Hacking Articles Tips Tricks Videos Tutorials
Photo
hacking: security in practice
Free CompTIA Security+ (SY0-601) Self-study Resources with PBQs
Hi Hacking community,
We have new updates and fixes on the CompTIA Security+ (SY0-601) path, which you might find useful.
It's absolutely free to enroll.
https://examsdigest.com/comptia-learning-path/
Changelog.
[improve] Domain 2.0 Architecture and Design
[improve] Domain 3.0 Operations and Incident Response
[add] Performance-based questions
Happy learning,
Anastasia
submitted by /u/Anastasia_IT
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
Free CompTIA Security+ (SY0-601) Self-study Resources with PBQs
Hi Hacking community,
We have new updates and fixes on the CompTIA Security+ (SY0-601) path, which you might find useful.
It's absolutely free to enroll.
https://examsdigest.com/comptia-learning-path/
Changelog.
[improve] Domain 2.0 Architecture and Design
[improve] Domain 3.0 Operations and Incident Response
[add] Performance-based questions
Happy learning,
Anastasia
submitted by /u/Anastasia_IT
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
Free CompTIA Security+ (SY0-601) Self-study Resources with PBQs
Hi Hacking community, We have new updates and fixes on the **CompTIA Security+ (SY0-601)** path, which you might find useful. ***It's...
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
TryHackMe Alfred Writeup/Walkthrough
https://cdn-images-1.medium.com/max/1146/1*831yQqVjl-6CF5N2cKYTAQ.png
Hello and welcome to my Alfred walkthrough. This TryHackMe room has plenty of interesting content to cover and provides some solid…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
TryHackMe Alfred Writeup/Walkthrough
https://cdn-images-1.medium.com/max/1146/1*831yQqVjl-6CF5N2cKYTAQ.png
Hello and welcome to my Alfred walkthrough. This TryHackMe room has plenty of interesting content to cover and provides some solid…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
TryHackMe Alfred Writeup/Walkthrough
Hello and welcome to my Alfred walkthrough. This TryHackMe room has plenty of interesting content to cover and provides some solid practice…
Hacking Articles Tips Tricks Videos Tutorials
Photo
Black Hat Ethical Hacking
‘Trojan Source’ attack method can hide bugs into open-source code
https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png ‘Trojan Source’ attack method can hide bugs into open-source codePost Views: 134
Reading Time: 2 Minutes
Academic researchers have released details about a new attack method they call “Trojan Source” that allows injecting vulnerabilities into the source code of a software project in a way that human reviewers can’t detect.
Trojan Source relies on a simple trick that does not require modifying the compiler to create vulnerable binaries.
The method works with some of the most widely used programming languages today and adversaries could use it for supply-chain attacks. Abusing text-encoding standardsResearchers from the University of Cambridge, United Kingdom, disclosed and demonstrated the “Trojan Source” class of attacks that could compromise first-party software and supply chains.
The examples they provide are for projects written in C, C++, C#, JavaScript, Java, Rust, Go, and Python where an attacker can target the encoding of source code files to inject vulnerabilities.
“The trick is to use Unicode control characters to reorder tokens in source code at the encoding level,” reveals Nicholas Boucher, one of the researchers that discovered Trojan Source.
“We have discovered ways of manipulating the encoding of source code files so that human viewers and compilers see different logic. One particularly pernicious method uses Unicode directionality override characters to display code as an anagram of its true logic,” explains Ross Anderson, the other researcher behind testing the Trojan Source attack method.
See Also: Complete Offensive Security and Ethical Hacking Course
By using control characters embedded in comments and strings, a threat actor can reorder the source code to change its logic in a way that creates an exploitable vulnerability. Bidirectional and homoglyph attackThe researchers showed that one way this can be achieved is by using Unicode controls for bidirectional text (e.g. LRI -left-to-right isolate, and RLI -right-to-left isolate) to dictate the direction in which the content is displayed. This method is now tracked as CVE-2021-42574.
