rimeter 81 a leader in Zero Trust Network Access. This recognition validates for us our strategic direction for enabling secure network access in the hybrid workplace. There is one company network called the Internet, and employees need to access networking resources based on who they are and what they need to do — not where they are located.” Sagi Gidali, CPO and Co-Founder of Perimeter 81, had this to add: “The downside of flexible, hybrid work is that it has increased the attack surface of every company. The recent wave of data breaches and ransomware, from the Colonial Pipeline to the T-Mobile breach, has demonstrated that secure access is a must-have for businesses of all types and sizes. As a young, rapidly growing company, we are especially grateful for the industry recognition in The Forrester New Wavehttps://s.w.org/images/core/emoji/13.1.0/72x72/2122.png report and our customers’ high level of enthusiasm. We believe both are a testament to our determination to provide the highest levels of cybersecurity with a relentless commitment to our customers’ success.” Final Thoughts on Implementing Zero Trust Network AccessZTNA technologies are changing the way corporations can allow their employees to work from anywhere in a secure, reliable manner.

Employees need access to specific enterprise apps and systems, and when they are connecting from different WiFi networks around the world, the corporate network faces a higher risk of cyberattacks.

Aging VPN technologies do provide some level of cybersecurity for globally distributed teams, but ZTNA platforms fill the gaps in security even more by providing very strict access control on an as-needed basis. Businesses of all sizes and types can benefit from shifting their corporate network access control to a ZTNA leader like Perimeter 81, a trend which we will no doubt continue to see in the near future.

___________________________
@hacking_Attack
@Hacking_Video

own LOLBINs” etc.) and bypass State of the art EDR’s as most of them fail to detect DLL Hijacking as assessed by George Karantzas and Constantinos Patsakis as mentioned in there research paper: https://arxiv.org/abs/2108.10422

Prerequisites

* Procmon.exe -> https://docs.microsoft.com/en-us/sysinternals/downloads/procmon
* Custom Confirmatory DLL’s :
* These are DLL files which assist the tool to get the confirmation whether the DLL’s are been successfully loaded from the identified hijack path
* Compiled from the MalDLL project provided above (or use the precompiled binaries if you trust me!)
* 32Bit dll name should be: maldll32.dll
* 64Bit dll name should be: maldll64.dll
* Install NuGet Package:** PeNet** -> https://www.nuget.org/packages/PeNet/ (Prereq while compiling the ImpulsiveDLLHijack project)
Note: i & ii prerequisites should be placed in the ImpulsiveDLLHijacks.exe’s directory itself.

* Build and Setup Information:
* ImpulsiveDLLHijack
* Clone the repository in Visual Studio
* Once project is loaded in Visual Studio go to “Project” –> “Manage NuGet packages” –> Browse for packages and install “PeNet” -> https://www.nuget.org/packages/PeNet/
* Build the project!
* The ImpulsiveDLLHijack.exe will be inside the bin directory.

* And for Confirmatory DLL’s:
* Clone the repository in Visual Studio
* Build the project with x86 and x64
* Rename x86 release as maldll32.dll and x64 release as maldll64.dll

* Setup: Copy the Confirmatory DLL’s (maldll32 & maldll64) in the ImpulsiveDLLHijack.exe directory & then execute ImpulsiveDLLHijack.exe :))
Usage
https://blogger.googleusercontent.com/img/a/AVvXsEhE5SDt7EFXa2X7io9UAKYiqIdaBXMiRIsAj4dEqqRX-mWyUq-U6mLWEpKZQ4DR1bjyydUz4WViX5WM5JjztGZsgmSemsrS9YWUxp74jwIO50k9ChCAMTpdFjjrZDPGDtQySWezs305SRNvkFDD11-sHXxukUWSO2nPzPDh_C1r0Wm0-SRsL3vx35XQ=s799
Examples

