Hacking Articles Tips Tricks Videos Tutorials

C:\LittleCorporal\bin\Release>LittleCorporal.exe C:\beacon.bin explorer.exe
.____    .__  __    __  .__         _________                                         .__
|    |   |__|/  |__/  |_|  |   ____ \_   ___ \  _________________   ________________  |  |
|    |   |  \   __\   __\  | _/ __ \/    \  \/ /  _ \_  __ \____ \ /  _ \_  __ \__  \ |  |
|    |___|  ||  |  |  | |  |_\  ___/\     \___( <_)  | \/  |_> > <_)  | \// __ \|  |__
| _______ \__||__|  |__| |____/\___  >\______  /\____/|__|  |   __/ \____/|__|  (____  /____/
\/                        \/        \/             |__|                     \/
________
/        \
__ /       (o)\__
/     ______\   \                   I am the strongest debater in the whole Conseil.
| ____/__  __\____|                 I let myself be attacked, because I know how to defend myself.
[  --~~--  ]                                                              - Napoleon Bonaparte
| (  L   )|
___----\  __  /----___
/   |  < \____/ >   |   \
/    |   < \--/ >    |    \
||||||    \ \/ /     ||||||
|          \  /   o       |
|     |     \/   === |    |
|     |      |o  ||| |    |
|     \______|   +#* |    |
|            |o      |    |
\           |      /     /
|\__________|o    /     /
|           |    /     /

[+] Parsed Arguments:
[>] Shellcode Path: C:\beacon.bin
[>] Target Process: explorer.exe

[+] Embedded shellcode in Loader.cs!
[+] Generated C# Loader artifact!
[+] Ran the .NET assembly through Donut!
[+] Donut artifact is located at: C:\LittleCorporal\Artifacts\payload.bin
[+] Path to Word document: C:\LittleCorporal\Artifacts\Form.doc

PLEASE READ THE ENTIRE README BEFORE USAGE! How It Works?LittleCorporal accepts a user-supplied argument for a process to inject into on a remote machine, in which you plan to execute the malicious Word document on, and also accepts a path to a local shellcode file stored in .binformat - such as a Beacon Stageless shellcode blob on the machine you are running LittleCorporal from. So, if you would like to use the maldoc generated from this project, you will need to specify an already running process on the machine you intend to run the maldoc on (be it the local machine or a different machine. explorer.exeis always going to have one instance, so use this if you do not care about which process you inject into).

LittleCorporal embeds the shellcode and the target process name into Loader.cs, compiles Loader.cson the fly into a .NET .exeartifact, and then utilizes thread hijacking to perform remote process injection. The .NET .exeartifact, which is the thread hijacking loader, is sent through Donut to generate position independent shellcode, which will execute the .exe. The shellcode generated by Donut is then base64 encoded, a Word document is generated, and the final Donut blob is stored in an InlineShape.AlternativeText Word property, which is able to hold the entire payload. This is done by inserting an image (currently a blank image, giving the document a "blank" look) property into the Word document, as alternative text on the image, which contains the payload. LittleCorporal then leverages a VBA "template", contained in this project as a text file, and injects this Macro into the newly generated Word document. The Macro is named autoopen, so it opens upon the document opening, and then is configured to extract the value of the alternative text of the previously generated image, which contains the final payload, base64 decodes it, and [...]

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest & Hacking Tools

LittleCorporal - A C# Automated Maldoc Generator

5 viewsedited 23:38

Hacking Articles Tips Tricks Videos Tutorials

KitPloit - PenTest Tools!
LittleCorporal - A C# Automated Maldoc Generator

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest & Hacking Tools

LittleCorporal - A C# Automated Maldoc Generator

5 viewsedited 23:38

Hacking Articles Tips Tricks Videos Tutorials

Dark Reading: Attacks/Breaches
Most Large Enterprises Fail to Protect Their Domain Names

Of the largest 2,000 companies in the world, 81% fail to take simple security measures, such as locking their domain with the registrar, leaving them open to domain shenanigans.

5 views23:40

Source

Hacking Articles Tips Tricks Videos Tutorials

Dark Reading: Attacks/Breaches
Outsourced Software Pose Greater Risks to Enterprise Application Security

In the wake of SolarWinds and other third-party attacks, security teams worry that outsourced applications pose risks to the organization's application security, according to Dark Reading's recent "How Enterprises Are Developing Secure Applications" report.

5 views23:40

Source

Hacking Articles Tips Tricks Videos Tutorials

Dark Reading: Attacks/Breaches
75K Email Inboxes Hit in New Credential Phishing Campaign

Attacker used a legitimate — but likely deprecated — domain to sneak malicious emails past security filters, vendor says.

6 views23:40

Source

Hacking Articles Tips Tricks Videos Tutorials

Dark Reading: Attacks/Breaches
NSA, CISA Issue Guidelines for Selecting and Securing VPNs

Joint document includes configuration recommendations for hardening VPNs, and recommendations on how to select the most secure ones.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading

NSA, CISA Issue Guidelines for Selecting and Securing VPNs

Joint document includes configuration recommendations for hardening VPNs, and recommendations on how to select the most secure ones.

