Kali Linux Tutorials
Mininode : A CLI Tool To Reduce The Attack Surface Of The Node.js Applications By Using Static Analysis

Mininode is a CLI tool to reduce the attack surface of the Node.js applications by using static analysis of source code. It supports two modes of reduction (1) coarse, (2) fine.

Mininode constructs the dependency graph (modules and functions used) of the application starting from main file, i.e. entry point of the application. Mininode initializes entry point to package.jsonfile’s mainfield if it exists. Otherwise default to index.js.

Example usage: node index.js . Below is the list of options that can be passed to Mininode.

Options

List of command line options that can be passed to mininode.

* --destination, -d: the path where mininode will save the reduced Node.js application. The default value: mininode.
* --dry-run: just generates mininode.json without modifying the initial application.
* --mode, -m: reduction mode. The value can be either coarseor fine. In coarsemode mininode will perform only coarse-grained reduction. While in finemode mininode will perform fine-grained reduction. In general coarse-grained reduction is more reliable, because mininode will not try to reduce unused functions inside the module. Default value: coarse.
* --silent: console output is disabled. This will improve the performance of the mininode.
* --verbose: outputs additional information to the console. The default value: false
* --log: mininode will generate log file inside, which contains dependency graph of the application in json format. The default value: true.
* --log-output: the name of the log file generated by mininode. The default value: mininode.json.
* --compress-log: compresses the final log file. By default it will dump everything into log file. In production it is advised to pass the --compress-logflag to save space.
* --seeds: seed files from where mininode will start building dependency graph. You can provide many seed files by separating them with colon.
* --skip-stat: skips calculating the statistics
* --skip-reduction: if passed mininode will not reduce the JavaScript files. The default value: false.
* --skip-remove: if passed mininode will not remove unused JavaScript files. The default value: false.

Limitaions

* Mininode uses static analysis, which means it can not reduce the attack surface of the Node.js application which uses dynamic behaviour, such as eval. If Mininode detects dynamic behaviour in the application it exits with error DYNAMIC_BEHAVOUR_DETECTED.
Download

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
CRT : CrowdStrike Reporting Tool for Azure

CRT is a tool to queries the following configurations in the Azure AD/O365 tenant which can shed light on hard-to-find permissions and configuration settings in order to assist organizations in securing these environments.

Exchange Online (O365):

* Federation Configuration
* Federation Trust
* Client Access Settings Configured on Mailboxes
* Mail Forwarding Rules for Remote Domains
* Mailbox SMTP Forwarding Rules
* Mail Transport Rules
* Delegates with ‘Full Access’ Permission Granted
* Delegates with Any Permissions Granted
* Delegates with ‘Send As’ or ‘SendOnBehalf’ Permissions
* Exchange Online PowerShell Enabled Users
* Users with ‘Audit Bypass’ Enabled
* Mailboxes Hidden from the Global Address List (GAL)
* Collect administrator audit logging configuration settings.

Azure AD:

* Service Principal Objects with KeyCredentials
* O365 Admin Groups Report
* Delegated Permissions & Application Permissions

Querying Tenant Partner Information: In order to view Tenant Partner Information, including roles assigned to your partners, you must log into the Microsoft 365 Admin Center as Global Admin:

https://admin.microsoft.com/AdminPortal/Home#/partners

Prerequisites

The following PowerShell modules are required and will be installed automatically:

* ExchangeOnlineManagement
* AzureAD

NOTE: To return the full extent of the configurations being queried, the following role is required:

* Global Admin

When Global Admin privileges are not available, the tool will notify you about what information won’t be available to you as a result.

Usage

No parameters specified: A folder named with date and time (YYYYDDMMTHHMM) will be created automatically in the directory the script is being run from. Default authentication method will prompt for each connection for compatibility with MFA.

.\Get-CRTReport.ps1

-BasicAuthParameter: [OPTIONAL] If MFA is not enforced for your user principal, you can use this parameter which will prompt only once for authentication and store credentials using Get-Credential. (Not Recommended)

.\Get-CRTReport.ps1 -BasicAuth

-JobNameParameter: [OPTIONAL] Use the JobName parameter to distinguish between different tenants. If no JobName is specified, a Date/Time formatted folder will be placed within the working directory.