* Target Executable: OneDrive.exe
* Stage: Discovery
https://blogger.googleusercontent.com/img/a/AVvXsEgoZJOjZvFRCcyzi87d8ixdNfuSebHMWhpQ5VVdnt5saSGHUtS5Jfmuuy7nSsrU04jyJ5S6h5_9CFuOLpP_vTnIEgwaezTtOlMKIKywIwWNXrZ2NWapx07_GUjNAzrWsukrcyDtMPJQY0wKK0Z6NZpkJBiyXlK978KLjx0lTnTY6lGCdU-2Zapt0Ui_=s1107
Stage: Exploitation

* Successful DLL Hijacks
https://blogger.googleusercontent.com/img/a/AVvXsEjyHW0ilCZM8aTg_82l4yQD95NIQnl11godHxS8ikwQ23WTeQrdFnnYK8xRsaddww53depJvhKnSlSyK16FIEU87yHpy66hmjrZN1cK1_MYNT-46_T73giYYfERFJkmyhn5y4ah0xt4-YCaB9XDQ0OXE6G6xoMpxNHuKYiQpl8mIdNCmpsYr7tm8zqn=s836
Unsuccessful DLL Hijacks:
https://blogger.googleusercontent.com/img/a/AVvXsEgtgCxDoYMFEgLxutf_Bl138RPF3MahSEnQVbZTvQWNf1qBhMJAr6UA-QiKx7ng9ythkVn05XGJV_WU6bxgET4uwyb08ngY4n7k6ToKsv016fwuq9EcxUH9ZKogq-deqFTz_qyyH5W1OCEFQ1TAhj0lCpULjQ7euSU5oxoLNTAu-kT11FYzxv956Vw7=s947
DLL is not loaded as the entry point is not identical! Manual Analysis might make it a successful DLL Hijack :
https://blogger.googleusercontent.com/img/a/AVvXsEhPv1ELdzQZeG3szZ7zbE5O08FG5DMYMVPN1GP1L8VJ9rm61fDLzDiamN_32iZYAjkGMOhEx-EdzqAiD1JZmCZONV4qz0pAAsvGzXVPbVHpVpGHS7ZVeMX7dYR8_ZYOMkXM820K5sUgDRRcXkqTIr5me9oGkfm8GK__BCkSntwIihV2K2DD-7j5IwgD=s1147
DLL Hijack successful even after unidentical entry point!
https://blogger.googleusercontent.com/img/a/AVvXsEgU5WJ5NE5DeTbC_70VGly4-ac3GlCX9BcsTdJcn-CG1wkU9wgbqWNmYKT87KyecTfE6YM_ZqGvJ1uPXcJPliC9bJF6_YFALvBoPfr36PoCtKdGXXo03Nfd3ygw-nqQPH70Ep029jBEyMl3wRFaK1MGb5Wamfcao54tI5pEDbMnq725w0eggbycFokg=s815
Stage: Final Results and Logs

* C:\DLLLogs\output_logs.txt:
https://blogger.googleusercontent.com/img/a/AVvXsEgCuqq9jtfGNzUz24ZutFheLwk96jhz5k3LRwNc2IECR_Yt-DdIfIT0OhS5GcOEcYm-eZc8vXqymFAaX4jJgxV-T1Kro7MTh2s_YeMQwxf2KSZDGCvy-XqrTw0RT1b9yDuanFQehXG1fsL9jqL2u3u7XTLx7jOj6otWD-NQ67kxWfDHk-ZEnN1R9BBD=s1151 Download

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Karma_V2 : A Passive Open Source Intelligence (OSINT) Automated Reconnaissance (Framework)

Karma_V2 can be used by Infosec Researchers, Penetration Testers, Bug Hunters to find deep information, more assets, WAF/CDN bypassed IPs, Internal/External Infra, Publicly exposed leaks and many more about their target. Shodan Premium API key is required to use this automation. Output from the 𝚔𝚊𝚛𝚖𝚊 𝚟𝟸 is displayed to the screen and saved to files/directories.

https://s.w.org/images/core/emoji/13.1.0/72x72/2139.png Regarding Premium Shodan API, Please see the Shodan site for more information.

