Alan c2 Framework v6.0: Alan + JavaScript = ♡
https://www.reddit.com/r/redteamsec/comments/t1ssoz/alan_c2_framework_v60_alan_javascript/

submitted by /u/aparata_s4tan (https://www.reddit.com/user/aparata_s4tan)
[link] (https://antonioparata.blogspot.com/2022/02/alan-c2-framework-v60-alan-javascript.html) [comments] (https://www.reddit.com/r/redteamsec/comments/t1ssoz/alan_c2_framework_v60_alan_javascript/)

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux: Top 5 tools for information gathering

What is information gathering?Continue reading on Medium »
Read more...

Kali Linux: Top 5 tools for information gathering

What is information gathering?Continue reading on Medium »
Read more...

hacking: security in practice
Using civilian mobile phones to detect enemy vehicle position

Proposition 1: develop an app that detects via smartphone sensors vibrations of heavy vehicles. When a vibration is detected, camera is activated. Smartphone must be connected to a power supply (e.g. in a house) streaming videos to the military to bombard via indirect fire (missiles, mortars)

Proposition 2: use smartphones as surveillance cameras placed in windows of houses, use AI directly to identify potential military vehicles, send gps data to military

Proposition 3: detect rocket artillery positions by combining position data from multiple smartphones when rocket flies over their positions (temporary correlation of sound profiles)

Thoughts? Anyone willing for a github project?

submitted by /u/intestinalvapor
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How to explore open ports in a network running these services?

How to explore open ports in a network running these services? 21: ftp 22: ssh 23: telnet 80: http 135: msrpc 443: https 5900: vnc xxx: Printers Etc

submitted by /u/napraticaautomacao
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Geofence

Anybody knows any nongeofenced Russian websites or a cool way to go arounf the geofence? My VPN doesn't have russian servers unfortunately.

submitted by /u/Hub_Pli
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux: Top 5 tools for information gathering
https://mactress535.medium.com/kali-linux-top-5-tools-for-information-gathering-bcc1c75827f6?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

What is information gathering?Continue reading on Medium » (https://mactress535.medium.com/kali-linux-top-5-tools-for-information-gathering-bcc1c75827f6?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

NTLMRecon - Enumerate Information From NTLM Authentication Enabled Web Endpoints
http://www.kitploit.com/2022/02/ntlmrecon-enumerate-information-from.html

___________________________
@hacking_Attack
@Hacking_Video

A fast and flexible NTLM reconnaissance (https://www.kitploit.com/search/label/Reconnaissance) tool without external dependencies. Useful to find out information about NTLM endpoints when working with a large set of potential IP addresses and domains. NTLMRecon is built with flexibilty in mind. Need to run recon on a single URL, an IP address, an entire CIDR range or combination of all of it all put in a single input file? No problem! NTLMRecon got you covered. Read on.
Demo 🔎 (5)">

___________________________
@hacking_Attack
@Hacking_Video

TODO Implement aiohttp based solution for sending requests Integrate a spraying library Add other authentication (https://www.kitploit.com/search/label/Authentication) schemes found to the output Automatic detection of autodiscover domains if domain Overview NTLMRecon looks for NTLM enabled web endpoints, sends a fake authentication request and enumerates the following information from the NTLMSSP response: AD Domain Name Server name DNS Domain Name FQDN Parent DNS Domain Since NTLMRecon leverages a python implementation of NTLMSSP, it eliminates the overhead of running Nmap NSE http-ntlm-info for every successful discovery. On every successful discovery (https://www.kitploit.com/search/label/Discovery) of a NTLM enabled web endpoint, the tool enumerates and saves information about the domain as follows to a CSV file : URL Domain Name Server Name DNS Domain Name FQDN DNS Domain https://contoso.com/EWS/ XCORP EXCHANGE01 xcorp.contoso.net EXCHANGE01.xcorp.contoso.net contoso.net Installation BlackArch NTLMRecon is already packaged for BlackArch (https://www.kitploit.com/search/label/BlackArch) and can be installed by running pacman -S ntlmrecon Arch If you're on Arch Linux (https://www.kitploit.com/search/label/Arch%20Linux) or any Arch linux based distribution, you can grab the latest build from the Arch User Repository (https://aur.archlinux.org/packages/ntlmrecon/). Build from source Clone the repository : git clone https://github.com/sachinkamath/ntlmrecon/ RECOMMENDED - Install virtualenv : pip install virtualenv Start a new virtual environment : virtualenv venv and activate it with source venv/bin/activate Run the setup file : python setup.py install Run ntlmrecon : ntlmrecon --help Usage $ ntlmrecon --help

_ _ _____ _ ___ _________
| \ | |_ _| | | \/ || ___ \
| \| | | | | | | . . || |_/ /___ ___ ___ _ __
| . ` | | | | | | |\/| || // _ \/ __/ _ \| '_ \
| |\ | | | | |____| | | || |\ \ __/ (_| (_) | | | |
\_| \_/ \_/ \_____/\_| |_/\_| \_\___|\___\___/|_| |_| - @pwnfoo

v.0.4 beta - Y'all still exposing NTLM endpoints?

