Previous: Private Burp CollaboratorContinue reading on Medium » (https://takshilp.medium.com/oob-blind-testing-using-dns-exfiltration-54bcc004a0fb?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Is This Site Safe?

Someone sent me this and I clicked on it. And it says no internet connection retry. I clicked retry but nothing happens. It was on Facebook of Mel Gibson investment method. The link was - volleyball.swrmarlins.com

Wondering is the site down or did something bad just happen? Anyone who has great knowledge please let me know if I am at risk or safe?

submitted by /u/fcuk_the_system
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
NB65 hacked russian construction company today

https://external-preview.redd.it/rV4a6sRoWn_QG_H8RpEszS3tFYni6hk-1_46lafBBCE.jpg?width=108&crop=smart&auto=webp&s=62e68875f97de18d2af4bca26139e5f38fcff866 submitted by /u/volkowip
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Where can I find leaked databases for download for free?

Where can I find leaked databases for download for free? In the best case without login

submitted by /u/Schabernack_
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Intercept cellular calls

How to intercept a cellular phone call? How to catch a specific call? Any special tools needed to catch those waves?

submitted by /u/CrownOfIce
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Did we want to make something happen on r/place?

Just throwing it out there, might be fun to do a coordinated bot strike and enforce a r/hacking logo somewhere...

submitted by /u/6mythis6
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

CobaltBus - Cobalt Strike External C2 Integration With Azure Servicebus, C2 Traffic Via Azure Servicebus
http://www.kitploit.com/2022/04/cobaltbus-cobalt-strike-external-c2.html

___________________________
@hacking_Attack
@Hacking_Video

Cobalt Strike External C2 Integration With Azure Servicebus, C2 traffic (https://www.kitploit.com/search/label/Traffic) via Azure Servicebus
Setup Create an Azure Service Bus Create a Shared access policy (Connection string) that can only Send and Listen Edit the static connectionString variable in Beacon C# projects to match the "Primary Connection String" value for the Shared access policy created in step 2. The same variables need to be updated for the CobaltBus project, but the "Primary Connection String" for the "RootManageSharedAccessKey" Shared access policy must be used. (Needs the "manage" permission) Setup Cobalt and start en External C2 listener (https://www.kitploit.com/search/label/Listener) on port 4444, 127.0.0.1 (can be changed by editing the ExternalC2Port ExternalC2Ip vars in the C# project) Demo Video How does it work? Then CobaltBus DotNetCore binary that integrates with CobaltStrikes ExternalC2, will create a local SqliteDB in order to keep track of multiple beacons. The messages inbound to CobaltBus will be captured and written to the database. The database names "CobaltBus.db" and "CobaltBus-log.db" will be created in the directory (https://www.kitploit.com/search/label/Directory) CobaltBus.dll is running from. Once a Beacon binary runs, it will push an "INITIALIZE" message to the baseQueueName queue, with a randomly generated BeaconId and Pipename. The CobaltBus handler will then capture (https://www.kitploit.com/search/label/Capture) this, create and move into the two new queues based on the BeaconId sent, request stager shellcode from the CobaltStrike, and push it back down the new queue as an "INJECT" message. From here, the Beacon project injects the captured shellcode into memory and es tablishes a connection with the CobaltStrike (https://www.kitploit.com/search/label/CobaltStrike) beacon over the generated pipe name. When a command is issued from CobaltBus, it is pushed down the beacon respective queue and into the beacon pipe name. Opsec considerations The current message flow has multiple flaws that would need to be addressed before I would consider using this for real-life operations. Consider this a dirty POC. If only there was a mouse and C2 expert that could make this safe to use.... Credits Major credit to the work done by @ryHanson https://github.com/ryhanson/ExternalC2

Download CobaltBus (https://github.com/Flangvik/CobaltBus)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
CC CVV DUMPS BANKS WESTERN UNION PAYPAL TRANSFER AND LOGS ALL COUNTRY PASSPORT DRIVERS LICENSE…

ALBERT’S CASH TEAM SERVICE WORLDWIDE(GET RICH NOW/SOLVE ALL PROBLEM NOW)

