hacking: security in practice
ISPs and modified source addresses

I'm for quite a while now researching topic about raw packets and forging source IP address in UDP header. On my PC I started UDP listener and VM to send packets with source modified, and it worked flawlessly. I tried similar setup but with my server and port forwarding to my PC. I was surprised how much the results wear different, when I tried sending from server to my home nothing arrived until I changed IP to correct one. When I was sending from my home to my server whatever I did resulted in real IP being shown. This got me thinking, how hackers are able to perform amplification attacks in which modifying source IP is crucial. I read about it and learned that the ISPs perform filtering to block malicious traffic that has tempered with it source header, shouldn't it make botnets nearly useless? Because victim probably uses ISP which blocks that fraudulent traffic.

*Botnets attacking targets using amplification attacks

submitted by /u/Zduniusz
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Hi everyone, my school is gonna put Intune on our macbooks, and I want to know if there is a way to block the configuration profile from controlling our computers. or to delete it

We own our laptops, but the school wants to have control over them even if we are not at school. The app literally allows them to block any website, install and uninstall any app, and to track us. I'm gonna see in my school contract if I have to comply with this install, but if I don't, I want to delete it. Does anyone have an idea?

submitted by /u/SomeNerd54
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How accurate are these websites? And which one do I pursue?

I am new to the world of ethical hacking, I have recently completed my bachelor of BCA(A general course for learning a few basic programming languages such as java, python, and c++).

I tried googling but there are too many certification courses and I don't know where to begin(before you yell at me; yes, I have read the sticky megathread and all it does is talk about CTF which I am not interested in, as I plan to get a masters degree this fall intake so I am in a bit of a hurry here). To prove that I did my research I am going to link two websites of the many that I have read for my career.

certifications cybersecurity careers

​

TL;DR I can't pick which certification or job title I should go for and as a beginner which one is/would be suitable for me and after the completion of the basic which one should I look out for and prepare for the next.

Sorry for my confusing post but if you have any questions then do comment then down below so that I can clear my career dilemma. Thank you in advance.

submitted by /u/Nisarg_Jhatakia
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Name That Edge Toon: In Deep Water

Come up with a clever caption, and our panel of experts will reward the winner with a $25 Amazon gift card.

Dark Reading: Attacks/Breaches
How IP Data Can Help Security Professionals Protect Their Networks

Beefing up security requires a combination of forensic efforts and proactive mitigation. IP context aids both.

ScheduleRunner - A C# Tool With More Flexibility To Customize Scheduled Task For Both Persistence And Lateral Movement In Red Team Operation
http://www.kitploit.com/2022/04/schedulerunner-c-tool-with-more.html

___________________________
@hacking_Attack
@Hacking_Video

Scheduled task is one of the most popular attack technique in the past decade and now it is still commonly used by hackers/red teamers for persistence and lateral movement. A number of C# tools were already developed to simulate the attack using scheduled task. I have been playing around with some of them but each of them has its own limitations on customizing the scheduled task. Therefore, this project aims to provide a C# tool to include the features that I want and provide enough flexibility on customizing the scheduled task.
Screenshot:

