Vcpkg is the best way to install required third-party libs.Install vcpkg as described here: vcpkg#getting-started (https://github.com/microsoft/vcpkg#getting-started)git clone https://github.com/microsoft/vcpkg
.\vcpkg\bootstrap-vcpkg.bat
Integrate it to your VisualStudio env:vcpkg integrate install
At build time, VisualStudio will detect the vcpkg.json file and install required packages automatically.Current third-party libs:openssl (https://www.openssl.org/): OpenSSL is an open source project that provides a robust, commercial-grade, and full-featured toolkit for the Transport Layer Security (TLS) and Secure Sockets Layer (SSL) protocols.nlohmann-json (https://github.com/nlohmann/json): JSON for Modern C++distorm (https://github.com/gdabah/distorm): Powerful Disassembler (https://www.kitploit.com/search/label/Disassembler) Library For x86/AMD64cppcoro (https://github.com/lewissbaker/cppcoro): A library of C++ coroutine abstractions for the coroutines TS.
Examples
Info
info+-------------------------------------------------------------------------------------+
| Id | Model | Type | Partition | Size |
+-------------------------------------------------------------------------------------+
| 0 | Samsung SSD 850 EVO 500GB | Fixed SSD | GPT | 500107862016 (465.76 GiBs) |
| 1 | ST2000DM001-1ER164 | Fixed HDD | GPT | 2000398934016 (1.82 TiB) |
| 2 | 15EADS External | Fixed HDD | MBR | 1500301910016 (1.36 TiB) |
| 3 | osfdisk | Fixed HDD | MBR | 536870912 (512.00 MiBs) |
+-------------------------------------------------------------------------------------+
info disk=3Model : osfdisk
Version : 1
Serial :
Media Type : Fixed HDD
Size : 536870912 (512.00 MiBs)
Geometry : 512 bytes * 63 sectors * 255 tracks * 65 cylinders
Volume : MBR
+--------------------------------------------------------------------------------------------------+
| Id | Boot | Label | Mounted | Filesystem | Offset | Size |
+--------------------------------------------------------------------------------------------------+
| 1 | No | NTFSDRIVE | F:\ | Bitlocker | 0000000000000200 | 000000001ffffe00 (512.00 MiBs) |
+--------------------------------------------------------------------------------------------------+
info disk=3 volume=1Serial Number : 0000aa60-00002eae
Filesystem : Bitlocker
Bootable : False
Type : Fixed
Label : NTFSDRIVE
Offset : 512 (512.00 bytes)
Size : 536870400 (512.00 MiBs)
Free : 519442432 (495.38 MiBs)
Mounted : True (F:\)
Bitlocker : True (Unlocked)
MBR
mbr disk=2MBR from \\.\PhysicalDrive2
---------------------------
Disk signature : e4589462
Reserved bytes : 0000
Partition table :
+---------------------------------------------------------------------------------------------------+
| Id | Boot | Flags | Filesystem | First sector | Last sector | Offset | Sectors | Size |
+---------------------------------------------------------------------------------------------------+
| 1 | No | Principal | NTFS / exFAT | 0 2 3 | 255 254 255 | 128 | 16771072 | 8.00 GiBs |
+---------------------------------------------------------------------------------------------------+
MBR signature : 55aa
Strings:
[63] : Invalid partition table
[7b] : Error loading operating system
[9a] : Missing operating system
Disassemble Bootstrap Code [y/N] ? y
0000 : 33c0 : xor ax, ax
0002 : 8ed0 : mov ss, ax
0004 : bc007c : mov sp, 0x7c00
0007 : 8ec0 : mov es, ax
0009 : 8ed8 : mov ds, ax
000b : be007c : mov si, 0x7c00
000e : bf0006 : mov di, 0x600
0011 : b90002 : mov cx, 0x200
...
