Hacking Articles Tips Tricks Videos Tutorials
Photo
Kali Linux Tutorials
Stacs : Static Token And Credential Scanner
Stacs is a YARA powered static credential scanner which supports binary file formats, analysis of nested archives, composable rulesets and ignore lists, and SARIF reporting. What does STACS support?
Currently, STACS supports recursive unpacking of tarballs, gzips, bzips, zips, 7z, iso, rpm and xz files. As STACS works on detected file types, rather than the filename, propriatary file formats based on these types are automatically supported (such as Docker images, Android APKs, and Java JAR fles). Who should use STACS?
STACS is designed for use by any teams who release binary artifacts. STACS provides developers the ability to automatically check for accidental inclusion of static credentials and key material in their releases.
However, this doesn’t mean STACS can’t help with SaaS applications, enterprise software, or even source code!
As an example, STACS can be used to find static credentials in Docker images uploaded to public and private container registries. It can also be used to find credentials accidentally compiled in to executables, packages for mobile devices, and “enterprise archives” – such as those used by Java application servers. How does it work?
STACS detects static credentials using “rule packs” provided to STACS when run. These rule packs define a set of YARA rules to run against files provided to STACS. When a match against a rule is found, a “finding” is generated. These findings represent potential credentials inside of a file, and are reported on for a developer to remediate or “ignore”.
If the finding is found to be a false positive – that is, a match on something other than a real credential – the developer can generate a set of “ignore lists” to ensure that these matches don’t appear in future reports.
The real power from STACS comes from the automatic detection and unpacking of nested archives, and composable ignore lists and rule packs. Ignore lists?
In order to allow flexible and collaborative usage, STACS supports composable ignore lists. This allows for an ignore list to include other ignore lists which enable composition of a “tree of ignores” based on organisational guidelines. These ignore lists are especially useful in organisations where many of the same frameworks or products are used. If a team has already marked a finding as a false positive, other teams get the benefit of not having to triage the same finding. Rule packs?
In the same manner as ignore lists, rule packs are also composable. This enables an organisation to define a baseline set of rules for use by all teams, while still allowing teams to maintain rulesets specific to their products. How do I use it?
The easiest way to use STACS is using the Docker images published to Docker Hub. However, STACS can also be installed directly from Python’s PyPI, or by cloning this repository. See the relevant sections below to get started!
A cloud based service is coming soon which allows integration directly in build and release pipelines to enable detection of static credentials before release! Docker
Using the published images, STACS can be used to scan artifacts right away! The STACS Docker images provides a number of volume mounts for files wanted to be scanned to be mounted directly into the scan container.
As an example, to scan everything in the current folder, the following command can be run (Docker must be installed).
docker run \
–rm \
–mount type=bind,source=$(pwd),target=/mnt/stacs/input \
stacscan/stacs:latest
By default, STACS will output any findings in SARIF format directly to STDOUT and in order to keep things orderly, all log messages will be sent to STDERR. For more advanced use cases, a number of other volume mounts are provided. These allow the user to control the rule packs, ignore lists, and a cache directories to use. PyPi
STACS ca[...]
___________________________
@hacking_Attack
@Hacking_Video
Stacs : Static Token And Credential Scanner
Stacs is a YARA powered static credential scanner which supports binary file formats, analysis of nested archives, composable rulesets and ignore lists, and SARIF reporting. What does STACS support?
Currently, STACS supports recursive unpacking of tarballs, gzips, bzips, zips, 7z, iso, rpm and xz files. As STACS works on detected file types, rather than the filename, propriatary file formats based on these types are automatically supported (such as Docker images, Android APKs, and Java JAR fles). Who should use STACS?
STACS is designed for use by any teams who release binary artifacts. STACS provides developers the ability to automatically check for accidental inclusion of static credentials and key material in their releases.
However, this doesn’t mean STACS can’t help with SaaS applications, enterprise software, or even source code!
As an example, STACS can be used to find static credentials in Docker images uploaded to public and private container registries. It can also be used to find credentials accidentally compiled in to executables, packages for mobile devices, and “enterprise archives” – such as those used by Java application servers. How does it work?
STACS detects static credentials using “rule packs” provided to STACS when run. These rule packs define a set of YARA rules to run against files provided to STACS. When a match against a rule is found, a “finding” is generated. These findings represent potential credentials inside of a file, and are reported on for a developer to remediate or “ignore”.
If the finding is found to be a false positive – that is, a match on something other than a real credential – the developer can generate a set of “ignore lists” to ensure that these matches don’t appear in future reports.
