Black Hat Ethical Hacking
Exploit released for Atlassian Confluence RCE bug, update now

___________________________
@hacking_Attack
@Hacking_Video

AWS-Threat-Simulation-and-Detection - Playing Around With Stratus Red Team (Cloud Attack Simulation Tool) And SumoLogic
http://www.kitploit.com/2022/06/aws-threat-simulation-and-detection.html

___________________________
@hacking_Attack
@Hacking_Video

This repository is a documentation of my adventures with Stratus Red Team (https://github.com/DataDog/stratus-red-team) - a tool for adversary emulation (https://www.kitploit.com/search/label/Adversary%20Emulation) for the cloud. Stratus Red Team (https://www.kitploit.com/search/label/Red%20Team) is "Atomic Red Team (https://github.com/redcanaryco/atomic-red-team) for the cloud, allowing to emulate offensive attack techniques in a granular and self-contained manner.
We run the attacks covered in the Stratus Red Team repository one by one on our AWS account. In order to monitor them, we will use CloudTrail and CloudWatch for logging and ingest these logs into SumoLogic (https://www.sumologic.com/) for further analysis.

___________________________
@hacking_Attack
@Hacking_Video

Attack Description Link aws.credential-access.ec2-get-password-data Retrieve EC2 Password Data Link (https://github.com/sbasu7241/AWS-Threat-Simulation-and-Detection/blob/main/aws.credential-access.ec2-get-password-data.md) aws.credential-access.ec2-steal-instance-credentials Steal EC2 Instance Credentials Link (https://github.com/sbasu7241/AWS-Threat-Simulation-and-Detection/blob/main/aws.credential-access.ec2-steal-instance-credentials.md) aws.credential-access.secretsmanager-retrieve-secrets Retrieve a High Number of Secrets Manager secrets Link (https://github.com/sbasu7241/AWS-Threat-Simulation-and-Detection/blob/main/aws.credential-access.secretsmanager-retrieve-secrets.md) aws.credential-access.ssm-retrieve-securestring-parameters Retrieve And Decrypt SSM Parameters Link (https://github.com/sbasu7241/AWS-Threat-Simulation-and-Detection/blob/main/aws.credential-access.ssm-retrieve-securestring-parameters.md) aws.defense-evasion.cloudtrail-delete Delete CloudTrail Trail Link (https://github.com/sbasu7241/AWS-Threat-Simulation-and-Detection/blob/main/aws.defense-evasion.cloudtrail-delete.md) aws.defense-evasion.cloudtrail-event-selectors Disable CloudTrail Logging Through Event Selectors Link (https://github.com/sbasu7241/AWS-Threat-Simulation-and-Detection/blob/main/aws.defense-evasion.cloudtrail-event-selectors.md) aws.defense-evasion.cloudtrail-lifecycle-rule CloudTrail Logs Impairment Through S3 Lifecycle Rule Link (https://github.com/sbasu7241/AWS-Threat-Simulation-and-Detection/blob/main/aws.defense-evasion.cloudtrail-lifecycle-rule.md) aws.defense-evasion.cloudtrail-stop Stop CloudTrail Trail Link (https://github.com/sbasu7241/AWS-Threat-Simulation-and-Detection/blob/main/aws.defense-evasion.cloudtrail-stop.md) aws.defense-evasion.organizations-leave Attempt to Leave the AWS Organization Link (https://github.com/sbasu7241/AWS-Threat-Simulation-and-Detection/blob/main/aws.defense-evasion.organizations-leave.md) aws.defense-evasion.vpc-remove-flow-logs Remove VPC Flow Logs Link (https://github.com/sbasu7241/AWS-Threat-Simulation-and-Detection/blob/main/aws.defense-evasion.vpc-remove-flow-logs.md) aws.discovery.ec2-enumerate-from-instance Execute Discovery (https://www.kitploit.com/search/label/Discovery) Commands on an EC2 Instance Link (https://github.com/sbasu7241/AWS-Threat-Simulation-and-Detection/blob/main/aws.discovery.ec2-enumerate-from-instance.md) aws.discovery.ec2-download-user-data Download EC2 Instance User Data TBD aws.exfiltration.ec2-security-group-open-port-22-ingress Open Ingress Port 22 on a Security Group Link (https://github.com/sbasu7241/AWS-Threat-Simulation-and-Detection/blob/main/aws.exfiltration.ec2-security-group-open-port-22-ingress.md) aws.exfiltration.ec2-share-ami Exfiltrate an AMI by Sharing It Link (https://github.com/sbasu7241/AWS-Threat-Simulation-and-Detection/blob/main/aws.exfiltration.ec2-share-ami.md) aws.exfiltration.ec2-share-ebs-snapshot Exfiltrate EBS Snapshot by Sharing It Link (https://github.com/sbasu7241/AWS-Threat-Simulation-and-Detection/blob/main/aws.exfiltration.rds-share-snapshot.md) aws.exfiltration.rds-share-snapshot Exfiltrate RDS Snapshot by Sharing Link (https://github.com/sbasu7241/AWS-Threat-Simulation-and-Detection/blob/main/aws.exfiltration.rds-share-snapshot.md) aws.exfiltration.s3-backdoor-bucket-policy Backdoor an S3 Bucket via its Bucket Policy Link (https://github.com/sbasu7241/AWS-Threat-Simulation-and-Detection/blob/main/aws.exfiltration.s3-backdoor-bucket-policy.md) aws.persistence.iam-backdoor-role Backdoor an IAM Role Link (https://github.com/sbasu7241/AWS-Threat-Simulation-and-Detection/blob/main/aws.persistence.iam-backdoor-role.md) aws.persistence.iam-backdoor-user Create an Access Key on an IAM User TBD aws.persistence.iam-create-admin-user Create an administrative IAM User TBD