Shodan website: Shodan Website API : Developer API Features

* Powerful and flexible results via Shodan Dorks
* SSL SHA1 checksum/fingerprint Search
* Only hit In-Scope IPs
* Verify each IP with SSL/TLS certificate issuer match RegEx
* Provide Out-Of-Scope IPs
* Find out all ports including well known/uncommon/dynamic
* Grab all targets vulnerabilities related to CVEs
* Banner grab for each IP, Product, OS, Services & Org etc.
* Grab favicon Icons
* Generate Favicon Hash using python3 mmh3 Module
* Favicon Technology Detection using nuclei custom template
* ASN Scan
* BGP Neighbour
* IPv4 & IPv6 Profixes for ASN
* Interesting Leaks like Indexing, NDMP, SMB, Login, SignUp, OAuth, SSO, Status 401/403/500, VPN, Citrix, Jfrog, Dashboards, OpenFire, Control Panels, WordPress, Laravel, Jetty, S3 Buckets, Cloudfront, Jenkins, Kubernetes, Node Exports, Grafana, RabbitMQ, Containers, GitLab, MongoDB, Elastic, FTP anonymous, Memcached, DNS Recursion, Kibana, Prometheus, Default Passwords, Protected Objects, Moodle, Spring Boot, Django, Jira, Ruby, Secret Key and many more… Installation

Clone the repo

# git clone https://github.com/Dheerajmadhukar/karma_v2.git

Install shodan & mmh3 python module

# python3 -m pip install shodan mmh3

Install JSON Parser [JQ]

#apt install jq -y

Install httprobe @tomnomnom to probe the requests

#GO111MODULE=on go get -v github.com/tomnomnom/httprobe

Install Interlace @codingo to multithread [Follow the codingo interlace repo instructions]
# git clone https://github.com/codingo/Interlace.git & install accordingly.
Install nuclei @projectdiscovery
# GO111MODULE=on go get -v github.com/projectdiscovery/nuclei/v2/cmd/nuclei
Install lolcat
# apt install lolcat -y
. Install anew
# GO111MODULE=on go get -u github.com/tomnomnom/anew
Usage

You can use this command to check help:
$ bash karma_v2 -h https://blogger.googleusercontent.com/img/a/AVvXsEi1WdN5pdQRouRBUw0U9Y6Z4pVCyMJXl8tcy4BYQHmK8nIga928q4fbJZKWKxSmkadFeNqjjpaf0XzyekO1bc6nSqMTvZLcDeWQXoEnSvoTQesgpF87VDz6m_a0fnrQAgslXxv0St796nOfvVjqrNYlWFY-l5-_a7S0R8lAvppUYm5U6b2x5OsOL_r_=s1315
MODEs
MODEExamples-ipbash karma_v2 -d -asnbash karma_v2 -d -cvebash karma_v2 -d -faviconbash karma_v2 -d -leaksbash karma_v2 -d -deepbash karma_v2 -d -countbash karma_v2 -d
Output

output/bugcrowd.com-YYYY-MM-DD/
.
├── ASNs_Detailed_bugcrowd.com.txt
├── Collect
│ ├── host_domain_domain.tld.json.gz
│ ├── ssl_SHA1_12289a814…83029f8944b6088d60204a92e_domain.tld.json.gz
│ ├── ssl_SHA1_17537bf84…73cb1d684a495db7ea5aa611b_domain.tld.json.gz
│ ├── ssl_SHA1_198d6d4ec…681b77585190078b07b37c5e1_domain.tld.json.gz
│ ├── ssl_SHA1_26a9c5618…d60eae2947b42263e154d203f_domain.tld.json.gz
│ ├── ssl_SHA1_3da3825a2…3b852a42470410183adc3b9ee_domain.tld.json.gz
│ ├── ssl_SHA1_4d0eab730…68cf11d2db94cc2454c906532_domain.tld.json.gz
│ ├── ssl_SHA1_8907dab4c…12fdbdd6c445a4a8152f6b7b7_domain.tld.json.gz
│ ├── ssl_SHA1_9a9b99eba…5d[...]