The real power from STACS comes from the automatic detection and unpacking of nested archives, and composable ignore lists and rule packs. Ignore lists?
In order to allow flexible and collaborative usage, STACS supports composable ignore lists. This allows for an ignore list to include other ignore lists which enable composition of a “tree of ignores” based on organisational guidelines. These ignore lists are especially useful in organisations where many of the same frameworks or products are used. If a team has already marked a finding as a false positive, other teams get the benefit of not having to triage the same finding. Rule packs?
In the same manner as ignore lists, rule packs are also composable. This enables an organisation to define a baseline set of rules for use by all teams, while still allowing teams to maintain rulesets specific to their products. How do I use it?
The easiest way to use STACS is using the Docker images published to Docker Hub. However, STACS can also be installed directly from Python’s PyPI, or by cloning this repository. See the relevant sections below to get started!
A cloud based service is coming soon which allows integration directly in build and release pipelines to enable detection of static credentials before release! Docker
Using the published images, STACS can be used to scan artifacts right away! The STACS Docker images provides a number of volume mounts for files wanted to be scanned to be mounted directly into the scan container.
As an example, to scan everything in the current folder, the following command can be run (Docker must be installed).
docker run \
–rm \
–mount type=bind,source=$(pwd),target=/mnt/stacs/input \
stacscan/stacs:latest
By default, STACS will output any findings in SARIF format directly to STDOUT and in order to keep things orderly, all log messages will be sent to STDERR. For more advanced use cases, a number of other volume mounts are provided. These allow the user to control the rule packs, ignore lists, and a cache directories to use. PyPi
STACS ca[...]
___________________________
@hacking_Attack
@Hacking_Video
Kali Linux Tutorials
Stacs : Static Token And Credential Scanner !!! Kali Linux Totorials
Stacs is a YARA powered static credential scanner which supports binary file formats, analysis of nested archives, composable rulesets .
Hacking Articles Tips Tricks Videos Tutorials
Kali Linux Tutorials Stacs : Static Token And Credential Scanner Stacs is a YARA powered static credential scanner which supports binary file formats, analysis of nested archives, composable rulesets and ignore lists, and SARIF reporting. What does STACS…
n also be installed directly from Python’s PyPi. This provides a
STACS can be installed directly from PyPi using:
pip install stacs Download
___________________________
@hacking_Attack
@Hacking_Video
stacscommand which can then be used by developers to scan projects directly in their local development environments.STACS can be installed directly from PyPi using:
pip install stacs Download
___________________________
@hacking_Attack
@Hacking_Video
Hacking Articles Tips Tricks Videos Tutorials
Photo
Kali Linux Tutorials
ThreadBoat : Program Uses Thread Execution Hijacking To Inject Native Shell-code Into A Standard Win32 Application
ThreadBoat is a Program uses Thread Hijacking to Inject Native Shellcode into a Standard Win32 Application.
About
I developed this small project to continue my experiences of different code injection methods and to allow RedTeam security professionals to utilize this method as a unique way to perform software penetration testing. With Thread hijacking, it allows the hijacker.exe program to susepend a thread within the target.exe program allowing us to write shellcode to that target thread, and later be executed (via; WriteProcessMemory(), SetThreadContext(), ResumeThread(), CreateThread()).
Example GIF (Credits To Endgame)
https://blogger.googleusercontent.com/img/a/AVvXsEirSHxMxNwF5KmUw5oEQMobIsnih0D4pqb_uUL47Ab7v3UVuVOlcg3pba7R4cIKABISJrMdRJYEgWt9meeQgKoqYhvoUoVdJL5UmpmJhIbtAzSYbJ6llJwbDEU8h4FiMh9srkg7aB0nAg4lnztQOTfDop6CLe11qb61nVHP3n9hyWpiER3I4DHgRhYi=s640
Usage
int main()
{
System sys;
Interceptor incp;
Exception exp;
sys.returnVersionState();
if (sys.returnPrivilegeEscalationState())
{
std::cout <<
}
if (DWORD m_procId = incp.FindWin32ProcessId((PCHAR)m_win32ProcessName))
{
incp.ExecuteWin32Shellcode(m_procId);
}
system(“PAUSE”);
return 0;
}
Environment
* Windows Vista+sssss
* Visual C++
Libs
* Winapi
* user32.dll
* kernel32.dll
* ntdll.dll
Download
___________________________
@hacking_Attack
@Hacking_Video
ThreadBoat : Program Uses Thread Execution Hijacking To Inject Native Shell-code Into A Standard Win32 Application
ThreadBoat is a Program uses Thread Hijacking to Inject Native Shellcode into a Standard Win32 Application.
