Hacking on Medium
An Overview Of Cyber Security

https://cdn-images-1.medium.com/max/640/0*WEjFziaCwbuLQQ10.jpg
Cyber Security is a very important issue these days as we become more and more reliant on the internet. A computer virus can cause…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Moto E32s Unboxing | Moto E32s Review | Moto e32s First Look | upload by Allaboutsubha

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Man In The Middle (MITM)

https://cdn-images-1.medium.com/max/640/0*bL6sZCExRs64jYIg.png
Man In The Middle Attack (MITM)

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Biggest Cyber Crime of ₹ 571,092,184 in Assam from Oil India Limited Co.

https://cdn-images-1.medium.com/max/640/0*ewsBT4LXrZveuj0G.png
Recently Oil India Limited Company suffered a Cyber Attack.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
Atomic-Operator - A Python Package Is Used To Execute Atomic Red Team Tests (Atomics) Across Multiple Operating System Environments

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjQ-olHqvRjRQm1ILeNewVPQ5Xq1oDz6AsR0gRAV28__6g2xkptlf5a1bsENN6ewg6IlRbkO2sV6QNXU9VJI1MIWcbWdZRjBa6gkgZN1EnTkGf4Owq_LCJc4tnmo2JIB-_-g0fSS2NmIiAawavL64nBuPgZpeMjB_FzoEGGX1ctBMdAhm0RYGbdzSGP/w640-h314/atomic-operator.png This python package is used to execute Atomic Red Team tests (Atomics) across multiple operating system environments.

(What's new?) Why?atomic-operatorenables security professionals to test their detection and defensive capabilities against prescribed techniques defined within atomic-red-team. By utilizing a testing framework such as atomic-operator, you can identify both your defensive capabilities as well as gaps in defensive coverage.

Additionally, atomic-operatorcan be used in many other situations like:

* Generating alerts to test products
* Testing EDR and other security tools
* Identifying way to perform defensive evasion from an adversary perspective
* Plus more. Features* Support local and remote execution of Atomic Red Teams tests on Windows, macOS, and Linux systems
* Supports running atomic-tests against iaas:aws* Can prompt for input arguments but not required
* Assist with downloading the atomic-red-team repository
* Can be automated further based on a configuration file
* A command-line and importable Python package
* Select specific tests when one or more techniques are specified
* Plus more Getting Startedatomic-operatoris a Python-only package hosted on PyPi and works with Python 3.6 and greater.

If you are wanting a PowerShell version, please checkout Invoke-AtomicRedTeam. pip install atomic-operatorThe next steps will guide you through setting up and running atomic-operator.

* Get Atomics Install / clone Atomic Red Team repository
* atomic-operator Understand the options availble in atomic-operator
* Running Test on Command Line or Running Tests within a Script
* Running Tests via Configuration File InstallationYou can install atomic-operator on OS X, Linux, or Windows. You can also install it directly from the source. To install, see the commands under the relevant operating system heading, below. PrerequisitesThe following libraries are required and installed by atomic-operator: pyyaml==5.4.1
fire==0.4.0
requests==2.26.0
attrs==21.2.0
pick==1.2.0 macOS, Linux and Windows:pip install atomic-operatormacOS using M1 processorgit clone https://github.com/swimlane/atomic-operator.git
cd atomic-operator

# Satisfy ModuleNotFoundError: No module named 'setuptools_rust'
brew install rust
pip3 install --upgrade pip
pip3 install setuptools_rust

# Back to our regularly scheduled programming . . .
pip install -r requirements.txt
python setup.py installInstalling from sourcegit clone https://github.com/swimlane/atomic-operator.git
cd atomic-operator
pip install -r requirements.txt
python setup.py installUsage example (command line)You can run atomic-operatorfrom the command line or within your own Python scripts. To use atomic-operatorat the command line simply enter the following in your terminal: atomic-operator --help
atomic-operator run -- --helpPlease note that to see details about the run command run atomic-operator run -- --helpand NOT atomic-operator run --helpRetrieving Atomic TestsIn order to use atomic-operatoryou must have one or more atomic-red-team tests (Atomics) on your local system. atomic-operatorprovides you with the ability to download the Atomic Red Team repository. You can do s[...]

