KitPloit - PenTest Tools!
BruteShark - Network Analysis Tool

https://blogger.googleusercontent.com/img/a/AVvXsEjCebxlLX4Xfi8wZu485KuEqq17UwQzHEV6fLS72pt8ctJqY48uJ_ZOUgisQEuRtQZ5wKSdiKSz10q0xgmERpm6bfDrc4RSzPAAI8IUHkMUxjBVt5p8iqCWQ4hmFRgg1u-3Q8OD7yem7czxUDeqlMgBa9vcQzOzcaPCyB8mIegAET3iN7SIaYBpyWb_=w640-h130 BruteShark is a Network Forensic Analysis Tool (NFAT) that performs deep processing and inspection of network traffic (mainly PCAP files, but it also capable of directly live capturing from a network interface). It includes: password extracting, building a network map, reconstruct TCP sessions, extract hashes of encrypted passwords and even convert them to a Hashcat format in order to perform an offline Brute Force attack.

The main goal of the project is to provide solution to security researchers and network administrators with the task of network traffic analysis while they try to identify weaknesses that can be used by a potential attacker to gain access to critical points on the network.

Two BruteShark versions are available, A GUI based application (Windows) and a Command Line Interface tool (Windows and Linux).
The various projects in the solution can also be used independently as infrastructure for analyzing network traffic on Linux or Windows machines. For further details see the Architecture section.

The project was developed in my spare time to address two main passions of mine: software architecture and analyzing network data.

I love to get feedbacks from BruteShark users, your opinion is important to me! Feel free to contact me on contact.oded.shimon@gmail.com or create new issue. What it can do* Extracting and encoding usernames and passwords (HTTP, FTP, Telnet, IMAP, SMTP...)
* Extract authentication hashes and crack them using Hashcat (Kerberos, NTLM, CRAM-MD5, HTTP-Digest...)
* Build visual network diagram (Network nodes, Open Ports, Domain Users)
* Extract DNS queries
* Reconstruct all TCP & UDP Sessions
* File Carving
* Extract Voip calls (SIP, RTP) DownloadWindows* Prerequisites:
* Npcap driver (Wireshark installs one of this by default)
* .NET Core Runtime (Note that you have to install the proper runtime regard to your needs, that means .NET Core Desktop Runtime for BruteSharkDesktop and .NET Core Runtime for BruteSharkCli).

* For desktop version download BruteSharkDesktop Windows Installer (64 Bit).
* For CLI version download BruteSharkCli Windows 10 Executable. Linux* Prerequisites: libpcap driver
* Download BruteSharkCli and just run it: wget https://github.com/odedshimon/BruteShark/releases/latest/download/BruteSharkCli
./BruteSharkCliExamplesVideosBuilding a network map https://user-images.githubusercontent.com/18364847/131922221-5714f351-85f7-4490-bec9-8da4339b66b3.mp4
BruteSharkCli Usage Example - Extract Multiple Passwords and Hashes (also available at youtube) https://user-images.githubusercontent.com/18364847/131924013-8b2aa18b-0941-456e-a09d-799902554166.mp4 Hashes Extractinghttps://blogger.googleusercontent.com/img/a/AVvXsEgkcYK3fYHbIx1M4gdWYpbUznNDPWROEa4O0N11FabfqgNUPr0XdOZ98GqnO_YCZG2Tl9VifHbGNkUl5OC0I8FTaKpuZfpwK48vmoVFeiRk6ivcArBAeErKdMSfN3bYnOn_Iep_WvosPu6Gi1zvJRJiDpu2RyN8VYbm4DEDzU2Kwxf6pP3T5sKXYbbO=w640-h382 Building a Network Diagramhttps://blogger.googleusercontent.com/img/a/AVvXsEh3hzv6vqbE3n1j3HRhjdR0kR86Ow5bFCF_3X28cI_yb5dnACkYFqlX6nP_x6BZg8Yrd94pUtb8gdWaGa-vxzTK_Er-wLiLPdC9PoTRFsOfawIzUY0ter5oa1wtr3uiRTyUq-RB7k0xGmrtivNwr1rBXScoakUD4EObkf6TbjfYSIxP19P6nR6JW76x=w640-h360 File Carvinghttps://blogger.googleusercontent.com/img/a/AVvXsEiL_DjOMom31nU4jYVGr6jZjAlVghcT3S7bwldNmmVn8cLwaQkIDDoD1iIUa0D8KaSq_gH1UT26ZC2fBHKRuzVw5npKELdkfyE9r4B6tWWvxP_DUXoNET2LWartNQiYph-YJqa2-6wVbWjPo-gMZ_L5i5znMKVnBSv-zr1YZIRdLjSlurGm_N-4xDmU=w640-h360 Password Extractinghttps://blogger.googl[...]

