Hacking on Medium
Fake cybersecurity alerts were sent out from the hacked FBI’s email server

https://cdn-images-1.medium.com/max/2048/1*Nnx_v95erirBY0f9LZKNPA.jpeg
The Federal Bureau of Investigation (FBI) email servers were hacked to distribute spam email impersonating FBI warnings that the…

Continue reading on Dev Genius »

hacking: security in practice
How vulnerable are laser keyboards to keysniffing?

Anything that connects via Bluetooth I presume is vulnerable to DDOS etc. but is there the possibility that a laser keyboard could be encrypted further somehow?

submitted by /u/largomouth3
[link] [comments]

hacking: security in practice
What to do?

I have a strong interest in ethical hacking and I really want to get into it, but I only have a Lenovo laptop and it's wifi card is not supported on Linux systems so whenever I try to install any Linux system the wifi does not work. I've tried live USB but it does not work either and the only thing I have not tried is dual booting but I doubt it would work and seems like a lot of effort just for it to not work. Is there way for me to get into ethical hacking? As far as I can see using windows is borderline impossible and I'm not sure what else to do. Thanks.

submitted by /u/Scrunch_
[link] [comments]

Recon Experience with Trickest — Subdomain Recon Tale in a Workflow #1

Main goalContinue reading on Medium »
Read more...

DOS attack in Yahoo, How i was able to deny new users from service?

Hey All ,Continue reading on Medium »
Read more...

Polysynth Trading Competition

Calling all traders to participate in the Polysynth Trading Competition.Continue reading on Medium »
Read more...

EXOCET - AV-evading, Undetectable, Payload Delivery Tool
http://www.kitploit.com/2021/11/exocet-av-evading-undetectable-payload.html

EXOCET is superior to Metasploit's "Evasive Payloads" modules as EXOCET uses AES-256 in GCM Mode (Galois/Counter Mode). Metasploit's Evasion Payloads uses a easy to detect RC4 encryption. While RC4 can decrypt faster, AES-256 is much more difficult to ascertain the intent of the malware.

However, it is possible to use Metasploit to build a Evasive Payload, and then chain that with EXOCET. So EXOCET will decrypt via AES-256, and then the Metasploit Evasive Payload then decrypts itself from RC4.Much like my previous project, DarkLordObama, this toolkit is designed to be a delivery/launch vehicle, much like Veil-Evasion (https://www.kitploit.com/search/label/Veil-Evasion) does.Dark Lord Obama Project (https://github.com/tanc7/dark-lord-obama)However, EXOCET is not limited to a single codebase or platforms that are running Python. EXOCET works on ALL supported platforms and architectures that Go supports.
Exocet Overview
EXOCET, is effectively a crypter-type malware dropper (https://www.kitploit.com/search/label/Malware%20Dropper) that can recycle easily detectable payloads like WannaCry, encrypt them using AES-GCM (Galois/Counter Mode), which is more secure than AES-CBC, and then create a dropper file for a majority of architectures and platforms out there.Basically...It ingests dangerous malware that are now detectable by antivirus enginesIt then encrypts them and produces it's own Go fileThen that Go file can be cross-compiled to 99% of known architecturesUpon execution, the encrypted payload is written to the disk and immediately executed on the command lineAlternatively, instead of a file-drop, it will execute the reconstitute shellcode in memory using amenzhinsky's go-memexec module github.com/amenzhinsky/go-memexec (https://github.com/tanc7/EXOCET-AV-Evasion/blob/master/github.com/amenzhinsky/go-memexec)A custom shellcode executor is in the works, it takes ordinary C shellcode and after num-transform, it will run it by creating a new process after allocating the correct virtual address space and granting it RWX permissions on WindowsThat means 32-bit, and 64-bit architectures, and it works on Linux, Windows, Macs, Unix, Android, iPhone, etc. You take, anything, and I mean ANYTHING, like the 1988 Morris Worm that nearly brought down the internet (which exploited a flaw in the fingerd listener daemon on UNIX), and make it a viable cyberweapon again.EXOCET is designed to be used with the DSX Program, or the "Cyber Metal Gear" as I envisioned it. Being able to launch and proliferate dangerous malware without a traceable launch trail.EXOCET is written entirely in Go.
How to use
EXOCET, regardless of which binary you use to run it, requires Golang to work. By default, it generates a crypter .go file.Windows users: Install Go Here (https://golang.org/doc/install)Linux users: run sudo apt-get update && sudo apt-get install -y golangYou must install the EXOCET source files in golang go get github.com/tanc7/EXOCET-AV-EvasionSub-requirements will also be downloaded and installedFor Windows and Mac x64 Users, pre-compiled binaries are in the /bin folder
To run it
go run EXOCET.go detectablemalware.exe outputmalware.goA key is automatically generated for you. The key is 64-characters long and is entirely composed of bash and cmd.exe shell pipe redirectors to confuse and disrupt brute-forcing attempts against the key by causing unpredictable, destructive behavior on the forensic analyst's device.For 64-bit Windows Targets...env GOOS=windows GOARCH=amd64 go build -ldflags "-s -w" -o outputMalware.exe outputmalware.goAnd out comes a outputmalware.exe fileFor 64-bit MacOS Targetsenv GOOS=darwin GOARCH=amd64 go build -ldflags "-s -w" -o outputMalware.macho outputmalware.goFor 64-bit Linux Targetsenv GOOS=linux GOARCH=amd64 go build -ldflags "-s -w" -o outputMalware.elf outputmalware.goSee this reference on github for your parameters for other operating systems like Android Reference for Go Cross Compilation (https://gist.github.com/asukakenji/f15ba7e588ac42795f421b48b8aede63)Note that the key can still be found with the strings command, please use the upx-ucl command to pack binary to conceal the key.Furthermore, there are prebuilt binaries that I have made, meaning you just have to run ./EXOCET or EXOCET-Windows.exe

