Hacking Articles Tips Tricks Videos Tutorials

A TALE OF 5250$ : HOW I ACCESSED MILLIONS OF USER’S DATA INCLUDING THEIR NATIONAL ID’S

Hi, Hope you guys are doing well, And a Happy New Year, YAY! ✨, Let’s start the blog without wasting more time.Continue reading on InfoSec Write-ups »
Read more...

11 views11:29

How i got financial advisor by simply hack into their membership plan !

Hello Infosec geeksContinue reading on Medium »
Read more...

10 views11:29

Hacking Articles Tips Tricks Videos Tutorials

Mortar - Evasion Technique To Defeat And Divert Detection And Prevention Of Security Products (AV/EDR/XDR)

red teaming evasion technique to defeat and divert detection and prevention of security products.Mortar Loader performs encryption and decryption of selected binary inside the memory streams and execute it directly with out writing any malicious indicator into the hard-drive. Mortar is able to bypass modern anti-virus products and advanced XDR solutions and it has been tested and confirmed bypass for the following: Kaspersky ESET Malewarebytes Mcafee Cortex XDR Windows defender Cylance TrendMicro detailed research and techniques : https://0xsp.com/security%20research%20&%20development%20(SRD)/defeat-the-castle-bypass-av-advanced-xdr-solutions CrestCon Asia 2021 talk : https://www.youtube.com/watch?v=H7EMBz7GLMk Usage Encryptor root@kali>./encryptor -f mimikatz.exe -o bin.enc Loader (DLL) for bypassing Cortex XDR,add agressor.dll with bin.enc in the same folder and script the following bat file @echo off cmd.exe /c rundll32.exe agressor.dll,stealth for normal usage you can directly execute the agressor.dll rundll32.exe agressor.dll,dec Loader (EXE) the executable version has more options you can use, as you able to pass commands for the loaded binary ##Mimikatz dump LSA deliver.exe -d -c sekurlsa::logonpasswords -f mimikatz.enc ## Cobalt strike beacon deliver.exe -d -f cobalt.enc Compiling the Loader (windows only) the project has been coded using FPC(Free Pascal), the compiling procedures are straightforward by downloading and installing Lazarus IDE (https://www.lazarus-ide.org/index.php?page=downloads) and navigate into file > open -> Run -> build Compiling Encryptor(Linux/BSD/Arm/MacOS//windows) either by downloading and installing Lazarus-IDE from the official site(https://www.lazarus-ide.org/index.php?page=downloads) #Debian & Ubuntu apt install fpc apt install lazarus-ide Support the research if you think you have benefited from this open-source project and want more updates in the future, please mind time and efforts by making a donation https://donorbox.org/support-0xsp Download Mortar
Read more...

___________________________
@hacking_Attack
@Hacking_Video

YouTube

Bypass the Detection & Prevention Obstacle: Red Teaming Technique - Lawrence Amer | CRESTCon Asia

Presentation by Lawrence Amer (Cyber Security Manager, DarkLab Hong Kong PwC).

Watch the rest of CRESTCon Asia 2021 presentations here:
https://youtube.com/playlist?list=PLZ2XFVIKjM5sxojfat4Jx1QddoN_ouSv5

Introducing the newer uncovered technique for process…

9 viewsedited 13:02

Hacking Articles Tips Tricks Videos Tutorials

Mortar - Evasion Technique To Defeat And Divert Detection And Prevention Of Security Products (AV/EDR/XDR)
http://www.kitploit.com/2022/01/mortar-evasion-technique-to-defeat-and.html

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest & Hacking Tools

Mortar - Evasion Technique To Defeat And Divert Detection And Prevention Of Security Products (AV/EDR/XDR)

11 viewsedited 13:23

Hacking Articles Tips Tricks Videos Tutorials

10 views13:23

Hacking Articles Tips Tricks Videos Tutorials

red teaming evasion technique to defeat and divert detection and prevention of security products.Mortar Loader performs encryption (https://www.kitploit.com/search/label/Encryption) and decryption (https://www.kitploit.com/search/label/Decryption) of selected binary inside the memory streams and execute it directly with out writing any malicious indicator into the hard-drive. Mortar is able to bypass modern anti-virus products and advanced XDR solutions and it has been tested and confirmed bypass for the following: Kaspersky ESET Malewarebytes Mcafee Cortex XDR Windows defender (https://www.kitploit.com/search/label/Defender) Cylance TrendMicro
detailed research and techniques : https://0xsp.com/security%20research%20&%20development%20(SRD)/defeat-the-castle-bypass-av-advanced-xdr-solutions CrestCon Asia 2021 talk : https://www.youtube.com/watch?v=H7EMBz7GLMk Usage Encryptor ./encryptor -f mimikatz.exe -o bin.enc ">root@kali>./encryptor -f mimikatz.exe -o bin.enc

