Hacking Articles Tips Tricks Videos Tutorials
Photo
Kali Linux Tutorials
SecretScanner : Find Secrets & Passwords In Container Images And File Systems
Deepfence SecretScanner can find any potential secrets in container images or file systems. What are Secrets? Secrets are any kind of sensitive or private data which gives authorized users permission to access critical IT infrastructure (such as accounts, devices, network, cloud based services), applications, storage, databases and other kinds of critical data for an organization. […]
The post SecretScanner : Find Secrets & Passwords In Container Images And File Systems appeared first on Kali Linux Tutorials.
SecretScanner : Find Secrets & Passwords In Container Images And File Systems
Deepfence SecretScanner can find any potential secrets in container images or file systems. What are Secrets? Secrets are any kind of sensitive or private data which gives authorized users permission to access critical IT infrastructure (such as accounts, devices, network, cloud based services), applications, storage, databases and other kinds of critical data for an organization. […]
The post SecretScanner : Find Secrets & Passwords In Container Images And File Systems appeared first on Kali Linux Tutorials.
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
170,000 Popeyes customer accounts were exposed
https://cdn-images-1.medium.com/max/2052/1*194aThsDm510Dk1hLr8thg.png
Coming to the Vietnam market in 2013, Popeyes has quickly become the preferred choice of fried chicken in particular and fast food in…
Continue reading on Medium »
170,000 Popeyes customer accounts were exposed
https://cdn-images-1.medium.com/max/2052/1*194aThsDm510Dk1hLr8thg.png
Coming to the Vietnam market in 2013, Popeyes has quickly become the preferred choice of fried chicken in particular and fast food in…
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
How to Password-protect a folder?
https://cdn-images-1.medium.com/max/640/1*7FnNnRv4ib83-bDHlE1IAA.png
Password protection in a folder in terms of security point of view is very important. In this blog, we are will going to guide you on how…
Continue reading on Medium »
How to Password-protect a folder?
https://cdn-images-1.medium.com/max/640/1*7FnNnRv4ib83-bDHlE1IAA.png
Password protection in a folder in terms of security point of view is very important. In this blog, we are will going to guide you on how…
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Noel Solucanı
https://cdn-images-1.medium.com/max/800/0*SsBSsNn21KmtO64v
Gençlik yıllarımda, söylemesi ayıptır, mahallede biraz ünlü bir hacker’dım. Lakabım VgA idi (Video Graphics Array).
Continue reading on Medium »
Noel Solucanı
https://cdn-images-1.medium.com/max/800/0*SsBSsNn21KmtO64v
Gençlik yıllarımda, söylemesi ayıptır, mahallede biraz ünlü bir hacker’dım. Lakabım VgA idi (Video Graphics Array).
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Cómo obtuve 65K followers en un día
https://cdn-images-1.medium.com/max/2600/0*UEioqDaCijZ3zHNR
…y por qué la ciberseguridad es importante.
Continue reading on La region vulnerable »
Cómo obtuve 65K followers en un día
https://cdn-images-1.medium.com/max/2600/0*UEioqDaCijZ3zHNR
…y por qué la ciberseguridad es importante.
Continue reading on La region vulnerable »
AzureC2Relay - An Azure Function That Validates And Relays Cobalt Strike Beacon Traffic By Verifying The Incoming Requests Based On A Cobalt Strike Malleable C2 Profile
http://www.kitploit.com/2021/04/azurec2relay-azure-function-that.html
http://www.kitploit.com/2021/04/azurec2relay-azure-function-that.html
AzureC2Relay is an Azure Function that validates and relays Cobalt Strike (https://www.kitploit.com/search/label/Cobalt%20Strike) beacon (https://www.kitploit.com/search/label/Beacon) traffic (https://www.kitploit.com/search/label/Traffic) by verifying the incoming requests based on a Cobalt Strike Malleable C2 profile. Any incoming requests that do not share the profiles user-agent, URI paths, headers, and query parameters, will be redirected to a configurable decoy website. The validated C2 traffic is relayed to a team server within the same virtual network that is further restricted by a network security group. Allowing the VM to only expose SSH.
