Microsoft Antimalware Scan Interface Bypasses
https://www.reddit.com/r/redteamsec/comments/q7x4op/microsoft_antimalware_scan_interface_bypasses/

<!-- SC_OFF -->Antimalware Scan Interface, or AMSI in short, is an interface standard for Windows components like User Account Control, PowerShell, Windows Script Host, Macro’s, Javascript, and VBScript to scan for malicious content. AMSI sits in the middle of an application and an AMSI provider, like Microsoft Defender, to identify malicious content. In this blog post, I will go through the technical details on bypassing AMSI using a technique called memory patching. https://thalpius.com/2021/10/14/microsoft-windows-antimalware-scan-interface-bypasses/ <!-- SC_ON --> submitted by /u/thalpius (https://www.reddit.com/user/thalpius)
[link] (https://www.reddit.com/r/redteamsec/comments/q7x4op/microsoft_antimalware_scan_interface_bypasses/) [comments] (https://www.reddit.com/r/redteamsec/comments/q7x4op/microsoft_antimalware_scan_interface_bypasses/)

hacking: security in practice
I got hacked with 2 step verification on and I don't know how to stop any attempts such as this

There was a Linux system connected to my account so I removed it and it was 7 days ago so on 7th Oct which is bad but there was no notification for 2 step verification which is worse , help me block further attempts such as these

submitted by /u/GoddamLegend
[link] [comments]

Xmap - A Fast Network Scanner Designed For Performing Internet-wide IPv6 &Amp; IPv4 Network Research Scanning
http://www.kitploit.com/2021/10/xmap-fast-network-scanner-designed-for.html

___________________________
@hacking_Attack
@Hacking_Video

Installation
The latest stable release of XMap is version 1.0.0 and supports Linux, macOS, and BSD. We recommend installing XMap from HEAD rather than using a distro package manager (not supported yet). Instructions on building XMap from source can be found in INSTALL (https://github.com/idealeer/xmap/blob/master/INSTALL.md).
Usage
A guide to using XMap can be found in our GitHub Wiki (https://github.com/idealeer/xmap/wiki). Simple commands and options to using XMap can be found in USAGE (https://github.com/idealeer/xmap/blob/master/src/xmap.1.ronn).
Paper
Fast IPv6 Network Periphery Discovery (https://www.kitploit.com/search/label/Discovery) and Security Implications. Abstract. Numerous measurement researches have been performed to discover the IPv4 network security issues by leveraging the fast Internet-wide scanning techniques. However, IPv6 brings the 128-bits address space and renders brute-force (https://www.kitploit.com/search/label/Brute-force) network scanning impractical. Although significant efforts have been dedicated to enumerating active IPv6 hosts, limited by technique efficiency and probing accuracy, large-scale empirical measurement studies under the increasing IPv6 networks are infeasible now. To fill this research gap, by leveraging the extensively adopted IPv6 address allocation strategy, we propose a novel IPv6 network periphery discovery approach. Specifically, XMap, a fast network scanner, is developed to find the periphery, such as a home router. We evaluate it on twelve prominent Internet service providers and harvest 52M active peripheries. Grounded on these found devices, we explore IPv6 network risks of the unintended exposed security services and the flawed traffic routing strategies. First, we demonstrate the unintended exposed security services in IPv6 networks, such as DNS, and HTTP, have become emerging security risks by analyzing 4.7M peripheries. Second, by inspecting the periphery’s packet routing strategies, we present the flawed implementations of IPv6 routing protocol affecting 5.8M router devices. Attackers can exploit this common vulnerability (https://www.kitploit.com/search/label/Vulnerability) to conduct effective routing loop attacks, inducing DoS to the ISP’s and home routers with an amplification factor of >200. We responsibly disclose those issues to all involved vendors and ASes and discuss mitigation solutions. Our research results indicate that the security community should revisit IPv6 network strategies immediately. Authors. Xiang Li (https://netsec.ccert.edu.cn/people/lx19), Baojun Liu (https://netsec.ccert.edu.cn/people/lbj20/), Xiaofeng Zheng, Haixin Duan (https://netsec.ccert.edu.cn/people/duanhx/), Qi Li (https://netsec.ccert.edu.cn/people/qli/), Youjun Huang. Conference. Proceedings of the 2021 IEEE/IFIP International Conference on Dependable Systems and Networks (DSN '21) Paper. [PDF] (https://idealeer.github.io/publication/dsn21/dsn21-paper-li.pdf), [Slides] (https://idealeer.github.io/publication/dsn21/dsn21-slides-li.pdf) and [Video] (https://www.youtube.com/watch?v=aMlo_91-RlY). CNVD/CVE. [Lists] (https://idealeer.github.io/publication/dsn21/).
License and Copyright
XMap Copyright 2021 Xiang Li from Network and Information Security Lab Tsinghua University Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance (https://www.kitploit.com/search/label/Compliance) with the License. You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0 Unless required by applicable law or agreed to in writing, software distributed under the License is distributed (https://www.kitploit.com/search/label/Distributed) on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See LICENSE for the specific language governing permissions and limitations under the License.