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Google Dorking Simple

https://cdn-images-1.medium.com/max/2600/1*SqEICC59PL1VrdefhGEqqg.png
Finding security flaws with only using Google search engine from the basics.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
HACKABLE 3 MAKİNESİ ÇÖZÜMÜ

https://cdn-images-1.medium.com/max/1366/1*mUtnwdXGHXeXpKGkRHH9bA.png
Bu gün sizlerle Hackable 3 Makinesii çözeceğiz. İlk önce Virtualbox üzerinden ayağa kaldırdığımız makinenin ip’sini buluyoruz. Bunun için…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
What is Browser In The Browser(BITB) Attack?

https://cdn-images-1.medium.com/max/2600/1*M2dT90tDTwIYTQcNPkcmvg.jpeg
Social-Engineering has played a key role in digging out information, especially credentials for attackers. With more advancement in tools…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Getting started with Cyber Security in 2022

https://cdn-images-1.medium.com/max/2600/0*bpgPWOz8COi_HhSn
Cyber Security is the practice of defending servers, computers, mobile devices, electronic systems, networks, and data from malicious…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

HACKED INSTAGRAM HANDLE OF SAMSUNG….

Hello, Hackers Welcome Back to my Stored Link Hijacking Scenario...Continue reading on Medium »
Read more...

KitPloit - PenTest Tools!
CobaltBus - Cobalt Strike External C2 Integration With Azure Servicebus, C2 Traffic Via Azure Servicebus

https://blogger.googleusercontent.com/img/a/AVvXsEh02U14G2CPeV9cmUgYdA-INxXSrD0OxAN7eLZbfaqA4Re13D3v7-1ogOMLfPCRMjz1NZbfR39ioXpHPxqtCNPgKzQ7QnyQ_E2J8G-I6jyxguKsd1l0LrJPr4AatxAreAWVCVAG6Rdh0TJWX5WG1YoWPmd2oj1wfjDJ0ZiGHWuxlZ1XMNA9h5zJccGm=w640-h278

Cobalt Strike External C2 Integration With Azure Servicebus, C2 traffic via Azure Servicebus
Setup

1. Create an Azure Service Bus
2. Create a Shared access policy (Connection string) that can only Send and Listen
3. Edit the static connectionString variable in Beacon C# projects to match the "Primary Connection String" value for the Shared access policy created in step 2.
4. The same variables need to be updated for the CobaltBus project, but the "Primary Connection String" for the "RootManageSharedAccessKey" Shared access policy must be used. (Needs the "manage" permission)
5. Setup Cobalt and start en External C2 listener on port 4444, 127.0.0.1 (can be changed by editing the ExternalC2Port ExternalC2Ip vars in the C# project)

Demo Video



How does it work?

Then CobaltBus DotNetCore binary that integrates with CobaltStrikes ExternalC2, will create a local SqliteDB in order to keep track of multiple beacons. The messages inbound to CobaltBus will be captured and written to the database. The database names "CobaltBus.db" and "CobaltBus-log.db" will be created in the directory CobaltBus.dll is running from. Once a Beacon binary runs, it will push an "INITIALIZE" message to the baseQueueName queue, with a randomly generated BeaconId and Pipename. The CobaltBus handler will then capture this, create and move into the two new queues based on the BeaconId sent, request stager shellcode from the CobaltStrike, and push it back down the new queue as an "INJECT" message. From here, the Beacon project injects the captured shellcode into memory and es tablishes a connection with the CobaltStrike beacon over the generated pipe name. When a command is issued from CobaltBus, it is pushed down the beacon respective queue and into the beacon pipe name.

Opsec considerations

The current message flow has multiple flaws that would need to be addressed before I would consider using this for real-life operations. Consider this a dirty POC. If only there was a mouse and C2 expert that could make this safe to use....

Credits

Major credit to the work done by @ryHanson https://github.com/ryhanson/ExternalC2
Download CobaltBus

___________________________
@hacking_Attack
@Hacking_Video

HACKED INSTAGRAM HANDLE OF SAMSUNG….
https://amit-lt.medium.com/hacked-instagram-handle-of-samsung-cb1a35990a90?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hello, Hackers Welcome Back to my Stored Link Hijacking Scenario...Continue reading on Medium » (https://amit-lt.medium.com/hacked-instagram-handle-of-samsung-cb1a35990a90?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video