Update Offset : 48
Update Number : 3
$LogFile LSN : 274035114
Sequence Number : 5
Hardlink Count : 1
Attribute Offset : 56
Flags : In_use | Directory
Real Size : 704
Allocated Size : 1024
Base File Record : 0
Next Attribute ID : 56
MFT Record Index : 5
Update Seq Number : 4461
Update Seq Array : 00000000

Attributes:
-----------

+------------------------------------------------------------------------------------------------------------------+
| Id | Type | Non-resident | Length | Overview |
+------------------------------------------------------------------------------------------------------------------+
| 1 | $STANDARD_INFORMATION | False | 72 | File Created Time : 2009-12-02 02:03:31 |
| | | | | Last File Write Time : 2020-02-24 19:42:23 |
| | | | | FileRecord Changed Time : 2020-02-24 19:42:23 |
| | | | | Last Access Time : 2020-02-24 19:42:23 |
| | | | | Permissions : |
| | | | | read_only : 0 |
| | | | | hidden : 1 |
| | | | | system : 1 |
| | | | | device : 0 |
| | | | | normal : 0 |
| | | | | temporary : 0 |
| | | | | sparse : 0 |
| | | | | reparse_point : 0 |
| | | | | compressed : 0 |
| | | | | offline : 0 |
| | | | | not_indexed : 1 |
| | | | | encrypted : 0 |
| | | | | Max Number of Versions : 0 |
| | | | | Version Number : 0 |
+------------------------------------------------------------------------------------------------------------------+
| 2 | $FILE_NAME | False | 68 | Parent Dir Record Index : 5 |
| | | | | Parent Dir Sequence Num : 5 |
| | | | | File Created Time : 2009-12-02 02:03:31 |
| | | | | Last File Write Time : 2011-12-24 03:13:12 |
| | | | | FileRecord Changed Time : 2011-12-24 03:13:12 |
| | | | | Last Access Time : 1970-01-01 00:59:59 |
| | | | | Allocated Size : 0 |

___________________________
@hacking_Attack
@Hacking_Video

Deep Web
LGBT+ community forums on the dark web

Totally new to this! I was just wondering if there are any known LGBT+ communities that operate community forums that can be accessed through TOR/ on the dark web?

Would the point, though, be that these would be hidden? How does anyone go about finding their communities on an anonymous platform?

submitted by /u/vectorsbythesea
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Cybersecurity Awareness Month: CoverMe Provides Tips for Enhancing Online Privacy

https://cdn-images-1.medium.com/max/1200/1*1-E78SCcBwO-t2n8t3x9Zw.png
Cybersecurity experts explain why it is imperative to raise cybersecurity awareness and upgrade online practices.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
TryHackMe — Basic Pentesting Çözümü

https://cdn-images-1.medium.com/max/1668/1*0ngQsTct4mUEm5zuk6_aSg.png
Bu yazımda TryHackMe’nin Basic Pentesting adlı odasını nasıl çözdüğümü yazacağım. İngilizce kaynak çok fakat Türkçe kaynağın yetersiz…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

(Out of Scope)-IDOR allows access to billing data and address of any user.

Hey fellow hackers and bug hunters,Continue reading on Medium »
Read more...

Polygon Double-Spend Bug Fix Postmortem — $2m Bounty

SummaryContinue reading on Immunefi »
Read more...

(Out of Scope)-IDOR allows access to billing data and address of any user.
https://rammk01.medium.com/out-of-scope-idor-allow-access-to-billing-data-and-address-of-any-user-8596eaea82eb?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hey fellow hackers and bug hunters,Continue reading on Medium » (https://rammk01.medium.com/out-of-scope-idor-allow-access-to-billing-data-and-address-of-any-user-8596eaea82eb?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Polygon Double-Spend Bug Fix Postmortem — $2m Bounty
https://medium.com/immunefi/polygon-double-spend-bug-fix-postmortem-2m-bounty-5a1db09db7f1?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

SummaryContinue reading on Immunefi » (https://medium.com/immunefi/polygon-double-spend-bug-fix-postmortem-2m-bounty-5a1db09db7f1?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
NTFSTool - Forensics Tool For NTFS (Parser, MTF, Bitlocker, Deleted Files)

https://blogger.googleusercontent.com/img/a/AVvXsEgfikieDow3Vs3xbDGEeDQB-if52TMg-BNk_42ZOSCE0yDmv1Y-glgpE4pUWqV9ji19lsG7Bie6rr15HLJeKqfcv_8YxirilpUIDXH_9pgaw_bYawSDDf-9TDA7DhQQmp5riHe0bzKkZy_7SH7fM1AjnxfQr60h5_KQ-fwaOiSfCANvWCtioTDr4d6XKw=w320-h320 NTFSTool is a forensic tool focused on NTFS volumes. It supports reading partition info (mbr, partition table, vbr) but also information on bitlocker encrypted volume, EFS encrypted files and more.