Deploy
AzureC2Relay is deployed via terraform (https://www.kitploit.com/search/label/Terraform) azure modules as well as some local az cli commands Make sure you have terraform , az cli and the dotnet core 3.1 runtime installed Windows (Powershell) &([scriptblock]::Create((Invoke-WebRequest -UseBasicParsing 'https://dot.net/v1/dotnet-install.ps1'))) -runtime dotnet -version 3.1.0
Invoke-WebRequest 'https://releases.hashicorp.com/terraform/0.14.6/terraform_0.14.6_windows_amd64.zip' -OutFile 'terraform.zip'
Expand-Archive -Path terraform.zip -DestinationPath "$([Environment]::GetFolderPath('ApplicationData'))\TerraForm\"
setx PATH "%PATH%;$([Environment]::GetFolderPath('ApplicationData'))\TerraForm\"
Invoke-WebRequest -Uri https://aka.ms/installazurecliwindows -OutFile .\AzureCLI.msi; Start-Process msiexec.exe -Wait -ArgumentList '/I AzureCLI.msi /quiet'; rm .\AzureCLI.msi
Mac curl -L https://dot.net/v1/dotnet-install.sh | bash -s -- --runtime dotnet --version 3.1.0
brew update
brew tap hashicorp/tap
brew install hashicorp/tap/terraform
brew install azure-cli
Ubuntu , Debian curl -L https://dot.net/v1/dotnet-install.sh | bash -s -- --runtime dotnet --version 3.1.0
wget https://releases.hashicorp.com/terraform/0.14.5/terraform_0.14.5_linux_amd64.zip
unzip terraform_0.14.5_linux_amd64.zip
sudo cp terraform /usr/local/bin/terraform
curl -sL https://aka.ms/InstallAzureCLIDeb | sudo bash
Kali curl -L https://dot.net/v1/dotnet-install.sh | bash -s -- --runtime dotnet --version 3.1.0
wget https://releases.hashicorp.com/terraform/0.14.5/terraform_0.14.5_linux_amd64.zip
unzip terraform_0.14.5_linux_amd64.zip
sudo cp terraform /usr/local/bin/terraform
echo "deb [arch=amd64] https://packages.microsoft.com/repos/azure-cli/ stretch main" | sudo tee /etc/apt/sources.list.d/azure-cli.list
curl -L https://packages.microsoft.com/keys/microsoft.asc | sudo apt-key add -
sudo apt-get update && sudo apt-get install apt-transport-https azure-cli
Modify the first variables defined in config.tf to suit your needs Replace the dummy "cobaltstrike-dist.tgz" with an actual cobaltstrike download Edit/Replace the Malleable profile inside the Ressources folder (Make sure the profile filename matches the variables you set in step 1) login with azure az login run terraform init run terraform apply -auto-approve to deploy the infra Wait for the CDN to become active and enjoy! Once terraform completes it will provide you with the needed ssh command, the CobaltStrike (https://www.kitploit.com/search/label/CobaltStrike) teamserver will be running inside an tmux session on the deployed VM When your done using the infra, you can remove it with terraform destroy -auto-approve
Download AzureC2Relay (https://github.com/Flangvik/AzureC2Relay)
Deploy
AzureC2Relay is deployed via terraform (https://www.kitploit.com/search/label/Terraform) azure modules as well as some local az cli commands Make sure you have terraform , az cli and the dotnet core 3.1 runtime installed Windows (Powershell) &([scriptblock]::Create((Invoke-WebRequest -UseBasicParsing 'https://dot.net/v1/dotnet-install.ps1'))) -runtime dotnet -version 3.1.0
Invoke-WebRequest 'https://releases.hashicorp.com/terraform/0.14.6/terraform_0.14.6_windows_amd64.zip' -OutFile 'terraform.zip'
