Infomatix is a data collection tool that aims to build the worlds most comprehensive financial database through crowd sourced expertise.Continue reading on Medium » (https://airdropeveryday77.medium.com/informatix-testnet-competition-qick-guide-750-000-info-tokens-up-for-grabs-f0dcfd1f1841?source=rss------bug_bounty-5)

HDX (Headline Crypto) INCENTIVIZED TESTNET QUICK GUIDE, WITH 250,000 $HDX AS REWARDS
https://airdropeveryday77.medium.com/hdx-headline-crypto-incentivized-testnet-quick-guide-with-250-000-hdx-as-rewards-fb77ca09e70d?source=rss------bug_bounty-5

HEADLINE Crypto is a Texas-based blockchain project and token from the team behind AlgoPay, AlgoCloud, Vaults Protocol, FORUM, PIPELINE-UI…Continue reading on Medium » (https://airdropeveryday77.medium.com/hdx-headline-crypto-incentivized-testnet-quick-guide-with-250-000-hdx-as-rewards-fb77ca09e70d?source=rss------bug_bounty-5)

Hacking on Medium
Buffer overflows

https://cdn-images-1.medium.com/max/728/1*7C-NuMy0WOtp1268ifXkAw.jpeg
Anatomy of memory

Continue reading on Medium »

Hacking on Medium
Crypto-Bridge Hacks: The Billion Dollar Problem

https://cdn-images-1.medium.com/max/600/1*R-nLB9YHeE6d3DCpWrUReg.png
Over the past year $1.1 billion in cryptocurrencies has been looted by hackers, including the biggest heists in blockchain history by…

Continue reading on Medium »

KitPloit - PenTest Tools!
Nim-Loader - WIP Shellcode Loader In Nim With EDR Evasion Techniques

https://blogger.googleusercontent.com/img/a/AVvXsEghoAwSP8tfQ0sIRJuF9bla0dxRrdW1lPn96pxum-o5IHa7VkI95mmOfDO5j3BktycKqlFVVdOpyf3jpwf-tFUn2R0pmrTikJme--EpMM14WUufp3PCZmJo-7mMiAaADeKvExN71KOWHN8JteTPPrGwHdZAuktozFqYa6N-BjBkPQGmzZ_2rcHOIXvw=w640-h502
a very rough work-in-progress adventure into learning nim by cobbling resources together to create a shellcode loader that implements common EDR/AV evasion techniques.

This is a mess and is for research purposes only! Please don't expect it to compile and run without your own modifications.
Instructions

* Replace the byte array in loader.nimwith your own x64 shellcode
* Compile the EXE and run it: nim c -d:danger -d:strip --opt:size "loader.nim"
* Probably adjust which process you want to inject into by looking in the .nim files of the injection folder method you're using...

Completed Features

* Direct syscalls dynamically resolved from NTDLL (Thanks @ShitSecure)
* AMSI and ETW patching (Thanks @byt3bl33d3r)
* NTDLL unhooking (Thanks @MrUn1k0d3r)
* CreateRemoteThread injection (Thanks @byt3bl33d3r, @ShitSecure)

WIP Features

* Process Hollowing Technique (Thanks @snovvcrash)
* Shellcode encryption/decryption using [AES in CTR mode](https://en.wikipedia.org/wiki/Block_cipher_mode_of_operation#Counter_(CTR) (Thanks @snovvcrash)
* Replace all compatible API calls with syscalls
* Add template generator and compiler, cmdline args for shellcode, injection methods, process paths, etc.

Obfuscation

* Consider using denim by @LittleJoeTables for obfuscator-llvm nim compilation support!

References & Inspiration

* OffensiveNim by Marcello Salvati (@byt3bl33d3r)
* NimlineWhispers2 by Alfie Champion (@ajpc500)
* SysWhispers3 by klezVirus (@KlezVirus)
* NimPackt-v1 by Cas van Cooten (@chvancooten)
* unhook_bof.c by Mr. Un1k0d3r (@MrUn1k0d3r)
* NimGetSyscallStub by S3cur3Th1sSh1t (@ShitSecure)
* NimHollow by snovvcrash (@snovvcrash)

Examples

https://blogger.googleusercontent.com/img/a/AVvXsEghoAwSP8tfQ0sIRJuF9bla0dxRrdW1lPn96pxum-o5IHa7VkI95mmOfDO5j3BktycKqlFVVdOpyf3jpwf-tFUn2R0pmrTikJme--EpMM14WUufp3PCZmJo-7mMiAaADeKvExN71KOWHN8JteTPPrGwHdZAuktozFqYa6N-BjBkPQGmzZ_2rcHOIXvw=w640-h502
Download Nim-Loader

Any recommendation for note taking app for a beginner trying to work towards oscp. My preference is to use app with support for hierarchical structures, quick snip with a shortcut and pasting directly into notes.. Thanks in advance..
https://www.reddit.com/r/Pentesting/comments/vkjrl4/any_recommendation_for_note_taking_app_for_a/

submitted by /u/Due-Being9217 (https://www.reddit.com/user/Due-Being9217)
[link] (https://www.reddit.com/r/Pentesting/comments/vkjrl4/any_recommendation_for_note_taking_app_for_a/) [comments] (https://www.reddit.com/r/Pentesting/comments/vkjrl4/any_recommendation_for_note_taking_app_for_a/)

hacking: security in practice
hacking

Hallo kann jmd ein Handy anhand der Nummer hacken und mir Bilder und chats senden von dem Handy? LG

submitted by /u/Antoniad1988
[link] [comments]

hacking: security in practice
Is there any way to auto execute batch when pendrive is inserted?

I'm trying to build a autorun pendrive for a project which includes getting PC's info when inserted, I've tried making autorun.inf file but it seems that it doesn't execute batch file even if I've added argument to open batch file but it changes the icon and pd name tho, i don't know how could I go around this one

My project included executing batch file in pendrive the movement i insert pendrive into pc

submitted by /u/dominatevil
[link] [comments]

Hacking on Medium
Threat Hunting in Cyber Security

https://cdn-images-1.medium.com/max/600/0*iOXX84BYKJikwzUz.png
Here in this article, I would like to share my own ways of exploring the different types of Threat Hunting practices that can be…

Continue reading on Medium »

Hacking on Medium
HackThisSite Extended Basic 14 Mission

https://cdn-images-1.medium.com/max/700/0*Yy7sf005glaEqKbp.jpg
Problem

Continue reading on Medium »

Hacking on Medium
Bounty Hacker | CTF | WriteUps

https://cdn-images-1.medium.com/max/1200/1*1mtQwkgfzGNK8xB5RxWY5A.jpeg
You talked a big game about being the most elite hacker in the solar system. Prove it and claim your right to the status of Elite Bounty…

Continue reading on Medium »