Hacking on Medium
Tipos de Malware

https://cdn-images-1.medium.com/max/713/1*ch8qK5PONxZ4s0iL8y_a0g.png
Conforme falei no artigo O que é um malware? os três malware mais comuns são: vírus, cavalos de Tróia e worm (verme). Neste artigo cada um…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Web Pentesting Resources

[ How to Start? ] :
0. Do you Want to Know The step-by-step Path to Learn Hacking? = “ There is No step-by-step Path To Learn Hacking & it…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
BEANSTALK HACK ANALYSIS & POC

https://cdn-images-1.medium.com/max/1100/1*nSL5js-KzcB9pP6IDH3rWQ.png
Introduction

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
2 hours of fun completing the game. 20+ hours of fun hacking the game.

https://cdn-images-1.medium.com/max/1280/0*ECFLhGc_7baTqHqi.png
A bit of curiosity can lead to a lot of learning.

Continue reading on Level Up Coding »

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
O365-Doppelganger - A Quick Handy Script To Harvest Credentials Off Of A User During A Red Team And Get Execution Of A File From The User

https://blogger.googleusercontent.com/img/a/AVvXsEjnu3bza5lczEWmdNm_mbRAmPz8iZzGLMzZeSZO3SLYXCqAC4_K3KKvkNMCRRERCxacnPbhVv8qsCmNtWSmnlvW1OWWAUf2KSZqK918RFZHtHKT7tJ_TUJj37GhbBxX09oeKrilNNluGpFsKubEHr6oblJtomdMLntrZvO-FF7Lo7EojPY-diJtabJI=w640-h302 O365-Doppelganger is NOT a replacement for hardcore phishing activities. There are several other tools which perform OAuth and OTA capture which is not the aim of O365-Doppelganger.

O365-Doppelganger is a quick handy script to harvest credentials of a user during Red Teams. This repository is a quick hack of one of my old red team engagement scripts which I've used several times to capture credentials and use them for making windows access tokens for lateral movement. This code repository basically performs the below tasks:

* The GO code:
* hosts the O365 portal (can be replaced with anything in the index.html). It is recommended to use a valid cert and key file (LetsEncrypt?) instead of the one provided in the directory
* logs all user activity on the web portal in a seperate log file on the server
* logs the credentials captured in a seperate log file on the server
* can also be used to return a valid file to the user post capturing the credentials. This can be done by replacing the file named MacroFile.docin the current directory and replacing it with HTA/ISO/MSI or anything else that the phisher wants. Theres also a small code in the GO code which would need to be modified to specify the user's file name which needs to be returned: content, err := ioutil.ReadFile("MacroFile.doc")* Once modified, the target user when enters a valid email ID and password will be asked to save the above file. This file name can be changed using the below code in the GO file: response.Header().Set("Content-Disposition", "attachment; filename=Darkvortex Privacy Policy.doc")* The index.html code:
*
renders an O365 portal alongside a small regex which checks for a given user's domain name to make it look a bit more legit. The regex code looks like this: pattern="^([a-zA-Z0-9_\-\.]+)@darkvortex\.([a-zA-Z]{2,5})$" title=" Valid darkvortex email ID"*
The above regex checks if the given username contains a full valid email address else it will prompt the user to enter a correct username as follows: https://blogger.googleusercontent.com/img/a/AVvXsEjU3La_fI_Zyd3qLcBP4MIwv8any_wikGP8HS9Z__igRFv9CqQnKXjZ0QbtYu9aCmTwtZgTOwQGujGlkKOiLiwym-mVNZbuhFWAI9qD8kuer8yFR7wZCDLrulWpA09PIS7wO_0amFFsSM0qqROXWqrWC1_cmo9VJbRLNo8YOf7jv6xzqMMrAVJsMrxx=w640-h302 *
This same check is also performed in the GO code so that user's do not use something like burp to bypass the check: if strings.Contains(value[i], "@darkvortex") {*
It's recommended to change the name darkvortex in the index.html file to your own target company name.