.\Get-CRTReport.ps1 -JobName MyJobName

-CommandsParameter: [OPTIONAL] With this parameter, specify the specific commands you want to run in quotes, comma or space separated.

.\Get-CRTReport.ps1 -JobName MyJobName -WorkingDirectory ‘C:\Path\to\Job\Folder’ -Commands “Command1,Command2”

-AzureEnvironmentName & -ExchangeEnvironmentNameParameter: [OPTIONAL] With this parameter, specify the Azure or Exchange environment names. Using tab complete you can search the acceptable values.

.\Get-CRTReport.ps1 -ExchangeEnvironmentName O365USGovGCCHigh -AzureEnvironmentName AzureUSGovernment

Available Commands:

FedConfig
FedTrust
ClientAccess
RemoteDomains
SMTPForward
TransportRules
FullAccessGranted
AnyAccessGranted
SendAsGranted
EXOPowerShell
AuditBypassEnabled
HiddenMailboxes
KeyCredentials
O365AdminGroups
DelegateAppPerms
AdminAuditLogConfig

-InteractiveParameter: [OPTIONAL] Some commands may take a long time to process depending on the amount of data in the tenant. Using the Interactive parameter, you will have the option to skip any particular command prior to the module running.

.\Get-CRTReport.ps1 -JobName MyJobName -WorkingDirectory ‘C:\Path\to\Job\Folder’ -Interactive
Download

___________________________
@hacking_Attack
@Hacking_Video

Insecure comparison in PHP — Business Logic Bypass vulnerability

I have recently spotted an interesting vulnerability in a PHP application, which was in scope of a private bug bounty program. This…
Read more...

From Recon via Censys and DNSdumpster, to Getting P1 by Login Using Weak Password — “password”

A simple story when Allah allowed me to get P1 by combining several issues, one of which was related to “weak credentials”.
Read more...

hacking: security in practice
aircrack-ng -w all password file location

-w is used to define password dictionary file in aircrack-ng. However, I've seen different example where "-w all" is used and I can't even see any file named "all" in that directory.
Now it's time to use our dictionary and crack the network. Open up terminal and type: aircrack-ng -w
http://stephencroberts.blogspot.com/2012/04/cracking-wpa-networks-with.html

http://www.cs.toronto.edu/~arnold/427/18s/427_18S/indepth/scapy_wifi/scapy_tut.html

What is the actual file used to represent "all" in this case?

submitted by /u/w0lfcat
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Signal Jammer

I’m trying to put a signal jammer into a altoids can so what boards can I use?

submitted by /u/RedditUserHigh420
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Python Wireless Network Listener — Where has your devices been?

https://cdn-images-1.medium.com/max/1280/1*1tnEDC_-RZwATIFjjvajlA.jpeg
Learn how to build a simple Python script that can be used to probe for devices and their recent network connections. This tutorial covers…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
What is LXC & LXD | How to escalate privileges using LXD in linux systems

https://cdn-images-1.medium.com/max/977/1*0ICh8FBZ_426IeOx3Bo86g.png
Hey Hackers!!!

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
CodeAnalysis - Static Code Analysis

https://blogger.googleusercontent.com/img/a/AVvXsEhh10PnIKy45SPiRpjS2fjFf4x2ie5fqMsOWno8LL015kvaQAdZcxDGcSxlreb_koP3N8mnWUbuSYR420hyHT9LzS2sW-U_lEAsST0z8ktQFShEW2mPlJWMxIZFDNRz_L5Kh4AL2qpUMAdwJE1HthKuSp-Pj4yFzgB-s2wRyedKc0vC7x5KO9zgpjcY=w400-h384 Tencent Cloud Code Analysis (TCA for short, code-named CodeDog inside the company early) is a comprehensive platform for code analysis and issue tracking. TCA consist of three components, server, web and client. It also supports the integration of other code analysis tools.
Code analysis is a technology, using lexical analysis, syntax analysis, control-flow analysis, data-flow analysis to make a comprehensive analysis of the code, so as to verify whether the code meets the requirements of normative, security, reliability, maintainability and other indicators.

