KitPloit - PenTest Tools!
LittleCorporal - A C# Automated Maldoc Generator

https://1.bp.blogspot.com/-85hOqgWFZr0/YUu1xAdZ6pI/AAAAAAAAvTM/846i2ZxHqRIkL0aY2E1ywmPR5UdrE9OkQCNcBGAsYHQ/w400-h400/maldoc.png LittleCorporal: A C# Automated Maldoc Generator C:\LittleCorporal\bin\Release>LittleCorporal.exe C:\beacon.bin explorer.exe
.____ .__ __ __ .__ _________ .__
| | |__|/ |__/ |_| | ____ \_ ___ \ _________________ ________________ | |
| | | \ __\ __\ | _/ __ \/ \ \/ / _ \_ __ \____ \ / _ \_ __ \__ \ | |
| |___| || | | | | |_\ ___/\ \___( <_) | \/ |_> > <_) | \// __ \| |__
| _______ \__||__| |__| |____/\___ >\______ /\____/|__| | __/ \____/|__| (____ /____/
\/ \/ \/ |__| \/
________
/ \
__ / (o)\__
/ ______\ \ I am the strongest debater in the whole Conseil.
| ____/__ __\____| I let myself be attacked, because I know how to defend myself.
[ --~~-- ] - Napoleon Bonaparte
| ( L )|
___----\ __ /----___
/ | < \____/ > | \
/ | < \--/ > | \
|||||| \ \/ / ||||||
| \ / o |
| | \/ === | |
| | |o ||| | |
| \______| +#* | |
| |o | |
\ | / /
|\__________|o / /
| | / /

[+] Parsed Arguments:
[>] Shellcode Path: C:\beacon.bin
[>] Target Process: explorer.exe

[+] Embedded shellcode in Loader.cs!
[+] Generated C# Loader artifact!
[+] Ran the .NET assembly through Donut!
[+] Donut artifact is located at: C:\LittleCorporal\Artifacts\payload.bin
[+] Path to Word document: C:\LittleCorporal\Artifacts\Form.doc PLEASE READ THE ENTIRE README BEFORE USAGE! How It Works?LittleCorporal accepts a user-supplied argument for a process to inject into on a remote machine, in which you plan to execute the malicious Word document on, and also accepts a path to a local shellcode file stored in .binformat - such as a Beacon Stageless shellcode blob on the machine you are running LittleCorporal from. So, if you would like to use the maldoc generated from this project, you will need to specify an already running process on the machine you intend to run the maldoc on (be it the local machine or a different machine. explorer.exeis always going to have one instance, so use this if you do not care about which process you inject into).

LittleCorporal embeds the shellcode and the target process name into Loader.cs, compiles Loader.cson the fly into a .NET .exeartifact, and then utilizes thread hijacking to perform remote process injection. The .NET .exeartifact, which is the thread hijacking loader, is sent through Donut to generate position independent shellcode, which will execute the .exe. The shellcode generated by Donut is then base64 encoded, a Word document is generated, and the final Donut blob is stored in an InlineShape.AlternativeText Word property, which is able to hold the entire payload. This is done by inserting an image (currently a blank image, giving the document a "blank" look) property into the Word document, as alternative text on the image, which contains the payload. LittleCorporal then leverages a VBA "template", contained in this project as a text file, and injects this Macro into the newly generated Word document. The Macro is named autoopen, so it opens upon the document opening, and then is configured to extract the value of the alternative text of the previously generated image, which contains the final payload, base64 decodes it, and [...]

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
LittleCorporal - A C# Automated Maldoc Generator

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Most Large Enterprises Fail to Protect Their Domain Names

Of the largest 2,000 companies in the world, 81% fail to take simple security measures, such as locking their domain with the registrar, leaving them open to domain shenanigans.

Dark Reading: Attacks/Breaches
Outsourced Software Pose Greater Risks to Enterprise Application Security

In the wake of SolarWinds and other third-party attacks, security teams worry that outsourced applications pose risks to the organization's application security, according to Dark Reading's recent "How Enterprises Are Developing Secure Applications" report.

Dark Reading: Attacks/Breaches
75K Email Inboxes Hit in New Credential Phishing Campaign

Attacker used a legitimate — but likely deprecated — domain to sneak malicious emails past security filters, vendor says.

Dark Reading: Attacks/Breaches
NSA, CISA Issue Guidelines for Selecting and Securing VPNs

Joint document includes configuration recommendations for hardening VPNs, and recommendations on how to select the most secure ones.

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
PS2EXE : Module To Compile Powershell Scripts To Executables

PS2EXE is a Module To Compile Powershell Scripts To Executables. Overworking of the great script of Ingo Karstein with GUI support. The GUI output and input is activated with one switch, real windows executables are generated. With Powershell 5.x support and graphical front end.

Module version.