The bidirectional (Bidi) controls LRI and RLI are invisible characters, and they are not the only ones. By injecting these instructions, a compiler can compile code that is completely different from what a human sees.
In the image below, using the RLI/RLI controls inside the string the second line is compiled while the human eye reads it as a comment that the compiler would ignore.
https://www.bleepstatic.com/images/news/u/1100723/2021/TrojanSourceAttack02.jpg
A destructive infectionThis particular variant of the Chaos Ransomware is configured to search the infected systems for different file types smaller than 2ΜΒ and encrypts them.
However, if the file is larger than 2MB is will inject random bytes into the files, making them unrecoverable even if a ransom is paid.
Due to the destructive nature of the attack, those who pay the[...]
___________________________
@hacking_Attack
@Hacking_Video
‘Trojan Source’ attack method can hide bugs into open-source code
https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png ‘Trojan Source’ attack method can hide bugs into open-source codePost Views: 134
Reading Time: 2 Minutes
Academic researchers have released details about a new attack method they call “Trojan Source” that allows injecting vulnerabilities into the source code of a software project in a way that human reviewers can’t detect.
Trojan Source relies on a simple trick that does not require modifying the compiler to create vulnerable binaries.
The method works with some of the most widely used programming languages today and adversaries could use it for supply-chain attacks. Abusing text-encoding standardsResearchers from the University of Cambridge, United Kingdom, disclosed and demonstrated the “Trojan Source” class of attacks that could compromise first-party software and supply chains.
The examples they provide are for projects written in C, C++, C#, JavaScript, Java, Rust, Go, and Python where an attacker can target the encoding of source code files to inject vulnerabilities.
“The trick is to use Unicode control characters to reorder tokens in source code at the encoding level,” reveals Nicholas Boucher, one of the researchers that discovered Trojan Source.
“We have discovered ways of manipulating the encoding of source code files so that human viewers and compilers see different logic. One particularly pernicious method uses Unicode directionality override characters to display code as an anagram of its true logic,” explains Ross Anderson, the other researcher behind testing the Trojan Source attack method.
See Also: Complete Offensive Security and Ethical Hacking Course
By using control characters embedded in comments and strings, a threat actor can reorder the source code to change its logic in a way that creates an exploitable vulnerability. Bidirectional and homoglyph attackThe researchers showed that one way this can be achieved is by using Unicode controls for bidirectional text (e.g. LRI -left-to-right isolate, and RLI -right-to-left isolate) to dictate the direction in which the content is displayed. This method is now tracked as CVE-2021-42574.
The bidirectional (Bidi) controls LRI and RLI are invisible characters, and they are not the only ones. By injecting these instructions, a compiler can compile code that is completely different from what a human sees.
In the image below, using the RLI/RLI controls inside the string the second line is compiled while the human eye reads it as a comment that the compiler would ignore.
https://www.bleepstatic.com/images/news/u/1100723/2021/TrojanSourceAttack02.jpg
A destructive infectionThis particular variant of the Chaos Ransomware is configured to search the infected systems for different file types smaller than 2ΜΒ and encrypts them.
However, if the file is larger than 2MB is will inject random bytes into the files, making them unrecoverable even if a ransom is paid.
Due to the destructive nature of the attack, those who pay the[...]
___________________________
@hacking_Attack
@Hacking_Video
Black Hat Ethical Hacking
‘Trojan Source’ attack method can hide bugs into open-source code | Black Hat Ethical Hacking
Academic researchers have released details about a new attack method they call “Trojan Source” that allows injecting vulnerabilities into the source code of a software project in a way that human reviewers can’t detect.
Hacking Articles Tips Tricks Videos Tutorials
Black Hat Ethical Hacking ‘Trojan Source’ attack method can hide bugs into open-source code https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png ‘Trojan Source’ attack method can hide bugs into open-source codePost Views:…
ransom can only recover smaller files.
