Hacking Articles Tips Tricks Videos Tutorials

KitPloit - PenTest Tools!
Log4J-Detector - Detects Log4J versions on your file-system within any application that are vulnerable to CVE-2021-44228 and CVE-2021-45046

___________________________
@hacking_Attack
@Hacking_Video

Kitploit

Kitploit – Maintenance in Progress

Kitploit is temporarily under maintenance. We’ll be back shortly with improvements.

9 viewsedited 06:23

Hacking Articles Tips Tricks Videos Tutorials

8 views07:39

Hacking Articles Tips Tricks Videos Tutorials

Photo

Kali Linux Tutorials
Private Set Membership (PSM) : Cryptographic Protocol That Allows Clients To Privately Query

Private Set Membership (PSM) is a cryptographic protocol that allows clients to privately query whether the client’s identifier is a member of a set of identifiers held by a server in a privacy-preserving manner.

At a high level, PSM provides the following privacy guarantees:

* The server does not learn the client’s queried identifier in the plaintext.
* The server does not learn whether the client’s query results in a membership or non-membership determination.
* The querying client does not learn any information about the set of identifiers that are stored by the server beyond whether the querying client’s identifier is a member or not of the server-held set of identifiers. In other words, the querying client learns the bare minimum amount of information which is only the answer of the membership query.

Dependencies

The Private Set Membership library requires the following dependencies:

* Abseil for C++ common libraries.
* Bazel for building the library.
* BoringSSL for underlying cryptographic operations.
* GFlag for flags. Needed to use glog.
* GLog for logging.
* Google Test for unit testing the library.
* Protocol Buffers for data serialization.
* Shell for fully homomorphic encryption.
* Tink for cryptographic PRNGs.

How to build

In order to run this library, you need to install Bazel, if you don’t have it already. [Follow the instructions for your platform on the Bazel website. Make sure you are installing version 4.2.1 or above.] (https://docs.bazel.build/versions/master/install.html)

You also need to install Git, if you don’t have it already. Follow the instructions for your platform on the Git website.

Once you’ve installed Bazel and Git, open a Terminal and clone the repository into a local folder.

Navigate into the private-membershipfolder you just created, and build the library and dependencies using Bazel. Note, the library must be built using C++17.

cd private-membership
bazel build … –cxxopt=’-std=c++17′

You may also run all tests (recursively) using the following command:

bazel test … –cxxopt=’-std=c++17′
Download

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials

Private Set Membership : Cryptographic Protocol That Allows Clients

Private Set Membership (PSM) is a cryptographic protocol that allows clients to privately query whether the client's identifier is a member.

7 viewsedited 07:39

Hacking Articles Tips Tricks Videos Tutorials

5 views07:39

Hacking Articles Tips Tricks Videos Tutorials

Photo

Kali Linux Tutorials
RottenPotatoNG : A C++ DLL And Standalone C++ Binary – No Need For Meterpreter Or Other Tools

RottenPotatoNG generates a DLL and EXE file. The DLL contains all the code necessary to perform the RottenPotato attack and get a handle to a privileged token. The MSF RottenPotato Test Harness project simply shows example usage for the DLL. For more examples, see https://github.com/hatRiot/token-priv/tree/master/poptoke/poptoke, specifically the SeAssignPrimaryTokenPrivilege.cpp and SeImpersonatePrivilege.cpp files.

RottenPotato EXE

This project is identical to the above, except the code is all wrapped into a single project/binary. This may be more useful for some penetration testing scenarios.

Modify the “main” method in MSFRottenPotato.cpp to change what command will be run. By default it just runs cmd.exe to pop a command shell.
Download

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials

RottenPotatoNG : A C++ DLL And Standalone C++ Binary

RottenPotatoNG generates a DLL and EXE file. The DLL contains all the code necessary to perform the RottenPotato attack.

7 viewsedited 07:39

Hacking Articles Tips Tricks Videos Tutorials

7 views08:29

Hacking Articles Tips Tricks Videos Tutorials

Photo

Hacking on Medium
Pre-Engagement in Penetration Testing

https://cdn-images-1.medium.com/max/2600/1*JNNd4EMiGPPjDsExpYU5IQ.jpeg
Introduction Ethical Hacking & Cybersecurity fundamentals

Continue reading on CodeX »

___________________________
@hacking_Attack
@Hacking_Video

Medium

Pre-Engagement in Penetration Testing

Introduction Ethical Hacking & Cybersecurity fundamentals

7 viewsedited 08:29

Hacking Articles Tips Tricks Videos Tutorials

6 views08:29

Hacking Articles Tips Tricks Videos Tutorials

Photo

Hacking on Medium
Are NFTs A Scam? Hacker Uploads Every NFT to ‘NFT Bay’ to Prove a Point

https://cdn-images-1.medium.com/max/746/1*Lg8zHi2lcNfmNfAYmdTuGA.png
– One man has created a 20TB repository of NFTs called ‘NFT Bay’.
— Hacker Uploads Every NFT to ‘NFT Bay’ to Prove a Point.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Medium

Are NFTs A Scam? Hacker Uploads Every NFT to ‘NFT Bay’ to Prove a Point

– One man has created a 20TB repository of NFTs called ‘NFT Bay’. — Hacker Uploads Every NFT to ‘NFT Bay’ to Prove a Point.

