Hacking Articles Tips Tricks Videos Tutorials
470 subscribers
66.1K photos
15 videos
157 files
132K links
Exploit
Pentesting
Hacking
Red Team
Blue Team
Kali Linux
Bug Bounty
Black Hat
Cyber security etc

@Hacking_Video
@Hacking_attack
Download Telegram
A better version of Xencrypt.Xencrypt it self is a Powershell runtime crypter designed to evade AVs. cause Xencrypt is not FUD anymore and easily get caught by AMSI,i recode the stub and now it FUD again. And the original Xencrypt,if you see on the screenshot (https://www.kitploit.com/search/label/Screenshot) proof,he's tested on Windows 8,and if i test it on the newest Windows 10,it doesnt FUD, cause that i want to make it FUD again and make everyone happy :D
This tool tested on Windows 10 (https://www.kitploit.com/search/label/Windows%2010) v20H2

Proof-Of-FUDness (if you dont trust my word)
kinda lazy to fireup my windows VM and retest it again ο˜‚
Features
Bypasses AMSI,Behavior Monitoring,and all modern AVs in use on MetaDefender (dont wanna test it VirusTotal.MetaDefender is more than enough) Compresses and encrypts powershell (https://www.kitploit.com/search/label/PowerShell) scripts Has a minimal and often even negative (thanks to the compression) overhead Randomizes variable names to further obfuscate the decrypter stub Super easy to modify to create your own crypter variant Supports recursive layering (crypter crypting the crypted output), tested up to 500 layers. Supports Import-Module as well as standard running as long as the input script also supported it All features in a single file so you can take it with you anywhere!
Thanks To
Me for not dying when creating this tool Xentropy and SecForce for creating the original Xencrypt (https://github.com/the-xentropy/xencrypt) Ed Wilson AKA Microsoft (https://www.kitploit.com/search/label/Microsoft) Scripting Guy for the great Powershell scripting tutorials and the last one is Emeric Nasi for the research on bypassing (https://www.kitploit.com/search/label/Bypassing) AV dynamics
Usage
Its better to run BetterXencrypt script on Linux Powershell,cause i never try it on Windows Powershell. (Surprised that Linux have Powershell?Take a look at this (https://docs.microsoft.com/en-us/powershell/scripting/install/installing-powershell-core-on-linux?view=powershell-7.1)) Import-Module ./betterxencrypt.ps1
Invoke-BetterXencrypt -InFile invoke-mimikatz.ps1 -OutFile xenmimi.ps1
You will now have an encrypted xenmimi.ps1 file in your current working directory. You can use it in the same way as you would the original script, so in this case: Import-Module ./xenmimi.ps1
Invoke-Mimikatz
It also supports recursive layering via the -Iterations flag. Invoke-BetterXencrypt -InFile invoke-mimikatz.ps1 -OutFile xenmimi.ps1 -Iterations 100
Warning though, the files can get big and generating the output file can take a very long time depending on the scripts and number of iterations requested.

Download BetterXencrypt (https://github.com/GetRektBoy724/BetterXencrypt)
BetterXencrypt - A Better Version Of Xencrypt - Xencrypt It Self Is A Powershell Runtime Crypter Designed To Evade AVs

A better version of Xencrypt.Xencrypt it self is a Powershell runtime crypter designed to evade AVs. cause Xencrypt is not FUD anymore and easily get caught by AMSI,i recode the stub and now it FUD again. And the original Xencrypt,if you see on the screenshot proof,he's tested on Windows 8,and if i test it on the newest Windows 10,it doesnt FUD, cause that i want to make it FUD again and make everyone happy :DThis tool tested on Windows 10 v20H2 Proof-Of-FUDness (if you dont trust my word) kinda lazy to fireup my windows VM and retest it again ο˜‚ Features Bypasses AMSI,Behavior Monitoring,and all modern AVs in use on MetaDefender (dont wanna test it VirusTotal.MetaDefender is more than enough) Compresses and encrypts powershell scripts Has a minimal and often even negative (thanks to the compression) overhead Randomizes variable names to further obfuscate the decrypter stub Super easy to modify to create your own crypter variant Supports recursive layering (crypter crypting the crypted output), tested up to 500 layers. Supports Import-Module as well as standard running as long as the input script also supported it All features in a single file so you can take it with you anywhere! Thanks To Me for not dying when creating this tool Xentropy and SecForce for creating the original Xencrypt Ed Wilson AKA Microsoft Scripting Guy for the great Powershell scripting tutorials and the last one is Emeric Nasi for the research on bypassing AV dynamics Usage Its better to run BetterXencrypt script on Linux Powershell,cause i never try it on Windows Powershell. (Surprised that Linux have Powershell?Take a look at this) Import-Module ./betterxencrypt.ps1Invoke-BetterXencrypt -InFile invoke-mimikatz.ps1 -OutFile xenmimi.ps1 You will now have an encrypted xenmimi.ps1 file in your current working directory. You can use it in the same way as you would the original script, so in this case: Import-Module ./xenmimi.ps1Invoke-Mimikatz It also supports recursive layering via the -Iterations flag. Invoke-BetterXencrypt -InFile invoke-mimikatz.ps1 -OutFile xenmimi.ps1 -Iterations 100 Warning though, the files can get big and generating the output file can take a very long time depending on the scripts and number of iterations requested. Download BetterXencrypt
Read more...
Hacking Articles Tips Tricks Videos Tutorials
Photo
KitPloit - PenTest Tools!
BetterXencrypt - A Better Version Of Xencrypt - Xencrypt It Self Is A Powershell Runtime Crypter Designed To Evade AVs