See below for some examples of the features! FeaturesForensicsNTFSTool displays the complete structure of master boot record, volume boot record, partition table and MFT file record. It is also possible to dump any file (even $mft or SAM) or parse USN journals, LogFile including streams from Alternate Data Stream (ADS). The undelete command will search for any file record marked as "not in use" and allow you to retrieve the file (or part of the file if it was already rewritten). It support input from image file or live disk but you can also use tools like OSFMount to mount your disk image. Sparse and compressed files are also supported. Bitlocker supportFor bitlocked partition, it can display FVE records, check a password and key (bek, password, recovery key), extract VMK and FVEK. There is no bruteforce feature because GPU-based cracking is better (see Bitcracker and Hashcat) but you can get the hash for these tools. EFS supportIn the current version, masterkeys, private keys and certificates can be listed, displayed and decrypted using needed inputs (SID, password). Certificates with private keys can be exported using the backup command. Reinmport the backup on another machine to be able to read your encrypted file again!

More information on Mimikatz Wiki

Decryption of EFS encrypted files is coming! ShellThere is a limited shell with few commands (exit, cd, ls, cat, pwd, cp). Help & ExamplesHelp command displays description and examples for each command. Options can be entered as decimal or hex number with "0x" prefix (ex: inode). ntfstool help [command] CommandDescriptioninfoDisplay information for all disks and volumesmbrDisplay MBR structure, code and partitions for a diskgptDisplay GPT structure, code and partitions for a diskvbrDisplay VBR structure and code for a specidifed volume (ntfs, fat32, fat1x, bitlocker supported)extractExtract a file from a volume.imageCreate an image file of a disk or volume.mftDisplay FILE record details for a specified MFT inode. Almost all attribute types supportedbtreeDisplay VCN content and Btree index for an inodebitlockerDisplay detailed information and hash ($bitlocker$) for all VMK. It is possible to test a password or recovery key. If it is correct, the decrypted VMK and FVEK is displayed.bitdecryptDecrypt a volume to a file using password, recovery key or bek.efs.backupExport EFS keys in PKCS12 (pfx) format.efs.certificateList, display and export system certificates (SystemCertificates/My/Certificates).efs.keyList, display, decrypt and export private keys (Crypto/RSA).efs.masterkeyList, display and decrypt masterkeys (Protect).fveDisplay information for the specified FVE block (0, 1, 2)reparseParse and display reparse points from $Extend$Reparse.logfileDump $LogFile file in specified format: csv, json, raw.usnDump $UsnJrnl file in specified format: csv, json, raw.shadowList volume shadow snapshots from selected disk and volume.streamsDisplay Alternate Data StreamsundeleteSearch and extract deleted files for a volume.shellStart a mini Unix-like shellsmartDisplay S.M.A.R.T data Limitations* Some unsupported cases. WIP.
* No documentation

Feel free to open an issue or ask for a new feature! BuildVcpkg is the best way to install required third-party libs.[...]

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
NTFSTool - Forensics Tool For NTFS (Parser, MTF, Bitlocker, Deleted Files)

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Proposed HTTPA Protocol Uses TEEs to Secure the Web

Intel researchers describe how Trusted Execution Environments can enhance HTTPS and boost Web security.

Kali Linux Tutorials
Attack-Surface-Framework : Tool To Discover External And Internal Network Attack Surface

Attack-Surface-Framework aims to protect organizations acting as an attack surface watchdog, provided an “Object” which might be a: Domain, IP address or CIDR (Internal or External), ASF will discover assets/subdomains, enumerate their ports and services, track deltas and serve as a continuous and flexible attacking and alerting framework leveraging an additional layer of support against 0 day vulnerabilities with publicly available POCs. Motivation

The lack of support and flexibility to automate discovery of dynamic assets and their associated vulnerabilities through continuous scanning or exploitation in a single pane of glass was the driving force in the creation of ASF, the current solutions are restricted by the technology or the program they are built for, we wanted a solution that is scalable as well as utilizes popular Open Source security tools for handling a full vulnerability lifecycle.

ASF is a breed of open source projects leveraging a powerful arsenal of tools wrapped in a single pane of glass on top of a GUI. ASF architectural diagram illustrated below:
https://blogger.googleusercontent.com/img/a/AVvXsEjBfeAPCIAM3y0ZAHuPZcqADupSMH7kPXGmIcy5mGg-InBN7_KA3-MHTFnOBtmxu_BtT_SwGo7wy3IAVyc-tvqpYTYFVQfVmtGWBv88rJnwtUnlNTuT32rHkSxeIo8fAdW30WPuPWBmv9KQR5JQbWAxwM40mGGe1RzIfe62hLkLKKDWOkaS3kL9Hqe7=s1762
Prerequisites

Latest version of Kali Linux (tested on 64 bits) – https://kali.org/get-kali/

16 GB of RAM at least

1 TB HD – XFS filesystem recommended Build & Run

As root

* git clone https://github.com/vmware-labs/attack-surface-framework.git /opt/asf* cd /opt/asf/* Run ./setup.sh* Assign your user, email and yourpass

