Hacking on Medium
Cyber Attacks on Russian Institutions

https://cdn-images-1.medium.com/max/1920/1*061XGE7ZfzWH555HquTp1Q.jpeg
Will it help or hinder Ukraine to P155-off the Russian population?

Continue reading on The Dock on the Bay »

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
ScheduleRunner - A C# Tool With More Flexibility To Customize Scheduled Task For Both Persistence And Lateral Movement In Red Team Operation

https://blogger.googleusercontent.com/img/a/AVvXsEjLvnnXGh9uVr2zU-DiCiJbv6lVXXIf1GMZzejpwyvo7l1Wk4gwLDCf1b-MMIibxpam8xwIqdkkV5cIdC-l0VMOoDXKXrDbgXQYyQU-lvdcUMlXVzIMGyWm0Icpe9M2e0Ks_3uO4sob6vPNQYGGYquCPz1uoSBVHaLkCL3w9wA4Q5aErrHGHuWOKX6w=w640-h336 Scheduled task is one of the most popular attack technique in the past decade and now it is still commonly used by hackers/red teamers for persistence and lateral movement.

A number of C# tools were already developed to simulate the attack using scheduled task. I have been playing around with some of them but each of them has its own limitations on customizing the scheduled task. Therefore, this project aims to provide a C# tool to include the features that I want and provide enough flexibility on customizing the scheduled task. Screenshot:https://blogger.googleusercontent.com/img/a/AVvXsEjLvnnXGh9uVr2zU-DiCiJbv6lVXXIf1GMZzejpwyvo7l1Wk4gwLDCf1b-MMIibxpam8xwIqdkkV5cIdC-l0VMOoDXKXrDbgXQYyQU-lvdcUMlXVzIMGyWm0Icpe9M2e0Ks_3uO4sob6vPNQYGGYquCPz1uoSBVHaLkCL3w9wA4Q5aErrHGHuWOKX6w=w640-h336 Methods (/method):Method Function create create a new scheduled task delete delete an existing scheduled task run execute an existing scheduled task query query details for a scheduled task or all scheduled tasks under a folder queryfolders query all sub-folders in scheduled task move perform lateral movement using scheduled task (automatically create, run and delete) Options for scheduled task creation (/method:create):Method Function [*] /taskname Specify the name of the scheduled task [*] /program Specify the program that the task runs [*] /trigger Specify the schedule type. The valid values include: "minute", "hourly", "daily", "onstart", "onlogon", "onidle" /modifier Specify how often the task runs within its schedule type. Applicable only for schedule type such as "minute" (e.g., 1-1439 minutes) and "hourly" (e.g., 1-23 hours) /starttime Specify the start time for daily schedule type (e.g., 23:30) /argument Specify the command line argument for the program /folder Specify the folder where the scheduled task stores (default: \) /author Specify the author of the scheduled task /description Specify the description for the scheduled task /remoteserver Specify the hostname or IP address of a remote computer /user Run the task with a specified user account
[*] are mandatory fields. Options for scheduled task deletion (/method:delete):Method Function [*] /taskname Specify the name of the scheduled task /folder Specify the folder where the scheduled task stores (default: \) /remoteserver Specify the hostname or IP address of a remote computer
[*] are mandatory fields. Options for scheduled task execution (/method:run):Method Function [*] /taskname Specify the name of the scheduled task /folder Specify the folder where the scheduled task stores (default: \) /remoteserver Specify the hostname or IP address of a remote computer
[*] are mandatory fields. Options for scheduled task query (/method:query):Method Function /taskname Specify the name of the scheduled task /folder Specify the folder where the scheduled task stores (default: \) /remoteserver Specify the hostname or IP address of a remote computer
[*] are mandatory fields. Options for scheduled task lateral movement (/method:move):Method Function [*] /taskname Specify the name of the scheduled task [*] /program Specify the program that the task runs [*] /remoteserver Specify the hostname or IP address of a remote computer /trigger Specify the schedule type. The valid values include: "minute", "hourly", "daily", "onstart", "onlogon", "onidle" /modifier Specify how often the task runs within its schedule type. Applicable only for schedule type such as "minute" (e.g., 1-1439 minutes) and "hou[...]

