Hacking Articles Tips Tricks Videos Tutorials
n the document, but if you want to do that right now I’d suggest using EXCELntDonut. As of the Macrome 0.5.0 and above, all payloads will be encoded with base64, so your payload will be able to contain any byte sequence (including null bytes). Embedding ExecutablesIf…
The format for preamble files is exactly the same as when using
=IF(GET.WORKSPACE(13)<770,
=IF(GET.WORKSPACE(14)<390,
=IF(GET.WORKSPACE(19),,CLOSE(FALSE))
=IF(GET.WORKSPACE(42),,CLOSE(FALSE))
This would check for screen resolution values, the presence of a mouse, and the ability to play sound. If any of these failed, then the app would close before running the main payload content.
Additionally, if you would like a preamble macro to evaluate IMMEDIATELY, rather than after unpacking the rest of the macros, you can preface a command with
%%%%%=IF(GET.WORKSPACE(13)<770,
%%%%%=IF(GET.WORKSPACE(14)<390,
%%%%%=IF(GET.WORKSPACE(19),,HALT())
%%%%%=IF(GET.WORKSPACE(42),,HALT())
This is helpful for minimizing the number of XLM commands run before killing the document and can be helpful for more immediate reactions to the presence of sandbox indicators. XOR Obfuscation Password ProtectionMacrome 0.3.0+ support password protecting of documents using XOR Obfuscation, a legacy encryption mode from MUCH older versions of Office. This encryption mode is often unsupported by IR tooling and can help protect document content against inspection.
Excel has a “default” password of
To use this functionality, simply add
The dump command only requires a
dotnet Macrome.dll dump –path docToDump.xls
Most of the flags that the
* Unhide all sheets regardless of their hidden status
* Normalize the manually specified labels for all
For example, to deobfuscate a malicious XLS 2003 macro file at
NOTE: This doesn’t do very much yet, it’s mainly meant to demonstrate how using the modified b2xtranslator library can help automate deobfuscation. More useful features are coming soon. Download
payload-typeMacro, but it only supports a single column. For example, you could have a preamble of:=IF(GET.WORKSPACE(13)<770,
=IF(GET.WORKSPACE(14)<390,
=IF(GET.WORKSPACE(19),,CLOSE(FALSE))
=IF(GET.WORKSPACE(42),,CLOSE(FALSE))
This would check for screen resolution values, the presence of a mouse, and the ability to play sound. If any of these failed, then the app would close before running the main payload content.
Additionally, if you would like a preamble macro to evaluate IMMEDIATELY, rather than after unpacking the rest of the macros, you can preface a command with
%%%%%. For example:%%%%%=IF(GET.WORKSPACE(13)<770,
%%%%%=IF(GET.WORKSPACE(14)<390,
%%%%%=IF(GET.WORKSPACE(19),,HALT())
%%%%%=IF(GET.WORKSPACE(42),,HALT())
This is helpful for minimizing the number of XLM commands run before killing the document and can be helpful for more immediate reactions to the presence of sandbox indicators. XOR Obfuscation Password ProtectionMacrome 0.3.0+ support password protecting of documents using XOR Obfuscation, a legacy encryption mode from MUCH older versions of Office. This encryption mode is often unsupported by IR tooling and can help protect document content against inspection.
