Hacking Articles Tips Tricks Videos Tutorials

KitPloit - PenTest Tools!
OffensiveNotion - Notion As A Platform For Offensive Operations

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjyiLaa6rde8wUQlRxmq8NeqaGDfFI6MWmFMXdmqy5u_rjrKm_mYs76jFzIOzEvBooWoomyR_18ABxkO1ADH27fomv7RCy2XQIo2Y0oYKayGT6W6YKR-Oe_MELX3moS-S1myE6HuLREDDgOiegTtxO5sBFM6l_wV5HQsaoXHn0VOw-h_8uVhaMcm4cE/w640-h330/OffensiveNotion.png Notion (yes, the notetaking app) as a C2.Wait, What?Yes. But Why?What started as a meme grew into a full project. Just roll with it. Read more!Here's our blog post about it: We Put A C2 In Your Notetaking App: OffensiveNotion Features*
A full-featured C2 platform built on the Notion notetaking app.

*
Easy setup: set up your Notion developer API account, drop the Agent to the target, run and enjoy!

*
Cross-platform agent built in Rust that compiles for Linux, Windows, and macOS with the same code base. Includes a Python setup/controller script to simplify the process.

*
A range of capabilities including port-scanning, privilege escalation, asynchronous command execution, file download, and shellcode injection, all controlled from the comfort of a Notion page!

*
Document as you go! The agent identifies special syntax to run commands, so feel free to use the rest of the Notion page to document your operation.

*
Collaborative by design! Notion allows for multiple people to edit and view your notes. Your listener page can handle multiple agents and you can invite your red team friends to your page. Congratulations, that's a teamserver!

*
Mobile C2! Use the Notion application from your mobile device to issue commands to your agents from anywhere in the world.

*
Stealth! C2 comms ride over the Notion API natively. Your C2 traffic looks like someone is using Notion for its intended purpose. QuickstartSee the Quickstart guide on how to get going right away! DocumentationPlease see the Wiki for setup, usage, commands, and more! Thanks & AcknowledgementsThis project has been a blast for me! I learned a ton about Rust and how the mechanics of a C2 work. So thank you to my co-creator @mttaggart for helping me along the way. None of this would have been possible without your technical acumen and creativity.

Thank you to Joe Helle (@joehelle) for the POC steps for the fodhelper UAC bypass.

Thank you to all of the great red team devs who came before me, too numerous to list them all, who have created some of my favorite tools. I’m continually inspired by the red dev innovation in our field.

-Husky

As a fairly new security person, I had no idea I'd end up working with such a fantastically talented, kind, and reliable partner and hacker as @HuskyHacks. It's been a true privilege to build this alongside him.

I want to thank the Taggart Tech community for supporting us along the way and always offering helpful feedback. This would not be possible without you all.

-Taggart DisclaimerThere is no way to make an offensive security relevant research tool and release it open source without the possibility of it falling into the wrong hands. This tool is only to be used for legal, ethical purposes including, but not limited to, research, security assessment, education. The dev team is not responsible for the misuse of this tool by anyone if used for illegal/unethical purposes. No animals were harmed in the making of this code base (although Cosmo keeps climbing on my keyboard and I have to put him over on the couch, which I'm sure must feel like torture to him).

See the LICENSE for more details. Download OffensiveNotion

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest & Hacking Tools

OffensiveNotion - Notion As A Platform For Offensive Operations

9 viewsedited 15:55

hacking: security in practice
Found a index.js file that displays the password policy/settings of how the password structure works for a website

Found this file whilst doing a bug bounty program. Given the explanation of the title, is this a valid vulnerability?

What could a malicious user do with this info?

submitted by /u/zoobyk12
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Found a index.js file that displays the password policy/settings...

Found this file whilst doing a bug bounty program. Given the explanation of the title, is this a valid vulnerability? What could a malicious user...

6 viewsedited 16:42

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
Tried and no luck anywhere

Someone sent me a screenshot of a video that looks to be my girl. I tried looking for it and no luck. Any recommendations? Dm for screenshot

Thanks everyone

submitted by /u/Sensitive-Economy804
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Tried and no luck anywhere

Someone sent me a screenshot of a video that looks to be my girl. I tried looking for it and no luck. Any recommendations? Dm for...

