Olá meus amigos, como vocês estão? espero que estejam bem.Continue reading on Medium » (https://medium.com/@Diegoeducacao404.../xss-armazenado-na-lada-de-aula-virtual-da-faculdade-36b7e1d89b31?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Geowifi : Search WiFi Geolocation Data By BSSID And SSID On Different Public Databases

Geowifi is a tool to Search WiFi geolocation data by BSSID and SSID on different public databases.

Databases

* Wigle
* Apple
* OpenWifi
* Milnikov

Prerequisites

* Python3.
* In order to display emojis on Windows, it is recommended to install the new Windows terminal.
* In order to use the Wigle service it is necessary to obtain an API and configure the utils/API.yamlfile replacing the value of the “wigle_auth” parameter for the “Encoded for use” data provided by Wigle. This is necessary for searching by SSID.

Installation

Use the package manager pip to install requirements.

python3 -m pip install -r requirements.txt

Usage

usage: geowifi.py [-h] (-s SSID | -b BSSID) [-j] [-m]
optional arguments:
-h, –help Show this help message and exit
-s SSID, –ssid SSID Search by SSID
-b BSSID, –bssid BSSID Search by BSSID
-j, –json Json output
-m, –map Map output

Search by BSSID:

python3 geowifi.py -b BSSID

Search by SSID:

python3 geowifi.py -s SSID

It is possible to export the results in json format using the -jparameter and show the locations on html map using -m.

Json output example

{
“data”:{
“bssid”:”A0:XX:XX:XX:6F:90″,
“vendor”:”TP-LINK TECHNOLOGIES CO.,LTD.”,
“mac_type”:”MA-L”,
“wigle”:{
“lat”:00.000908922099,
“lon”:00.000945220028
},
“apple”:{
“lat”:”not_found”,
“lon”:”not_found”
},
“openwifi”:{
“lat”:00.000808900099,
“lon”:00.000845500028
},
“milnikov”:{
“lat”:”not_found”,
“lon”:”not_found”
}
}
}
Download

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
GONET-Scanner : Golang Network Scanner With Arp Discovery And Own Parser

GONET-Scanner tool has its own ARP scanner and parser facility.

ScreenShots
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgYNSut8jwWrLlBeFvcYhXj1pjZKFcxKM6HwbzDADopuPuHL2Z5d-Bep2tBloeA4WRZ7OpncQGABzlljMRwIyTOKfff6leejT6ZAudXS8tAgk4Ok9mFR4NKjPcP9AzssSl67_n5VGYpZcyhh9AEYJ1EMzc7B3CCvOD8a7zhfVjwHrm1pQof-xwQk8Am/s865/145.png
Install

chmod +x install.sh
./install.sh [as root]

Usage

[ARGUMENTS]
-ar CIDR: ARP Discovery
-ar CIDR -s: Scan ports in all hosts discovered
-ap: Scan to 65535 Ports
-pr MINPORT MAXPORT: Define Port Range to Scan
-1000: Scan Top 1000 ports (like nmap)
-t: Set Timeout (in milliseconds)
[EXAMPLES]
go run scannerport.go -ap : Allports TCP Scan
go run scannerport.go Default Scan 0-1024 ports
go run scannerport.go -ar 192.168.0.1/24 : ARP Ping Scan ALL local Subnet
go run scannerport.go -pr
go run scannerport.go -ar 192.168.1.1/24 -s
go run scannerport.go -1000 192.168.1.1
go run scannerport.go -t 100 192.168.1.1
Example: go run scannerport.go -ar 192.168.1.1/24 (will send an arp ping to every host of net to discover if is it up)
Example: go run scannerport.go google.com -1000 (Will resolve google.com + Will scan top 1000 ports)
Example: go run scannerport.go 192.168.0.1 -pr 100 3000 (will scan every port in these range you must put first minor port)

Add Ports To Banner Grabbing

Go to file ports.go

func Ports() map[int]string {
//Based in well known ports
ports := map[int]string{
1: “echo”,
9: “WOL”,
20: “ftp data”,
21: “ftp control”,
22: “ssh”,
23: “telnet”,
25: “smtp”,
43: “whois”,
49: “TACACS”,
53: “DNS”,
67: “BOOTP”,
69: “TFTP”,
70: “Gopher”,
71: “NETRJS”,
80: “http”,
81: “TorPark”,
82: “TorPark”,
88: “Kerberos”,
110: “POP3”,
115: “sFTP”,
143: “imap”,
220: “imap3”,
123: “NTP”,
135: “RPC”,
443: “https”,
445: “Microsoft-ds, Samba”,
465: “SMTP over TLS”,
514: “Syslog”,
520: “RIP”,
521: “RIPng”,
540: “UUCP”,
543: “klogin”,
544: “kshell”,
587: “submission”,
993: “IMAP over TLS”,
995: “POP3 over TLS”,
1433: “Microsoft SQL Server”,
3306: “MySQL”,
3389: “rdp”,
5432: “postgres”,
6667: “irc”,
25565: “minecraft server”,
}
return ports

