Exploit Collector
TOR Virtual Network Tunneling Tool 0.4.7.8

https://1.bp.blogspot.com/-5_4vnaEHtE4/WWlvOudg9oI/AAAAAAAAIMs/tPLG-GePmxgLMlPyiIuDfO-2MFfOtdhKQCLcBGAs/s1600/h26.png
Tor is a network of virtual tunnels that allows people and groups to improve their privacy and security on the Internet. It also enables software developers to create new communication tools with built-in privacy features. It provides the foundation for a range of applications that allow organizations and individuals to share information over public networks without compromising their privacy. Individuals can use it to keep remote Websites from tracking them and their family members. They can also use it to connect to resources such as news sites or instant messaging services that are blocked by their local Internet service providers (ISPs). This is the source code release.

SHA-256 | 9e9a5c67ad2acdd5f0f8be14ed591fed076b1708abf8344066990a0fa66fe195

Download
Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Gentics CMS 5.36.29 Cross Site Scripting / Deserialization

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Mitel 6800/6900 Series SIP Phones Backdoor Access

https://3.bp.blogspot.com/-D44pcoGQpVY/WWlvlv4DR7I/AAAAAAAAIRA/cd0U1aMX9aAjFzK0BP_4B5_C_6s8ROTKQCLcBGAs/s1600/h99.png
None
Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Nexans FTTO GigaSwitch Outdated Components / Hardcoded Backdoor

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Lepin EP-KP001 KP001_V19 Authentication Bypass

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
SIEMENS-SINEMA Remote Connect 3.0.1.0-01.01.00.02 Cross Site Scripting

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Programming language for Offensive Security?

Hi, I'd love to learn one more programming language (in addition to Java which I am learning at University).
That language must be suitable for offensive hacking. I am not familiar with criteria that one programming language must to have in order to be most suitable for hacking, so if you could write explanation why particular programming language is the best for hacking.

EDIT: Thanks to everybody for commenting. It's awesome to be a part of this community! :)

submitted by /u/wannacry011
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Is there any place where I can get DarkComet?

I need It, I wanted to play with RATs on my two PCs, one being the client and one the server. But I can't seem to find any download, as 3 pages of clicking every single link on google have shown... Anyone here know where I can download one?

submitted by /u/Inner_Information_26
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Feds Take Down Russian 'RSOCKS' Botnet

RSOCKS commandeered millions of devices in order to offer proxy services used to mask malicious traffic.

Dark Reading: Attacks/Breaches
Capital One Attacker Exploited Misconfigured AWS Databases

After bragging in underground forums, the woman who stole 100 million credit applications from Capital One has been found guilty.

Hacking on Medium
Hack the Box: Optimum — Writeup

https://cdn-images-1.medium.com/max/1222/1*x0p-EU8fYgKW3_hjry1iiQ.png
Optimum is an easy-rated retired Windows machine that has a vulnerability in the file server software it is running. It is also vulnerable…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Más de una docena de fallas encontradas en el sistema de gestión de redes industriales de Siemens

https://cdn-images-1.medium.com/max/1599/0*wU3dIQVyQv0wywiN
PUBLICADO EN 20 JUNIO, 2022POR EHACKING

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

SharpSniper - Find Specific Users In Active Directory Via Their Username And Logon IP Address
http://www.kitploit.com/2022/06/sharpsniper-find-specific-users-in.html

___________________________
@hacking_Attack
@Hacking_Video

Often a Red Team (https://www.kitploit.com/search/label/Red%20Team) engagement is more than just achieving Domain Admin. Some clients will want to see if specific users in the domain can be compromised, for example the CEO. SharpSniper is a simple tool to find the IP address of these users so that you can target their box. It requires that you have privileges to read logs on Domain Controllers. First it queries and makes a list of Domain contollers, then search for Log-on events on any of the DCs for the user you are looking for and then reads the most recent DHCP allocated logon (https://www.kitploit.com/search/label/Logon) IP address. N.B. Build can also target .net framework v3.5 if needed.
Usage cmd.exe (Supply credentials) C:\> SharpSniper.exe emusk DomainAdminUser DAPass123

User: emusk - IP Address: 192.168.37.130
cmd.exe (Current authentication (https://www.kitploit.com/search/label/Authentication) token e.g. Mimikatz pth) C:\> SharpSniper.exe emusk

User: emusk - IP Address: 192.168.37.130
Cobalt Strike (Supply credentials) > execute-assembly /path/to/SharpSniper.exe emusk DomainAdminUser DAPass123

User: emusk - IP Address: 192.168.37.130
Cobalt Strike (Beacon's token) > execute-assembly /path/to/SharpSniper.exe emusk

User: emusk - IP Address: 192.168.37.130
Author Tom Kallo

Download SharpSniper (https://github.com/HunnicCyber/SharpSniper)

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
SharpSniper - Find Specific Users In Active Directory Via Their Username And Logon IP Address

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgwVWfuzYRc9tPYetIUa59KyGLxqXLu4ksg-tZ4bT7_Cua7dtY4IlAjxbgIDso5iQOV0SbkTEaIcnnM5ySP9Q3TQ1u478NG4P5uhftfLz-hOUrIWGD6pypvJbuxJchOJL-TqRwg1EcaGkUyw6XaQRGULlmCyKkNRH5gbocF-b3JVu3Vg7LcS6GN3qVB/w640-h528/Active%20Directory.png
Often a Red Team engagement is more than just achieving Domain Admin. Some clients will want to see if specific users in the domain can be compromised, for example the CEO.

SharpSniper is a simple tool to find the IP address of these users so that you can target their box.

It requires that you have privileges to read logs on Domain Controllers.

First it queries and makes a list of Domain contollers, then search for Log-on events on any of the DCs for the user you are looking for and then reads the most recent DHCP allocated logon IP address.

N.B. Build can also target .net framework v3.5 if needed.
Usage

cmd.exe (Supply credentials)

C:\> SharpSniper.exe emusk DomainAdminUser DAPass123

User: emusk - IP Address: 192.168.37.130


cmd.exe (Current authentication token e.g. Mimikatz pth)

C:\> SharpSniper.exe emusk

User: emusk - IP Address: 192.168.37.130


Cobalt Strike (Supply credentials)

> execute-assembly /path/to/SharpSniper.exe emusk DomainAdminUser DAPass123

User: emusk - IP Address: 192.168.37.130


Cobalt Strike (Beacon's token)

> execute-assembly /path/to/SharpSniper.exe emusk

User: emusk - IP Address: 192.168.37.130


Author

Tom Kallo
Download SharpSniper

___________________________
@hacking_Attack
@Hacking_Video