LAPTOPS
https://www.reddit.com/r/Pentesting/comments/sa5rtc/laptops/

Hello , I want a help in choosing a laptop , what laptop i should go for a gaming (asus rog zephyrus g14 base model ) or 2 in 1 laptop cuz i like them and use full too (HP envy / HP pavillion ) or go for mac air [21:33]is there going to be any limitation on mac or i should go for gaming one [21:33]looking as a cllg student and maybe some casual gamings , Whats most useful for me? submitted by /u/Revolutionary-Play59 (https://www.reddit.com/user/Revolutionary-Play59)
[link] (https://www.reddit.com/r/Pentesting/comments/sa5rtc/laptops/) [comments] (https://www.reddit.com/r/Pentesting/comments/sa5rtc/laptops/)

___________________________
@hacking_Attack
@Hacking_Video

Kenobi Walkthrough | TryHackMe | Explained | Part 1

Goals: Enumerate Samba for shares, manipulate a vulnerable version of proftpdContinue reading on Medium »
Read more...

Kali Linux Tutorials
OffensiveRust : Rust Weaponization For Red Team Engagements

OffensiveRust, my experiments in weaponizing Rust for implant development and general offensive operations.

Why Rust?

* It is faster than languages like C/C++
* It is multi-purpose language, bearing excellent communities
* It has an amazing inbuilt dependency build management called Cargo
* It is LLVM based which makes it a very good candidate for bypassing static AV detection
* Super easy cross compilation to Windows from *nix/MacOS, only requires you to install the mingwtoolchain, although certain libraries cannot be compiled successfully in other OSes. Examples in this repo
FileDescriptionAllocate_With_SyscallsIt uses NTDLL functions directly with the ntapi LibraryCreate_DLLCreates DLL and pops up a msgbox, Rust does not fully support this so things might get weird since Rust DLL do not have a main functionDeviceIoControlOpens driver handle and executing DeviceIoControlEnableDebugPrivilegesEnable SeDebugPrivilege in the current processShellcode_Local_injectExecutes shellcode directly in local process by casting pointerExecute_With_CMDExecutes cmd by passing a command via RustImportedFunctionCallIt imports minidump from dbghelp and executes itKernel_Driver_ExploitKernel Driver exploit for a simple buffer overflowNamed_Pipe_ClientNamed Pipe ClientNamed_Pipe_ServerNamed Pipe ServerProcess_Injection_CreateThreadProcess Injection in remote process with CreateRemoteThreadUnhookingUnhooking callsasm_syscallObtaining PEB address via asmbase64_system_enumBase64 encoding/decoding stringshttp-https-requestsHTTP/S requests by ignoring cert check for GET/POSTpatch_etwPatch ETWppid_spoofSpoof parent process for created processtcp_ssl_clientTCP client with SSL that ignores cert check (Requires openssl and perl to be installed for compiling)tcp_ssl_serverTCP Server, with port parameter(Requires openssl and perl to be installed for compiling)wmi_executeExecutes WMI query to obtain the AV/EDRs in the hostWindows.h+ BindingsThis file contains structures of Windows.h plus complete customized LDR,PEB,etc.. that are undocumented officially by Microsoft, add at the top of your file include!(“../bindings.rs”);UUID_Shellcode_ExecutionPlants shellcode from UUID array into heap space and uses EnumSystemLocalesACallback in order to execute the shellcode. Compiling the examples in this repo

This repository does not provide binaries, you’re gonna have to compile them yourself.

Install Rust
Simply download the binary and install.

This repo was compiled in Windows 10 so I would stick to it. As mentioned OpenSSL binaries will have depencency issues that will require OpenSSL and perl to be installed. For the TCP SSL client/server I recommend static build due to dependencies on the hosts you will execute the binaries. For creating a project, execute: cargo new This will automatically create the structured project folders with:

project
├── Cargo.toml
└── src
└── main.rs

Cargo.toml is the file that contains the dependencies and the configuration for the compilation. main.rs is the main file that will be compiled along with any potential directories that contain libraries.

For compiling the project, go into the project directory and execute: cargo buildThis will use your default toolchain. If you want to build the final “release” version execute: cargo build --releaseFor static binaries, in terminal before the build command execute: "C:\Program Files (x86)\Microsoft Visual Studio\2019\Community\VC\Auxiliary\Build\vcvars64.bat"set RUSTFLAGS=-C target-feature=+crt-staticIn case it does not feel easy for you to read my code the way it is written,
you can also you the below command inside the project directory to format it in a better way cargo fmtCertain ex[...]