___________________________
@hacking_Attack
@Hacking_Video

Download Xmap (https://github.com/idealeer/xmap)

___________________________
@hacking_Attack
@Hacking_Video

DMZ servers to Internal Domain Controllers?
https://www.reddit.com/r/Pentesting/comments/q7xb2w/dmz_servers_to_internal_domain_controllers/

Hi all, I work as a Penetration tester and as part of our testing we conduct firewall reviews. I regularly see companies extending their internal domain into their DMZ and firewall rules allowing DMZ server to smb directly to Internal Domain Controllers. Why? I know this to be bad practice and shouldn't be done however what is the solution? What should they be doing? Read only Domain controller? Separate DMZ domain? But what if there are DMZ servers that staff need to use their AD account to authenticate to like reverse proxy for RDP or email? Any help to clear this up in my mind is greatly appreciated! Thanks all! submitted by /u/HazardNet (https://www.reddit.com/user/HazardNet)
[link] (https://www.reddit.com/r/Pentesting/comments/q7xb2w/dmz_servers_to_internal_domain_controllers/) [comments] (https://www.reddit.com/r/Pentesting/comments/q7xb2w/dmz_servers_to_internal_domain_controllers/)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
I NEED A HACKER TO CHANGE MY UNIVERSITY GPA

https://cdn-images-1.medium.com/max/1024/0*yA8sX6uB8WrbPR68
I NEED A HACKER TO CHANGE MY UNIVERSITY GPA

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
HOW TO HACK A UNIVERSITY WEBSITE

https://cdn-images-1.medium.com/max/1200/0*yCHWQ19P3Ho8Edm0
Hack University Website To Change Grades Easily

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Finding known exploits for bugbounties.
https://bountyget.medium.com/finding-known-exploits-for-bugbounties-a3d995261e28?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hello everyone, in this blog we will be looking at how I found criticals on a private program using known vulnerabilities.
This is a…Continue reading on Medium » (https://bountyget.medium.com/finding-known-exploits-for-bugbounties-a3d995261e28?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
Xmap - A Fast Network Scanner Designed For Performing Internet-wide IPv6 &Amp; IPv4 Network Research Scanning

https://blogger.googleusercontent.com/img/a/AVvXsEiIykjf6pqIxFErLOWXeKbCoONaK4Vd-4egAmOuIUTd6DLoQuUxne5mGJrBRGJI2_r4JktIN5LWsa68F5OPdvSyeQX9YIPvLjDpu_DzajIvVy6s--D1zZWVQKwiaAoz0qAMtOZKw3AKAHdgUGPz27D-ZSm73xxrHYzb83uPdXiO4fG2Eb36_ANHi5BHLg=w640-h278 XMap is a fast network scanner designed for performing Internet-wide IPv6 & IPv4 network research scanning.

XMap is reimplemented and improved thoroughly from ZMap and is fully compatible with ZMap, armed with the "5 minutes" probing speed and novel scanning techniques. XMap is capable of scanning the 32-bits address space in under 45 minutes. With a 10 gigE connection and PF_RING, XMap can scan the 32-bits address space in under 5 minutes. Moreover, leveraging the novel IPv6 scanning approach, XMap can discover the IPv6 Network Periphery fast. Furthermore, XMap can scan the network space randomly with any length and at any position, such as 2001:db8::/32-64 and 192.168.0.1/16-20. Besides, XMap can probe multiple ports simultaneously.

XMap operates on GNU/Linux, Mac OS, and BSD. XMap currently has implemented probe modules for ICMP Echo scans, TCP SYN scans, and UDP probes.