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Fapro : Free, Cross-platform, Single-file mass network protocol server simulator

FaPro is a Fake Protocol Server tool, Can easily start or stop multiple network services.

The goal is to support as many protocols as possible, and support as many deep interactions as possible for each protocol.

Demo Site Features

* Supported Running Modes:
* Local Machine
* Virtual Network

* Supported Protocols:
* DNS
* DCE/RPC
* EIP
* Elasticsearch
* FTP
* HTTP
* IEC 104
* Memcached
* Modbus
* MQTT
* MySQL
* RDP
* Redis
* S7
* SMB
* SMTP
* SNMP
* SSH
* Telnet
* VNC
* IMAP
* POP3
* NTP
* RTSP
* PORTMAP

* Use TcpForward to forward network traffic
* Support tcp syn logging
* Support icmp ping logging
* Support udp packet logging Protocol Simulation Demos Rdp

Support credssp ntlmv2 nla authentication.

Support to configure the image displayed when user login.
https://blogger.googleusercontent.com/img/a/AVvXsEhUMTB_bLwEpwjKNNv6HVqxrFo00z6ANMpK91S2MeJHKQezmz7mHMoUsSYLULrgI8e1ElrvjzN5GykiPpbaNRuXH_z6ApHnRigDwd17K3yRtW3T7RF5yfBFX-rGSe_fd1IPD1LT9KB9eLsp2e_0gFLmzJxnHpjwB26d5gSrCWV17XJlIXOi5EcB2uj5=s1271
SSH

Support user login.

Support fake terminal commands, such as id, uid, whoami, etc.

Account format: username:password:home:uid
https://blogger.googleusercontent.com/img/a/AVvXsEh1GYYe10qgo26KaIXgeX4lACcwbwPYch6ivr7hIUvPMw8q7jJ_fJ33Ke_k8S7VsgAHmkDciRREKm1vv2zxgEVPFWcePxfE47cr0dEvWw2rPCVl2w63qudRb3QN9T2u9ncEN5SkcWpePSIkiyg8x8BNQYWdEwLsPcUgLDigoEOGTddFP22l0cgKS6xk=s1029
IMAP & SMTP

Support user login and interaction.
https://blogger.googleusercontent.com/img/a/AVvXsEgwD5VwmlWREj7mUd9OAoLKvL0McqI_T7VYhaUCRGj9Tjh0-soigzfrCmVu6qiUD0T42qCMA2L0qvPXjDnO-rplS-imzxWomegY37iH0kuANUPPWOvk8p9LyB5zhPKX59kMG2A4Mx0eouAisAGGM55_W-d4o1fdYV1SdXAhu4qL9ETbcTwutO3JrufL=s1260
Mysql

Support sql statement query interaction
https://blogger.googleusercontent.com/img/a/AVvXsEjVbPt_Scn_LQKJX4iP-EY-p45_-TMj3btS6sn_8lEj6Ep0ik4rxNKQM2UqJBTyev5KGYw6yOtwzNUUV_zk6TaKw_j1mqQYMpz64PbsvyF-Xh1R5dFaBf1N-EzUWcUtyaVN8eJ_LimB5hmhSnXldxXNZui2RDqxXmfdSYSo_eQx7vCsx170K6ED1Zab=s1292
HTTP

Support website clone, You need to install the chrome browser and chrome driver to work. Quick Start Generate Config

The configuration of all protocols and parameters is generated by genConfig subcommand.

