Hacking Articles Tips Tricks Videos Tutorials
468 subscribers
65.9K photos
15 videos
157 files
132K links
Exploit
Pentesting
Hacking
Red Team
Blue Team
Kali Linux
Bug Bounty
Black Hat
Cyber security etc

@Hacking_Video
@Hacking_attack
Download Telegram
($$$) Broken Authentication and IDOR at [REDACTED]

Hello infosec community hope you guys are good, I want to share my finding in bug bounty about Broken Authentication and Insecure Direct…Continue reading on Medium »
Read more...
Oh365UserFinder - Python3 O365 User Enumeration Tool

Oh365UserFinder is used for identifying valid o365 accounts and domains without the risk of account lockouts. The tool parses responses to identify the "IfExistsResult" flag is null or not, and responds appropriately if the user is valid. The tool will attempt to identify false positives based on response, and either automatically create a waiting period to allow the throttling value to reset, or warn the user to increase timeouts between attempts. Oh365UserFinder can also easily identify if a domain exists in o365 using the -d or --domain flag. This saves the trouble of copying the url from notes and entering it into the URL bar with the target domain. Usage Installing Oh365UserFinder git clone https://github.com/dievus/Oh365UserFinder.git Change directories to Oh365UserFinder and run: pip3 install -r requirements.txt This will run the install script to add necessary dependencies to your system. python3 Oh365UserFinder.py -h This will output the help menu, which contains the following flags: -h, --help - Lists the help options -e, --email - Required for running Oh365UserFinder against a single email account -r, --read - Reads from a text file containing emails (ex. -r emails.txt) -w, --write - Writes valid emails to a text document (ex. -w validemails.txt) -c, --csv - Writes valid emails to a CSV file (ex. -c validemails.csv) -t, --timeout - Sets a pause between attempts in seconds (ex. -t 60) -d, --domain - Checks if the listed domain is valid or not (ex. -d mayorsec.com) --verbose - Outputs test verbosely Examples of full commands include: python3 o365UserFinder.py -e example@test.com python3 Oh365UserFinder.py -r emails.txt -w validemails.txt python3 Oh365UserFinder.py -r emails.txt -w validemails.txt -t 30 -v Notes Make note that Microsoft does have some defense in place that can, from time to time, provide false positives in feedback. If you suspect that this is occurring take a pause in testing, and return and increase the duration between attempts using the -t flag. Acknowledgements This started as a port over from Python2 to Python3 of a tool named o365Creeper developed by Korey Mckinley, and it quickly spiraled into what it is now. Download Oh365UserFinder
Read more...

___________________________
@hacking_Attack
@Hacking_Video
Dark Reading: Attacks/Breaches
Crowdsourced Efforts Get Leveraged in Ukraine Conflict

The battle is not just being waged in the physical world — it's also happening online. And average people are taking part, not just governments.
Dark Reading: Attacks/Breaches
Will the Biggest Clouds Win? Lessons From Google's Mandiant Buy

Google eventually won out in the competition for Mandiant, but Microsoft's interest underscores the trend in consolidation of security services into large cloud providers, experts say.
TryHackMe: Chocolate Factory Write-up

Let’s boot the machine and start hacking!!!.
Read more...
Hacking Articles Tips Tricks Videos Tutorials
Photo
Kali Linux Tutorials
Wslu : A Collection Of Utilities For Windows 10 Linux Subsystems

Wslu is a collection of utilities for Windows 10 Linux Subsystem, such as retrieving Windows 10 environment variables or creating your favorite Linux GUI application shortcuts on Windows 10 Desktop.

Requires Windows 10 Creators Update; Some of the feature requires a higher version of Windows 10; Supports WSL2. Featurewslusc

A WSL shortcut creator to create a shortcut on your Windows 10 Desktop.

wslsys

A WSL system information printer to print out system informations from Windows 10 or WSL.

wslfetch

A WSL screenshot information tool to print information in an elegant way.

wslvar

A WSL tool to help you get Windows system environment variables.

wslview

With alias wview/wslstart/wstartA fake WSL browser that can help you open link in default Windows browser or open files on Windows.

wslupath

Deprecated

A WSL tool to convert path styles.

wslact

A set of quick actions for WSL such as quickly mounting all drives or manually sync time between Windows and WSL. InstallationAlpine LinuxYou can install wsluon Alpine Linux 3.12+ with the following command:

sudo apk add wslu Arch LinuxAUR version of wsluis pulled due to that it violated its policy.

Download the latest package from release and install using the command: sudo pacman -U *.zstCentOS/RHEL/Oracle LinuxAdd the repository for the corresponding Linux distribution:

CentOS 7

sudo yum-config-manager –add-repo https://download.opensuse.org/repositories/home:/wslutilities/CentOS_7/home:wslutilities.repo

CentOS 8

sudo dnf install -y epel-release
sudo dnf config-manager –set-enabled PowerTools
sudo yum-config-manager –add-repo https://download.opensuse.org/repositories/home:/wslutilities/CentOS_8/home:wslutilities.repo

Oracle Linux 8

sudo dnf install -y https://dl.fedoraproject.org/pub/epel/epel-release-latest-8.noarch.rpm
sudo subscription-manager repos –enable codeready-builder-for-rhel-8-$(/bin/arch)-rpms
sudo yum-config-manager –add-repo https://download.opensuse.org/repositories/home:/wslutilities/CentOS_8/home:wslutilities.repo DebianYou can install wsluwith the following command:

sudo apt install gnupg2 apt-transport-https
wget -O – https://pkg.wslutiliti.es/public.key | sudo tee -a /etc/apt/trusted.gpg.d/wslu.asc
echo “deb https://pkg.wslutiliti.es/debian buster main” | sudo tee -a /etc/apt/sources.list
sudo apt update
sudo apt install wslu