About
I developed this small project to continue my experiences of different code injection methods and to allow RedTeam security professionals to utilize this method as a unique way to perform software penetration testing. With Thread hijacking, it allows the hijacker.exe program to susepend a thread within the target.exe program allowing us to write shellcode to that target thread, and later be executed (via; WriteProcessMemory(), SetThreadContext(), ResumeThread(), CreateThread()).
Example GIF (Credits To Endgame)
https://blogger.googleusercontent.com/img/a/AVvXsEirSHxMxNwF5KmUw5oEQMobIsnih0D4pqb_uUL47Ab7v3UVuVOlcg3pba7R4cIKABISJrMdRJYEgWt9meeQgKoqYhvoUoVdJL5UmpmJhIbtAzSYbJ6llJwbDEU8h4FiMh9srkg7aB0nAg4lnztQOTfDop6CLe11qb61nVHP3n9hyWpiER3I4DHgRhYi=s640
Usage
int main()
{
System sys;
Interceptor incp;
Exception exp;
sys.returnVersionState();
if (sys.returnPrivilegeEscalationState())
{
std::cout <<
}
if (DWORD m_procId = incp.FindWin32ProcessId((PCHAR)m_win32ProcessName))
{
incp.ExecuteWin32Shellcode(m_procId);
}
system(“PAUSE”);
return 0;
}
Environment
* Windows Vista+sssss
* Visual C++
Libs
* Winapi
* user32.dll
* kernel32.dll
* ntdll.dll
Download
___________________________
@hacking_Attack
@Hacking_Video
Kali Linux Tutorials
ThreadBoat : Program Uses Thread Execution Hijacking
ThreadBoat is a Program uses Thread Hijacking to Inject Native Shellcode into a Standard Win32 Application.
Hacking Articles Tips Tricks Videos Tutorials
Photo
Black Hat Ethical Hacking
Offensive Security Tool: Ivy
https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Offensive Security Tool: IvyPost Views: 110 https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/BECOME-A-PATRON-AND-UNLOCK-EXCLUSIVE-VIDEOS-1.png Reading Time: 5 Minutes
Offensive Security Tool: Ivy GitHub Link DescriptionStill, Social Engineering Attacks such as Phishing attacks that take place as part of an Offensive Security Solution require manually testing and crafting a payload that goes with the scenario. Although many FUDs (Fully Undetectable Payloads) in EXE formats can still be crafted, using VBS and Microsoft Office Files and this specific technique can bypass several mechanisms due to the way it executes arbitrary macro code into Visual Basic directly in Memory. The loader does this by utilizing programmatical access in the VBA object environment to load, decrypt and execute shellcode.
Ivy by optiv is a payload creation framework for the execution of arbitrary VBA (macro) source code in memory. Ivy’s loader does this by abusing programmatical access in the VBA object environment to load, decrypt, and execute shellcode. This technique is as close as possible to be truly fileless, as most fileless attacks these days require some sort of files being dropped on disk, as a result bypassing standard signature-based rules for detecting VBA code. Typical VBA payloads have the following characteristics:
* Exist in Macro enabled Office Documents
* These Macro Documents exist on disk
By running purely in memory, these behavior characteristics makes it harder to be detected by EDRs.
Ivy’s loaders are encrypted using RC4 encryption (AES encryption causes a lot of bloat and takes forever for VBA to decrypt) and then broken into separate strings, preventing any sandboxing from recognizing these strings as encrypted strings that should be investigated. This also prevents any decoding mechanism from recognizing these payloads as anything but garbage characters.
Ivy’s loader first performs a registry query to enable “Trust access to the VBA project object mode”. This registry key value is stored in user-mode which allows the user to modify the value without requiring any elevated permissions. The registry value is set from a zero to 1; if the registry key does not exist Ivy will create it with a value of “1”. With this value enabled, programmatical access is allowed to the VBA object environment from a different process.
https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/Trusted-Access.png
Once this is done the loader will then spawn a hidden Excel process and load the encrypted strings into a VBA function. This is done by using ActiveX to simulate the GUI actions of doing the same task. This helps bypass a lot of traditional controls in place to monitor for execution. As a result, the decrypt function and shellcode are moved from one memory buffer to another, never touching disk. Finally, the loader uses command-GUI calls and executes the run function, which simulates the act of clicking on the run macro button in the GUI panel of VBA, beginning the decryption function, followed by the actual execution of the shellcode. IMPORTANTThe target endpoint must have Microsoft Office installed and activated in order to run because Ivy relies on a abusing the programmatically access to the VBA environment of Microsoft office.