Using TCA can help team find normative, structural, security vulnerabilities and other issues in the code, continuously monitor the quality of the project code and issue alerts. At the same time, TCA opens up APIs to support connection with upstream and downstream systems, so as to integrate code analysis capabilities, ensure code quality, and be more conducive to inheriting an excellent team code culture. https://blogger.googleusercontent.com/img/a/AVvXsEiSOSLbVVncbTqw4UTbVh_y_GLxNSsz9vd_mVw1meiRgaBbKBrWp9vdXcjmk51U8bHHepPYWI-uXWyRFsV9gvj2CaQLb8xIGYH3LM_Rqwghz36GhT96VISbpNPDg1Jo2YUM7iC2tvPBarsNZ6XhuNRl-KU15PCvhlprGyYtK5kLcoi9X0JhFfadIWwW=w640-h104 https://blogger.googleusercontent.com/img/a/AVvXsEiSHNogeee8uZtBhrc4HyZycbcqQGtwQT3SoUC5htOiVskKfFXSlfbfsh4Gd44MyiRMBIW8biSAv3fN4YWgeApvuStLJw89hbjHGpWlYBUt_5O1p0KQfm7byjKtVSbjJDw2bzsnN6AWZZ7b3uoIBjVsbjJPKnzIeH3fV-2Je18RjWL4jooQmREMdX04=w640-h304 ExperienceApply Link Key Features1. Language support: It supports Java/C++/Objective-C/C#/JavaScript/Python/Go/PHP and more, covering common programming languages.
2. Code inspection: Discover code quality defects, code specification problems, code security vulnerabilities, invalid codes, etc. At present, many self-developed and well-known open source analysis tools have been integrated. The layered architecture can support rapid self-service management tools for teams.
3. Code measurement: Support comprehensive measurement of code from the three dimensions of code cyclomatic complexity, code repetition rate and code statistics.
4. DevOps integration: The client can be started via the command line. Standard APIs support connection to upstream and downstream systems, and various DevOps systems. Getting Started* How to get start
* How to deploy server and web
* How to deploy server and web with docker-compose
* How to use client
* Deploy Q&A Community* QQ Group: 361791391
* Discussion
* Wiki
* White Paper Changelogs* Check our Changelog Contributing* Check out CONTRIBUTING to see how to develop with TCA.
* Tencent Open Source Incentive Program encourages the participation and contribution of developers. We look forward to your active participation. LicenseTCA is MIT licensed Download CodeAnalysis

___________________________
@hacking_Attack
@Hacking_Video

CodeAnalysis - Static Code Analysis
http://www.kitploit.com/2022/03/codeanalysis-static-code-analysis.html

___________________________
@hacking_Attack
@Hacking_Video

Tencent Cloud Code Analysis (https://www.kitploit.com/search/label/Code%20Analysis) (TCA for short, code-named CodeDog inside the company early) is a comprehensive platform for code analysis and issue tracking. TCA consist of three components, server, web and client. It also supports the integration of other code analysis tools.
Code analysis is a technology, using lexical analysis, syntax analysis, control-flow analysis, data-flow analysis to make a comprehensive analysis of the code, so as to verify whether the code meets the requirements (https://www.kitploit.com/search/label/Requirements) of normative, security, reliability, maintainability and other indicators. Using TCA can help team find normative, structural, security vulnerabilities (https://www.kitploit.com/search/label/vulnerabilities) and other issues in the code, continuously monitor the quality of the project code and issue alerts. At the same time, TCA opens up APIs to support connection with upstream and downstream systems, so as to integrate code analysis capabilities, ensure code quality, and be more conducive to inheriting an excellent team code culture.