eusercontent.com/img/a/AVvXsEijJbx5gVXar-ilnt-bY7pBQY_jagy9Ldcrl2GnitUrJv496kTRPcyHL-f4uVadtx7cHwfHmUxA1NzxOklHpMH6tm-kxlo1d1U3tg_whIcrZhHA5R5j_zyG3tLKoZLW3qxYPXTyJ-d0TN8KN4rnKKkjAWFiJShcK39RBc3mvN6utA6VevC5TQB4SUvM=w640-h366 Reconstruct all TCP Sessionshttps://blogger.googleusercontent.com/img/a/AVvXsEiVMW7DvlK_-N9WrP_lqB_6dmBDMEecHZsmlIukF69hDkYt7hN5d4_6MVCqWvRt8x5TrdADAMS2oPCdlhkIw7YSgaKiLwi3JhEXwAyZaetITCS7BJjQBBwMOk_7Vaw-jJfBVkyZClcr3xuFFf1FtU4hAMW-xta7vmIAjP8Yxi-bilKYNIDOe5ikR29u=w640-h360 Extract VoIP Callshttps://blogger.googleusercontent.com/img/a/AVvXsEjHuSNCctQEseeXWueUfldEmLOM691f6vApO4qmf-jrQjk9nBPmVAjVW7Ov18ZplbOaK-VpMx-9kXQxJ2N3xeT09_mNSujCWi3t2nEUpL8Nz4beviro4XiBF8ibfdxkd30HjeWQmTtQEyR_LNnLF9GoEGNgr0wAYsBPNY7uYuuL5NjmwS6V35FuX7OS=w640-h360 UsageIn general, it is recommended load, run and explore the results.
Example PCAP files containing scenarios that demonstrates all BruteShark capabilities can be downloaded from here.
Note that analyzing network traffic is an operation that consumes time and resources, so it is recommended to select only the required modules when large files are loaded.
Particular attention should be paid to the "Build TCP Sessions" / "Build UDP Sessions" options. BruteSharkDesktopThe GUI is pretty self-explanatory, just load the wanted files, configure the wanted modules and press the run button. BruteSharkCliBruteSharkCli is the CLI version of BruteShark for Linux & Windows users. It has all the features of BruteSharkDesktop and designed to operate from a shell. As a classic CLI tool it works by getting all the relevant parameters for the processing and then printing the results to stdout or files.