See Also: AWS fixes security flaws that exposed AWS customer data EDR Unhook ModeThis allows Ivy to use low-level system calls to build its own version of the Windows function WriteProcessMemory by referencing the direct memory address and register values indirectly. Ivy can overwrite sections of memory that are not writable without calling any of the memory ch[...]
___________________________
@hacking_Attack
@Hacking_Video
Offensive Security Tool: Ivy
https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Offensive Security Tool: IvyPost Views: 110 https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/BECOME-A-PATRON-AND-UNLOCK-EXCLUSIVE-VIDEOS-1.png Reading Time: 5 Minutes
Offensive Security Tool: Ivy GitHub Link DescriptionStill, Social Engineering Attacks such as Phishing attacks that take place as part of an Offensive Security Solution require manually testing and crafting a payload that goes with the scenario. Although many FUDs (Fully Undetectable Payloads) in EXE formats can still be crafted, using VBS and Microsoft Office Files and this specific technique can bypass several mechanisms due to the way it executes arbitrary macro code into Visual Basic directly in Memory. The loader does this by utilizing programmatical access in the VBA object environment to load, decrypt and execute shellcode.
Ivy by optiv is a payload creation framework for the execution of arbitrary VBA (macro) source code in memory. Ivy’s loader does this by abusing programmatical access in the VBA object environment to load, decrypt, and execute shellcode. This technique is as close as possible to be truly fileless, as most fileless attacks these days require some sort of files being dropped on disk, as a result bypassing standard signature-based rules for detecting VBA code. Typical VBA payloads have the following characteristics:
* Exist in Macro enabled Office Documents
* These Macro Documents exist on disk
By running purely in memory, these behavior characteristics makes it harder to be detected by EDRs.
Ivy’s loaders are encrypted using RC4 encryption (AES encryption causes a lot of bloat and takes forever for VBA to decrypt) and then broken into separate strings, preventing any sandboxing from recognizing these strings as encrypted strings that should be investigated. This also prevents any decoding mechanism from recognizing these payloads as anything but garbage characters.
Ivy’s loader first performs a registry query to enable “Trust access to the VBA project object mode”. This registry key value is stored in user-mode which allows the user to modify the value without requiring any elevated permissions. The registry value is set from a zero to 1; if the registry key does not exist Ivy will create it with a value of “1”. With this value enabled, programmatical access is allowed to the VBA object environment from a different process.
https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/Trusted-Access.png
Once this is done the loader will then spawn a hidden Excel process and load the encrypted strings into a VBA function. This is done by using ActiveX to simulate the GUI actions of doing the same task. This helps bypass a lot of traditional controls in place to monitor for execution. As a result, the decrypt function and shellcode are moved from one memory buffer to another, never touching disk. Finally, the loader uses command-GUI calls and executes the run function, which simulates the act of clicking on the run macro button in the GUI panel of VBA, beginning the decryption function, followed by the actual execution of the shellcode. IMPORTANTThe target endpoint must have Microsoft Office installed and activated in order to run because Ivy relies on a abusing the programmatically access to the VBA environment of Microsoft office.
See Also: AWS fixes security flaws that exposed AWS customer data EDR Unhook ModeThis allows Ivy to use low-level system calls to build its own version of the Windows function WriteProcessMemory by referencing the direct memory address and register values indirectly. Ivy can overwrite sections of memory that are not writable without calling any of the memory ch[...]
___________________________
@hacking_Attack
@Hacking_Video
Black Hat Ethical Hacking
Offensive Security Tool: Ivy | Black Hat Ethical Hacking
Ivy is a payload creation framework for the execution of arbitrary VBA (macro) source code in memory. Ivy’s loader does this by abusing programmatical access in the VBA object environment to load, decrypt, and more.
Black Hat Ethical Hacking
Offensive Security Tool: Ivy
___________________________
@hacking_Attack
@Hacking_Video
Offensive Security Tool: Ivy
___________________________
@hacking_Attack
@Hacking_Video
Black Hat Ethical Hacking
Offensive Security Tool: Ivy | Black Hat Ethical Hacking
Ivy is a payload creation framework for the execution of arbitrary VBA (macro) source code in memory. Ivy’s loader does this by abusing programmatical access in the VBA object environment to load, decrypt, and more.
KitPloit - PenTest Tools!
