SharpCookieMonster - Extracts Cookies From Chrome

This is a Sharp port of @defaultnamehere's cookie-crimes module - full credit for their awesome work! This C# project will dump cookies for all sites, even those with httpOnly/secure/session flags. Usage Simply run the binary. SharpCookieMonster.exe https://sitename.com chrome-debugging-port user data dir An optional first argument sepcifies the site that chrome will initially connect to when launched (default https://www.google.com). An optional second argument specifies the port to launch the chrome debugger on (by default 9142). Finally, an optional third argument specifies the path to the user data directory, which can be overridden in order to access different profiles etc (default %APPDATALOCAL%\Google\Chrome\User Data). Building The binary has been built to be compatible with .NET 3.5 in order to be compatible with victims with older versions of .NET installed. However in order to use WebSockets to communicate with Chrome the WebSocket4Net package was added. If you want to run this down C2 such as using PoshC2's sharpcookiemonster command or via CobaltStrike's execute-assembly then use ILMerge to merge the built executable with the WebSocket4Net.dll library. First rename the original binary then run: ILMerge.exe /targetplatform:"v2,C:\Windows\Microsoft.NET\Framework\v2.0.50727" /out:SharpCookieMonster.exe SharpCookieMonsterOriginal.exe WebSocket4Net.dll Download SharpCookieMonster
Read more...

___________________________
@hacking_Attack
@Hacking_Video

Hacking the marketplace
https://systemweakness.com/hacking-the-marketplace-f09b1d936393?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Guys! This room it’s great and I had a lot of fun, with this room you can learn this:Continue reading on System Weakness » (https://systemweakness.com/hacking-the-marketplace-f09b1d936393?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

I made a guide for setting up an at-home Windows Active Directory lab to practice some pentesting techniques. Hope it’s useful!
https://www.reddit.com/r/Pentesting/comments/svqfnj/i_made_a_guide_for_setting_up_an_athome_windows/

___________________________
@hacking_Attack
@Hacking_Video

submitted by /u/Dchox (https://www.reddit.com/user/Dchox)
[link] (https://chox.ca/2022/02/17/creating-a-windows-ad-lab-environment-at-home/) [comments] (https://www.reddit.com/r/Pentesting/comments/svqfnj/i_made_a_guide_for_setting_up_an_athome_windows/)

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Ukraine DDoS: 'Cyberattack' or Not?

The country was hit by a distributed denial-of-service attack earlier this week, but some say that doesn't rise to the level of "cyberattack." Here's why they're wrong.

Dark Reading: Attacks/Breaches
Why You Need An Adversary-First Approach to Threats in the Cloud

Security teams need an adversary-focused approach that automates security controls and compliance and provides visibility into the cloud environment.

Dark Reading: Attacks/Breaches
Free Cybersecurity Tools and Services List Published by CISA

The Cybersecurity & Infrastructure Security Agency (CISA) says this "living repository" is a mix of popular open source and free tools and services from both the private and public sectors.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Axiomatics Introduces Orchestrated Authorization

New enhancements and capabilities help enterprises embrace cloud-native technologies.

___________________________
@hacking_Attack
@Hacking_Video

SharpCookieMonster - Extracts Cookies From Chrome
http://www.kitploit.com/2022/02/sharpcookiemonster-extracts-cookies.html

___________________________
@hacking_Attack
@Hacking_Video

This is a Sharp port of @defaultnamehere's cookie-crimes (https://github.com/defaultnamehere/cookie_crimes) module - full credit for their awesome work! This C# project will dump cookies (https://www.kitploit.com/search/label/Cookies) for all sites, even those with httpOnly/secure/session flags.
Usage Simply run the binary. SharpCookieMonster.exe [https://sitename.com] [chrome-debugging-port] [user data dir]
An optional first argument sepcifies the site that chrome will initially connect to when launched (default https://www.google.com (https://www.google.com/)). An optional second argument specifies the port to launch the chrome debugger (https://www.kitploit.com/search/label/Debugger) on (by default 9142). Finally, an optional third argument specifies the path to the user data directory, which can be overridden in order to access (https://www.kitploit.com/search/label/Access) different profiles etc (default %APPDATALOCAL%\Google\Chrome\User Data). Building The binary (https://www.kitploit.com/search/label/Binary) has been built to be compatible with .NET 3.5 in order to be compatible with victims with older versions of .NET installed. However in order to use WebSockets to communicate with Chrome the WebSocket4Net package was added. If you want to run this down C2 such as using PoshC2 (https://github.com/nettitude/PoshC2)'s sharpcookiemonster command or via CobaltStrike's execute-assembly then use ILMerge to merge the built executable with the WebSocket4Net.dll library. First rename the original binary then run: ILMerge.exe /targetplatform:"v2,C:\Windows\Microsoft.NET\Framework\v2.0.50727" /out:SharpCookieMonster.exe SharpCookieMonsterOriginal.exe WebSocket4Net.dll


Download SharpCookieMonster (https://github.com/m0rv4i/SharpCookieMonster)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
What Is Exploit Development?

submitted by /u/joe691013
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How to create bouncing servers

I have only been doing cybersecurity for 2 years now, just as a hobby. I am kind of new to servers and hiding yourself while hacking, but how do hackers create bouncing servers?

submitted by /u/Kenmorgan202
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
CVE-2016-9682: SonicWALL SMA/SRA

https://external-preview.redd.it/URS_9mQLdooMLi9Krpbv79GqrFldxxI4kk-GSX_PGAg.jpg?width=320&crop=smart&auto=webp&s=ddc21b571f0768bcda564b1da61e20d0dc751fbc submitted by /u/Y2Che
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video