___________________________
@hacking_Attack
@Hacking_Video

Experience Apply Link (https://cloud.tencent.com/apply/p/44ncv4hzp1) Key Features Language support: It supports Java/C++/Objective-C/C#/JavaScript/Python/Go/PHP and more, covering common programming languages. Code inspection: Discover code quality (https://www.kitploit.com/search/label/Code%20Quality) defects, code specification problems, code security vulnerabilities, invalid codes, etc. At present, many self-developed and well-known open source analysis tools have been integrated. The layered architecture can support rapid self-service management (https://www.kitploit.com/search/label/Management) tools for teams. Code measurement: Support comprehensive measurement of code from the three dimensions of code cyclomatic complexity, code repetition rate and code statistics. DevOps integration: The client can be started via the command line. Standard APIs support connection to upstream and downstream systems, and various DevOps systems. Getting Started How to get start (https://github.com/Tencent/CodeAnalysis/blob/main/GettingStart(%E5%BF%AB%E9%80%9F%E5%85%A5%E9%97%A8).md) How to deploy server and web (https://github.com/Tencent/CodeAnalysis/blob/main/doc/deploy.md) How to deploy server and web with docker-compose (https://github.com/Tencent/CodeAnalysis/blob/main/doc/deploy_dc.md) How to use client (https://github.com/Tencent/CodeAnalysis/blob/main/doc/client.md) Deploy Q&A (https://github.com/Tencent/CodeAnalysis/blob/main/doc/Q&A.md) Community QQ Group: 361791391 Discussion (https://github.com/Tencent/CodeAnalysis/discussions) Wiki (https://github.com/Tencent/CodeAnalysis/wiki) White Paper (https://github.com/Tencent/CodeAnalysis/blob/main/%E8%85%BE%E8%AE%AF%E4%BA%91%E4%BB%A3%E7%A0%81%E5%88%86%E6%9E%90%E7%99%BD%E7%9A%AE%E4%B9%A6.pdf) Changelogs Check our Changelog (https://github.com/Tencent/CodeAnalysis/blob/main/CHANGELOG.md) Contributing Check out CONTRIBUTING (https://github.com/Tencent/CodeAnalysis/blob/main/CONTRIBUTING.md) to see how to develop with TCA. Tencent Open Source Incentive Program (https://opensource.tencent.com/contribution) encourages the participation and contribution of developers. We look forward to your active participation. License TCA is MIT licensed (https://github.com/Tencent/CodeAnalysis/blob/main/LICENSE)

Download CodeAnalysis (https://github.com/Tencent/CodeAnalysis)

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Governments Should Decide Who Gets to Buy Spyware

And the world must face the fact that offensive cyber tools have evolved into weapons that are no different from tanks, drones, or missiles.

Kali Linux Tutorials
Bluffy : Convert Shellcode Into Different Formats

Bluffy is a utility which was used in experiments to bypass Anti-Virus products (statically) by formatting shellcode into realistic looking data formats.

Proof-of-concept tools, such as 0xBoku’s Ninja_UUID_Runner and ChoiSG’s UuidShellcodeExec, inspired the initial concept for Bluffy.

So far, we implemented:

1. UUID
2. CLSID
3. SVG
4. CSS
5. CSV

Help

$ python3 bluffy.py -h
⣇⣿⠘⣿⣿⣿⡿⡿⣟⣟⢟⢟⢝⠵⡝⣿⡿⢂⣼⣿⣷⣌⠩⡫⡻⣝⠹⢿⣿⣷
⡆⣿⣆⠱⣝⡵⣝⢅⠙⣿⢕⢕⢕⢕⢝⣥⢒⠅⣿⣿⣿⡿⣳⣌⠪⡪⣡⢑⢝⣇
⡆⣿⣿⣦⠹⣳⣳⣕⢅⠈⢗⢕⢕⢕⢕⢕⢈⢆⠟⠋⠉⠁⠉⠉⠁⠈⠼⢐⢕⢽
⡗⢰⣶⣶⣦⣝⢝⢕⢕⠅⡆⢕⢕⢕⢕⢕⣴⠏⣠⡶⠛⡉⡉⡛⢶⣦⡀⠐⣕⢕
⡝⡄⢻⢟⣿⣿⣷⣕⣕⣅⣿⣔⣕⣵⣵⣿⣿⢠⣿⢠⣮⡈⣌⠨⠅⠹⣷⡀⢱⢕
⡝⡵⠟⠈⢀⣀⣀⡀⠉⢿⣿⣿⣿⣿⣿⣿⣿⣼⣿⢈⡋⠴⢿⡟⣡⡇⣿⡇⡀⢕
⡝⠁⣠⣾⠟⡉⡉⡉⠻⣦⣻⣿⣿⣿⣿⣿⣿⣿⣿⣧⠸⣿⣦⣥⣿⡇⡿⣰⢗⢄
⠁⢰⣿⡏⣴⣌⠈⣌⠡⠈⢻⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣬⣉⣉⣁⣄⢖⢕⢕⢕
⡀⢻⣿⡇⢙⠁⠴⢿⡟⣡⡆⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣷⣵⣵⣿
⡻⣄⣻⣿⣌⠘⢿⣷⣥⣿⠇⣿⣿⣿⣿⣿⣿⠛⠻⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿
⣷⢄⠻⣿⣟⠿⠦⠍⠉⣡⣾⣿⣿⣿⣿⣿⣿⢸⣿⣦⠙⣿⣿⣿⣿⣿⣿⣿⣿⠟
⡕⡑⣑⣈⣻⢗⢟⢞⢝⣻⣿⣿⣿⣿⣿⣿⣿⠸⣿⠿⠃⣿⣿⣿⣿⣿⣿⡿⠁⣠
⡝⡵⡈⢟⢕⢕⢕⢕⣵⣿⣿⣿⣿⣿⣿⣿⣿⣿⣶⣶⣿⣿⣿⣿⣿⠿⠋⣀⣈⠙
⡝⡵⡕⡀⠑⠳⠿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⠿⠛⢉⡠⡲⡫⡪⡪⡣
Convert shellcode into https://s.w.org/images/core/emoji/13.1.0/72x72/2728.png different https://s.w.org/images/core/emoji/13.1.0/72x72/2728.png formats!
Written by:
~ Mez0
~ Michael Ranaldo
usage: Bluffy [-h] -b -o -m
optional arguments:
-h, –help show this help message and exit
-b , –bin Specify bin file to load
-m , –mask Specify the mask for the shellcode
-x , –xor XOR the payload
-p , –preview Preview the created format
-pp, –payload_preview Preview the payload prior to C formatting
–list List all the available masks

Written by:

* Michael Ranaldo
* Mez0

Requirements And Installation

The following items must be installed prior to using Bluff:

python3.9 or greater

sudo apt install python3.9

rich

sudo pip3 install rich

pcre2.8

Depending on whether its going to be ran on Kali, Ubuntu 18, 19, 20, and so on, the process of getting and building with pcre2.8may be different.

For us on Ubuntu, it was developed on

$ lsb_release -a
No LSB modules are available.
Distributor ID: Ubuntu
Description: Ubuntu 21.04
Release: 21.04
Codename: hirsute

In order to link libpcre2-8.a, the .afile had to be included within:

/usr/lib/gcc/x86_64-w64-mingw32/10-win32

As for obtaining the header and lib files, MSYS2 was used. But if you’re smarter than us, then just do it from source for Mingw64: https://pcre.org/.

The simplest way to thus acquire and install is to run the following commands (after double checking your architecture etc.):

sudo apt install mingw-64
sudo wget https://packages.msys2.org/package/mingw-w64-x86_64-pcre2?repo=mingw64 -P /usr/lib/gcc/x86_64-w64-mingw32/10-win32

Using Bluffy

To build a payload, get your binary file. For this example, we used calc.bin, which just loads calc.exe as a proof of concept. As Bluffy only seeks to evade static analysis using steganography, by hiding the binary within an otherwise innocuous file, you will need to do further research to ensure that your payload also evades dynamic detection.

Run bluffy, choosing a mask of your choice and providing your .bin file:

python ./bluffy.py -b calc.bin -m css -x

Check your payload, then build it. To build your payload, copy the .h file bluffy creates, rename it css.c, run make to build it to an executable, then test using the included examples directory:

mv css.h examples/css/css.h
cd examples/css
make

This will use the included “main.c” to build an Windows executable. Test this to confirm. If you have also used calc.bin, you should be greeted by a new Calc window opening. If so, congratulations!
Download