We can see the output from the commands:

___________________________
@hacking_Attack
@Hacking_Video

Configuration
Update the config.py file:channel_id (Mandatory!!!): Get your Youtube channel ID from here (https://www.youtube.com/account_advanced).api_key (Mandatory!!!): To get the API key create an application and generate the key from here (https://console.cloud.google.com/apis/credentials).image_type (Optional. Default: "qr_aes"): Different types of images for the video."cleartext" creates images with the words of the commands."qr" creates QR codes with the commands."qr_aes" creates QR codes with the commands encrypted with AES.upload_seconds_delay (Optional. Default: 300): Seconds delay until checking if a new video has been uploaded.debug (Optional. Default: True): Print messages or not.aes_key (Optional. Default: "covert-tube_2021"): Key for AES encryption, used in the "qr_aes" option.generated_video_path (Optional. Default: "output.avi"): Path of video generated with generate_video.py.downloaded_video_path (Optional. Default: "/tmp/test.mp4"): Path where the new video will be downloaded.temp_folder (Optional. Default: "/tmp/"): Path where images of every frame from the video are stored, with the format image_X.png.
Installing dependencies
For all the project:pip3 install Pillow opencv-python youtube_dl pytesseract pyqrcode pypng pyzbar pycrypto
For only the "cleartext" option (OCR):pip3 install Pillow opencv-python youtube_dl pytesseract
For only the QR without encryption (https://www.kitploit.com/search/label/Encryption) option:pip3 install Pillow opencv-python youtube_dl pyqrcode pypng pyzbar
For only the QR with AES encryption option:pip3 install Pillow opencv-python youtube_dl pyqrcode pypng pyzbar pycrypto

Creating a standalone binary
pyinstaller --onefile main.py
cp dist/main covert-tube
rm -rf dist build
rm main.spec

Motivation
Lately I have been reading about malware using Youtube for controlling their setting remotely. For example, Casbaneiro abuses YouTube to store its C&C server domains. Each video on the channels used by the threat actor contains a description and at the end of these there is a link to a bogus Facebook (https://www.kitploit.com/search/label/Facebook) or Instagram (https://www.kitploit.com/search/label/Instagram) url containing the C&C server domain (Welivesecurity blog (https://www.welivesecurity.com/2019/10/03/casbaneiro-trojan-dangerous-cooking/)). A second example is Numando, which abuses it by encrypting the data in the title of the Youtube videos (other Welivesecurity blog (https://www.welivesecurity.com/2021/09/17/numando-latam-banking-trojan/)).Knowing this I decided to create a PoC to test the control of remote systems uploading videos to Youtube but, instead of using the title or the description, using the content of the video. It allows to execute any command, but it could be used to change some settings remotely. So this is just a PoC, use it for educational purposes!

Download Covert-Tube (https://github.com/ricardojoserf/covert-tube)

___________________________
@hacking_Attack
@Hacking_Video

[my bug boutry notes ]
https://medium.com/@onepython7/my-bug-boutry-notes-50879a1dd932?source=rss------bug_bounty-5

*wesite testing rolse *Continue reading on Medium » (https://medium.com/@onepython7/my-bug-boutry-notes-50879a1dd932?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Can Bugs ever be useful?
https://vanshika-nehra23.medium.com/can-bugs-ever-be-useful-82c4258f9ec5?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

The answer is YES if you get a good BOUNTY for catching those “BUGS”.Continue reading on Medium » (https://vanshika-nehra23.medium.com/can-bugs-ever-be-useful-82c4258f9ec5?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Can Bugs ever be useful?

The answer is YES if you get a good BOUNTY for catching those “BUGS”.Continue reading on Medium »
Read more...