The reason for this functionality is unclear, and it could be caused by poor coding, incorrect configuration, or to damage gamers’ files purposely.
In this particular campaign, the threat actors are promoting text files to create a false sense of security while swapping them out in the end with executables.
See Also: Offensive Security Tool: ZipExec In a homoglyph Trojan Source attack as exemplified below, the human eye will see both functions identical, while the compiler distinguishes between the Latin “H” and the Cyrillic “H” and treats the code as having two different functions, so the outcome will not be the same.
https://www.bleepstatic.com/images/news/u/1100723/2021/TrojanSourceAttack_03.jpg
In a paper [PDF] detailing the new Trojan Source attack method, the researchers highlight that the bidirectional (Bidi) override characters persist through copy/paste action on most browsers, editors, and operating systems.
The researchers tested the Trojan Source attack against multiple code editors and web-based repositories that are commonly used in programming and found that their method worked on many of them.
https://www.bleepstatic.com/images/news/u/1100723/2021/TrojanSourceAttack.jpg
Following the principle of using Bidi overrides to create code that is valid when reordered, the researchers found at least three techniques that allow exploiting of the source code:
* Early Returns – hide a genuine ‘return’ statement in a comment so that it can cause a function to return earlier than it appears to
* Commenting Out – trick human review by placing important code, such as a conditional, in a comment so that it is disregarded by the compiler or the interpreter
* Stretched Strings – reverse-order the code to make it seem to be outside a string literal
One way to defend against Trojan Source is to reject the use of control characters for text directionality in language specifications and in compilers that implement the languages.
See Also: Hacking stories – Operation Troy – How researchers linked the cyberattacks Coordintated disclosureOn July 25, the researchers informed multiple maintainers of products found to be impacted by the Trojan Source attack method and set a 99-day embargoed disclosure period.
The CERT Coordination Center also received a vulnerability report and assisted with the coordintated disclosure by providing a shared communication platform for vendors implementing defenses.
Following their report, the researchers received an average of $2,246 in bug bounties from five of the recipients, although 11 of them had a bug bounty program.
At the moment, multiple compilers are unable to stop the Trojan Source attack method, despite almost two dozen software suppliers being aware of the threat.
Since many maintainers are still to implement a patch, the two researchers recommend governments and companies identify their suppliers and pressure them into adopting the necessary defenses.
“The fact that the Trojan Source vulnerability affects almost all computer languages makes it a rare opportunity for a system-wide and ecologically valid cross-platform and crossvendor comparison of responses”
The researchers added that three companies that maintain code repositories are currently deploying defenses against Trojan Source.
In a repository on GitHub, they provide proof-of-concept (PoC) scripts that demonstrates how much of a threat the Trojan Source attack can be.
Source: www.bleepingcomputer.com (Click Link)Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/ezgif.com-gif-maker-4-90x90.jpg Chaos ransomware targets gamers via fake Minecraft alt lists1 day ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/10/microsoft-zero-day-vulnerabilities-800x358-1-90x90.png All Windows versions impacted by new LPE zero-day vulnerability4 days ago
* https://www.bl[...]
___________________________
@hacking_Attack
@Hacking_Video
The reason for this functionality is unclear, and it could be caused by poor coding, incorrect configuration, or to damage gamers’ files purposely.
In this particular campaign, the threat actors are promoting text files to create a false sense of security while swapping them out in the end with executables.
See Also: Offensive Security Tool: ZipExec In a homoglyph Trojan Source attack as exemplified below, the human eye will see both functions identical, while the compiler distinguishes between the Latin “H” and the Cyrillic “H” and treats the code as having two different functions, so the outcome will not be the same.
https://www.bleepstatic.com/images/news/u/1100723/2021/TrojanSourceAttack_03.jpg
In a paper [PDF] detailing the new Trojan Source attack method, the researchers highlight that the bidirectional (Bidi) override characters persist through copy/paste action on most browsers, editors, and operating systems.