https://1.bp.blogspot.com/-ADhbAONpIT0/YH5guT7U0hI/AAAAAAAAV6E/VfOU1Mjc2ncvWqgUV8oy2nWLu_RO4tLcgCNcBGAsYHQ/w640-h338/bypass.png
A better version of Xencrypt.Xencrypt it self is a Powershell runtime crypter designed to evade AVs. cause Xencrypt is not FUD anymore and easily get caught by AMSI,i recode the stub and now it FUD again. And the original Xencrypt,if you see on the screenshot proof,he's tested on Windows 8,and if i test it on the newest Windows 10,it doesnt FUD, cause that i want to make it FUD again and make everyone happy :D
This tool tested on Windows 10 v20H2

Proof-Of-FUDness (if you dont trust my word)

kinda lazy to fireup my windows VM and retest it again

ο˜‚

Features

* Bypasses AMSI,Behavior Monitoring,and all modern AVs in use on MetaDefender (dont wanna test it VirusTotal.MetaDefender is more than enough)
* Compresses and encrypts powershell scripts
* Has a minimal and often even negative (thanks to the compression) overhead
* Randomizes variable names to further obfuscate the decrypter stub
* Super easy to modify to create your own crypter variant
* Supports recursive layering (crypter crypting the crypted output), tested up to 500 layers.
* Supports Import-Module as well as standard running as long as the input script also supported it
* All features in a single file so you can take it with you anywhere!

Thanks To

* Me for not dying when creating this tool
* Xentropy and SecForce for creating the original Xencrypt
* Ed Wilson AKA Microsoft Scripting Guy for the great Powershell scripting tutorials
* and the last one is Emeric Nasi for the research on bypassing AV dynamics

Usage

Its better to run BetterXencrypt script on Linux Powershell,cause i never try it on Windows Powershell. (Surprised that Linux have Powershell?Take a look at this)
Import-Module ./betterxencrypt.ps1
Invoke-BetterXencrypt -InFile invoke-mimikatz.ps1 -OutFile xenmimi.ps1

You will now have an encrypted xenmimi.ps1 file in your current working directory. You can use it in the same way as you would the original script, so in this case:
Import-Module ./xenmimi.ps1
Invoke-Mimikatz

It also supports recursive layering via the -Iterations flag.
Invoke-BetterXencrypt -InFile invoke-mimikatz.ps1 -OutFile xenmimi.ps1 -Iterations 100

Warning though, the files can get big and generating the output file can take a very long time depending on the scripts and number of iterations requested.
Download BetterXencrypt
How i got from 0 knowledge to where i am today

How to become a hacker β€” Seen as Uncle RatContinue reading on Medium Β»
Read more...
How to become a hackerβ€Šβ€”β€ŠSeen as Uncle RatContinue reading on Medium Β» (https://thexssrat.medium.com/how-i-got-from-0-knowledge-to-where-i-am-today-94782cb26104?source=rss------bug_bounty-5)
Hacking Articles Tips Tricks Videos Tutorials
Photo
Dark Reading: Attacks/Breaches
Attackers Compromised Code-Checking Vendor's Tool for Two Months

A script used to upload sensitive reports-with access to credentials and datastores-likely sent information on hundreds, possibly thousands, of companies to attackers.
Hacking Articles Tips Tricks Videos Tutorials
Photo
Dark Reading: Attacks/Breaches
Foreign Spies Target British Nationals With Fake Social Media Profiles

British security agency MI5 has launched a new education campaign to warn potential victims of the attacks.
Hacking Articles Tips Tricks Videos Tutorials
Photo
Dark Reading: Attacks/Breaches
Pulse Secure VPN Flaws Exploited to Target US Defense Sector

China-linked attackers have used vulnerabilities in the Pulse Secure VPN appliance to attack US Defense Industrial Base networks.
hacking: security in practice
Routing through an Xfinity X1 cable box to get internet

Please excuse my being a noob. I just want to know if there are already people working/have worked on this or if this is even a thing that's possible. I can't find anything about this by searching Google or this sub.