With banner grab and TLS handshake tool, ZGrab2, more involved scans could be performed. InstallationThe latest stable release of XMap is version 1.0.0 and supports Linux, macOS, and BSD. We recommend installing XMap from HEAD rather than using a distro package manager (not supported yet).

Instructions on building XMap from source can be found in INSTALL. UsageA guide to using XMap can be found in our GitHub Wiki.

Simple commands and options to using XMap can be found in USAGE. PaperFast IPv6 Network Periphery Discovery and Security Implications.

Abstract. Numerous measurement researches have been performed to discover the IPv4 network security issues by leveraging the fast Internet-wide scanning techniques. However, IPv6 brings the 128-bits address space and renders brute-force network scanning impractical. Although significant efforts have been dedicated to enumerating active IPv6 hosts, limited by technique efficiency and probing accuracy, large-scale empirical measurement studies under the increasing IPv6 networks are infeasible now.

To fill this research gap, by leveraging the extensively adopted IPv6 address allocation strategy, we propose a novel IPv6 network periphery discovery approach. Specifically, XMap, a fast network scanner, is developed to find the periphery, such as a home router. We evaluate it on twelve prominent Internet service providers and harvest 52M active peripheries. Grounded on these found devices, we explore IPv6 network risks of the unintended exposed security services and the flawed traffic routing strategies. First, we demonstrate the unintended exposed security services in IPv6 networks, such as DNS, and HTTP, have become emerging security risks by analyzing 4.7M peripheries. Second, by inspecting the periphery’s packet routing strategies, we present the flawed implementations of IPv6 routing protocol affecting 5.8M router devices. Attackers can exploit this common vulnerability to conduct effective routing loop attacks, inducing DoS to the ISP’s and home routers with an amplification factor of >200. We responsibly disclose those issues to all involved vendors and ASes and discuss mitigation solutions. Our research results indicate that the security community should revisit IPv6 network strategies immediately.

Authors. Xiang Li, Baojun Liu, Xiaofeng Zheng, Haixin Duan, Qi Li, Youjun Huang.

Conference. Proceedings of the 2021 IEEE/IFIP International Conference on Dependable Systems and Networks (DSN '21)

Paper. [PDF], [Slides] and [Video].

CNVD/CVE. [Lists]. License and CopyrightX[...]

___________________________
@hacking_Attack
@Hacking_Video

Map Copyright 2021 Xiang Li from Network and Information Security Lab Tsinghua University

Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See LICENSE for the specific language governing permissions and limitations under the License. Download Xmap

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
6 Lessons From the Expiration of the Let's Encrypt Root Certificate

Fallout from the transition highlights the need for organizations to monitor and have processes for updating CA roots, experts say.

GoPhish tracking email malfunction!
https://www.reddit.com/r/redteamsec/comments/q7zzsf/gophish_tracking_email_malfunction/

Hello everyone, I'm doing local phishing simulation with gophish but cant seem to track whenever I open the email. Quick lab guide: ​ [SERVER SIDE] GoPhish running on kali and port 80 is exposed to the whole /24 network. GoPhish is setup with gmail smtp with less secure apps enabled. Tracker image is added to every email template I use. ​ [CLIENT SIDE] Windows 10 fully pathed and updated, running outlook 2016 and gmail through web browser. ​ [OBSERVATION] When phishing emails are opened from web (gmail) all of the images load but still gophish does not note the action. When phishing emails are opened from Outlook 2016 the images do not render unless you click pop up > download all images and then gophish notes this action and counts email to be opened. ​ [QUESTION] Is there a way to bypass this pop-up action and gmail security to count email being open without performing additional actions? ​ Thanks :) submitted by /u/luzunov (https://www.reddit.com/user/luzunov)
[link] (https://www.reddit.com/r/redteamsec/comments/q7zzsf/gophish_tracking_email_malfunction/) [comments] (https://www.reddit.com/r/redteamsec/comments/q7zzsf/gophish_tracking_email_malfunction/)

___________________________
@hacking_Attack
@Hacking_Video

Into the art of Binary Exploitation 0x000003 [Prominence of Integer-Overflow]
https://infosecwriteups.com/into-the-art-of-binary-exploitation-0x000003-prominence-of-integer-overflow-cea6abd2cce4?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video