The researchers tested the Trojan Source attack against multiple code editors and web-based repositories that are commonly used in programming and found that their method worked on many of them.
https://www.bleepstatic.com/images/news/u/1100723/2021/TrojanSourceAttack.jpg
Following the principle of using Bidi overrides to create code that is valid when reordered, the researchers found at least three techniques that allow exploiting of the source code:
* Early Returns – hide a genuine ‘return’ statement in a comment so that it can cause a function to return earlier than it appears to
* Commenting Out – trick human review by placing important code, such as a conditional, in a comment so that it is disregarded by the compiler or the interpreter
* Stretched Strings – reverse-order the code to make it seem to be outside a string literal
One way to defend against Trojan Source is to reject the use of control characters for text directionality in language specifications and in compilers that implement the languages.
See Also: Hacking stories – Operation Troy – How researchers linked the cyberattacks Coordintated disclosureOn July 25, the researchers informed multiple maintainers of products found to be impacted by the Trojan Source attack method and set a 99-day embargoed disclosure period.
The CERT Coordination Center also received a vulnerability report and assisted with the coordintated disclosure by providing a shared communication platform for vendors implementing defenses.
Following their report, the researchers received an average of $2,246 in bug bounties from five of the recipients, although 11 of them had a bug bounty program.
At the moment, multiple compilers are unable to stop the Trojan Source attack method, despite almost two dozen software suppliers being aware of the threat.
Since many maintainers are still to implement a patch, the two researchers recommend governments and companies identify their suppliers and pressure them into adopting the necessary defenses.
“The fact that the Trojan Source vulnerability affects almost all computer languages makes it a rare opportunity for a system-wide and ecologically valid cross-platform and crossvendor comparison of responses”
The researchers added that three companies that maintain code repositories are currently deploying defenses against Trojan Source.
In a repository on GitHub, they provide proof-of-concept (PoC) scripts that demonstrates how much of a threat the Trojan Source attack can be.
Source: www.bleepingcomputer.com (Click Link)Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/ezgif.com-gif-maker-4-90x90.jpg Chaos ransomware targets gamers via fake Minecraft alt lists1 day ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/10/microsoft-zero-day-vulnerabilities-800x358-1-90x90.png All Windows versions impacted by new LPE zero-day vulnerability4 days ago
* https://www.bl[...]
___________________________
@hacking_Attack
@Hacking_Video
Hacking Articles Tips Tricks Videos Tutorials
ransom can only recover smaller files. The reason for this functionality is unclear, and it could be caused by poor coding, incorrect configuration, or to damage gamers’ files purposely. In this particular campaign, the threat actors are promoting text files…
ackhatethicalhacking.com/wp-content/uploads/2021/10/social_preview-scaled-90x90.jpg Sensitive data of 400,000 German students exposed by API flaw5 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/10/hacked-90x90.jpg Brutal WordPress plugin bug allows subscribers to wipe sites6 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/10/ezgif.com-gif-maker-5-90x90.jpg Hackers used billing software zero-day to deploy ransomware1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/10/ezgif.com-gif-maker-4-90x90.jpg Popular NPM library hijacked to install password-stealers, miners1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/10/youtube-logo-90x90.jpg Massive campaign uses YouTube to push password-stealing malware2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/10/ezgif.com-gif-maker-3-90x90.jpg Google: YouTubers’ accounts hijacked with cookie-stealing malware2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/10/ezgif.com-gif-maker-2-90x90.jpg Acer hacked twice in a week by the same threat actor2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/10/ezgif-6-e5d8ed29a830-90x90.jpg Credit card PINs can be guessed even when covering the ATM pad2 weeks ago
The post ‘Trojan Source’ attack method can hide bugs into open-source code first appeared on Black Hat Ethical Hacking.