Raven - Advanced Cyber Threat Map (Simplified, Customizable, Responsive)
___________________________
@hacking_Attack
@Hacking_Video
Raven - Advanced Cyber Threat Map (Simplified, Customizable, Responsive)
___________________________
@hacking_Attack
@Hacking_Video
KitPloit - PenTest & Hacking Tools
Raven - Advanced Cyber Threat Map (Simplified, Customizable, Responsive)
https://b.thumbs.redditmedia.com/oU9MeGpIdhchFm5s1XwESEuNFQbvekHYVIDSvdY4DTw.jpg I have just set up the raspberry os and trying to access the internet. So initially I found that it sets default nameserver as local router gateway IP (here
So I tried updating it with google DNS servers from here https://developers.google.com/speed/public-dns/docs/using and showing below.
https://preview.redd.it/gnrjqnzronb81.png?width=1280&format=png&auto=webp&s=66a2a602b903fa2760d4781a0602e216dab5c114
Even after restarting the networking network manager and rebooting, I am unable to ping the domains but IP addresses are working
submitted by /u/tbhaxor
[link] [comments]
192.168.1.1)So I tried updating it with google DNS servers from here https://developers.google.com/speed/public-dns/docs/using and showing below.
https://preview.redd.it/gnrjqnzronb81.png?width=1280&format=png&auto=webp&s=66a2a602b903fa2760d4781a0602e216dab5c114
Even after restarting the networking network manager and rebooting, I am unable to ping the domains but IP addresses are working
submitted by /u/tbhaxor
[link] [comments]
hacking: security in practice
A good updated book to start and learn hacking in 2022.
Any recommendations?
submitted by /u/Electronic_Leopard_2
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
A good updated book to start and learn hacking in 2022.
Any recommendations?
submitted by /u/Electronic_Leopard_2
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
A good updated book to start and learn hacking in 2022.
Any recommendations?
hacking: security in practice
What does it mean when the dumped yahoo passwords contain two characters ?
I browsed the Exploit.In data breach for curiosity. I checked for "yahoo" emails.
I found a lot of yahoo 2 - 3 characters passwords.
For example :
testemail@yahoo.fr:xyz
Yahoo used to allow any number of chars as password back then ?
Thanks in advance
submitted by /u/SnekIrl
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
What does it mean when the dumped yahoo passwords contain two characters ?
I browsed the Exploit.In data breach for curiosity. I checked for "yahoo" emails.
I found a lot of yahoo 2 - 3 characters passwords.
For example :
testemail@yahoo.fr:xyz
Yahoo used to allow any number of chars as password back then ?
Thanks in advance
submitted by /u/SnekIrl
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
What does it mean when the dumped yahoo passwords contain two...
I browsed the [**Exploit.In**](https://Exploit.In) data breach for curiosity. I checked for "yahoo" emails. I found a lot of yahoo 2 - 3...
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
11 Big Predictions for Cybersecurity in 2022
https://cdn-images-1.medium.com/max/1400/0*ongbLvVxLN9TPqeE.jpg
Cybersecurity ramps up in 2022
Continue reading on Netacea »
___________________________
@hacking_Attack
@Hacking_Video
11 Big Predictions for Cybersecurity in 2022
https://cdn-images-1.medium.com/max/1400/0*ongbLvVxLN9TPqeE.jpg
Cybersecurity ramps up in 2022
Continue reading on Netacea »
___________________________
@hacking_Attack
@Hacking_Video
Medium
11 Big Predictions for Cybersecurity in 2022
Cybersecurity ramps up in 2022
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
So, this is PentestSuite 3
https://cdn-images-1.medium.com/max/2000/1*FEZqjQAFyyvwKkiC6JwtMA.png
Yes, the next version of Pentestsuite is on the way.
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
So, this is PentestSuite 3
https://cdn-images-1.medium.com/max/2000/1*FEZqjQAFyyvwKkiC6JwtMA.png
Yes, the next version of Pentestsuite is on the way.
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
So, this is PentestSuite 3
Yes, the next version of Pentestsuite is on the way.
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Top 5 Reasons Why Python Useful for Cybersecurity in 2022
https://cdn-images-1.medium.com/max/2600/1*bQKTs6RvBSCX7oTIw9-KyQ.jpeg
Cybersecurity is becoming increasingly crucial as firms become more digital. Hackers put confidential information at risk on a regular…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Top 5 Reasons Why Python Useful for Cybersecurity in 2022
https://cdn-images-1.medium.com/max/2600/1*bQKTs6RvBSCX7oTIw9-KyQ.jpeg
Cybersecurity is becoming increasingly crucial as firms become more digital. Hackers put confidential information at risk on a regular…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
Top 5 Reasons Why Python Useful for Cybersecurity in 2022
Cybersecurity is becoming increasingly crucial as firms become more digital. Hackers put confidential information at risk on a regular…