Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
Understanding the difference

Can anyone explain to me the difference between auxiliary modules and exploits ? They both seem to do the same for me. I can't understand the difference.

submitted by /u/JeppNeb
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Understanding the difference

Can anyone explain to me the difference between auxiliary modules and exploits ? They both seem to do the same for me. I can't understand the...

6 viewsedited 12:58

hacking: security in practice
Privilege Escalation methodologies??

I've done a lot of CTFs and I'd always do the foothold part in my team but I was thinking about looking into priv esc. So I tried doing an easy level box on vulnhub all by myself. Got a user shell in first 15 mins but i blanked out on the escalation part.

I tried using linpeas but it's too fussy and regardless tried checking the files and folders it points out. Still nothing.

What's the best way to or let's say a traditional method to look for loopholes and escalate privileges? Or what parameters should you look for (eg. The current Linux distro or version) ? And what should you know prior to priv esc except a Linux CLI?

submitted by /u/h4cks1n
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Privilege Escalation methodologies??

I've done a lot of CTFs and I'd always do the foothold part in my team but I was thinking about looking into priv esc. So I tried doing an easy...

6 viewsedited 12:58

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
Why is my compiler generating so much crap?

Hi, Not sure if this is the right sub but trying my shot here, as r/ReverseEngineering doesn't allow text posts.

I am a beginner in reverse engineering and I'm using VS to compile C/cpp and then open the exes in ghidra to learn from my code.

The problem I'm encountering is that it seems the compiler adds a shitton of library functions, mostly related to C runtime such as __scrt_acquire_startup_lock, __scrt_is_ucrt_dll_in_use and more. Over 99% of the resulting code is just bullcrap, not to mention it really messes up the analysis workflow, making it much harder to find my main() from the entry point method.

Now, I've seen a lot of reverse challenges in the past and didn't encounter this. How do I go about compiling code that is readable via disassesmbly?

Thanks :)

submitted by /u/Altiverses
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Why is my compiler generating so much crap?

Hi, Not sure if this is the right sub but trying my shot here, as r/ReverseEngineering doesn't allow text posts. I am a beginner in reverse...

5 viewsedited 12:58

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
Restricted mode on a school laptop

So my school gave me a laptop and it is restricted by an administrator, anyone know how to disable it? Thanks

submitted by /u/Admirable_Scholar163
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Restricted mode on a school laptop

So my school gave me a laptop and it is restricted by an administrator, anyone know how to disable it? Thanks

5 viewsedited 12:59

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
Build a SOC LAB

Hey guys!

I have a project where i need to build a LAB for a SOC (security operation center) with infra as code (vagrant) and then launch some attacks on it and investigate their behavior's with Splunk.

So i would like from peoples that already worked or have expérience in this, if you Can recommand some good ressources that will help me see some examples of SOC architectures that i Can deploy and some interesting attacks to investigate.

Cheers

submitted by /u/Adel_Maestro
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Build a SOC LAB

Hey guys! I have a project where i need to build a LAB for a SOC (security operation center) with infra as code (vagrant) and then launch some...

6 viewsedited 12:59

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
Remote access microphone. Windows 10. Full domain access.

Hi, I would like to access a remote pc microphone, the pc is running windows 10 and I have full domain elevations. Any ideas ? ( without any software installed on the target machine )

submitted by /u/morcove
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Remote access microphone. Windows 10. Full domain access.

Hi, I would like to access a remote pc microphone, the pc is running windows 10 and I have full domain elevations. Any ideas ? ( without any...

