Hacking Articles Tips Tricks Videos Tutorials

KitPloit - PenTest Tools!
NTFSTool - Forensics Tool For NTFS (Parser, MTF, Bitlocker, Deleted Files)

https://blogger.googleusercontent.com/img/a/AVvXsEgfikieDow3Vs3xbDGEeDQB-if52TMg-BNk_42ZOSCE0yDmv1Y-glgpE4pUWqV9ji19lsG7Bie6rr15HLJeKqfcv_8YxirilpUIDXH_9pgaw_bYawSDDf-9TDA7DhQQmp5riHe0bzKkZy_7SH7fM1AjnxfQr60h5_KQ-fwaOiSfCANvWCtioTDr4d6XKw=w320-h320 NTFSTool is a forensic tool focused on NTFS volumes. It supports reading partition info (mbr, partition table, vbr) but also information on bitlocker encrypted volume, EFS encrypted files and more.

See below for some examples of the features! FeaturesForensicsNTFSTool displays the complete structure of master boot record, volume boot record, partition table and MFT file record. It is also possible to dump any file (even $mft or SAM) or parse USN journals, LogFile including streams from Alternate Data Stream (ADS). The undelete command will search for any file record marked as "not in use" and allow you to retrieve the file (or part of the file if it was already rewritten). It support input from image file or live disk but you can also use tools like OSFMount to mount your disk image. Sparse and compressed files are also supported. Bitlocker supportFor bitlocked partition, it can display FVE records, check a password and key (bek, password, recovery key), extract VMK and FVEK. There is no bruteforce feature because GPU-based cracking is better (see Bitcracker and Hashcat) but you can get the hash for these tools. EFS supportIn the current version, masterkeys, private keys and certificates can be listed, displayed and decrypted using needed inputs (SID, password). Certificates with private keys can be exported using the backup command. Reinmport the backup on another machine to be able to read your encrypted file again!

More information on Mimikatz Wiki

Decryption of EFS encrypted files is coming! ShellThere is a limited shell with few commands (exit, cd, ls, cat, pwd, cp). Help & ExamplesHelp command displays description and examples for each command. Options can be entered as decimal or hex number with "0x" prefix (ex: inode). ntfstool help [command] CommandDescriptioninfoDisplay information for all disks and volumesmbrDisplay MBR structure, code and partitions for a diskgptDisplay GPT structure, code and partitions for a diskvbrDisplay VBR structure and code for a specidifed volume (ntfs, fat32, fat1x, bitlocker supported)extractExtract a file from a volume.imageCreate an image file of a disk or volume.mftDisplay FILE record details for a specified MFT inode. Almost all attribute types supportedbtreeDisplay VCN content and Btree index for an inodebitlockerDisplay detailed information and hash ($bitlocker$) for all VMK. It is possible to test a password or recovery key. If it is correct, the decrypted VMK and FVEK is displayed.bitdecryptDecrypt a volume to a file using password, recovery key or bek.efs.backupExport EFS keys in PKCS12 (pfx) format.efs.certificateList, display and export system certificates (SystemCertificates/My/Certificates).efs.keyList, display, decrypt and export private keys (Crypto/RSA).efs.masterkeyList, display and decrypt masterkeys (Protect).fveDisplay information for the specified FVE block (0, 1, 2)reparseParse and display reparse points from $Extend$Reparse.logfileDump $LogFile file in specified format: csv, json, raw.usnDump $UsnJrnl file in specified format: csv, json, raw.shadowList volume shadow snapshots from selected disk and volume.streamsDisplay Alternate Data StreamsundeleteSearch and extract deleted files for a volume.shellStart a mini Unix-like shellsmartDisplay S.M.A.R.T data Limitations* Some unsupported cases. WIP.
* No documentation

Feel free to open an issue or ask for a new feature! BuildVcpkg is the best way to install required third-party libs.[...]

___________________________
@hacking_Attack
@Hacking_Video

Kitploit

Kitploit – Maintenance in Progress

Kitploit is temporarily under maintenance. We’ll be back shortly with improvements.

17 viewsedited 13:44

Hacking Articles Tips Tricks Videos Tutorials

KitPloit - PenTest Tools!
NTFSTool - Forensics Tool For NTFS (Parser, MTF, Bitlocker, Deleted Files)

___________________________
@hacking_Attack
@Hacking_Video

Kitploit

Kitploit – Maintenance in Progress

Kitploit is temporarily under maintenance. We’ll be back shortly with improvements.

19 viewsedited 13:44

Hacking Articles Tips Tricks Videos Tutorials

Dark Reading: Attacks/Breaches
Proposed HTTPA Protocol Uses TEEs to Secure the Web

Intel researchers describe how Trusted Execution Environments can enhance HTTPS and boost Web security.