___________________________
@hacking_Attack
@Hacking_Video

o by running the following at the command line: atomic-operator get_atomics
# You can specify the destination directory by using the --destination flag
atomic-operator get_atomics --destination "/tmp/some_directory"Running Tests LocallyIn order to run a test you must provide some additional properties (and options if desired). The main method to run tests is named run. # This will run ALL tests compatiable with your local operating system
atomic-operator run --atomics-path "/tmp/some_directory/redcanaryco-atomic-red-team-3700624"You can select individual tests when you provide one or more specific techniques. For example running the following on the command line: atomic-operator run --techniques T1564.001 --select_testsWill prompt the user with a selection list of tests associated with that technique. A user can select one or more tests by using the space bar to highlight the desired test: Select Test(s) for Technique T1564.001 (Hide Artifacts: Hidden Files and Directories)

* Create a hidden file in a hidden directory (61a782e5-9a19-40b5-8ba4-69a4b9f3d7be)
Mac Hidden file (cddb9098-3b47-4e01-9d3b-6f5f323288a9)
Create Windows System File with Attrib (f70974c8-c094-4574-b542-2c545af95a32)
Create Windows Hidden File with Attrib (dadb792e-4358-4d8d-9207-b771faa0daa5)
Hidden files (3b7015f2-3144-4205-b799-b05580621379)
Hide a Directory (b115ecaf-3b24-4ed2-aefe-2fcb9db913d3)
Show all hidden files (9a1ec7da-b892-449f-ad68-67066d04380c) Running Tests RemotelyIn order to run a test remotely you must provide some additional properties (and options if desired). The main method to run tests is named run. # This will run ALL tests compatiable with your local operating system
atomic-operator run --atomics-path "/tmp/some_directory/redcanaryco-atomic-red-team-3700624" --hosts "10.32.1.0" --username "my_username" --password "my_password"When running commands remotely against Windows hosts you may need to configure PSRemoting. See details here: Windows Remoting Additional parametersYou can see additional parameters by running the following command: atomic-operator run -- --helpParameter Name Type Default Description techniques list all One or more defined techniques by attack_technique ID. test_guids list None One or more Atomic test GUIDs. select_tests bool False Select one or more atomic tests to run when a techniques are specified. atomics_path str os.getcwd() The path of Atomic tests. check_prereqs bool False Whether or not to check for prereq dependencies (prereq_comand). get_prereqs bool False Whether or not you want to retrieve prerequisites. cleanup bool False Whether or not you want to run cleanup command(s). copy_source_files bool True Whether or not you want to copy any related source (src, bin, etc.) files to a remote host. command_timeout int 20 Time duration for each command before timeout. debug bool False Whether or not you want to output details about tests being ran. prompt_for_input_args bool False Whether you want to prompt for input arguments for each test. return_atomics bool False Whether or not you want to return atomics instead of running them. config_file str None A path to a conifg_file which is used to automate atomic-operator in environments. config_file_only bool False Whether or not you want to run tests based on the provided config_file only. hosts list None A list of one or more remote hosts to run a test on. username str None Username for authentication of remote connections. password str None Password for authentication of remote connections. ssh_key_path str None Path to a SSH Key for authentication of remote connections. private_key_string str None A private SSH Key string used for authentication of remote connections. verify_ssl bool False Whether or not to verify ssl when connecting over RDP (windows). ssh_port int 22 SSH port for authentication of remote connections. ssh_timeout int 5 SSH timeout for authentication o[...]

___________________________
@hacking_Attack
@Hacking_Video

f remote connections. **kwargs dict None If additional flags are passed into the run command then we will attempt to match them with defined inputs within Atomic tests and replace their value with the provided value.
You should see a similar output to the following: NAME
atomic-operator run - The main method in which we run Atomic Red Team tests.

SYNOPSIS
atomic-operator run Running atomic-operator using a config_fileIn addition to the ability to pass in parameters with atomic-operatoryou can also pass in a path to a config_filethat contains all the atomic tests and their potential inputs. You can see an example of this config_file here: atomic_tests:
- guid: f7e6ec05-c19e-4a80-a7e7-241027992fdb
input_arguments:
output_file:
value: custom_output.txt
input_file:
value: custom_input.txt
- guid: 3ff64f0b-3af2-3866-339d-38d9791407c3
input_arguments:
second_arg:
value: SWAPPPED argument
- guid: 32f90516-4bc9-43bd-b18d-2cbe0b7ca9b2Usage example (scripts)To use atomic-operator you m[...]