Use 172.16.0.0/16 subnet to generate the configuration file:

fapro genConfig -n 172.16.0.0/16 > fapro.json

Or use local address instead of the virtual network:

fapro genConfig > fapro.json

Run the protocol simulator

Run FaPro in verbose mode and start the web service on port 8080:

fapro run -v -l :8080

Tcp syn logging

For windows users, please install winpcap or npcap. Log Analysis

Use ELK to analyze protocol logs:
https://blogger.googleusercontent.com/img/a/AVvXsEgLHHn5QCdH7Z9HSAOU6bwJ14PMltk6tSz-zumqpgLMXTVcRERUp-6Nq198-bhgdKlWH_BoqDg5WONo1wRoLOcmf2eVpKVNTnf_iJMcxFdv4U-rp3r-JgUdIWJXiT15OruCX2zfGE8hcqH1rXrfTgZzXf5MbDxxUtTRpiYG8yZSkogJmDF-RULY0_I9=s1329
Configuration

This section contains the sample configuration used by FaPro.

{
“version”: “0.40”,
“network”: “127.0.0.1/32”,
“network_build”: “localhost”,
“storage”: null,
“geo_db”: “/tmp/geoip_city.mmdb”,
“hostname”: “fapro1”,
“use_logq”: true,
“cert_name”: “unknown”,
“syn_dev”: “any”,
“udp_dev”: “any”,
“icmp_dev”: “any”,
“exclusions”: [],
“hosts”: [
{
“ip”: “127.0.0.1”,
“handlers”: [
{
“handler”: “dcerpc”,
“port”: 135,
“params”: {
“accounts”: [
“administrator:123456”,
],
“domain_name”: “DESKTOP-Q1Test”
}
}
]
}
]
}

* version: Configuration version.
* network: The subnet used by the virtual network or the address bound to the local machine(Local mode).
* network_build: Network mode(supported value: localhost, all, userdef)
* localhost: Local mode, all services are listening on the local machine
* all: Create all hosts i[...]

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
DorkScout : Golang Tool To Automate Google Dork Scan Against The Entiere Internet Or Specific Targets

DorkScout is a tool to automate the finding of vulnerable applications or secret files around the internet throught google searches, dorkscout first starts by fetching the dorks lists from https://www.exploit-db.com/google-hacking-database and then it scans a given target or everything it founds Installation

dorkscout can be installed in different ways: Go Packages

throught Golang Packages (golang package manager)

go get github.com/R4yGM/dorkscout

this will work for every platform Docker

if you don’t have docker installed you can follow their guide

first of all you have to pull the docker image (only 17.21 MB) from the docker registry, you can see it here, if you don’t want to pull the image you can also clone the repository and then build the image from the Dockerfile

docker pull r4yan/dorkscout:latest

if you don’t want to pull the image you can download or copy the dorkscout Dockerfile that can be found here and then build the image from the Dockerfile

then if you want to launch the container you have to first create a volume to share your files to the container

docker volume create –name dorkscout_data

using docker when you launch the container it will automatically install the dork lists inside a directory called “dorkscout” :

-rw-r–r– 1 r4yan r4yan 110 Jul 31 14:56 .dorkscout
-rw-r–r– 1 r4yan r4yan 79312 Aug 10 20:30 ‘Advisories and Vulnerabilities.dorkscout’
-rw-r–r– 1 r4yan r4yan 6352 Jul 31 14:56 ‘Error Messages.dorkscout’
-rw-r–r– 1 r4yan r4yan 38448 Jul 31 14:56 ‘Files Containing Juicy Info.dorkscout’
-rw-r–r– 1 r4yan r4yan 17110 Jul 31 14:56 ‘Files Containing Passwords.dorkscout’
-rw-r–r– 1 r4yan r4yan 1879 Jul 31 14:56 ‘Files Containing Usernames.dorkscout’
-rw-r–r– 1 r4yan r4yan 5398 Jul 31 14:56 Footholds.dorkscout
-rw-r–r– 1 r4yan r4yan 5568 Jul 31 14:56 ‘Network or Vulnerability Data.dorkscout’
-rw-r–r– 1 r4yan r4yan 49048 Jul 31 14:56 ‘Pages Containing Login Portals.dorkscout’
-rw-r–r– 1 r4yan r4yan 16112 Jul 31 14:56 ‘Sensitive Directories.dorkscout’
-rw-r–r– 1 r4yan r4yan 451 Jul 31 14:56 ‘Sensitive Online Shopping Info.dorkscout’
-rw-r–r– 1 r4yan r4yan 29938 Jul 31 14:56 ‘Various Online Devices.dorkscout’
-rw-r–r– 1 r4yan r4yan 2802 Jul 31 14:56 ‘Vulnerable Files.dorkscout’
-rw-r–r– 1 r4yan r4yan 4925 Jul 31 14:56 ‘Vulnerable Servers.dorkscout’
-rw-r–r– 1 r4yan r4yan 8145 Jul 31 14:56 ‘Web Server Detection.dorkscout’