Excel has a “default” password of
VelvetSweatshop, which will allow you to encrypt the document content while still making the document automatically decrypt when opened. This is the “ideal” way to use XOR Obfuscation in an offensive context. Macrome will automatically attempt to use this password when deobfuscating or dumping a document.To use this functionality, simply add
--password <passwordtoencryptto your build command. Dump ModeRun Macrome with the dumpcommand to print the most relevant BIFF8 records for arbitrary documents. This functionality is similar to olevba’s macro dumping functionality, but it has some more complete processing of edge-case Ptg entries to help make sure that the format is as close to Excel’s actual FORMULA entries as possible. This is what I’ve been using to debug some of the weird edge case documents I’ve been generating while making this tool, so it’s comparably robust. I’m sure there’s tons of edge cases that are not supported right now though, so if you find a document that it doesn’t properly dump the content of, please open an issue and share the document as a zip file.The dump command only requires a
pathargument pointing at the target file. An example invocation is:dotnet Macrome.dll dump –path docToDump.xls
Most of the flags that the
dumpcommand are for debugging, but the dump-hex-bytesmay be useful for users who want to see the individual byte payloads for relevant records. This is similar functionality of BiffView, though only maldoc specific entries will be displayed by default. Deobfuscate ModeRun Macrome with the deobfuscatecommand to take an obfuscated XLS Binary document and attempt to reverse several anti-analysis behaviors. dotnet Macrome.dll deobfuscate -hwill display full usage instructions. Currently, by default this mode will:* Unhide all sheets regardless of their hidden status
* Normalize the manually specified labels for all
Lblentries which Excel will interpret as Auto_Open entries despite their name not matching that string.For example, to deobfuscate a malicious XLS 2003 macro file at
path/to/obfuscated_file.xls, run dotnet Macrome.dll deobfuscate --path path/to/obfuscated_file.xls. This will generate a copy of the obfuscated file which will be easier to analyze manually or with tools.NOTE: This doesn’t do very much yet, it’s mainly meant to demonstrate how using the modified b2xtranslator library can help automate deobfuscation. More useful features are coming soon. Download
Hacking Articles Tips Tricks Videos Tutorials
bove, and much much more! See below for more details. Give it -z generateto generate a sample config file called .\default.toml. What does any of this log output mean?This log entry should be read roughly from left to right as: * at 7:37ish * Snaffler found…
n name.
[[Classifiers]]
EnumerationScope = “DirectoryEnumeration” # This defines which phase of the discovery process we’re going to apply the rule.
# In this case, we’re looking at directories.
# Valid values include ShareEnumeration, DirectoryEnumeration, FileEnumeration, ContentsEnumeration
RuleName = “DiscardFilepathContains” # This can be whatever you want. We’ve been following a rough “MatchAction, MatchLocation,
# MatchType” naming scheme, but you can call it “Stinky” if you want. ¯_(ツ)_/¯
MatchAction = “Discard” # What to do with things that match the rule. In this case, we want to discard anything that matches this rule.
# Valid options include: Snaffle (keep), Discard, Relay (example of this below), and CheckForKeys (example below).
MatchLocation = “FilePath” # What part of the file/dir/share to look at to check for a match. In this case we’re looking at the whole path.
# Valid options include: ShareName, FilePath, FileName, FileExtension, FileContentAsString, FileContentAsBytes,
# although obviously not all of these will apply in all EnumerationScopes.
WordListType = “Contains” # What matching logic to apply, valid options are: Exact, Contains, EndsWith, StartsWith, or Regex.
WordList = [“winsxs”, “syswow64”] # A list of strings or regex patterns to use to match. If using regex matterns, WordListType must be Regex.
Triage = “Green” # If we find a match, what severity rating should we give it. Valid values are Black, Red, Yellow, Green. Gets ignored for Discard anyway.
This rule on the other hand will look at file extensions, and immediately discard any we don’t like.
In this case I’m mostly throwing away fonts, images, CSS, etc.
[[Classifiers]]
EnumerationScope = “FileEnumeration” # We’re looking at the actual files, not the shares or dirs or whatever.
RuleName = “DiscardExtExact” # just a name
MatchAction = “Discard” # We’re discarding these
MatchLocation = “FileExtension” # This time we’re only looking at the file extension part of the file’s name.
WordListType = “Exact” # and we only want exact matches.
WordList = [“.bmp”, “.eps”, “.gif”, “.ico”, “.jfi”, “.jfif”, “.jif”, “.jpe”, “.jpeg”, “.jpg”, “.png”, “.psd”, “.svg”, “.tif”, “.tiff”, “.webp”, “.xcf”, “.ttf”, “.otf”, “.lock”, “.css”, “.less”] # list of file extensions.
Here’s an example of a really simple rule for stuff we like and want to keep.