Fedora

sudo dnf copr enable wslutilities/wslu
sudo dnf install wslu Kali LinuxYou can install wsluwith the following command:

sudo apt install gnupg2 apt-transport-https
wget -O – https://pkg.wslutiliti.es/public.key | sudo tee -a /etc/apt/trusted.gpg.d/wslu.asc
echo “deb https://pkg.wslutiliti.es/kali kali-rolling main” | sudo tee -a /etc/apt/sources.list
sudo apt update
sudo apt install wslu UbuntuAttention!

For Ubuntu version, you should not only report bug here but also report bug at Launchpad.

Preinstalled in the latest apps. On older installations of Ubuntu please install ubuntu-wslthat depends on wslu:

sudo apt update
sudo apt install ubuntu-wsl SUSE Linux Enperprise ServerYou can install wsluwith the following command:

SLESCUR_VERSION=”$(grep VERSION= /etc/os-release | sed -e s/VERSION=//g -e s/\”//g -e s/-//g)” sudo zypper addrepo https://download.opensuse.org/repositories/home:/wslutilities/SLE$SLESCUR_VERSION/home:wslutilities.repo
sudo zypper addrepo https://download.opensuse.org/repositories/graphics/SLE_12_SP3_Backports/graphics.repo
sudo zypper up
sudo zypper in wslu Download

___________________________
@hacking_Attack
@Hacking_Video
Hacking Articles Tips Tricks Videos Tutorials
Photo
Kali Linux Tutorials
EDRHunt : Scan Installed EDRs And AVs On Windows

EDRHunt scans Windows services, drivers, processes, registry for installed EDRs (Endpoint Detection And Response). Read more about EDRHunt

Install

* Binary
* Download the latest release from the release section. Releases are built for windows/amd64.

* Go
* Requires Go to be installed on system. Tested on Go1.17+.
* go install github.com/FourCoreLabs/EDRHunt/cmd/EDRHunt@master
Usage

* Find installed EDRs

$ .\EDRHunt.exe scan
[EDR]
Detected EDR: Windows Defender
Detected EDR: Kaspersky Security

Scan Everything

$ .\EDRHunt.exe all
Running in user mode, escalate to admin for more details.
Scanning processes, services, drivers, and registry…
[PROCESSES]
Suspicious Process Name: MsMpEng.exe
Description: MsMpEng.exe
Caption: MsMpEng.exe
Binary:
ProcessID: 6764
Parent Process: 1148
Process CmdLine :
File Metadata:
Matched Keyword: [msmpeng]
Suspicious Process Name: NisSrv.exe
Description: NisSrv.exe
Caption: NisSrv.exe
Binary:
ProcessID: 9840
Parent Process: 1148
Process CmdLine :
File Metadata:
Matched Keyword: [nissrv]

Find drivers matching EDR keywords

/ / _ \/ _ \ / / / / / / / | / / / / / / / / / // / / // / / / / |/ / / /
/ // // / , / / _ / // / /| / / / //// || // //___// |/ /_/
FourCore Labs (https://fourcore.vision) | Version: 1.1
Running in user mode, escalate to admin for more details.
[DRIVERS]
Suspicious Driver Module: WdFilter.sys
Driver FilePath: c:\windows\system32\drivers\wd\wdfilter.sys
Driver File Metadata:
ProductName: Microsoft® Windows® Operating System
OriginalFileName: WdFilter.sys
InternalFileName: WdFilter
Company Name: Microsoft Corporation
FileDescription: Microsoft antimalware file system filter driver
ProductVersion: 4.18.2109.6
Comments:
LegalCopyright: © Microsoft Corporation. All rights reserved.
LegalTrademarks:
Matched Keyword: [antimalware malware]
Suspicious Driver Module: hvsifltr.sys
Driver FilePath: c:\windows\system32\drivers\hvsifltr.sys
Driver File Metadata:
ProductName: Microsoft® Windows® Operating System
OriginalFileName: hvsifltr.sys.mui
InternalFileName: hvsifltr.sys
Company Name: Microsoft Corporation
FileDescription: Microsoft Defender Application Guard Filter Driver
ProductVersion: 10.0.19041.1
Comments:
LegalCopyright: © Microsoft Corporation. All rights reserved.
LegalTrademarks:
Matched Keyword: [defender]
Suspicious Driver Module: WdNisDrv.sys
Driver FilePath: c:\windows\system32\drivers\wd\wdnisdrv.sys
Driver File Metadata:
ProductName: Microsoft® Windows® Operating System
OriginalFileName: wdnisdrv.sys
InternalFileName: wdnisdrv.sys
Company Name: Microsoft Corporation
FileDescription: Windows Defender Network Stream Filter
ProductVersion: 4.18.2109.6
Comments:
LegalCopyright: © Microsoft Corporation. All rights reserved.
LegalTrademarks:
Matched Keyword: [defender]


Detections

EDR Detections Currently Available

* Windows Defender
* Kaspersky Security
* Symantec Security
* Crowdstrike Security
* Mcafee Security
* Cylance Security
* Carbon Black
* SentinelOne
* FireEye
* Elastic EDR

More to be added soon
Download

___________________________
@hacking_Attack
@Hacking_Video