Expand-Archive -Path terraform.zip -DestinationPath "$([Environment]::GetFolderPath('ApplicationData'))\TerraForm\"
setx PATH "%PATH%;$([Environment]::GetFolderPath('ApplicationData'))\TerraForm\"
Invoke-WebRequest -Uri https://aka.ms/installazurecliwindows -OutFile .\AzureCLI.msi; Start-Process msiexec.exe -Wait -ArgumentList '/I AzureCLI.msi /quiet'; rm .\AzureCLI.msi
Mac curl -L https://dot.net/v1/dotnet-install.sh | bash -s -- --runtime dotnet --version 3.1.0
brew update
brew tap hashicorp/tap
brew install hashicorp/tap/terraform
brew install azure-cli
Ubuntu , Debian curl -L https://dot.net/v1/dotnet-install.sh | bash -s -- --runtime dotnet --version 3.1.0
wget https://releases.hashicorp.com/terraform/0.14.5/terraform_0.14.5_linux_amd64.zip
unzip terraform_0.14.5_linux_amd64.zip
sudo cp terraform /usr/local/bin/terraform
curl -sL https://aka.ms/InstallAzureCLIDeb | sudo bash
Kali curl -L https://dot.net/v1/dotnet-install.sh | bash -s -- --runtime dotnet --version 3.1.0
wget https://releases.hashicorp.com/terraform/0.14.5/terraform_0.14.5_linux_amd64.zip
unzip terraform_0.14.5_linux_amd64.zip
sudo cp terraform /usr/local/bin/terraform
echo "deb [arch=amd64] https://packages.microsoft.com/repos/azure-cli/ stretch main" | sudo tee /etc/apt/sources.list.d/azure-cli.list
curl -L https://packages.microsoft.com/keys/microsoft.asc | sudo apt-key add -
sudo apt-get update && sudo apt-get install apt-transport-https azure-cli
Modify the first variables defined in config.tf to suit your needs Replace the dummy "cobaltstrike-dist.tgz" with an actual cobaltstrike download Edit/Replace the Malleable profile inside the Ressources folder (Make sure the profile filename matches the variables you set in step 1) login with azure az login run terraform init run terraform apply -auto-approve to deploy the infra Wait for the CDN to become active and enjoy! Once terraform completes it will provide you with the needed ssh command, the CobaltStrike (https://www.kitploit.com/search/label/CobaltStrike) teamserver will be running inside an tmux session on the deployed VM When your done using the infra, you can remove it with terraform destroy -auto-approve
Download AzureC2Relay (https://github.com/Flangvik/AzureC2Relay)
hacking: security in practice
Abandoning a profitable side project due to lack of time, looking for someone to take over.
Mainly Puppeteer, probs 1 or 2 hours a day. Been working on this for a few months, and there's quite a bit of money in it. I just have other things to concentrate. Whoever takes over the work takes over the profits. I just don't want to see it die. DM me.
submitted by /u/AsinusRex
[link] [comments]
Abandoning a profitable side project due to lack of time, looking for someone to take over.
Mainly Puppeteer, probs 1 or 2 hours a day. Been working on this for a few months, and there's quite a bit of money in it. I just have other things to concentrate. Whoever takes over the work takes over the profits. I just don't want to see it die. DM me.
submitted by /u/AsinusRex
[link] [comments]
reddit
Abandoning a profitable side project due to lack of time, looking...
**Mainly Puppeteer, probs 1 or 2 hours a day.** Been working on this for a few months, and there's quite a bit of money in it. I just have other...
