Hacking Articles Tips Tricks Videos Tutorials

KitPloit - PenTest Tools! Atomic-Operator - A Python Package Is Used To Execute Atomic Red Team Tests (Atomics) Across Multiple Operating System Environments https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjQ-olHqvRjRQm1ILeNewVPQ5Xq1oDz6AsR0gR…

o by running the following at the command line:

atomic-operator get_atomics 
# You can specify the destination directory by using the --destination flag
atomic-operator get_atomics --destination "/tmp/some_directory"

Running Tests LocallyIn order to run a test you must provide some additional properties (and options if desired). The main method to run tests is named run.

# This will run ALL tests compatiable with your local operating system
atomic-operator run --atomics-path "/tmp/some_directory/redcanaryco-atomic-red-team-3700624"

You can select individual tests when you provide one or more specific techniques. For example running the following on the command line: atomic-operator run --techniques T1564.001 --select_testsWill prompt the user with a selection list of tests associated with that technique. A user can select one or more tests by using the space bar to highlight the desired test:

Select Test(s) for Technique T1564.001 (Hide Artifacts: Hidden Files and Directories)

* Create a hidden file in a hidden directory (61a782e5-9a19-40b5-8ba4-69a4b9f3d7be)
Mac Hidden file (cddb9098-3b47-4e01-9d3b-6f5f323288a9)
Create Windows System File with Attrib (f70974c8-c094-4574-b542-2c545af95a32)
Create Windows Hidden File with Attrib (dadb792e-4358-4d8d-9207-b771faa0daa5)
Hidden files (3b7015f2-3144-4205-b799-b05580621379)
Hide a Directory (b115ecaf-3b24-4ed2-aefe-2fcb9db913d3)
Show all hidden files (9a1ec7da-b892-449f-ad68-67066d04380c)

Running Tests RemotelyIn order to run a test remotely you must provide some additional properties (and options if desired). The main method to run tests is named run.

# This will run ALL tests compatiable with your local operating system
atomic-operator run --atomics-path "/tmp/some_directory/redcanaryco-atomic-red-team-3700624" --hosts "10.32.1.0" --username "my_username" --password "my_password"

When running commands remotely against Windows hosts you may need to configure PSRemoting. See details here: Windows Remoting Additional parametersYou can see additional parameters by running the following command: atomic-operator run -- --helpParameter Name Type Default Description techniques list all One or more defined techniques by attack_technique ID. test_guids list None One or more Atomic test GUIDs. select_tests bool False Select one or more atomic tests to run when a techniques are specified. atomics_path str os.getcwd() The path of Atomic tests. check_prereqs bool False Whether or not to check for prereq dependencies (prereq_comand). get_prereqs bool False Whether or not you want to retrieve prerequisites. cleanup bool False Whether or not you want to run cleanup command(s). copy_source_files bool True Whether or not you want to copy any related source (src, bin, etc.) files to a remote host. command_timeout int 20 Time duration for each command before timeout. debug bool False Whether or not you want to output details about tests being ran. prompt_for_input_args bool False Whether you want to prompt for input arguments for each test. return_atomics bool False Whether or not you want to return atomics instead of running them. config_file str None A path to a conifg_file which is used to automate atomic-operator in environments. config_file_only bool False Whether or not you want to run tests based on the provided config_file only. hosts list None A list of one or more remote hosts to run a test on. username str None Username for authentication of remote connections. password str None Password for authentication of remote connections. ssh_key_path str None Path to a SSH Key for authentication of remote connections. private_key_string str None A private SSH Key string used for authentication of remote connections. verify_ssl bool False Whether or not to verify ssl when connecting over RDP (windows). ssh_port int 22 SSH port for authentication of remote connections. ssh_timeout int 5 SSH timeout for authentication o[...]

___________________________
@hacking_Attack
@Hacking_Video

5 viewsedited 14:56

Hacking Articles Tips Tricks Videos Tutorials

o by running the following at the command line: atomic-operator get_atomics # You can specify the destination directory by using the --destination flag atomic-operator get_atomics --destination "/tmp/some_directory"Running Tests LocallyIn order to run a test…

f remote connections. **kwargs dict None If additional flags are passed into the run command then we will attempt to match them with defined inputs within Atomic tests and replace their value with the provided value.
You should see a similar output to the following:

NAME
atomic-operator run - The main method in which we run Atomic Red Team tests.

SYNOPSIS
atomic-operator run

Running atomic-operator using a config_fileIn addition to the ability to pass in parameters with atomic-operatoryou can also pass in a path to a config_filethat contains all the atomic tests and their potential inputs. You can see an example of this config_file here:

atomic_tests:
- guid: f7e6ec05-c19e-4a80-a7e7-241027992fdb
input_arguments:
output_file:
value: custom_output.txt
input_file:
value: custom_input.txt
- guid: 3ff64f0b-3af2-3866-339d-38d9791407c3
input_arguments:
second_arg:
value: SWAPPPED argument
- guid: 32f90516-4bc9-43bd-b18d-2cbe0b7ca9b2

Usage example (scripts)To use atomic-operator you m[...]