7 viewsedited 08:29

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
Read all covid qr data

There is any application to read all data from the covid qr? Not the government ones that tells if it's ok or not. I want to know which data is stored in my covid qr.

submitted by /u/randonim
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Read all covid qr data

There is any application to read all data from the covid qr? Not the government ones that tells if it's ok or not. I want to know which data is...

8 viewsedited 09:33

Hacking Articles Tips Tricks Videos Tutorials

8 views09:44

Hacking Articles Tips Tricks Videos Tutorials

Photo

Black Hat Ethical Hacking
TellYouThePass ransomware revived in Linux, Windows Log4j attacks

https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png TellYouThePass ransomware revived in Linux, Windows Log4j attacksPost Views: 15 https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/BECOME-A-PATRON-AND-UNLOCK-EXCLUSIVE-VIDEOS-1.png Reading Time: 1 Minute
Threat actors have revived an old and relatively inactive ransomware family known as TellYouThePass, deploying it in attacks against Windows and Linux devices targeting a critical remote code execution bug in the Apache Log4j library.
KnownSec 404 Team’s Heige first reported these attacks on Twitter on Monday after observing that the ransomware was dropped on old Windows systems using exploits abusing the flaw tracked as CVE-2021-44228 and known as Log4Shell.

Heige’s report was confirmed by the Sangfor Threat Intelligence Team, who successfully captured one of the TellYouThePass ransomware samples deployed in attacks using Log4Shell exploits mostly impacting Chinese targets, according to Curated Intelligence.

As they further discovered (findings that CronUP’s Germán Fernández also confirmed), the ransomware has a Linux version that harvests SSH keys and moves laterally throughout victims’ networks.

“It is worth noting that this is not the first time that Tellyouthepass ransomware has used high-risk vulnerabilities to launch attacks,” Sangfor researchers said. “As early as last year, it had used Eternal Blue vulnerabilities to attack multiple organizational units.”
See Also: Complete Offensive Security and Ethical Hacking Course
Other security researchers [1, 2] have also analyzed one of the ransomware samples deployed in these attacks and tagged it as “likely belonging” to the TellYouThePass family.

According to submission stats to the ID Ransomware service, TellYouThePass ransomware has seen a massive and sudden spike in activity after Log4Shell proof-of-concept exploits were released online.
https://www.bleepstatic.com/images/news/u/1109292/2021/TellYouThePass%20ransomware%20submissions.png
Log4Shell exploited in ransomware attacksTellYouThePass is not the first ransomware strain deployed in Log4Shell attacks since financially-motivated attackers began injecting Monero miners on compromised systems and state-backed hackers started exploiting it to create footholds for follow-on activity.

BitDefender first reported they found a new ransomware family (tagged by some as a wiper) they dubbed Khonsari being installed directly via Log4Shell exploits.

The Microsoft 365 Defender Threat Intelligence Team also saw Khonsari ransomware payloads dropped on self-hosted Minecraft servers.

Last but not least, Conti ransomware operators have also added a Log4Shell exploit to their arsenal to move laterally through targets’ networks, gain access to VMware vCenter Server instances, and encrypt virtual machines.
See Also: Offensive Security Tool: log4j-scan In related news, CISA ordered Federal Civilian Executive Branch agencies today to patch their systems against the Log4Shell vulnerability within the next six days, until December 23.

The cybersecurity agency has also recently added the flaw to its Known Exploited Vulnerabilities Catalog, which also requires expedited action from federal agencies to mitigate the bug until December 24.
See Also: Hacking stories – Rafael Núñez (aka RaFa), hacking NASA with the hacking group: World of Hell
Source: www.bleepingcomputer.com (Click Link)https://www.blackhatethicalh[...]

___________________________
@hacking_Attack
@Hacking_Video

Black Hat Ethical Hacking

TellYouThePass ransomware revived in Linux, Windows Log4j attacks | Black Hat Ethical Hacking

Threat actors have revived an old and relatively inactive ransomware family known as TellYouThePass, deploying it in attacks against Windows and Linux devices targeting a critical remote code execution bug in the Apache Log4j library.

9 viewsedited 09:44

Hacking Articles Tips Tricks Videos Tutorials

Black Hat Ethical Hacking TellYouThePass ransomware revived in Linux, Windows Log4j attacks https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png TellYouThePass ransomware revived in Linux, Windows Log4j attacksPost Views:…