Information Disclosure Bug
https://mukibas37.medium.com/information-disclosure-bug-78907c5d49fc?source=rss------bug_bounty-5

Web securityContinue reading on Medium » (https://mukibas37.medium.com/information-disclosure-bug-78907c5d49fc?source=rss------bug_bounty-5)

KitPloit - PenTest Tools!
ShellcodeTemplate - An Easily Modifiable Shellcode Template For Windows X64/X86

https://blogger.googleusercontent.com/img/a/AVvXsEiB83DaBRx0yg_1k9jG2M9ydsNbd941k5dLfwFqtn0F4Dx49rRVFIyL6VA57VrjPekqVGKT_CyeP_n6eCm5cmf44OOaSgcOKFxIAtnBPbSNAhfb2bx1W17vzhhHaI7bR7bzsmcXMDukOaTEMG1Q0eMZvvMGRkI7PVNRVouq5juuTvJQud6r22rxep8X=w640-h540

An easily modifiable shellcode template for Windows x64/x86

How does it work?

This template is heavily based on Austin Hudson's (aka SecIdiot) TitanLdr It compiles the project into a PE Executable and extracts the .text section
Example

The entrypoint of the shellcode looks like this. Of course, this can be changed for your need. First we need to initialize needed libraries and functions by using our custom written GetModuleHandle and GetProcAddress.

SEC( text, B ) VOID Entry( VOID )
{
INSTANCE Instance = { };

Instance.Modules.Kernel32 = TGetModuleHandle( HASH_KERNEL32 );
Instance.Modules.Ntdll = TGetModuleHandle( HASH_NTDLL );

if ( Instance.Modules.Kernel32 != NULL )
{
// Load needed functions
Instance.Win32.LoadLibraryA = TGetProcAddr( Instance.Modules.Kernel32, 0xb7072fdb );

// Load needed Libraries
Instance.Modules.User32 = Instance.Win32.LoadLibraryA( GET_SYMBOL( "User32" ) );

if ( Instance.Modules.User32 != NULL )
{
Instance.Win32.MessageBoxA = TGetProcAddr( Instance.Modules.User32, 0xb303ebb4 );
}
}

// ------ Code ------
Instance.Win32.MessageBoxA( NULL, GET_SYMBOL( "Hello World" ), GET_SYMBOL( "MessageBox Title" ), MB_OK );
}

Btw as you can see we can use normal strings in our shellcode. This is because we include the .rdata section into our shellcode at linking time. And GET_SYMBOL gets the pointer to the function or string via its relative offset to GetRIP()

https://blogger.googleusercontent.com/img/a/AVvXsEiB83DaBRx0yg_1k9jG2M9ydsNbd941k5dLfwFqtn0F4Dx49rRVFIyL6VA57VrjPekqVGKT_CyeP_n6eCm5cmf44OOaSgcOKFxIAtnBPbSNAhfb2bx1W17vzhhHaI7bR7bzsmcXMDukOaTEMG1Q0eMZvvMGRkI7PVNRVouq5juuTvJQud6r22rxep8X=w640-h540

Get Started

Clone this project and you are ready to start

git clone https://www.github.com/Cracked5pider/ShellcodeTemplate


Next you would need to change the project name in the makefile from ShellcodeTemplateto whatever you want Then you can compile the project by using make

make // to compile x64 and x86
make x64 // to compile only x64
make x86 // to compile only x86


Credit

Huge credit goes to Austin Hudson (aka SecIdiot)!!!
Download ShellcodeTemplate

hacking: security in practice
Finding an address with a car registration number

Is it possible to find someone’s address with just a car registration number (without transport company or police involved)

submitted by /u/BusSilver
[link] [comments]

Operation Dragon Castling: APT group targeting betting companies - Avast Threat Labs
https://www.reddit.com/r/redteamsec/comments/tkvjib/operation_dragon_castling_apt_group_targeting/

submitted by /u/dmchell (https://www.reddit.com/user/dmchell)
[link] (https://decoded.avast.io/luigicamastra/operation-dragon-castling-apt-group-targeting-betting-companies/) [comments] (https://www.reddit.com/r/redteamsec/comments/tkvjib/operation_dragon_castling_apt_group_targeting/)

Dark Reading: Attacks/Breaches
Building a Red Team: How to Get Started

These groups of authorized hackers work to infiltrate their customer's data, development environment, or any other business area to locate and identify vulnerabilities.

Dark Reading: Attacks/Breaches
F-Secure Rebrands as WithSecure, Spins Off Consumer Products

Attempting to catch up with CrowdStrike, Microsoft, and Trend Micro, the Helsinki-based endpoint-protection firm "de-merges" its consumer-security business to focus on businesses.

Multiple ways to find sql and cheatsheet

Comments out rest of the query.  Line comments are generally useful for ignoring rest of the query so you don’t have to deal with fixing…Continue reading on Medium »
Read more...

Multiple ways to find sql and cheatsheet
https://thenurhabib.medium.com/multiple-ways-to-find-sql-and-cheatsheet-45f17fed7b59?source=rss------bug_bounty-5

Comments out rest of the query. 
Line comments are generally useful for ignoring rest of the query so you don’t have to deal with fixing…Continue reading on Medium » (https://thenurhabib.medium.com/multiple-ways-to-find-sql-and-cheatsheet-45f17fed7b59?source=rss------bug_bounty-5)

Hacking on Medium
Te ensinando a bugar/hackear/enganar o cérebro para transformar sentimentos e sensações

Você está se sentindo mal, com uma sensação ruim, ansioso, agitado, por quê? Não há motivos aparentes. O psicólogo Frederico Yamada…

Continue reading on Medium »

Hacking on Medium
My husband told me he was going to stay late at work when he was really going home to see his…

I found out around my husband’s undertaking final year when I found an mail on his phone from the lady he was cheating with. We had been…

Continue reading on Medium »

Hacking on Medium
Multiple ways to find sql and cheatsheet

Comments out rest of the query. 
Line comments are generally useful for ignoring rest of the query so you don’t have to deal with fixing…

Continue reading on Medium »

Hacking on Medium
Malware Analysis Bootcamp

https://cdn-images-1.medium.com/max/1200/1*IQVHoVgmb7n08IlTp6PKtw.jpeg
What Is Malware Analysis?

Continue reading on Medium »

Hacking on Medium
Método de Phishing “Browser in the Browser”

https://cdn-images-1.medium.com/max/1567/0*i05UazNBW8kN_2t6
PUBLICADO EN 23 MARZO, 2022POR EHACKING

Continue reading on Medium »

Hacking on Medium
1337up CTF — Mirage

https://cdn-images-1.medium.com/max/789/1*iWpMl_uLnyP6bSEwNwnQAg.png
Here’s a quick walkthrought I found while playing for a little bit the 1337UP CTF from #intigriti .

Continue reading on Medium »