Hacking Articles Tips Tricks Videos Tutorials

4 views14:19

Kali Linux Tutorials
Tetanus : Mythic C2 Agent Targeting Linux And Windows Hosts Written In Rust

Tetanus is a Windows and Linux C2 agent written in rust.

Installation

To install Tetanus, you will need Mythic set up on a machine.

In the Mythic root directory, use mythic-clito install the agent.

sudo ./mythic-cli install github https://github.com/MythicAgents/tetanus
sudo ./mythic-cli payload start tetanus

Tetanus supports the http C2 profile:

sudo ./mythic-cli install github https://github.com/MythicC2Profiles/http
sudo ./mythic-cli c2 start http

Features

* Background job management
* Built-in ssh client
* Connect to a machine and download/upload files between that machine and Mythic
* Get directory listings from machines using sftp
* Spawn agents on machines using ssh
* ssh-agent hijacking

* Streaming portscan
* Stand up TCP redirectors

Future Additions

* v0.2.0
* Socks proxying
* Windows token manipulation
* More browser script integration
* DNS C2 profile
* p2p capabilities
* In memory shellcode execution execute-shellcode
General Commands
CommandSyntaxDescriptioncatcat [file]Output the contents of a file.cdcd [new directory]Change directory.cpcp [source] [destination]Copy a file from [source] to [destination].downloaddownload [path]Download a file from the target system (supports relative paths).exitexitExit the agent.getenvgetenvGet the current environment variables.getprivsgetprivsGet the privileges of the agent session.jobkilljobkill [job id]Shutdown a running background job.jobsjobsList currently running background jobs.lsls [directory]List files or directories (supports relative paths).mkdirmkdir [directory]Make a new directory.mvmv [source] [destination]Move a file from [source] to [destination] (supports relative paths).portscanportscan [popup]Scan a list of IPs for open ports.pspsGet a list of currently running processes.pwdpwdPrint working directory.redirectredirect [Setup a TCP redirector on the remote system.rmrm [path]Remove a file or directory (supports relative paths).setenvsetenv [name] [value]Set environment variable [name] to [value].shellshell [command]Run a shell command with bash -con Linux or cmd.exe /con Windows in a new thread.sleepsleep [interval][units] [jitter]Set the sleep interval and jitter (supports unit suffixing).sshssh [popup]Use ssh to execute commands, download/upload files or grab directory listings.ssh-agentssh-agent [-c Connect to running ssh agent sockets on the host or list identities.ssh-spawnssh-spawn [popup]Spawn a Mythic agent on a remote host using ssh.unsetenvunsetenv [var]Unset an environment variable.uploadupload [popup]Upload a file to the host machine.
Windows-specific Commands
CommandSyntaxDescriptionpowershellpowershell [command]Run a command using powershell.exe /cin a new thread.

Download

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials

Tetanus : Mythic C2 Agent Targeting Linux And Windows Hosts

Tetanus is a Windows and Linux C2 agent written in rust. To install Tetanus, you will need Mythic set up on a machine.

4 viewsedited 14:19

Hacking Articles Tips Tricks Videos Tutorials

just need to start a listener and generate your agent based on that listener’s information. You can generate as many listeners as you need, and then you can start interacting with your agents that connect to them. Profile setupBefore you can start using Octopus…

> * Serving Flask app “core.weblistener” (lazy loading)

* Environment: production
WARNING: Do not use the development server in a production environment.
Use a production WSGI server instead.
* Debug mode: off
Octopus >>

The listen_httpscommand takes the following arguments to start:

* BindIP : which is the IP address that will be used by the listener
* BindPort : which is the port you want to listen on
* Hostname : will be used to request the payload from
* Interval : how may seconds that agent will wait before check for commands
* URL page : name will hold the payload
* Listener_name : listener name to use
* certficate_path : path for valid ssl certficate (called fullchain.pem for letsencrypt certficates)
* key_path : path for valid key for the ssl cerficate (called key.pem for letsencrypt certficates)

Please note that you need to provide a valid SSL certficate that is associated with the domain used. Generate agentsPowershell oneliner

To generate an agent for the listener operation1we can use the following command: generate_powershell operation1HTA oneliner

To generate a HTA oneliner for the listener1 operation1we can use the following command: generate_hta operation1Download

___________________________
@hacking_Attack
@Hacking_Video

6 viewsedited 14:19

Hacking Articles Tips Tricks Videos Tutorials

Dark Reading: Attacks/Breaches
NIST Finalizes macOS Security Guidance

NIST SP800-219 introduces the macOS Security Compliance Project (mSCP) to assist organizations with creating security baselines and defining controls to protect macOS endpoints.

6 views14:34

Source

Hacking Articles Tips Tricks Videos Tutorials

Dark Reading: Attacks/Breaches
New Vulnerability Database Catalogs Cloud Security Issues

Researchers have created a new community website for reporting and tracking security issues in cloud platforms and services — plus fixes for them where available.

6 views14:34

Source

Hacking Articles Tips Tricks Videos Tutorials

Dark Reading: Attacks/Breaches
How to Find New Attack Primitives in Microsoft Azure

Abuse primitives have a longer shelf life than bugs and zero-days and are cheaper to maintain. They're also much harder for defenders to detect and block.

6 views14:34

Source

Hacking Articles Tips Tricks Videos Tutorials

5 views14:58

Hacking Articles Tips Tricks Videos Tutorials

Photo

Hacking on Medium
Reflected XSS All Clients — Fixed in Spring WebFlux

https://cdn-images-1.medium.com/max/1280/1*w_eph2JZBt-rJ_pVQdITXA.jpeg
This vulnerability is very common when we are coming to the Checkmarx report. This vulnerability is a important issue. Hence, it is…

Continue reading on Arimac »

___________________________
@hacking_Attack
@Hacking_Video

Medium

Reflected XSS All Clients — Fixed in Spring WebFlux

This vulnerability is very common when we are coming to the Checkmarx report. This vulnerability is a important issue. Hence, it is…

6 viewsedited 14:58

Hacking Articles Tips Tricks Videos Tutorials