GPT
gpt disk=1Signature : EFI PART
Revision : 1.0
___________________________
@hacking_Attack
@Hacking_Video
.\vcpkg\bootstrap-vcpkg.bat
Integrate it to your VisualStudio env:vcpkg integrate install
At build time, VisualStudio will detect the vcpkg.json file and install required packages automatically.Current third-party libs:openssl (https://www.openssl.org/): OpenSSL is an open source project that provides a robust, commercial-grade, and full-featured toolkit for the Transport Layer Security (TLS) and Secure Sockets Layer (SSL) protocols.nlohmann-json (https://github.com/nlohmann/json): JSON for Modern C++distorm (https://github.com/gdabah/distorm): Powerful Disassembler (https://www.kitploit.com/search/label/Disassembler) Library For x86/AMD64cppcoro (https://github.com/lewissbaker/cppcoro): A library of C++ coroutine abstractions for the coroutines TS.
Examples
Info
info+-------------------------------------------------------------------------------------+
| Id | Model | Type | Partition | Size |
+-------------------------------------------------------------------------------------+
| 0 | Samsung SSD 850 EVO 500GB | Fixed SSD | GPT | 500107862016 (465.76 GiBs) |
| 1 | ST2000DM001-1ER164 | Fixed HDD | GPT | 2000398934016 (1.82 TiB) |
| 2 | 15EADS External | Fixed HDD | MBR | 1500301910016 (1.36 TiB) |
| 3 | osfdisk | Fixed HDD | MBR | 536870912 (512.00 MiBs) |
+-------------------------------------------------------------------------------------+
info disk=3Model : osfdisk
Version : 1
Serial :
Media Type : Fixed HDD
Size : 536870912 (512.00 MiBs)
Geometry : 512 bytes * 63 sectors * 255 tracks * 65 cylinders
Volume : MBR
+--------------------------------------------------------------------------------------------------+
| Id | Boot | Label | Mounted | Filesystem | Offset | Size |
+--------------------------------------------------------------------------------------------------+
| 1 | No | NTFSDRIVE | F:\ | Bitlocker | 0000000000000200 | 000000001ffffe00 (512.00 MiBs) |
+--------------------------------------------------------------------------------------------------+
info disk=3 volume=1Serial Number : 0000aa60-00002eae
Filesystem : Bitlocker
Bootable : False
Type : Fixed
Label : NTFSDRIVE
Offset : 512 (512.00 bytes)
Size : 536870400 (512.00 MiBs)
Free : 519442432 (495.38 MiBs)
Mounted : True (F:\)
Bitlocker : True (Unlocked)
MBR
mbr disk=2MBR from \\.\PhysicalDrive2
---------------------------
Disk signature : e4589462
Reserved bytes : 0000
Partition table :
+---------------------------------------------------------------------------------------------------+
| Id | Boot | Flags | Filesystem | First sector | Last sector | Offset | Sectors | Size |
+---------------------------------------------------------------------------------------------------+
| 1 | No | Principal | NTFS / exFAT | 0 2 3 | 255 254 255 | 128 | 16771072 | 8.00 GiBs |
+---------------------------------------------------------------------------------------------------+
MBR signature : 55aa
Strings:
[63] : Invalid partition table
[7b] : Error loading operating system
[9a] : Missing operating system
Disassemble Bootstrap Code [y/N] ? y
0000 : 33c0 : xor ax, ax
0002 : 8ed0 : mov ss, ax
0004 : bc007c : mov sp, 0x7c00
0007 : 8ec0 : mov es, ax
0009 : 8ed8 : mov ds, ax
000b : be007c : mov si, 0x7c00
000e : bf0006 : mov di, 0x600
0011 : b90002 : mov cx, 0x200
...
GPT
gpt disk=1Signature : EFI PART
Revision : 1.0
___________________________
@hacking_Attack
@Hacking_Video
GitHub
GitHub - microsoft/vcpkg: C++ Library Manager for Windows, Linux, and MacOS
C++ Library Manager for Windows, Linux, and MacOS. Contribute to microsoft/vcpkg development by creating an account on GitHub.
