All onliners for bug bounty hunters
check all oneliners below.Continue reading on Medium »
Read more...
check all oneliners below.Continue reading on Medium »
Read more...
The Helio Bounty Program is now live
We are pleased to announce the official start of the Helio Bounty Program for our community and security researchers. It is critical to…Continue reading on Medium »
Read more...
We are pleased to announce the official start of the Helio Bounty Program for our community and security researchers. It is critical to…Continue reading on Medium »
Read more...
Bypass Email Confirmation
https://medium.com/@baradjaydipsinh83/bypass-email-confirmation-2516f0a452ee?source=rss------bug_bounty-5
___________________________
@hacking_Attack
@Hacking_Video
https://medium.com/@baradjaydipsinh83/bypass-email-confirmation-2516f0a452ee?source=rss------bug_bounty-5
___________________________
@hacking_Attack
@Hacking_Video
Medium
Bypass Email Confirmation
Hello everyone. In this blog, I will share my finding on How I was able to bypass the email confirmation by just paying close observation…
Hello everyone. In this blog, I will share my finding on How I was able to bypass the email confirmation by just paying close observation…Continue reading on Medium » (https://medium.com/@baradjaydipsinh83/bypass-email-confirmation-2516f0a452ee?source=rss------bug_bounty-5)
___________________________
@hacking_Attack
@Hacking_Video
___________________________
@hacking_Attack
@Hacking_Video
Medium
Bypass Email Confirmation
Hello everyone. In this blog, I will share my finding on How I was able to bypass the email confirmation by just paying close observation…
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking Articles
Caldera: Red Team Emulation (Part 1)
This article aims to demonstrate an open-source breach & emulation framework through which red team activity can be conducted with ease. It focuses on MITRE simulation and has tons of other functions that can be used in the activity. Table of ContentsMITRE Att&ck
Caldera
* Pre-requisite & dependencies
* Interface
* Installation
* Plugins
Campaigns
* Step1: Deploy an Agent
* Step2: Abilities
* Step3: Setting up Operations
* Step4: Exporting the result
Conclusion Mitre Att&ckMitre framework provides a list of all the Tactics, Techniques and Procedure (TTPs) & their corresponding sub-techniques arranged in a well-structured form which can be used in red team activities.
https://i0.wp.com/blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjp3GaFNZaN3IyfZzSE6Hpz3hCT2m4HqaNbPKUQQLvqDzIaXKfzZjAGAcHCjgBbxA27niO_ZL8aXt2skapB6rNoKfDwqWKJYIGuGvqhVSHEch40b8tGnnWjdLmemO-dYo_vmDaHJzVlILvMqWPsuer4x0BdoXxe-tZyUtp-iWfDnVwt7U0nSQx9HopTiw/s16000/0.1.png?w=640&ssl=1 CalderaCALDERA breach & emulation tool designed to easily automate adversary emulation, assist manual red-teams and automate incident response.
The framework consists of two components:
The core system: This is the framework code, consisting of what is available in this repository. Included is an asynchronous command-and-control (C2) server with a REST API and a web interface.
Plugins: These repositories expand the core framework capabilities and provide additional functionality. Examples include agents, reporting, collections of TTPs and more.
Pre-requisite & dependencies
These requirements are for the computer running the core framework:
* Any Linux or MacOS
* Python 3.7+ (with Pip3)
* Recommended hardware to run on is 8GB+ RAM and 2+ CPUs
* Recommended: GoLang 1.17+ to dynamically compile GoLang-based agents.
Installation
Follow these steps for setting up caldera:
git clone https://github.com/mitre/caldera.git --recursive
https://i0.wp.com/blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEguVaqh-QQaeCGiN858M7A8pkWvV3BFyuS_E_xiSE2UQ0LXWXHXbh_SImDaDrr_T-dztmDY9guusDhaTbi10jfAxQLRfGH5fKT63MNfgc51NKgJPSuG-o85_RNzqdVM7ZFPiQuZxdjulRt7RjvA-VZqAUSRWyNRpoMgJT7aqu0b6vZ9AelZb_go1AtylA/s16000/1.png?w=640&ssl=1
cd caldera
pip3 install -r requirements.txt
python3 server.py –insecure
https://i0.wp.com/blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgAIfh3Ra6ydFJ1f1HfltbyY_HHC9yNugHIwLh-a-w7Rf2Aok45aJS3B9w2-acduxLE_PYEdqeZGpPYzly9z6iNF1yc5l6tbWll-O9pJ1-HH9a4bJtnQg9b2hERJovEedd5y1t2YnuyiuWFTGm5zKQPMth1TGj6Wtk6yIuGS6B_WU_OICGvEncD5PLxow/s16000/2.png?w=640&ssl=1
Interface
Caldera provides web interface which is simple to navigate and use.
http://127.0.0.1:8888
username: red
Password: admin
https://i0.wp.com/blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEic7DYVpDLQI-0W8-JpQIt-lioSTPCd4nKRQ_l1x4guI0iw0KL7sSYz_CdLjfFMd763sAGHPlHynOFi9lMXWwR6JoA6zSUEFPX2tFvE-Db-28a1rk-1yW-yo6Te9sXB2Wr-sr3xxo0tzD8hXYR4UEgatg-PYMfGC-8rrWan1QEfqKw54JjnpkMt3_E-8A/s16000/3.png?w=640&ssl=1
https://i0.wp.com/blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgP3STTZlSiz1H01unjLETZOAshF9WXCrE3RI5RIpiS5QvH2WmSznsuQeodXBb4yBGRZ8trCKnT3Oza6oKM8XzS8PF1dvtfytvSGrItr41dIfF1p50KENWl76JRK166jDoOReds2Ctmjr0izlEUwzfCgI8oKqzpTfXpi8Gqqw0YnyHHC6x0iC6-fepiww/s16000/4.png?w=640&ssl=1
Plugins
The Plugins category offers a list of all current plugins and allows you to quickly and easily access their functionality.