Black Hat Ethical Hacking
Microsoft is disabling Excel 4.0 macros by default to protect users

___________________________
@hacking_Attack
@Hacking_Video

Covert-Tube - Youtube As Covert-Channel - Control Systems Remotely And Execute Commands By Uploading Videos To Youtube

A program to control systems remotely by uploading videos to Youtube using Python to create the videos and the listener, emulating some malware I was reading about. It allows to create videos with frames formed of simple text, QR codes with cleartext or QR codes using AES encryption.Create a videoThe videos can be created using generate_video.py: enter the commands and generate the video writing "exit". The video generated is called by default output.avi (can be updated in config.py):python3 generate_video.py Run the listener and upload the video to Youtubepython3 main.pyThe listener will check the Youtube channel every 300 seconds by default (can be updated in config.py). First the video is uploaded:After finding there is a new video in the channel, it is downloaded and the commands are executed: We can see the output from the commands:ConfigurationUpdate the config.py file:channel_id (Mandatory!!!): Get your Youtube channel ID from here.api_key (Mandatory!!!): To get the API key create an application and generate the key from here.image_type (Optional. Default: "qraes"): Different types of images for the video."cleartext" creates images with the words of the commands."qr" creates QR codes with the commands."qr\aes" creates QR codes with the commands encrypted with AES.upload_seconds_delay (Optional. Default: 300): Seconds delay until checking if a new video has been uploaded.debug (Optional. Default: True): Print messages or not.aes_key (Optional. Default: "covert-tube2021"): Key for AES encryption, used in the "qr\aes" option.generated_video_path (Optional. Default: "output.avi"): Path of video generated with generate_video.py.downloaded_video_path (Optional. Default: "/tmp/test.mp4"): Path where the new video will be downloaded.temp_folder (Optional. Default: "/tmp/"): Path where images of every frame from the video are stored, with the format image_X.png.Installing dependenciesFor all the project:pip3 install Pillow opencv-python youtube_dl pytesseract pyqrcode pypng pyzbar pycryptoFor only the "cleartext" option (OCR):pip3 install Pillow opencv-python youtube_dl pytesseractFor only the QR without encryption option:pip3 install Pillow opencv-python youtube_dl pyqrcode pypng pyzbarFor only the QR with AES encryption option:pip3 install Pillow opencv-python youtube_dl pyqrcode pypng pyzbar pycryptoCreating a standalone binarypyinstaller --onefile main.pycp dist/main covert-tuberm -rf dist buildrm main.specMotivationLately I have been reading about malware using Youtube for controlling their setting remotely. For example, Casbaneiro abuses YouTube to store its C&C server domains. Each video on the channels used by the threat actor contains a description and at the end of these there is a link to a bogus Facebook or Instagram url containing the C&C server domain (Welivesecurity blog). A second example is Numando, which abuses it by encrypting the data in the title of the Youtube videos (other Welivesecurity blog).Knowing this I decided to create a PoC to test the control of remote systems uploading videos to Youtube but, instead of using the title or the description, using the content of the video. It allows to execute any command, but it could be used to change some settings remotely. So this is just a PoC, use it for educational purposes!Download Covert-Tube
Read more...

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
Covert-Tube - Youtube As Covert-Channel - Control Systems Remotely And Execute Commands By Uploading Videos To Youtube