Header Size : 92
Header CRC32 : cc72e4d3
Reserved : 00000000
Current LBA : 1
Backup LBA : 3907029167
First Usable LBA : 34
Last Usable LBA : 3907029134
GUID : {a21d6495-cd58-4b8d-b968-dc337adcf6ac}
Entry LBA : 2
Entries Num : 128
Entries Size : 128
Partitions CRC32 : 0c9a0a25
Partition table : 2 entries
+------------------------------------------------------------------------------------------------------------------------+
| Id | Name | GUID | First sector | Last sector | Flags |
+------------------------------------------------------------------------------------------------------------------------+
| 1 | Microsoft reserved partition | {da0ac4a1-a78c-4053-bab5-36c70a71fe63} | 34 | 262177 | 000000000000 |
| 2 | Basic data partition | {4b4ea4b3-64a1-4c6d-bd4b-1c2b0e4e706f} | 264192 | 3907028991 | 000000000000 |
+------------------------------------------------------------------------------------------------------------------------+
VBR
vbr disk=3 volume=1Structure :
Jump : eb5890 (jmp 0x7c5a)
OEM id : -FVE-FS-
BytePerSector : 512
SectorPerCluster : 8
Reserved Sectors : 0
Number of FATs : 0
Root Max Entries : 0
Total Sectors : 0
Media Type : f8
SectorPerFat : 8160
SectorPerTrack : 63
Head Count : 255
FS Offset : 1
Total Sectors : 0
FAT Flags : 0000
FAT Version : 0000
Root Cluster : 0
FS Info Sector : 1
Backup BootSector: 6
Reserved : 00000000
Reserved : 00000000
Reserved : 00000000
Drive Number : 80
Reserved : 00
Ext. Boot Sign : 29
Serial Nuumber : 00000000
Volume Name : NO NAME
FileSystem Type : FAT32
Volume GUID : {4967d63b-2e29-4ad8-8399-f6a339e3d001}
FVE Block 1 : 0000000002100000
FVE Block 2 : 00000000059e4000
FVE Block 3 : 00000000092c8000
End marker : 55aa
Strings:
[00] : Remove disks or other media.
[1f] : Disk error
[2c] : Press any key to restart
Disassemble Bootstrap Code [y/N] ? y
7c5a : eb58 : jmp 0x7cb4
7c5c : 90 : nop
7c5d : 2d4656 : sub ax, 0x5646
7c60 : 45 : inc bp
7c61 : 2d4653 : sub ax, 0x5346
7c64 : 2d0002 : sub ax, 0x200
[...]
Extract
extract disk=3 volume=1 from=\bob.txt output=d:\bob.txt Volume:1 ----------------------------------------------- [+] Opening \\?\Volume{00023d5d-0000-0000-0002-000000000000}\ [-] Source : \bob.txt [-] Destination : d:\bob.txt [-] Record Num : 47 (0000002fh) [+] File extracted (42 bytes written) ">Extract file from \\.\PhysicalDrive3 > Volume:1
-----------------------------------------------
[+] Opening \\?\Volume{00023d5d-0000-0000-0002-000000000000}\
[-] Source : \bob.txt
[-] Destination : d:\bob.txt
[-] Record Num : 47 (0000002fh)
[+] File extracted (42 bytes written)
extract disk=0 volume=4 --system output=d:\system Volume:4 ----------------------------------------------- [+] Opening \\?\Volume{ee732b26-571c-4516-b8fd-32282aa8e66b}\ [-] Source : c:\windows\system32\config\system [-] Destination : d:\system [-] Record Num : 623636 (00098414h) [+] File extracted (19398656 bytes written) ">Extract file from \\.\PhysicalDrive0 > Volume:4
-----------------------------------------------
[+] Opening \\?\Volume{ee732b26-571c-4516-b8fd-32282aa8e66b}\
[-] Source : c:\windows\system32\config\system
[-] Destination : d:\system
[-] Record Num : 623636 (00098414h)
[+] File extracted (19398656 bytes written)
Image
___________________________
@hacking_Attack
@Hacking_Video
Header CRC32 : cc72e4d3
Reserved : 00000000
Current LBA : 1
Backup LBA : 3907029167
First Usable LBA : 34
Last Usable LBA : 3907029134
GUID : {a21d6495-cd58-4b8d-b968-dc337adcf6ac}