___________________________
@hacking_Attack
@Hacking_Video

Methods (/method): Method Function create create a new scheduled task delete delete an existing scheduled task run execute an existing scheduled task query query details for a scheduled task or all scheduled tasks under a folder queryfolders query all sub-folders in scheduled task move perform lateral movement using scheduled task (automatically create, run and delete) Options for scheduled task creation (/method:create): Method Function [*] /taskname Specify the name of the scheduled task [*] /program Specify the program that the task runs [*] /trigger Specify the schedule type. The valid (https://www.kitploit.com/search/label/Valid) values include: "minute", "hourly", "daily", "onstart", "onlogon", "onidle" /modifier Specify how often the task runs within its schedule type. Applicable only for schedule type such as "minute" (e.g., 1-1439 minutes) and "hourly" (e.g., 1-23 hours) /starttime Specify the start time for daily schedule type (e.g., 23:30) /argument Specify the command line (https://www.kitploit.com/search/label/Command%20Line) argument for the program /folder Specify the folder where the scheduled task stores (default: \) /author Specify the author of the scheduled task /description Specify the description for the scheduled task /remoteserver Specify the hostname or IP address of a remote (https://www.kitploit.com/search/label/Remote) computer /user Run the task with a specified user account [*] are mandatory fields. Options for scheduled task deletion (/method:delete): Method Function [*] /taskname Specify the name of the scheduled task /folder Specify the folder where the scheduled task stores (default: \) /remoteserver Specify the hostname or IP address of a remote computer [*] are mandatory fields. Options for scheduled task execution (/method:run): Method Function [*] /taskname Specify the name of the scheduled task /folder Specify the folder where the scheduled task stores (default: \) /remoteserver Specify the hostname or IP address of a remote computer [*] are mandatory fields. Options for scheduled task query (/method:query): Method Function /taskname Specify the name of the scheduled task /folder Specify the folder where the scheduled task stores (default: \) /remoteserver Specify the hostname or IP address of a remote computer [*] are mandatory fields. Options for scheduled task lateral movement (/method:move): Method Function [*] /taskname Specify the name of the scheduled task [*] /program Specify the program that the task runs [*] /remoteserver Specify the hostname or IP address of a remote computer /trigger Specify the schedule type. The valid values include: "minute", "hourly", "daily", "onstart", "onlogon", "onidle" /modifier Specify how often the task runs within its schedule type. Applicable only for schedule type such as "minute" (e.g., 1-1439 minutes) and "hourly" (e.g., 1-23 hours) /starttime Specify the start time for daily schedule type (e.g., 23:30) /argument Specify the command line argument for the program /folder Specify the folder where the scheduled task stores (default: \) /author Specify the author of the scheduled task /description Specify the description for the scheduled task /user Run the task with a specified user account [*] are mandatory fields. Examples Create a scheduled task called "Cleanup" that will be executed every day at 11:30 p.m. ScheduleRunner.exe /method:create /taskname:Cleanup /trigger:daily /starttime:23:30 /program:calc.exe /description:"Some wordings" /author:netero1010 Create a scheduled task called "Cleanup" that will be executed every 4 hours on a remote server ScheduleRunner.exe /method:create /taskname:Cleanup /trigger:hourly /modifier:4 /program:rundll32.exe

___________________________
@hacking_Attack
@Hacking_Video

/argument:c:\temp\payload.dll /remoteserver:TARGET-PC01 Delete a scheduled task called "Cleanup" ScheduleRunner.exe /method:delete /taskname:Cleanup Execute a scheduled task called "Cleanup" ScheduleRunner.exe /method:run /taskname:Cleanup Query details for a scheduled task called "Cleanup" under "\Microsoft\Windows\CertificateServicesClient" folder on a remote server ScheduleRunner.exe /method:query /taskname:Cleanup /folder:\Microsoft\Windows\CertificateServicesClient /remoteserver:TARGET-PC01 Query all scheduled tasks under a specific folder "\Microsoft\Windows\CertificateServicesClient" on a remote server ScheduleRunner.exe /method:query /folder:\Microsoft\Windows\CertificateServicesClient /remoteserver:TARGET-PC01 Query all sub-folders in scheduled task ScheduleRunner.exe /method:queryfolders Perform lateral movement using scheduled task to a remote server using a specific user account ScheduleRunner.exe /method:move /taskname:Demo /remoteserver:TARGET-PC01 /program:rundll32.exe /argument:c:\temp\payload.dll /user:netero1010 Library and Reference Used: Library Link TaskScheduler https://github.com/dahall/TaskScheduler Reference Link SharpPersist https://github.com/mandiant/SharPersist

Download ScheduleRunner (https://github.com/netero1010/ScheduleRunner)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Zeus1 Vm Walkthough

https://cdn-images-1.medium.com/max/864/0*5RaiWk0ODU8o_-BJ
Makineyi indirebilirsiniz.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Cyber Attacks on Russian Institutions

https://cdn-images-1.medium.com/max/1920/1*061XGE7ZfzWH555HquTp1Q.jpeg
Will it help or hinder Ukraine to P155-off the Russian population?