https://1.bp.blogspot.com/-Tkwipt38RVY/YV4Lk3mfEuI/AAAAAAAAwJ4/iSiDlOQuGBUP_O4sdkNdbPG4_-ymCbyhwCNcBGAsYHQ/w640-h108/covert-tube_1_image1.png A program to control systems remotely by uploading videos to Youtube using Python to create the videos and the listener, emulating some malware I was reading about. It allows to create videos with frames formed of simple text, QR codes with cleartext or QR codes using AES encryption. Create a videoThe videos can be created using generate_video.py: enter the commands and generate the video writing "exit". The video generated is called by default output.avi (can be updated in config.py): python3 generate_video.py https://1.bp.blogspot.com/-Tkwipt38RVY/YV4Lk3mfEuI/AAAAAAAAwJ4/iSiDlOQuGBUP_O4sdkNdbPG4_-ymCbyhwCNcBGAsYHQ/w640-h108/covert-tube_1_image1.png Run the listener and upload the video to Youtubepython3 main.py The listener will check the Youtube channel every 300 seconds by default (can be updated in config.py). First the video is uploaded: https://1.bp.blogspot.com/-JUQNhQB4kr8/YV4L5rNxQGI/AAAAAAAAwKA/T5vDhdRWlZc2yvdbjh7STJ_Z6NHgKm6CgCNcBGAsYHQ/w640-h540/covert-tube_2_image2.png After finding there is a new video in the channel, it is downloaded and the commands are executed: https://1.bp.blogspot.com/-dMmLbwkGoMI/YV4L_vIrZFI/AAAAAAAAwKE/jpMwYwENYnYXm-COA4tPzQlDmBFYYw60ACNcBGAsYHQ/w640-h184/covert-tube_3_image3.png We can see the output from the commands: https://1.bp.blogspot.com/-BlFFwEUZSoA/YV4MEF8ZsAI/AAAAAAAAwKI/XWyhSpS7k4E9jMu12cI5f2oqsgTt6dr5ACNcBGAsYHQ/w640-h348/covert-tube_4_image4.png ConfigurationUpdate the config.py file:

*
channel_id (Mandatory!!!): Get your Youtube channel ID from here.

*
api_key (Mandatory!!!): To get the API key create an application and generate the key from here.

*
image_type (Optional. Default: "qr_aes"): Different types of images for the video.

* "cleartext" creates images with the words of the commands.
* "qr" creates QR codes with the commands.
* "qr_aes" creates QR codes with the commands encrypted with AES.

*
upload_seconds_delay (Optional. Default: 300): Seconds delay until checking if a new video has been uploaded.

*
debug (Optional. Default: True): Print messages or not.

*
aes_key (Optional. Default: "covert-tube_2021"): Key for AES encryption, used in the "qr_aes" option.

*
generated_video_path (Optional. Default: "output.avi"): Path of video generated with generate_video.py.

*
downloaded_video_path (Optional. Default: "/tmp/test.mp4"): Path where the new video will be downloaded.

*
temp_folder (Optional. Default: "/tmp/"): Path where images of every frame from the video are stored, with the format image_X.png. Installing dependenciesFor all the project: pip3 install Pillow opencv-python youtube_dl pytesseract pyqrcode pypng pyzbar pycrypto For only the "cleartext" option (OCR): pip3 install Pillow opencv-python youtube_dl pytesseract For only the QR without encryption option: pip3 install Pillow opencv-python youtube_dl pyqrcode pypng pyzbar For only the QR with AES encryption option: pip3 install Pillow opencv-python youtube_dl pyqrcode pypng pyzbar pycrypto Creating a standalone binarypyinstaller --onefile main.py
cp dist/main covert-tube
rm -rf dist build
rm main.spec MotivationLately I have been reading about malware using Youtube for controlling their setting remotely. For example, Casbaneiro abuses YouTube to store its C&C server domains. Each video on the channels used by the threat actor contains a description and at the end of these there is a link to a bogus Facebook or Instagram url containing t[...]

___________________________
@hacking_Attack
@Hacking_Video

he C&C server domain (Welivesecurity blog). A second example is Numando, which abuses it by encrypting the data in the title of the Youtube videos (other Welivesecurity blog).

Knowing this I decided to create a PoC to test the control of remote systems uploading videos to Youtube but, instead of using the title or the description, using the content of the video. It allows to execute any command, but it could be used to change some settings remotely. So this is just a PoC, use it for educational purposes! Download Covert-Tube

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Hello friends!

I am working on a CTF challenge and I am stuck on a problem.I have a crypted hash I need to decrypt. But I have no hint which crypting is used.It does not look like a base64 or md5.I have 205 characters all upper case A-Z and 0-9 no special characters as sig. and a 8 character key "490d55dc". Is there any website or tool where I can paste my crypted string and it tells me which crypto procedure was possibly used on the string?Thanks for any help!:)

submitted by /u/ValPlusPlusle
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
[Advice] hear me out

So, I do some selling on fb marketplace and I always get people wanting me to ship them products and want to pay me via non-traditional ways. Basically they’re trying to get me to send them my stuff without payment.