[[Classifiers]]
EnumerationScope = “FileEnumeration” # Still looking at files
RuleName = “KeepExtExactBlack” # Just a name
MatchAction = “Snaffle” # This time we are ‘snaffling’ these. This usually just means send it to the UI,
# but if you turn on the appropriate option it will also grtab a copy.
MatchLocation = “FileExtension” # We’re looking at file extensions again
WordListType = “Exact” # With Exact Matches
WordList = [“.kdbx”, “.kdb”, “.ppk”, “.vmdk”, “.vhdx”, “.ova”, “.ovf”, “.psafe3”, “.cscfg”, “.kwallet”, “.tblk”, “.ovpn”, “.mdf”, “.sdf”, “.sqldump”] # and a bunch of fun file extensions.
Triage = “Black” # these are all big wins if we find them, so we’re giving them the most severe rating.
This one is basically the same, but we’re looking at the whole file name. Simple!
[[Classifiers]]
EnumerationScope = “FileEnumeration”
RuleName = “KeepFilenameExactBlack”
MatchAction = “Snaffle”
MatchLocation = “FileName”
WordListType = “Exact”
WordList = [“id_rsa”, “id_dsa”, “NTDS.DIT”, “shadow”, “pwd.db”, “passwd”]
Triage = “Black”
This one is a bit nifty, check this out…
[[Classifiers]]
EnumerationScope = “FileEnumeration” # we’re looking for files…
RuleName = “KeepCertContainsPrivKeyRed”
MatchLocation = “FileExtension” # specifically, ones with certain file extensions…
WordListType = “Exact”
WordList = [“.der”, “.pfx”] # specifically these ones…
MatchAction = “CheckForKeys” # and any that we find, we’re going to parse them as x509 certs, and see if the file includes a private key!
Triage = “Red” # cert files aren’t very sexy, and you’ll get huge numbers of them in most wintel environments, but this che[...]
[[Classifiers]]
EnumerationScope = “DirectoryEnumeration” # This defines which phase of the discovery process we’re going to apply the rule.
# In this case, we’re looking at directories.
# Valid values include ShareEnumeration, DirectoryEnumeration, FileEnumeration, ContentsEnumeration
RuleName = “DiscardFilepathContains” # This can be whatever you want. We’ve been following a rough “MatchAction, MatchLocation,
# MatchType” naming scheme, but you can call it “Stinky” if you want. ¯_(ツ)_/¯
MatchAction = “Discard” # What to do with things that match the rule. In this case, we want to discard anything that matches this rule.
# Valid options include: Snaffle (keep), Discard, Relay (example of this below), and CheckForKeys (example below).
MatchLocation = “FilePath” # What part of the file/dir/share to look at to check for a match. In this case we’re looking at the whole path.
# Valid options include: ShareName, FilePath, FileName, FileExtension, FileContentAsString, FileContentAsBytes,
# although obviously not all of these will apply in all EnumerationScopes.
WordListType = “Contains” # What matching logic to apply, valid options are: Exact, Contains, EndsWith, StartsWith, or Regex.
WordList = [“winsxs”, “syswow64”] # A list of strings or regex patterns to use to match. If using regex matterns, WordListType must be Regex.
Triage = “Green” # If we find a match, what severity rating should we give it. Valid values are Black, Red, Yellow, Green. Gets ignored for Discard anyway.
This rule on the other hand will look at file extensions, and immediately discard any we don’t like.
In this case I’m mostly throwing away fonts, images, CSS, etc.
[[Classifiers]]
EnumerationScope = “FileEnumeration” # We’re looking at the actual files, not the shares or dirs or whatever.
RuleName = “DiscardExtExact” # just a name
MatchAction = “Discard” # We’re discarding these
MatchLocation = “FileExtension” # This time we’re only looking at the file extension part of the file’s name.
WordListType = “Exact” # and we only want exact matches.
WordList = [“.bmp”, “.eps”, “.gif”, “.ico”, “.jfi”, “.jfif”, “.jif”, “.jpe”, “.jpeg”, “.jpg”, “.png”, “.psd”, “.svg”, “.tif”, “.tiff”, “.webp”, “.xcf”, “.ttf”, “.otf”, “.lock”, “.css”, “.less”] # list of file extensions.
Here’s an example of a really simple rule for stuff we like and want to keep.
