KitPloit - PenTest Tools!
Max - Maximizing BloodHound

https://1.bp.blogspot.com/-D7d038RLOPA/YGvbaekOqEI/AAAAAAAAVyw/m8HiLwy1bT0HJhOaHXCExk1oQwEiU6SqwCNcBGAsYHQ/s16000/BloodHound-Hacking-Active-Directory-Trust-Relationships.png Maximizing BloodHound. DescriptionNew Release:

* dpat - The BloodHound Domain Password Audit Tool (DPAT)

A simple suite of tools:

* get-info - Pull lists of information from the Neo4j database
* mark-owned - Mark a list of objects as Owned
* mark-hvt - Mark a list of objects as High Value Targets
* query - Run a raw Cypher query and return output
* export - Export all outbound controlling privileges of a domain object to a CSV file
* del-edge - Delete an edge from the database
* add-spns - Create HasSPNConfigured relationships, new attack primitive
* add-spw - Create SharesPasswordWith relationships
* dpat - The BloodHound Domain Password Audit Tool (DPAT)
* pet-max - Dogsay, happiness for stressful engagements

This was released with screenshots & use-cases on the following blogs: Max Release, Updates & Primitives & DPAT

A new potential attack primitive was added to this tool during my research, see the add-spnssection for full details. UsageInstallationIdeally there shouldn't be much to install, but I've included a requirements.txt file just in case. Tested on Kali Linux & Windows 10, all functionality should work for both linux and Windows operating systems. pip3 install -r requirements.txtNeo4j CredsNeo4j credentials can be hardcoded at the beginning of the script OR they can be provided as CLI. If both areas are left blank, you will be prompted for the uname/password. python3 max.py -u neo4j -p neo4j {module} {args} python3 max.py {module} {args}
Neo4j Username: neo4j
Neo4j Password: Quick UseGetting help in general, and module specific python3 max.py -h
python3 max.py {module} -h Importing owned objects into BH python3 max.py mark-owned -f owned.txt
python3 max.py mark-owned -f owned.txt --add-note "Owned by repeated local admin" Get list of users python3 max.py get-info --users
python3 max.py get-info --users --enabled

USER01@DOMAIN.LOCAL
USER02@DOMAIN.LOCAL
... Get list of objects in a target group python3 max.py get-info --group-members "domain controllers@domain.local" Get a list of computers that a user has administrative rights to python3 max.py get-info --adminto USER01@DOMAIN.LOCAL Get a list of owned objects with the notes for each python3 max.py get-info --owned --get-note Running a query - return a list of all users with a path to DA python3 max.py query -q "MATCH (n:User),(m:Group {name:'DOMAIN ADMINS@DOMAIN.LOCAL'}) MATCH (n)-[*1..]->(m) RETURN DISTINCT(n.name)" Delete an edge from the database python3 max.py del-edge CanRDP Add HasSPNConfigured relationship using the information stored within BloodHound, or with a GetUserSPNs impacket file python3 max.py add-spns -b
python3 max.py add-spns -i getuserspns-raw-output.txt DPAT python3 max.py dpat -n ~/client/ntds.dit -p ~/.hashcat/hashcat.potfile -o ouputdir --html --sanitize Pet max python3 max.py pet-max Object Files & SpecificationObjects in file, must contain FQDN within, capitalization does not matter. This also applies to whenever a CLI username/computer name is supplied. user01@domain.local <-
group01@domain.local <-
computer01.domain.local <-
ComPutEr01.doMAIn.LOcaL <-
user02 <-
computer02 <- Further workI hope to include an analyzefunction to provide some sort functionality similar to PlumHound/Cypheroth. Lastly, thinking about creating a Powershell version for those running Neo4j on Windows, but I'm trash at P[...]

owershell so TBD.

Any other features and improvements welcome, find me @knavesec in the BloodHoundGang Slack channel and on Twitter ContributorsI'd like to especially thank those who have contributed their time to developing & improving this tool:

* Nic Losby @blurbdust (DPAT Module)
* Scott Brink @_sandw1ch (Various) Download Max

hacking: security in practice
Suspected China Hack of Microsoft Shows Signs of Prior Reconnaissance

https://external-preview.redd.it/S1huHyFdbJcsr9_5PXDAeMhWJ-WSRusPGVVSTCR1dyA.jpg?width=640&crop=smart&auto=webp&s=51179c2a7606fdc6acce15c16db914398f7a5bc4 submitted by /u/smm4983
[link] [comments]

Dark Reading: Attacks/Breaches
600K Payment Card Records Leaked After Swarmshop Breach

A leaked database also contains the nicknames, hashed passwords, contact details, and activity history of Swarmshop admins, sellers, and buyers.

Hacking on Medium
Creating Linux backdoor with the Empire tool

https://cdn-images-1.medium.com/max/2600/1*p0xmu6ipYX5oQ7Mp3pJ_TA.jpeg
Empire is a post-exploitation framework. It’s an unadulterated PowerShell agent, concentrated exclusively on python with cryptographically…

Continue reading on Purple TEAM »

Hacking on Medium
Make professional and convincing Linux trojans

https://cdn-images-1.medium.com/max/1024/1*vRf8cAsFIK2symHSB2_cIA.jpeg
Linux, like any other operating system, is not immune to security threats and risks. As businesses turn to the cloud and, as a result…

Continue reading on DataDrivenInvestor »

Hacking on Medium
Impersonating Police Officers for a Social Engineering Attack

https://cdn-images-1.medium.com/max/600/1*w95kEIWOEMZGmWlr9-kMEw.png
Social engineering has always fascinated me. What fascinates me about it is the ever-evolving methods and tricks cyber criminals come up…

Continue reading on Medium »

Hacking on Medium
Cookie poisoning leads to DoS and Privacy Violation

https://cdn-images-1.medium.com/max/800/1*Fm72CNYsIL3NXRHB5B6bXw.png
When the verification goes wrong.

Continue reading on Medium »

Cookie poisoning leads to DoS and Privacy Violation

When the verification goes wrong.Continue reading on Medium »
Read more...

Cookie poisoning leads to DoS and Privacy Violation
https://gatolouco.medium.com/cookie-poisoning-leads-to-dos-and-privacy-violation-8aa773547c96?source=rss------bug_bounty-5

When the verification goes wrong.Continue reading on Medium » (https://gatolouco.medium.com/cookie-poisoning-leads-to-dos-and-privacy-violation-8aa773547c96?source=rss------bug_bounty-5)

Deep Web
confess your secrets link

was posted on here or r/onions a few months back and i remember reading some funny and weird shit on there

submitted by /u/picklegod9
[link] [comments]

hacking: security in practice
how does iBoss SSL Decryption work?

Recently got in trouble at school, they asked me why i was searching erh.. specific things,

they pulled me aside and showed me. and i was totally shocked by what i saw they had http requests i made from my phone to google.com WITH the ?q= GET parameter included! and yes this is my phone and not given to me by them and i never installed a root ca or any other spyware shit i asked how this was even possible because HTTPS should prevent being able to see GET query info, they told me they used some thing called iBoss which can apparently decrypt HTTPS traffic without needing to install anything, i would have said bullshit if not for literally seeing it. i found this-
https://www.iboss.com/solution-briefs/ssl-decryption/ talking about it

what is it? has a trusted CA gone rouge?? or is it something else

submitted by /u/PlayStationHaxor
[link] [comments]