Hacking Articles Tips Tricks Videos Tutorials

5 views14:10

Kali Linux Tutorials
BITB : Browser In The Browser (BITB) Templates

BITB is a Browser templates for Browser In The Browser (BITB) attack.

Usage

Each folder has a index.htmlfile which has 4 variables that must be modified:

* XX-TITLE-XX – The title that shows up for the page (e.g. Sign in to your account now)
* XX-DOMAIN-NAME-XX – Domain name you’re masquerading as. (e.g. gmail.com)
* XX-DOMAIN-PATH-XX – Domain path (e.g. /auth/google/login)
* XX-PHISHING-LINK-XX – Phishing link which will be embedded into the iFrame (e.g. https://example.com)

Furthermore, if you’re using a Windows template you should update the logo.svgwhich is the icon of the website you’re masquerading as. The default logo is Microsoft.

Windows-DarkMode-Delay

The Windows-DarkMode-Delay folder makes use of jQuery’s fadeIn() function to add a slight delay to the pop-up window as it appears. This is only one way of making the Window appear in a delayed fashion, there’s various other ways to do the same.

Detecting Color Preference

To get the most out of this you should determine the OS from the user agent and the color preference and display the appropriate template.

To find out if you should use dark or light templates check out: https://stackoverflow.com/questions/50840168/how-to-detect-if-the-os-is-in-dark-mode-in-browsers

Detecting BITB

Dragging the Window

One way of detecting BITB is by attempting to drag the window to the edge of the browser. If the window cannot escape the browser then it’s not a real window.

Browser Extension

@odacavo released a great browser extension that can detect and warn users about embedded iframes. It’s available here: https://github.com/odacavo/enhanced-iframe-protection.
Download

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials

BITB : Browser In The Browser (BITB) Templates !!! Kali Linux

BITB is a Browser templates for Browser In The Browser (BITB) attack. Each folder has a index.html file which has 4 variables.

9 viewsedited 14:10

Hacking Articles Tips Tricks Videos Tutorials

8 views14:11

Hacking Articles Tips Tricks Videos Tutorials

Photo

Kali Linux Tutorials
O365-Doppelganger : A Quick Handy Script To Harvest Credentials Off Of A User

O365-Doppelganger is NOT a replacement for hardcore phishing activities. There are several other tools which perform OAuth and OTA capture which is not the aim of O365-Doppelganger.

O365-Doppelganger is a quick handy script to harvest credentials of a user during Red Teams. This repository is a quick hack of one of my old red team engagement scripts which I’ve used several times to capture credentials and use them for making windows access tokens for lateral movement. This code repository basically performs the below tasks:

* The GO code:
* hosts the O365 portal (can be replaced with anything in the index.html). It is recommended to use a valid cert and key file (LetsEncrypt?) instead of the one provided in the directory
* logs all user activity on the web portal in a seperate log file on the server
* logs the credentials captured in a seperate log file on the server
* can also be used to return a valid file to the user post capturing the credentials. This can be done by replacing the file named MacroFile.docin the current directory and replacing it with HTA/ISO/MSI or anything else that the phisher wants. Theres also a small code in the GO code which would need to be modified to specify the user’s file name which needs to be returned: content, err := ioutil.ReadFile("MacroFile.doc")
* Once modified, the target user when enters a valid email ID and password will be asked to save the above file. This file name can be changed using the below code in the GO file: response.Header().Set("Content-Disposition", "attachment; filename=Darkvortex Privacy Policy.doc")

* The index.html code:
* renders an O365 portal alongside a small regex which checks for a given user’s domain name to make it look a bit more legit. The regex code looks like this: pattern="^([a-zA-Z0-9_\-\.]+)@darkvortex\.([a-zA-Z]{2,5})$" title=" Valid darkvortex email ID"
* The above regex checks if the given username contains a full valid email address else it will prompt the user to enter a correct username as follows:

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg1aaktcxuOneFbpyT4WuMdDagm1li4rCZyQXYL04Hg8JjFvF5aQRFwsj7jJG-lYTuOsFTVVuUlNi3X3taPpLNTK_1pAYySuUGFfUxTug1D3eWSmKErKVeD6LtAaDo36rL93aksW6knFgq4CHIdXu1607r920Q7YsWWbXSZYb6Pl3-phgRgJYKgSMDp/s1917/18.png
* This same check is also performed in the GO code so that user’s do not use something like burp to bypass the check: if strings.Contains(value[i], "@darkvortex") {
* It’s recommended to change the name darkvortex in the index.html file to your own target company name.
* Once the correct email ID and the password is entered, the user will be asked to save the provided file as follows:
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjRsDQ9oYu3ikJGPIjzrtArkGxyRpZ_qsPO-NQnJTUgKQv1SsqDv7o3Ekn956Gmzs6-VXfKtkPT5_jaF1GiVtXph2oVY4fYsPbP6MYsr96Ifa1-pQPzWDMTLKc0iJKz6_uFRdREo8FjgAK_pKLbBeBb41FQBfl9zROPOzdQKsxJtD7aB_3Z6Xp4qgvu/s1907/img2.png

Download

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials

O365-Doppelganger : A Quick Handy Script To Harvest Credentials

O365-Doppelganger is NOT a replacement for hardcore phishing activities. There are several other tools which perform OAuth and OTA capture .

11 viewsedited 14:11

Hacking Articles Tips Tricks Videos Tutorials

Hacking into WordPress themes for CVEs and Fun.

Hi there! I hope all is well with you. In this writeup, I’ll discuss about the research I did on a WordPress theme, which taught me a lot…Continue reading on Pentester Nepal »
Read more...

6 views14:20

Hacking Articles Tips Tricks Videos Tutorials

Dark Reading: Attacks/Breaches
Are You Hiring Enough Entry-Level Security Pros?

New (ISC)² survey shows employment levels for entry-level cyber pros lag behind every other experience level.

6 views14:25

Source

Hacking Articles Tips Tricks Videos Tutorials

Dark Reading: Attacks/Breaches
CISOs Gain False Confidence in the Calm After the Storm of the Pandemic

While CISOs may feel more confident in their security posture emerging from the pandemic, new research suggests that doesn't mean organizations are better prepared for large-scale attacks.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading

CISOs Gain False Confidence in the Calm After the Storm of the Pandemic

While CISOs may feel more confident in their security posture emerging from the pandemic, new research suggests that doesn't mean organizations are better prepared for large-scale attacks.

7 viewsedited 14:26

Hacking Articles Tips Tricks Videos Tutorials

Hacking into WordPress themes for CVEs and Fun.
https://medium.com/pentesternepal/hacking-into-wordpress-themes-for-cves-and-fun-bdde6c834344?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Medium

Hacking into WordPress themes for CVEs and Fun.

Hi there! I hope all is well with you. In this writeup, I’ll discuss about the research I did on a WordPress theme, which taught me a lot…

7 viewsedited 14:39

Hacking Articles Tips Tricks Videos Tutorials

8 views14:39