17 views13:51

Source

Hacking Articles Tips Tricks Videos Tutorials

15 views14:57

Hacking Articles Tips Tricks Videos Tutorials

Photo

Kali Linux Tutorials
Attack-Surface-Framework : Tool To Discover External And Internal Network Attack Surface

Attack-Surface-Framework aims to protect organizations acting as an attack surface watchdog, provided an “Object” which might be a: Domain, IP address or CIDR (Internal or External), ASF will discover assets/subdomains, enumerate their ports and services, track deltas and serve as a continuous and flexible attacking and alerting framework leveraging an additional layer of support against 0 day vulnerabilities with publicly available POCs. Motivation

The lack of support and flexibility to automate discovery of dynamic assets and their associated vulnerabilities through continuous scanning or exploitation in a single pane of glass was the driving force in the creation of ASF, the current solutions are restricted by the technology or the program they are built for, we wanted a solution that is scalable as well as utilizes popular Open Source security tools for handling a full vulnerability lifecycle.

ASF is a breed of open source projects leveraging a powerful arsenal of tools wrapped in a single pane of glass on top of a GUI. ASF architectural diagram illustrated below:
https://blogger.googleusercontent.com/img/a/AVvXsEjBfeAPCIAM3y0ZAHuPZcqADupSMH7kPXGmIcy5mGg-InBN7_KA3-MHTFnOBtmxu_BtT_SwGo7wy3IAVyc-tvqpYTYFVQfVmtGWBv88rJnwtUnlNTuT32rHkSxeIo8fAdW30WPuPWBmv9KQR5JQbWAxwM40mGGe1RzIfe62hLkLKKDWOkaS3kL9Hqe7=s1762
Prerequisites

Latest version of Kali Linux (tested on 64 bits) – https://kali.org/get-kali/

16 GB of RAM at least

1 TB HD – XFS filesystem recommended Build & Run

As root

* git clone https://github.com/vmware-labs/attack-surface-framework.git /opt/asf* cd /opt/asf/* Run ./setup.sh* Assign your user, email and yourpass

Once the installation is completed

* cd /opt/asf/frontend/asfgui/* . bin/activate* python3 manage.py runserver 0.0.0.0:8080– We recommend to run it on a screen session to leave server persistent (screen -S asf) Security

ASF is not meant to be publicly exposed, assuming you install it on a cloud provider or even on a local instance, we recommend to access it using port forwarding through SSH, here is an example: ssh -i "key.pem" -L 8080:127.0.0.1:8080 user@yourhost– For ASF GUI ssh -i "key.pem" -L 9045:127.0.0.1:9045 user@yourhost– To access Graylog2 Panel

Then open your browser and go to: http://127.0.0.1:8080– For ASF – user:youruser pass:yourpass (provided in initial setup) https://127.0.0.1:9045– For Graylog2 – user:admin pass:admin #Change it in /graylog/docker-compose.yaml

Graylog2 requires a few steps to start receiving logs from ASF:

Once logged in, go to System/”Content Packs” and import the Content Pack located at /opt/asf/tools/graylog/content_pack_ASF.json, click on the “Upload” button and you should see “Basic” reflected in the “Select Content Packs” section, click on “Basic”, make sure the “ASF” radio button is selected and hit the “Apply content” button, this will create the Global input to parse JSON logs and related extractors.
https://blogger.googleusercontent.com/img/a/AVvXsEgDON92z1tQPZrOipyYRJObDl_hHjD-Ml20hyeQSV_z00QekGr0P3iSicz0boV7VMeJvzREcav9jxJqMNPxUSL220fxPlBl4Fk-HYBXSJqGRclLoYCaqEuMDkVblwCM22YVdb8tw0UPe9figql1EiZInkZCFG0aszVVRSW5hwqeZdTa8pdPARPdCivq=s2800
Now you are ready to receive logs from ASF and setup your streams / alerts / dasboards !

More info @ https://docs.graylog.org/en/4.1/ Documentation

ASF has two scopes:

A) External: For your publicly exposed assets.

B) Internal: Assets in your corporate network.

For the External scope, the flow goes through four basic steps:

A.1 Targets – Here is where you input your targets
https://blogger.googleusercontent.com/img/a/AVvXsEjsapkUSmW[...]

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials

Attack-Surface-Framework : To Discover External And Internal Network

Attack-Surface-Framework aims to protect organizations acting as an attack surface watchdog, provided an “Object” which might be a.