___________________________
@hacking_Attack
@Hacking_Video
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/10/hacked-90x90.jpg Brutal WordPress plugin bug allows subscribers to wipe sites6 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/10/ezgif.com-gif-maker-5-90x90.jpg Hackers used billing software zero-day to deploy ransomware1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/10/ezgif.com-gif-maker-4-90x90.jpg Popular NPM library hijacked to install password-stealers, miners1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/10/youtube-logo-90x90.jpg Massive campaign uses YouTube to push password-stealing malware2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/10/ezgif.com-gif-maker-3-90x90.jpg Google: YouTubers’ accounts hijacked with cookie-stealing malware2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/10/ezgif.com-gif-maker-2-90x90.jpg Acer hacked twice in a week by the same threat actor2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/10/ezgif-6-e5d8ed29a830-90x90.jpg Credit card PINs can be guessed even when covering the ATM pad2 weeks ago
The post ‘Trojan Source’ attack method can hide bugs into open-source code first appeared on Black Hat Ethical Hacking.
___________________________
@hacking_Attack
@Hacking_Video
aDLL - Adventure of Dinamic Link Library
http://www.kitploit.com/2021/11/adll-adventure-of-dinamic-link-library.html
___________________________
@hacking_Attack
@Hacking_Video
http://www.kitploit.com/2021/11/adll-adventure-of-dinamic-link-library.html
___________________________
@hacking_Attack
@Hacking_Video
Kitploit
Kitploit – Maintenance in Progress
Kitploit is temporarily under maintenance. We’ll be back shortly with improvements.
aDLL is a binary analysis (https://www.kitploit.com/search/label/Binary%20Analysis) tool focused on the automatic discovery (https://www.kitploit.com/search/label/Discovery) of DLL Hijacking (https://www.kitploit.com/search/label/Hijacking) vulnerabilities. The tool analyzes the image of the binary loaded in memory to search for DLLs loaded at load-time and makes use of the Microsoft Detours library to intercept calls to the LoadLibrary/LoadLibraryEx functions to analyze the DLLs loaded at run-time. The purpose is to obtain a list of DLLs that are not found by the executable in those folders where they are searched.
Getting Started
To start using aDLL a compiled executable is available in the Binaries folder. It is recommended to use the version whose architecture (32-bit or 64-bit) matches the version of the executable to be analyzed. For the correct functioning of the tool, it is necessary that the DLLs "hook32", "hook64", "informer32" and "informer64" are located in the same directory as the executable aDLL.exe.
Prerequisites
aDLL has been developed and tested on Windows 10 (https://www.kitploit.com/search/label/Windows%2010) systems. If the system is old and/or Visual Studio is not installed, it is possible that the tool will throw an error like "VCRUNTIME140.dll not found". In this case the Visual C++ Redistributable update must be installed. Update can be found here: https://www.microsoft.com/es-ES/download/details.aspx?id=49984.
Compilation
To modify/recompile the tool it is recommended the use of Visual Studio 2015 or later. The Visual Studio solution consists of three projects: aDLL, Hook e Informer. _ -aDLL: must be compiled as an executable. If linking errors occur, it will be necessary to add the shlwapi.lib library using the Visual Studio linker as an additional dependency._ _ -Hook: must be compiled as a DLL with the same architecture as the executable to be analyzed. The resulting Hook file must be renamed to hook32.dll or hook64.dll as appropriate. If you wish to analyze executables of both architectures it will be necessary to have both DLLs in the same directory as aDLL.exe._ _ -Informer: same as Hook. Must be compiled as a DLL and renamed to informer32.dll or informer64.dll._
Usage
The tool has a -h option to print a brief description of the available options on the screen.. .\aDLL -h
As a common example of usage aDLL should receive at least the path to the executable to be analyzed. .\aDLL -e "C:\System32\notepad.exe"
OPTIONS: -h Displays the tool's help with a brief description of each option.
-e Specifies the path to the executable to be analyzed by aDLL.