* Access (Red team initial access tools and techniques)
* Atomic (Atomic Red Team project TTPs)
* Builder (Dynamically compile payloads)
* CalTack (embedded ATT&CK website)
* Compass (ATT&CK visualizations)
* Debrief (Operations insights)
* Emu (CTID emulation plans)
* Fieldmanual (Documentation)
* GameBoard (Visualize joint red and blue operations)
* Human (Create simulated noise on an endpoint)
* Manx (Shell functiona[...]
___________________________
@hacking_Attack
@Hacking_Video
Caldera: Red Team Emulation (Part 1)
This article aims to demonstrate an open-source breach & emulation framework through which red team activity can be conducted with ease. It focuses on MITRE simulation and has tons of other functions that can be used in the activity. Table of ContentsMITRE Att&ck
Caldera
* Pre-requisite & dependencies
* Interface
* Installation
* Plugins
Campaigns
* Step1: Deploy an Agent
* Step2: Abilities
* Step3: Setting up Operations
* Step4: Exporting the result
Conclusion Mitre Att&ckMitre framework provides a list of all the Tactics, Techniques and Procedure (TTPs) & their corresponding sub-techniques arranged in a well-structured form which can be used in red team activities.
https://i0.wp.com/blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjp3GaFNZaN3IyfZzSE6Hpz3hCT2m4HqaNbPKUQQLvqDzIaXKfzZjAGAcHCjgBbxA27niO_ZL8aXt2skapB6rNoKfDwqWKJYIGuGvqhVSHEch40b8tGnnWjdLmemO-dYo_vmDaHJzVlILvMqWPsuer4x0BdoXxe-tZyUtp-iWfDnVwt7U0nSQx9HopTiw/s16000/0.1.png?w=640&ssl=1 CalderaCALDERA breach & emulation tool designed to easily automate adversary emulation, assist manual red-teams and automate incident response.
The framework consists of two components:
The core system: This is the framework code, consisting of what is available in this repository. Included is an asynchronous command-and-control (C2) server with a REST API and a web interface.
Plugins: These repositories expand the core framework capabilities and provide additional functionality. Examples include agents, reporting, collections of TTPs and more.
Pre-requisite & dependencies
These requirements are for the computer running the core framework:
* Any Linux or MacOS
* Python 3.7+ (with Pip3)
* Recommended hardware to run on is 8GB+ RAM and 2+ CPUs
* Recommended: GoLang 1.17+ to dynamically compile GoLang-based agents.
Installation
Follow these steps for setting up caldera:
git clone https://github.com/mitre/caldera.git --recursive
https://i0.wp.com/blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEguVaqh-QQaeCGiN858M7A8pkWvV3BFyuS_E_xiSE2UQ0LXWXHXbh_SImDaDrr_T-dztmDY9guusDhaTbi10jfAxQLRfGH5fKT63MNfgc51NKgJPSuG-o85_RNzqdVM7ZFPiQuZxdjulRt7RjvA-VZqAUSRWyNRpoMgJT7aqu0b6vZ9AelZb_go1AtylA/s16000/1.png?w=640&ssl=1
cd caldera
pip3 install -r requirements.txt
python3 server.py –insecure
https://i0.wp.com/blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgAIfh3Ra6ydFJ1f1HfltbyY_HHC9yNugHIwLh-a-w7Rf2Aok45aJS3B9w2-acduxLE_PYEdqeZGpPYzly9z6iNF1yc5l6tbWll-O9pJ1-HH9a4bJtnQg9b2hERJovEedd5y1t2YnuyiuWFTGm5zKQPMth1TGj6Wtk6yIuGS6B_WU_OICGvEncD5PLxow/s16000/2.png?w=640&ssl=1
Interface
Caldera provides web interface which is simple to navigate and use.
http://127.0.0.1:8888
username: red
Password: admin
https://i0.wp.com/blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEic7DYVpDLQI-0W8-JpQIt-lioSTPCd4nKRQ_l1x4guI0iw0KL7sSYz_CdLjfFMd763sAGHPlHynOFi9lMXWwR6JoA6zSUEFPX2tFvE-Db-28a1rk-1yW-yo6Te9sXB2Wr-sr3xxo0tzD8hXYR4UEgatg-PYMfGC-8rrWan1QEfqKw54JjnpkMt3_E-8A/s16000/3.png?w=640&ssl=1
https://i0.wp.com/blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgP3STTZlSiz1H01unjLETZOAshF9WXCrE3RI5RIpiS5QvH2WmSznsuQeodXBb4yBGRZ8trCKnT3Oza6oKM8XzS8PF1dvtfytvSGrItr41dIfF1p50KENWl76JRK166jDoOReds2Ctmjr0izlEUwzfCgI8oKqzpTfXpi8Gqqw0YnyHHC6x0iC6-fepiww/s16000/4.png?w=640&ssl=1
Plugins
The Plugins category offers a list of all current plugins and allows you to quickly and easily access their functionality.
