Hello reddit, i have an issue with my responder setup when I run it on a VM (Kali Linux) which is deployed on ESXI. When I set up responder on a ESXI in the correct network/vlan etc. I receive llmnr broadcasts as seen in the wireshark capture, but responder is not answering on those. No poisioning is happening on LLMNR there are only MDNS packets which are answered. https://preview.redd.it/y1aspjpw05181.png?width=1739&format=png&auto=webp&s=a22ddf3a1e1d3c5c5644b01f341908ef6b9ad438 When I run the exact same virtual machine on my local computer in VMWare Workstation/Fusion, it is working absolutely fine. In both scenarios I receive LLMNR requests like you can see in the wireshark, but on ESXI responder is not able to answer them. Since we can't avoid running machines on VCenter, I really need a hint on what could cause this problem. ​ TLDR;
Responder works locally fine for LLMNR, on ESXI it does not respond to the requests which are hitting the kali linux machine. ​ Thanks for helping, larry submitted by /u/larryxt (https://www.reddit.com/user/larryxt)
[link] (https://www.reddit.com/r/Pentesting/comments/qzk3cn/responder_llmnr_packets_not_interpreted_on_esxi/) [comments] (https://www.reddit.com/r/Pentesting/comments/qzk3cn/responder_llmnr_packets_not_interpreted_on_esxi/)

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Melting-Cobalt : A Cobalt Strike Scanner That Retrieves Detected Team Server Beacons Into A JSON Object

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Finding of Clickjacking bug

Bug Bounty Writeup

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
TryHackme-Vulnversity PART 1

https://cdn-images-1.medium.com/max/750/1*PfT4XCk3ciX2HCR4Kizw1A.png
CTF Writeup

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
GITHUB RECON 5.1

https://cdn-images-1.medium.com/max/1597/1*fZ_qqkeXWSfrt8XvuHLkuQ.jpeg
Pesquise os repositórios GitHub de uma organização para dados confidenciais que tenham vazados acidentalmente ou informações que podem…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
What are the different ways to attack a web app?

I've been looking online but all the articles I found were pretty much outdated.

submitted by /u/JeuneCuisse
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
memit: Run binaries straight from memory in Linux (Go module + CLI tool)

https://external-preview.redd.it/6fd9davEWNR1AroueeAuW_QwtKDR7AcoUHoQPnd7s-s.jpg?width=640&crop=smart&auto=webp&s=302fcc5ae9f12373e7193cca879beeedf56824d6 submitted by /u/pope_friction
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Can a fax number be spoofed/stollen?

I know faxing is considered more secure than email, however, my (very basic) understanding is it is not encrypted. Just like cell phone numbers are spoofed, could a fax line be spoofed. Or could someone hijack a fax phone number and receive those faxes? VOIP vs hardline? Does anyone know if it could be done, and has this example happened in the past? Thank you!

submitted by /u/sophchels
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

OWASP ZAP automated scan freezing at 87%
https://www.reddit.com/r/Pentesting/comments/qzokcl/owasp_zap_automated_scan_freezing_at_87/

I have tried doing multiple scans on multiple different domains. It never fails, every time it gets to 87% the memory maxes out. It doesn’t matter if I have 2GB or 8GB set on the VM. I was looking in the process of the scan and it seems like “Cross Site Scripting (DOM based)” is the current scan at that percentage. I don’t know what else I can do besides skip that portion of the scan. Any other suggestions? submitted by /u/Unknown_Mando (https://www.reddit.com/user/Unknown_Mando)
[link] (https://www.reddit.com/r/Pentesting/comments/qzokcl/owasp_zap_automated_scan_freezing_at_87/) [comments] (https://www.reddit.com/r/Pentesting/comments/qzokcl/owasp_zap_automated_scan_freezing_at_87/)

___________________________
@hacking_Attack
@Hacking_Video

Sql injection nedir?Nasıl bulunur?Nasıl kullanılır?.
https://mirabbasagalarov.medium.com/sql-injection-nedir-nas%C4%B1l-bulunur-nas%C4%B1l-kullan%C4%B1l%C4%B1r-1ccdee3b76fd?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

SQL Injection Nedir?Continue reading on Medium » (https://mirabbasagalarov.medium.com/sql-injection-nedir-nas%C4%B1l-bulunur-nas%C4%B1l-kullan%C4%B1l%C4%B1r-1ccdee3b76fd?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

TryHackme-Vulnversity PART 1
https://mukibas37.medium.com/tryhackme-vulnversity-part-1-5b232c888f90?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

CTF WriteupContinue reading on Medium » (https://mukibas37.medium.com/tryhackme-vulnversity-part-1-5b232c888f90?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

ThreadBoat - Program Uses Thread Execution Hijacking To Inject Native Shell-code Into A Standard Win32 Application

Program uses Thread Hijacking to Inject Native Shellcode into a Standard Win32 Application.AboutI developed this small project to continue my experiences of different code injection methods and to allow RedTeam security professionals to utilize this method as a unique way to perform software penetration testing. With Thread hijacking, it allows the hijacker.exe program to susepend a thread within the target.exe program allowing us to write shellcode to that target thread, and later be executed (via; WriteProcessMemory(), SetThreadContext(), ResumeThread(), CreateThread()).Example GIF (Credits To Endgame)Usageint main(){ System sys; Interceptor incp; Exception exp; sys.returnVersionState(); if (sys.returnPrivilegeEscalationState()) { std::cout << "Token Privileges Adjusted\n"; } if (DWORD m_procId = incp.FindWin32ProcessId((PCHAR)mwin32ProcessName)) { incp.ExecuteWin32Shellcode(mprocId); } system("PAUSE"); return 0;}For Further Information On Thread Execution HijackingClick On The Link Belowhttps://capec.mitre.org/data/definitions/30.htmlEnvironmentWindows Vista+Visual C++LibsWinapiuser32.dllkernel32.dllntdll.dllEthical NoticeThis code was simply written to demonstrate an overlooked method to inject shellcode or a DLL into a Win32 program. This code is not to be used for malicous purposes. The author, Josh Schiavone, is not liable for misuse of this software. May God bless you all.Download ThreadBoat
Read more...

___________________________
@hacking_Attack
@Hacking_Video