Hacking on Medium
INFORMATION SECURITY SOFTWARE DEVELOPMENT: DEVELOPING YOUR OWN COMPUTER HACKING TOOLS USING PYTHON

https://cdn-images-1.medium.com/max/1366/1*dlahuOMGY7Y8g4lrzqwJ7Q.png
INTRODUCTION

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Pixel Challenge 2022

https://cdn-images-1.medium.com/max/742/1*vPAQaqikcjBAYgE6JxJpPg.png
Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
The Hack Pursuit — P1

https://cdn-images-1.medium.com/max/600/1*oiinW6ChcnN-GZCPylLKog.png
Dear WANAKA Farm Valued Users,

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
REvil reloaded? A notorious Russia-based ransomware group is back

https://cdn-images-1.medium.com/max/2500/1*UQthSjo4oobo3sfT5T_UGA.png
Russian authorities noisily arrested 14 alleged members of the REvil ransomware gang in January after a U.S. government request. So why is…

Continue reading on README_ »

___________________________
@hacking_Attack
@Hacking_Video

Lupo - Malware IOC Extractor. Debugging Module For Malware Analysis Automation
http://www.kitploit.com/2022/04/lupo-malware-ioc-extractor-debugging.html

___________________________
@hacking_Attack
@Hacking_Video

Debugging module for Malware Analysis (https://www.kitploit.com/search/label/Malware%20Analysis) Automation For a step by step post on how to use Lupo, with images and instructions, please see this post: https://medium.com/@vishal_thakur/lupo-malware-ioc-extractor-cc86ae76b85d Introduction Working on security incidents that involve malware, we come across situations on a regular basis where we feel the need to automate parts of the analysis (https://www.kitploit.com/search/label/Analysis) process as complete manual analysis is, more often than not, not possible for every case due to many factors (time, skills, scale etc.). I wrote Lupo mainly to automate and accelerate the process as much as possible. Lupo is a dynamic analysis (https://www.kitploit.com/search/label/Dynamic%20Analysis) tool that can be used as a module with the debugger. The first version works with the popular Windows Debugger — WinDbg. I’ll release versions for other debuggers in the future. The way the tool works is pretty straight forward. You load Lupo into the debugger and then execute it. It runs through the malware and collects predefined IOC and writes them to a text file on the disk. You can then use this information to contain and neutralise malware campaigns or simply respond to the security incident that you are working on. I’ll give some more details on the tool itself but not too much to the inner workings of it, at least not here. We need to keep in mind that the malware authors are smart enough to quickly tweak the code to create problems for us! The tool is written in C++ and uses the Windows Debugging (https://www.kitploit.com/search/label/Debugging) framework to execute the code. It can be used with WinDbg as a ‘plugin’ in order to help automate the analysis process. If you want to know more about the tool, feel free to contact me or comment below. Download Download all the DLLs from this repo. You also need all the VC++ dependencies, the easiest way to do that is to install Visual Studio (Community version works) and select all the C++ components. Usage Using the tool is very easy. It works in this way: Save the Lupo extension in your extensions dir (default: sdk\samples\exts subdirectory of the installation directory). You can also define the extensions path by using the command ‘.extpath[+] [Directory[;…]]’. Start the debugger Attach the process to be debugged (malware in this case) Load Lupo using the ‘.load’ command. Execute Lupo by using this command: ‘lupo.go’ All results will be displayed in the console and also written to a new textfile on the disk. Path and name of this textfile will be displayed in console as well. All done! You can optionally use the results from Lupo with this other tool that I wrote — Ragno, to advance your research and response by aggregating OSINT for the wider footprint (https://www.kitploit.com/search/label/Footprint) of the campaign you are possibly dealing with. You can read about Ragno in another post here: https://medium.com/@vishal_thakur/introducing-ragno-ioc-multiplier-9b75834353bb

Download Lupo (https://github.com/malienist/lupo)

___________________________
@hacking_Attack
@Hacking_Video

Black Hat Ethical Hacking
OSINT Tool: MOSINT

OSINT Tool: MOSINTPost Views: 14
Premium Content https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/Patreon-2.png Subscribe to Patreon to watch this episode.
Reading Time: 3 Minutes

OSINT Tool: MOSINT GitHub Link
Open Source Intelligence gathering is a very important step when it comes to Recon as a Pentester or part of the Red Team. Sometimes all you get is an email, so you want to gather all the important info you can get, as accurate and fast as possible. What is the MOSINTMOSINT by alpkeskin, is an OSINT Tool for emails. It helps you gather information about the target email. Features:* Email validation
* Check social accounts with Socialscan and Holehe
* Check data breaches and password leaks
* Find related emails and domains
* Scan Pastebin and Throwbin Dumps
* Google Search
* DNS Lookup
* IP Lookup
* Output to text file
See Also: Complete Offensive Security and Ethical Hacking Course Services (APIs):[not required to run the program]