Just add port number & name of service Example: Add git

9418: “git”,
Download

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
All about XSS(Part 1)

https://cdn-images-1.medium.com/max/938/1*3E_1fh41K6v4UzMS3BxSew.png
Introduction to XSS

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
< XSS ARMAZENADO NA SALA DE AULA VIRTUAL DA FACULDADE />

https://cdn-images-1.medium.com/max/1280/1*akpFYFc2c9Q38qe3rdHVtg.jpeg
Olá meus amigos, como vocês estão? espero que estejam bem.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
The genius marketing hack I never used

https://cdn-images-1.medium.com/max/2600/1*lHc9hretLeppVxzXEJPbsg.jpeg
It’s been over 5 years since I exited my previous startup, so I think it is time to share the story of the most genius marketing hack I…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Safely Store Your Seed Phrase

https://cdn-images-1.medium.com/max/1196/1*7Nrk_AKVa62E-RYQj6K1bQ.jpeg
So that’s it. You opened a blockchain account using a wallet. Time to learn a few tips on how to keep your seed safe!

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Is It a Crime To Press F12 And View Source Code of a Website?

https://cdn-images-1.medium.com/max/940/1*iby9IaLqGXR-Gj-4eI76yA.png
Does Pointing Out The Vulnerability of a Website Amount To Cyber Crime?

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
What’s the Difference between Deep Web and Dark Web?

https://cdn-images-1.medium.com/max/750/1*pxwLEiLTGzuT_iRE_at5yA.jpeg
Many times the two terms are used interchangeably as if they are more or less the same thing.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
What is a difference between payload and a virus? how to scan virus using cmd ?

https://cdn-images-1.medium.com/max/1200/1*-VR6hp5YleBaqz5gQMUZlQ.jpeg
In terms of Software Language, a virus is a program which can harm the 
device when the virus is executed. In simple words, virus is a…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Hacking Instagram Scammers

https://cdn-images-1.medium.com/max/600/1*p6bto-Uwi3XSYcMqwGQgew.png
Hacking Instagram Scammers and Takeover Admin Panel

Continue reading on Dev Genius »

___________________________
@hacking_Attack
@Hacking_Video

Hacking Articles|Raj Chandel's Blog
A Detailed Guide on AMSI Bypass

IntroductionWindows developed the Antimalware Scan Interface (AMSI) standard that allows a developer to integrate malware defense in his application. AMSI allows an application to interact with any anti-virus installed on the system and prevent dynamic, script-based malwares from executing. We’ll learn more about AMSI, implementation in code and some of the well-known bypasses in this article.Table of content· Background· Malware naming convention· How AMSI works· AMSI Bypass methods:· Method 1: Powershell downgrade· Method 2: Obfuscation· Method 3: Forcing an error· Method 4: Memory Hijacking· Method 5: Memory Hijacking (obfuscated opcodes)· Method 6: AMSI bypass by reflection· Method 7: Nishang All in One script· ConclusionIn one sentence, it is a script-based malware scanning API provided by Microsoft that can be integrate in any application to scan and detect integrity of user input in order to safeguard the application and thus, consumers against malwares. For example, a messenger app may scan messages with AMSI for malware before sending it forward to the receiver.Malware naming conventionBefore reading more about the working of AMSI, let’s understand how malwares are named. Often in analysis, Windows detects malware but analysts are unable to identify exact details and behaviour of the malware. Computer Antivirus Research Organisation (CARO) has given a standard naming convention for malwares. For example, a shortcut based caphaw backdoor is named like:How AMSI worksAs a developer you can use AMSI to provide malware defense using AMSI. Let’s say you create an application that inputs a script and executes it using a scripting engine like Powershell. At the point when input is being taken, AMSI can be called in to check for malware first. Windows provides COM and Win32 APIs to call AMSI. The workflow of AMSI is as follows:Explanation: As you can see, the AMSI API is open, so any AV can read the data from its functions. Here, a windows script is being run. When it is passed through AMSI, amsi.dll is injected in the same virtual memory as that of our program. This amsi.dll has various functions that can evaluate code. These functions can be found here. However, the actual scanning task is conducted by these two functions:___________________________
@hacking_Attack
@Hacking_Video