[[Classifiers]]
EnumerationScope = “FileEnumeration” # Still looking at files
RuleName = “KeepExtExactBlack” # Just a name
MatchAction = “Snaffle” # This time we are ‘snaffling’ these. This usually just means send it to the UI,
# but if you turn on the appropriate option it will also grtab a copy.
MatchLocation = “FileExtension” # We’re looking at file extensions again
WordListType = “Exact” # With Exact Matches
WordList = [“.kdbx”, “.kdb”, “.ppk”, “.vmdk”, “.vhdx”, “.ova”, “.ovf”, “.psafe3”, “.cscfg”, “.kwallet”, “.tblk”, “.ovpn”, “.mdf”, “.sdf”, “.sqldump”] # and a bunch of fun file extensions.
Triage = “Black” # these are all big wins if we find them, so we’re giving them the most severe rating.
This one is basically the same, but we’re looking at the whole file name. Simple!
[[Classifiers]]
EnumerationScope = “FileEnumeration”
RuleName = “KeepFilenameExactBlack”
MatchAction = “Snaffle”
MatchLocation = “FileName”
WordListType = “Exact”
WordList = [“id_rsa”, “id_dsa”, “NTDS.DIT”, “shadow”, “pwd.db”, “passwd”]
Triage = “Black”
This one is a bit nifty, check this out…
[[Classifiers]]
EnumerationScope = “FileEnumeration” # we’re looking for files…
RuleName = “KeepCertContainsPrivKeyRed”
MatchLocation = “FileExtension” # specifically, ones with certain file extensions…
WordListType = “Exact”
WordList = [“.der”, “.pfx”] # specifically these ones…
MatchAction = “CheckForKeys” # and any that we find, we’re going to parse them as x509 certs, and see if the file includes a private key!
Triage = “Red” # cert files aren’t very sexy, and you’ll get huge numbers of them in most wintel environments, but this che[...]
Hacking Articles Tips Tricks Videos Tutorials
n name. [[Classifiers]] EnumerationScope = “DirectoryEnumeration” # This defines which phase of the discovery process we’re going to apply the rule. # In this case, we’re looking at directories. # Valid values include ShareEnumeration, DirectoryEnumeration…
ck gives us a way better SNR!
OK, here’s where the REALLY powerful stuff comes in. We got a pair of rules in a chain here.
Files with extensions that match the first rule will be sent to second rule, which will “grep” (i.e. String.Contains()) them for stuff in a specific wordlist.
You can chain these together as much as you like, although I imagine you’ll start to see some performance problems if you get too inception-y with it.
[[Classifiers]]
EnumerationScope = “FileEnumeration” # this one looks at files…
RuleName = “ConfigGrepExtExact”
MatchLocation = “FileExtension” # specifically the extensions…
WordListType = “Exact”
WordList = [“.yaml”, “.xml”, “.json”, “.config”, “.ini”, “.inf”, “.cnf”, “.conf”] # these ones.
MatchAction = “Relay” # Then any files that match are handed downstream…
RelayTarget = “KeepConfigGrepContainsRed” # To the rule with this RuleName!
[[Classifiers]]
RuleName = “KeepConfigGrepContainsRed” # which is this one! This is why following a naming convention really helps.
EnumerationScope = “ContentsEnumeration” # this one looks at file content!
MatchAction = “Snaffle” # it keeps files that match
MatchLocation = “FileContentAsString” # it’s looking at the contents as a string (rather than a byte array)
WordListType = “Contains” # it’s using simple matching
WordList = [“password=”, ” connectionString=\””, “sqlConnectionString=\””, “validationKey=”, “decryptionKey=”, “NVRAM config last updated”]
Triage = “Red” Who did you steal code from?The share enumeration bits were snaffled (see what I did there?) from SharpShares, which was written by the exceedingly useful Dwight Hohnstein. (https://github.com/djhohnstein/SharpShares/) Dwight’s GitHub profile is like that amazing back aisle at a hardware store that has a whole bunch of tools that make you go “oh man I can’t wait til I have an excuse to try this one for realsies…” and you should definitely check it out.
While no code was taken (mainly cos it’s Ruby lol) we did steal a bunch of nifty ideas from
Wordlists were also curated from those found in some other similar-ish tools like trufflehog, shhgit, gitrobber, and graudit. Download
OK, here’s where the REALLY powerful stuff comes in. We got a pair of rules in a chain here.