Entry LBA : 2
Entries Num : 128
Entries Size : 128
Partitions CRC32 : 0c9a0a25
Partition table : 2 entries
+------------------------------------------------------------------------------------------------------------------------+
| Id | Name | GUID | First sector | Last sector | Flags |
+------------------------------------------------------------------------------------------------------------------------+
| 1 | Microsoft reserved partition | {da0ac4a1-a78c-4053-bab5-36c70a71fe63} | 34 | 262177 | 000000000000 |
| 2 | Basic data partition | {4b4ea4b3-64a1-4c6d-bd4b-1c2b0e4e706f} | 264192 | 3907028991 | 000000000000 |
+------------------------------------------------------------------------------------------------------------------------+
VBR
vbr disk=3 volume=1Structure :
Jump : eb5890 (jmp 0x7c5a)
OEM id : -FVE-FS-
BytePerSector : 512
SectorPerCluster : 8
Reserved Sectors : 0
Number of FATs : 0
Root Max Entries : 0
Total Sectors : 0
Media Type : f8
SectorPerFat : 8160
SectorPerTrack : 63
Head Count : 255
FS Offset : 1
Total Sectors : 0
FAT Flags : 0000
FAT Version : 0000
Root Cluster : 0
FS Info Sector : 1
Backup BootSector: 6
Reserved : 00000000
Reserved : 00000000
Reserved : 00000000
Drive Number : 80
Reserved : 00
Ext. Boot Sign : 29
Serial Nuumber : 00000000
Volume Name : NO NAME
FileSystem Type : FAT32
Volume GUID : {4967d63b-2e29-4ad8-8399-f6a339e3d001}
FVE Block 1 : 0000000002100000
FVE Block 2 : 00000000059e4000
FVE Block 3 : 00000000092c8000
End marker : 55aa
Strings:
[00] : Remove disks or other media.
[1f] : Disk error
[2c] : Press any key to restart
Disassemble Bootstrap Code [y/N] ? y
7c5a : eb58 : jmp 0x7cb4
7c5c : 90 : nop
7c5d : 2d4656 : sub ax, 0x5646
7c60 : 45 : inc bp
7c61 : 2d4653 : sub ax, 0x5346
7c64 : 2d0002 : sub ax, 0x200
[...]
Extract
extract disk=3 volume=1 from=\bob.txt output=d:\bob.txt Volume:1 ----------------------------------------------- [+] Opening \\?\Volume{00023d5d-0000-0000-0002-000000000000}\ [-] Source : \bob.txt [-] Destination : d:\bob.txt [-] Record Num : 47 (0000002fh) [+] File extracted (42 bytes written) ">Extract file from \\.\PhysicalDrive3 > Volume:1
-----------------------------------------------
[+] Opening \\?\Volume{00023d5d-0000-0000-0002-000000000000}\
[-] Source : \bob.txt
[-] Destination : d:\bob.txt
[-] Record Num : 47 (0000002fh)
[+] File extracted (42 bytes written)
extract disk=0 volume=4 --system output=d:\system Volume:4 ----------------------------------------------- [+] Opening \\?\Volume{ee732b26-571c-4516-b8fd-32282aa8e66b}\ [-] Source : c:\windows\system32\config\system [-] Destination : d:\system [-] Record Num : 623636 (00098414h) [+] File extracted (19398656 bytes written) ">Extract file from \\.\PhysicalDrive0 > Volume:4
-----------------------------------------------
[+] Opening \\?\Volume{ee732b26-571c-4516-b8fd-32282aa8e66b}\
[-] Source : c:\windows\system32\config\system
[-] Destination : d:\system
[-] Record Num : 623636 (00098414h)
[+] File extracted (19398656 bytes written)
Image
___________________________
@hacking_Attack
@Hacking_Video
Update Offset : 48
Update Number : 3
$LogFile LSN : 274035114
Sequence Number : 5
Hardlink Count : 1
Attribute Offset : 56
Flags : In_use | Directory
Real Size : 704
Allocated Size : 1024
Base File Record : 0
Next Attribute ID : 56
MFT Record Index : 5
Update Seq Number : 4461
Update Seq Array : 00000000
Attributes:
-----------