Legal Information
I, Chang Tan, and the creators of the main module and submodules of Exocet and the packages it incorporates are NOT responsible for the misuse of this tool. This is merely a penetration testing (https://www.kitploit.com/search/label/Penetration%20Testing) tool. You are strictly prohibited from deploying Exocet output binaries against unauthorized protected systems or unauthorized protected government systems.I am aware that threat actors of APT41 and the NSO Group have used and/or adopted code from this tool, particularly the go-memexec method. If I were to be approached by Federal Investigators regarding the misuse of this tool, I am not claiming responsibility.This is the same stuff that happened to the developers of Mimikatz and PowerShell Empire (who deprecated their own development upon realization of its use among threat actors). The successors have picked up development of Empire, and there are free alternatives such as Covenant C2.
EXOCET live demo

Reason for the name
On May 4th, 1982, during the Falklands War, a squadron of Argentinan Super Eterdards launched a French made Exocet missile at the HMS Sheffield. Despite the Royal Navy's attempts to stop the missile, one struck, sinking the Sheffield. That incident literally put Argentina on the map as a show of force against a global colonial power.News Article of the sinking of the HMS Sheffield (https://www.theguardian.com/uk-news/2017/oct/15/exocet-missile-how-sinking-hms-sheffield-made-famous)Very much like how Onel de Guzman's actions with the ILOVEYOU virus put the Philippines on the map as a cyber threat.ILOVEYOU Virus on Wikipedia (https://en.wikipedia.org/wiki/ILOVEYOU)
Incoming update, notes and ambitions

 So this month, and the next month is going to be a busy month for me, and there will be delays in implementing these methods. But I am excited to get started on implementing new AV evasion techniques such as...Inline hookingObfuscation by emulating BlackRota and the gobfuscate moduleProcess hollowingReflective DLL injectionRemote process injectionThreadLocalStorage CallbacksRegistration of Top-Level Exception HandlersCustom UPX packingI am a very busy man, I have the following priorities and I would like to request some help, some pull requests to aid in the project. Since I have the following things to doA court appearance in late OctoberNational Cyber LeagueAccounting and Finance Classes, Computer Science was NEVER my college major and in the following weeks I will have exams back-to-backFederal Supervised Release Conditions and the FBI trying to implicate me in new unproven crimes. I have dash camera videos I uploaded to the cloud to prove it that I am sending to my lawyers. I have documented multiple attacks against me, vandalism of my car, my house, filed police reports and counter reports and will be building my case to file a Federal lawsuit. One of the perpetrators, who ripped out my front bumper of my car, has been arrested.A private project involving interaction with the CoinGeckoAPIRunning the cryptoscopeinitiative.org, a to-be-filed 501c3 Non-Profit OrganizationTeaching three online classes on Exploit Development
Upcoming update! Direct encrypted shellcode execution! (Implemented in test versions, not released yet)
I need a bit of help, because I successfully implemented CGO to execute encrypted shellcode but it is throwing memory access violations exit status 0xc0000005. It shouldn't be anything related to DEP (Data Execution Prevention) because the file CGOTest/working-template-shellcode-executor.go did run.Problem DiscoveredAs it turns out, VirtualAlloc must be called from kernel32.dll and ntdll.dll to properly make the memory page where the shellcode lands, readable, writable, and executable, in other word, set the PAGE_EXECUTE_READWRITE to ON. Read the Note on Memory Access Violation Problem below.

Once I figure this out, CGO was a pain in the ass to implement, we can now create crypters that execute INLINE-ASSEMBLY. Which was considered a impossibility until now.Note this requires Golang and the MinGW toolchain to be installed on Windows with you running and generating the shellcode on Windows. The reason why, is because CGO cannot be cross-compiled like our other EXOCET modules. To install the toolchain you need to go to https://www.msys2.org/ and follow the guide. Then you must add gcc to your environment variables in Windows

 Step 1: Generate shellcode, this could be from msfvenom Meterpreter (https://www.kitploit.com/search/label/Meterpreter) payloads, Cobalt Strike (https://www.kitploit.com/search/label/Cobalt%20Strike) Beacons, or your own custom shellcode in C compatible format

Step 2: Copy only the bytes of the shellcode, excluding the quotes into a text file like sc.txt