Print the help menu: BruteSharkCli --help Get credentials from all files in a directory (passwords and hashes will be printed to stdout): BruteSharkCli -m Credentials -d "C:\Users\King\Desktop\Pcap Files" Get credentials from all files in a directory and also export extracted hashes (if found) to Hashcat input files. BruteSharkCli -m Credentials -d C:\Users\King\Desktop\Pcap_Examples -o C:\Users\King\Desktop\Results Run multiple modules on all files in a directory and also export all the results. BruteSharkCli -m Credentials,NetworkMap,FileExtracting -d C:\Users\King\Desktop\Pcap_Examples -o C:\Users\King\Desktop\Results Sniff an interface named "Wi-Fi", run multiple modules and also export all the results to a directory (the results will be exported only when stopping the sniffer by hitting CTRL + C). BruteSharkCli -l Wi-Fi -m Credentials,NetworkMap,FileExtracting,DNS -o C:\Users\King\Desktop\Test Export ModulesBruteShark is a modular tool, designed for expansion. Credentials ModuleThis module is responsible for extracting and encoding usernames and passwords as well as authentication hashes. In fact this module is responsible for updating two display tables, passwords table and hashes table. While usernames and passwords are straight forward to use, hashes most often used in more complex attacks like pass-the-hash or by brute-forcing them to get the password. BruteShark is integrated with Hashcat so all the hashes extracted can be converted to a Hashcat input file.
Protocol Hash Type Hascat Mode (-m) HTTP HTTP-Digest 11400 SMTP\IMAP CRAM-MD5 16400 NTLM (e.g. SMB) NTLMv1 5500 NTLM (e.g. SMB) NTLMv2 5600 Kerberos AS-REQ etype 23 7500 Kerberos AS-REP etype 23 18200 Kerberos TGS-REP etype 23 13100 Kerberos (AES128) TGS-REP etype 17 19600 Kerberos (AES256) TGS-REP etype 18 19700 Network Map ModuleThis module is responsible for building the network map by identifying components in the network and the connections between them. The network map can be exported to two JSON files, one file contains all the connections in the network and one contains all the endpoints and the related information about them (like open ports, DNS mappings etc.). Those files can be used f[...]

Dark Reading: Attacks/Breaches
Cyberattacks in Ukraine Soon Could Spill Over to Other Countries

Email-borne attacks out of Russia have already targeted at least a few US and European organizations.

hacking: security in practice
How does anonymous hack Russia?

I am someone who knows very little about computers, programming and “hacking” but I have been following the war in Ukraine. This group I have heard about in the past is taking credit for a number of cyber attacks directed at Russia. These include disrupting internet leaking pws and emails of officials and disabling website. How do they do this though. How can you put a message on a Russian gas pump or media outlet page so that it only displays that message.

(Yes I can do my own research but you can get some very good concrete answers on Reddit.)

submitted by /u/tommy_toughnuts1
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Hermetic Wiper: Ukraine Cyberattack Analysis

https://external-preview.redd.it/RCMruLbhFkDpKUvj5VB9JxJaVptf1z4qqXNXiwgHoLY.jpg?width=320&crop=smart&auto=webp&s=cd1b095aa5c1524d100d6c1e6c3b16127fd411f6 submitted by /u/Jisamaniac
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Find bugs by Google dork method

Cre : https://medium.com/@fcwdbrqmr/400-bounty-again-using-google-dorks-6dc8e438f017Continue reading on Medium »
Read more...

Hacking on Medium
OSCP — Cracking The New Pattern

https://cdn-images-1.medium.com/max/1122/1*nvmgz3XqivbNQt2XEn99ZA.png
Hi everyone, I wanted to share how I passed OSCP new pattern, which included Active Directory in the exam. I scheduled my exam for 23rd…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Find bugs by Google dork method
https://rei-hunt.medium.com/find-bugs-by-google-dork-method-69f79aa93221?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Cre : https://medium.com/@fcwdbrqmr/400-bounty-again-using-google-dorks-6dc8e438f017Continue reading on Medium » (https://rei-hunt.medium.com/find-bugs-by-google-dork-method-69f79aa93221?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Find bugs by Google dork method

Cre : https://medium.com/@fcwdbrqmr/400-bounty-again-using-google-dorks-6dc8e438f017Continue reading on Medium »
Read more...

Business Logic Bug| Email Existing Bypass | Running 2 accounts with a single email

Vulnerability Category: Business Logic ErrorContinue reading on Medium »
Read more...

Business Logic Bug| Email Existing Bypass | Running 2 accounts with a single email

Vulnerability Category: Business Logic ErrorContinue reading on Medium »
Read more...

hacking: security in practice
‘Sophisticated’ new Chinese hacking tool found, spurring US warning to allies.

https://external-preview.redd.it/gQTTzPaAuYtK7m11rNlnyAzEfe8lnfkbLiFsQmXKKro.jpg?width=640&crop=smart&auto=webp&s=f023f00b2d529a7a5e7e93b87212109f48e05095 submitted by /u/SnooPeppers6719
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Business Logic Bug| Email Existing Bypass | Running 2 accounts with a single email
https://medium.com/@awezkagdi.ak/business-logic-bug-email-existing-bypass-running-2-accounts-with-a-single-email-b6f5f59947d2?source=rss------bug_bounty-5