+------------------------------------------------------------------------------------------------------------------+
| Id | Type | Non-resident | Length | Overview |
+------------------------------------------------------------------------------------------------------------------+
| 1 | $STANDARD_INFORMATION | False | 72 | File Created Time : 2009-12-02 02:03:31 |
| | | | | Last File Write Time : 2020-02-24 19:42:23 |
| | | | | FileRecord Changed Time : 2020-02-24 19:42:23 |
| | | | | Last Access Time : 2020-02-24 19:42:23 |
| | | | | Permissions : |
| | | | | read_only : 0 |
| | | | | hidden : 1 |
| | | | | system : 1 |
| | | | | device : 0 |
| | | | | normal : 0 |
| | | | | temporary : 0 |
| | | | | sparse : 0 |
| | | | | reparse_point : 0 |
| | | | | compressed : 0 |
| | | | | offline : 0 |
| | | | | not_indexed : 1 |
| | | | | encrypted : 0 |
| | | | | Max Number of Versions : 0 |
| | | | | Version Number : 0 |
+------------------------------------------------------------------------------------------------------------------+
| 2 | $FILE_NAME | False | 68 | Parent Dir Record Index : 5 |
| | | | | Parent Dir Sequence Num : 5 |
| | | | | File Created Time : 2009-12-02 02:03:31 |
| | | | | Last File Write Time : 2011-12-24 03:13:12 |
| | | | | FileRecord Changed Time : 2011-12-24 03:13:12 |
| | | | | Last Access Time : 1970-01-01 00:59:59 |
| | | | | Allocated Size : 0 |
___________________________
@hacking_Attack
@Hacking_Video
Update Number : 3
$LogFile LSN : 274035114
Sequence Number : 5
Hardlink Count : 1
Attribute Offset : 56
Flags : In_use | Directory
Real Size : 704
Allocated Size : 1024
Base File Record : 0
Next Attribute ID : 56
MFT Record Index : 5
Update Seq Number : 4461
Update Seq Array : 00000000
Attributes:
-----------
+------------------------------------------------------------------------------------------------------------------+
| Id | Type | Non-resident | Length | Overview |
+------------------------------------------------------------------------------------------------------------------+
| 1 | $STANDARD_INFORMATION | False | 72 | File Created Time : 2009-12-02 02:03:31 |
| | | | | Last File Write Time : 2020-02-24 19:42:23 |
| | | | | FileRecord Changed Time : 2020-02-24 19:42:23 |
| | | | | Last Access Time : 2020-02-24 19:42:23 |
| | | | | Permissions : |
| | | | | read_only : 0 |
| | | | | hidden : 1 |
| | | | | system : 1 |
| | | | | device : 0 |
| | | | | normal : 0 |
| | | | | temporary : 0 |
| | | | | sparse : 0 |
| | | | | reparse_point : 0 |
| | | | | compressed : 0 |
| | | | | offline : 0 |
| | | | | not_indexed : 1 |
| | | | | encrypted : 0 |
| | | | | Max Number of Versions : 0 |
| | | | | Version Number : 0 |
+------------------------------------------------------------------------------------------------------------------+
| 2 | $FILE_NAME | False | 68 | Parent Dir Record Index : 5 |
| | | | | Parent Dir Sequence Num : 5 |
| | | | | File Created Time : 2009-12-02 02:03:31 |
| | | | | Last File Write Time : 2011-12-24 03:13:12 |
| | | | | FileRecord Changed Time : 2011-12-24 03:13:12 |
| | | | | Last Access Time : 1970-01-01 00:59:59 |
| | | | | Allocated Size : 0 |
___________________________
@hacking_Attack
@Hacking_Video
Deep Web
LGBT+ community forums on the dark web
Totally new to this! I was just wondering if there are any known LGBT+ communities that operate community forums that can be accessed through TOR/ on the dark web?