is clean, the results are finally passed to the AV provider class and from there to the AV service using RPC call. If the code is suspicious, it is blocked by the AMSI itself.AMSI Bypass methodsNow that we have discussed basics about AMSI, we will be discussing about some of the very well-known techniques to bypass AMSI. Bypassing AMSI is often necessary for red-teamers in order to execute arbitrary code for lateral movement/privilege escalation.NOTE: AMSI blocks certain keywords like “invoke-mimikatz” or “amsiutils” since they are widely known to be used for exploitation and so, as a proof of concept, we will only be running these commands post bypass. Actual payloads won’t be bypassed here.Method 1: Powershell downgradeIf you’re running a powershell based payload and AMSI blocks it, you can downgrade your powershell version to 2.0 as AMSI is only supported beyond v2.0. First, you can see that our keywords are being blocked by amsi.$PSVersionTablehttps://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgHA_s6XQCsf7zguP-SlVRO0RouwqsNGMwyfXXbS4TJ65Y6S5JV3ONqFaX_EtSaJ6j6Jrz2Rwz8Lonn-1ArPMCvlV8KktbpyCftZ6mm2ZAVqooZqMcWHaBNjCu4GXVdjzJj05HvLzMCKnesaVM6StpIQlQz8-4aTz1BK97W4KIfpWTWIqGzeQPIQzDyFw/s16000/4.png But as you would imagine, the biggest drawback here is that many modern functions or scripts won’t run on Powershell 2.0. So, let’s see some other methods.Method 2: ObfuscationObfuscation refers to the trick of making your code complex and un-readable. AMSI detects signatures on the basis of certain keywords, and so, obfuscating these keywords work. For example, let’s obfuscate invoke-mimikatz commandInvoke-Mimikatzhttps://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgsxf8JumXzmhtctowt43YiZedvu3mC2ckOOBcfaLDWs-6HnqwrJ5Ede9HU6kb_ccoWMgWdUWirtV98lrjcQNxJHFvzPk5pGPpXqxakD5Vw0ngeYPulxdM3XeybGBg0JxYRhu30Hka4KWPccFIvLrud5fcJthk0kyTSivkqRDrU7jGeY8SZg0CheDM0ZQ/s16000/5.png As you can see, simply by breaking a string and concatenating them using + operator we were able to bypass AMSI.___________________________
@hacking_Attack
@Hacking_Video

u can download the tool here..\demo.ps1https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhzy92xJG8OTKOTEmnUwjOXLb0Fvwm55j4OcKsjkS13bAuPWW0czTC2ilFG_ugA27gAOGCXCD25ffN-2tyVPzz_1TXr6hRmL5iLSWSPWa7NPQxALAi4jLYzWaUeU8e8SfVQRDynT_231n-cQ8F8m8g3BmeVYh-7A_sEsXlV9gRTqqbv8JMkJlaqYi4rwQ/s16000/7.png Now, the tool has told me the lines where AMSI blocks execution. We can go ahead and obfuscate them using string concatenation method like: Method 3: Forcing an errorMatt Graeber talked about a method to bypass AMSI in his tweet here. A function called amsiInitFailed() exists which throws 0 if AMSI scan is initiated in scenarios shown above. This bypass is basically assigning amsiInitFailed a boolean True value so that AMSI initialization fails - no scan will be done at all for the current process! The code is:$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076)https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhuG5mV6PnYS2ykdsqIhaXzUCZk_PpKJXRibOsFjj2yqoWOfkodX5ZxuECcnj6R9wWTKwYAYEy-NF9lLylEH904M2xtwSKz6SniAuABymRa5k5w8Ge4PdnaLgGK40n0A84HRbuUujYaW9FoDlg9yRYbGk6IQ6qQIt2YYnjfcRYJvi-K0KJcVSvxZV_SQQ/s16000/10.png Ever since that time, many people have posted different variants of the same method. In some methods bytecode is used, in others, functions are replaced or strings are replaced but the logic prevails the same.Method 4: Memory HijackingDaniel Duggan posted about memory hijacking techniques that can bypass AMSI in his blog here. The logic is to hook (read about hooking here) the function AmsiScanBuffer() so that it always returns the handle AMSI_RESULT_CLEAN indicating that AMSI has found no malware. The API responses could be monitored using API monitor tool by Rohitab.___________________________
@hacking_Attack
@Hacking_Video