___________________________
@hacking_Attack
@Hacking_Video

ust instantiate an AtomicOperator object. from atomic_operator import AtomicOperator

operator = AtomicOperator()

# This will download a local copy of the atomic-red-team repository

print(operator.get_atomics('/tmp/some_directory'))

# this will run tests on your local system
operator.run(
technique: str='All',
atomics_path=os.getcwd(),
check_dependencies=False,
get_prereqs=False,
cleanup=False,
command_timeout=20,
debug=False,
prompt_for_input_args=False,
**kwargs
)Getting HelpPlease create an issue if you have questions or run into any issues. Built With* carcass - Python packaging template ContributingPlease read CONTRIBUTING.md for details on our code of conduct, and the process for submitting pull requests to us. VersioningWe use SemVer for versioning. Authors* Josh Rickard - Initial work - MSAdministrator

See also the list of contributors who participated in this project. LicenseThis project is licensed under the MIT License - see the LICENSE file for details Shoutout* Thanks to keithmccammon for helping identify issues with macOS M1 based proccesssor and providing a fix Download Atomic-Operator

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How to provide a DDoS resilience testing service? How to legally DDoS?

Hello!

Our security firm has received numerous requests about whether we can pentest their "durability against DDoS" or their DDoS protection solution.

Now, we would really love to provide that service, but we can't figure out how to do it properly. Doing a load test from one/two machines is easy, and we can do that, but we would love to scale it to actually test the resilience of the service.

I've come to three solutions, but both of them have their shortcomings and can't be used in practice.

1. Rent a botnet. + Cheap, semi-reliable, actually works. - Illegal, can't have "rented a botnet" in accounting, not always reliable, no output data, so we can't put anything into the report.
2. JMeter + thousands of micro instances in cloud. + easy to do, you get thousands of IP addreses instantly, you can scale it effortlessly, its really cheap. - clouds will ban you as soon as they notice you are DDoSing. It doesnt matter that it's legal and per contract, you will get banned. We tried a smaller cloud provider, to strike a deal and explain that we are legitimate and they don't have to ban us - their answer was no because of point 3. - they would be loosing IP addreses, and that's a problem.
3. Have a solid virtualisation server, and buy a lot of public IP Addreses/IPv6 range + nothing really, youre not relying on 3rd party. - Most of DDoS protections simply ban the IPv6 range or IPv4 address, so you will loose them really quickly and have to buy another for another test. Which can get expensive and unmanagable, if the process of getting an IP is long.

​

So, as you can see, all of my solutions are not doable. Unless I'm missing something, I've come to an conclusion that it's not possible to provide a DDoS Resilience test as a service. Which si why I am turning to you, since I refuse to accept that something can't be done (And our competition IS providing that service...)! There has to be a way. So, anyone has any ideas about how to do this?

Since we are a legitimate company, there's no problem with simply striking a deal or proving that we are DDoSing our customers that asked for it, so any solutions, including "Try talking to these cloud providers, they will help you" are welcome.

​

Thank you!

submitted by /u/Mikina
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

My first bug bounty in Business Logic

Hey Hello, Hackers,Continue reading on Medium »
Read more...

My first bug bounty in Business Logic
https://medium.com/@arjunganesh82/my-first-bug-bounty-in-business-logic-8d54998cdc7f?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hey Hello, Hackers,Continue reading on Medium » (https://medium.com/@arjunganesh82/my-first-bug-bounty-in-business-logic-8d54998cdc7f?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Why Network Object Management Is Critical for Managing Multicloud Network Security

If you want your IT and security administrators to get buried in trivial workloads and productivity bottlenecks, having poor network object management is a great way to accomplish that.

Hacking on Medium
Your users are getting phished. Fight back!

https://cdn-images-1.medium.com/max/600/1*ne9rQVmq4J-QtUAQqnKmlQ.jpeg
TLDR: our experience on phishing submission email accounts, and some other low cost solutions to get ahead of attackers

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video