Would the point, though, be that these would be hidden? How does anyone go about finding their communities on an anonymous platform?
submitted by /u/vectorsbythesea
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
LGBT+ community forums on the dark web
Totally new to this! I was just wondering if there are any known LGBT+ communities that operate community forums that can be accessed through TOR/ on the dark web?
Would the point, though, be that these would be hidden? How does anyone go about finding their communities on an anonymous platform?
submitted by /u/vectorsbythesea
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
LGBT+ community forums on the dark web
Totally new to this! I was just wondering if there are any known LGBT+ communities that operate community forums that can be accessed through TOR/...
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Cybersecurity Awareness Month: CoverMe Provides Tips for Enhancing Online Privacy
https://cdn-images-1.medium.com/max/1200/1*1-E78SCcBwO-t2n8t3x9Zw.png
Cybersecurity experts explain why it is imperative to raise cybersecurity awareness and upgrade online practices.
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Cybersecurity Awareness Month: CoverMe Provides Tips for Enhancing Online Privacy
https://cdn-images-1.medium.com/max/1200/1*1-E78SCcBwO-t2n8t3x9Zw.png
Cybersecurity experts explain why it is imperative to raise cybersecurity awareness and upgrade online practices.
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
Cybersecurity Awareness Month: CoverMe Provides Tips for Enhancing Online Privacy
Cybersecurity experts explain why it is imperative to raise cybersecurity awareness and upgrade online practices.
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
TryHackMe — Basic Pentesting Çözümü
https://cdn-images-1.medium.com/max/1668/1*0ngQsTct4mUEm5zuk6_aSg.png
Bu yazımda TryHackMe’nin Basic Pentesting adlı odasını nasıl çözdüğümü yazacağım. İngilizce kaynak çok fakat Türkçe kaynağın yetersiz…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
TryHackMe — Basic Pentesting Çözümü
https://cdn-images-1.medium.com/max/1668/1*0ngQsTct4mUEm5zuk6_aSg.png
Bu yazımda TryHackMe’nin Basic Pentesting adlı odasını nasıl çözdüğümü yazacağım. İngilizce kaynak çok fakat Türkçe kaynağın yetersiz…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
TryHackMe — Basic Pentesting Çözümü
Bu yazımda TryHackMe’nin Basic Pentesting adlı odasını nasıl çözdüğümü yazacağım. İngilizce kaynak çok fakat Türkçe kaynağın yetersiz…
(Out of Scope)-IDOR allows access to billing data and address of any user.
Hey fellow hackers and bug hunters,Continue reading on Medium »
Read more...
Hey fellow hackers and bug hunters,Continue reading on Medium »
Read more...
Polygon Double-Spend Bug Fix Postmortem — $2m Bounty
SummaryContinue reading on Immunefi »
Read more...
SummaryContinue reading on Immunefi »
Read more...
(Out of Scope)-IDOR allows access to billing data and address of any user.
https://rammk01.medium.com/out-of-scope-idor-allow-access-to-billing-data-and-address-of-any-user-8596eaea82eb?source=rss------bug_bounty-5
___________________________
@hacking_Attack
@Hacking_Video
https://rammk01.medium.com/out-of-scope-idor-allow-access-to-billing-data-and-address-of-any-user-8596eaea82eb?source=rss------bug_bounty-5
___________________________
@hacking_Attack
@Hacking_Video
Medium
(Out of Scope)-IDOR allows access to billing data and address of any user.