7 viewsedited 12:59

Hacking Articles Tips Tricks Videos Tutorials

NimPackt-v1 - Nim-based Assembly Packer And Shellcode Loader For Opsec And Profit
http://www.kitploit.com/2022/04/nimpackt-v1-nim-based-assembly-packer.html

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest & Hacking Tools

NimPackt-v1 - Nim-based Assembly Packer And Shellcode Loader For Opsec And Profit

7 viewsedited 13:27

Hacking Articles Tips Tricks Videos Tutorials

7 views13:27

Hacking Articles Tips Tricks Videos Tutorials

By Cas van Cooten (@chvancooten (https://twitter.com/chvancooten)) With special thanks to Marcello Salvati (@byt3bl33der (https://twitter.com/byt3bl33d3r)) and Fabian Mosch (@S3cur3Th1sSh1t (https://twitter.com/ShitSecure)) Description Update: NimPackt-v1 is among the worst code I have ever written (I was just starting out learning Nim). Because of this, I started on a full rewrite of NimPackt, dubbed 'NimPackt-NG' (currently still private). With this re-write, I decided to open-source the old branch ("NimPackt-v1"). As such, this branch is no longer maintained and comes without any form of warranty or support. PRs are always welcome, of course :) NimPackt is a Nim-based packer for .NET (C#) executables and shellcode targeting Windows. It automatically wraps the payload in a Nim binary that is compiled to Native C and as such harder to detect and reverse engineer. There are two main execution methods: Execute-Assembly re-packs a .NET executable and runs it, optionally applying evasive measures such as API unhooking, AMSI patching, or disabling ETW. Shinject takes raw a .bin file with raw, position-independent shellcode and executes it locally or in a remote process, optionally using direct syscalls to trigger the shellcode or patching API hooks to evade EDR. Currently, NimPackt has the following features. Uses static syscalls to patch execute to evade EDR Unhooks user-mode APIs for spawned thread by refreshing NTDLL.dll using ShellyCoat (https://github.com/slaeryan/AQUARMOURY/tree/master/Shellycoat) Patches Event Tracing for Windows (ETW) Patches the Anti-Malware Scan Interface (AMSI) AES-encrypts payload with random key to prevent static analysis (https://www.kitploit.com/search/label/Static%20Analysis) or fingerprinting Compiles to exe or dll Supports cross-platform compilation (from both Linux and Windows) Integrates with CobaltStrike (https://www.kitploit.com/search/label/CobaltStrike) for ezpz payload generation (https://www.kitploit.com/search/label/Payload%20Generation)  A great source for C#-based binaries for offensive tooling can be found here (https://github.com/Flangvik/SharpCollection). It is highly recommended to compile the C# binaries yourself. Even though embedded binaries (https://www.kitploit.com/search/label/Embedded%20Binaries) are encrypted, you should obfuscate sensitive binaries (such as Mimikatz) to lower the risk of detection.
Installation If you are having issues compiling the binary with Syscalls, try downgrading your GCC to version 8.1.0 (especially on Windows). ALWAYS test generated payloads! On Linux, simply install the required packages and use the Nimble package installer to install the required packages and Python libraries. pycryptodome argparse nimble install winim nimcrypto">sudo apt install -y python3 mingw-w64 nim
pip3 install pycryptodome argparse
nimble install winim nimcrypto
On Windows, execute the Nim installer from here (https://nim-lang.org/install_windows.html). Make sure to install mingw and set the path values correctly using the provided finish.exe utility. If you don't have Python3 install that, then install the required packages as follows. nimble install winim nimcrypto
pip3 install pycryptodome argparse
Docker The Docker image chvancooten/nimbuild (https://hub.docker.com/r/chvancooten/nimbuild) can be used to compile NimPackt-v1 binaries. Using Docker is easy and avoids dependency issues, as all required dependencies are pre-installed in this container. To use it, install Docker for your OS and ensure the input shellcode is in the current folder. Then, start the compilation in a container as follows. docker run --rm -v `pwd`:/usr/src/np -w /usr/src/np chvancooten/nimbuild python3 NimPackt.py -e shinject -i sc.bin CobaltStrike Plugin To install the CobaltStrike plugin, select Cobalt Strike -> Script Manager from the menu bar, and select Load. Make sure to load the .cna file from it's original location, otherwise it won't be able

___________________________
@hacking_Attack
@Hacking_Video

X (formerly Twitter)

Cas van Cooten (@chvancooten) on X

@Offensys Co-Founder || Benevolently malicious offensive security enthusiast || OffSec Developer & Malware Linguist

9 viewsedited 13:27

About

Blog

Apps

Platform