so that you don’t have to install them then you can start scanning by doing :

docker run -v Dorkscout:/dorkscout r4yan/dorkscout scan

replace the with the options/arguments you want to give to dorkscout, example :

docker run -v dorkscout_data:/dorkscout r4yan/dorkscout scan -d=”/dorkscout/Sensitive Online Shopping Info.dorkscout” -H=”/dorkscout/a.html”

If you wanted to scan throught a proxy using a docker container you have to add the –net host option example :

docker run –net host -v dorkscout_data:/dorkscout r4yan/dorkscout scan -d=”/dorkscout/Sensitive Online Shopping Info.dorkscout” -H=”/dorkscout/a.html -x socks5://127.0.0.1:9050″

Always save your results inside the volume and not in the container because then the results will be deleted! you can save them by writing the same volume path of the directory you are saving the results

if you added this and did everything correctly at the end of every scan you’d find the results inside the folder /var/lib/docker/volumes/dorkscout_data/_datathis will work for every platform Executable

you can also download the already compiled binaries here and then execute them Usage

dorkscout -h

Usage:
dorkscout [command]
Available Commands:
completion generate the autocompletion script for the specified shell
delete deletes all the .dorkscou[...]

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Inceptor : Template-Driven AV/EDR Evasion Framework

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Limelighter : A Tool For Generating Fake Code Signing Certificates Or Signing Real Ones

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Karma_V2 : A Passive Open Source Intelligence (OSINT) Automated Reconnaissance (Framework)

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
LazyCSRF : A More Useful CSRF PoC Generator

___________________________
@hacking_Attack
@Hacking_Video

n the subnet(i.e., Can ping all the host in the subnet)
* userdef: Create only the hosts specified in the hosts configuration.

* storage: Specify the storage used for log collection, support sqlite, mysql, elasticsearch. e.g.
* sqlite3:logs.db
* mysql://user:password@tcp(127.0.0.1:3306)/logs
* es://http://username:password@127.0.0.1:9200 (currently only supports Elasticsearch 7.x)

* geo_db: MaxMind geoip2 database file path, used to generate ip geographic location information. if you use Elasticsearch storage, never need this field, it will be automatically generated using the geoip processor of Elasticsearch.
* hostname: Specify the host field in the log.
* use_logq: Use local disk message queue to save logs, and then send it to remote mysql or Elasticsearch to prevent remote log loss.
* cert_name: Common name of the generated certificate.
* syn_dev: Specify the network interface used to capture tcp syn packets. If it is empty, the tcp syn packet will not be recorded. On windows, the device name is like “\Device\NPF_{xxxx-xxxx}”.
* udp_dev: Same as syn_dev, but for udp packet.
* icmp_dev: Same as syn_dev, but for icmp ping packet.
* exclusions: Exclude remote ips from logs.
* hosts: Each item is a host configuration.
* handlers: Service configuration, the service configured on the host, each item is a service configuration.
* handler: Service name (i.e., protocol name)
* params: Set the parameters supported by the service. Example

Create a virtual network, The subnet is 172.16.0.0/24, include 2 hosts,

172.16.0.3 run dns, ssh service,

and 172.16.0.5 run rpc, rdp service,

protocol access logs are saved to elasticsearch, exclude the access log of 127.0.0.1 and 8.8.8.8.