Loader (DLL) for bypassing (https://www.kitploit.com/search/label/Bypassing) Cortex XDR,add agressor.dll with bin.enc in the same folder and script the following bat file @echo off
cmd.exe /c rundll32.exe agressor.dll,stealth
for normal usage you can directly execute the agressor.dll rundll32.exe agressor.dll,dec
Loader (EXE) the executable version has more options you can use, as you able to pass commands for the loaded binary ##Mimikatz dump LSA
deliver.exe -d -c sekurlsa::logonpasswords -f mimikatz.enc

## Cobalt strike beacon
deliver.exe -d -f cobalt.enc

Compiling the Loader (windows only) the project has been coded using FPC(Free Pascal), the compiling procedures are straightforward by downloading and installing Lazarus IDE (https://www.lazarus-ide.org/index.php?page=downloads) and navigate into file > open -> Run -> build Compiling Encryptor(Linux/BSD/Arm/MacOS//windows) either by downloading and installing Lazarus-IDE from the official site(https://www.lazarus-ide.org/index.php?page=downloads) #Debian & Ubuntu

apt install fpc
apt install lazarus-ide

Support the research if you think you have benefited from this open-source project and want more updates in the future, please mind time and efforts by making a donation https://donorbox.org/support-0xsp

Download Mortar (https://github.com/0xsp-SRD/mortar)

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest & Hacking Tools

Leading source of security tools, hacking tools, cybersecurity and network security. Learn about new tools and updates in one place.

13 viewsedited 13:23

Hacking Articles Tips Tricks Videos Tutorials

10 views14:12

Hacking Articles Tips Tricks Videos Tutorials

12 views14:12

Hacking Articles Tips Tricks Videos Tutorials

Photo

Black Hat Ethical Hacking
Offensive Security Tool: Osmedeus

https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Offensive Security Tool: OsmedeusPost Views: 208 https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/BECOME-A-PATRON-AND-UNLOCK-EXCLUSIVE-VIDEOS-1.png Reading Time: 3 Minutes

Offensive Security Tool: Osmedeus GitHub Link Osmedeus Core Enginehttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/logo-transparent.png

Osmedeus – A Workflow Engine for Offensive Security
Osmedeus by J3ssie, is a Workflow Engine for Offensive Security. It was designed to build a foundation with the capability and flexibility that allow you to automatic your reconnaissance methodology on a large number of targets.

Performing Bug Bounty or Pentesting against huge companies with many indexed pages requires a special technique, experienced bug bounty hunters create their own methodologies that consist of the way they think of building a tool with speed, less false positives and more accurate results done in the way its coded. This tool, automated all these techniques and lets you focus on the findings and results which is what goes down to at the end. It combines some of the most used bug bounty tools into one whole workflow automated system ready to go! The Engine has successfully found a tremendous number of security vulnerabilities in many big companies out there with its unique reconnaissance methodology such as: Google, Microsoft, Starbucks, Apple, Netflix, PayPal and many more! FeaturesThis latest V4 Release written in GO brings outstanding new features such as:

-Better Architecture
-Faster, Stable and More Flexible
-Easier to Customize and Extend
-Auto Clean Junk Output and Backup
-Cloud Distributed Scans
-Synchronize data across machines
See Also: iOS malware can fake iPhone shut downs to snoop on camera, microphone Installation| NOTE that you need some essential tools like curl, wget, git, zip and login as root to start

bash -c “$(curl -fsSL https://raw.githubusercontent.com/osmedeus/osmedeus-base/master/install.sh)” Build the engineMake sure you installed golang >= v1.17

mkdir -p $GOPATH/src/github.com/j3ssie
git clone –depth=1 https://github.com/j3ssie/osmedeus $GOPATH/src/github.com/j3ssie/osmedeus
cd $GOPATH/src/github.com/j3ssie/osmedeus
make build
See Also: Complete Offensive Security and Ethical Hacking Course Usage# Practical Usage:
osmedeus scan -f [flowName] -t [target]
osmedeus scan -f [flowName] -T [targetsFile]
osmedeus scan -f /path/to/flow.yaml -t [target]
osmedeus scan -m /path/to/module.yaml -t [target] –params ‘port=9200’
osmedeus scan -m /path/to/module.yaml -t [target] -l /tmp/log.log
cat targets | osmedeus scan -f sample