I always put in my ad that I will not ship, but that never stops them from trying.

Anyways, yesterday I had a person reach out to me and try to get me to send them my product and once I got the shipping information, the pending payment would go to my acct. they’re expecting and email with the attached receipt.

Now, I’m a nice guy. I don’t do anyone harm on purpose and have a “live and let live” attitude. But, in this particular case, I’m feeling quite vindictive. So, my question is, can someone point me in the direction of figuring out where to get some ransom ware to send them as an attachment to teach them a lesson and help me feel all warm and fuzzy on the inside?

What I would like to do is disguise it as the receipt in an attachment.

Is this even possible? Legal? Or just a cunty thing to do? I don’t mind being petty at this point. What day you folks?

submitted by /u/Battlecat74
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
What are the most common hacks businesses deal with?

I’m doing a guidebook in my ethical hacking course, what information should I add along with the question in the title?

submitted by /u/TuneAway
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
welp..

an asshole internet leech hijacked my parents’ facebook page about their farm and is using it for streaming fkn league of legends. I made her change her gmail password but apart from that i dont know what else to do…facebook support is willing to do jack shit so i guess, if someone has any suggestions im open. If you think im not hones, shoot me a dm and i will send you a proof where u can see that their usual content has been a bit…strange lately. Thank you in advance

submitted by /u/Little_Screen4875
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Kodex : A Privacy And Security Engineering Toolkit: Discover, Understand, Pseudonymize, Anonymize, Encrypt And Securely Share Sensitive And Personal Data: Privacy And Security As Code

Kodex (Community Edition – CE) is an open-source toolkit for privacy and security engineering. It helps you to automate data security and data protection measures in your data engineering workflows. It offers the following functionality:

* Read data items from a variety of sources such as files, databases or message queues.
* Protect these data items using various privacy- & security enhancing transformations, like de-identification, masking, pseudonymization, anonymization or encryption.
* Send the protected items to a variety of destinations.

With Kodex, you can describe your data protection and data security workflows using a simple, declarative configuration language: Just like DevOps tools let you describe infrastructure as code, Kodex is a PrivacyOps & SecurityOps tool that let you describe privacy and security measures as code.

Kodex takes care of the boring and difficult aspects of privacy, such as

* Key management: Kodex manages encryption and pseudonymization keys for you (if you want that).
* Parameter management: Kodex keeps track of how every single data item was processed so you can prove the compliance of your data workflows and create an audit trail.
* Data transformation: Kodex implements modern cryptographic and statistical techniques to protect your data.

Getting started

To download and install Kodex from source, simply run

git clone https://github.com/kiprotect/kodex
cd kiprotect
make
make install

Documentation

CLI

The command line utility is the easiest way to get started analyzing and transforming data with Kodex.

Blueprints

Blueprints are the configuration files that specify how Kodex should load, analyze, transform and write data.

Actions

Actions perform specific operations on input items, e.g. to analyze or transform them. Everything that Kodex does with data is described by an action.

Kodex Community Edition (CE)

To install the community edition of Kodex, simply run

git clone https://github.com/kiprotect/kodex
cd kodex
make
make install

That’s it! You can now process blueprints with the kodexCLI command.

Kodex Enterprise Edition (EE)

To install the enterprise edition of Kodex (Kodex-EE), first download kodex-eefrom our web portal. The binary contains everything you need to get started. Notably, it provides an installcommand that (mostly) automates the installation of Kodex-EE for different environments. For example, to create a Docker compose configuration with all Kodex components and required external services, simply run

kodex-ee install –method docker-compose
cd docker-compose
docker-compose up

That should give you a fully functional test system with the Kodex frontend running on port 4242. The following sections explain in detail how to get Kodex-EE running on your infrastructure in a more permanent way.