AzureC2Relay - An Azure Function That Validates And Relays Cobalt Strike Beacon Traffic By Verifying The Incoming Requests Based On A Cobalt Strike Malleable C2 Profile
AzureC2Relay is an Azure Function that validates and relays Cobalt Strike beacon traffic by verifying the incoming requests based on a Cobalt Strike Malleable C2 profile. Any incoming requests that do not share the profiles user-agent, URI paths, headers, and query parameters, will be redirected to a configurable decoy website. The validated C2 traffic is relayed to a team server within the same virtual network that is further restricted by a network security group. Allowing the VM to only expose SSH.Deploy AzureC2Relay is deployed via terraform azure modules as well as some local az cli commands Make sure you have terraform , az cli and the dotnet core 3.1 runtime installed Windows (Powershell) &(scriptblock::Create((Invoke-WebRequest -UseBasicParsing 'https://dot.net/v1/dotnet-install.ps1'))) -runtime dotnet -version 3.1.0Invoke-WebRequest 'https://releases.hashicorp.com/terraform/0.14.6/terraform_0.14.6_windows_amd64.zip' -OutFile 'terraform.zip'Expand-Archive -Path terraform.zip -DestinationPath "$(Environment::GetFolderPath('ApplicationData'))\TerraForm\"setx PATH "%PATH%;$(Environment::GetFolderPath('ApplicationData'))\TerraForm\"Invoke-WebRequest -Uri https://aka.ms/installazurecliwindows -OutFile .\AzureCLI.msi; Start-Process msiexec.exe -Wait -ArgumentList '/I AzureCLI.msi /quiet'; rm .\AzureCLI.msi Mac curl -L https://dot.net/v1/dotnet-install.sh | bash -s -- --runtime dotnet --version 3.1.0brew update brew tap hashicorp/tapbrew install hashicorp/tap/terraformbrew install azure-cli Ubuntu , Debian curl -L https://dot.net/v1/dotnet-install.sh | bash -s -- --runtime dotnet --version 3.1.0wget https://releases.hashicorp.com/terraform/0.14.5/terraform_0.14.5_linux_amd64.zipunzip terraform_0.14.5_linux_amd64.zipsudo cp terraform /usr/local/bin/terraformcurl -sL https://aka.ms/InstallAzureCLIDeb | sudo bash Kali curl -L https://dot.net/v1/dotnet-install.sh | bash -s -- --runtime dotnet --version 3.1.0wget https://releases.hashicorp.com/terraform/0.14.5/terraform_0.14.5_linux_amd64.zipunzip terraform_0.14.5_linux_amd64.zipsudo cp terraform /usr/local/bin/terraformecho "deb arch=amd64 https://packages.microsoft.com/repos/azure-cli/ stretch main" | sudo tee /etc/apt/sources.list.d/azure-cli.listcurl -L https://packages.microsoft.com/keys/microsoft.asc | sudo apt-key add -sudo apt-get update && sudo apt-get install apt-transport-https azure-cli Modify the first variables defined in config.tf to suit your needs Replace the dummy "cobaltstrike-dist.tgz" with an actual cobaltstrike download Edit/Replace the Malleable profile inside the Ressources folder (Make sure the profile filename matches the variables you set in step 1) login with azure az login run terraform init run terraform apply -auto-approve to deploy the infra Wait for the CDN to become active and enjoy! Once terraform completes it will provide you with the needed ssh command, the CobaltStrike teamserver will be running inside an tmux session on the deployed VM When your done using the infra, you can remove it with terraform destroy -auto-approve Download AzureC2Relay
Read more...