Service Function Status ipapi.co – Public More Information About Domain ✅ hunter.io – Public Related Emails ✅ 🔑 emailrep.io – Public Breached Sites Names ✅ 🔑 scylla.so – Public Database Leaks 🚧 breachdirectory.org – Public Password Leaks ✅ 🔑 Intelligence X Password Leaks ✅ 🔑
🔑 API key required For Use:* Save your API key in the keys.json
* Install Go and Python on your system
See Also: Recon Tool: ReconFTW Installation:git clone https://github.com/alpkeskin/mosint.gitcd mosintpip3 install -r requirements.txtUsage:you can type -h for help menu.
FLAGS DESCRIPTION ISREQUIRED -e Set target email Yes -verify Verify target email No -social Social scan for target email No -relateds Find related emails and domains with target email No -leaks Find password leaks for target email No -dumps Search pastebin dumps for target email No -domain More information about target email’s domain No -o Output to text file No -v Version of mosint No -h Help Menu No -all All features! No Example:go run main.go -e example@domain.com -allJust type -o for output file (.txt)
See Also: Recon Tool: Findomain Screen:https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Merch-1024x1024.png Recent Tools* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/findomain-90x90.png Recon Tool: Findomain24 hours ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/keethief-90x90.png Offensive Security Tool: KeeThief7 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/reconftw-90x90.png Recon Tool: ReconFTW1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/smap-demo-90x90.png Recon Tool: Smap2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/Proxmark3-90x90.png Offensive Security Tool: Proxmark33 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/boomerang-90x90.png Offensive Security Tool: Boomerang4 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/unknown-90x90.png Recon Tool: PSRecon4 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/SysWhispers3-90x90.png Offensive Security Tool: SysWhispers31 month ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/SwaggerHole-90x90.png Recon Tool: SwaggerHole1 month ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/uncover-90x90.png Recon Tool: Uncover1 month ago
The post OSINT Tool: MOSINT first appeared on Black Hat Ethical Hacking.

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
TOR Virtual Network Tunneling Tool 0.4.7.7

https://4.bp.blogspot.com/-hg5R_Iy9kqs/WWlu56TnyEI/AAAAAAAAIJM/rTW1_kDHOwg4grZYYDaMUD1TyZ2BewRDQCLcBGAs/s1600/h107.png
Tor is a network of virtual tunnels that allows people and groups to improve their privacy and security on the Internet. It also enables software developers to create new communication tools with built-in privacy features. It provides the foundation for a range of applications that allow organizations and individuals to share information over public networks without compromising their privacy. Individuals can use it to keep remote Websites from tracking them and their family members. They can also use it to connect to resources such as news sites or instant messaging services that are blocked by their local Internet service providers (ISPs). This is the source code release.

SHA-256 | 3e131158b52b9435d7e43d1c47ef288b96d005342cc44b8c950bb403851a5b44

Download
Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Take a Diversified Approach to Encryption

Encryption will break, so it's important to mix and layer different encryption methods.

Dark Reading: Attacks/Breaches
Ambient.ai Expands Computer Vision Capabilities for Better Building Security

The AI startup releases new threat signatures to expand the computer vision platform’s ability to identify potential physical security incidents from camera feeds.

___________________________
@hacking_Attack
@Hacking_Video

Trello From the Other Side: Tracking APT29 Phishing Campaigns
https://www.reddit.com/r/redteamsec/comments/uemp9j/trello_from_the_other_side_tracking_apt29/

submitted by /u/dmchell (https://www.reddit.com/user/dmchell)
[link] (https://www.mandiant.com/resources/tracking-apt29-phishing-campaigns) [comments] (https://www.reddit.com/r/redteamsec/comments/uemp9j/trello_from_the_other_side_tracking_apt29/)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Digits Forensics: Recover deleted photos from digital camera?

Hi everyone! Hope this is the right sub to ask. Honestly I'm out of ideas at this point. So, i have this digital Fujifilm camera and i've been saving all my photos on it without saving them all to a memory card. ( I know...) Long story short, i have deleted one that i didn't mean to. I tried Photorec, Recuva etc but none of them recognize the camera as storage space! Any ideas on programs or scrips that i could use to recover deleted files straight from q digital camera? Thank you, any suggestions would mean a lot to me!

submitted by /u/TheN1ght0w1
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
If a device is protected by encryption is it possible to copy that encryption and work on breaking it without the device itself? Trying to write something.

Basically the character need to break the encryption on a device in order to do things to it, but the device isn't stationary and he can't exactly follow it around, connected to it.

Bonus question - is there a program of some kind that would ordinarily be used to break encryption? Like... A decryption program?

I'd like this part of the story to make sense without making the mistake of trying to add too much detail that raises more questions or just making things up that make no sense.

submitted by /u/DryTheWets
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
at what point in learning do I feel like I know what I'm doing?

Imma be honest, I like learning about computers, I keep trying to learn more as often as I can. I'm trying my best not to be a script kiddie but I still feel like a script kiddie sometimes. I've been trying learn bash scripting lately and idk. Can somebody give me some direction on how to avoid being a script kiddie while learning "hacking"?

submitted by /u/False_Purple
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
What languages to use ?

I have 2 ongoing projects to better learn how to code especially in Python. I use Python to code a roguelike ASCII game even if Py is not the best language to make a game (there is libtcod which proper to roguelikes) Then I have a project to code a malware in order to learn how malwares work in general but I'm feeling a little alone in doing this bc I dont manage to know if Python is the easier way to code a malware

Is Python natively working on Linux since it is installed on most distros ?

Is it possible to also make the same malware working on Windows devices or have I to switch to another language such as C# ?

submitted by /u/VidarOdinsson
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video