Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
Moving executable to startup folder triggers windows defender on Windows 10. Is there a way to stay undetected?

Just coding a program for myself and when I copy my executable to the startup folder windows defender automatically blocks it. 6 years ago this was undetected but times have changed

submitted by /u/Letsgoandexplore
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Moving executable to startup folder triggers windows defender on...

Just coding a program for myself and when I copy my executable to the startup folder windows defender automatically blocks it. 6 years ago this...

2 viewsedited 13:43

hacking: security in practice
beginning

hey guys lI'm trying to get into hacking, i downloaded an app called Ethical Hacking and it's asking me to download virtual box with Kali Linux but i don't know which one it is. any suggestions?

submitted by /u/RoyaleKnightGaming
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

beginning

hey guys lI'm trying to get into hacking, i downloaded an app called Ethical Hacking and it's asking me to download virtual box with Kali Linux...

2 viewsedited 13:43

Hacking Articles Tips Tricks Videos Tutorials

https://b.thumbs.redditmedia.com/T-tavwUrYdLDj8nhaUXgBptZMqaocP8PBOcv7qUY_Ws.jpg submitted by /u/quesoboi21
[link] [comments]

3 views13:43

Hacking Articles Tips Tricks Videos Tutorials

3 views13:51

Hacking Articles Tips Tricks Videos Tutorials

Photo

hacking: security in practice
Clickjacking method that bypassed CORS for multi-step

https://external-preview.redd.it/KsrlIWF5nHc865UWAdaB5kAv62i-nUH8p4u2QVYYsMc.jpg?width=320&crop=smart&auto=webp&s=39fc846348814f6f4871b92c4f1fb9c073830be3 submitted by /u/AntoinetMartin
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Clickjacking method that bypassed CORS for multi-step

Posted in r/hacking by u/AntoinetMartin • 1 point and 0 comments

3 viewsedited 13:51

Hacking Articles Tips Tricks Videos Tutorials

1 view13:52

Hacking Articles Tips Tricks Videos Tutorials

Photo

KitPloit - PenTest Tools!
PurplePanda - Identify Privilege Escalation Paths Within And Across Different Clouds

https://blogger.googleusercontent.com/img/a/AVvXsEidFt5ibzldwSMn7USOdo2gx3oMcsxByF3lgUJoDBOC4Z2ptdk7eIPaXW2X6QRdSTtetxUYTJwyHDW3ACkPHjuUI6UpAlExnhjmilPS4P4RqWW5a8Diy5wyN_2auA2qrkrJsS9v-buM25PYe77IiapDqWL_Xamjgr8LNGGSRcsFBaGdJKgiYlZ9Z5f1=w640-h400 This tool fetches resources from different cloud/saas applications focusing on permissions in order to identify privilege escalation paths and dangerous permissions in the cloud/saas configurations. Note that PurplePanda searches both privileges escalation paths within a platform and across platforms.

The name comes from the animal Red Panda. This panda eats peas, just like Purple Panda, which can ingest API keys/tokens found by these PEASS. The color was changed to purple because this tool is meant mainly for Purple Teams (because it can be highly useful for both Blue and Red Teams). How to useEach folder inside /inteldefines one platform that can be enumerated and contains a README.md file explaining how to use that specific module.

Download Neo4jDesktop and create a database. Then export the env variables PURPLEPANDA_NEO4J_URLand PURPLEPANDA_PWDwith the URL to the neo4j database and the password.

If you want shodan to be used with public IPs discovered during the enumeration export a env variable called SHODAN_KEY with a valid api key of shodan.

Then just install and launch the program indicating the platforms you want to enumerate comma separated like:

git clone https://github.com/carlospolop/PurplePanda
cd PurplePanda
python3 -m venv .
source bin/activate
python3 -m pip install -r requirements.txt
export PURPLEPANDA_NEO4J_URL="bolt://neo4j@localhost:7687"
export PURPLEPANDA_PWD="neo4j_pwd_4_purplepanda"
python3 main.py -h # Get help
python3 main.py -e --enumerate google,github,k8s --github-only-org --k8s-get-secret-values --gcp-get-secret-values # Enumerate google, github and k8s

PurplePanda has 2 analysis modes:

* -e(enumerate): This is the main one, it will try to gather data and analyze it.
* -a(analyze): This will perform a quick analysis of the provided credentials. Video tutorialCheck how to use and inspect the data gathered by PurplePanda: For Blue/Purple TeamsUse credentials for each platform with at least admin read access to all the resources of the platform. This will help you to see exactly the privesc paths that can be abused within your configurations in each platform and across For Red TeamsPurplePanda is also designed to be used by Red Teams. In general, cloud/saas platforms won't give everyone access to read the configuration of the platform, that's why PurplePanda supports the use of several keys for the same platform, in order to try to enumerate everything with all the keys you compromised and have the most accurate view of the configuration of the platform. Supported platforms* Google Cloud Platform (GCP): To understand how GCP security works and how to abuse roles and permissions read https://book.hacktricks.xyz/cloud-security/gcp-security
* Github: To understand how Github security works and how to bypass branch protections, steal secrets, privesc... read https://book.hacktricks.xyz/cloud-security/github-security
* Kubernetes (K8s): To understand how Kubernetes RBAC security works and how to abuse roles, privesc to other clouds... read https://book.hacktricks.xyz/cloud-security/pentesting-kubernetes How to use the dataUse the -dparameter indicating a directory. Then, PurplePanda will write in this directory several interesting analysis in csvformat of the information obtained from all the platforms. The recommendation is to find interesting and unexpected things in those files an[...]