Hey fellow hackers and bug hunters,
Hey fellow hackers and bug hunters,Continue reading on Medium » (https://rammk01.medium.com/out-of-scope-idor-allow-access-to-billing-data-and-address-of-any-user-8596eaea82eb?source=rss------bug_bounty-5)
___________________________
@hacking_Attack
@Hacking_Video
___________________________
@hacking_Attack
@Hacking_Video
Medium
(Out of Scope)-IDOR allows access to billing data and address of any user.
Hey fellow hackers and bug hunters,
Polygon Double-Spend Bug Fix Postmortem — $2m Bounty
https://medium.com/immunefi/polygon-double-spend-bug-fix-postmortem-2m-bounty-5a1db09db7f1?source=rss------bug_bounty-5
___________________________
@hacking_Attack
@Hacking_Video
https://medium.com/immunefi/polygon-double-spend-bug-fix-postmortem-2m-bounty-5a1db09db7f1?source=rss------bug_bounty-5
___________________________
@hacking_Attack
@Hacking_Video
Medium
Polygon Double-Spend Bug Fix Postmortem — $2m Bounty
Summary
SummaryContinue reading on Immunefi » (https://medium.com/immunefi/polygon-double-spend-bug-fix-postmortem-2m-bounty-5a1db09db7f1?source=rss------bug_bounty-5)
___________________________
@hacking_Attack
@Hacking_Video
___________________________
@hacking_Attack
@Hacking_Video
Medium
Polygon Double-Spend Bug Fix Postmortem — $2m Bounty
Summary
Hacking Articles Tips Tricks Videos Tutorials
Photo
KitPloit - PenTest Tools!
NTFSTool - Forensics Tool For NTFS (Parser, MTF, Bitlocker, Deleted Files)
https://blogger.googleusercontent.com/img/a/AVvXsEgfikieDow3Vs3xbDGEeDQB-if52TMg-BNk_42ZOSCE0yDmv1Y-glgpE4pUWqV9ji19lsG7Bie6rr15HLJeKqfcv_8YxirilpUIDXH_9pgaw_bYawSDDf-9TDA7DhQQmp5riHe0bzKkZy_7SH7fM1AjnxfQr60h5_KQ-fwaOiSfCANvWCtioTDr4d6XKw=w320-h320 NTFSTool is a forensic tool focused on NTFS volumes. It supports reading partition info (mbr, partition table, vbr) but also information on bitlocker encrypted volume, EFS encrypted files and more.
See below for some examples of the features! FeaturesForensicsNTFSTool displays the complete structure of master boot record, volume boot record, partition table and MFT file record. It is also possible to dump any file (even $mft or SAM) or parse USN journals, LogFile including streams from Alternate Data Stream (ADS). The undelete command will search for any file record marked as "not in use" and allow you to retrieve the file (or part of the file if it was already rewritten). It support input from image file or live disk but you can also use tools like OSFMount to mount your disk image. Sparse and compressed files are also supported. Bitlocker supportFor bitlocked partition, it can display FVE records, check a password and key (bek, password, recovery key), extract VMK and FVEK. There is no bruteforce feature because GPU-based cracking is better (see Bitcracker and Hashcat) but you can get the hash for these tools. EFS supportIn the current version, masterkeys, private keys and certificates can be listed, displayed and decrypted using needed inputs (SID, password). Certificates with private keys can be exported using the backup command. Reinmport the backup on another machine to be able to read your encrypted file again!
More information on Mimikatz Wiki
Decryption of EFS encrypted files is coming! ShellThere is a limited shell with few commands (exit, cd, ls, cat, pwd, cp). Help & ExamplesHelp command displays description and examples for each command. Options can be entered as decimal or hex number with "0x" prefix (ex: inode).
* No documentation
Feel free to open an issue or ask for a new feature! BuildVcpkg is the best way to install required third-party libs.[...]