Vulnerability Category: Business Logic ErrorContinue reading on Medium » (https://medium.com/@awezkagdi.ak/business-logic-bug-email-existing-bypass-running-2-accounts-with-a-single-email-b6f5f59947d2?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Introduction to the blog

Welcome, everyone, to my blog, which I have named Byte Lab. As you may have seen on the About page, this blog is going to be systems…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Black Hat Ethical Hacking
RCE Bugs in WhatsApp, Other Hugely Popular VoIP Apps: Patch Now!

https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png RCE Bugs in WhatsApp, Other Hugely Popular VoIP Apps: Patch Now!7 total views,  7 views today
https://www.blackhatethicalhacking.com/wp-content/uploads/2022/02/Patreon.png
Reading Time: 1 Minute
WhatsApp and BlueJeans are just two of the world’s most popular communication apps that are using an open-source library riddled with newfound security holes.
The flaws are in the ubiquitous open-source PJSIP multimedia communication library, used by the Asterisk PBX toolkit that’s found in a massive number of VoIP implementations.
One thing this open-source, flawed library shares with the Apache Log4J logging library fiasco that started in December: It’s ubiquitous.

The library, PJSIP – an open-source multimedia communication library – is also used by Asterisk. Asterisk is an enterprise-class, open-source PBX (private branch exchange) toolkit that’s used in voice-over-IP (VoIP) services in a massive number of implementations.

According to the Asterisk site, the software is downloaded 2M times annually and runs on 1M servers in 170 countries. Asterisk powers IP PBX systems, VoIP gateways and conference servers, and it’s used by SMBs, enterprises, call centers, carriers and governments.
See Also: Complete Offensive Security and Ethical Hacking Course
On Monday, devops platform provider JFrog Security disclosed five memory-corruption vulnerabilities in PJSIP, which supplies an API that can be used by IP telephony applications such as voice-over-IP (VoIP) phones and conference apps.

An attacker who successfully triggers the vulnerabilities can flip the switch on remote code execution (RCE) in an application that uses the PJSIP library, JFrog researchers explained.

Following JFrog’s disclosure, PJSIP’s maintainers have fixed the five CVEs, depicted below. https://media.threatpost.com/wp-content/uploads/sites/103/2022/03/01155749/PJSIP-security-vulnerabilities-e1646168517426.png The disclosed PJSIP security vulnerabilities. Source: JFrog Security. What Went WrongIn its technical breakdown, JFrog researchers explained that the PJSIP framework offers a library named PJSUA that supplies an API for SIP applications.

“The basic PJSUA APIs are also wrapped by object-oriented APIs. PJSUA offers a rich Media Manipulation API, where we have spotted the [five] vulnerabilities,” they said.
See Also: Kali Linux 2022.1 Release with Visual Updates, New Tools, Legacy SSH Three of the flaws are stack overflow vulnerabilities that can lead to RCE and which are rated 8.1 on the CVSS severity-rating scale.

The remaining two include a read out-of-bounds vulnerability and a buffer overflow weakness in the PJSUA API, both of which can lead to denial-of-service (DoS) and both of which are rated at CVSS 5.9. Vulnerable ProjectsJFrog said that projects that use the PJSIP library before version 2.12 and which pass attacker-controlled arguments to any of the following APIs are vulnerable:

* pjsua_player_create – filename argument must be attacker-controlled
* pjsua_recorder_create – filename argument must be attacker-controlled
* pjsua_playlist_create – file_names argument must be (partially) attacker-controlled
* pjsua_call_dump – buffer argument capacity must be smaller than 128 bytes

JFrog recommended upgrading PJSIP to version 2.12 to address the vulnerabilities. See Also: Recon Tool: Metagoofil Not the First TimePockmarks in PJSIP and other common videoconferencing architecture implementations are nothing new. In August 2018, Google Project Zer[...]

___________________________
@hacking_Attack
@Hacking_Video