Steps to build Signed Shellcode Executable Pick any x64 Signed C# binary of your choice, a binary within which you would like cobalt strike beacon to reside and execute: E.g.: CasPol.exe etc. Generate your Cobalt Strike (https://www.kitploit.com/search/label/Cobalt%20Strike) Stageless Shellcode - x64-stageless.bin Place both of them into a folder where SigFlip (https://github.com/med0x2e/SigFlip) is also present and run the below command:
SigFlip.exe -i "Z:\ZLoader\CasPol.exe" "Z:\ZLoader\x64-stageless.bin" "Z:\ZLoader\update.exe" "S3cretK3y" Thanks to SigFlip now you have a (windows signed?) binary named update.exe which will be a digitally signed PE with encrypted shellcode embedded in it. Steps to build the AppDomain Loader DLL Take the C# Template Code from here (https://github.com/pwn1sher/frostbite/blob/main/test.cs) Replace your encryption (https://www.kitploit.com/search/label/Encryption) secret key with the one you chose while running SigFlip at Line:163 (you might have to adjust a few bytes to confirm if your CS shellcode is properly decrypted) Replace with the binary path at Line:146 Change the log file paths in lines: 158,165 Compile the code as DLL using the following command - csc /target:library /out:test.dll test.cs Place the compiled DLL and the update.exe.config (https://github.com/pwn1sher/frostbite/blob/main/Update.exe.config) file in same folder where your signed shellcode exe was placed. Execute update.exe. Conslusion: This POC is just an idea I had in mind to club two totally different defense evasive techniques together that would help me and other Red Teamers (https://www.kitploit.com/search/label/Red%20Teamers) in building better initial execution payloads for their operations. This project uses AppDomain Manager Injection as an example, but this idea is applicable for other injection techniques as well like - DLL SideLoading, DLL Hijacking etc Credits: Full Credits to med0x2e (https://github.com/med0x2e/), this POC is built based on his SigFlip (https://github.com/med0x2e/SigFlip) Project References: https://research.checkpoint.com/2022/can-you-trust-a-files-digital-signature-new-zloader-campaign-exploits-microsofts-signature-verification-putting-users-at-risk/ https://www.blackhat.com/docs/us-16/materials/us-16-Nipravsky-Certificate-Bypass-Hiding-And-Executing-Malware-From-A-Digitally-Signed-Executable-wp.pdf https://pentestlaboratories.com/2020/05/26/appdomainmanager-injection-and-detection/ https://github.com/med0x2e/SigFlip

Download Frostbyte (https://github.com/pwn1sher/frostbyte)

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Android Spyware 'Hermit' Discovered in Targeted Attacks

The commercial-grade surveillance software initially was used by law enforcement authorities in Italy in 2019, according to a new report.

Dark Reading: Attacks/Breaches
What We Mean When We Talk About Cyber Insurance

Cyber insurance is more than a policy for paying off ransomware gangs. It's designed to be something you transfer risk to when security controls fail.

Dark Reading: Attacks/Breaches
Microsoft 365 Function Leaves SharePoint, OneDrive Files Open to Ransomware Attacks

SharePoint and OneDrive libraries can be encrypted in ransomware attack, researchers say.

Dark Reading: Attacks/Breaches
Internet Explorer Now Retired but Still an Attacker Target

Though the once-popular browser is officially now history as far as Microsoft support goes, adversaries won't stop attacking it, security experts say.

Dark Reading: Attacks/Breaches
BlastWave Announces Enhancements to Its Zero-Trust Security Software Solution, BlastShield

Update allows BlastShield users to link with hybrid cloud network providers like AWS, Google, and the most recent addition, Azure, in one secure environment.

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
5 Ways to Increase Your Online Security

https://cdn-images-1.medium.com/max/2600/1*Gt1BQvURX6Sx5-lhO7kUFA.jpeg
It is a no-brainer to know that the internet is a big place. Everyday new content/software is being created. From funny-looking TikTok…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
Frostbyte - FrostByte Is A POC Project That Combines Different Defense Evasion Techniques To Build Better Redteam Payloads

___________________________
@hacking_Attack
@Hacking_Video

VM - Kali or other distro - bridge or NAT?
https://www.reddit.com/r/Pentesting/comments/vdxlye/vm_kali_or_other_distro_bridge_or_nat/

So, I have read several posts and it seems that there is no consensus. In order to have an isolated system for pentesting (right now studying only), safest as possible and isolated from my main working machine (host)... should I go for bridge or NAT? I'll have to connect the vm to a vpn and so on. submitted by /u/_sephi_ (https://www.reddit.com/user/_sephi_)
[link] (https://www.reddit.com/r/Pentesting/comments/vdxlye/vm_kali_or_other_distro_bridge_or_nat/) [comments] (https://www.reddit.com/r/Pentesting/comments/vdxlye/vm_kali_or_other_distro_bridge_or_nat/)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
HackThisSite Extended Basic Mission 5

https://cdn-images-1.medium.com/max/700/0*a4SUaBFj7BYGEbyG.jpg
Next extended basic mission surrounding the use of shell commands. Our friend Sam makes a return trying to use sed command instead of a…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Exploração de compartilhamento: uma falha humana

https://cdn-images-1.medium.com/max/600/0*1HLPCTCLScekeeC0.jpg
Uma recente vulnerabilidade descoberta no serviço de RPC do Windows, que recebeu a CVE-2022–26809, movimentou o mundo do cibercrime na…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking 6.5+ million websites(Wordpress)
https://medium.com/@arshiadev/hacking-6-5-million-websites-wordpress-53274e25c5bd?source=rss------bug_bounty-5

CVE-2022–29455 (Elementor)Continue reading on Medium » (https://medium.com/@arshiadev/hacking-6-5-million-websites-wordpress-53274e25c5bd?source=rss------bug_bounty-5)

hacking: security in practice
Who is typically more skilled: white hats, grey hats, or black hats?

I really want to ask because I am wondering if white hat training would result in more skills or if black hats starting typically from a younger age would mean more skills or who is more skilled and why?

submitted by /u/notburneddown
[link] [comments]