Deployment Options

Kodex-EE is deployed as a set of stateless Linux services that interact with external databases and systems, as described above. A full deployment consists of at least one daemon and one API instance. Both of these services are stateless and can be configured using a simple settings file. The API is designed to be used behind a reverse proxy that handles TLS and load balancing (example configurations for servers like nginx or caddy is available).

Requirements

Kodex-EE requires several external services to function:

* A PostgreSQL database (preferrably version 9.6 or newer), which Kodex-EE uses to store meta-data about data streams, actions and parameters. Specific Kodex-EE plugins (e.g. Klaro, Konsens) use their own PostgreSQL schemas for data storage. For stability and perfo[...]

___________________________
@hacking_Attack
@Hacking_Video

rmance reasons it is advisable to provide separate PostgreSQL instances to these.
* A RabbitMQ server (preferrably version 3.8 or newer), or a Kafka server (preferrably version 2.7 or newer), which Kodex-EE uses to store intermediate data items during processing.
* An authentication service based on SSO, SAML, OpenID-Connect or LDAP, which Kodex-EE can use to authenticate users. The service must provide a mapping of users to organizations and roles within those organizations.
* A Redis database (preferrably version 5.0 or newer), which Kodex-EE uses to e.g. store API and data processing metrics as well as data necessary for rate limiting.
* Optionally, either a persistent directory/volume that is accessible from API and daemon nodes, or a “blob” storage service with an S3-compatible API. Kodex-EE uses these to store file data that is generated for certain background tasks.

The given minimum versions of services are what Kodex-EE is tested and deployed against, it might be possible to run it with older versions as well, though we cannot make any guarantees. The same is true when using newer versions of these services.

PostgreSQL Database(s)

Kodex-EE uses a primary database schema to store meta-data about things like data transformations, sources and destinations. For regular usage, only a small number of table entries are generated, and the primary database schema rarely grows beyond a few GB. Specific Kodex-EE plugins (e.g. Klaro or Konsens) use secondard database schemas to store data results, which grow in proportion to the processed data. Kodex-EE can implement a data retention schedule and will delete old data, nevertheless the required storage will depend on the amount of data processed. Please note that performance may also degrade if very large amounts of data are being processed. All Kodex-EE data schemas are designed to handle billions of rows of data without significant problems though, provided adequate hardware has been provisioned for the databases.

Redis Database(s)

Kodex-EE uses Redis for metrics collection and keeping of internal state during processing (e.g. for anonymization). Metrics are generated using a hierarchical time-spans (hours, days, weeks, months, years) and individual data items expire automatically. Internal state storage requirements will vary depending on the type of data processing and the number of items processed.

Message Queue(s) (RabbitMQ or Kafka)

Kodex-EE stores processed data in a message queue for internal processing and buffering. The amount of data stored in those queues depends on many factors, notably the number of incoming data items, the number of daemon nodes and the read/write capacity of data sources and destinations. Kodex-EE will automatically apply backpressure when writes to the internal queue become impossible.

Daemon & API Requirements

Kodex EE can run on systems with minimal resources like an embedded system or SoC.

Operating System

Kodex-EE is delivered as a statically compiled X64/AMD64 binary that is compatible with all mayor Linux distributions. Running Kodex-EE on Windows, MacOS and OpenBSD should be possible but is currently untested and unsupported.

Memory

We recommend at least 512 MB of available RAM for both the API and the daemon. Actual memory usage can vary depending on the workloads but Kodex EE will try to automatically limit data processing in order to not exhaust all available memory.

CPU

Both the daemon and the API process data concurrently in parallel threads, hence they can effectively utilize multiple CPU cores / processing threads.

Storage

Apart from task-specific storage mentioned above, neither the daemon nor the API require persistent on-disk data storage.

Networking

Kodex-EE needs to have connectivity to data sources and destinations from which it should read or to which it should write data. Processing speed will be limited by available network bandwidth.

Operations

Th[...]

___________________________
@hacking_Attack
@Hacking_Video