-t Specifies a path to a text file with a list of executable paths.
-o Specifies a path to a directory in which a report will be stored for each executable scanned.
-m Searches for the executable's manifest and displays it on the screen. aDLL searches for the manifest embedded in the binary, it will not find the manifest if it exists as an external file.
-w Defines the number of seconds the executable process will be kept open while searching for DLLs loaded at runtime. The default time is 20 seconds.
-aDLL will automatically test if a malicious DLL is executed by impersonating the legitimate DLL in the search order if a candidate DLL has been found.
-d Used in conjunction with the -a option, this option allows you to select a path to a DLL that will be used as the malicious DLL.
-r Each DLL imported by the e xecutable can in turn import other DLLs as dependencies. A search "n" times recursive will be made on all those DLLs found by aDLL that are not redirected (ApiSetSchema or WinSxS) and do not belong to the list of Known DLL of the system.
Acknowledgments
Hook DLL is based on the idea of ctxis's DLLHSC: https://github.com/ctxis/DLLHSC
Contact
ideaslocas@telefonica.com (mailto:ideaslocas@telefonica.com)
aDLL
___________________________
@hacking_Attack
@Hacking_Video
Getting Started
To start using aDLL a compiled executable is available in the Binaries folder. It is recommended to use the version whose architecture (32-bit or 64-bit) matches the version of the executable to be analyzed. For the correct functioning of the tool, it is necessary that the DLLs "hook32", "hook64", "informer32" and "informer64" are located in the same directory as the executable aDLL.exe.
Prerequisites
aDLL has been developed and tested on Windows 10 (https://www.kitploit.com/search/label/Windows%2010) systems. If the system is old and/or Visual Studio is not installed, it is possible that the tool will throw an error like "VCRUNTIME140.dll not found". In this case the Visual C++ Redistributable update must be installed. Update can be found here: https://www.microsoft.com/es-ES/download/details.aspx?id=49984.
Compilation
To modify/recompile the tool it is recommended the use of Visual Studio 2015 or later. The Visual Studio solution consists of three projects: aDLL, Hook e Informer. _ -aDLL: must be compiled as an executable. If linking errors occur, it will be necessary to add the shlwapi.lib library using the Visual Studio linker as an additional dependency._ _ -Hook: must be compiled as a DLL with the same architecture as the executable to be analyzed. The resulting Hook file must be renamed to hook32.dll or hook64.dll as appropriate. If you wish to analyze executables of both architectures it will be necessary to have both DLLs in the same directory as aDLL.exe._ _ -Informer: same as Hook. Must be compiled as a DLL and renamed to informer32.dll or informer64.dll._
Usage
The tool has a -h option to print a brief description of the available options on the screen.. .\aDLL -h
As a common example of usage aDLL should receive at least the path to the executable to be analyzed. .\aDLL -e "C:\System32\notepad.exe"
OPTIONS: -h Displays the tool's help with a brief description of each option.
-e Specifies the path to the executable to be analyzed by aDLL.
-t Specifies a path to a text file with a list of executable paths.
-o Specifies a path to a directory in which a report will be stored for each executable scanned.
-m Searches for the executable's manifest and displays it on the screen. aDLL searches for the manifest embedded in the binary, it will not find the manifest if it exists as an external file.
-w Defines the number of seconds the executable process will be kept open while searching for DLLs loaded at runtime. The default time is 20 seconds.
-aDLL will automatically test if a malicious DLL is executed by impersonating the legitimate DLL in the search order if a candidate DLL has been found.
-d Used in conjunction with the -a option, this option allows you to select a path to a DLL that will be used as the malicious DLL.
-r Each DLL imported by the e xecutable can in turn import other DLLs as dependencies. A search "n" times recursive will be made on all those DLLs found by aDLL that are not redirected (ApiSetSchema or WinSxS) and do not belong to the list of Known DLL of the system.