Files with extensions that match the first rule will be sent to second rule, which will “grep” (i.e. String.Contains()) them for stuff in a specific wordlist.
You can chain these together as much as you like, although I imagine you’ll start to see some performance problems if you get too inception-y with it.
[[Classifiers]]
EnumerationScope = “FileEnumeration” # this one looks at files…
RuleName = “ConfigGrepExtExact”
MatchLocation = “FileExtension” # specifically the extensions…
WordListType = “Exact”
WordList = [“.yaml”, “.xml”, “.json”, “.config”, “.ini”, “.inf”, “.cnf”, “.conf”] # these ones.
MatchAction = “Relay” # Then any files that match are handed downstream…
RelayTarget = “KeepConfigGrepContainsRed” # To the rule with this RuleName!
[[Classifiers]]
RuleName = “KeepConfigGrepContainsRed” # which is this one! This is why following a naming convention really helps.
EnumerationScope = “ContentsEnumeration” # this one looks at file content!
MatchAction = “Snaffle” # it keeps files that match
MatchLocation = “FileContentAsString” # it’s looking at the contents as a string (rather than a byte array)
WordListType = “Contains” # it’s using simple matching
WordList = [“password=”, ” connectionString=\””, “sqlConnectionString=\””, “validationKey=”, “decryptionKey=”, “NVRAM config last updated”]
Triage = “Red” Who did you steal code from?The share enumeration bits were snaffled (see what I did there?) from SharpShares, which was written by the exceedingly useful Dwight Hohnstein. (https://github.com/djhohnstein/SharpShares/) Dwight’s GitHub profile is like that amazing back aisle at a hardware store that has a whole bunch of tools that make you go “oh man I can’t wait til I have an excuse to try this one for realsies…” and you should definitely check it out.
While no code was taken (mainly cos it’s Ruby lol) we did steal a bunch of nifty ideas from
plunder2(http://joshstone.us/plunder2/)Wordlists were also curated from those found in some other similar-ish tools like trufflehog, shhgit, gitrobber, and graudit. Download
hacking: security in practice
You can probably fry electronics using focused attacks
I told the White House and a stupid kid that used to goto school with me found out and he works at a major Bay Area cable station and he released a virus to fry electronics until they kill me and my family, all over me talking to jon Stewart
Anyways try multithreaded loops, how it’s fixed? No one knows, but you can melt solder
submitted by /u/m0rph1ne_
[link] [comments]
You can probably fry electronics using focused attacks
I told the White House and a stupid kid that used to goto school with me found out and he works at a major Bay Area cable station and he released a virus to fry electronics until they kill me and my family, all over me talking to jon Stewart
Anyways try multithreaded loops, how it’s fixed? No one knows, but you can melt solder
submitted by /u/m0rph1ne_
[link] [comments]
reddit
You can probably fry electronics using focused attacks
I told the White House and a stupid kid that used to goto school with me found out and he works at a major Bay Area cable station and he released...
hacking: security in practice
Neighbors left their ring cameras
My neighbor’s installed ring camera equipped flood lights and moved out. I know the new tenants and they have no intention of making use of the cameras. There is a wifi network named “Ring Setup cf” available totally unsecured. How easy would it be for a nosey neighbor or law enforcement to make use of these cameras? I’m not asking anyone to help me do this. I just want to know how vulnerable and likely is it that this camera can be viewed by others?
submitted by /u/sleepy_xia
[link] [comments]
Neighbors left their ring cameras
My neighbor’s installed ring camera equipped flood lights and moved out. I know the new tenants and they have no intention of making use of the cameras. There is a wifi network named “Ring Setup cf” available totally unsecured. How easy would it be for a nosey neighbor or law enforcement to make use of these cameras? I’m not asking anyone to help me do this. I just want to know how vulnerable and likely is it that this camera can be viewed by others?
submitted by /u/sleepy_xia
[link] [comments]
reddit
Neighbors left their ring cameras
My neighbor’s installed ring camera equipped flood lights and moved out. I know the new tenants and they have no intention of making use of the...