*
Once the correct email ID and the password is entered, the user will be asked to save the provided file as follows: https://blogger.googleusercontent.com/img/a/AVvXsEjnu3bza5lczEWmdNm_mbRAmPz8iZzGLMzZeSZO3SLYXCqAC4_K3KKvkNMCRRERCxacnPbhVv8qsCmNtWSmnlvW1OWWAUf2KSZqK918RFZHtHKT7tJ_TUJj37GhbBxX09oeKrilNNluGpFsKubEHr6oblJtomdMLntrZvO-FF7Lo7EojPY-diJtabJI=w640-h302 Download O365-Doppelganger

___________________________
@hacking_Attack
@Hacking_Video

Bypassing WAF for $2222
https://divyanshsharma2401.medium.com/bypassing-waf-for-2222-f99b80cfdb9b?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

I know it’s been a very long time since I last published my article on how I was able to find RCE on Bentley systems. For the last 1–1.5…Continue reading on Medium » (https://divyanshsharma2401.medium.com/bypassing-waf-for-2222-f99b80cfdb9b?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

You need to hear this if you are new/want to start bug hunting
https://mokhansec.medium.com/you-need-to-hear-this-if-you-are-new-want-to-start-bug-hunting-6b5b5c8ba8d0?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hello everyone,Continue reading on Medium » (https://mokhansec.medium.com/you-need-to-hear-this-if-you-are-new-want-to-start-bug-hunting-6b5b5c8ba8d0?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Passive Reconnaissance Using Only Kali Terminal | Infosec |
https://medium.com/@Medusa0xf/passive-reconnaissance-using-only-kali-terminal-infosec-9e1e991ff1d7?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Disclaimer: This blog is only for educational purpose.Continue reading on Medium » (https://medium.com/@Medusa0xf/passive-reconnaissance-using-only-kali-terminal-infosec-9e1e991ff1d7?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
5-Year Vulnerability Trends Are Both Surprising and Sadly Predictable

What 5,800+ pentests show us: Companies have been struggling with the same known and preventable security bugs year over year. Bandwidth stands at the heart of the problem.

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Mainly for Czech speaking people (and it's not my work)

submitted by /u/Ejave
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Pentesting vs. Pentesting
https://www.reddit.com/r/Pentesting/comments/udauts/pentesting_vs_pentesting/

This will be lengthy and philosophical, though my thoughts are all over the place as I think I am heavily effected by Dunning-Krugers, so it would be great to hear thoughts from someone that went through this. Anyways, please bare with me and just contribute if you are interested in such discusison. I have been asking some of these questions myself and I want to discuss it with people that also thought about the same. I have recently watched some videos: https://www.youtube.com/watch?v=sXThugPk_zA - Video on the topic. https://www.youtube.com/watch?v=wv2YhT89LDU - Do you need programming to be a hacker? https://www.youtube.com/watch?v=rfjV8XukxO8 https://www.youtube.com/watch?v=2TofunAI6fU - His path of studies. https://www.youtube.com/watch?v=Lus7aNf2xDg https://www.youtube.com/watch?v=wDQ0KXR4D7A - The other kind of pentester. In the first video LiveOverflow compares Pentesting and AppSec, he basically says that the term Pentesting is used usually for both, but in EU is more of AppSec, where in US is more Pentesting usually Red Teaming. He also gives a good comparison that in AppSec usually you come over from being a developer, where Pentesters origin from Networking/Sysadmin roles. In the second video he talks about how you usually can go by without programming knowledge in web app hacking/bug bounties, because the web has HTTP as a standardized protocol web apps and browsers got to speak that protocol, so different languages produce same kind of issues and this where the market for tools and jobs for interpreting them is born and thus knowledge of programming languages becomes not needed. At least this is how I am interpretting the whole thing. Then he has a video where he talks how he started in hacking, which is a whole different world than learning fundamentals of networking and such, but this would be normal, as this guy is focused more on the low end coding side, then he supplimented that in CS college, but also OSCP, yet he doesn't work as a programmer who uses tools as metasploit. Then the last video, we have someone like The Cyber Mentor, which he basically talks about red team type of pentests, mostly using tools or physical hacking and social engineering. So I just cannot understand few things. LO basically says US Pentesters usually focuses on breaking into corporations, EU Pentesters are usually AppSec and they break into apps that can affect customers that use those apps. Naturally EU vs US because of the job markets, but you get the point. Which means that only AppSec deals with code auditing, which means that only AppSec leads to vulnerability research, CVE, zero days, which means that AppSec is the driving force that is building up Pentesters who use those tools. So would it be fair to say that AppSec can be a profession meters, yet not inches wide and miles deep, while Pentesting is the exact opposite. Then can we say that Pentesting usually fit people that love to learn new stuff all the time, but also do not go truly deep into how something works? Which is basically the opposite of what hacking is considered to be, which is breaking stuff down to learn exactly how they work and potentially manipulate them to work your way? Now you could say that a pentester can learn how the malware in question works, he already knows how to break it, if he is skilled enough (knows programming languages and methodologies, can know how they actually work), and manipulate it, but he is more of a Doctor and if he does know the programming language and methodologies then is he truly only a pentester? Now, code auditors and exploit developers and reverse engineers are closer to biochemist and in a way biochemists are the hackers, not the doctors, the very best doctors can understand the disease, they know how it works, they know what damage it can do, they can scan to diagnose them with the tools,