* Access (Red team initial access tools and techniques)
* Atomic (Atomic Red Team project TTPs)
* Builder (Dynamically compile payloads)
* CalTack (embedded ATT&CK website)
* Compass (ATT&CK visualizations)
* Debrief (Operations insights)
* Emu (CTID emulation plans)
* Fieldmanual (Documentation)
* GameBoard (Visualize joint red and blue operations)
* Human (Create simulated noise on an endpoint)
* Manx (Shell functiona[...]
___________________________
@hacking_Attack
@Hacking_Video
Hacking Articles
Caldera: Red Team Emulation (Part 1)
Learn how to use Caldera for Red Team Emulation. This guide covers setup, operations, and exporting results in adversary simulations.
Hacking Articles Tips Tricks Videos Tutorials
Hacking Articles Caldera: Red Team Emulation (Part 1) This article aims to demonstrate an open-source breach & emulation framework through which red team activity can be conducted with ease. It focuses on MITRE simulation and has tons of other functions that…
lity and reverse shell payloads)
* Mock (Simulate agents in operations)
* Response (Incident response)
* Sandcat (Default agent)
* SSL (Enable HTTPS for caldera)
* Stockpile (Technique and profile storehouse)
* Training (Certification and training course)
To know more about a particular plugin, follow the link. CampaignsAgents, adversaries, and operations make up the Campaigns category, which may be used to build up the numerous agents, adversaries, and operations needed for a red team operation or adversary emulation.
Step1: Deploy an Agents
To begin with initial access we need to implant an agent inside the target system.
To set up an agent or listener:
In the campaign tab, click on agents
https://i0.wp.com/blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgZ_lBolR5uhRdtzblD8-Qm91gdOP5sPmREQvbUr3Tapxj2XGqvNmwbyH2e19cEzrB2yNWJRy-g3W7Wu280Adn93Ud8ADQBLqdziEBDu0PzEBXnuxvHIS7r45P4XnXHdWZN6-2Ym3teshISmWhf2PbaQQiPGrCJ8Et8h0tHsqGN7EYxWt_frbcJUkbnTw/s16000/5.png?w=640&ssl=1
Choose an agent (3 types currently available)
https://i0.wp.com/blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgy41IUoHfrWUoQGHxK3CTESQNafi_LgGTFjNzgNYD11anZXekeGozrzjcbEvJf_FgNZ6NBNxIMF4UwTotESSkPPhkkjC7TDIF_5QOeVyEZ9ILGZyXCYhBzlgb-sG8poMrFjOuQrMO8ZyjUw_lFkEl617AsZjYFKM4kBP9Aq0c_OR6FFhfDVJZEUT0fGA/s16000/6.1.png?w=640&ssl=1
Choose the platform (Windows, Linux or Darwin [mac OS])
https://i0.wp.com/blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiVkifgQkeNYxlxQG2H_gIiIxZS_CkXOX7gs3U2pTKJYAic8lqrVMxbKClLyLiJQJpy3x8_lVb4EpiJWdkajomvh94fbhNn534Rh809LkPUv0u1_EX47s0zqSJAdCp4W_NUaQCFirb7DdwzndHdI578t7P8mJ5MNqXekHK1ABtONSsuYCTB9xCrGGU7Wg/s16000/6.png?w=640&ssl=1
As soon as the platform is selected, you need to set up the IP, Port & name of the implant
https://i0.wp.com/blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgckuAVZfGJ9HfaSQSJAzufJDrG_7ZOKLlysBpEAfzCqTqMoa_7tV81IX5nb69CQtcVlVuZsjRNnOqyzaTDLvF4cuz52D4IAUccI-TPHCXRac3I-8lX0_dsbqM7-nO7BeRLkPNsevnH3L9JZgqMlXgPMlriYHBidVqlgHm2kdLAUyrtQEUH3qnTZ1Rs3Q/s16000/7.png?w=640&ssl=1
It will also give a set of commands needed to be executed on the target
In the case of Linux/Mac OS, execute it on terminal
https://i0.wp.com/blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgiThndWAHgWD6_YtBhzZn556u6PlKzZ0SVk0t0dLY_mCDmObiqknI7wVa1W2KZKKeo99CXDBtHVSJJBWf0Tyk0T5aT8qtlPhw1BHHhpX1G13RrXgUGGSioRT1HvtWDRkUHo0PH0tPZu6GAcntV9mxBmgBmitBLbxg6tAshX9Tee7RilGdZ1-6k32xIow/s16000/8.png?w=640&ssl=1
Deploy agent inside the target machine by simple copy-paste
https://i0.wp.com/blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjsEX9r-wdZ4ZfWHLmA6XzAH1yAljGty0a73_PoRJOyy6P9yEKdDCDOJapJ0vMagsijbqeAt6hcLu84hRqSW4qiiZrRkOA5Q293IXlnJjObsMgakAHlMYFKUIwxoybTh1lrQDfJmXWCQ9kuMWppjhbGClZVV_akS-jaRPd3ttp3q7dH3UEVp7ICWIBoAg/s16000/9.png?w=640&ssl=1
In the case of Windows, execute it on PowerShell (Bypass the execution policy first)
https://i0.wp.com/blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg9zviKsLXzgPE8Rl6WFvFY0xzwzC2p2xehhWnlxSUoYlsf1oQ86jLh86ECDE-EAXvdKjI76KLL6CMSkvwNgdRPeTwb1ACMqtAxQS2hIPMwnkCymW7QmwY0z8lvfAGRES6PwWudqQnXkBVUqEAw_TymIXmJ-c7rOZajCWPFqt9Op5FlZA6U8cEE0Y8JnQ/s16000/11.png?w=640&ssl=1
Deploy agent inside the target machine by simple copy-paste.