___________________________
@hacking_Attack
@Hacking_Video
NTFSTool - Forensics Tool For NTFS (Parser, MTF, Bitlocker, Deleted Files)
https://blogger.googleusercontent.com/img/a/AVvXsEgfikieDow3Vs3xbDGEeDQB-if52TMg-BNk_42ZOSCE0yDmv1Y-glgpE4pUWqV9ji19lsG7Bie6rr15HLJeKqfcv_8YxirilpUIDXH_9pgaw_bYawSDDf-9TDA7DhQQmp5riHe0bzKkZy_7SH7fM1AjnxfQr60h5_KQ-fwaOiSfCANvWCtioTDr4d6XKw=w320-h320 NTFSTool is a forensic tool focused on NTFS volumes. It supports reading partition info (mbr, partition table, vbr) but also information on bitlocker encrypted volume, EFS encrypted files and more.
See below for some examples of the features! FeaturesForensicsNTFSTool displays the complete structure of master boot record, volume boot record, partition table and MFT file record. It is also possible to dump any file (even $mft or SAM) or parse USN journals, LogFile including streams from Alternate Data Stream (ADS). The undelete command will search for any file record marked as "not in use" and allow you to retrieve the file (or part of the file if it was already rewritten). It support input from image file or live disk but you can also use tools like OSFMount to mount your disk image. Sparse and compressed files are also supported. Bitlocker supportFor bitlocked partition, it can display FVE records, check a password and key (bek, password, recovery key), extract VMK and FVEK. There is no bruteforce feature because GPU-based cracking is better (see Bitcracker and Hashcat) but you can get the hash for these tools. EFS supportIn the current version, masterkeys, private keys and certificates can be listed, displayed and decrypted using needed inputs (SID, password). Certificates with private keys can be exported using the backup command. Reinmport the backup on another machine to be able to read your encrypted file again!
More information on Mimikatz Wiki
Decryption of EFS encrypted files is coming! ShellThere is a limited shell with few commands (exit, cd, ls, cat, pwd, cp). Help & ExamplesHelp command displays description and examples for each command. Options can be entered as decimal or hex number with "0x" prefix (ex: inode).
ntfstool help [command] CommandDescriptioninfoDisplay information for all disks and volumesmbrDisplay MBR structure, code and partitions for a diskgptDisplay GPT structure, code and partitions for a diskvbrDisplay VBR structure and code for a specidifed volume (ntfs, fat32, fat1x, bitlocker supported)extractExtract a file from a volume.imageCreate an image file of a disk or volume.mftDisplay FILE record details for a specified MFT inode. Almost all attribute types supportedbtreeDisplay VCN content and Btree index for an inodebitlockerDisplay detailed information and hash ($bitlocker$) for all VMK. It is possible to test a password or recovery key. If it is correct, the decrypted VMK and FVEK is displayed.bitdecryptDecrypt a volume to a file using password, recovery key or bek.efs.backupExport EFS keys in PKCS12 (pfx) format.efs.certificateList, display and export system certificates (SystemCertificates/My/Certificates).efs.keyList, display, decrypt and export private keys (Crypto/RSA).efs.masterkeyList, display and decrypt masterkeys (Protect).fveDisplay information for the specified FVE block (0, 1, 2)reparseParse and display reparse points from $Extend$Reparse.logfileDump $LogFile file in specified format: csv, json, raw.usnDump $UsnJrnl file in specified format: csv, json, raw.shadowList volume shadow snapshots from selected disk and volume.streamsDisplay Alternate Data StreamsundeleteSearch and extract deleted files for a volume.shellStart a mini Unix-like shellsmartDisplay S.M.A.R.T data Limitations* Some unsupported cases. WIP.* No documentation
Feel free to open an issue or ask for a new feature! BuildVcpkg is the best way to install required third-party libs.[...]
___________________________
@hacking_Attack
@Hacking_Video
Kitploit
Kitploit – Maintenance in Progress
Kitploit is temporarily under maintenance. We’ll be back shortly with improvements.