KitPloit - PenTest Tools!
Mandiant-Azure-AD-Investigator - PowerShell module for detecting artifacts that may be indicators of UNC2452 and other threat actor activity

https://blogger.googleusercontent.com/img/a/AVvXsEhnfet5fSf1tYAxR0JFBmdtRK2FmIYsK3YjblmF6YbDUeMPzbcG0LFgOy3FWoMTxt8_hyHcMgm7ayEYRRHBh0uP7DfM6W6JYrXxgjVZZDhk6cok69bGnv3BsUGDYW-VLU7CpwZZShrbQC5625dv9rfeAlV7zrj-lboaYrgptqQN2r6U_RZzuIFtv8oG=w340-h400 This repository contains a PowerShell module for detecting artifacts that may be indicators of UNC2452 and other threat actor activity. Some indicators are "high-fidelity" indicators of compromise, while other artifacts are so called "dual-use" artifacts. Dual-use artifacts may be related to threat actor activity, but also may be related to legitimate functionality. Analysis and verification will be required for these. For a detailed description of the techniques used by UNC2452 see our blog.
This tool is read-only. It does not make any changes to the Microsoft 365 environment.

In summary this module will:

* Do a best effort job at identifying indicators of compromise that will require further verification and analysis

It will not:

* Identify a compromise 100% of the time, or
* Tell you if an artifact is legitimate admin activity or threat actor activity.

With community feedback, the tool may become more thorough in its detection of IOCs. Please open an issue, submit a PR, or contact the authors if you have problems, ideas, or feedback. FeaturesFederated Domains (Invoke-MandiantAuditAzureADDomains)This module uses MS Online PowerShell to look for and audit federated domains in Azure AD. All federated domains will be output to the file federated domains.csv.

* Signing Certificate Unusual Validity Period - Alerts on a federated domain where the signing certificates have a validity period of > 1 year. AD FS managed certificates are valid for only one year. Validity periods that are longer than one year could be an indication that a threat actor has tampered with the domain federation settings. They may also be indicative of the use of a legitimate custom token-signing certificate. Have your administrators verify if this is the case.
* Signing Certificate Mismatch - Alerts on federated domains where the issuer or subject of the signing certificates do not match. In most cases the token-signing certificates will always be from the same issuer and have the same subject. If there is a mismatch, then it could be an indication that a threat actor has tampered with the domain federation settings. Have your administrators verify if the subject and issuer names are expected, and if not consider performing a forensic investigation to determine how the changes were made and to identify any other evidence of compromise.
* Azure AD Backdoor (any.sts) - Alerts on federated domains configured with any.stsas the Issuer URI. This is indicative of usage of the Azure AD Backdoor tool. Consider performing a forensic investigation to determine how the changes were made and to identify any other evidence of compromise.
* Federated Domains - Lists all federated domains and the token issuer URI. Verify that the domain should be federated and that the issuer URI is expected.
* Unverified Domains - Lists all unverified domains in Azure AD. Unverified domains should not be kept in Azure AD for long in an unverified state. Consider removing them. Examples!! Evidence of AAD backdoor found.
Consider performing a detailed forensic investigation
Domain name: foobar.com
Domain federation name:
Federation issuer URI: http://any.sts/16B45E3B ‼️
The script has identified a domain that has been federated with an issuer URI that is an indicator of an Azure AD Backdoor. The backdoor sets the issuer URI to hxxp://any.sts by default. Consider performing a forensic investigati[...]

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
Mandiant-Azure-AD-Investigator - PowerShell module for detecting artifacts that may be indicators of UNC2452 and other threat actor activity

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
[Hack The Box] Forge— Walkthrough

https://cdn-images-1.medium.com/max/1920/1*0gKY5fJjgIKfB7IKWLkZMA.png
Forge is a simple, beginner-friendly box that does not involve any guesswork.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Kioptrix Level 5 — VulnHub

https://cdn-images-1.medium.com/max/700/0*l9569XIZPyaIM3VY.jpg
Introduction: Kioptrix Level 5 from Vulnhub

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
DonkeyDocker VM Walkthrough

https://cdn-images-1.medium.com/max/651/0*qwIGrub64iplKX7C.png
Makineyi indirebilirsiniz.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Hacking videos w educational and entertainment value?

Im just starting to get into the IT world, and my goal is to get into penetration testing. Right now im working on basic certifications to get general knowledge before my OSCP which hopefully ill start before the year ends. That being said, im looking for some hacking videos that i can learn from, but are also entertaining enough that i can get high and just chill w when im done studying for the night. Any youtube or other video streaming platform recommendations would be awesome!

submitted by /u/piehero2
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
dsicord hacks

dsucord hakcs

submitted by /u/yyrczzz
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Some Tough Questions
https://www.reddit.com/r/Pentesting/comments/sags24/some_tough_questions/