https://i0.wp.com/blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjNdDdtg34wHpjKalsux0817796ZADbAjfxxmbWoWN-YBdh7o7wYHx7zpqE4oVsCxh1qIflYI0LxxW-cYfWHp_Y3FClKog0pqX3GAacWl5JtXs6RGC5bEiNrr1G0ohm128MMG8cSFJQWrIkPtwCJUJZWxIp9MEwDn8-5Dq-okFHAM1K99phjOkcW5ajtg/s16000/12.png?w=640&ssl=1
The agent pops back onto the caldera which specifies the command which was executed on the victim end was successful
https://i0.wp.com/blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhxB-Phbt03Yajsq4oy8fsPjPW-TgiSJiNFeMjWRerALNbgh7ROXOgzCAD0iu9gHOo2KQ2RGJHVq407kIxbFXk_xoTLd4GGx8mOpVHxNm3jIOHIOK5XwAQjtRZTbXkr4CKKIP7ZfAHl9B33QexfROLrSOr4snZai3notJOAqlbYD_5Nm2cI4sVZg1N6dw/s16000/13.png?w=640&ssl=1
Step2: Abilities
An ability is a specific ATT&CK tactic/tech[...]
___________________________
@hacking_Attack
@Hacking_Video
* Mock (Simulate agents in operations)
* Response (Incident response)
* Sandcat (Default agent)
* SSL (Enable HTTPS for caldera)
* Stockpile (Technique and profile storehouse)
* Training (Certification and training course)
To know more about a particular plugin, follow the link. CampaignsAgents, adversaries, and operations make up the Campaigns category, which may be used to build up the numerous agents, adversaries, and operations needed for a red team operation or adversary emulation.
Step1: Deploy an Agents
To begin with initial access we need to implant an agent inside the target system.
To set up an agent or listener:
In the campaign tab, click on agents
https://i0.wp.com/blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgZ_lBolR5uhRdtzblD8-Qm91gdOP5sPmREQvbUr3Tapxj2XGqvNmwbyH2e19cEzrB2yNWJRy-g3W7Wu280Adn93Ud8ADQBLqdziEBDu0PzEBXnuxvHIS7r45P4XnXHdWZN6-2Ym3teshISmWhf2PbaQQiPGrCJ8Et8h0tHsqGN7EYxWt_frbcJUkbnTw/s16000/5.png?w=640&ssl=1
Choose an agent (3 types currently available)
https://i0.wp.com/blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgy41IUoHfrWUoQGHxK3CTESQNafi_LgGTFjNzgNYD11anZXekeGozrzjcbEvJf_FgNZ6NBNxIMF4UwTotESSkPPhkkjC7TDIF_5QOeVyEZ9ILGZyXCYhBzlgb-sG8poMrFjOuQrMO8ZyjUw_lFkEl617AsZjYFKM4kBP9Aq0c_OR6FFhfDVJZEUT0fGA/s16000/6.1.png?w=640&ssl=1
Choose the platform (Windows, Linux or Darwin [mac OS])
https://i0.wp.com/blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiVkifgQkeNYxlxQG2H_gIiIxZS_CkXOX7gs3U2pTKJYAic8lqrVMxbKClLyLiJQJpy3x8_lVb4EpiJWdkajomvh94fbhNn534Rh809LkPUv0u1_EX47s0zqSJAdCp4W_NUaQCFirb7DdwzndHdI578t7P8mJ5MNqXekHK1ABtONSsuYCTB9xCrGGU7Wg/s16000/6.png?w=640&ssl=1
As soon as the platform is selected, you need to set up the IP, Port & name of the implant
https://i0.wp.com/blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgckuAVZfGJ9HfaSQSJAzufJDrG_7ZOKLlysBpEAfzCqTqMoa_7tV81IX5nb69CQtcVlVuZsjRNnOqyzaTDLvF4cuz52D4IAUccI-TPHCXRac3I-8lX0_dsbqM7-nO7BeRLkPNsevnH3L9JZgqMlXgPMlriYHBidVqlgHm2kdLAUyrtQEUH3qnTZ1Rs3Q/s16000/7.png?w=640&ssl=1
It will also give a set of commands needed to be executed on the target
In the case of Linux/Mac OS, execute it on terminal
https://i0.wp.com/blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgiThndWAHgWD6_YtBhzZn556u6PlKzZ0SVk0t0dLY_mCDmObiqknI7wVa1W2KZKKeo99CXDBtHVSJJBWf0Tyk0T5aT8qtlPhw1BHHhpX1G13RrXgUGGSioRT1HvtWDRkUHo0PH0tPZu6GAcntV9mxBmgBmitBLbxg6tAshX9Tee7RilGdZ1-6k32xIow/s16000/8.png?w=640&ssl=1
Deploy agent inside the target machine by simple copy-paste
https://i0.wp.com/blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjsEX9r-wdZ4ZfWHLmA6XzAH1yAljGty0a73_PoRJOyy6P9yEKdDCDOJapJ0vMagsijbqeAt6hcLu84hRqSW4qiiZrRkOA5Q293IXlnJjObsMgakAHlMYFKUIwxoybTh1lrQDfJmXWCQ9kuMWppjhbGClZVV_akS-jaRPd3ttp3q7dH3UEVp7ICWIBoAg/s16000/9.png?w=640&ssl=1