Continue reading on The Dock on the Bay »

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
ScheduleRunner - A C# Tool With More Flexibility To Customize Scheduled Task For Both Persistence And Lateral Movement In Red Team Operation

https://blogger.googleusercontent.com/img/a/AVvXsEjLvnnXGh9uVr2zU-DiCiJbv6lVXXIf1GMZzejpwyvo7l1Wk4gwLDCf1b-MMIibxpam8xwIqdkkV5cIdC-l0VMOoDXKXrDbgXQYyQU-lvdcUMlXVzIMGyWm0Icpe9M2e0Ks_3uO4sob6vPNQYGGYquCPz1uoSBVHaLkCL3w9wA4Q5aErrHGHuWOKX6w=w640-h336 Scheduled task is one of the most popular attack technique in the past decade and now it is still commonly used by hackers/red teamers for persistence and lateral movement.

A number of C# tools were already developed to simulate the attack using scheduled task. I have been playing around with some of them but each of them has its own limitations on customizing the scheduled task. Therefore, this project aims to provide a C# tool to include the features that I want and provide enough flexibility on customizing the scheduled task. Screenshot:https://blogger.googleusercontent.com/img/a/AVvXsEjLvnnXGh9uVr2zU-DiCiJbv6lVXXIf1GMZzejpwyvo7l1Wk4gwLDCf1b-MMIibxpam8xwIqdkkV5cIdC-l0VMOoDXKXrDbgXQYyQU-lvdcUMlXVzIMGyWm0Icpe9M2e0Ks_3uO4sob6vPNQYGGYquCPz1uoSBVHaLkCL3w9wA4Q5aErrHGHuWOKX6w=w640-h336 Methods (/method):Method Function create create a new scheduled task delete delete an existing scheduled task run execute an existing scheduled task query query details for a scheduled task or all scheduled tasks under a folder queryfolders query all sub-folders in scheduled task move perform lateral movement using scheduled task (automatically create, run and delete) Options for scheduled task creation (/method:create):Method Function [*] /taskname Specify the name of the scheduled task [*] /program Specify the program that the task runs [*] /trigger Specify the schedule type. The valid values include: "minute", "hourly", "daily", "onstart", "onlogon", "onidle" /modifier Specify how often the task runs within its schedule type. Applicable only for schedule type such as "minute" (e.g., 1-1439 minutes) and "hourly" (e.g., 1-23 hours) /starttime Specify the start time for daily schedule type (e.g., 23:30) /argument Specify the command line argument for the program /folder Specify the folder where the scheduled task stores (default: \) /author Specify the author of the scheduled task /description Specify the description for the scheduled task /remoteserver Specify the hostname or IP address of a remote computer /user Run the task with a specified user account
[*] are mandatory fields. Options for scheduled task deletion (/method:delete):Method Function [*] /taskname Specify the name of the scheduled task /folder Specify the folder where the scheduled task stores (default: \) /remoteserver Specify the hostname or IP address of a remote computer
[*] are mandatory fields. Options for scheduled task execution (/method:run):Method Function [*] /taskname Specify the name of the scheduled task /folder Specify the folder where the scheduled task stores (default: \) /remoteserver Specify the hostname or IP address of a remote computer
[*] are mandatory fields. Options for scheduled task query (/method:query):Method Function /taskname Specify the name of the scheduled task /folder Specify the folder where the scheduled task stores (default: \) /remoteserver Specify the hostname or IP address of a remote computer
[*] are mandatory fields. Options for scheduled task lateral movement (/method:move):Method Function [*] /taskname Specify the name of the scheduled task [*] /program Specify the program that the task runs [*] /remoteserver Specify the hostname or IP address of a remote computer /trigger Specify the schedule type. The valid values include: "minute", "hourly", "daily", "onstart", "onlogon", "onidle" /modifier Specify how often the task runs within its schedule type. Applicable only for schedule type such as "minute" (e.g., 1-1439 minutes) and "hou[...]

