Hacking Articles Tips Tricks Videos Tutorials
468 subscribers
65.8K photos
15 videos
157 files
132K links
Exploit
Pentesting
Hacking
Red Team
Blue Team
Kali Linux
Bug Bounty
Black Hat
Cyber security etc

@Hacking_Video
@Hacking_attack
Download Telegram
Euler запускает программу “баунти” ImmuneFi стоимостью $1 млн!

Программа ImmuneFi Bug Bounty направлена на укрепление безопасности Euler, одновременно развивая сотрудничество с более широкой…Continue reading on Medium »
Read more...
< XSS ARMAZENADO NA SADA DE AULA VIRTUAL DA FACULDADE />

Olá meus amigos, como vocês estão? espero que estejam bem.Continue reading on Medium »
Read more...
Hacking Articles Tips Tricks Videos Tutorials
Photo
Kali Linux Tutorials
Geowifi : Search WiFi Geolocation Data By BSSID And SSID On Different Public Databases

Geowifi is a tool to Search WiFi geolocation data by BSSID and SSID on different public databases.

Databases

* Wigle
* Apple
* OpenWifi
* Milnikov

Prerequisites

* Python3.
* In order to display emojis on Windows, it is recommended to install the new Windows terminal.
* In order to use the Wigle service it is necessary to obtain an API and configure the utils/API.yamlfile replacing the value of the “wigle_auth” parameter for the “Encoded for use” data provided by Wigle. This is necessary for searching by SSID.

Installation

Use the package manager pip to install requirements.

python3 -m pip install -r requirements.txt

Usage

usage: geowifi.py [-h] (-s SSID | -b BSSID) [-j] [-m]
optional arguments:
-h, –help Show this help message and exit
-s SSID, –ssid SSID Search by SSID
-b BSSID, –bssid BSSID Search by BSSID
-j, –json Json output
-m, –map Map output

Search by BSSID:

python3 geowifi.py -b BSSID

Search by SSID:

python3 geowifi.py -s SSID

It is possible to export the results in json format using the -jparameter and show the locations on html map using -m.

Json output example

{
“data”:{
“bssid”:”A0:XX:XX:XX:6F:90″,
“vendor”:”TP-LINK TECHNOLOGIES CO.,LTD.”,
“mac_type”:”MA-L”,
“wigle”:{
“lat”:00.000908922099,
“lon”:00.000945220028
},
“apple”:{
“lat”:”not_found”,
“lon”:”not_found”
},
“openwifi”:{
“lat”:00.000808900099,
“lon”:00.000845500028
},
“milnikov”:{
“lat”:”not_found”,
“lon”:”not_found”
}
}
}
Download

___________________________
@hacking_Attack
@Hacking_Video
Hacking Articles Tips Tricks Videos Tutorials
Photo
Kali Linux Tutorials
GONET-Scanner : Golang Network Scanner With Arp Discovery And Own Parser

GONET-Scanner tool has its own ARP scanner and parser facility.

ScreenShots
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgYNSut8jwWrLlBeFvcYhXj1pjZKFcxKM6HwbzDADopuPuHL2Z5d-Bep2tBloeA4WRZ7OpncQGABzlljMRwIyTOKfff6leejT6ZAudXS8tAgk4Ok9mFR4NKjPcP9AzssSl67_n5VGYpZcyhh9AEYJ1EMzc7B3CCvOD8a7zhfVjwHrm1pQof-xwQk8Am/s865/145.png
Install

chmod +x install.sh
./install.sh [as root]

