Hacking on Medium
The Power of Pair Hacking

https://cdn-images-1.medium.com/max/1920/1*U5JvrDdDBi1X8d3vsrgqUQ.jpeg
For years now at Cyrex, we’ve implemented the pair hacking method for our penetration testing. It’s a staple in our success as a…

Continue reading on Medium »

Hacking on Medium
Types of viruses, their harm and ways to prevent them

https://cdn-images-1.medium.com/max/1280/1*25QMNP4HhghW0ns6njzRTA.jpeg
Research on types of viruses, their damage and ways to prevent them.

Continue reading on Medium »

Explaining Basic DOM Clobbering And The <a> Tag

Or if you’re stuck on PortSwigger’s DOM Clobbering labsContinue reading on Medium »
Read more...

KitPloit - PenTest Tools!
ThreadBoat - Program Uses Thread Execution Hijacking To Inject Native Shell-code Into A Standard Win32 Application

https://blogger.googleusercontent.com/img/a/AVvXsEh4HOdyv0K9bz9hRZQJkXMEVsV5z5TPysk-8EKTuNc8xmzXkgioL8eecxXvn_Mwr-xL_qJ2HAkBIknN0puXX1dOhoV6Ib2iDNpXajGa7RlHJIpeg4JpcXiw2P25aBijix6gbjdRLIQSSGlyo2UHBZJppmPEinn9IBE_30_5K1_VuD-E-u5HqeJEHWB_0w=w640-h368
Program uses Thread Hijacking to Inject Native Shellcode into a Standard Win32 Application.

About

I developed this small project to continue my experiences of different code injection methods and to allow RedTeam security professionals to utilize this method as a unique way to perform software penetration testing. With Thread hijacking, it allows the hijacker.exe program to susepend a thread within the target.exe program allowing us to write shellcode to that target thread, and later be executed (via; WriteProcessMemory(), SetThreadContext(), ResumeThread(), CreateThread()).
Example GIF (Credits To Endgame)
https://blogger.googleusercontent.com/img/a/AVvXsEh4HOdyv0K9bz9hRZQJkXMEVsV5z5TPysk-8EKTuNc8xmzXkgioL8eecxXvn_Mwr-xL_qJ2HAkBIknN0puXX1dOhoV6Ib2iDNpXajGa7RlHJIpeg4JpcXiw2P25aBijix6gbjdRLIQSSGlyo2UHBZJppmPEinn9IBE_30_5K1_VuD-E-u5HqeJEHWB_0w=w640-h368
Usage

int main()
{
System sys;
Interceptor incp;
Exception exp;

sys.returnVersionState();
if (sys.returnPrivilegeEscalationState())
{
std::cout <<
}

if (DWORD m_procId = incp.FindWin32ProcessId((PCHAR)m_win32ProcessName))
{
incp.ExecuteWin32Shellcode(m_procId);
}

system("PAUSE");
return 0;
}

For Further Information On Thread Execution Hijacking

Click On The Link Below

https://capec.mitre.org/data/definitions/30.html

Environment

* Windows Vista+
* Visual C++

Libs

*
Winapi

* user32.dll
* kernel32.dll

*
ntdll.dll
Ethical Notice

This code was simply written to demonstrate an overlooked method to inject shellcode or a DLL into a Win32 program. This code is not to be used for malicous purposes. The author, Josh Schiavone, is not liable for misuse of this software. May God bless you all.
Download ThreadBoat

___________________________
@hacking_Attack
@Hacking_Video

Explaining Basic DOM Clobbering And The Tag
https://medium.com/@lai.glorison/explaining-basic-dom-clobbering-and-the-a-tag-ef10405464a8?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Or if you’re stuck on PortSwigger’s DOM Clobbering labsContinue reading on Medium » (https://medium.com/@lai.glorison/explaining-basic-dom-clobbering-and-the-a-tag-ef10405464a8?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Finding of Clickjacking bug
https://mukibas37.medium.com/finding-of-clickjacking-bug-f086bcf5f2fd?source=rss------bug_bounty-5

Bug Bounty WriteupContinue reading on Medium » (https://mukibas37.medium.com/finding-of-clickjacking-bug-f086bcf5f2fd?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Responder - LLMNR packets not interpreted on ESXI Virtual Machine
https://www.reddit.com/r/Pentesting/comments/qzk3cn/responder_llmnr_packets_not_interpreted_on_esxi/

___________________________
@hacking_Attack
@Hacking_Video

Hello reddit, i have an issue with my responder setup when I run it on a VM (Kali Linux) which is deployed on ESXI. When I set up responder on a ESXI in the correct network/vlan etc. I receive llmnr broadcasts as seen in the wireshark capture, but responder is not answering on those. No poisioning is happening on LLMNR there are only MDNS packets which are answered. https://preview.redd.it/y1aspjpw05181.png?width=1739&format=png&auto=webp&s=a22ddf3a1e1d3c5c5644b01f341908ef6b9ad438 When I run the exact same virtual machine on my local computer in VMWare Workstation/Fusion, it is working absolutely fine. In both scenarios I receive LLMNR requests like you can see in the wireshark, but on ESXI responder is not able to answer them. Since we can't avoid running machines on VCenter, I really need a hint on what could cause this problem. ​ TLDR;
Responder works locally fine for LLMNR, on ESXI it does not respond to the requests which are hitting the kali linux machine. ​ Thanks for helping, larry submitted by /u/larryxt (https://www.reddit.com/user/larryxt)
[link] (https://www.reddit.com/r/Pentesting/comments/qzk3cn/responder_llmnr_packets_not_interpreted_on_esxi/) [comments] (https://www.reddit.com/r/Pentesting/comments/qzk3cn/responder_llmnr_packets_not_interpreted_on_esxi/)

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Melting-Cobalt : A Cobalt Strike Scanner That Retrieves Detected Team Server Beacons Into A JSON Object

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Finding of Clickjacking bug

Bug Bounty Writeup

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
TryHackme-Vulnversity PART 1

https://cdn-images-1.medium.com/max/750/1*PfT4XCk3ciX2HCR4Kizw1A.png
CTF Writeup

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
GITHUB RECON 5.1

https://cdn-images-1.medium.com/max/1597/1*fZ_qqkeXWSfrt8XvuHLkuQ.jpeg
Pesquise os repositórios GitHub de uma organização para dados confidenciais que tenham vazados acidentalmente ou informações que podem…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
What are the different ways to attack a web app?

I've been looking online but all the articles I found were pretty much outdated.

submitted by /u/JeuneCuisse
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video