Hacking on Medium
APK Decompile

https://cdn-images-1.medium.com/max/1275/1*JcFVAPrCrkQAeRhVZKZAQQ.png
Herkese merhabalar, bugün sizlerle gizem dolu bir konuyu ele alacağız.

Continue reading on IBTech »

Hacking on Medium
Bug Bounty Diaries #2

https://cdn-images-1.medium.com/max/1851/1*CQ6Cv9ckIIyoZqcZdRYMkQ.png
Hi guys! I’m back with a new blog and this is great because again… I learn a lot of things, specially about DNS, IP and things like that.

Continue reading on Medium »

Hacking on Medium
Stored XSS and HTML Injection in United Nations Web Application

https://cdn-images-1.medium.com/max/640/1*nU79-qczOJemVkPDEO-Ywg.jpeg
Hello guys. I am happy to be back after having some stress and no enough time for Bug Bounty.

Continue reading on Medium »

Hacking on Medium
OWASP — UnCrackable Level 1

https://cdn-images-1.medium.com/max/1010/0*La04Rx_Y1jxWgwPg.png
Uncrackable Leve 1 is a masterpiece of Bernhard Mueller hacker, it is used all around the world to teach 101 Mobile Security.

Continue reading on Medium »

Hacking on Medium
Los sitios web de phishing ahora usan chatbots para robar sus credenciales

https://cdn-images-1.medium.com/max/1599/0*DdNdpCSuJIp34AmH
PUBLICADO EN 19 MAYO, 2022POR EHACKING

Continue reading on Medium »

Hacking on Medium
Piratas informáticos de Lazarus apuntan a los servidores VMware con exploits Log4Shell

https://cdn-images-1.medium.com/max/1449/0*tLa9Pbj7F3T86bvA
PUBLICADO EN 19 MAYO, 2022POR EHACKING

Continue reading on Medium »

KitPloit - PenTest Tools!
C2concealer - Command Line Tool That Generates Randomized C2 Malleable Profiles For Use In Cobalt Strike

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhC8Xb8c0bus4hJS4mtBThLT-GVrwqaY5gNbO7xR4DmP1FYTiExCe9OKCH0AYKJgxJvsRvJ1nG2kDUUHHPCJlqdGVnx9iKYw-CSFCG8PmYnrJy0-HiG2kviLXdQQQMmkTO6aMv2igTqnlziiI-CHFu0tzukYIkcs2myAGYHvo1VUhjR8A195h06I25O/w640-h342/cobalt_strike.png C2concealer is a command line tool that generates randomized C2 malleable profiles for use in Cobalt Strike. Installationchmod u+x install.sh
./install.shBuilding Docker imagedocker build -t C2concealer .Running with Dockerdocker container run -it -v <cobalt_strike_location:/usr/share/cobaltstrike/ C2concealer --hostname google.com --variant 3Example UsageUsage:
$ C2concealer --hostname google.com --variant 3

Flags:

(optional)
--hostname
The hostname used in HTTP client and server side settings. Default is None.
--variant
An integer defining the number of HTTP client/server variants to generate.
Recommend between 1 and 5. Max 10.Example Console Outputroot@kali:~# C2concealer --variant 1 --hostname google.com
[i] Searching for the c2lint tool on your system (part of Cobalt Strike). Might take 10-20 seconds.
[i] Found c2lint in the /opt/cobaltstrike/c2lint directory.

Choose an SSL option:
1. Self-signed SSL cert (just input a few details)
2. LetsEncrypt SSL cert (requies a temporary A record for the relevant domain to be pointed to this machine)
3. Existing keystore
4. No SSL

[?] Option [1/2/3/4]:Tip: Always use an SSL certificate. Preferably a cert from LetsEncrypt or similar.

Tip: HTTP Variants allow you to select different IOCs for http traffic on different beacons. Recommend a value of at least 1. How it worksWe poured over the Cobalt Strike documentation and defined ranges of values that would make sense for each profile attribute. Sometimes that data is as simple as a random integer within some range and other times we need to pick a random value from a python dictionary. Either way, we started tool creation with defining the data that would make a valid profile.

Then we divided each malleable profile section (or block) into a separate .py file, which contains the logic to draw random appropriate values for each attribute and then output a formatted string for that profile block. We concatenate all profile blocks together, run a few quick consistency checks and then run the profile through the Cobalt Strike linter (c2lint). The output is a profile that should work for your engagements. We always recommend testing the profile (including process injection and spawning) prior to running a campaign.

