LEAF - Linux Evidence Acquisition Framework
http://www.kitploit.com/2022/05/leaf-linux-evidence-acquisition.html

___________________________
@hacking_Attack
@Hacking_Video

Linux Evidence Acquisition Framework (LEAF) acquires artifacts and evidence from Linux EXT4 systems, accepting user input to customize the functionality of the tool for easier scalability. Offering several modules and parameters as input, LEAF is able to use smart analysis (https://www.kitploit.com/search/label/Analysis) to extract Linux artifacts and output to an ISO image file.
Usage LEAF_master.py [-h] [-i INPUT [INPUT ...]] [-o OUTPUT] [-u USERS [USERS ...]] [-c CATEGORIES [CATEGORIES ...]] [-v]
[-s] [-g [GET_FILE_BY_OWNER [GET_FILE_BY_OWNER ...]]] [-y [YARA [YARA ...]]]
[-yr [YARA_RECURSIVE [YARA_RECURSIVE ...]]] [-yd [YARA_DESTINATIONS [YARA_DESTINATIONS...]]]

LEAF (Linux Evidence Acquisition Framework) - Cartware
____ _________ ___________ __________
/ / / _____/ / ____ / / ______/
/ / / /____ / /___/ / / /____
/ / / _____/ / ____ / / _____/
/ /_____ / /_____ / / / / / /
/_________/ /_________/ /___/ /___/ /___/ v2.0
Process Ubuntu 20.04/Debian file systems for forensic (https://www.kitploit.com/search/label/Forensic) artifacts, extract important data, and export information to an ISO9660 file. Compatible with EXT4 file system and common locations on Ubuntu 20.04 operating system. See help page for more information. Suggested usage: Do not run from LEAF/ directory Parameters optional arguments:

-h, --help show this help message and exit

-i INPUT [INPUT ...], --input INPUT [INPUT ...]
Additional Input locations. Separate multiple input files with spaces
Default: /home/user1/Desktop/LEAF-3/target_locations

-o OUTPUT, --output OUTPUT

Output directory (https://www.kitploit.com/search/label/Directory) location

Default: ./LEAF_output

-u USERS [USERS ...], --users USERS [USERS ...]

Users to include in output, separated by spaces (i.e. -u alice bob root).
Users not present in /etc/passwd will be removed
Default: All non-service users in /etc/passwd
-c CATEGORIES [CATEGORIES ...], --categories CATEGORIES [CATEGORIES ...]< br/> Explicit artifact categories to include during acquisition.
Categories must be separated by space, (i.e. -c network users apache).
Full List of built-in categories includes:
APPLICATIONS, EXECUTIONS, LOGS, MISC, NETWORK, SHELL, STARTUP, SERVICES, SYSTEM, TRASH, USERS
Categories are compatible with user-inputted files as long as they follow the notation:
# CATEGORY
/location1
/location2
.../location[n]
# END CATEGORY
Default: "all"
-v, --verbose Output in verbose mode, (may conflict with progress bar)
Default: False
-s, --save Save the raw evidence directory
Default: False
-g [GET_ OWNERSHIP [GET_OWNERSHIP ...]], --get_ownership [GET_OWNERSHIP [GET_OWNERSHIP ...]]
Get files and directories owned by included users.
Enabling this will increase parsing (https://www.kitploit.com/search/label/Parsing) time.
Use -g alone to parse from / root directory.
Include paths after -g to specify target locations (i.e. "-g /etc /home/user/Downloads/
Default: Disabled
-y [YARA [YARA ...]], --yara [YARA [YARA ...]]
Configure Yara IOC scanning. Select -y alone to enable Yara scanning.

___________________________
@hacking_Attack
@Hacking_Video

Specify '-y /path/to/yara/' to specify custom input location.
For multiple inputs, use spaces between items,
i.e. '-y rulefile1.yar rulefile2.yara rule_dir/'
All yara files m ust have ".yar" or ".yara" extension.
Default: None
-yr [YARA_RECURSIVE [YARA_RECURSIVE ...]], --yara_recursive [YARA_RECURSIVE [YARA_RECURSIVE ...]]
Configure Recursive Yara IOC scanning.
For multiple inputs, use spaces between items,
i.e. '-yr rulefile1.yar rulefile2.yara rule_dir/'.
Directories in this list will be scanned recursively.
Can be used in conjunction with the normal -y flag,
but intersecting directories will take recursive priority.
Default: None
-yd [YARA_DESTINATIONS [YARA_DESTINATIONS...]], --yara_destinations [YARA_DESTINATIONS [YARA_DESTINATIONS...]]
Destination to run yara files against.
Separate multiple targets with a space.(i.e. /home/alice/ /bin/star/)
Default: All user directories
Example Usages: To use default arguments [this will use default input file (./target_locations), users (all users), categories (all categories), and output location (./LEAF_output/). Cloned data will not be stored in a local directory, verbose mode is off, and yara scanning (https://www.kitploit.com/search/label/Scanning) is disabled]:
LEAF_main.py