You find the script based version here (https://github.com/MScholtes/TechNet-Gallery) and here: PS2EXE-GUI: “Convert” PowerShell Scripts to EXE Files with GUI.

Author: Markus Scholtes

Version: 1.0.10

Date: 2021-04-10

Installation

PS C:> Install-Module ps2exe

(on Powershell V4 you may have to install PowershellGet before) or download from here: https://www.powershellgallery.com/packages/ps2exe/.

Usage

Invoke-ps2exe .\source.ps1 .\target.exe

or

ps2exe .\source.ps1 .\target.exe

compiles “source.ps1” into the executable target.exe (if “.\target.exe” is omitted, output is written to “.\source.exe”).

or start Win-PS2EXE for a graphical front end with

Win-PS2EXE

Parameter

ps2exe [-inputFile] ” [[-outputFile] ”] [-prepareDebug]
[-x86|-x64] [-lcid ] [-STA|-MTA] [-noConsole] [-UNICODEEncoding]
[-credentialGUI] [-iconFile ”] [-title ”] [-description ‘ 260 characters) if enabled on OS (works only with Windows 10)

A generated executable has the following reserved parameters:

-debug Forces the executable to be debugged. It calls “System.Diagnostics.Debugger.Launch()”.
-extract: Extracts the powerShell script[...]

___________________________
@hacking_Attack
@Hacking_Video

inside the executable and saves it as FILENAME.
The script will not be executed.
-wait At the end of the script execution it writes “Hit any key to exit…” and waits for a key to be pressed.
-end All following options will be passed to the script inside the executable.
All preceding options are used by the executable itself and will not be passed to the script. Download

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Resource for finding published exploits in web frameworks

I'm a web developer and have a client who uses an old javascript framework that is years behind on security updates. Is there a resource where I can find exploits for particular versions of software so I can demonstrate what type of exploits are possible by not updating their code? I can find a list of why patches have been issued but no practical application of the exploit.

submitted by /u/baronoffeces
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How do you find someone's IP address using command prompt?

Education purposes only, I just want to learn how.

submitted by /u/judahthelion014
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
OSCP worthy?

Hello all! In short: I want to know if I am prepared to complete the OSCP/CEH certifications; 1) are they worth it?,

2) fluent in python, Java, sql, (each 4 ish years), and adept in C++ (still learning),

3) have been grinding on tryhackme/hackthebox/ctftime.org - and have actually done well in some CTFs,

4) have ~ 2 1/2 years of experience with both Kali Linux and Ubuntu.

What more, if anything, can I do to prepare for CEH and OSCP? I feel as if I’ve jumped through all the necessary hoops but have no idea what to expect. I just really don’t want to waste my money if I’m truly not “ready”. Possibly experiencing some imposter syndrome, but at the same time how can I actually gauge my readiness?

Any feedback would be greatly appreciated!

submitted by /u/smokeyrb9
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Utilizing proxy authentication and ssl bypass in order to get through a proxy

Hi, wondering if there's already a tool that does something like utilizing proxy authentication and or ssl bypasses to get info out

Not going to do this been working a lot closer to proxies and just generally curious

submitted by /u/onequestion1168
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
lets say i give u my ip address can u hack me

i want to get educated on is it possible for a hacker to hack me with my ip address. Will they ableto access the notepad files on my desktop?

lets say i keep 100$ of bitcoin keys declare it publicly with ip address just for a test do u guys think i will get haked.
SYSTEM specs: windows 10 AME last security patch march 21, with no firewall, no antivirus but its a clean install with sure zero virus.

i also have a deep freeze installed it cleans everything at every reboot.

​

submitted by /u/abhilodha
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

FoggyWeb: Targeted NOBELIUM malware leads to persistent backdoor | Microsoft Security Blog
https://www.reddit.com/r/redteamsec/comments/pxntg3/foggyweb_targeted_nobelium_malware_leads_to/

submitted by /u/dmchell (https://www.reddit.com/user/dmchell)
[link] (https://www.microsoft.com/security/blog/2021/09/27/foggyweb-targeted-nobelium-malware-leads-to-persistent-backdoor/) [comments] (https://www.reddit.com/r/redteamsec/comments/pxntg3/foggyweb_targeted_nobelium_malware_leads_to/)

___________________________
@hacking_Attack
@Hacking_Video

Simple Parameter Tampering → Account Takeover
https://darshan-jogi.medium.com/simple-parameter-tampering-account-takeover-3fec3cb51eb6?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Introduction:Continue reading on Medium » (https://darshan-jogi.medium.com/simple-parameter-tampering-account-takeover-3fec3cb51eb6?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Password-Checker CSAW CTF 2021 Write-Up

https://cdn-images-1.medium.com/max/625/1*A3-3K-PtQ6Mxo9VjUoxBMQ.png
This is a warm-up challenge for Binary Exploitation.

Continue reading on InfoSec Write-ups »

___________________________
@hacking_Attack
@Hacking_Video