Once the installation is completed

* cd /opt/asf/frontend/asfgui/* . bin/activate* python3 manage.py runserver 0.0.0.0:8080– We recommend to run it on a screen session to leave server persistent (screen -S asf) Security

ASF is not meant to be publicly exposed, assuming you install it on a cloud provider or even on a local instance, we recommend to access it using port forwarding through SSH, here is an example: ssh -i "key.pem" -L 8080:127.0.0.1:8080 user@yourhost– For ASF GUI ssh -i "key.pem" -L 9045:127.0.0.1:9045 user@yourhost– To access Graylog2 Panel

Then open your browser and go to: http://127.0.0.1:8080– For ASF – user:youruser pass:yourpass (provided in initial setup) https://127.0.0.1:9045– For Graylog2 – user:admin pass:admin #Change it in /graylog/docker-compose.yaml

Graylog2 requires a few steps to start receiving logs from ASF:

Once logged in, go to System/”Content Packs” and import the Content Pack located at /opt/asf/tools/graylog/content_pack_ASF.json, click on the “Upload” button and you should see “Basic” reflected in the “Select Content Packs” section, click on “Basic”, make sure the “ASF” radio button is selected and hit the “Apply content” button, this will create the Global input to parse JSON logs and related extractors.
https://blogger.googleusercontent.com/img/a/AVvXsEgDON92z1tQPZrOipyYRJObDl_hHjD-Ml20hyeQSV_z00QekGr0P3iSicz0boV7VMeJvzREcav9jxJqMNPxUSL220fxPlBl4Fk-HYBXSJqGRclLoYCaqEuMDkVblwCM22YVdb8tw0UPe9figql1EiZInkZCFG0aszVVRSW5hwqeZdTa8pdPARPdCivq=s2800
Now you are ready to receive logs from ASF and setup your streams / alerts / dasboards !

More info @ https://docs.graylog.org/en/4.1/ Documentation

ASF has two scopes:

A) External: For your publicly exposed assets.

B) Internal: Assets in your corporate network.

For the External scope, the flow goes through four basic steps:

A.1 Targets – Here is where you input your targets
https://blogger.googleusercontent.com/img/a/AVvXsEjsapkUSmW[...]

___________________________
@hacking_Attack
@Hacking_Video

MSfuYqjTijMt8HNh2kve8vXU6VlSC2FMDNODX_Xcy5-Nat2hMMrWDknG2UOHbc0nDI5aPKIkEtsAZ0nPa4xLk2wQgkXJIU6fLaneASSwgliENU40SplhhjOeB9vMM51oampiO_fqQ5M508gPM1cSxfDN1oPRrqDJMVLBqKy2-n56B7oIc=s2545
A.2 Discovery – Module that runs the Amass process to discover publicly exposed assets, feel free to create your configuration file to setup your API keys https://github.com/OWASP/Amass/blob/master/examples/config.ini
https://blogger.googleusercontent.com/img/a/AVvXsEjH0EIYE3WoCFDV2-HrojenJbJRbIHL5ph2l__C7YRuo6POvFFuXt7vMSonX0W9Pv2CveROntGERmVeDTaTOicLHthCperC3UH8TX-86n8dLhGLdxaXMxhKsCvMaPqeYmBQN52o8RmW_tgHhrWn5FepePgkFxloz3MdE178eT-lo6sDFHNRe3eYppF_=s2627
A.3 Enumeration – Module that runs the NMAP process to enumerate ports/services and create filters for the Redteam module. Default setup is to look for --top-ports 200but you can suit it to your needs in /opt/asf/tools/nmap/*.sh
https://blogger.googleusercontent.com/img/a/AVvXsEjE9SMS9rPMMPcgfV_m3HwzfN2FsCQxiH4trtDn_AUiQDxigUtcWzzlbZCH3X90A7BKDOkOsgIyjaWRjRm-CNOMC1mbIetOAU5GxW9fOXFikordiT9B9TgCyMSgnuPWoHxoPchah2QUg9B4xMl1tSWNHfiV1yn_4gvlTbvHeVsdIAuSlrnLrcQBzPTZ=s2668
A.4 Redteam – Module that runs submodules located in “/opt/asf/redteam”
https://blogger.googleusercontent.com/img/a/AVvXsEgsaoStGwrYbw0Lbhc3sNekK2AWpRt-xCpWbGu34dURqeuE1tjX882CYPyFImSLq8v3peg-_EeBDmI9MrESLtoWN_BPMB1rZfAdIvPfH-3cjcXBNh-CxqhRaebHVDApKI_LXfOv37ZqeJ20HFw5ob1eejJgnowVvzklwQTWm6nPJ3GOK2bUhCHRir5O=s2679
Note: For the Internal scope, the flow goes through A.1(Targets),A.3(Enumeration) and A.4(Redteam). Download

___________________________
@hacking_Attack
@Hacking_Video