Hacking Articles Tips Tricks Videos Tutorials

7 views11:43

Kali Linux Tutorials
Covert-Tube : Youtube As Covert-Channel – Control Systems Remotely And Execute Commands By Uploading Videos To Youtube

Covert-Tube is a program to control systems remotely by uploading videos to Youtube using Python to create the videos and the listener, emulating some malware I was reading about. It allows to create videos with frames formed of simple text, QR codes with cleartext or QR codes using AES encryption.

Create A Video

The videos can be created using generate_video.py: enter the commands and generate the video writing “exit”. The video generated is called by default output.avi (can be updated in config.py):

python3 generate_video.py
https://blogger.googleusercontent.com/img/a/AVvXsEiZfWLWnijr25g6LxqO9tVlFUxm3Bo9Anf1oMDYZY2pa7Qmb8fmMIecNitcrWecbTjVfuyHA4haOyvbNI2dh67Y3zc-FzCIdhZpSSv1qMaVM-32aR-n26qB_u5B75E5E5_nJfN2Pn2uzCtgY3Si2Wvy07CiIbDQ9OyYQIQ1cB7NTLFqXBElMTIlX5ye=s762
Run the listener and upload the video to Youtube

python3 main.py

The listener will check the Youtube channel every 300 seconds by default (can be updated in config.py). First the video is uploaded:
https://blogger.googleusercontent.com/img/a/AVvXsEg62SFLdUnJkUq_Dd3_HIMmJ-gCtMFQ5gbr_1AxObary_4Q-6uoyg-qZvkET9akcLaWfxAMKXngJg1456QiEKTLytTLbKzNEfdsefZRuVabQgdkaZcBkEAjunT_1vkGsZbsE7WOWPUqOJ8Ffso9cptgYIalFmdk1Pen3Vi6hEjb8h9EqHTroQV_xoot=s463
After finding there is a new video in the channel, it is downloaded and the commands are executed:
https://blogger.googleusercontent.com/img/a/AVvXsEhwriT696LFBPvKl8YHPXrJ1M_QJ6dcnJ8rDxU4HChbc-wmJs8QS5ZWA0-dauipND_soyiJJmMB88Lp1Db8gD7yzetAYGDXrngPynr8-7Jr3DxinonhHpca4vR21nmG2gA6VS7ejrN1Vv2ekRX0B7-Pj3o0PcS-bfqztVyxscYrwPDyjF10T-4DTPby=s662
We can see the output from the commands:
https://blogger.googleusercontent.com/img/a/AVvXsEgMvI-MegjSOa3qQxQNhrb1trN5S4fpUe6vCVo4Dd2C4vfjsZKEYy58BNQqCrJ8A9BnVQA3mY6SFtPzgp0KIK0sgAp5tXbXtxbF1NciWSYgcCdBLCmwsxDvE0fGk6Cullud10zzjzylStAVUCtUSFIlsjfFvgWGYV_mW80mJtgCr9SXzZXSJRDWQjKF=s571
Configuration

Update the config.py file:

* channel_id (Mandatory!!!): Get your Youtube channel ID from here.
* api_key (Mandatory!!!): To get the API key create an application and generate the key from here.
* image_type (Optional. Default: “qr_aes”): Different types of images for the video.
* “cleartext” creates images with the words of the commands.
* “qr” creates QR codes with the commands.
* “qr_aes” creates QR codes with the commands encrypted with AES.

* upload_seconds_delay (Optional. Default: 300): Seconds delay until checking if a new video has been uploaded.
* debug (Optional. Default: True): Print messages or not.
* aes_key (Optional. Default: “covert-tube_2021”): Key for AES encryption, used in the “qr_aes” option.
* generated_video_path (Optional. Default: “output.avi”): Path of video generated with generate_video.py.
* downloaded_video_path (Optional. Default: “/tmp/test.mp4”): Path where the new video will be downloaded.
* temp_folder (Optional. Default: “/tmp/”): Path where images of every frame from the video are stored, with the format image_X.png.

Installation

For all the project:

sudo apt install libzbar0
pip3 install Pillow opencv-python youtube_dl pytesseract pyqrcode pypng pyzbar pycrypto
git clone https://github.com/ricardojoserf/covert-tube

Creating a standalone binary

pyinstaller –onefile main.py
cp dist/main covert-tube
rm -rf dist build
rm main.spec
Download

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials

Covert-Tube : Youtube As Covert-Channel - Control Systems Remotely

Covert-Tube is a program to control systems remotely by uploading videos to Youtube using Python to create the videos and the listener.