In the case of Windows, execute it on PowerShell (Bypass the execution policy first)
https://i0.wp.com/blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg9zviKsLXzgPE8Rl6WFvFY0xzwzC2p2xehhWnlxSUoYlsf1oQ86jLh86ECDE-EAXvdKjI76KLL6CMSkvwNgdRPeTwb1ACMqtAxQS2hIPMwnkCymW7QmwY0z8lvfAGRES6PwWudqQnXkBVUqEAw_TymIXmJ-c7rOZajCWPFqt9Op5FlZA6U8cEE0Y8JnQ/s16000/11.png?w=640&ssl=1
Deploy agent inside the target machine by simple copy-paste.
https://i0.wp.com/blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjNdDdtg34wHpjKalsux0817796ZADbAjfxxmbWoWN-YBdh7o7wYHx7zpqE4oVsCxh1qIflYI0LxxW-cYfWHp_Y3FClKog0pqX3GAacWl5JtXs6RGC5bEiNrr1G0ohm128MMG8cSFJQWrIkPtwCJUJZWxIp9MEwDn8-5Dq-okFHAM1K99phjOkcW5ajtg/s16000/12.png?w=640&ssl=1
The agent pops back onto the caldera which specifies the command which was executed on the victim end was successful
https://i0.wp.com/blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhxB-Phbt03Yajsq4oy8fsPjPW-TgiSJiNFeMjWRerALNbgh7ROXOgzCAD0iu9gHOo2KQ2RGJHVq407kIxbFXk_xoTLd4GGx8mOpVHxNm3jIOHIOK5XwAQjtRZTbXkr4CKKIP7ZfAHl9B33QexfROLrSOr4snZai3notJOAqlbYD_5Nm2cI4sVZg1N6dw/s16000/13.png?w=640&ssl=1
Step2: Abilities
An ability is a specific ATT&CK tactic/tech[...]
___________________________
@hacking_Attack
@Hacking_Video
Hacking Articles Tips Tricks Videos Tutorials
lity and reverse shell payloads) * Mock (Simulate agents in operations) * Response (Incident response) * Sandcat (Default agent) * SSL (Enable HTTPS for caldera) * Stockpile (Technique and profile storehouse) * Training (Certification and training course)…
nique implementation which can be executed on running agents. Abilities will include the command(s) to run, the platforms/executors the commands can run on (ex: Windows / PowerShell), payloads to include, and a reference to a module to parse the output on the CALDERA server.
https://i0.wp.com/blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjlynOEvu4w-fk7bB-7qTdL5AOjhcHq4anRARTJR5gqpDXYWCEHy7qRemowPDBZJqKdIZszU-AHz-0t6u5nJZuf6wupyZgz0C44Q57UX1muM_OfeezPCiPGYaS63MGe9AhneCv95GNFmX2cRNTXExACpv5vKNOF8sTQ1o3HevnIVXFfr32bzsh6YWIpig/s16000/14.1%20-%20Copy.png?w=640&ssl=1
As you can see in the above ss, we can select Platform and related TTP. Let us take a discovery as a tactic & Linux as a platform (the same tactic demonstrated for windows in this article)
https://i0.wp.com/blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEijOLFJaeuqEhqpSKF-Kq94s0OPKb5bh-RUdhZ178jbe10eq3TT40hR6zNmcgOy2iP02_f7brRCTXB9nsxgZZNbS7bk0dzarWCgDQQGJWZZjALHbKqcnbJZ8JJ8YSUS7Inhg5obwe-_DfkNKkBazFZMtzl7SgOk4SzSmCUm24m979DQYHtbkkEjFRo6qw/s16000/14.2.png?w=640&ssl=1
Step3: Setting up Operations
After setting up the agent, now it is time to run the abilities or the set of instructions as shown above. For this, we need to set up an operation
To do this:
* Under the Campaigns tab, select operations
* Choose Create operations
https://i0.wp.com/blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiMHbk23zQWqXoMweiPNeF0cgpGUgb2ENZqSj6shlfttnUbI5TIyIjkON1QNmPsX8xAU2_uTRY37-uGO0fcFyd9weDPOSzBqK4wXgOXLcBxmra685UV4r6s4SFE6c77yskz1oYGrzP1r1GpTiNgGhrVh5q7BMoe1uh7q8-a4wXpkZOMeZj3edhbFxgbAw/s16000/14.png?w=640&ssl=1
Choose the adversary (Adversary Profiles are collections of ATT&CK TTPs, designed to create specific effects on a host or network. Profiles can be used for offensive or defensive use cases.)