6 viewsedited 16:42

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
What can I do with my crypter?

I’ve been developing a crypter for a few months now which is coming along nicely.

0/38 Scantime 1/22 Runtime VB.NET 3.5 Completely Polymorphic 12kb Stub Anti-VM Unique decryption of payload Memory Injection

What are the practical uses of this? I really don’t want to license it and deal with that.

submitted by /u/MysticalTeamMember
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

What can I do with my crypter?

I’ve been developing a crypter for a few months now which is coming along nicely. >0/38 Scantime 1/22 Runtime >VB.NET 3.5 >Completely...

5 viewsedited 16:42

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
How would I become completely anonymous? And have new identity?

I’m just wondering how to stay 100% anonymous, from safe emails, VPN and real word advice to keep myself hidden as possible from big tech and anyone else trying to find my identity.

And how does one go about creating a new identity, seems very complicated to me. ( havnt done much research) Thabks in advance!

submitted by /u/Mr_T_fletcher
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

How would I become completely anonymous? And have new identity?

I’m just wondering how to stay 100% anonymous, from safe emails, VPN and real word advice to keep myself hidden as possible from big tech and...

5 viewsedited 16:42

Hacking Articles Tips Tricks Videos Tutorials

Dark Reading: Attacks/Breaches
Security Nihilism Is Putting Your Company — and Its Employees — at Risk

Some enterprise security tactics can backfire, pitting IT and security teams against the employees they’re trying to protect.

9 views17:38

Source

Hacking Articles Tips Tricks Videos Tutorials

Dark Reading: Attacks/Breaches
ByteChek Founder AJ Yawn Brings Discipline to Everything He Does

Security Pro File: The former Army captain, whose security startup is on an upward trajectory, works hard to "make compliance suck less."

13 views17:39

Source

Hacking Articles Tips Tricks Videos Tutorials

How a YouTube Video lead to pwning a web application via SQL Injection worth $4324 bounty
https://medium.com/@k4k4r07/how-a-youtube-video-lead-to-pwning-a-web-application-via-sql-injection-worth-4324-bounty-285f0a9b9f6c?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Medium

How a YouTube Video lead to pwning a web application via SQL Injection worth $4324 bounty

This write-up is regarding one of my findings on a private program on HackerOne. As this is a private program so I have made certain…

9 viewsedited 18:59

Hacking Articles Tips Tricks Videos Tutorials

7 views18:59

Hacking Articles Tips Tricks Videos Tutorials

This write-up is regarding one of my findings on a private program on HackerOne. As this is a private program so I have made certain…Continue reading on Medium » (https://medium.com/@k4k4r07/how-a-youtube-video-lead-to-pwning-a-web-application-via-sql-injection-worth-4324-bounty-285f0a9b9f6c?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Medium

How a YouTube Video lead to pwning a web application via SQL Injection worth $4324 bounty

This write-up is regarding one of my findings on a private program on HackerOne. As this is a private program so I have made certain…

8 viewsedited 18:59

Hacking Articles Tips Tricks Videos Tutorials

How a YouTube Video lead to pwning a web application via SQL Injection worth $4324 bounty

This write-up is regarding one of my findings on a private program on HackerOne. As this is a private program so I have made certain…Continue reading on Medium »
Read more...

8 views19:06

Hacking Articles Tips Tricks Videos Tutorials

Hacking on Medium
What you need to know about the CEH v11 (update 2022)

https://cdn-images-1.medium.com/max/639/0*8w-ZRxv8fcNhvn9r.jpg
The Certified Ethical Hacker (CEH) accreditation from EC-Council is a well-respected and well-trusted ethical hacking program that has…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Medium

What you need to know about the CEH v11 (update 2022)

The Certified Ethical Hacker (CEH) accreditation from EC-Council is a well-respected and well-trusted ethical hacking program that has…

7 viewsedited 19:43

Hacking Articles Tips Tricks Videos Tutorials

Hacking on Medium
Android security — $6,337 vulnerability in basecamp

https://cdn-images-1.medium.com/max/1024/1*UvPMD9Azvrkg1NhEbKdWmA.png
Skip to the report: https://hackerone.com/reports/1372667

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Medium

Android security — $6,337 vulnerability in basecamp

Skip to the report: https://hackerone.com/reports/1372667