8 viewsedited 23:40

Hacking Articles Tips Tricks Videos Tutorials

16 views04:37

Hacking Articles Tips Tricks Videos Tutorials

Photo

Kali Linux Tutorials
PS2EXE : Module To Compile Powershell Scripts To Executables

PS2EXE is a Module To Compile Powershell Scripts To Executables. Overworking of the great script of Ingo Karstein with GUI support. The GUI output and input is activated with one switch, real windows executables are generated. With Powershell 5.x support and graphical front end.

Module version.

You find the script based version here (https://github.com/MScholtes/TechNet-Gallery) and here: PS2EXE-GUI: “Convert” PowerShell Scripts to EXE Files with GUI.

Author: Markus Scholtes

Version: 1.0.10

Date: 2021-04-10

Installation

PS C:> Install-Module ps2exe

(on Powershell V4 you may have to install PowershellGet before) or download from here: https://www.powershellgallery.com/packages/ps2exe/.

Usage

Invoke-ps2exe .\source.ps1 .\target.exe

or

ps2exe .\source.ps1 .\target.exe

compiles “source.ps1” into the executable target.exe (if “.\target.exe” is omitted, output is written to “.\source.exe”).

or start Win-PS2EXE for a graphical front end with

Win-PS2EXE

Parameter

ps2exe [-inputFile] ” [[-outputFile] ”] [-prepareDebug]
[-x86|-x64] [-lcid ] [-STA|-MTA] [-noConsole] [-UNICODEEncoding]
[-credentialGUI] [-iconFile ”] [-title ”] [-description ‘ 260 characters) if enabled on OS (works only with Windows 10)

A generated executable has the following reserved parameters:

-debug Forces the executable to be debugged. It calls “System.Diagnostics.Debugger.Launch()”.
-extract: Extracts the powerShell script[...]

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials

PS2EXE : Module To Compile Powershell Scripts To Executables

PS2EXE is a Module To Compile Powershell Scripts To Executables. Overworking of the great script of Ingo Karstein with GUI support.

10 viewsedited 04:37

Hacking Articles Tips Tricks Videos Tutorials

Kali Linux Tutorials PS2EXE : Module To Compile Powershell Scripts To Executables PS2EXE is a Module To Compile Powershell Scripts To Executables. Overworking of the great script of Ingo Karstein with GUI support. The GUI output and input is activated with…

inside the executable and saves it as FILENAME.
The script will not be executed.
-wait At the end of the script execution it writes “Hit any key to exit…” and waits for a key to be pressed.
-end All following options will be passed to the script inside the executable.
All preceding options are used by the executable itself and will not be passed to the script. Download

___________________________
@hacking_Attack
@Hacking_Video

9 viewsedited 04:37

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
Resource for finding published exploits in web frameworks

I'm a web developer and have a client who uses an old javascript framework that is years behind on security updates. Is there a resource where I can find exploits for particular versions of software so I can demonstrate what type of exploits are possible by not updating their code? I can find a list of why patches have been issued but no practical application of the exploit.

submitted by /u/baronoffeces
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Resource for finding published exploits in web frameworks

I'm a web developer and have a client who uses an old javascript framework that is years behind on security updates. Is there a resource where I...

9 viewsedited 05:22

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
How do you find someone's IP address using command prompt?

Education purposes only, I just want to learn how.

submitted by /u/judahthelion014
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

How do you find someone's IP address using command prompt?

Education purposes only, I just want to learn how.

9 viewsedited 05:22

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
OSCP worthy?

Hello all! In short: I want to know if I am prepared to complete the OSCP/CEH certifications; 1) are they worth it?,

2) fluent in python, Java, sql, (each 4 ish years), and adept in C++ (still learning),

3) have been grinding on tryhackme/hackthebox/ctftime.org - and have actually done well in some CTFs,

4) have ~ 2 1/2 years of experience with both Kali Linux and Ubuntu.

What more, if anything, can I do to prepare for CEH and OSCP? I feel as if I’ve jumped through all the necessary hoops but have no idea what to expect. I just really don’t want to waste my money if I’m truly not “ready”. Possibly experiencing some imposter syndrome, but at the same time how can I actually gauge my readiness?

Any feedback would be greatly appreciated!

submitted by /u/smokeyrb9
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

OSCP worthy?

Hello all! In short: I want to know if I am prepared to complete the OSCP/CEH certifications; 1) are they worth it?, 2) fluent in python, Java,...

11 viewsedited 05:22

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
Utilizing proxy authentication and ssl bypass in order to get through a proxy

Hi, wondering if there's already a tool that does something like utilizing proxy authentication and or ssl bypasses to get info out

Not going to do this been working a lot closer to proxies and just generally curious

submitted by /u/onequestion1168
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Utilizing proxy authentication and ssl bypass in order to get...

Hi, wondering if there's already a tool that does something like utilizing proxy authentication and or ssl bypasses to get info out Not going to...

9 viewsedited 05:23

About

Blog

Apps

Platform