Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
When a usb wifi card says it supports "monitor mode", does it also mean it supports "packet injection"?

I have the TP-link WN-823n V3 and on the driver website it lists an option for Beta linux driver which supports "monitor mode". Now if i try to use this driver, i want to do it in a Virtual Machine Kali linux. So if it says it supports "Monitor mode", is packet injection also included with that? And is it possible to use this driver through a VM?

submitted by /u/Walid_Fakhfakh
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

When a usb wifi card says it supports "monitor mode", does it also...

I have the TP-link WN-823n V3 and on the driver website it lists an option for Beta linux driver which supports "monitor mode". Now if i try to...

5 viewsedited 20:38

hacking: security in practice
GoDaddy Security Breach

submitted by /u/Zohrah_Masoom
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

GoDaddy Security Breach

Posted in r/hacking by u/Zohrah_Masoom • 135 points and 17 comments

5 viewsedited 20:38

Hacking Articles Tips Tricks Videos Tutorials

ThreatBox - A Standard And Controlled Linux Based Attack Platform
http://www.kitploit.com/2021/11/threatbox-standard-and-controlled-linux.html

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest & Hacking Tools

ThreatBox - A Standard And Controlled Linux Based Attack Platform

5 viewsedited 21:13

Hacking Articles Tips Tricks Videos Tutorials

5 views21:13

Hacking Articles Tips Tricks Videos Tutorials

ThreatBox is a standard and controlled Linux based attack platform. I've used a version of this for years. It started as a collection of scripts, lived as a rolling virtual machine, existed as code to build a Linux ISO, and has now been converted to a set of ansible playbooks. Why Ansible? Why not? This seemed to be the next natural evolution to the configuration of standard attack platforms.This project uses ansible playbooks and roles to perform post deployment configuration on a linux target (Tested on Ubuntu 18.04).The project is designed to be used as a starter process in creating, managing, and using a standard attack platform for red teaming (https://www.kitploit.com/search/label/Red%20Teaming) or penetration testing.Detail on the concept of a Standard Attack Platform can be found it the book Red Team Development and Operations (https://www.kitploit.com/search/label/Operations) - A practical guide, written by Joe Vest and James Tubberville.
Features
Standard tools defined as ansible rolesCustomizations designed to make security testing easierVariable list to add or remove git repositories, OS packages, or python modules. (threatbox.yml)Version tracking of the deployed instance version and the deploy tool version. This is helpful it meeting compliance (https://www.kitploit.com/search/label/Compliance) rules and can help minimize fear by actively tracking all tools. Threatbox version created at deployment and displayed in desktop wallpaperDeployed software tracked in ~/Desktop/readmeSSH port auto-switching. The deployment starts on port 22, but reconfigures the target system to the desired SSH port using the ansible_port variable in threatbox.ymlDownload and compile several .net toolkits (i.e. SeatBelt.exe from Ghostpack https://github.com/GhostPack/Seatbelt)Most python projects installed using pipenv. Use pipenv shell in the project directory to access. See https://realpython.com/pipenv-guide/ for pipenv usage guidance
Project Files
The following list highlights key components of this project.File/DirectoryDescriptionUsagehostAnsible hosts fileUpdate with IP addresses of target ansible systemsgroup_vars/threatbox.ymlcommon variablesvariable used for the project. update as needed.threatbox_playbox.ymlPrimary ansible playbookUpdate as need to add additional roles or featuresroles/commonCommon OS platform configurationSetup common OS settings (i.e set version in background or build)roles/.other specific roles to configure or deploy toolsadd or modify roles in roles/
Quickstart

Provision
Provision one or more targets.Note: This project was tested on Ubuntu 18.04 deployed in Digitalocean
Configuration
Copy hosts.sample to hostsEdit hosts with the IP(s) of your target systemsCopy group_vars\threatbox.yml.sample to group_vars\threatbox.ymlEdit group_vars\threatbox.yml with the updated variables you would like to use Don't forget to update SSH key with a key that has access to the remote target
Ansible commands
# OSX issue https://github.com/ansible/ansible/issues/32499
if [[ "$(uname)" == "Darwin" ]]
then
export OBJC_DISABLE_INITIALIZE_FORK_SAFETY=yes;
fi

# Ansible Logging
rm ./ansible.log
export ANSIBLE_LOG_PATH="ansible.log"

# Ansible Debugging
export ANSIBLE_DEBUG=False

# Execute playbook
ansible-playbook -e ansible_python_interpreter=/usr/bin/python3 -i hosts threatbox_playbook.yml
Note: Consider using Mitogen for Ansible to gain a significant performance (https://www.kitploit.com/search/label/Performance) boost. https://mitogen.networkgenomics.com/ansible_detailed.html
Tested with this ansible.cfg
[defaults]
host_key_checking = False
pipelining = True
forks = 100
timeout = 600
stdout_callback = yaml
bin_ansible_callbacks = True
callback_whitelist = profile_roles, profile_tasks, timer

#mitogen
strategy_plugins = ~/Documents/mitogen-0.2.9/ansible_mitogen/plugins/strategy
strategy = mitogen_linear

Remotely Access the system

Console access with SSH

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest & Hacking Tools

Leading source of security tools, hacking tools, cybersecurity and network security. Learn about new tools and updates in one place.

6 viewsedited 21:13

Hacking Articles Tips Tricks Videos Tutorials

Note: SSH may be set to a non-standard port during setup. This value is set in the group_vars/threatbox.yml filesthreatboxip=10.10.10.10
sshport=52222
ssh -p $sshport -i ~/.ssh/threatbox_id_rsa root@$threatboxip

GUI Access with VNC over SSH
Note: VNC is setup but not allowed over the network. You must use an SSH tunnel to access.threatboxip=10.10.10.10
sshport=52222
ssh -p $sshport -i ~/.ssh/threatbox_id_rsa -L 5901:localhost:5901 root@$threatboxip

Notes on the project
This project uses ansbile roles. These roles may not exactly follow the ansible style. They were designed to be used as part of this project and use a single 'variable' file to control the project. The roles can easily be used in other project with minor tweaks.
Features
ThreatBox Custom Commands

___________________________
@hacking_Attack
@Hacking_Video

5 viewsedited 21:13

Hacking Articles Tips Tricks Videos Tutorials

5 views21:13

Hacking Articles Tips Tricks Videos Tutorials

Tool Categories

___________________________
@hacking_Attack
@Hacking_Video

5 viewsedited 21:13

Hacking Articles Tips Tricks Videos Tutorials

4 views21:13

Hacking Articles Tips Tricks Videos Tutorials

Tracking of all installed tools

___________________________
@hacking_Attack
@Hacking_Video

4 viewsedited 21:13

Hacking Articles Tips Tricks Videos Tutorials