Hacking on Medium
The digital currency divide- China

Always know the Chinese way, but to me this one says- it says no not the currency please. They are the pioneers of creating currency but…

Continue reading on Medium »

Hacking on Medium
What Paul Graham Worked On

https://cdn-images-1.medium.com/max/1000/1*BgqkDUElNQjJq-C-QaJyiQ.jpeg
This article is a part of my Best Reads of the Month section on my website www.mikegorlon.com. Each month I pick one or two articles or…

Continue reading on Medium »

hacking: security in practice
Data of more than 1.3 million Clubhouse users leaked online

https://external-preview.redd.it/CwSAjWzE_-qV9sJhhLr00PtRHrVrZUPjv5OdKo4RQBE.jpg?width=640&crop=smart&auto=webp&s=1477eaa4f7c7bba08e7dcd4b260f02451672e29d submitted by /u/pepsikolniy
[link] [comments]

hacking: security in practice
Windows and Linux Devices are under attack by a new crypto mining worm

https://external-preview.redd.it/KGZ7-m9UcKrmzoFjwPedHyx5LMXKBn5obyVohRQkVnE.jpg?width=640&crop=smart&auto=webp&s=0a61852f9b744f694f3b7a81be3d5a3f78f267d6 submitted by /u/fatrat957
[link] [comments]

https://b.thumbs.redditmedia.com/uaNj33nbEtXbBGRzfEqTV7o96GO3LResfXRbELI7k4U.jpg submitted by /u/Osmosis_Wannabe
[link] [comments]

hacking: security in practice
Job opportunity

I’m looking to hire someone for a small job. For more information please contact me through DMs. Thx

submitted by /u/staratuto
[link] [comments]

Kali Linux Tutorials
SecretScanner : Find Secrets & Passwords In Container Images And File Systems

Deepfence SecretScanner can find any potential secrets in container images or file systems. What are Secrets? Secrets are any kind of sensitive or private data which gives authorized users permission to access critical IT infrastructure (such as accounts, devices, network, cloud based services), applications, storage, databases and other kinds of critical data for an organization. […]

The post SecretScanner : Find Secrets & Passwords In Container Images And File Systems appeared first on Kali Linux Tutorials.

Hacking on Medium
170,000 Popeyes customer accounts were exposed

https://cdn-images-1.medium.com/max/2052/1*194aThsDm510Dk1hLr8thg.png
Coming to the Vietnam market in 2013, Popeyes has quickly become the preferred choice of fried chicken in particular and fast food in…

Continue reading on Medium »

Hacking on Medium
How to Password-protect a folder?

https://cdn-images-1.medium.com/max/640/1*7FnNnRv4ib83-bDHlE1IAA.png
Password protection in a folder in terms of security point of view is very important. In this blog, we are will going to guide you on how…

Continue reading on Medium »

Hacking on Medium
Noel Solucanı

https://cdn-images-1.medium.com/max/800/0*SsBSsNn21KmtO64v
Gençlik yıllarımda, söylemesi ayıptır, mahallede biraz ünlü bir hacker’dım. Lakabım VgA idi (Video Graphics Array).

Continue reading on Medium »

Hacking on Medium
Cómo obtuve 65K followers en un día

https://cdn-images-1.medium.com/max/2600/0*UEioqDaCijZ3zHNR
…y por qué la ciberseguridad es importante.

Continue reading on La region vulnerable »

AzureC2Relay - An Azure Function That Validates And Relays Cobalt Strike Beacon Traffic By Verifying The Incoming Requests Based On A Cobalt Strike Malleable C2 Profile
http://www.kitploit.com/2021/04/azurec2relay-azure-function-that.html

AzureC2Relay is an Azure Function that validates and relays Cobalt Strike (https://www.kitploit.com/search/label/Cobalt%20Strike) beacon (https://www.kitploit.com/search/label/Beacon) traffic (https://www.kitploit.com/search/label/Traffic) by verifying the incoming requests based on a Cobalt Strike Malleable C2 profile. Any incoming requests that do not share the profiles user-agent, URI paths, headers, and query parameters, will be redirected to a configurable decoy website. The validated C2 traffic is relayed to a team server within the same virtual network that is further restricted by a network security group. Allowing the VM to only expose SSH.
Deploy
AzureC2Relay is deployed via terraform (https://www.kitploit.com/search/label/Terraform) azure modules as well as some local az cli commands Make sure you have terraform , az cli and the dotnet core 3.1 runtime installed Windows (Powershell) &([scriptblock]::Create((Invoke-WebRequest -UseBasicParsing 'https://dot.net/v1/dotnet-install.ps1'))) -runtime dotnet -version 3.1.0
Invoke-WebRequest 'https://releases.hashicorp.com/terraform/0.14.6/terraform_0.14.6_windows_amd64.zip' -OutFile 'terraform.zip'
Expand-Archive -Path terraform.zip -DestinationPath "$([Environment]::GetFolderPath('ApplicationData'))\TerraForm\"
setx PATH "%PATH%;$([Environment]::GetFolderPath('ApplicationData'))\TerraForm\"
Invoke-WebRequest -Uri https://aka.ms/installazurecliwindows -OutFile .\AzureCLI.msi; Start-Process msiexec.exe -Wait -ArgumentList '/I AzureCLI.msi /quiet'; rm .\AzureCLI.msi
Mac curl -L https://dot.net/v1/dotnet-install.sh | bash -s -- --runtime dotnet --version 3.1.0
brew update
brew tap hashicorp/tap
brew install hashicorp/tap/terraform
brew install azure-cli
Ubuntu , Debian curl -L https://dot.net/v1/dotnet-install.sh | bash -s -- --runtime dotnet --version 3.1.0
wget https://releases.hashicorp.com/terraform/0.14.5/terraform_0.14.5_linux_amd64.zip
unzip terraform_0.14.5_linux_amd64.zip
sudo cp terraform /usr/local/bin/terraform
curl -sL https://aka.ms/InstallAzureCLIDeb | sudo bash
Kali curl -L https://dot.net/v1/dotnet-install.sh | bash -s -- --runtime dotnet --version 3.1.0
wget https://releases.hashicorp.com/terraform/0.14.5/terraform_0.14.5_linux_amd64.zip
unzip terraform_0.14.5_linux_amd64.zip
sudo cp terraform /usr/local/bin/terraform
echo "deb [arch=amd64] https://packages.microsoft.com/repos/azure-cli/ stretch main" | sudo tee /etc/apt/sources.list.d/azure-cli.list
curl -L https://packages.microsoft.com/keys/microsoft.asc | sudo apt-key add -
sudo apt-get update && sudo apt-get install apt-transport-https azure-cli
Modify the first variables defined in config.tf to suit your needs Replace the dummy "cobaltstrike-dist.tgz" with an actual cobaltstrike download Edit/Replace the Malleable profile inside the Ressources folder (Make sure the profile filename matches the variables you set in step 1) login with azure az login run terraform init run terraform apply -auto-approve to deploy the infra Wait for the CDN to become active and enjoy! Once terraform completes it will provide you with the needed ssh command, the CobaltStrike (https://www.kitploit.com/search/label/CobaltStrike) teamserver will be running inside an tmux session on the deployed VM When your done using the infra, you can remove it with terraform destroy -auto-approve

Download AzureC2Relay (https://github.com/Flangvik/AzureC2Relay)