Acknowledgments
Hook DLL is based on the idea of ctxis's DLLHSC: https://github.com/ctxis/DLLHSC
Contact
ideaslocas@telefonica.com (mailto:ideaslocas@telefonica.com)
aDLL
___________________________
@hacking_Attack
@Hacking_Video
KitPloit - PenTest & Hacking Tools
Leading source of security tools, hacking tools, cybersecurity and network security. Learn about new tools and updates in one place.
you can find more information about licenses at: licenses.txt THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. WHENEVER YOU MAKE A CONTRIBUTION TO A REPOSITORY CONTAINING NOTICE OF A LICENSE, YOU LICENSE YOUR CONTRIBUTION UNDER THE SAME TERMS, AND YOU AGREE THAT YOU HAVE THE RIGHT TO LICENSE YOUR CONTRIBUTION UNDER THOSE TERMS. IF YOU HAVE A SEPARATE AGREEMENT TO LICENSE YOUR CONTRIBUTIONS UNDER DIFFERENT TERMS, SUCH AS A CONTRIBUTOR LICENSE AGREEMENT, THAT AGREEMENT WILL SUPERSEDE.
Download aDLL (https://github.com/ideaslocas/aDLL)
___________________________
@hacking_Attack
@Hacking_Video
Download aDLL (https://github.com/ideaslocas/aDLL)
___________________________
@hacking_Attack
@Hacking_Video
GitHub
GitHub - ideaslocas/aDLL
Contribute to ideaslocas/aDLL development by creating an account on GitHub.
https://a.thumbs.redditmedia.com/zphGs7fvmoFOvxoScR1KrT0FznlLQhn2OYZ0bc6ZiL8.jpg I've written simple python code as shown in this tutorial and converted it to exe using pyinstaller.
https://cybersecthreat.com/2020/07/28/extract-password-from-exe-part1/
However, when I attached "my_secret_pyinstaller.exe" to x64dbg, I did not see "python36.dll" in “Symbols” tab.
https://preview.redd.it/3prjz2czr5x71.png?width=776&format=png&auto=webp&s=f0f52491c4f9b1b9313c3c50f8ab0c3c77625fc5
What is the right way to do this? Please help.
submitted by /u/w0lfcat
[link] [comments]
https://cybersecthreat.com/2020/07/28/extract-password-from-exe-part1/
However, when I attached "my_secret_pyinstaller.exe" to x64dbg, I did not see "python36.dll" in “Symbols” tab.
https://preview.redd.it/3prjz2czr5x71.png?width=776&format=png&auto=webp&s=f0f52491c4f9b1b9313c3c50f8ab0c3c77625fc5
What is the right way to do this? Please help.
submitted by /u/w0lfcat
[link] [comments]
hacking: security in practice
Email Password Cracking
Hi does anyone have experience in retrieving account due to forget password without 2-step verification. Account got locked, called for Microsoft for help and filled in the account recovery form countless times, however the automated system has determined that the information was not sufficient to unlock account. Please assist thanks!
submitted by /u/Plastic-Ad-8750
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
Email Password Cracking
Hi does anyone have experience in retrieving account due to forget password without 2-step verification. Account got locked, called for Microsoft for help and filled in the account recovery form countless times, however the automated system has determined that the information was not sufficient to unlock account. Please assist thanks!
submitted by /u/Plastic-Ad-8750
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
Email Password Cracking
Hi does anyone have experience in retrieving account due to forget password without 2-step verification. Account got locked, called for Microsoft...
hacking: security in practice
Windows 7 Admin Password recovery
Hey people,
I just started a new job at an event technician company and they have trouble with their Admin (hes blocking every communication attempt and never shows up to work). Their problem is: No one has Admin Access, besides that guy. So they can't retrieve their data from their own server and a lot more. To get everything back under their control without having to start legal discussions with their IT guy, they'd like to solve the problem differently, meaning changing the admin pw themself or atleast create a new account giving them back access to their data. It is not clear if there is an AD running in the background, couldn't figure that out so far 100%.