___________________________
@hacking_Attack
@Hacking_Video

7 viewsedited 14:56

Hacking Articles Tips Tricks Videos Tutorials

ust instantiate an AtomicOperator object.

from atomic_operator import AtomicOperator

operator = AtomicOperator()

# This will download a local copy of the atomic-red-team repository

print(operator.get_atomics('/tmp/some_directory'))

# this will run tests on your local system
operator.run(
technique: str='All', 
atomics_path=os.getcwd(), 
check_dependencies=False, 
get_prereqs=False, 
cleanup=False, 
command_timeout=20, 
debug=False,
prompt_for_input_args=False,
**kwargs
)

Getting HelpPlease create an issue if you have questions or run into any issues. Built With* carcass - Python packaging template ContributingPlease read CONTRIBUTING.md for details on our code of conduct, and the process for submitting pull requests to us. VersioningWe use SemVer for versioning. Authors* Josh Rickard - Initial work - MSAdministrator

See also the list of contributors who participated in this project. LicenseThis project is licensed under the MIT License - see the LICENSE file for details Shoutout* Thanks to keithmccammon for helping identify issues with macOS M1 based proccesssor and providing a fix Download Atomic-Operator

___________________________
@hacking_Attack
@Hacking_Video

9 viewsedited 14:56

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
How to provide a DDoS resilience testing service? How to legally DDoS?

Hello!

Our security firm has received numerous requests about whether we can pentest their "durability against DDoS" or their DDoS protection solution.

Now, we would really love to provide that service, but we can't figure out how to do it properly. Doing a load test from one/two machines is easy, and we can do that, but we would love to scale it to actually test the resilience of the service.

I've come to three solutions, but both of them have their shortcomings and can't be used in practice.

1. Rent a botnet. + Cheap, semi-reliable, actually works. - Illegal, can't have "rented a botnet" in accounting, not always reliable, no output data, so we can't put anything into the report.
2. JMeter + thousands of micro instances in cloud. + easy to do, you get thousands of IP addreses instantly, you can scale it effortlessly, its really cheap. - clouds will ban you as soon as they notice you are DDoSing. It doesnt matter that it's legal and per contract, you will get banned. We tried a smaller cloud provider, to strike a deal and explain that we are legitimate and they don't have to ban us - their answer was no because of point 3. - they would be loosing IP addreses, and that's a problem.
3. Have a solid virtualisation server, and buy a lot of public IP Addreses/IPv6 range + nothing really, youre not relying on 3rd party. - Most of DDoS protections simply ban the IPv6 range or IPv4 address, so you will loose them really quickly and have to buy another for another test. Which can get expensive and unmanagable, if the process of getting an IP is long.

So, as you can see, all of my solutions are not doable. Unless I'm missing something, I've come to an conclusion that it's not possible to provide a DDoS Resilience test as a service. Which si why I am turning to you, since I refuse to accept that something can't be done (And our competition IS providing that service...)! There has to be a way. So, anyone has any ideas about how to do this?

Since we are a legitimate company, there's no problem with simply striking a deal or proving that we are DDoSing our customers that asked for it, so any solutions, including "Try talking to these cloud providers, they will help you" are welcome.

Thank you!

submitted by /u/Mikina
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

How to provide a DDoS resilience testing service? How to legally DDoS?

Hello! Our security firm has received numerous requests about whether we can pentest their "durability against DDoS" or their DDoS protection...

9 viewsedited 16:04

Hacking Articles Tips Tricks Videos Tutorials

My first bug bounty in Business Logic

Hey Hello, Hackers,Continue reading on Medium »
Read more...

10 views16:56

Hacking Articles Tips Tricks Videos Tutorials

My first bug bounty in Business Logic
https://medium.com/@arjunganesh82/my-first-bug-bounty-in-business-logic-8d54998cdc7f?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Medium

My first bug bounty in Business Logic

Hey Hello, Hackers,

8 viewsedited 17:27

Hacking Articles Tips Tricks Videos Tutorials

7 views17:27

Hacking Articles Tips Tricks Videos Tutorials

Hey Hello, Hackers,Continue reading on Medium » (https://medium.com/@arjunganesh82/my-first-bug-bounty-in-business-logic-8d54998cdc7f?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Medium

My first bug bounty in Business Logic

Hey Hello, Hackers,

6 viewsedited 17:27

Hacking Articles Tips Tricks Videos Tutorials

Dark Reading: Attacks/Breaches
Why Network Object Management Is Critical for Managing Multicloud Network Security

If you want your IT and security administrators to get buried in trivial workloads and productivity bottlenecks, having poor network object management is a great way to accomplish that.

6 views17:51

Source

Hacking Articles Tips Tricks Videos Tutorials

6 views18:37

Hacking Articles Tips Tricks Videos Tutorials

Photo

Hacking on Medium
Your users are getting phished. Fight back!

https://cdn-images-1.medium.com/max/600/1*ne9rQVmq4J-QtUAQqnKmlQ.jpeg
TLDR: our experience on phishing submission email accounts, and some other low cost solutions to get ahead of attackers

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Medium

Your users are getting phished. Fight back!

TLDR: our experience on phishing submission email accounts, and some other low cost solutions to get ahead of attackers

6 viewsedited 18:37

Hacking Articles Tips Tricks Videos Tutorials