Hacking on Medium
Stepping in the Unknown

https://cdn-images-1.medium.com/max/1201/1*GBBIBK8mVeng1xvLQv5iZw.png
There is a say in Cyber security “To stop a hacker, one needs to think like one” and penetration testing is what is all about thinking the…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How can I determine who owns a domain name

https://cdn-images-1.medium.com/max/602/0*7RNy374ze3OnWEhn
Ever found yourself wondering who owns a particular domain name?

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
WMEye - A Post Exploitation Tool That Uses WMI Event Filter And MSBuild Execution For Lateral Movement

https://blogger.googleusercontent.com/img/a/AVvXsEhVUekhyfl8R_dEBxNFTNHCKXteQuSz2CZGIC7roLiaceI5LUkDHclvk838hosVEk0q2SXI9T9Q5gFnMlM3S-ObW5x1a36hEWjplBkb53XCqAm9XzTNmF0nl4JmTVRLhN0Ec5o1gyhG4K3qkxdAvGaRajrCMx2G6V3_CNOqQKjMgl-AtB5EvVwIi7W8=w640-h232
WMEye is an experimental tool that was developed when exploring about Windows WMI. The tool is developed for performing Lateral Movement using WMI and remote MSBuild Execution. It uploads the encoded/encrypted shellcode into remote targets WMI Class Property, create an event filter that when triggered writes an MSBuild based Payload using a special WMI Class called LogFileEventConsumer and finally executes the payload remotely.
UseCase

Fileless Lateral Movement using WMI, can be used with Cobalt Strike's Execute-Assembly

Note: This is still in experimental stage and no where near to be used in a real engagement.
Current Working

* Creates a Remote WMI Class
* Writes Shellcode as property value to the above created Fake WMI Class
* Creates a WMI Event Filter to trigger on powershell.exe process creation
* On Event Trigger, it Uploads MSBuild Payload into remote system using LogFileEventConsumer (A WMI Consumer type to write Log Files)
* Finally Invoke Win32_Process Createto call MSbuild remotely

The MSBuild Payload fetches encoded shellcode from WMI Class Property, decodes and executes it.

Upcoming Features

* Replace WIN32_Process Create method of invocation with something better
* Add GZIP Compression for Shellcode and XML File Bytes
* Add NTLM PTH Support
* Add CleanUp Functions for removing event filter after the logfileeventconsumer finished writing the MSBuild Payload

Whats Unique in this Project ?

* Uploads the encoded/encrypted shellcode to remote machines WMI property on a Created Fake Class (can maybe tweak to write shellcode into existing class's Property)
* Uses LogFileEventConsumer to upload MSBuild File , instead of relying in spawning Powershell.exe using win32_process Create

Credits

https://www.fireeye.de/content/dam/fireeye-www/global/en/current-threats/pdfs/wp-windows-management-instrumentation.pdf
Download WMEye

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
What Kind Of Security Tools Should I Provide My Developers?

Who says developers don't care about security? Give them the tools to help them build security into their code.

Dark Reading: Attacks/Breaches
How Should My Security Analyst Use the MITRE ATT&CK Framework?

As a curated knowledgebase for adversary behavior, the MITRE ATT&CK framework can guide defenders on how to conduct an investigation and the order of things to look for.

Dark Reading: Attacks/Breaches
Would 'Cyber Geneva Conventions' Defuse Online Aggression?

International treaties could force nation-states to police bad actors within their borders to avoid penalties.

Hats Finance Opens New Bug Bounty Program with Fuji DAO

About Fuji DAOContinue reading on Medium »
Read more...

Hats Finance Opens New Bug Bounty Program with Fuji DAO
https://hatsfinance.medium.com/hats-finance-opens-new-bug-bounty-program-with-fuji-dao-7578b1ef5511?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

About Fuji DAOContinue reading on Medium » (https://hatsfinance.medium.com/hats-finance-opens-new-bug-bounty-program-with-fuji-dao-7578b1ef5511?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Optimism Infinite Money Duplication Bugfix Review
https://medium.com/immunefi/optimism-infinite-money-duplication-bugfix-review-daa6597146a0?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

SummaryContinue reading on Immunefi » (https://medium.com/immunefi/optimism-infinite-money-duplication-bugfix-review-daa6597146a0?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Hats Finance Opens New Bug Bounty Program with Fuji DAO

About Fuji DAOContinue reading on Medium »
Read more...

hacking: security in practice
Here is the direct download for the famous "The Art of Hacking" series

submitted by /u/charles3535
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How sites detects the second account

they understand even tho u change ur ip

submitted by /u/god_rays
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
I wrote a blazing fast subdomain enumerator! (100.000 domains checked under 10 minutes!)

https://external-preview.redd.it/FB9W0Dwal8Iw2ulQ3D6QJhJwrsUFkpZ8CotttkHKzm8.jpg?width=640&crop=smart&auto=webp&s=83b6aade0ce675950909f76a54b72f08bdf26d59 submitted by /u/Esc4iCEscEsc
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Web hacking automation

I have a Dev background and I'm quite familiar with web hacking. Seeing these top hackers automating a ton, one question arise in mind, "What bugs are practically automatable". Everyone is automating subdomain takeovers it's easy to automate but what about Xss or SQLi? Are they automating those only checking URL parameters?

submitted by /u/crusader2409
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Blueprint-TryHackMe[CTF Walkthrough]

https://cdn-images-1.medium.com/max/2560/0*xV3fqQ87M7AnjwTV
Today I am going to walk you through a beginner level CTF challenge from TryHackMe “Blueprint”. The goal is simple,”Hack into this Windows…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video