Hacking on Medium
Crypto-Bridge Hacks: The Billion Dollar Problem

https://cdn-images-1.medium.com/max/600/1*R-nLB9YHeE6d3DCpWrUReg.png
Over the past year $1.1 billion in cryptocurrencies has been looted by hackers, including the biggest heists in blockchain history by…

Continue reading on Medium »

KitPloit - PenTest Tools!
Nim-Loader - WIP Shellcode Loader In Nim With EDR Evasion Techniques

https://blogger.googleusercontent.com/img/a/AVvXsEghoAwSP8tfQ0sIRJuF9bla0dxRrdW1lPn96pxum-o5IHa7VkI95mmOfDO5j3BktycKqlFVVdOpyf3jpwf-tFUn2R0pmrTikJme--EpMM14WUufp3PCZmJo-7mMiAaADeKvExN71KOWHN8JteTPPrGwHdZAuktozFqYa6N-BjBkPQGmzZ_2rcHOIXvw=w640-h502
a very rough work-in-progress adventure into learning nim by cobbling resources together to create a shellcode loader that implements common EDR/AV evasion techniques.

This is a mess and is for research purposes only! Please don't expect it to compile and run without your own modifications.
Instructions

* Replace the byte array in loader.nimwith your own x64 shellcode
* Compile the EXE and run it: nim c -d:danger -d:strip --opt:size "loader.nim"
* Probably adjust which process you want to inject into by looking in the .nim files of the injection folder method you're using...

Completed Features

* Direct syscalls dynamically resolved from NTDLL (Thanks @ShitSecure)
* AMSI and ETW patching (Thanks @byt3bl33d3r)
* NTDLL unhooking (Thanks @MrUn1k0d3r)
* CreateRemoteThread injection (Thanks @byt3bl33d3r, @ShitSecure)

WIP Features

* Process Hollowing Technique (Thanks @snovvcrash)
* Shellcode encryption/decryption using [AES in CTR mode](https://en.wikipedia.org/wiki/Block_cipher_mode_of_operation#Counter_(CTR) (Thanks @snovvcrash)
* Replace all compatible API calls with syscalls
* Add template generator and compiler, cmdline args for shellcode, injection methods, process paths, etc.

Obfuscation

* Consider using denim by @LittleJoeTables for obfuscator-llvm nim compilation support!

References & Inspiration

* OffensiveNim by Marcello Salvati (@byt3bl33d3r)
* NimlineWhispers2 by Alfie Champion (@ajpc500)
* SysWhispers3 by klezVirus (@KlezVirus)
* NimPackt-v1 by Cas van Cooten (@chvancooten)
* unhook_bof.c by Mr. Un1k0d3r (@MrUn1k0d3r)
* NimGetSyscallStub by S3cur3Th1sSh1t (@ShitSecure)
* NimHollow by snovvcrash (@snovvcrash)

Examples

https://blogger.googleusercontent.com/img/a/AVvXsEghoAwSP8tfQ0sIRJuF9bla0dxRrdW1lPn96pxum-o5IHa7VkI95mmOfDO5j3BktycKqlFVVdOpyf3jpwf-tFUn2R0pmrTikJme--EpMM14WUufp3PCZmJo-7mMiAaADeKvExN71KOWHN8JteTPPrGwHdZAuktozFqYa6N-BjBkPQGmzZ_2rcHOIXvw=w640-h502
Download Nim-Loader

Any recommendation for note taking app for a beginner trying to work towards oscp. My preference is to use app with support for hierarchical structures, quick snip with a shortcut and pasting directly into notes.. Thanks in advance..
https://www.reddit.com/r/Pentesting/comments/vkjrl4/any_recommendation_for_note_taking_app_for_a/

submitted by /u/Due-Being9217 (https://www.reddit.com/user/Due-Being9217)
[link] (https://www.reddit.com/r/Pentesting/comments/vkjrl4/any_recommendation_for_note_taking_app_for_a/) [comments] (https://www.reddit.com/r/Pentesting/comments/vkjrl4/any_recommendation_for_note_taking_app_for_a/)

hacking: security in practice
hacking

Hallo kann jmd ein Handy anhand der Nummer hacken und mir Bilder und chats senden von dem Handy? LG

submitted by /u/Antoniad1988
[link] [comments]

hacking: security in practice
Is there any way to auto execute batch when pendrive is inserted?

I'm trying to build a autorun pendrive for a project which includes getting PC's info when inserted, I've tried making autorun.inf file but it seems that it doesn't execute batch file even if I've added argument to open batch file but it changes the icon and pd name tho, i don't know how could I go around this one

My project included executing batch file in pendrive the movement i insert pendrive into pc

submitted by /u/dominatevil
[link] [comments]

Hacking on Medium
Threat Hunting in Cyber Security

https://cdn-images-1.medium.com/max/600/0*iOXX84BYKJikwzUz.png
Here in this article, I would like to share my own ways of exploring the different types of Threat Hunting practices that can be…

Continue reading on Medium »

Hacking on Medium
HackThisSite Extended Basic 14 Mission

https://cdn-images-1.medium.com/max/700/0*Yy7sf005glaEqKbp.jpg
Problem

Continue reading on Medium »

Hacking on Medium
Bounty Hacker | CTF | WriteUps

https://cdn-images-1.medium.com/max/1200/1*1mtQwkgfzGNK8xB5RxWY5A.jpeg
You talked a big game about being the most elite hacker in the solar system. Prove it and claim your right to the status of Elite Bounty…

Continue reading on Medium »

Hacking on Medium
SSO: Why is it considered as a secure way for authentication and authorization

https://cdn-images-1.medium.com/max/1600/0*Pt-OhdjsGLdTMj3u
Introduction

Continue reading on Medium »

hacking: security in practice
Key fob copying?

I live in a busy city most residential buildings require a key fob to enter. How can I copy fobs? I’m not sure what copier I should use or how to tell if a fob is low or high frequency.

submitted by /u/Nearby-Shoulder8216
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How to scan ports thru firewall.

if there is an option in nmap plz do tell

submitted by /u/No-Cherry6737
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Forgot my pin is there a software to fix it?

So i forgot my pin of my Samsung s7 and want to have it unlocked without losing all my stuff. So is there a Software that automatically put in pins for me?

submitted by /u/HariHonig
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
cracking phpmyadmin

Hey everyone 👋 so i managed to run my own phpmyadmin server, now i want to hack it, so which tool i have to use too find my phpmyadmin page? Like it's not my site and im some random hacker, how can I find access to phpmyadmin login page? Sorry if my question is so nooby, I'm really new to this stuff :)))

submitted by /u/Samurai-13-
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

DFSCoerce - PoC For MS-DFSNM Coerce Authentication Using NetrDfsRemoveStdRoot Method
http://www.kitploit.com/2022/06/dfscoerce-poc-for-ms-dfsnm-coerce.html

___________________________
@hacking_Attack
@Hacking_Video