___________________________
@hacking_Attack
@Hacking_Video

rly" (e.g., 1-23 hours) /starttime Specify the start time for daily schedule type (e.g., 23:30) /argument Specify the command line argument for the program /folder Specify the folder where the scheduled task stores (default: \) /author Specify the author of the scheduled task /description Specify the description for the scheduled task /user Run the task with a specified user account
[*] are mandatory fields. ExamplesCreate a scheduled task called "Cleanup" that will be executed every day at 11:30 p.m. ScheduleRunner.exe /method:create /taskname:Cleanup /trigger:daily /starttime:23:30 /program:calc.exe /description:"Some wordings" /author:netero1010Create a scheduled task called "Cleanup" that will be executed every 4 hours on a remote server ScheduleRunner.exe /method:create /taskname:Cleanup /trigger:hourly /modifier:4 /program:rundll32.exe /argument:c:\temp\payload.dll /remoteserver:TARGET-PC01Delete a scheduled task called "Cleanup" ScheduleRunner.exe /method:delete /taskname:CleanupExecute a scheduled task called "Cleanup" ScheduleRunner.exe /method:run /taskname:CleanupQuery details for a scheduled task called "Cleanup" under "\Microsoft\Windows\CertificateServicesClient" folder on a remote server ScheduleRunner.exe /method:query /taskname:Cleanup /folder:\Microsoft\Windows\CertificateServicesClient /remoteserver:TARGET-PC01Query all scheduled tasks under a specific folder "\Microsoft\Windows\CertificateServicesClient" on a remote server ScheduleRunner.exe /method:query /folder:\Microsoft\Windows\CertificateServicesClient /remoteserver:TARGET-PC01Query all sub-folders in scheduled task ScheduleRunner.exe /method:queryfoldersPerform lateral movement using scheduled task to a remote server using a specific user account ScheduleRunner.exe /method:move /taskname:Demo /remoteserver:TARGET-PC01 /program:rundll32.exe /argument:c:\temp\payload.dll /user:netero1010Library and Reference Used:Library Link TaskScheduler https://github.com/dahall/TaskScheduler Reference Link SharpPersist https://github.com/mandiant/SharPersist Download ScheduleRunner

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Truecrypt container passwod

Hello everyone,

I have forgotten my password for Truecrypt container, Anyone know how to hack/crack /open the container, any suggestions would be greatly appreciated..

Thanks

submitted by /u/ptsdonsteroids
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Why is it easier to pivot from *nix PCs/servers?

One of the rooms about pivoting on TryHackMe said that you should, “try to use a Linux/Unix target if possible since they’re easier to pivot from. An outward facing Linux Web-server is absolutely ideal.”

THM didn’t elaborate as to why this is the case, and I didn’t see any references to this online. I assumed that with all else being equal, a Windows machine/server would generally be more vulnerable than a *nix machine/server. Does anyone have any more info about this?

Thanks for your time

submitted by /u/Agent-BTZ
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Can Deleted messages be recovered

submitted by /u/Yourboykillua
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
SQL Injection with curl

I've been in security for several years but just now getting into pentesting and hacking. First exercise is trying my hand at some SQL injection. I know SQL well and have done some backend and frontend website work before, so i'm no stranger the technologies used here.

​

What I'm running into is that I'm blind and often it's far easier to work in a text-based shell as opposed to using a lot of GUI-based tools. I've noticed that I'm running into some trouble getting curl to properly post my strings for form encoded data to the target page.

​

IE:

curl -x POST -F 'username=admin\'#' https://example.com/

​

doesn't seem to work. It treats the "#" as another field name, trying to \escape this doesn't seem to work either. I've tried double-quoting the form data, even going so far as to manually url-encode the form data and append it to the end of the https URL of the page I'm trying. It's against a lab where I know the string that's supposed to work if done in the browser, and i can confirm it does indeed work in a browser.