___________________________
@hacking_Attack
@Hacking_Video

aws.persistence.iam-create-user-login-profile Create a Login Profile on an IAM User TBD aws.persistence.lambda-backdoor-function Backdoor Lambda Function Through Resource-Based Policy TBD Credits Awesome team at Datadog, Inc. for Stratus Red Team here (https://github.com/DataDog/stratus-red-team) Hacking the Cloud AWS (https://hackingthe.cloud/aws/general-knowledge/assume_role_logic/) Falcon Force team blog (https://medium.com/falconforce/falconfriday-detecting-realistic-aws-cloud-attacks-using-azure-sentinel-0xff1c-b62fd45c87dc)

Download AWS-Threat-Simulation-and-Detection (https://github.com/sbasu7241/AWS-Threat-Simulation-and-Detection)

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Gathering Momentum: 3 Steps Forward to Expand SBoM Use

New studies show less than a third of organizations use software bills of materials (SBoMs), but momentum is building to boost that number.

Dark Reading: Attacks/Breaches
Name That Edge Toon: Hey, Batter Batter!

Come up with a clever caption, and our panel of experts will reward the winner with a $25 Amazon gift card.

Hacking on Medium
How to Rickroll your friends with a Poor man’s USB Rubber Ducky?

https://cdn-images-1.medium.com/max/1426/1*BXyAqmG4m-Mubco50OZVow.png
I was going through my old stuff and found an old CD which had a simple flash game in it. I opened it up on my laptop and found a file…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Just How Sure Are You About The Security Of Your Data On Messaging Apps?

https://cdn-images-1.medium.com/max/1080/1*MV3XYjHIqCwK1im33IWZkA.png
Did you know that WhatsApp shares your phone numbers with Facebook?

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
تهكير حساب واتساب بجميع الطرق ( 2022 )

https://cdn-images-1.medium.com/max/1280/1*nJg3xIB5ZAaiq4i_hiZULw.png
تهكير حساب whatsapp في هذا المقال الرائع سوف نتعرف على جميع طرق المستخدمة في اختراق الواتساب وتهكير الحسابات, ويعتبر تطبيق الواتساب من…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
What I learnt from reading 126* Information Disclosure Writeups.

https://cdn-images-1.medium.com/max/969/1*N2b2uitwAta6oQzDJS-K6g.png
Let’s tackle the most valuable and mysterious bug type…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video