All arguments:
LEAF_main.py -i /home/alice/Desktop/customfile1.txt -o /home/alice/Desktop/ExampleOutput/ -c logs startup services apache -u alice bob charlie -s -v -y /path/to/yara_rule1.yar -yr /path2/to/yara_rules/ -yd /home/frank -g /etc/

To specify usernames, categories, and yara files:
LEAF_main.py -u alice bob charlie -c applications executions users -y /home/alice/Desktop/yara1.yar /home/alice/Desktop/yara2.yar

To include custom input file(s) and categories:
LEAF_main.py -i /home/alice/Desktop/customfile1.txt /home/alice/Desktop/customfile2.t xt -c apache xampp
How to Use Install Python requirements: Python 3 (preferably 3.8 or higher) (apt install python3) pip 3 (apt install pip3) Download required modules Install modules from requirements.txt (pip3 install -r requirements.txt) If you get an installation error, try sudo -H pip3 install -r requirements.txt Run the script sudo python3 LEAF_master.py with optional arguments

Download LEAF (https://github.com/alex-cart/LEAF)

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
LEAF - Linux Evidence Acquisition Framework

___________________________
@hacking_Attack
@Hacking_Video

Razer Blade 17 (Intel i7 12 gen) vs Macbook Pro 16 (M1 pro)
https://www.reddit.com/r/Pentesting/comments/uz9v6x/razer_blade_17_intel_i7_12_gen_vs_macbook_pro_16/

___________________________
@hacking_Attack
@Hacking_Video

Hey guys, I think the subject speaks for its self. After a lot of research i came down to these two options and i really don't know which one to go for. I am gonna be using for virtualization (Kali Linux, etc..) so basically pen testing. so if anyone owns, owned or even has an opinion on these two i would really like to hear it.
Thanks in advance https://www.razer.com/gaming-laptops/Razer-Blade-17/RZ09-0423EEA3-R3U1 ​ https://preview.redd.it/vq95c27ok3291.png?width=354&format=png&auto=webp&s=4a5a108685b21ee51718bbcd1acfd2f2280aac7b submitted by /u/jahdool (https://www.reddit.com/user/jahdool)
[link] (https://www.reddit.com/r/Pentesting/comments/uz9v6x/razer_blade_17_intel_i7_12_gen_vs_macbook_pro_16/) [comments] (https://www.reddit.com/r/Pentesting/comments/uz9v6x/razer_blade_17_intel_i7_12_gen_vs_macbook_pro_16/)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
A detailed analysis of Chinese ELMER backdoor

https://external-preview.redd.it/54w5iiK_04W6rp4XGwS4wCglc78gOq1TnXrr827Gm60.jpg?width=640&crop=smart&auto=webp&s=30c4599bf12afba7a604c88a0b84de6f06022b83 submitted by /u/CyberMasterV
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Is there a way to get around this?

My account got banned on this online game that Is ran on PlayStation. It’s probably not an ip ban , it’s most likely a ban on the email or PlayStation network account. Is there a way I can unban myself or access my account again? Please help

submitted by /u/Distinct_Savings8930
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
HackThisSite Basic Mission 3

https://cdn-images-1.medium.com/max/700/0*ybaObZSEi_bHGy1N.jpg
Alright back on the routine mowing through the basic missions. This mission seems simple, but you have to understand that websites act…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
DCG 201 Hybrid Meet Up — May 2022 — System Restore

https://cdn-images-1.medium.com/max/802/0*QJx4G56EXWbkgbEs.png
Date: May 30th, Monday (Memorial Day), 6pm — 10pm EST

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
CVE-2022–30507 write up

https://cdn-images-1.medium.com/max/674/1*HcpzPVR9cQuusIqgiFuUYw.png
Hello folks (:

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Got my bitlocker hashes, now what?

I want to preface this by saying I have absolutely zero experience doing any of this. I'm familiar with windows and how to navigate most things but as far as any "hacking" im a noob.

I forgot the password to my bitlocker-encrypted drive and didn't save the recovery key (yes I know i'm sorry). I have been able to follow along with videos on youtube and have gotten as far as imaging my drive and using jumbojohn to run bitlocker2john.exe. It ran overnight and most of today and I now have my 4 hashes.

I know the password is at least ~12 characters but uses multiple special characters, numbers and letters. Therefore I assume trying to get that password is a lost cause.

Please help. I lost my father a couple of years ago and all of the pictures/videos/messages/notes I have involving him are on this drive.

Thanks

submitted by /u/Mitthaw
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
What is/are the best way(s) to encrypt data/files to ensure there is no possible chance anyone but you can read/access said data/files

Looking for best methods in terms of maybe some text and files. Solutions in terms of easy and quick, but also most intensive. Thanks

submitted by /u/shinygoldcollector
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Is there any such thing as a universal key fob for a door?

Is there anyway I can register a paxton key fob without having access to the system? Anyway I can open a locked door with the Paxton system?

submitted by /u/cha0ticth0t
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video