___________________________
@hacking_Attack
@Hacking_Video

machines, blood works, they can manipulate them again with the tools that biochemists make (pharmacuticals) and basically hack the body doing stuff that they ought to be doing. So being a doctor can be really fun, and maybe every great doctor should have decent enough of Dr. House in them, however they are not the guys who work on the molecular level on why something works the way it works, they can understand it figure connections out, but they are not creating anything new. So very skilled Pentesters are like Dr. House, they know all kinds of stuff, they can research them, they can put them in practice, with the right tools and methodologies for diagnosis they can test them and even again with the right tools they can manipulate and treat them, in a way they are fiddling with hacking, but without the biochemistry, there will be nothing but guessing, there will be no tools and methods to diagnose and no tools to treat, there will be some hacking, but no science. This doesn't mean that Dr. House is not awesome, it just means is different. In the real world I believe the number of people that are as good and deep in their knowledge as pentesters as Dr. House is as a doctor, is very few, just like in the real world where most doctors are very superficial, specialists included. So I am not talking about those people, I am talking about the Dr. Houses of pentesting, people that truly learn, research and implement and test and are curious, people that know a lot about all kinds of technologies and they know how and when to use each new tool to counter anything that counters achieving their goal, however they are not the guys working on the theorems, they are practical, they apply and they know how and when to apply it, but they do not discover it. While there can be great difference between two pentesters, it seems that AppSec allows less of that, just because tools are not the primary use, the skill ceiling can be higher of course. Pentesting can be a spectrum of Dr. House to script kiddie practitioners. Reading this subreddit there are a lot of people mentioning that they learn each day, I first wondered to ask, what do you guys learn each day? Do you just update yourself on the latest CVEs or is there more to it? Or maybe all your free time you spent learning of low level code, binary exploitation, work on embedded hardware, solder, lockpick, do you do CTFs - surely those are interesting, but not as applicable in day to day job. What exactly do you mean when you say you never stop studying and it is a 40 hour work week, but not lifestyle? Maybe I should post a poll about this very question, because if you do work as a pentester for a few years, I believe you can soak up the new information that you need to know the next day at work in 30 minutes average at best and/or learn more during your that work day. It seems that in a perfect world, I would be interested in both AppSec and Pentesting, to me it seems they compliment each other in terms of the hacker mindset, I cannot understand how LO says that he is not interested in checking tools at metasploit regularly, but also cannot understand if someone never studies binary exploitation. I am not there yet, so maybe I am too new too understand that it is not a natural progression and it truly is just different as I mentioned earlier, maybe I am just more into AppSec and I do not know that as I have not started with, or maybe Pentesting is what I truly like and I just am curious about the basics of low level code and nothing beyond, at last I have always been interested in new technologies and learning ways to use them efficiently and differently, so can I truly throw that out Maybe I know too little to understand all of this? Maybe Pentesting people are truly the hacker type of people, while AppSec guys would be the more academic research type of people that want to dwell into particular problems and find ways around them. Maybe I cannot categorize all of this and I am wasting

___________________________
@hacking_Attack
@Hacking_Video