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest & Hacking Tools

PurplePanda - Identify Privilege Escalation Paths Within And Across Different Clouds

2 viewsedited 13:52

Hacking Articles Tips Tricks Videos Tutorials

KitPloit - PenTest Tools! PurplePanda - Identify Privilege Escalation Paths Within And Across Different Clouds https://blogger.googleusercontent.com/img/a/AVvXsEidFt5ibzldwSMn7USOdo2gx3oMcsxByF3lgUJoDBOC4Z2ptdk7eIPaXW2X6QRdSTtetxUYTJwyHDW3ACkPHjuUI6UpAlE…

d then move to analyze those interesting cases with the graphs.

Each folder inside /inteldefines one platform that can be enumerated and contains a README.md file explaining how to use that specific module. Moreover, each folder also contains a HOW_TO_USE.mdfile and a QUERIES.mdfile.

In the HOW_TO_USE.mdfile you can find the best queries to perform an investigation on how to escalate privileges (for Purple, Blue, and Red Teams).

In the QUERIES.mdfile you will find all proposed queries to investigate the data easier. How to visualize the data in graphsFollow the instructions indicated in VISUALIZE_GRAPHS.md How to ContributeIn the root folder and in each folder inside intel/you will find a TODO.mdfile. You can find in those files how you can help. Just send a PR with the addition.

PRs with fixes are also welcome :)

Moreover, if you have other ideas that aren't in those TODO files feel free to send a PR.

By Polop(TM) Download PurplePanda

___________________________
@hacking_Attack
@Hacking_Video

2 viewsedited 13:52

Hacking Articles Tips Tricks Videos Tutorials

PurplePanda - Identify Privilege Escalation Paths Within And Across Different Clouds
http://www.kitploit.com/2022/03/purplepanda-identify-privilege.html

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest & Hacking Tools

PurplePanda - Identify Privilege Escalation Paths Within And Across Different Clouds

2 viewsedited 13:56

Hacking Articles Tips Tricks Videos Tutorials

2 views13:56

Hacking Articles Tips Tricks Videos Tutorials

This tool fetches resources from different cloud/saas applications focusing on permissions in order to identify privilege escalation (https://www.kitploit.com/search/label/Privilege%20Escalation) paths and dangerous permissions in the cloud/saas configurations. Note that PurplePanda searches both privileges escalation (https://www.kitploit.com/search/label/Escalation) paths within a platform and across platforms. The name comes from the animal Red Panda. This panda eats peas, just like Purple Panda, which can ingest API keys/tokens found by these PEASS (https://github.com/carlospolop/PEASS-ng). The color was changed to purple because this tool is meant mainly for Purple Teams (because it can be highly useful for both Blue and Red Teams).
How to use Each folder inside /intel defines one platform that can be enumerated and contains a README.md file explaining how to use that specific module. Download Neo4jDesktop (https://neo4j.com/download-center/#desktop) and create a database. Then export the env variables PURPLEPANDA_NEO4J_URL and PURPLEPANDA_PWD with the URL to the neo4j database and the password. If you want shodan to be used with public IPs discovered during the enumeration (https://www.kitploit.com/search/label/Enumeration) export a env variable called SHODAN_KEY with a valid api key of shodan. Then just install and launch the program indicating the platforms you want to enumerate comma separated like: git clone https://github.com/carlospolop/PurplePanda
cd PurplePanda
python3 -m venv .
source bin/activate
python3 -m pip install -r requirements.txt
export PURPLEPANDA_NEO4J_URL="bolt://neo4j@localhost:7687"
export PURPLEPANDA_PWD="neo4j_pwd_4_purplepanda"
python3 main.py -h # Get help
python3 main.py -e --enumerate google,github,k8s --github-only-org --k8s-get-secret-values --gcp-get-secret-values # Enumerate google, github and k8s PurplePanda has 2 analysis modes: -e (enumerate): This is the main one, it will try to gather data and analyze it. -a (analyze): This will perform a quick analysis of the provided credentials. Video tutorial Check how to use and inspect the data gathered by PurplePanda:
For Blue/Purple Teams Use credentials (https://www.kitploit.com/search/label/Credentials) for each platform with at least admin read access to all the resources of the platform. This will help you to see exactly the privesc paths that can be abused within your configurations in each platform and across For Red Teams PurplePanda is also designed to be used by Red Teams. In general, cloud/saas platforms won't give everyone access to read the configuration of the platform, that's why PurplePanda supports the use of several keys for the same platform, in order to try to enumerate everything with all the keys you compromised and have the most accurate view of the configuration of the platform. Supported platforms Google Cloud Platform (GCP): To understand how GCP security works and how to abuse roles and permissions read https://book.hacktricks.xyz/cloud-security/gcp-security Github: To understand how Github security works and how to bypass branch protections, steal secrets, privesc... read https://book.hacktricks.xyz/cloud-security/github-security Kubernetes (K8s): To understand how Kubernetes (https://www.kitploit.com/search/label/Kubernetes) RBAC security works and how to abuse roles, privesc to other clouds... read https://book.hacktricks.xyz/cloud-security/pentesting-kubernetes How to use the data Use the -d parameter indicating a directory. Then, PurplePanda will write in this directory several interesting analysis in csv format of the information obtained from all the platforms. The recommendation is to find interesting and unexpected things in those files and then move to analyze those interesting cases with the graphs. Each folder inside /intel defines one platform that can be enumerated and contains a README.md file explaining how to use that specific module. Moreover, each folder also

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest & Hacking Tools

Leading source of security tools, hacking tools, cybersecurity and network security. Learn about new tools and updates in one place.

5 viewsedited 13:56

About

Blog

Apps

Platform