​

Any suggestions or insights on how to get CURL to properly do this? I'm solid with Python as well so my next step is to use the requests module to see if it runs into the same problem (I was doing some user-agent testing earlier today and it seemed to not have an issue). But, I'd really like to just be able to throw a quick test together in the terminal before breaking out a full Python script/shell to do any of this.

​

Any help is immensely appreciated.

submitted by /u/BeforeSides
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
breaking into an inherited ipad pro

Hey guys, this is a dumb question, but I want to reset my dad's old iPad pro back to factory settings. Unfortunately, my dad was a bloody tight lipped fucker, and I can't get in with the pass code.

Unfortunately, whatever knowledge of that code is sprayed across my garage, so that is out.

He also didn't write anything down, nor did he provide anyone with the code.

So. I don't care about what's on the iPad, I just need the iPad. Is there any tool that I can use to get in? Or am I SOL

submitted by /u/Gemini_fishfucker
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
'Human Behavior' Security Startup Nets $7M in Seed

Nudge Security plans a general launch of its cloud-based service later this year.

Dark Reading: Attacks/Breaches
Developers Increasingly Prioritize Secure Coding

But "old habits are hard to break," with 48% of developers still shipping code with vulnerabilities.

Dark Reading: Attacks/Breaches
Microsoft Details New Security Features for Windows 11

Security features to come include a TPM-like security processor for protecting artifacts that a computer uses during the secure boot-up process, as well as a control for blocking unsigned and untrusted apps.

Hacking on Medium
Deconstructing the ransomware kill chain

https://cdn-images-1.medium.com/max/1024/1*torJ6PlesCjsauXT2AG-Xw.jpeg
By design ransomware is a relatively “noisy” form of malware and its kill chain presents multiple opportunities for network defenders to…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Watch out the links : Account takeover

This is my second writeup here :), Hope you find enjoy it too!Continue reading on Medium »
Read more...

Very interested in landing a Pentester job to move on
https://www.reddit.com/r/redteamsec/comments/txbxfr/very_interested_in_landing_a_pentester_job_to/

I do hold a active good standing CISSP, will no doubt have OSCP on the 29th. 15 years experience as System Engineer and IDR. Kinda dumb question but I do have lock picking skills which is strictly a hobby and not resume worthy. If I did get some lockpicking certification is that any kind of additional edge over the competition to land a redteam job in the future? submitted by /u/newworldsamurai3030 (https://www.reddit.com/user/newworldsamurai3030)
[link] (https://www.reddit.com/r/redteamsec/comments/txbxfr/very_interested_in_landing_a_pentester_job_to/) [comments] (https://www.reddit.com/r/redteamsec/comments/txbxfr/very_interested_in_landing_a_pentester_job_to/)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
ADB exploit

I am curious, how i can exploit android which is on same network with me plus i have access to router page. I am researching about it for like weeks but can't find anything. Is it even possible ?

submitted by /u/YesDepresseddd
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Watch out the links : Account takeover
https://medium.com/@AkashHamal0x01/watch-out-the-links-account-takeover-32b9315390a7?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

This is my second writeup here :), Hope you find enjoy it too!Continue reading on Medium » (https://medium.com/@AkashHamal0x01/watch-out-the-links-account-takeover-32b9315390a7?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Man in the Middle and Denial of Service Attacks- Certified Ethical Hacking- Questionnaires Live

Man in the Middle and Denial of Service Attacks- Certified Ethical Hacking- Questionnaires Live

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Resources & Learning Paths collections (Part-1)

https://cdn-images-1.medium.com/max/1024/1*iigp3p9DtSN5HTcfMtzVuQ.png
I am starting a series of blogs where you find the collection of documents, presentations, videos, training materials, tools, services…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video