ZipExec - A Unique Technique To Execute Binaries From A Password Protected Zip

ZipExec is a Proof-of-Concept (POC) tool to wrap binary-based tools into a password-protected zip file. This zip file is then base64 encoded into a string that is rebuilt on disk. This encoded string is then loaded into a JScript file that when executed, would rebuild the password-protected zip file on disk and execute it. This is done programmatically by using COM objects to access the GUI-based functions in Windows via the generated JScript loader, executing the loader inside the password-protected zip without having to unzip it first. By password protecting the zip file, it protects the binary from EDRs and disk-based or anti-malware scanning mechanisms. Installation The first step as always is to clone the repo. Before you compile ZipExec you'll need to install the dependencies. To install them, run following commands: go get github.com/yeka/zip Then build it go build ZipExec.go or go get github.com/Tylous/ZipExec Help sandbox evasion using IsDomainedJoined. ">./ZipExec -h. \ /||_ / / / | _ \| )\\ \/ // _ \_/ _\ / /_ | | |_> > \> <\ _/\ \_ /_ \|_| _/_ /_/\_ \\_ >\_ > \/ |_| \/ \/ \/ \/ (@Tyl0us)Usage of ./ZipExec: -I string Path to the file containing binary to zip. -O string Name of output file (e.g. loader.js) -sandbox Enables sandbox evasion using IsDomainedJoined. Download ZipExec
Read more...

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
ZipExec - A Unique Technique To Execute Binaries From A Password Protected Zip

http://1.bp.blogspot.com/-KNZqYc058e8/YZ3QB79eJDI/AAAAAAAA3_0/qYprCfc_n0QiAs9zCtdOMGGQ0SQdKSGeACK4BGAYYCw/w640-h360/ZipExec_1-745577.gif

ZipExec is a Proof-of-Concept (POC) tool to wrap binary-based tools into a password-protected zip file. This zip file is then base64 encoded into a string that is rebuilt on disk. This encoded string is then loaded into a JScript file that when executed, would rebuild the password-protected zip file on disk and execute it. This is done programmatically by using COM objects to access the GUI-based functions in Windows via the generated JScript loader, executing the loader inside the password-protected zip without having to unzip it first. By password protecting the zip file, it protects the binary from EDRs and disk-based or anti-malware scanning mechanisms.
Installation

The first step as always is to clone the repo. Before you compile ZipExec you'll need to install the dependencies. To install them, run following commands:

go get github.com/yeka/zip


Then build it

go build ZipExec.go


or

go get github.com/Tylous/ZipExec

Help

sandbox evasion using IsDomainedJoined. ">./ZipExec -h

__________.__ ___________
\____ /|__|_____\_ _____/__ ___ ____ ____
/ / | \____ \| __)_\ \/ // __ \_/ ___\
/ /_ | | |_> > \> <\
/_______ \|__| __/_______ /__/\_ \\___ >\___ >
\/ |__| \/ \/ \/ \/
(@Tyl0us)

Usage of ./ZipExec:
-I string
Path to the file containing binary to zip.
-O string
Name of output file (e.g. loader.js)
-sandbox
Enables sandbox evasion using IsDomainedJoined.

Download ZipExec

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
What’s the Difference Between SASE and SD-WAN?

While SD-WAN is a key part of a hybrid workplace and multicloud operation, it should be treated as a stepping stone to SASE, not an alternative.

Dark Reading: Attacks/Breaches
Attacker Sentenced in Multimillion-Dollar SIM Hijacking Scheme

A sixth member of international hacking group The Community was sentenced to 10 months in prison and ordered to pay $121,549.37 in restitution.

___________________________
@hacking_Attack
@Hacking_Video

Easy SQLi in Amazon subsidiary using Sqlmap
https://hector0x.medium.com/easy-sqli-in-amazon-subsidiary-using-sqlmap-ff469013671b?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hey all,Continue reading on Medium » (https://hector0x.medium.com/easy-sqli-in-amazon-subsidiary-using-sqlmap-ff469013671b?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
DAMDATA SCADA— Dam monitoring system in a physical infrastructure vulnerabilities

https://cdn-images-1.medium.com/max/600/1*w9YQQAVi7zIUn5-qMoMk9A.jpeg
DAMDATA is a web application for the comprehensive management of auscultation data.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How to hack Toxic — HachTheBox WriteUp

https://cdn-images-1.medium.com/max/600/1*lGHO34qnZDJmxUuB5u3rdg.png
De LFI a RCE

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Easy SQLi in Amazon subsidiary using Sqlmap

https://cdn-images-1.medium.com/max/660/0*lpCltvnZO4q2ftpS.png
Hey all,

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Panasonic sufre una violación de datos después de que piratas informáticos piratearan su red

https://cdn-images-1.medium.com/max/1118/0*tDXT0VOAXYBBA5NP
Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
What are cables that connects a ESP 8266 flasher to a phone charging slot called?

I’m trying to buy a connector or micro usb , idk what it’s called, that connects a phone charging a lot to a ESP8266 flasher. I’m not sure what to search up. Any links where I can buy them?

submitted by /u/jac5423
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
New here

can anyone assist on how to find out deep web information on businesses and persons of specific interest. Mainly lawsuits, arrests, money laundering, etc. idk where to start when trying to dig deep on a person

submitted by /u/Expensive_Ad_0613
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Kaufen 6cladba, 6cl-adbb-b, 5cladba, 5cl-adb, 5fadb, 4fadb, 2fdck, Jwh-018, 7a-19, 7add, 7ab
https://medium.com/@Www.premiumchemLab.co/kaufen-6cladba-6cl-adbb-b-5cladba-5cl-adb-5fadb-4fadb-2fdck-jwh-018-7a-19-7add-7ab-81609797c8e5?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video