AzureC2Relay is an Azure Function that validates and relays Cobalt Strike beacon traffic by verifying the incoming requests based on a Cobalt Strike Malleable C2 profile. Any incoming requests that do not share the profiles user-agent, URI paths, headers, and query parameters, will be redirected to a configurable decoy website. The validated C2 traffic is relayed to a team server within the same virtual network that is further restricted by a network security group. Allowing the VM to only expose SSH.Deploy AzureC2Relay is deployed via terraform azure modules as well as some local az cli commands Make sure you have terraform , az cli and the dotnet core 3.1 runtime installed Windows (Powershell) &(scriptblock::Create((Invoke-WebRequest -UseBasicParsing 'https://dot.net/v1/dotnet-install.ps1'))) -runtime dotnet -version 3.1.0Invoke-WebRequest 'https://releases.hashicorp.com/terraform/0.14.6/terraform_0.14.6_windows_amd64.zip' -OutFile 'terraform.zip'Expand-Archive -Path terraform.zip -DestinationPath "$(Environment::GetFolderPath('ApplicationData'))\TerraForm\"setx PATH "%PATH%;$(Environment::GetFolderPath('ApplicationData'))\TerraForm\"Invoke-WebRequest -Uri https://aka.ms/installazurecliwindows -OutFile .\AzureCLI.msi; Start-Process msiexec.exe -Wait -ArgumentList '/I AzureCLI.msi /quiet'; rm .\AzureCLI.msi Mac curl -L https://dot.net/v1/dotnet-install.sh | bash -s -- --runtime dotnet --version 3.1.0brew update brew tap hashicorp/tapbrew install hashicorp/tap/terraformbrew install azure-cli Ubuntu , Debian curl -L https://dot.net/v1/dotnet-install.sh | bash -s -- --runtime dotnet --version 3.1.0wget https://releases.hashicorp.com/terraform/0.14.5/terraform_0.14.5_linux_amd64.zipunzip terraform_0.14.5_linux_amd64.zipsudo cp terraform /usr/local/bin/terraformcurl -sL https://aka.ms/InstallAzureCLIDeb | sudo bash Kali curl -L https://dot.net/v1/dotnet-install.sh | bash -s -- --runtime dotnet --version 3.1.0wget https://releases.hashicorp.com/terraform/0.14.5/terraform_0.14.5_linux_amd64.zipunzip terraform_0.14.5_linux_amd64.zipsudo cp terraform /usr/local/bin/terraformecho "deb arch=amd64 https://packages.microsoft.com/repos/azure-cli/ stretch main" | sudo tee /etc/apt/sources.list.d/azure-cli.listcurl -L https://packages.microsoft.com/keys/microsoft.asc | sudo apt-key add -sudo apt-get update && sudo apt-get install apt-transport-https azure-cli Modify the first variables defined in config.tf to suit your needs Replace the dummy "cobaltstrike-dist.tgz" with an actual cobaltstrike download Edit/Replace the Malleable profile inside the Ressources folder (Make sure the profile filename matches the variables you set in step 1) login with azure az login run terraform init run terraform apply -auto-approve to deploy the infra Wait for the CDN to become active and enjoy! Once terraform completes it will provide you with the needed ssh command, the CobaltStrike teamserver will be running inside an tmux session on the deployed VM When your done using the infra, you can remove it with terraform destroy -auto-approve Download AzureC2Relay
Read more...
Digging Deep Into Dom XSS
https://thexssrat.medium.com/digging-deep-into-dom-xss-9ed172876477?source=rss------bug_bounty-5
https://thexssrat.medium.com/digging-deep-into-dom-xss-9ed172876477?source=rss------bug_bounty-5
IntroductionContinue reading on Medium » (https://thexssrat.medium.com/digging-deep-into-dom-xss-9ed172876477?source=rss------bug_bounty-5)
Hacking Articles Tips Tricks Videos Tutorials
Photo
Kali Linux Tutorials
TUF : A Framework For Securing Software Update Systems
TUF is a repository is the reference implementation of The Update Framework (TUF). It is written in Python and intended to conform to version 1.0 of the TUF specification. This implementation is in use in production systems, but is also intended to be a readable guide and demonstration for those working on implementing TUF in […]
The post TUF : A Framework For Securing Software Update Systems appeared first on Kali Linux Tutorials.
TUF : A Framework For Securing Software Update Systems
TUF is a repository is the reference implementation of The Update Framework (TUF). It is written in Python and intended to conform to version 1.0 of the TUF specification. This implementation is in use in production systems, but is also intended to be a readable guide and demonstration for those working on implementing TUF in […]
The post TUF : A Framework For Securing Software Update Systems appeared first on Kali Linux Tutorials.