{
“version”: “0.40”,
“network”: “172.16.0.0/24”,
“network_build”: “userdef”,
“storage”: “es://http://127.0.0.1:9200”,
“use_logq”: true,
“cert_name”: “unknown”,
“syn_dev”: “any”,
“udp_dev”: “any”,
“icmp_dev”: “any”,
“exclusions”: [“127.0.0.1”, “8.8.8.8”],
“geo_db”: “”,
“hosts”: [
{
“ip”: “172.16.0.3”,
“handlers”: [
{
“handler”: “dns”,
“port”: 53,
“params”: {
“accounts”: [
“admin:123456”
],
“appname”: “domain”
}
},
{
“handler”: “ssh”,
“port”: 22,
“params”: {
“accounts”: [
“root:5555555:/root:0”
],
“prompt”: “$ “,
“server_version”: “SSH-2.0-OpenSSH_7.4”
}
}
]
},
{
“ip”: “172.16.0.5”,
“handlers”: [
{
“handler”: “dcerpc”,
“port”: 135,
“params”: {
“accounts”: [
“administrator:123456”
],
“domain_name”: “DESKTOP-Q1Test”
}
},
{
“handler”: “rdp”,
“port”: 3389,
“params”: {
“accounts”: [
“administrator:123456”
],
“auth”: false,
“domain_name”: “DESKTOP-Q1Test”,
“image”: “rdp.jpg”,
“sec_layer”: “auto”
}
}
]
}
]
}

Automatically generate service configuration

Use the ipclone.py script in Scripts, You can clone the ip service configuration from fofa to quickly generate the service configuration of the real machine.

___________________________
@hacking_Attack
@Hacking_Video

https://b.thumbs.redditmedia.com/h9JJHqoYMu-EJEqYd1-tmoDU5mi9SeSqoojAQjr0Otw.jpg ​

https://preview.redd.it/ui2o540fcew71.png?width=674&format=png&auto=webp&s=b1068462255cf7f4a35633748cf4928ad3678900

submitted by /u/abderhmanhaji
[link] [comments]

hacking: security in practice
Why are MacBooks so popular among hackers when they are considered "bad and overpriced"?

Don't get me wrong, there are probably a lot of people who don't use MacBooks but I've seen a surprising high amount of them. I guess they're not horrible but from what I've heard they're overpriced and offer pretty bad performance.

I'm not good at computers nor hacking but I want to learn and was thinking if MacBooks are a good idea. I can buy used once to save money. Cheers

submitted by /u/large_red_apple
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
What is the best free site for text documentation?

Im new to this, i only knew some basic network theory and some basic linux. I want to learn more about the methods of hacking/pen testing/etc and i prefer to read a documentation rather than watch a video. If you can give me some sites with good content , i am grateful.

submitted by /u/davvboos
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Any good tricks for msfvenom payloads?

I’m working on a x64 msfvenom windows payload and in the past I’ve had good luck with avoiding Antivirus software using a Golang shellcode loader, but for this project I want the best possible results so do you lads have any good tricks for msfvenom payloads? I plan to add the delay feature and maybe a few more tricks, any thoughts?

submitted by /u/_Lukisha_
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
using Hashcat on the cloud

using hashcat would it be practical to crack an 8 digit uppercase letter and digit only, wpa2 password on the cloud. using 4 rtx 6000 cards.

submitted by /u/gregt0799
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Xcode

Is there a workaround to run xcode and do builds for iOS apps on Linux?

I didn't do ios development for many years. My Mac just sat there. Now it's unsupported on xcode and I don't want to buy a Mac just for builds. There has to be a workaround. Ive been a debian user for the past 2 decades and I'd like to keep it that way.

I need to be able to build swift / react native apps using local machine (no cloud build solutions / expo)

I'd love to hear from you!

submitted by /u/DirectionNo420
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video