13 viewsedited 14:57

Hacking Articles Tips Tricks Videos Tutorials

Kali Linux Tutorials Attack-Surface-Framework : Tool To Discover External And Internal Network Attack Surface Attack-Surface-Framework aims to protect organizations acting as an attack surface watchdog, provided an “Object” which might be a: Domain, IP address…

MSfuYqjTijMt8HNh2kve8vXU6VlSC2FMDNODX_Xcy5-Nat2hMMrWDknG2UOHbc0nDI5aPKIkEtsAZ0nPa4xLk2wQgkXJIU6fLaneASSwgliENU40SplhhjOeB9vMM51oampiO_fqQ5M508gPM1cSxfDN1oPRrqDJMVLBqKy2-n56B7oIc=s2545
A.2 Discovery – Module that runs the Amass process to discover publicly exposed assets, feel free to create your configuration file to setup your API keys https://github.com/OWASP/Amass/blob/master/examples/config.ini
https://blogger.googleusercontent.com/img/a/AVvXsEjH0EIYE3WoCFDV2-HrojenJbJRbIHL5ph2l__C7YRuo6POvFFuXt7vMSonX0W9Pv2CveROntGERmVeDTaTOicLHthCperC3UH8TX-86n8dLhGLdxaXMxhKsCvMaPqeYmBQN52o8RmW_tgHhrWn5FepePgkFxloz3MdE178eT-lo6sDFHNRe3eYppF_=s2627
A.3 Enumeration – Module that runs the NMAP process to enumerate ports/services and create filters for the Redteam module. Default setup is to look for --top-ports 200but you can suit it to your needs in /opt/asf/tools/nmap/*.sh
https://blogger.googleusercontent.com/img/a/AVvXsEjE9SMS9rPMMPcgfV_m3HwzfN2FsCQxiH4trtDn_AUiQDxigUtcWzzlbZCH3X90A7BKDOkOsgIyjaWRjRm-CNOMC1mbIetOAU5GxW9fOXFikordiT9B9TgCyMSgnuPWoHxoPchah2QUg9B4xMl1tSWNHfiV1yn_4gvlTbvHeVsdIAuSlrnLrcQBzPTZ=s2668
A.4 Redteam – Module that runs submodules located in “/opt/asf/redteam”
https://blogger.googleusercontent.com/img/a/AVvXsEgsaoStGwrYbw0Lbhc3sNekK2AWpRt-xCpWbGu34dURqeuE1tjX882CYPyFImSLq8v3peg-_EeBDmI9MrESLtoWN_BPMB1rZfAdIvPfH-3cjcXBNh-CxqhRaebHVDApKI_LXfOv37ZqeJ20HFw5ob1eejJgnowVvzklwQTWm6nPJ3GOK2bUhCHRir5O=s2679
Note: For the Internal scope, the flow goes through A.1(Targets),A.3(Enumeration) and A.4(Redteam). Download

___________________________
@hacking_Attack
@Hacking_Video

10 viewsedited 14:57

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
Looking for a ctf team to do some pico ctf, and learn the basics of hacking :)

Hi,

Im a teen looking for a team to pracitce pico ctf from the start. It's best if you have little knowledge, so that we can learn together. If you're interested DM me.

Cheers!

submitted by /u/PaintballAlex
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Looking for a ctf team to do some pico ctf, and learn the basics...

Hi, Im a teen looking for a team to pracitce pico ctf from the start. It's best if you have little knowledge, so that we can learn together. If...

9 viewsedited 15:22

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
Email from myself

So this morning I apparently emailed myself with the usual I’ve hacked your accounts and webcam and caught you watching porn. Pay me x amount and it disappears. I’ve tech savvy enough to know it’s a scam (also don’t watch porn, but if he has videos of me being disappointed that I’ve packed morata for the 3rd time on FUT then I’m done for!) But how do they make it appear from your own email address, clearly I haven’t sent it because it’s not in my sent items?

Concerns me how many people would fall for this though. And how much anxiety and stress it can cause people.

submitted by /u/gpollard90
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Email from myself

So this morning I apparently emailed myself with the usual I’ve hacked your accounts and webcam and caught you watching porn. Pay me x amount and...

8 viewsedited 15:22

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
What is the difference between RFID and NFC?

Just out of curiosity what is the difference between the two? Also another question what do they normally use in security like the little thing they use where they tap it and it unlocks a door if that makes sense?

Thanks in advance! :)

submitted by /u/Idontnohow2spel1
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

What is the difference between RFID and NFC?

Just out of curiosity what is the difference between the two? Also another question what do they normally use in security like the little thing...

6 viewsedited 15:22

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
Homemade Antivirus pt. 2

So I'm stuck, I made a post a while back here and I have since been working hard at it. I have ClamAV installed now, but the problems have started there (I'm working on MacOS 11.6 Big Sur for frame of reference). So I tried to run clamd -v and I get a not found error. I followed all the steps from the official ClamAV config but clamd doesn't work. Any idea what could be wrong?

I also don't know what LocalSocket is, and when I "man LocalSocket" it, I get nothing.

Any help is much appreciated!

submitted by /u/thomas_the_kid2
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Homemade Antivirus pt. 2

So I'm stuck, I made a post a while back [here](https://www.reddit.com/r/hacking/comments/p7ebt7/homebuilt_antivirus/) and I have since been...

7 viewsedited 15:22

Hacking Articles Tips Tricks Videos Tutorials