# Example Commands:
osmedeus scan -t target.com
osmedeus scan -T list_of_targets.txt -W custom_workspaces
osmedeus scan -t target.com -w workspace_name –debug
osmedeus scan -f single -t www.sample.com
osmedeus scan -f ovuln-T list_of_target.txt
osmedeus scan -m ~/osmedeus-base/workflow/test/dirbscan.yaml -t list_of_urls.txt
osmedeus health
ls ~/.osmedeus/storages/summary/ | osmedeus scan -m ~/osmedeus-base/workflow/test/dirbscan.yaml
ls ~/.osmedeus/storages/summary/ | osmedeus scan -m ~/osmedeus-base/workflow/test/busting.yaml -D

# Start Web UI at https://localhost:8000/ui/
osmedeus server
# login with credentials from `~/.osmedeus/config.yaml`

# Delete workspace
osmedeus config delete -w workspace_name
See Also: Hacking stories – Rafael Núñez (aka RaFa), hacking NASA with the hacking group: World of Hell https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/Untitled-design.png Recent Tools* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/basic_spraying[...]

___________________________
@hacking_Attack
@Hacking_Video

12 viewsedited 14:12

Hacking Articles Tips Tricks Videos Tutorials

Photo

Black Hat Ethical Hacking
Partially Unpatched VMware Bug Opens Door to Hypervisor Takeover

https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Partially Unpatched VMware Bug Opens Door to Hypervisor TakeoverPost Views: 162 https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/BECOME-A-PATRON-AND-UNLOCK-EXCLUSIVE-VIDEOS-1.png Reading Time: 2 Minutes
A security vulnerability in VMware’s Cloud Foundation, ESXi, Fusion and Workstation platforms could pave the way for hypervisor takeover in virtual environments – and a patch is still pending for some users.
The issue affects a wide swath of the virtualization specialist’s portfolio and affects Windows, Linux and Mac users. Details about the platforms:

* Cloud Foundation is VMware’s multicloud management platform, providing software-defined services for compute, storage, network, security, Kubernetes and so on.
* ESXi is a bare-metal hypervisor that installs on a server and partitions it into multiple virtual machines (VMs).
* Fusion is a software hypervisor that allows Intel-based Macs to run VMs with guest operating systems – such as Microsoft Windows, Linux, NetWare, Solaris or macOS.
* Workstation enables users to set up VMs on a single physical machine.
The bug (CVE-2021-22045) is a high-severity heap-overflow vulnerability carrying a CVSS rating of 7.7 out of 10. Heap overflows are memory issues that can result in data corruption or unexpected behavior by any process that accesses the affected memory area – in some cases resulting in remote code execution (RCE).

In this case, the problem specifically exists in the CD-ROM device emulation function of the affected products.

“A malicious actor with access to a virtual machine with CD-ROM device emulation may be able to exploit this vulnerability in conjunction with other issues, to execute code on the hypervisor from a virtual machine,” the vendor noted in its advisory. “Successful exploitation requires a CD image to be attached to the virtual machine.”
See Also: Complete Offensive Security and Ethical Hacking Course
Reno Robert, senior vulnerability researcher for Trend Micro’s Zero Day Initiative, told Threatpost that the issue results from “the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer.” Complex but Dangerous ExploitationRobert added that even though the bug allows an untrusted guest OS user to execute code on the hypervisor, “an attacker would not have control over the data written, so exploitation this would be difficult.”

Hence the need to be used “in conjunction with other issues.” Reno explained that an example of other issues “could be an information-disclosure vulnerability that provide details on the memory layout. This would making exploitation more feasible.”

If successful though, attackers could compromise the host operating system of the hypervisor. Taking over a hypervisor, which is the highly privileged software that creates and runs VMs and governs how resources are shared among them (such as memory and processing), can give cybercriminals a clear path to accessing any of the data or applications stored in the VMs it controls, and executing code or installing files on those VMs, depending on the security controls that are implemented.

Researcher “Jaanus K\xc3\xa4\xc3\xa4p” with Clarified Security and Trend Micro’s ZDI were credited with discovering the bug.
See Also: Hackers start pushing malware in worldwide Log4Shell attacks Patch VMware CVE-2021-22045 NowAffected product versions are: ESXi 6.5, 6.7 and 7 (version 7 remains unpatched for now); Fusion 12.x; Workstation 16.x; and all versions [...]

___________________________
@hacking_Attack
@Hacking_Video

Black Hat Ethical Hacking

Partially Unpatched VMware Bug Opens Door to Hypervisor Takeover | Black Hat Ethical Hacking

A security vulnerability in VMware’s Cloud Foundation, ESXi, Fusion and Workstation platforms could pave the way for hypervisor takeover in virtual environments – and a patch is still pending for some users.

8 viewsedited 14:12

About

Blog

Apps

Platform