If you're looking into the code, we recommend starting with these two files: /C2concealer/main.py and /C2concealer/profile.py. After reviewing the comments, check out individuals profile block generators in the folder: /C2concealer/components. Customizing the toolThis is crucial. This is an open sourced version of a tool we've been using privately for about a year. Our private repo has several additional IOCs and a completely different data set. While running the tool provides an excellent start for building a Cobalt Strike malleable profile, we recommend digging into the following areas to customize the data that is randomly populating the tool:

/C2concealer/data/

* dns.py (customize the dns subdomains)
* file_type_prepend.py (customize how http-get-server repsonses look ... aka c2 control instructions)
* params.py (two dictionaries containing common parameter names and a generic wordlist)
* post_ex.py (spawn_to process list...definitely change this one)
* reg_headers.py (typical http headers like user-agent and server)
* smb.py (smb pipenames for use when comms go over smb)
* stage.py (data for changing IOCs related to the [...]

stager)
* transform.py (payload data transformations...no need to change this)
* urls.py (filetypes and url path components used for building URIs all across the tool...definitely change this)

In addition, you can customize various attributes all throughout the profile generation process. As an example, in the file: "/C2concealer/components/stageblock.py", you can change the range from which PE image size value is drawn from (near lines 73-74). Please look through all the different files in the components directory.

If you've made it this far, then we know you'll get a lot of use out of this tool. The way we recommend viewing this tool is that we've built the skeleton code to automatically generate these profiles, now it's up to you to think through what values make sense for each attribute for your campaigns and update the data sources. ShoutoutsBig shoutout to Raphael Mudge for constantly improving on the malleable profile feature set and the documentation to learn about it. Also, huge thanks to @killswitch-GUI for his script that automates LetsEncrypt cert generation for CS team servers. Finally, two blog posts that made life so much easier: @bluescreenofjeff's post (https://bluescreenofjeff.com/2017-01-24-how-to-write-malleable-c2-profiles-for-cobalt-strike/) and Joe Vest's post (https://posts.specterops.io/a-deep-dive-into-cobalt-strike-malleable-c2-6660e3 3b0e0b). Version ChangelogVersion 1.0

* Public version of FortyNorth Security's internal tool.
* Added support for CS 4.0 (specifically multiple HTTP variants)
* Updated README.md Download C2concealer

C2concealer - Command Line Tool That Generates Randomized C2 Malleable Profiles For Use In Cobalt Strike
http://www.kitploit.com/2022/05/c2concealer-command-line-tool-that.html

C2concealer is a command line (https://www.kitploit.com/search/label/Command%20Line) tool that generates randomized C2 malleable profiles for use in Cobalt Strike.
Installation chmod u+x install.sh
./install.sh Building Docker image docker build -t C2concealer . Running with Docker docker container (https://www.kitploit.com/search/label/Container) run -it -v :/usr/share/cobaltstrike/ C2concealer --hostname google.com --variant 3 Example Usage Usage:
$ C2concealer --hostname google.com --variant 3

Flags:

(optional)
--hostname
The hostname used in HTTP client and server side settings. Default is None.
--variant
An integer defining the number of HTTP client/server variants to generate.
Recommend between 1 and 5. Max 10. Example Console (https://www.kitploit.com/search/label/Console) Output root@kali:~# C2concealer --variant 1 --hostname google.com
[i] Searching for the c2lint tool on your system (part of Cobalt Strike). Might take 10-20 seconds.
[i] Found c2lint in the /opt/cobaltstrike/c2lint directory.

Choose an SSL option:
1. Self-signed SSL cert (just input a few details)
2. LetsEncrypt SSL cert (requies a temporary A record for the relevant domain to be pointed to this machine)
3. Existing keystore
4. No SSL

[?] Option [1/2/3/4]: Tip: Always use an SSL certificate. Preferably a cert from LetsEncrypt or similar. Tip: HTTP Variants allow you to select different IOCs for http traffic on different beacons. Recommend a value of at least 1. How it works We poured over the Cobalt Strike (https://www.kitploit.com/search/label/Cobalt%20Strike) documentation and defined ranges of values that would make sense for each profile attribute. Sometimes that data is as simple as a random integer within some range and other times we need to pick a random value from a python dictionary. Either way, we started tool creation with defining the data that would make a valid profile. Then we divided each malleable profile section (or block) into a separate .py file, which contains the logic to draw random appropriate values for each attribute and then output a formatted string for that profile block. We concatenate all profile blocks together, run a few quick consistency checks and then run the profile through the Cobalt Strike linter (c2lint). The output is a profile that should work for your engagements. We always recommend testing the profile (including process injection (https://www.kitploit.com/search/label/Injection) and spawning) prior to running a campaign. If you're looking into the code, we recommend starting with these two files: /C2concealer/main.py and /C2concealer/profile.py. After reviewing the comments, check out individuals profile block generators in the folder: /C2concealer/components. Customizing the tool This is crucial. This is an open sourced version of a tool we've been using privately for about a year. Our private repo has several additional IOCs and a completely different data set. While running the tool provides an excellent start for building a Cobalt Strike malleable profile, we recommend digging into the following areas to customize the data that is randomly populating the tool: /C2concealer/data/ dns.py (customize the dns subdomains) file_type_prepend.py (customize how http-get-server repsonses look ... aka c2 control instructions) params.py (two dictionaries containing common parameter names and a generic wordlist) post_ex.py (spawn_to process list...definitely change this one) reg_headers.py (typical http headers like user-agent and server) smb.py (smb pipenames for use when comms go over smb) stage.py (data for changing IOCs related to the stager) transform.py (payload data transformations...no need to change this) urls.py (filetypes and url path components used for building URIs all across the tool...definitely change this) In addition, you can customize various attributes all throughout the profile generation process. As an example, in the file:

"/C2concealer/components/stageblock.py", you can change the range from which PE image size value is drawn from (near lines 73-74). Please look through all the different files in the components directory. If you've made it this far, then we know you'll get a lot of use out of this tool. The way we recommend viewing this tool is that we've built the skeleton code to automatically generate these profiles, now it's up to you to think through what values make sense for each attribute for your campaigns and update the data sources. Shoutouts Big shoutout to Raphael Mudge for constantly improving on the malleable profile feature set and the documentation to learn about it. Also, huge thanks to @killswitch-GUI for his script that automates LetsEncrypt cert generation for CS team servers. Finally, two blog posts that made life so much easier: @bluescreenofjeff's post (https://bluescreenofjeff.com/2017-01-24-how-to-write-malleable-c2-profiles-for-cobalt-strike/) and Joe Vest's post (https://posts.specterops.io/a-deep-dive-into-cobalt-strike-malleable-c2-6660e3 3b0e0b (https://posts.specterops.io/a-deep-dive-into-cobalt-strike-malleable-c2-6660e33b0e0b)). Version Changelog Version 1.0 Public version of FortyNorth Security's internal tool. Added support for CS 4.0 (specifically multiple HTTP variants) Updated README.md

Download C2concealer (https://github.com/FortyNorthSecurity/C2concealer)

hacking: security in practice
AXS got hacked again, is this bad news for the company?

On Wednesday Axie Infinity said the MEE6 bot was hacked on its main server. It was said that hackers use the MEE6 bot to seek permission to a fake jiho account and then use it to make fake announcements about a mint. Many projects that the MEE6 bot is installed on their server are facing the same issue. Firms like RTFKT, Faith Tribe, PXN, Memeland, Cool Cats, and PROOF/Moonbirds reported that their accounts were compromised.
The team stated that announcements showing a special mint have been deleted and users may still require to restart their Discord. The team also said they have removed the MEE6 bot from the server and they will never do a surprise mint and the team will continuously provide updates about the incident on their Twitter, Discord, and Facebook.

The team and the community are facing a tough time after the Ronin bridge hack in which $625 million was stolen and this made the number of users that play the play-to-earn has decreased and many top players left the firm.
Following the Discord security expert speech the hackers first attacked the admins accounts to build an alternate admin account. With this method hackers send webbook messages while hiding the compromised account of the administrator.

The security expert said it is better to remove MEE6 and the web books immediately instead of trying to identify the attacker (compromised account). As many players have left the game the project continued to suffer hacks. The Axie infinity community has been so angry as there is delay in launching Land.

submitted by /u/Bowserdku
[link] [comments]
➖ Sent by @TheFeedReaderBot ➖

hacking: security in practice
trying to get into hackthebox, but I'm having a hard time learning about the ports on them

So, I want to learn more about hacking and vulnerabilities and stuff... But, whenever I start up a CTF (either htb or vulnhub) I just get lost trying to find different vulnerabilities on the ports. Are there any resources anyone could point me to to help me learn this stuff. anything is appreciated.

submitted by /u/trym716
[link] [comments]
➖ Sent by @TheFeedReaderBot ➖

hacking: security in practice
DOJ says it will no longer prosecute good-faith hackers under CFAA – TechCrunch

https://external-preview.redd.it/5AnI7YQxMjP5XfTzZi81IuJnnODX3JmU6SWRb3-32p4.jpg?width=320&crop=smart&auto=webp&s=23124787a2af2dac4a4c1d5a9f520f34a4dc6a93 submitted by /u/DrinkMoreCodeMore
[link] [comments]
➖ Sent by @TheFeedReaderBot ➖