___________________________
@hacking_Attack
@Hacking_Video

amples might not compile and give you some error, since it might require a nightly
build of Rust with the latest features. To install it just do: rustup default nightlyThe easiest place to find the dependencies or Crates as they are called. Cross Compiling

Cross-Compiling requires to follow the instructions here By installing different toolchains, you can cross compile with the below command cargo build --target To see the installed toolchains on your system do: rustup toolchain listFor checking all the available toolchains you can install in your system do: rustup target listFor installing a new toolchain do: rustup target add Optimizing executables for size

This repo contains a lot of configuration options and ideas about reducing the file size. Static binaries are usually quite big. Pitfalls I found myself falling into

Careful of \0 bytes, do not forget them for strings in memory, I spent a lot of my time but windbg always helped resolving it. Interesting Rust libraries

* WINAPI
* WINAPI2
* Windows – This is the official Microsoft one that I have not played much with OPSEC

* Even though Rust has good advantages it is quite difficult to get used to it and it ain’t very intuitive.
* Shellcode generation is another issue due to LLVM. I have found a few ways to approach this.
Donut sometimes does generate shellcode that works but depending on how the project is made, it might not.
In general, for shellcode generation the tools that are made should be made to host all code in .text segment, which leads to this amazing repo. There is a shellcode sample in this project that can show you how to structure your code for successfull shellcode generation.
In addition, this project also has a shellcode generator that grabs the .text segment of a binary and and dumps the shellcode after executing some patches.
This project grabs from a specific location the binary so I made a fork that receives the path of the binary as an argument here.
* Even if you remove all debug symbols, rust can still keep references to your home directory in the binary. The only way I’ve found to remove this is to pass the following flag: --remap-path-prefix {your home directory}={some random identifier}. You can use bash variables to get your home directory and generate a random placeholder: --remap-path-prefix "$HOME"="$RANDOM". (By Yamakadi)
* Although for the above there is another way to remove info about the home directory by adding at the top of Cargo.toml cargo-features = ["strip"].
* Since Rust by default leaves a lot of things as strings in the binary, I mostly use this cargo.toml to avoid them and also reduce size
with build command cargo build --release -Z build-std=std,panic_abort -Z build-std-features=panic_immediate_abort --target x86_64-pc-windows-msvcDownload

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
4-ZERO-3 : 403/401 Bypass Methods + Bash Automation

4-ZERO-3 Tool to bypass 403/401. This script contain all the possible techniques to do the same.

* NOTE : If you see multiple [200 Ok]/bypasses as output, you must check the Content-Length. If the content-length is same for multiple [200 Ok]/bypasses means false positive. Reason can be “301/302” or “../” [Payload] DON’T PANIC.
* Script will print cURLPAYLOAD if possible bypass found.

Preview
https://blogger.googleusercontent.com/img/a/AVvXsEh-Azb5dLefZw7DoFtDQnobEZMUybDoJ-J1gugTm6IAIv6dsGDnJPUOSq28t0y-9wyWP9nqZKLfSIjRVsDlJzIYfE2EyAnic9KxXl_x4pxrCFHvnLNCcCABmamILH4UbGCcxMnQMXBFUynok73jOWaWz5UKU-XaGIwQ974OAuWEskg4NAmxVi-nfxPO=s1880
Help

root@me_dheeraj:$ bash 403-bypass.sh -h
https://blogger.googleusercontent.com/img/a/AVvXsEiRoCOl4w8pr--iR6lDUoGLH7gwXmVBMjQqhNFrLZCo5XHK41Wb7KZdJ_zBWhzR0T8yaEj7H55cK88Jc2hivE1Z7uodcqS4g03gdeLfkDqUKYAogtrbxcIgEkBCMaser7seoEkILZc9oXZUSjjRO94FVCFm5M0xqryPRSw3-mCbOB8wHZjcGZXdEcI7=s886
Usage / Modes

* Scan with specific payloads:

[ --header] Support HEADER based bypasses/payloads

root@me_dheeraj:$ bash 403-bypass.sh -u https://target.com/secret –header

[ --protocol] Support PROTOCOL based bypasses/payloads

root@me_dheeraj:$ bash 403-bypass.sh -u https://target.com/secret –protocol

--port] Support PORT based bypasses/payload

root@me_dheeraj:$ bash 403-bypass.sh -u https://target.com/secret –port

--HTTPmethod] Support HTTP Method based bypasses/payload

root@me_dheeraj:$ bash 403-bypass.sh -u https://target.com/secret –HTTPmethod

[ --encode] Support URL Encoded bypasses/payload

root@me_dheeraj:$ bash 403-bypass.sh -u https://target.com/secret –encode

--SQLi] Support MySQL mod_Security & libinjection bypasses/payloads [** New **]

root@me_dheeraj:$ bash 403-bypass.sh -u https://target.com/secret –SQLi

* Complete Scan {includes all exploits/payloads} for an endpoint [ –exploit ]

root@me_dheeraj:$ bash 403-bypass.sh -u https://target.com/secret –exploit
Download

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Neovim for Beginner — Auto Pairs

https://cdn-images-1.medium.com/max/859/1*iKnnKICOb4Nht9Dhh3Tw5g.png
Configure treesitter-based auto-pairing, auto-tagging, and end-wise completion.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How to Protect Yourself From Camera and Microphone Hacking

https://cdn-images-1.medium.com/max/860/1*woCCi1VymPcUH7FmGmgJlg.jpeg
Write down the steps to protect your camera and microphone from being hacked

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Termux:Widget — User Termux Widget Like a Pro in 2022

https://cdn-images-1.medium.com/max/600/0*mjyBQwb7Us-KOo7h.png
Hey guys 🙋‍♂️, Termux is one of the best tool when it comes to android Hacking and Scripting and the one measure issue that we face with…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Malware Analysis tip

submitted by /u/zaxo_z
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Is there anything similar to the hackers manifesto.

Is there anything similar to the hackers manifesto.

submitted by /u/void02241
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Backdoor payloads in image files: is this a thing?

If I open an image in gmail (I think it opens through their viewer), can the payload run? Should I be concerned?

Is just viewing it sufficient or would I have to download it?

submitted by /u/anon314159265358p
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Career path advice

I come to you in great need as I would like to receive input from professional penetration testers and other people, who did maybe face a similar situation in the past. There are several core questions I would like to ask. However, they do need a bit of context at first:

My career started with self-employment - customer-specific software development - which got me, after 5 years, a software architect job at a well-respected company. Long story short, I have over 10 years of software dev experience in IoT and desktop applications. However, next to my full-time job, I studied computer science (informatics in bachelor) and then software engineering in the master. It took me 1 year within the master's program to figure out that there is literally nothing new to me. So I switched my master's program to information security, mainly choosing penetration testing courses. It was so much fun that I completed the master in 1 year.

Now I am at a point where I think about my future career. I do love proprietary software development, but lately, all the projects I receive are web-based - obviously, everything is going to mobile- and web-first. And I hate web development.

With the fun I had at the university within the master's program, I am thinking about a job as a penetration tester. (Or whatever you may call that job position) But there are several questions I need help with:

1. Theory and practice are two different things. I do have the feeling that I didn't learn so much in the master's program, such that I would have to start as a junior penetration tester. Basically starting from scratch. Or is it like in software development: "progress as you go"
2. With some responsibilities in life, I can't afford a low vague. I don't expect to earn as much as I do now, but I hope that it comes close to. Is it realistic to expect the same salary as an entry-level penetration tester as a senior software developer?
3. This question is extremely subjective, but maybe someone did face a similar situation: Is it fun in the long run? I mean, I did enjoy all the reverse-engineering tasks, finding flags and vulnerabilities. However, does it change over time as the tasks get more or less repetitive?
4. Although my current career might indicate different, I am a "slow" person. I need some time to wrap my head around things, google simple stuff all over again and doubt at all that I am fit for anything that requires brain juice. Does this particular characteristic influence the rather "think quick, react fast" penetration testing job execution?

submitted by /u/stickalick
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
What is the name of that website that lets you easily launch Windows VMs for malware analysis?

I can’t remember the name of the website to save my life, but it was really good for running malware analysis tests.

If anyone knows the name, please remind me!

submitted by /u/omgitsmint
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Wifi cracking tools

Hello... I see online a few wifi cracking tools, like

Aircrack Wepcrack Kismet Webdecrypt

Which one would be easiest and safer to use for a novice ?

submitted by /u/Mindless_Athlete_935
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Guys, my boot menu shows a black screen after I did usb boot for kali.

Anyone with similiar experience??

submitted by /u/Kou_Mabucchi
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video