___________________________
@hacking_Attack
@Hacking_Video

rly" (e.g., 1-23 hours) /starttime Specify the start time for daily schedule type (e.g., 23:30) /argument Specify the command line argument for the program /folder Specify the folder where the scheduled task stores (default: \) /author Specify the author of the scheduled task /description Specify the description for the scheduled task /user Run the task with a specified user account
[*] are mandatory fields. ExamplesCreate a scheduled task called "Cleanup" that will be executed every day at 11:30 p.m. ScheduleRunner.exe /method:create /taskname:Cleanup /trigger:daily /starttime:23:30 /program:calc.exe /description:"Some wordings" /author:netero1010Create a scheduled task called "Cleanup" that will be executed every 4 hours on a remote server ScheduleRunner.exe /method:create /taskname:Cleanup /trigger:hourly /modifier:4 /program:rundll32.exe /argument:c:\temp\payload.dll /remoteserver:TARGET-PC01Delete a scheduled task called "Cleanup" ScheduleRunner.exe /method:delete /taskname:CleanupExecute a scheduled task called "Cleanup" ScheduleRunner.exe /method:run /taskname:CleanupQuery details for a scheduled task called "Cleanup" under "\Microsoft\Windows\CertificateServicesClient" folder on a remote server ScheduleRunner.exe /method:query /taskname:Cleanup /folder:\Microsoft\Windows\CertificateServicesClient /remoteserver:TARGET-PC01Query all scheduled tasks under a specific folder "\Microsoft\Windows\CertificateServicesClient" on a remote server ScheduleRunner.exe /method:query /folder:\Microsoft\Windows\CertificateServicesClient /remoteserver:TARGET-PC01Query all sub-folders in scheduled task ScheduleRunner.exe /method:queryfoldersPerform lateral movement using scheduled task to a remote server using a specific user account ScheduleRunner.exe /method:move /taskname:Demo /remoteserver:TARGET-PC01 /program:rundll32.exe /argument:c:\temp\payload.dll /user:netero1010Library and Reference Used:Library Link TaskScheduler https://github.com/dahall/TaskScheduler Reference Link SharpPersist https://github.com/mandiant/SharPersist Download ScheduleRunner

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Truecrypt container passwod

Hello everyone,

I have forgotten my password for Truecrypt container, Anyone know how to hack/crack /open the container, any suggestions would be greatly appreciated..

Thanks

submitted by /u/ptsdonsteroids
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Why is it easier to pivot from *nix PCs/servers?

One of the rooms about pivoting on TryHackMe said that you should, “try to use a Linux/Unix target if possible since they’re easier to pivot from. An outward facing Linux Web-server is absolutely ideal.”

THM didn’t elaborate as to why this is the case, and I didn’t see any references to this online. I assumed that with all else being equal, a Windows machine/server would generally be more vulnerable than a *nix machine/server. Does anyone have any more info about this?

Thanks for your time

submitted by /u/Agent-BTZ
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Can Deleted messages be recovered

submitted by /u/Yourboykillua
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
SQL Injection with curl

I've been in security for several years but just now getting into pentesting and hacking. First exercise is trying my hand at some SQL injection. I know SQL well and have done some backend and frontend website work before, so i'm no stranger the technologies used here.

​

What I'm running into is that I'm blind and often it's far easier to work in a text-based shell as opposed to using a lot of GUI-based tools. I've noticed that I'm running into some trouble getting curl to properly post my strings for form encoded data to the target page.

​

IE:

curl -x POST -F 'username=admin\'#' https://example.com/

​

doesn't seem to work. It treats the "#" as another field name, trying to \escape this doesn't seem to work either. I've tried double-quoting the form data, even going so far as to manually url-encode the form data and append it to the end of the https URL of the page I'm trying. It's against a lab where I know the string that's supposed to work if done in the browser, and i can confirm it does indeed work in a browser.

​

Any suggestions or insights on how to get CURL to properly do this? I'm solid with Python as well so my next step is to use the requests module to see if it runs into the same problem (I was doing some user-agent testing earlier today and it seemed to not have an issue). But, I'd really like to just be able to throw a quick test together in the terminal before breaking out a full Python script/shell to do any of this.

​

Any help is immensely appreciated.

submitted by /u/BeforeSides
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video