8 viewsedited 11:43

Hacking Articles Tips Tricks Videos Tutorials

8 views11:44

Hacking Articles Tips Tricks Videos Tutorials

Photo

Kali Linux Tutorials
AF-ShellHunter : Auto Shell Lookup

AF-ShellHunter its a script designed to automate the search of WebShell’s in AF Team

How To

pip3 install -r requirements.txt
python3 shellhunter.py –help

Basic Usage

You can run shellhunter in two modes

* –url -u When scanning a single url
* –file -f Scanning multiple URLs at once

Example searching webshell with burpsuite proxy, hiding string “404” with a size between 100 and 1000 chars

┌──(blueudp㉿xxxxxxxx)-[~/AF-ShellHunter]
└─$ python3 shellhunter.py -u https://xxxxxxxxxx -hs “404” -p burp –greater-than 100 –smaller-than 1000
Running AF-Team ShellHunt 1.1.0
URL: https://xxxxxxxxxx
Showing only: 200, 302
Threads: 20
Not showing coincidence with: 404
Proxy: burp
Greater than: 100
Smaller than: 1000
Found https://xxxxxxxxxx/system.php len: 881

File Configuration For Multiple Sites

phishing_list

#How to?
#set country block with [country], please read user_files/config.txt
#’show-response-code “option1” “option2″‘ -> show responses with those status codes, as -sc
#’show-string’ -> show match with that string, as -ss
#’show-regex’ -> show match with regex, as -sr
#use ‘not’ for not showing X in above options, as -h[option]
#’greater-than’ -> Show response greater than X, as -gt ( –greater-than )
#’smaller-than’ -> Show responses smaller than X, as -st ( –smaller-than )
#Example searching webshell with BurpSuite proxy. 302, 200 status code, not showing results w/ ‘página en mantenimiento’ with size between 100 and 1000 chars
[burp]
https://banco.phishing->show-response-code “302” “200”, not show-string “página en mantenimiento”, greater-than 100, smaller-than 1000
[noproxy]
banco.es-> # ShellHunt will add ‘http://

Setting Your Proxies And Custom Headers

config.txt

[HEADERS] # REQUESTS CUSTOM HEADERS, ADD ‘OPTION: VALUE’
User-Agent? Mozilla/5.0 (Linux; Android 8.0.0; SM-G960F Build/R16NW) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0.3202.84 Mobile Safari/537.36
Referer? bit.ly/THIS_is_PHISHING # Bypass referer protection
[PROXIES]
burp? https://127.0.0.1:8080,http://127.0.0.1:8080

Other Features

* Filter by regex
* Filter by string
* Filter by HTTP Status code
* Filter by length
* Custom Headers
* Custom proxy or proxy block for URL file
* Multithreading ( custom workers number )
Download

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials

AF-ShellHunter : Auto Shell Lookup !!! Kali Linux Tutorials

AF-ShellHunter its a script designed to automate the search of WebShell's in AF Team. You can run shellhunter in two modes.

9 viewsedited 11:44

Hacking Articles Tips Tricks Videos Tutorials

SQL Injection JR. Pentester -TryHackMe Part 2

Hi folks, welcome back to part 2 of SQL injection in JR. Pentester path.Continue reading on Medium »
Read more...

9 views11:45

Hacking Articles Tips Tricks Videos Tutorials

Analyzing Java Heap dumps via OQL queries

Java heap dumps contain sensitive data like Environment files, Passwords, Secret keys. This head dump is exposed by the Spring boot…Continue reading on Defmax »
Read more...

9 views11:46

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
hack this site? It's up check it's code

submitted by /u/Inevitable_Will_9378
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hack this site? It's up check it's code

Posted in r/hacking by u/Inevitable_Will_9378 • 0 points and 0 comments

8 viewsedited 12:21

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
What are the different ways to hack into a static Wordpress website?

Hackers in mid 2000s used to hack static websites and completely change the CSS and pages. I was wondering how hackers used to do that and if those vulnerabilities are still present?

submitted by /u/Yellow_KingX
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

What are the different ways to hack into a static Wordpress website?

Hackers in mid 2000s used to hack static websites and completely change the CSS and pages. I was wondering how hackers used to do that and if...

8 viewsedited 12:21

Hacking Articles Tips Tricks Videos Tutorials

8 views12:21

Hacking Articles Tips Tricks Videos Tutorials

Photo

hacking: security in practice
Sensitive data of 400,000 German students exposed by API flaw

https://external-preview.redd.it/XpI8Yewz5tFzlMqeScj58O1_k2fgaUPLdYDEMhxBd_c.jpg?width=640&crop=smart&auto=webp&s=9ce2e581badbd83c1c726168649e92cc56d3b863 submitted by /u/CodePerfect
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Sensitive data of 400,000 German students exposed by API flaw

Posted in r/hacking by u/CodePerfect • 1 point and 0 comments

8 viewsedited 12:21

Hacking Articles Tips Tricks Videos Tutorials