I don't have internet access, but I do have access to an X1 DVR box, which can stream YouTube, which means that it has to have access to the internet right? The DVR also has an ethernet port, which means there must be some way to get it to talk to my computer. To my mind, that means there has to be some possible way to get internet through the DVR.

What am I missing here? If anyone could point me in the right direction, at least, that'd be really nice.

submitted by /u/DronJonson
[link] [comments]
Hacking Articles Tips Tricks Videos Tutorials
Photo
hacking: security in practice
Way was this

​

ITS was on my mac after install in gog(In a hard to find folder)

​

https://ufile.io/f/x16nx

submitted by /u/climate-dental
[link] [comments]
Hacking Articles Tips Tricks Videos Tutorials
Photo
hacking: security in practice
Crypto stolen- hacker still active

https://www.linkedin.com/posts/jacob-eaton_stolen-crypto-activity-6790388260855193600-cuui

Outlines and hyperlinks all the crypto transactions that happened

Or below

Incident Dates*

04/19/2021 (BTCB), 04/19/2021 (BNB), 4/19/2021 (HARD), 4/19/2021, 4/19/2021 (Kava) 04/20/2021 (USDC)

Transaction IDs*

C536FE6BDB830F05FA260E1995EF09630EF6795FB587C57AEFA20F8455ACE02F (Stole BNB)

61AC6BF1630319D215FF0C3D55EA7B57734D18387BF15D8FE28BD5C6852AD5CE (Part of stealing BNB)

594D08DF8190CF8BBB33131FF096BF7448C510E670272F788C4CE4FB45A63AA0 (Stole USDX)

DE7CF60C936161DEF6D49CCE77403282EE203E463BE6A6A9E41397E456FD41FA (Stole Kava)

0xd557336ac2cfcd39892cd80674c88481c5680557bedd4871f26fac9ea46def0d (Stole BTCB)

0xcef5ab0b3e95df52d689c9868027a4ffe722cfb0546699da1110a5e22f9f7a63 (Deposited ETH to pay for fees to steal my crypto)

9EF236601BB30C4AE850E90F0724B584BBC70A1F67CB4BBB2F0328520E7A6C37 (Attempting to steal HARD tokens but denied still staked)

Exact Amount Lost (In Crypto)*

8,010 USDX (5,500 USD)

24.20096269 BNB (13,679 USD currently)

144 KAVA (715 USD)

0.02042119 BTCB ( 1,100 USD)

Scammer's Crypto Addresses*

kava1qhhqcafrawa9uqx70590hs2d58nmhmla0f3zyd (stole KAVA)

kava1qhhqcafrawa9uqx70590hs2d58nmhmla0f3zyd (stole USDX)

kava1qhhqcafrawa9uqx70590hs2d58nmhmla0f3zyd (attempting HARD steal)

bnb1jh7uv2rm6339yue8k4mj9406k3509kr4wt5nxn (Stole BNB)

kava1r4v2zdhdalfj2ydazallqvrus9fkphmglhn6u6 (stole BNB)

0x7561eee90e24f3b348e1087a005f78b4c8453524 (Stole BTCB)

0xFee9D83EF7c01220628e75d323B6A377EbD9217f (Deposited ETH to pay for fees to steal crypto)

Narrative

I was on a Reddit channel for Pancakeswap when this happened I stumbled across a link for part of the exchange it was actually a fake exchange and when I clicked it the exchange routed me through motions to steal my information and then took over my Trust Wallet. They then proceeded to steal everything in my Trust Wallet and everything that was connected to my Trust Wallet. I no longer can use this wallet and it is still under attack as there is 20 more days left before the remaining tokens can be withdrawled

submitted by /u/Jeaton77
[link] [comments]
hacking: security in practice
Friend/ Mentor

Anyone wanna be kinda like a mentor to help teach my or just a mate with good hacking knowledge that we can collab on projects and stuff?

submitted by /u/Technalysis_Offical
[link] [comments]
MITRE ATT&CK Evaluation
https://www.reddit.com/r/redteamsec/comments/mv42qb/mitre_attck_evaluation/

<!-- SC_OFF -->Good morning all, ​ Might be useful information for red teamers with knowing product and what may get past with little to no information passed to blueteams. ​ https://attackevals.mitre-engenuity.org/enterprise/carbanak_fin7/ ​ Hope it helps <!-- SC_ON --> submitted by /u/icedcougar (https://www.reddit.com/user/icedcougar)
[link] (https://www.reddit.com/r/redteamsec/comments/mv42qb/mitre_attck_evaluation/) [comments] (https://www.reddit.com/r/redteamsec/comments/mv42qb/mitre_attck_evaluation/)