Usage

[ARGUMENTS]
-ar CIDR: ARP Discovery
-ar CIDR -s: Scan ports in all hosts discovered
-ap: Scan to 65535 Ports
-pr MINPORT MAXPORT: Define Port Range to Scan
-1000: Scan Top 1000 ports (like nmap)
-t: Set Timeout (in milliseconds)
[EXAMPLES]
go run scannerport.go -ap : Allports TCP Scan
go run scannerport.go Default Scan 0-1024 ports
go run scannerport.go -ar 192.168.0.1/24 : ARP Ping Scan ALL local Subnet
go run scannerport.go -pr
go run scannerport.go -ar 192.168.1.1/24 -s
go run scannerport.go -1000 192.168.1.1
go run scannerport.go -t 100 192.168.1.1
Example: go run scannerport.go -ar 192.168.1.1/24 (will send an arp ping to every host of net to discover if is it up)
Example: go run scannerport.go google.com -1000 (Will resolve google.com + Will scan top 1000 ports)
Example: go run scannerport.go 192.168.0.1 -pr 100 3000 (will scan every port in these range you must put first minor port)

Add Ports To Banner Grabbing

Go to file ports.go

func Ports() map[int]string {
//Based in well known ports
ports := map[int]string{
1: “echo”,
9: “WOL”,
20: “ftp data”,
21: “ftp control”,
22: “ssh”,
23: “telnet”,
25: “smtp”,
43: “whois”,
49: “TACACS”,
53: “DNS”,
67: “BOOTP”,
69: “TFTP”,
70: “Gopher”,
71: “NETRJS”,
80: “http”,
81: “TorPark”,
82: “TorPark”,
88: “Kerberos”,
110: “POP3”,
115: “sFTP”,
143: “imap”,
220: “imap3”,
123: “NTP”,
135: “RPC”,
443: “https”,
445: “Microsoft-ds, Samba”,
465: “SMTP over TLS”,
514: “Syslog”,
520: “RIP”,
521: “RIPng”,
540: “UUCP”,
543: “klogin”,
544: “kshell”,
587: “submission”,
993: “IMAP over TLS”,
995: “POP3 over TLS”,
1433: “Microsoft SQL Server”,
3306: “MySQL”,
3389: “rdp”,
5432: “postgres”,
6667: “irc”,
25565: “minecraft server”,
}
return ports

Just add port number & name of service Example: Add git

9418: “git”,
Download

___________________________
@hacking_Attack
@Hacking_Video
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking Articles|Raj Chandel's Blog
A Detailed Guide on AMSI Bypass

IntroductionWindows developed the Antimalware Scan Interface (AMSI) standard that allows a developer to integrate malware defense in his application. AMSI allows an application to interact with any anti-virus installed on the system and prevent dynamic, script-based malwares from executing. We’ll learn more about AMSI, implementation in code and some of the well-known bypasses in this article.Table of content· Background· Malware naming convention· How AMSI works· AMSI Bypass methods:· Method 1: Powershell downgrade· Method 2: Obfuscation· Method 3: Forcing an error· Method 4: Memory Hijacking· Method 5: Memory Hijacking (obfuscated opcodes)· Method 6: AMSI bypass by reflection· Method 7: Nishang All in One script· ConclusionIn one sentence, it is a script-based malware scanning API provided by Microsoft that can be integrate in any application to scan and detect integrity of user input in order to safeguard the application and thus, consumers against malwares. For example, a messenger app may scan messages with AMSI for malware before sending it forward to the receiver.Malware naming conventionBefore reading more about the working of AMSI, let’s understand how malwares are named. Often in analysis, Windows detects malware but analysts are unable to identify exact details and behaviour of the malware. Computer Antivirus Research Organisation (CARO) has given a standard naming convention for malwares. For example, a shortcut based caphaw backdoor is named like:How AMSI worksAs a developer you can use AMSI to provide malware defense using AMSI. Let’s say you create an application that inputs a script and executes it using a scripting engine like Powershell. At the point when input is being taken, AMSI can be called in to check for malware first. Windows provides COM and Win32 APIs to call AMSI. The workflow of AMSI is as follows:Explanation: As you can see, the AMSI API is open, so any AV can read the data from its functions. Here, a windows script is being run. When it is passed through AMSI, amsi.dll is injected in the same virtual memory as that of our program. This amsi.dll has various functions that can evaluate code. These functions can be found here. However, the actual scanning task is conducted by these two functions:___________________________
@hacking_Attack
@Hacking_Video