Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
AutoRDPwn - The Shadow Attack Framework

https://gitlab.com/JoelGMSec/AutoRDPwn

AutoRDPwn is a post-exploitation framework created in Powershell, designed primarily to automate the Shadow attack on Microsoft Windows computers. This vulnerability (listed as a feature by Microsoft) allows a remote attacker to view his victim's desktop without his consent, and even control it on demand, using tools native to the operating system itself.

Thanks to the additional modules, it is possible to obtain a remote shell through Netcat, dump system hashes with Mimikatz, load a remote keylogger and much more. All this, Through a completely intuitive menu in seven different languages.

Additionally, it is possible to use it in a reverse shell through a series of parameters that are described in the usage section.

submitted by /u/DrinkMoreCodeMore
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

AutoRDPwn - The Shadow Attack Framework

https://gitlab.com/JoelGMSec/AutoRDPwn **AutoRDPwn** is a post-exploitation framework created in Powershell, designed primarily to automate the...

3 viewsedited 20:54

3 views20:54

Hacking Articles Tips Tricks Videos Tutorials

Photo

hacking: security in practice
Learn Red Teaming & Malware Development for Advent Of Code

Hey, I wanted to improve my red teaming and malware development skills this december, so I came up with these challenges, which should be fairly bite sized challenges to get into red teaming & hacking for those that already have some pentesting/security experience:

https://github.com/fumamatar/Red-Team-Advent-of-Code

If anyone wants to join, feel free. Maybe this can motivate someone to get into this awesome sector of it security.

submitted by /u/sorhinco
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Learn Red Teaming & Malware Development for Advent Of Code

Hey, I wanted to improve my red teaming and malware development skills this december, so I came up with these challenges, which should be fairly...

3 viewsedited 20:54

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
Hacking with C#

Hello,

I have been creating hacks for some unity games, meaning that I am very proficient in C# but am struggling to move forward. Is C# used for hacking, and if so could you guys recommend some starter projects?

submitted by /u/David_8J
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking with C#

Hello, I have been creating hacks for some unity games, meaning that I am very proficient in C# but am struggling to move forward. Is C# used for...

3 viewsedited 20:54

Hacking Articles Tips Tricks Videos Tutorials

3 views21:41

Hacking Articles Tips Tricks Videos Tutorials

3 views21:41

Hacking Articles Tips Tricks Videos Tutorials

Photo

Exploit Collector
Nextar C472 POS DLL Hijacking

https://1.bp.blogspot.com/-HlvbbOwsdTc/WWlvV_wSsQI/AAAAAAAAIOA/psrlTyexNtUDdre2JEY7YvqsGP1V8LJKQCLcBGAs/s1600/h47.png
Nextar C472 POS suffers from a dll hijacking vulnerability.

MD5 | 042ade5bb6a561b509ee91f0791e6f7a

Download
/*
Description:
A vulnerability exists in windows that allows other applications dynamic link libraries
to execute malicious code without the users consent, in the privelage context of the targeted application.

Exploit Title: Nextar C472 POS DLL Hijacking Exploit (nxmm.dll - mdmdregistration.dll)
Date: 28/11/2021
Author: Yehia Elghaly
Vendor: https://www.nextar.com/
Software: https://download.nextar.com/latest/setup_nex_en.exe
Version: Latest Nextar C472 POS
Tested on: Windows 7 Pro x86 - Windows 10 x64
Vulnerable extensions: .htm .html
*/

/*
Instructions:

1. Create dll using msfvenom (sudo msfvenom --platform windows -p windows/messagebox TEXT="Nex POS Hacked - YME" -f dll > nxmm.dll) or compile the code
2. Replace nxmm.dll - mdmdregistration.dll or shcore.dll in Nex directory C:\Nex with your newly dll
3. Launch NexAdmin.exe
4. PoP UP MessageBox!
*/
#include
Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Kitploit

Nextar C472 POS DLL Hijacking

Exploit Collector is the ultimate collection of public exploits and exploitable vulnerabilities. Remote/Local Exploits, Shellcode and 0days.

4 viewsedited 21:41

Hacking Articles Tips Tricks Videos Tutorials

3 views21:41

Hacking Articles Tips Tricks Videos Tutorials

Photo