Hacking Articles Tips Tricks Videos Tutorials
468 subscribers
65.8K photos
15 videos
157 files
132K links
Exploit
Pentesting
Hacking
Red Team
Blue Team
Kali Linux
Bug Bounty
Black Hat
Cyber security etc

@Hacking_Video
@Hacking_attack
Download Telegram
Hacking Articles Tips Tricks Videos Tutorials
Photo
Kali Linux Tutorials
GoSH : Golang Reverse/Bind Shell Generator

GoSH is a tool that generates a Go binary that launches a shell of the desired type on the targeted host.

The shell binary can be compiled for multiple platforms, supports partial polymorphism (unique functions’ names) and can use UDP protocol instead of the default TCP. If you send a DELETEcommand over the established connection, the shell binary removes itself from the host it was executed on.
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhnC-WEYdeAt0x860SwaRAydrT_858TCdri7AEVI1139na9sYmabGz1Jj9Z4WG9_ZZ_Mzxgz1LkRdlHCWK1AFn3b7goCZqZSvag2N7XAu1OOY7l9ya1pBborH3Ndl0cJMeNX5Uc-qpWewNXUImUjbzo6756_pimTXJg69U7zw-D4X83JpT4nC3Ct_qV/s1920/screenshot.png

Download

___________________________
@hacking_Attack
@Hacking_Video
Hacking Articles Tips Tricks Videos Tutorials
Photo
Kali Linux Tutorials
CVE-Tracker : With The Help Of This Automated Script, You Will Never Lose Track Of Recently Released CVEs

CVE-Tracker, With the help of this automated script, you will never lose track of newly released CVEs. What does this powershell script do is exactly running the Microsoft Edge at system startup, navigate to 2 URLs ,and then put the browser in to full screen mode.

As ethical hackers, it’s vital that we keep track of the recently released CVEs in order to be fully aware of new threats or vulnerabilities out there in the Internet. Actually, it’s a routine task in our day to day lives. So why don’t we just automate the whole procedure of opening a browser and navigate to our sources for cheking the new CVEs? The purpose of this tool is to basically, automate the mentioned procedure with the help of powershell scripting.

Among all the online sources that are available which publish new CVEs, I’ve chosen the following 2 URLs and leveraged them in the script.
URLshttps://cvetrends.com/https://cve.circl.lu/
If you want to change these URLs to your desired ones, you can simply open the cve.ps1 file with an editor and change the URLs there! Also remember that you can even add more URLs to the file.

Usage

Download the zip file and unzip it on your system

If you haven’t bypassed the script execution on your system, please do so with the command “Set-ExecutionPolicy -ExecutionPolicy Bypass”
[Note: it needs to be run as administrator]

.\CVE_Track.ps1

Also, keep in mind the changes that are made to your system can easily be undone, by running the command .\undo.ps1

Technical Analysis

At first, when you run the script, it will create a *.bat file (CVE_Track.bat) in the following directory that literally allows the automation procedure that we aim for. C:\Users\.

Also the file “cv.ps1” is coppied to the directory C:\Users\and every time the system starts, it will be executed.
Download

___________________________
@hacking_Attack
@Hacking_Video
Dark Reading: Attacks/Breaches
Open Source Software Security Begins to Mature

Only about half of firms have an open source software security policy in place to guide developers in the use of components and frameworks, but those that do exhibit better security.
Dark Reading: Attacks/Breaches
AI Is Not a Security Silver Bullet

AI can help companies more effectively identify and respond to threats, as well as harden applications.
Dark Reading: Attacks/Breaches
56 Vulnerabilities Discovered in OT Products From 10 Different Vendors

Deep-dive study unearthed security flaws that could allow remote code execution, file manipulation, and malicious firmware uploads, among other badness.
Dark Reading: Attacks/Breaches
Reducing Risk With Zero Trust

Zero trust isn’t just about authentication. Organizations can combine identity data with business awareness to address issues such as insider threat.