The machines are running Windows 7 anf everything I attempted didn't work so far. I can't start up Mimikaz. I can't export the SAM folder from the registry. I can't safe boot with commandprompt, neither was I able to create a new Account or add a known Account to the Admin Group and absolutly I'm not able to change the password of the existing Admin Account.
Does anyone know other options I could try? If you need more informations I'll try to provide them, just ask in the comments ^
Thank you for your time, I hope you have a great day Luy
submitted by /u/Luymara
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
Windows 7 Admin Password recovery
Hey people,
I just started a new job at an event technician company and they have trouble with their Admin (hes blocking every communication attempt and never shows up to work). Their problem is: No one has Admin Access, besides that guy. So they can't retrieve their data from their own server and a lot more. To get everything back under their control without having to start legal discussions with their IT guy, they'd like to solve the problem differently, meaning changing the admin pw themself or atleast create a new account giving them back access to their data. It is not clear if there is an AD running in the background, couldn't figure that out so far 100%.
The machines are running Windows 7 anf everything I attempted didn't work so far. I can't start up Mimikaz. I can't export the SAM folder from the registry. I can't safe boot with commandprompt, neither was I able to create a new Account or add a known Account to the Admin Group and absolutly I'm not able to change the password of the existing Admin Account.
Does anyone know other options I could try? If you need more informations I'll try to provide them, just ask in the comments ^
Thank you for your time, I hope you have a great day Luy
submitted by /u/Luymara
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
Windows 7 Admin Password recovery
Hey people, I just started a new job at an event technician company and they have trouble with their Admin (hes blocking every communication...
Hacking Articles Tips Tricks Videos Tutorials
Photo
hacking: security in practice
EU investigating leak of private key used to forge Covid passes
https://external-preview.redd.it/PwZMW8VRpE9E1jSEcLevw-Bd05uyr_GJmeoRKiacs2E.jpg?width=640&crop=smart&auto=webp&s=2c62e974eb47fecf0ee6294aeeb83fb31efba086 submitted by /u/pcaversaccio
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
EU investigating leak of private key used to forge Covid passes
https://external-preview.redd.it/PwZMW8VRpE9E1jSEcLevw-Bd05uyr_GJmeoRKiacs2E.jpg?width=640&crop=smart&auto=webp&s=2c62e974eb47fecf0ee6294aeeb83fb31efba086 submitted by /u/pcaversaccio
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
EU investigating leak of private key used to forge Covid passes
Posted in r/hacking by u/pcaversaccio • 6 points and 2 comments
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Tips & Trick Membuat Password yang Benar!
https://cdn-images-1.medium.com/max/1280/1*1tVNqu_DTHLiY_sxA5z4yQ.jpeg
Di era teknologi seperti saat ini, manusia tidak terlepas dengan password. Akun media sosial, e-mail, website, dan banyak lainnya, semua…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Tips & Trick Membuat Password yang Benar!
https://cdn-images-1.medium.com/max/1280/1*1tVNqu_DTHLiY_sxA5z4yQ.jpeg
Di era teknologi seperti saat ini, manusia tidak terlepas dengan password. Akun media sosial, e-mail, website, dan banyak lainnya, semua…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
Tips & Trick Membuat Password yang Benar!
Di era teknologi seperti saat ini, manusia tidak terlepas dengan password. Akun media sosial, e-mail, website, dan banyak lainnya, semua…
KitPloit - PenTest Tools!
aDLL - Adventure of Dinamic Link Library
___________________________
@hacking_Attack
@Hacking_Video
aDLL - Adventure of Dinamic Link Library
___________________________
@hacking_Attack
@Hacking_Video
Kitploit
Kitploit – Maintenance in Progress
Kitploit is temporarily under maintenance. We’ll be back shortly with improvements.