nd see the presence of a DLL called ASBBypass.dllPlease note that since we now have a DLL, it can be integrated with our EXE payload as well and will bypass AMSI on the go![System.Reflection.Assembly]::LoadFile("C:\users\hex\Project\ASBBypass.dll")https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjW1YWdvdLrZNnRJ-KCoXHwyjn4vZidhB2ND-8UzlusO-e0zMpNK-TAORCQPkuMD3uOJr1bUWd0EL0gcixpOfCSTvMFv-PYKdz5BFV2zUGogR5egm0-eaqebx3_PfRu9kYASH6_-EnitowOpuYWsrZqe8yzdXb3nmPHgl0yyBlHFclVUz6yEybji1bbZw/s16000/12.png As you can see, amsi has now been bypassed!Method 5: Memory Hijacking (obfuscated opcodes)After the Rasta Mouse (Daniel Duggan) technique started getting detected, people made various changes in the code to make it FUD again. Fatrodzianko posted about one such technique in his blog here. He obfuscated the same code using opcodes and put the script on gist here.“invoke-mimikatz”https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhA7Ng0eACK4CQuICxOt6dQxU2oFob2xmq3G54U3taLkx6Nn-SriNOWElCJGUDTxs14dpFdcH9uW9aQ0dLrbdePe-dbLA1aS6-JQNwc5Px7k49T0S49jlfeeUX9KjO3EHCNLUXxTJE-RLmtIZW_ZFLAsC9iUmYPLy3xNpOy678ZtviABPhiFPfqa1zHQA/s16000/13.png As you can see, we have successfully bypassed AMSI now.Method 6: AMSI bypass by reflectionAccording to Microsoft, “Reflection provides objects (of type Type) that describe assemblies, modules, and types. You can use reflection to dynamically create an instance of a type, bind the type to an existing object, or get the type from an existing object and invoke its methods or access its fields and properties. If you are using attributes in your code, reflection enables you to access them.” Read more here.“invoke-mimikatz”https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjtG_5bL--OFzp12MsQQzUsklWOHuM0eg9RcpB51VdK4U9HUk19ghtW1HZit-lOxJecdCSwoVPaCSe0lkLT1i0lB2Oe1u3VMsBREBM4Bszfoe7GWidrqIDZVDZ7rbvPchiyF2APjfih6rLvYPtr7U1Bsn4YCp-eUzozzyp077ZMLClU0mqkHhOf2Tl0Gw/s16000/14.png Method 7: Nishang All in One scriptNikhil Mittal added an AMSI bypass script in his well known tool “Nishang,” which can be found here. The script combines 6 different methods to bypass AMSI under one run. These are:___________________________
@hacking_Attack
@Hacking_Video

automatically will bypass AMSI using a valid method. For example, here WMF5 autologging bypass has worked. This method unloads AMSI from the current terminal and bypasses it.Import-Module .\nishang.ps1
Invoke-AmsiBypass -Verbose
“invoke-mimikatz”https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgANKgHRkKzjJVUyf8oF7ICaDcN3cDPS86kn9TnMOR5A7ZALQL6e1CIdaMbTsZcNxMX0oCEWn62eHLUHvHGv-tSMfSL1RFNNLKCsuvetLiFSg_aYpbAomJnHLfkLMRTZaR7u6cmLa6dTbHWVLTOGHLFQjuoj47fwQnsfa9sgIqpkWVaKrHrPiAFJOZqrA/s16000/15.png ConclusionIn this article, we talked about the basics of AMSI, how to use them in a program, workflow and 7 ways to bypass them. It is to be noted that there are more ways than shown here but the aim of the article was to talk about most-widely known 7 methods to bypass AMSI and how this AMSI evasion game has developed over time and how complexity has only increased. Hope you liked the article. Thanks for reading.___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
how do hackers know what they're hacking into?

Let's say there is a building with lots of computers in it, the hacker wants to hack into specifically the computer in the center of the room, how does he identify that computer and find his way into it on the computer terminal? Each computer has an IP but how could he know which computer belongs to which IP or address to hack his target computer? If he finds an IP, how does he identify that it belongs to the computer in the center of the room?

submitted by /u/Electronic_Ad_5076
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Completely overwhelmed by Pico CTF.

This might be laughable but pico ctf is very hard. I’m in high school and we’ve been learning Java for the past 3 years. I started using Picos resource and started in the general knowledge tab. Went through everything in depth and was very motivated with myself after becoming proficient in ssh and basic netcat. Then tried practice and it was to much, learning php object injection, cryptography all while finishing high school seems impossibly hard. How do I overcome this?

submitted by /u/StunningTradition483
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video