Black Hat Ethical Hacking
Offensive Security Tool: ADFSBrute

https://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Offensive Security Tool: ADFSBrutePost Views: 15 https://www.blackhatethicalhacking.com/wp-content/uploads/2020/11/BECOME-A-PATRON-AND-UNLOCK-EXCLUSIVE-VIDEOS-8-1-300x120.png Reading Time: 5 Minutes

Offensive Security Tool: ADFSBrute GitHub Link
adfsbrute
ADFSBrute by ricardojoserf, is a script to test credentials against Active Directory Federation Services (ADFS), calculating the ADFS url of an organization and allowing password spraying or bruteforce attacks.

The main idea is carrying out password spraying attacks with a random and high delay between each test and using a list of proxies or Tor to make the detection by the Blue Team more difficult. Brute force attacks are also possible, or testing credentials with the format username:password (for example from Pwndb). Tested logins will get stored in a log file to avoid testing them twice.
Usage ./adfsbrute.py -t TARGET [-u USER] [-U USER_LIST] [-p PASSWORD] [-P PASSWORD_LIST] [-UL userpassword_list]
[-m MIN_TIME] [-M MAX_TIME] [-tp TOR_PASSWORD] [-pl PROXY_LIST] [-n NUMBER_OF_REQUESTS_PER_IP]
[-s STOP_ON_SUCCESS] [-r RANDOM_COMBINATIONS] [-d DEBUG] [-l LOG_FILE]The parameters for the attacks are: * -t: Target domain. Example: test.com

* -u: Single username. Example: agarcia@domain.com

* -U: File with a list of usernames. Example: users.txt

* -p: Single password: Example: Company123

* -P: File with a list of passwords. Example: passwords.txt

* -UP: File with a list of credentials in the format "username:password". Example: userpass.txt

* -m : Minimum value of random seconds to wait between each test. Default: 30

* -M : Maximum value of random seconds to wait between each test. Default: 60

* -tp: Tor password (change IP addresses using Tor)

* -pl: Use a proxy list (change IP addresses using a list of proxy IPs)

* -n: Number of requests before changing IP address (used with -tp or -pl). Default: 1

* -s: Stop on success, when one correct credential is found. Default: False

* -r: Randomize the combination of users and passwords. Default: True

* -d: Show debug messages. Default: True

* -l: Log file location with already tested credentials. Default: tested.txtExamples
Password spraying with password “Company123”, tor password is “test123” and changing the IP every 3 requests: python3 adfsbrute.py -t company.com -U users.txt -p Company123 -tp test123 -n 3https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/image1.png
Password spraying with password “Company123”, tor password is “test123”, changing the IP for every request, random delay time between 10 and 20 seconds and do not randomize the order of users: python3 adfsbrute.py -t company.com -U users.txt -p Company123 -tp test123 -m 10 -M 20 -r Falsehttps://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/image2.png
Finding ADFS url: python3 adfsbrute.py -t company.comhttps://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/image3.png
Using Tor
To use Tor to change the IP for every request, you must hash a password: tor --hash-password test123In the file /etc/tor/torrc, uncomment the variable ControlPort and the variable HashedControlPassword, and in this last one add the hash: ControlPort 9051
HashedControlPassword 16:7F314CAB402A81F860B3EE449B743AEC0DED9F27FA41831737E2F08F87Restart the tor service and use this password as argument for the script (“-tp test123” or “–tor_password 123”) service tor restartNote

This script is implemented to test in security audits, DO NOT use without proper authorization from the company owning the ADFS or you will block acco[...]

___________________________

@hacking_Attack

@Hacking_Video
___________________________

sh but also with highly sensitive IP,” Schmitt explained. “Additionally, connections to other research organizations increase the potential to damage the victim’s reputation in the industry and put business dealings at risk.”

Healthcare and biotech companies are also prime targets given that they stand to lose the most if operations are halted for too long or critical IP is lost, Schmitt pointed out. So, “attackers view them as more likely to pay the requested ransom quickly,” he said.

All of this has happened as Mount Locker appears to be rebranding to AstroLocker. Schmitt pointed out that “the verbiage and victims listed on both variants’ shaming sites share significant overlap.” He added, “this could signal a shift in the group’s overall tactics and an effort to fully rebrand as a more insidious threat.” See Also: Hacking Stories: When two young hackers played war games with PentagonOrganizations can look for signs of Mount Locker or AstroLocker within their environments, such as CobaltStrike stagers and beacons; and, they should monitor for the staging and exfiltration of files via FTP.

