Hacking on Medium
WealthSimple Has No Account Lockout

https://cdn-images-1.medium.com/max/1341/0*76GZfrmso50Z_rtz.png
Description

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Intro 1 | Defend the Web

https://cdn-images-1.medium.com/max/700/0*LtDDp21WQ9d-fTjS.jpg
Fresh start after completing what I wanted on hack this site

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
TryHackMe Pickle Rick CTF

https://cdn-images-1.medium.com/max/1368/1*6OFDgdJq7OgAf8BMEv2Hjw.jpeg
First I ran a nmap scan. I didn’t find any valuable information in it.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
HIRE A HACKER

I was scammed by cityinvestgp, I got a message from a trader on my Instagram and told me about how high their profit after investing was…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
What’s Next of Harmony’s Horizon Bridge Hack?

https://cdn-images-1.medium.com/max/1200/0*SRWG3NhjFzOMSGsN.jpeg
“Confidentiality is key to maintaining integrity as part of this ongoing investigation. The omission of specific details is to protect…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
BugBounty Writeup: XSS, JWT none attack, Improper Error Handling

https://cdn-images-1.medium.com/max/700/0*s2RFkB0IhfUXRim7
Hackers around the world hunt bugs and, in some cases, earn full-time incomes.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Access control worth $2000 (everyone missed this IDOR+Access control between two admins.)

Tribute to Binit GhimireContinue reading on Pentester Nepal »
Read more...

Access control worth $2000 (everyone missed this IDOR+Access control between two admins.)
https://medium.com/pentesternepal/access-control-worth-2000-everyone-missed-this-idor-access-control-between-two-admins-9745eaf15d21?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Tribute to Binit GhimireContinue reading on Pentester Nepal » (https://medium.com/pentesternepal/access-control-worth-2000-everyone-missed-this-idor-access-control-between-two-admins-9745eaf15d21?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Giveaway #2: The Ultimate Guide to Hunt Account Takeover(2022)
https://faiyazhacks.medium.com/giveaway-2-the-ultimate-guide-to-hunt-account-takeover-2022-c0f163d0f636?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

INTRODUCTIONContinue reading on Medium » (https://faiyazhacks.medium.com/giveaway-2-the-ultimate-guide-to-hunt-account-takeover-2022-c0f163d0f636?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
C2concealer : Command Line Tool That Generates Randomized C2 Malleable Profiles For Use In Cobalt Strike

C2concealer is a command line tool that generates randomized C2 malleable profiles for use in Cobalt Strike. Installationchmod u+x install.sh
./install.sh Building Docker Imagedocker build -t C2concealer . Running with Dockerdocker container run -it -v Example UsageUsage:
$ C2concealer –hostname google.com –variant 3
Flags:
(optional)
–hostname
The hostname used in HTTP client and server side settings. Default is None.
–variant
An integer defining the number of HTTP client/server variants to generate.
Recommend between 1 and 5. Max 10. Example Console Outputroot@kali:~# C2concealer –variant 1 –hostname google.com
[i] Searching for the c2lint tool on your system (part of Cobalt Strike). Might take 10-20 seconds.
[i] Found c2lint in the /opt/cobaltstrike/c2lint directory.
Choose an SSL option:
Self-signed SSL cert (just input a few details)
LetsEncrypt SSL cert (requies a temporary A record for the relevant domain to be pointed to this machine)
Existing keystore
No SSL
[?] Option [1/2/3/4]: How It WorksWe poured over the Cobalt Strike documentation and defined ranges of values that would make sense for each profile attribute. Sometimes that data is as simple as a random integer within some range and other times we need to pick a random value from a python dictionary. Either way, we started tool creation with defining the data that would make a valid profile.

Then we divided each malleable profile section (or block) into a separate .py file, which contains the logic to draw random appropriate values for each attribute and then output a formatted string for that profile block. We concatenate all profile blocks together, run a few quick consistency checks and then run the profile through the Cobalt Strike linter (c2lint). The output is a profile that should work for your engagements. We always recommend testing the profile (including process injection and spawning) prior to running a campaign.

If you’re looking into the code, we recommend starting with these two files: /C2concealer/main.py and /C2concealer/profile.py. After reviewing the comments, check out individuals profile block generators in the folder: /C2concealer/components. Customizing the toolThis is crucial. This is an open sourced version of a tool we’ve been using privately for about a year. Our private repo has several additional IOCs and a completely different data set. While running the tool provides an excellent start for building a Cobalt Strike malleable profile, we recommend digging into the following areas to customize the data that is randomly populating the tool:

/C2concealer/data/

* dns.py (customize the dns subdomains)
* file_type_prepend.py (customize how http-get-server repsonses look … aka c2 control instructions)
* params.py (two dictionaries containing common parameter names and a generic wordlist)
* post_ex.py (spawn_to process list…definitely change this one)
* reg_headers.py (typical http headers like user-agent and server)
* smb.py (smb pipenames for use when comms go over smb)
* stage.py (data for changing IOCs related to the stager)
* transform.py (payload data transformations…no need to change this)
* urls.py (filetypes and url path components used for building URIs all across the tool…definitely change this)

In addition, you can customize various attributes all throughout the profile generation process. As an example, in the file: “/C2concealer/components/stageblock.py”, you can change the range from which PE image size value is drawn from (near lines 73-74). Please look through all the different files in the components directory.

If you’ve made it this far, then we know you’ll get a lot of use out of th[...]

___________________________
@hacking_Attack
@Hacking_Video

is tool. The way we recommend viewing this tool is that we’ve built the skeleton code to automatically generate these profiles, now it’s up to you to think through what values make sense for each attribute for your campaigns and update the data sources. Download

___________________________
@hacking_Attack
@Hacking_Video