this is a detailed blog on JWT attacks with some source code ReviewContinue reading on Medium » (https://medium.com/@omarwhadidi9/your-guide-to-jwt-attacks-ce44b55dd3f?source=rss------bug_bounty-5)
Hacking on Medium
HTB [Secret]
https://cdn-images-1.medium.com/max/1208/1*ar2tmRiraI5HJKX7a5uwKQ.png
Secret is a box on the Hack the Box platform ranked as Easy. Although the path to user and the foothold is relatively straightforward…
Continue reading on Medium »
HTB [Secret]
https://cdn-images-1.medium.com/max/1208/1*ar2tmRiraI5HJKX7a5uwKQ.png
Secret is a box on the Hack the Box platform ranked as Easy. Although the path to user and the foothold is relatively straightforward…
Continue reading on Medium »
Medium
HTB [Secret]
Secret is a box on the Hack the Box platform ranked as Easy. Although the path to user and the foothold is relatively straightforward…
Hacking on Medium
IP Rotation with Python
Accessing online services in an automated manner may often leads to blockages by those services. In case requests come from IPs that are…
Continue reading on Medium »
IP Rotation with Python
Accessing online services in an automated manner may often leads to blockages by those services. In case requests come from IPs that are…
Continue reading on Medium »
Medium
IP Rotation with Python
Accessing online services in an automated manner may often leads to blockages by those services. In case requests come from IPs that are…
Hacking on Medium
ShmooCon is back. Five things you may have missed
https://cdn-images-1.medium.com/max/2309/1*oYgvhlxwXvfX15W7LeLvlg.png
The buzzy ShmooCon cybersecurity conference returned this weekend after a pandemic hiatus, drawing a lively crowd of hackers, security…
Continue reading on README_ »
ShmooCon is back. Five things you may have missed
https://cdn-images-1.medium.com/max/2309/1*oYgvhlxwXvfX15W7LeLvlg.png
The buzzy ShmooCon cybersecurity conference returned this weekend after a pandemic hiatus, drawing a lively crowd of hackers, security…
Continue reading on README_ »
Medium
ShmooCon is back. Five things you may have missed
The buzzy ShmooCon cybersecurity conference returned this weekend after a pandemic hiatus, drawing a lively crowd of hackers, security…
Hacking on Medium
Jargons used by information security professionals
https://cdn-images-1.medium.com/max/2600/1*JGy_HD1uF4k96UUlEzRIUg.jpeg
Do you feel lost in translation when IT professionals start speaking their jargon? Check out this comprehensive list of important terms to…
Continue reading on Medium »
Jargons used by information security professionals
https://cdn-images-1.medium.com/max/2600/1*JGy_HD1uF4k96UUlEzRIUg.jpeg
Do you feel lost in translation when IT professionals start speaking their jargon? Check out this comprehensive list of important terms to…
Continue reading on Medium »
Medium
Jargons used by information security professionals
Do you feel lost in translation when IT professionals start speaking their jargon? Check out this comprehensive list of important terms to…
Hacking on Medium
TryHackMe: [Day 3] Web Exploitation Christmas Blackout
https://cdn-images-1.medium.com/max/1920/1*psaTaSfd9sQyajFeYTLO-w.png
Using a common wordlist for discovering content, enumerate http://MACHINE_IP to find the location of the administrator dashboard. What is…
Continue reading on Medium »
TryHackMe: [Day 3] Web Exploitation Christmas Blackout
https://cdn-images-1.medium.com/max/1920/1*psaTaSfd9sQyajFeYTLO-w.png
Using a common wordlist for discovering content, enumerate http://MACHINE_IP to find the location of the administrator dashboard. What is…
Continue reading on Medium »
Medium
TryHackMe: [Day 3] Web Exploitation Christmas Blackout
Using a common wordlist for discovering content, enumerate http://MACHINE_IP to find the location of the administrator dashboard. What is…
Hacking on Medium
WordPress Security: 10 Tips To Secure Your Site In 2022
https://cdn-images-1.medium.com/max/1200/1*bW3J0ZJrXSmMxN12ASfOZw.jpeg
WordPress is one of the most popular content management systems in use today. While it is a very user-friendly platform, it is also…
Continue reading on Medium »
WordPress Security: 10 Tips To Secure Your Site In 2022
https://cdn-images-1.medium.com/max/1200/1*bW3J0ZJrXSmMxN12ASfOZw.jpeg
WordPress is one of the most popular content management systems in use today. While it is a very user-friendly platform, it is also…
Continue reading on Medium »
Medium
WordPress Security: 10 Tips To Secure Your Site In 2022
WordPress is one of the most popular content management systems in use today. While it is a very user-friendly platform, it is also…
hacking: security in practice
What is Ftewk.exe
Recently, my friend randomly lost access to his steam account while playing a game without any possible explanation. We found a ftwek.exe file running on startup through the task manager upon inspection. There is no information about this file on the internet. Is the system compromised? What should be done?
