insider incidents may be less frequent than inadvertent user missteps, but they can cost organizations big time.

Dark Reading: Attacks/Breaches
Thoma Bravo Completes Strategic Investment in Intel 471

Intel 471 is a provider of cyber threat intelligence for leading enterprises and governments.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
CISA: Wide Exploitation of New VMware vCenter Server Flaw Likely

Attackers can use the vulnerability to remotely execute arbitrary code.

Dark Reading: Attacks/Breaches
Microsoft Warns of 'FoggyWeb' Malware Targeting AD FS Servers

The group tracked as Nobelium uses multiple tactics to steal credentials with the goal of gaining admin access to Active Directory Federation Services.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Microsoft Adds Emergency Threat Mitigation to Its Exchange Server Software

The built-in service automates mitigations to known Exchange Server threats.

___________________________
@hacking_Attack
@Hacking_Video

Reviewing the Practical Network Penetration Tester (PNPT) Course Pt. 2
https://medium.com/@PDaudt_InfoSec/reviewing-the-practical-network-penetration-tester-pnpt-course-pt-2-270a11f5917b?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Last week I covered the initial sections of the Practical Ethical Hacking — The Complete Course: Before We Begin, and Introduction…Continue reading on Medium » (https://medium.com/@PDaudt_InfoSec/reviewing-the-practical-network-penetration-tester-pnpt-course-pt-2-270a11f5917b?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Reviewing the Practical Network Penetration Tester (PNPT) Course Pt. 2

Last week I covered the initial sections of the Practical Ethical Hacking — The Complete Course: Before We Begin, and Introduction…Continue reading on Medium »
Read more...

https://external-preview.redd.it/-eLb9WJlJGTkOrleqnwaRx-rBPZGHJX9zsGzT7KHbsI.jpg?width=640&crop=smart&auto=webp&s=152a54daca026bcb62f3de91a318cff28f038cea This code runs on a Windows x64 machine, and it is un-hackable.

Please read the blog post if you want an explanation of how this works and the demo.

https://preview.redd.it/vh4e43wfu3q71.png?width=732&format=png&auto=webp&s=0778fe4b392e9a1427e47e9c5972fc9aa9733fb1

https://algomachines.com/2021/09/27/introduction-to-protected-code/

submitted by /u/cryptocomicon
[link] [comments]

hacking: security in practice
Hacking or Cyber Crime Books suggestions

I am off on hols and looking to take a book with me.

Read Kevin Mitnick a fair amount, so looking for something similar..

​

Any thoughts.

submitted by /u/freeufc
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How do I deauth clients from a wifi network with Mac os?

Hello reddit, I was just wondering if you guys had any alternatives to aireplay-ng for my Mac m1 because I've tried everything. I've tried jamWifi, kissmac2. Basically everything that I could get my hands on I tried it and it didn't work. So if anyone of you guys know how I could deauth clients off of a network it would be very helpful. Thank you very much for the one who read all of this.

submitted by /u/Black_wolf_Tv
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Where to learn for free?

Hello guys, I’m currently learning about computers and software, and am also enrolled in a boot camp where I’m learning cobol and jcl. I’m interested in eventually going into ethical hacking, but not entirely sure where to start, or what resources are a good use of time. I’m studying to certify in A+ and Net+ in my free time, and Security plus after those, but with how vast this field is, I’m not sure if the resources I currently have are related at all. I’m trying to find a good book, website, YouTube series, or even online and/or steam games that could help teach me on the side until I’m able to give it my full attention. Does anyone have any advice?

submitted by /u/earfchan
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How to brake my android password without lost my all data?

I found an old cellphone of mine, but i forgot what was my password, is there anyway to broke my lock screen without lose my all data?

​

Thanks

submitted by /u/JustSpectator
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
TryHackMe | Metasploit: Introduction WriteUp

An introduction to the main components of the Metasploit Framework.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video