1-What are the biggest mistakes you made or you see others make when learning about pen-testing? What are the most common mistakes at the pro level? 2-If you had to train me for 4 weeks for a zero to mastery competition on pen-testing, and 1 million dollars was on the line, what would that training look like? What about 8 weeks? What would your roadmap and sequencing be? 3- What do you think are the commonalities amongst the top TryHackMe/HackTheBox competitors? 4B- Which of these commanalities are not taught at TryHackMe/HackTheBox or online courses? 4C- Which neglected commonality (found in answer 4B) could I get good at abnormally quickly. 4- If you were to create a 'cheat sheet' that listed the most important principles or concepts in pen-testing, what would be on it? 5-What small projects would you recommend a new person to make to keep them motivated? 6-How do you retain your knowledge? Do you take notes with pen and paper or digitally? Do you prefer to remember through practice and building projects instead submitted by /u/s-pi1313 (https://www.reddit.com/user/s-pi1313)
[link] (https://www.reddit.com/r/Pentesting/comments/sags24/some_tough_questions/) [comments] (https://www.reddit.com/r/Pentesting/comments/sags24/some_tough_questions/)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Can your code survive a bus crash?

In software development there is the famous “hit by a bus” test. Put simply have you documented and tested your code well enough that if…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
4. Oopsie — Beginner/Learning Box

https://cdn-images-1.medium.com/max/600/1*oSrScJmNBy0MoLjwXC02uQ.png
So… yes, I’m not doing the V.I.P. machines, can’t afford them, but this should do!

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
(pt-br) Rootme — TryHackMe

https://cdn-images-1.medium.com/max/1350/1*lXKKKdo3EUXVJOBrN1KvTQ.png
Um simples write-up de como resolver o CTF rootme na plataforma TryHackMe. Não se apegue nas ferramentas usadas, mas nas técnicas.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Ghidra JDK home directory issue

I downloaded Ghidra from here
wget https://github.com/NationalSecurityAgency/ghidra/releases/download/Ghidra_10.1.1_build/ghidra_10.1.1_PUBLIC_20211221.zip
Extract it
7z x ghidra_10.1.1_PUBLIC_20211221.zip
Change directory
cd ghidra_10.1.1_PUBLIC
List directory
$ ls -lh total 48K drwxr-xr-x 5 user user 4.0K Dec 21 13:41 docs drwxr-xr-x 5 user user 4.0K Dec 21 13:41 Extensions drwxr-xr-x 9 user user 4.0K Dec 21 13:41 Ghidra -rwxr-xr-x 1 user user 883 Dec 21 13:41 ghidraRun -rw-r--r-- 1 user user 344 Dec 21 13:41 ghidraRun.bat drwxr-xr-x 6 user user 4.0K Dec 21 13:41 GPL -rw-r--r-- 1 user user 12K Dec 21 13:41 LICENSE drwxr-xr-x 2 user user 4.0K Dec 21 13:41 licenses drwxr-xr-x 2 user user 4.0K Dec 21 13:41 server drwxr-xr-x 2 user user 4.0K Dec 21 13:41 support
Run the binary, but need to specify JDK path
$ ./ghidraRun Picked up _JAVA_OPTIONS: -Dawt.useSystemAAFontSettings=on -Dswing.aatext=true Picked up _JAVA_OPTIONS: -Dawt.useSystemAAFontSettings=on -Dswing.aatext=true ****************************************************************** JDK 11+ (64-bit) could not be found and must be manually chosen! ****************************************************************** Enter path to JDK home directory (ENTER for dialog):
So, I checked Java version
$ java --version Picked up _JAVA_OPTIONS: -Dawt.useSystemAAFontSettings=on -Dswing.aatext=true openjdk 11.0.12 2021-07-20 OpenJDK Runtime Environment (build 11.0.12+7-post-Debian-2) OpenJDK 64-Bit Server VM (build 11.0.12+7-post-Debian-2, mixed mode, sharing)
I also checked java path
$ which java /usr/bin/java
And it's realpath
$ realpath /usr/bin/java /usr/lib/jvm/java-11-openjdk-amd64/bin/java
However, when I put the directory, I'm getting the following error
$ ./ghidraRun Picked up _JAVA_OPTIONS: -Dawt.useSystemAAFontSettings=on -Dswing.aatext=true Picked up _JAVA_OPTIONS: -Dawt.useSystemAAFontSettings=on -Dswing.aatext=true ****************************************************************** JDK 11+ (64-bit) could not be found and must be manually chosen! ****************************************************************** Enter path to JDK home directory (ENTER for dialog): /usr/lib/jvm/java-11-ope Not a valid JDK home directory. Not a directory! Enter path to JDK home directory (ENTER for dialog): /usr/lib/jvm/java-11-ope Not a valid JDK home directory. Missing bin directory! Enter path to JDK home directory (ENTER for dialog): /usr/lib/jvm/java-11-ope Not a valid JDK home directory. JDK is missing javac executable! Enter path to JDK home directory (ENTER for dialog):
What's wrong in this case? What should I do to fix it?

submitted by /u/w0lfcat
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
OSINT digital intelligence

What are some uncommon methods do you know of gathering info of targets?

Any suggesions for softwares used by intelligence and law agencies for investigations and information gathering?

example-Cellebrite

submitted by /u/thecirclingfly
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

How I was able to find multiple vulnerabilities of a Symfony Web Framework web application
https://rootintrud3r.medium.com/how-i-was-able-to-find-multiple-vulnerabilities-of-a-symfony-web-framework-web-application-2b82cd5de144?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video