Good day, everyone! This is my second article, this time on DOM XSS. An open redirection vulnerability was escalated to DOM XSS. If you…Continue reading on Medium » (https://medium.com/@mohameddhanish98/a-story-of-dom-xss-852b6ed3bb5f?source=rss------bug_bounty-5)

Bug Bounty Diaries #2
https://medium.com/@noli.mtz/bug-bounty-diaries-2-44f6ae34aecd?source=rss------bug_bounty-5

Hi guys! I’m back with a new blog and this is great because again… I learn a lot of things, specially about DNS, IP and things like that.Continue reading on Medium » (https://medium.com/@noli.mtz/bug-bounty-diaries-2-44f6ae34aecd?source=rss------bug_bounty-5)

Hacking on Medium
Cyber Apocalypse CTF 2022 — HackTheBox

https://cdn-images-1.medium.com/max/1200/0*pCzUXZXZcLlwKo3d.jpg
Writeup 01: Web Challenges

Continue reading on System Weakness »

Hacking on Medium
APK Decompile

https://cdn-images-1.medium.com/max/1275/1*JcFVAPrCrkQAeRhVZKZAQQ.png
Herkese merhabalar, bugün sizlerle gizem dolu bir konuyu ele alacağız.

Continue reading on IBTech »

Hacking on Medium
Bug Bounty Diaries #2

https://cdn-images-1.medium.com/max/1851/1*CQ6Cv9ckIIyoZqcZdRYMkQ.png
Hi guys! I’m back with a new blog and this is great because again… I learn a lot of things, specially about DNS, IP and things like that.

Continue reading on Medium »

Hacking on Medium
Stored XSS and HTML Injection in United Nations Web Application

https://cdn-images-1.medium.com/max/640/1*nU79-qczOJemVkPDEO-Ywg.jpeg
Hello guys. I am happy to be back after having some stress and no enough time for Bug Bounty.

Continue reading on Medium »

Hacking on Medium
OWASP — UnCrackable Level 1

https://cdn-images-1.medium.com/max/1010/0*La04Rx_Y1jxWgwPg.png
Uncrackable Leve 1 is a masterpiece of Bernhard Mueller hacker, it is used all around the world to teach 101 Mobile Security.

Continue reading on Medium »

Hacking on Medium
Los sitios web de phishing ahora usan chatbots para robar sus credenciales

https://cdn-images-1.medium.com/max/1599/0*DdNdpCSuJIp34AmH
PUBLICADO EN 19 MAYO, 2022POR EHACKING

Continue reading on Medium »

Hacking on Medium
Piratas informáticos de Lazarus apuntan a los servidores VMware con exploits Log4Shell

https://cdn-images-1.medium.com/max/1449/0*tLa9Pbj7F3T86bvA
PUBLICADO EN 19 MAYO, 2022POR EHACKING

Continue reading on Medium »

KitPloit - PenTest Tools!
C2concealer - Command Line Tool That Generates Randomized C2 Malleable Profiles For Use In Cobalt Strike

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhC8Xb8c0bus4hJS4mtBThLT-GVrwqaY5gNbO7xR4DmP1FYTiExCe9OKCH0AYKJgxJvsRvJ1nG2kDUUHHPCJlqdGVnx9iKYw-CSFCG8PmYnrJy0-HiG2kviLXdQQQMmkTO6aMv2igTqnlziiI-CHFu0tzukYIkcs2myAGYHvo1VUhjR8A195h06I25O/w640-h342/cobalt_strike.png C2concealer is a command line tool that generates randomized C2 malleable profiles for use in Cobalt Strike. Installationchmod u+x install.sh
./install.shBuilding Docker imagedocker build -t C2concealer .Running with Dockerdocker container run -it -v <cobalt_strike_location:/usr/share/cobaltstrike/ C2concealer --hostname google.com --variant 3Example UsageUsage:
$ C2concealer --hostname google.com --variant 3

Flags:

(optional)
--hostname
The hostname used in HTTP client and server side settings. Default is None.
--variant
An integer defining the number of HTTP client/server variants to generate.
Recommend between 1 and 5. Max 10.Example Console Outputroot@kali:~# C2concealer --variant 1 --hostname google.com
[i] Searching for the c2lint tool on your system (part of Cobalt Strike). Might take 10-20 seconds.
[i] Found c2lint in the /opt/cobaltstrike/c2lint directory.

Choose an SSL option:
1. Self-signed SSL cert (just input a few details)
2. LetsEncrypt SSL cert (requies a temporary A record for the relevant domain to be pointed to this machine)
3. Existing keystore
4. No SSL

[?] Option [1/2/3/4]:Tip: Always use an SSL certificate. Preferably a cert from LetsEncrypt or similar.

Tip: HTTP Variants allow you to select different IOCs for http traffic on different beacons. Recommend a value of at least 1. How it worksWe poured over the Cobalt Strike documentation and defined ranges of values that would make sense for each profile attribute. Sometimes that data is as simple as a random integer within some range and other times we need to pick a random value from a python dictionary. Either way, we started tool creation with defining the data that would make a valid profile.

Then we divided each malleable profile section (or block) into a separate .py file, which contains the logic to draw random appropriate values for each attribute and then output a formatted string for that profile block. We concatenate all profile blocks together, run a few quick consistency checks and then run the profile through the Cobalt Strike linter (c2lint). The output is a profile that should work for your engagements. We always recommend testing the profile (including process injection and spawning) prior to running a campaign.

If you're looking into the code, we recommend starting with these two files: /C2concealer/main.py and /C2concealer/profile.py. After reviewing the comments, check out individuals profile block generators in the folder: /C2concealer/components. Customizing the toolThis is crucial. This is an open sourced version of a tool we've been using privately for about a year. Our private repo has several additional IOCs and a completely different data set. While running the tool provides an excellent start for building a Cobalt Strike malleable profile, we recommend digging into the following areas to customize the data that is randomly populating the tool:

/C2concealer/data/

* dns.py (customize the dns subdomains)
* file_type_prepend.py (customize how http-get-server repsonses look ... aka c2 control instructions)
* params.py (two dictionaries containing common parameter names and a generic wordlist)
* post_ex.py (spawn_to process list...definitely change this one)
* reg_headers.py (typical http headers like user-agent and server)
* smb.py (smb pipenames for use when comms go over smb)
* stage.py (data for changing IOCs related to the [...]