Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
Shell code used in payloads

Why is shell code allways used to write payloads?

submitted by /u/dannova23
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Shell code used in payloads

Why is shell code allways used to write payloads?

5 viewsedited 10:29

hacking: security in practice
Nmap with Ping and Firewall

Hey guys,

i am scanning a server within a Network with nmap. If i use my machine (not in the network) it shows me 3 open ports the rest is blocked by the firewall. If i use a VM within the Network all 1000 ports seems blocked. But if i ping the machine and scan then it shows the expected output of 15 open ports.

Does anyone has an idea why the intern scan is blocked but works after i ping the machine with it?

submitted by /u/magnacrio
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Nmap with Ping and Firewall

Hey guys, i am scanning a server within a Network with nmap. If i use my machine (not in the network) it shows me 3 open ports the rest...

5 viewsedited 10:29

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
Trying to remember web hacking challenge

I am trying to remember a web hacking challenge/practise site but am failing to find it again.

It was set up as a series of servers running on different subdomains (something like p1.something.com p2.something.com etc) and the goal in each server is to find the login details for the next. You mainly interact with the site through http in a browser. I remember most early tasks revolving around exploiting some classic injection weaknesses through forms or url parameters, at one point being able to inject and execute linux terminal commands.

It was not some kind of community site or anything of the like. It was a really plain site with only these tasks and an introductory page.

Does anybody know of this site? Has it been discontinued?

submitted by /u/Loewenpower
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Trying to remember web hacking challenge

I am trying to remember a web hacking challenge/practise site but am failing to find it again. It was set up as a series of servers running on...

5 viewsedited 10:29

Hacking Articles Tips Tricks Videos Tutorials

5 views10:29

Hacking Articles Tips Tricks Videos Tutorials

Kali Linux Tutorials
LAZYPARIAH : A Tool For Generating Reverse Shell Payloads On The Fly

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials

LAZYPARIAH : A Tool For Generating Reverse Shell Payloads On The Fly

LAZYPARIAH is a simple and easily installable command-line tool written in pure Ruby that can be used during penetration tests and CTF.

5 viewsedited 10:29

Hacking Articles Tips Tricks Videos Tutorials

5 views10:29

Hacking Articles Tips Tricks Videos Tutorials

Photo

Kali Linux Tutorials
Casper-Fs : A Custom Hidden Linux Kernel Module Generator

Casper-fs is a custom Linux Kernel Module generator to work with resources to protect or hide a custom list of files. Each LKM has resources to protect or hide files following a custom list in the YAML rule file. Yes, not even the root has permission to see the files or make actions like edit and remove. The files only can be caught, edited, and deleted if the user sends a proper key to the custom device to liberate the action in the file system. OverviewThe first point, the user sends input to the Casper-FS the YAML file with rules to generate a custom LKM(Linux kernel module), each generated module works in the file system to protect and hide secret files (Not even the root has permission to see the file, only can see with a proper sending key to the custom device). This program has two principal functions: turning private files hidden. The second function is to protect confidential files to prevent reading, writing and removal.

The motivation: An attacker can read every file in your machine in a bad situation(if he got root). But if you have a Casper-fs custom module, the attacker will not find the hidden kernel module that has functions to protect your private data files such as logs and password vaults.

My beginning purpose at this project is to protect my server, which is to protect my friends’ machines. When I talk to friends, I say peoples that don’t know how to write low-level code. Using the Casper-fs, you can generate your custom kernel module to protect your secret files. The low-level programmer can write new templates for modules etc. The first step, understand before the run.Verify if the kernel version is 3.x, 4.x, or 5.x:

$ uname -r

Clone the repository

$ git clone https://github.com/CoolerVoid/casper-fs

Enter the folder and install python3 modules:

$ cd casper-fs/module_generator
$ sudo python3 -m pip install -r requirements.txt

Edit your file rules in directory module_generator/rules/fs-rules.yaml, the python scripts, use that file to generate a new casper-fs custom module.

$ cat module_generator/rules/fs-rules.yaml
binary_name: casperfs
module_name: Casperfs
unhide_module_key: AbraKadabra
hide_module_key: Shazam
fake_device_name: usb15
unhide-hide-file-key: Alakazam
unprotect-protect-file-key: Sesame
fs-rules:
hidden:
1: secret.txt
2: my_vault.db
protect:
1: backup_httpd.log

The array is hidden and array protected. You can insert a lot of the elements of another file on context, for example:

protect:
1: backup_httpd.log
2: secret_img.iso
3: secret_file.img
4: secret_file2.img
5: secret_file3.img

If you want to study the static code to generate, look at the directory “templates” content. The second step, generate your module.If you want to generate a kernel module following your YAML file of rules, follow that command:

$ python3 casper-fs-gen.py –rules rules/fs-rules.yaml The third step, install your module.If you use Fedora Linux, install kernel packages for the developer:

dnf update
dnf install kernel-headers.x86_64 kernel-modules.x86_64 kernel.x86_64 kernel-devel kmod

On Ubuntu Linux:

apt install linux-headers-generic gcc make

To test module:

cd output; make clean; make
insmod casperfs.ko The fourth step runs your custom module.* The password to turn casper-fs module visible for lsmod is the key “Shazam”.
* The password to turn the casper-fs invisible is “AbraKadabra”.
* The password to turn the secret files in hidden is “Alakazam”, the same to turn to unhidden.
* The password to protect files or unprotect is “Sesame”.

You need to send the password for your fake device, “usb15” for example, to test hidden and unhidden resources on the file system:

$ touch secret.txt
$ ls
— no results–
$ echo “Alakazam” > /dev/usb15
$ ls
secret.txt
$ echo “Alakazam” > /dev/usb15
$ ls
— no results–

Not[...]

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials

Casper-Fs : A Custom Hidden Linux Kernel Module Generator

Casper-fs is a custom Linux Kernel Module generator to work with resources to protect or hide a custom list of files.

9 viewsedited 10:29

Hacking Articles Tips Tricks Videos Tutorials

Kali Linux Tutorials Casper-Fs : A Custom Hidden Linux Kernel Module Generator Casper-fs is a custom Linux Kernel Module generator to work with resources to protect or hide a custom list of files. Each LKM has resources to protect or hide files following…

e You need to turn casperfs visible at the “lsmod” command. Need this action before removing module

rmmod casperfs
rmmod: ERROR: ../libkmod/libkmod-module.c:799 kmod_module_remove_module() could not remove ‘casperfs’: No such file or directory
rmmod: ERROR: could not remove module casperfs: No such file or directory
lsmod | grep casper
echo “Shazam” > /dev/usb15
lsmod | grep casper
casperfs
rmmod casperfs Download

___________________________
@hacking_Attack
@Hacking_Video

11 viewsedited 10:29

Hacking Articles Tips Tricks Videos Tutorials

CRLF (%0D%0A) Injection

Hello Guys! I am vasu a bug bounty learnerContinue reading on Medium »
Read more...

11 views11:33

Hacking Articles Tips Tricks Videos Tutorials

11 views11:39

Hacking Articles Tips Tricks Videos Tutorials

Black Hat Ethical Hacking
Recon Tool: Dorks collections list

___________________________
@hacking_Attack
@Hacking_Video

Black Hat Ethical Hacking

Recon Tool: Dorks collections list | Black Hat Ethical Hacking

Google Dorking is a technique used by investigative reporting organizations, security auditors to query search engines in order to find hidden information.

16 viewsedited 11:39