https://i0.wp.com/blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgm7CBruzTUGkS04YVbdX6fOUS6CR3oSwmtcF7Nmie52NyWZ7HgZXkJ7BEmcWswd8fdwEI_5e-EO73uXfA9rFdXy0i6wrHfNxawNKZTyLMGF9JoMLT8yTlkp5mXm71aU_AJMwv6YjU3AKAbpchenvd5XUqlLKklwlPUzoaSK2VyW0rANKuhlzqcxUK-0w/s16000/15.1.png?w=640&ssl=1
Fill in the details and specifications of the operation you want to run
https://i0.wp.com/blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiCx0d2Xw5mfrAfaUPsTqi9l4rESdkDgCdQvO77UMBUXxHi7gAqCpVleMsE1lUMbYrebLM6B5u1W7lRk4XSuC5c9Ams1HYlIdksy4SOUgyz4H7Sz4gQwPVezvWnA0l-_sWskrAGJLGyKbLcNyE6b6x5VN-lsLbomAS05C1ocjs-ZvHpk7z3_0lghQmS4Q/s16000/15.png?w=640&ssl=1
Click on start, after a while, you can see that it starts running and populating the results on the screen
https://i0.wp.com/blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj9O_BOgV4ntEJ8vvweuS5w0YpJS479h46XGM0z5MQT3E8ngK2I15uquRyJoAS1e7drC1-jPsqua6R_1e1Aq4--LZBah2iXv-yDpKZd8s_idEB-udPfWOpCT-79jqBE10vw61tz50oegHlai9GIoofAHk-Er_YXv8swVPlXkpz9ASFQRlwVmx7Djv2CXA/s16000/18.png?w=640&ssl=1
As you can see, all set of commands running is obfuscated in base64nopadd format (also you can select other options specified), we can also see the command and we can view the output of the command (Also, we can see the status of the task performed)
https://i0.wp.com/blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi0SJPpWNdI6yTpXOrmSEL4rmGqsYZtzaKci3YSFXx-0SinjwY8qljYq9dvFzaJXMc79FV58-ro1ejU57INFCW8nXjVEul_XsJA29RDvyud_uLlUnOMGFCf9WcezyL-qC6TmDu7lpPY3smtWUnwuusWRLRo90kxQ51maHC7XH4I3RFiwuUhfofh5yjdgw/s16000/19.png?w=640&ssl=1
https://i0.wp.com/blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhIg-dosfSEVftrsHmZ_A4ONUMZQbg-9HlOtFrlDLHdMbaCEWhRDbJV1Jpo8b7QFIRVm0vDlwlcNVZeEqyyPL1vlptRgONH9rgE-mnkVok8q5hI0t7KSOKthgIDQbdDjfuE5EJT6O2bJE-qbBoqqfmNv-FpFzRkoMXIiYBqzvLfXHazS7-9o5Z_W5f4Bg/s16000/20.png?w=640&ssl=1
Step4: Exporting the result
After the activity has been completed, we can extract the report in two ways:
* Directly from the download tab which appears after an operation is completed
https://i0.wp.com/blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhRSQz0Net_Sl-0RmCnvihOMQDM4RyOtDvIbYuIh2QprmPVrmd4P9Aki789hvj0sE9D7K-PaJingcf7XSopVo_I4Wg[...]
___________________________
@hacking_Attack
@Hacking_Video
https://i0.wp.com/blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjlynOEvu4w-fk7bB-7qTdL5AOjhcHq4anRARTJR5gqpDXYWCEHy7qRemowPDBZJqKdIZszU-AHz-0t6u5nJZuf6wupyZgz0C44Q57UX1muM_OfeezPCiPGYaS63MGe9AhneCv95GNFmX2cRNTXExACpv5vKNOF8sTQ1o3HevnIVXFfr32bzsh6YWIpig/s16000/14.1%20-%20Copy.png?w=640&ssl=1
As you can see in the above ss, we can select Platform and related TTP. Let us take a discovery as a tactic & Linux as a platform (the same tactic demonstrated for windows in this article)
https://i0.wp.com/blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEijOLFJaeuqEhqpSKF-Kq94s0OPKb5bh-RUdhZ178jbe10eq3TT40hR6zNmcgOy2iP02_f7brRCTXB9nsxgZZNbS7bk0dzarWCgDQQGJWZZjALHbKqcnbJZ8JJ8YSUS7Inhg5obwe-_DfkNKkBazFZMtzl7SgOk4SzSmCUm24m979DQYHtbkkEjFRo6qw/s16000/14.2.png?w=640&ssl=1
Step3: Setting up Operations
After setting up the agent, now it is time to run the abilities or the set of instructions as shown above. For this, we need to set up an operation
To do this:
* Under the Campaigns tab, select operations
* Choose Create operations
https://i0.wp.com/blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiMHbk23zQWqXoMweiPNeF0cgpGUgb2ENZqSj6shlfttnUbI5TIyIjkON1QNmPsX8xAU2_uTRY37-uGO0fcFyd9weDPOSzBqK4wXgOXLcBxmra685UV4r6s4SFE6c77yskz1oYGrzP1r1GpTiNgGhrVh5q7BMoe1uh7q8-a4wXpkZOMeZj3edhbFxgbAw/s16000/14.png?w=640&ssl=1
Choose the adversary (Adversary Profiles are collections of ATT&CK TTPs, designed to create specific effects on a host or network. Profiles can be used for offensive or defensive use cases.)