Bug Reports, Feature Requests : https://git.io/JIR5z


usage: ntlmrecon [-h] [--input INPUT | --infile INFILE] [--wordlist WORDLIST]
[--threads THREADS] [--output-type] [--outfile OUTFILE]
[--random-user-agent] [--force-all] [--shuffle] [-f]

optional arguments:
-h, --help show this help message and exit
--input INPUT, -i INPUT
Pass input as an IP address, URL or CIDR to enumerate
NTLM endpoints
--infile INFILE, -I INFILE
Pass input from a local file
--wordlist WORDLIST Override the internal wordlist with a custom wordlist
--threads THREADS Set number of threads (Default: 10)
--output-type, -o Set output type. JSON (TODO) and CSV supported
(Default: CSV)
--outfile OUTFILE, -O OUTFILE
Set output file name (Default: ntlmrecon.csv)
--random-user-agent TODO: Randomize user agents when sending requests
(Default: False)
--force-all Force enumerate all endpoints even if a valid endpoint
is found for a URL (Default : False)
--shuffle Break order of the input files
-f, --force Force replace output file if it already exists

Example Usage Recon on a single URL $ ntlmrecon --input https://mail.contoso.com --outfile ntlmrecon.csv Recon on a CIDR range or IP address $ ntlmrecon --input 192.168.1.1/24 --outfile ntlmrecon-ranges.csv Recon on an input file The tool automatically detects the type of input per line and gives you results automatically. CIDR ranges are expanded automatically even when read from a text file. Input file can be

___________________________
@hacking_Attack
@Hacking_Video

something as mixed up as : mail.contoso.com
CONTOSOHOSTNAME
10.0.13.2/28
192.168.222.1/24
https://mail.contoso.com
To run recon with an input file, just run : $ ntlmrecon --infile /path/to/input/file --outfile ntlmrecon-fromfile.csv Acknowledgements @nyxgeek (https://github.com/nyxgeek) for the idea behind ntlmscan (https://github.com/nyxgeek/ntlmscan). Feedback If you'd like to see a feature added into the tool or something doesn't work for you, please open a new issue (https://github.com/sachinkamath/ntlmrecon/issues/new).

Download NTLMRecon (https://github.com/pwnfoo/NTLMRecon)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How to securely browse the Internet | Prevent data leaks while connecting to public WiFi networks

https://cdn-images-1.medium.com/max/1280/1*_HX2YtEDy8aVKMb59GbFuw.jpeg
Feeling insecure while browsing on public WiFi? This blog is for you — Gourav Dhar, Software Developer at pulselabs…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
NTLMRecon - Enumerate Information From NTLM Authentication Enabled Web Endpoints

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Anonymous Hacktivists Launch ‘Cyber Proxy War’ Over Russia-Ukraine Conflict

Multiple anonymous hacktivists and hacker groups have collectively announced this week that they are launching a cyber proxy war and are getting involved in the conflict between Russia and Ukraine.

Experts are concerned as non-government cybercriminals groups are taking sides as Russia invades Ukraine.

On Thursday, a member of Anonymous took to Twitter and announced that they would be launching attacks against the Russian government. The hackers have also defaced local Russian websites, including RT, a popular Russian news outlet.

On Friday, the group also claimed that they would leak login credentials of the Russian Ministry of Defense website.

These actions on cyberspace came just a few hours after Yegor Aushev, CEO of cybersecurity in Kyiv, told Reuters that he was asked by Ukrainian Defense Ministry officials to took for help from the hacking community and seek help from both offensive and defensive threat actors.

After the request, requests for volunteers started appearing on various hackers forums, as Russia bombed Kyiv. The posts read:

“Ukrainian cybercommunity! It’s time to get involved in the cyber defense of our country.”

Anonymous is not the only group that has confirmed its involvement in the conflict as on Friday, ransomware groups Conti and ComingProject announced that they will be supporting the Russian government.

Conti ransomware group officially announced that they will side with the Russian government. The official message read:

“If any body will decide to organize a cyberattack or any war activities against Russia, we are going to use our all possible resources to strike back at the critical infrastructures of an enemy.”

Shortly after sending the message, Conti revised their statement, decreasing their tone saying they would its “full capacity to deliver retaliatory measures in case the Western warmongers attempt to target critical infrastructure in Russia or any Russian-speaking region of the world.”

The message further read that they condemn the ongoing conflict and don’t support any government. That said, they further explained that the “West is known to wage its wars primarily by targeting civilians, we will use our resources in order to strike back if the well being and safety of peaceful citizens will be at stake due to American cyber aggression.”

The announcement from the ransomware community came as Ukraine faced DDoS, wiper malware, phishing attacks, and more. Internet connectivity also remains to be intermittent in the country as reported by Netblocks.

Experts are extremely wary of the hacker groups picking sides in the Russia-Ukraine conflict launching attacks. It further scared the experts as NATO Secretary-General Jens Stoltenberg said that “these cyberattacks can trigger Article 5 of the NATO charter.“Article 5 is about the collective defense that binds each member to protect the other.

Researchers at Sophos, a cybersecurity firm, said that ransomware groups like Anonymous and Conti taking sides in this conflict will “increase the risk for everyone, whether involved in this conflict or not.”

“Vigilante attacks in either direction increase the fog of war and generate confusion and uncertainty for everyone,” said Sophos.

Brett Callow, an Emisoft threat analyst, said that the situation is highly volatile considering the statement from Conti. “This is is probably just bluster too [but] it would be a mistake to assume the threat is empty. If your company hasn’t already gone Shields Up, now is the time,” said Callow.

Casey Ellis, Bugcrowd CTO, said one of his concerns is that the recent developments with hacktivists groups taking sides, could lead to actions with intentional “false flag” cyberattacks that could e[...]

___________________________
@hacking_Attack
@Hacking_Video

scalate the conflict internationally.

More:https://www.vpnranks.com/news/anonymous-hacktivists-launch-cyber-proxy-war-over-russia-ukraine-conflict/

submitted by /u/Comfortable_Flower80 [link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Could hackers DDOS SWIFT in Russia if the international community refuses to remove them?

It looks like they are VPN tunnels, even if you couldn't intercept the data could you prevent it from transferring?

submitted by /u/Libertechian
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video