Every google search seems to be leading to some sort of a hacking article which led me to believe the system was compromised.
submitted by /u/_Machosen
[link] [comments]
What is Ftewk.exe
Recently, my friend randomly lost access to his steam account while playing a game without any possible explanation. We found a ftwek.exe file running on startup through the task manager upon inspection. There is no information about this file on the internet. Is the system compromised? What should be done?
Every google search seems to be leading to some sort of a hacking article which led me to believe the system was compromised.
submitted by /u/_Machosen
[link] [comments]
Reddit
From the hacking community on Reddit
Explore this post and more from the hacking community
Hacking Articles Tips Tricks Videos Tutorials
Photo
hacking: security in practice
NFT collection generator c#
Just coded nft collection generator on c#. I guess, there's no need to explain what does every field for, human kind should have enough IQ. Antivirus checks, more info and .exe file on my github: https://github.com/micegan/NftCollectionGenerator-exe
Yeah, the GUI is shitty, but whatever.
submitted by /u/Various-Animal-9893
[link] [comments]
NFT collection generator c#
Just coded nft collection generator on c#. I guess, there's no need to explain what does every field for, human kind should have enough IQ. Antivirus checks, more info and .exe file on my github: https://github.com/micegan/NftCollectionGenerator-exe
Yeah, the GUI is shitty, but whatever.
submitted by /u/Various-Animal-9893
[link] [comments]
hacking: security in practice
Raidforums alternatives
Hello, are there any good alternatives to raidforums?
submitted by /u/JRytM
[link] [comments]
Raidforums alternatives
Hello, are there any good alternatives to raidforums?
submitted by /u/JRytM
[link] [comments]
reddit
Raidforums alternatives
Hello, are there any good alternatives to raidforums?
hacking: security in practice
Suggestion for cool Hacking Stickers?
Hey guys.
I am Top 3% on THM. Always reading about hacking. Working my way into Cybersecurity from InfoSec. I am in a coffee shop a lot. I noticed that a lot of SEs have stickers on their laptops such as FAANG companies, 10101, etc. Are there any dope stickers or things that ONLY hackers would really know about to pick up? Obviously a big Anonymous Sticker would probably not be a great idea, lol. I am looking to buy some on Amazon considering I only have one snake sticker on my laptop. Any advice would be great. Keep it real guys.
submitted by /u/JupitersHot
[link] [comments]
Suggestion for cool Hacking Stickers?
Hey guys.
I am Top 3% on THM. Always reading about hacking. Working my way into Cybersecurity from InfoSec. I am in a coffee shop a lot. I noticed that a lot of SEs have stickers on their laptops such as FAANG companies, 10101, etc. Are there any dope stickers or things that ONLY hackers would really know about to pick up? Obviously a big Anonymous Sticker would probably not be a great idea, lol. I am looking to buy some on Amazon considering I only have one snake sticker on my laptop. Any advice would be great. Keep it real guys.
submitted by /u/JupitersHot
[link] [comments]
reddit
Suggestion for cool Hacking Stickers?
Hey guys. I am Top 3% on THM. Always reading about hacking. Working my way into Cybersecurity from InfoSec. I am in a coffee shop a lot. I...
Request_Smuggler - Http Request Smuggling Vulnerability Scanner
http://www.kitploit.com/2022/03/requestsmuggler-http-request-smuggling.html
http://www.kitploit.com/2022/03/requestsmuggler-http-request-smuggling.html