https://i0.wp.com/blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgm7CBruzTUGkS04YVbdX6fOUS6CR3oSwmtcF7Nmie52NyWZ7HgZXkJ7BEmcWswd8fdwEI_5e-EO73uXfA9rFdXy0i6wrHfNxawNKZTyLMGF9JoMLT8yTlkp5mXm71aU_AJMwv6YjU3AKAbpchenvd5XUqlLKklwlPUzoaSK2VyW0rANKuhlzqcxUK-0w/s16000/15.1.png?w=640&ssl=1
Fill in the details and specifications of the operation you want to run
https://i0.wp.com/blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiCx0d2Xw5mfrAfaUPsTqi9l4rESdkDgCdQvO77UMBUXxHi7gAqCpVleMsE1lUMbYrebLM6B5u1W7lRk4XSuC5c9Ams1HYlIdksy4SOUgyz4H7Sz4gQwPVezvWnA0l-_sWskrAGJLGyKbLcNyE6b6x5VN-lsLbomAS05C1ocjs-ZvHpk7z3_0lghQmS4Q/s16000/15.png?w=640&ssl=1
Click on start, after a while, you can see that it starts running and populating the results on the screen
https://i0.wp.com/blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj9O_BOgV4ntEJ8vvweuS5w0YpJS479h46XGM0z5MQT3E8ngK2I15uquRyJoAS1e7drC1-jPsqua6R_1e1Aq4--LZBah2iXv-yDpKZd8s_idEB-udPfWOpCT-79jqBE10vw61tz50oegHlai9GIoofAHk-Er_YXv8swVPlXkpz9ASFQRlwVmx7Djv2CXA/s16000/18.png?w=640&ssl=1
As you can see, all set of commands running is obfuscated in base64nopadd format (also you can select other options specified), we can also see the command and we can view the output of the command (Also, we can see the status of the task performed)
https://i0.wp.com/blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi0SJPpWNdI6yTpXOrmSEL4rmGqsYZtzaKci3YSFXx-0SinjwY8qljYq9dvFzaJXMc79FV58-ro1ejU57INFCW8nXjVEul_XsJA29RDvyud_uLlUnOMGFCf9WcezyL-qC6TmDu7lpPY3smtWUnwuusWRLRo90kxQ51maHC7XH4I3RFiwuUhfofh5yjdgw/s16000/19.png?w=640&ssl=1
https://i0.wp.com/blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhIg-dosfSEVftrsHmZ_A4ONUMZQbg-9HlOtFrlDLHdMbaCEWhRDbJV1Jpo8b7QFIRVm0vDlwlcNVZeEqyyPL1vlptRgONH9rgE-mnkVok8q5hI0t7KSOKthgIDQbdDjfuE5EJT6O2bJE-qbBoqqfmNv-FpFzRkoMXIiYBqzvLfXHazS7-9o5Z_W5f4Bg/s16000/20.png?w=640&ssl=1
Step4: Exporting the result
After the activity has been completed, we can extract the report in two ways:
* Directly from the download tab which appears after an operation is completed
https://i0.wp.com/blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhRSQz0Net_Sl-0RmCnvihOMQDM4RyOtDvIbYuIh2QprmPVrmd4P9Aki789hvj0sE9D7K-PaJingcf7XSopVo_I4Wg[...]
___________________________
@hacking_Attack
@Hacking_Video
Hacking Articles Tips Tricks Videos Tutorials
nique implementation which can be executed on running agents. Abilities will include the command(s) to run, the platforms/executors the commands can run on (ex: Windows / PowerShell), payloads to include, and a reference to a module to parse the output on…
ieam5BJJZfl2sJdPGFgEsqk4fjLGIvSA5jDo6Wam5xBSi6zhFHXXnsFm6S-1oxLOGcDdHxSWYTsrHTBgHDJVofQFumH4YAwbVMQ/s16000/21.png?w=640&ssl=1
Go to debrief tab, choose the pointers to be included in the report; then download the full report as a PDF
https://i0.wp.com/blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgniyj3nsyfRAPVMvohry2a8oH31GlknWlNXoGWkWfg_lBdYAYe66vqLnZU-KusWG1xp-yJLTPrJr7uGs14nXKmFCfPMAs3xzfiDJzOE0x4-iu4LLLt3xbvX8k2gU3Pj-Tz7MP4q-ckUpK0gE9yJp9dkj1f8nniqArNZgWJfXg0tbJEdxHNJiqPX_nKJQ/s16000/22.1.png?w=640&ssl=1
https://i0.wp.com/blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEirqcsD1WicISDbW-oA2VeewJfMPPhVIito23X-D8NlVTLQzZ5iM89XnPYzNlsFFKT-1Z9c1K3CfzQso3dU4IWSExEwwurqjON99n5qupm60ww3BL-ZwwOvExSVgMFea83-VA7Lwm2-ffaoEZ2hIDydCDOsKisq-xhgk4ej7VG8VWROXT3o8gVVqIxnLA/s16000/22.png?w=640&ssl=1 ConclusionWe have thus been able to perform the adversary simulation with the help of Caldera. Using this framework, Red/Purple team activities can be easily performed.
Reference: https://caldera.readthedocs.io/en/latest/
Author: Ankit Sinha is a security researcher with expertise in Pentesting, Threat hunting and red teaming. Also, likes to work on a Myriad of things in the discipline of offensive security. Contact here
The post Caldera: Red Team Emulation (Part 1) appeared first on Hacking Articles.
___________________________
@hacking_Attack
@Hacking_Video
Go to debrief tab, choose the pointers to be included in the report; then download the full report as a PDF
https://i0.wp.com/blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgniyj3nsyfRAPVMvohry2a8oH31GlknWlNXoGWkWfg_lBdYAYe66vqLnZU-KusWG1xp-yJLTPrJr7uGs14nXKmFCfPMAs3xzfiDJzOE0x4-iu4LLLt3xbvX8k2gU3Pj-Tz7MP4q-ckUpK0gE9yJp9dkj1f8nniqArNZgWJfXg0tbJEdxHNJiqPX_nKJQ/s16000/22.1.png?w=640&ssl=1
https://i0.wp.com/blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEirqcsD1WicISDbW-oA2VeewJfMPPhVIito23X-D8NlVTLQzZ5iM89XnPYzNlsFFKT-1Z9c1K3CfzQso3dU4IWSExEwwurqjON99n5qupm60ww3BL-ZwwOvExSVgMFea83-VA7Lwm2-ffaoEZ2hIDydCDOsKisq-xhgk4ej7VG8VWROXT3o8gVVqIxnLA/s16000/22.png?w=640&ssl=1 ConclusionWe have thus been able to perform the adversary simulation with the help of Caldera. Using this framework, Red/Purple team activities can be easily performed.
Reference: https://caldera.readthedocs.io/en/latest/
Author: Ankit Sinha is a security researcher with expertise in Pentesting, Threat hunting and red teaming. Also, likes to work on a Myriad of things in the discipline of offensive security. Contact here
The post Caldera: Red Team Emulation (Part 1) appeared first on Hacking Articles.
___________________________
@hacking_Attack
@Hacking_Video
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Cloud Bucket Leak Detection Tools
https://cdn-images-1.medium.com/max/1200/1*g9h_3QBI9xjT3B2ddi0JWA.jpeg
Six cloud storage, leak detection tools
I want to write a storage bucket utilization, first draw a pie for myself
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Cloud Bucket Leak Detection Tools
https://cdn-images-1.medium.com/max/1200/1*g9h_3QBI9xjT3B2ddi0JWA.jpeg
Six cloud storage, leak detection tools
I want to write a storage bucket utilization, first draw a pie for myself
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
Cloud Bucket Leak Detection Tools
Six cloud storage, leak detection tools I want to write a storage bucket utilization, first draw a pie for myself
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
buffer-overflow2 PicoCTF Write-Up | Português-Brasil
https://cdn-images-1.medium.com/max/931/1*En-oUeqNtqVUad6R0MdeTw.png
Dessa vez irei mostrar um write-up de um lab do PicoCTF da categoria de binary exploitation, sendo um buffer overflow em Linux.
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
buffer-overflow2 PicoCTF Write-Up | Português-Brasil
https://cdn-images-1.medium.com/max/931/1*En-oUeqNtqVUad6R0MdeTw.png
Dessa vez irei mostrar um write-up de um lab do PicoCTF da categoria de binary exploitation, sendo um buffer overflow em Linux.
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
buffer-overflow2 PicoCTF Write-Up | Português-Brasil
Dessa vez irei mostrar um write-up de um lab do PicoCTF da categoria de binary exploitation, sendo um buffer overflow em Linux.
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
How I secured ISP (Internet Service Provider)
https://cdn-images-1.medium.com/max/1280/1*0gzF67ipUSn1hVZ_6A4G_g.png
Hello everyone hope all are safe and doing good. I am Cypher_Jerry Aka Harsha from Telangana, and a part-time bug bounty hunter.
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
How I secured ISP (Internet Service Provider)
https://cdn-images-1.medium.com/max/1280/1*0gzF67ipUSn1hVZ_6A4G_g.png
Hello everyone hope all are safe and doing good. I am Cypher_Jerry Aka Harsha from Telangana, and a part-time bug bounty hunter.
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
How I secured ISP (Internet Service Provider)
Hello everyone hope all are safe and doing good. I am Cypher_Jerry Aka Harsha from Telangana, and a part-time bug bounty hunter.