“While these would always be cause for alarm…an updated, more aggressive Mount Locker and the dramatic increase in attacks attributable to the group make these indicators of compromise particularly alarming,” Schmitt concluded. Source: threatpost.com (Click Link)Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/Untitled-design-11-90x90.png Pulse Secure Critical Zero-Day Security Bug Under Active Exploit1 day ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/firefox_patch-90x90.jpg Mozilla Fixes Firefox Flaw That Allowed Spoofing of HTTPS Browser Padlock2 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/Discord-Nitro-e1618858537976-90x90.png NitroRansomware Asks for Discord Gift Codes, Steals Access Tokens3 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/Untitled-design-10-90x90.png WordPress could treat Google FloC as a security issue4 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/Crypto_Mining_Bitcoin-90x90.jpg Attackers Target ProxyLogon Exploit to Install Cryptojacker1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/patchtues1-90x90.jpg Microsoft to Patch multiple Zero-Days, 110 vulnerabilities in total1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/Google-Chrome-Browser-90x90.jpg Chrome Zero-Day Exploit Posted on Twitter1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/Clubhouse2-e1618258606781-90x90.png 1.3M Clubhouse Users’ Data Dumped in Hacker Forum for Free1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/linkedin-90x90.png Data from 500M LinkedIn Users Posted for Sale Online2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/cisco-patch-90x90.png Zero-Day Bug Impacts Problem-Plagued Cisco SOHO Routers2 weeks ago
The post Mount Locker Ransomware Aggressively Changes Up Tactics first appeared on Black Hat Ethical Hacking.

___________________________

@hacking_Attack

@Hacking_Video
___________________________

unts. Recent Tools* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/logo-90x90.png Offensive Security Tool: Hunt7 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/85207007-711b0b80-b343-11ea-82f3-49aa5d5d719b-90x90.png Offensive Security Tool: CVE Binary Tool by Intel2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/help-1-90x90.png Offensive Security Tool: DirDar3 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/03/intro-90x90.png Information Security Tool: Chameleon4 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/03/skipfish_screenshot-90x90.png Offensive Security Tool: Skipfish1 month ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/03/sparta2-90x90.png Offensive Security Tool: Sparta2 months ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/02/ScareCrow2-90x90.png Offensive Security Tool: ScareCrow2 months ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/01/john_the_ripper_bg-90x90.jpg Offensive Security Tool: JTR – John the Ripper3 months ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/01/shad0w_msf_shad0w-2-90x90.png Offensive Security Tool: Shad0w4 months ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2020/12/hack-like-pro-snort-ids-for-aspiring-hacker-part-2-setting-up-basic-configuration-90x90.png Offensive Security Tools: FireEye Red Team Tool Countermeasures4 months ago
style="display:block; text-align:center;"
data-ad-layout="in-article"
data-ad-format="fluid"
data-ad-client="ca-pub-6620833063853657"
data-ad-slot="4517761481">
The post Offensive Security Tool: ADFSBrute first appeared on Black Hat Ethical Hacking.

___________________________

@hacking_Attack

@Hacking_Video
___________________________

Vajra – an automated web hacking framework for web applications.https://hakin9.org/vajra-framework/

#Vajra #hack #web

___________________________

@hacking_Attack

@Hacking_Video
___________________________

SQL Injection Cheat Sheet.https://www.netsparker.com/blog/web-security/sql-injection-cheat-sheet/

#SQL #Injection #CheatSheet

___________________________

@hacking_Attack

@Hacking_Video
___________________________

The Mobile App Pentest cheat sheet.https://github.com/whb224117/MobileApp-Pentest-Cheatsheet

#cheatsheet #Mobile

___________________________

@hacking_Attack

@Hacking_Video
___________________________

Cheat Sheet: XSS that works in 2021.https://netsec.expert/posts/xss-in-2021/index.html

#XSS #Cheatsheet

___________________________

@hacking_Attack

@Hacking_Video
___________________________

Hide Secrets and Crack JPEG File Password via Steganography Tools.https://secnhack.in/hide-secrets-and-crack-jpeg-file-password-via-steganography-tools/

#Steganography #Tools

___________________________

@hacking_Attack

@Hacking_Video
___________________________

Hash Buster - Why crack hashes when you can bust them?https://hakin9.org/hash-buster-why-crack-hashes-when-you-can-bust-them/

#Hash #Buster

___________________________

@hacking_Attack

@Hacking_Video
___________________________

Darkdump – Search The Deep Web (Dark Web).

https://secnhack.in/darkdump-search-the-deep-web-dark-web/

#darkdump

___________________________

@hacking_Attack

@Hacking_Video
___________________________

How APTs Use Reverse Proxies to Nmap Internal Networks.https://www.varonis.com/blog/nmap-reverse-proxies/

#Nmap

___________________________

@hacking_Attack

@Hacking_Video
___________________________

Using Archive.org for OSINT Investigations.https://osintcurio.us/2021/03/03/using-archive-org-for-osint-investigations/

#OSINT

___________________________

@hacking_Attack

@Hacking_Video
___________________________

retoolkit: Toolbox for Reverse Engineering.https://en.iguru.gr/2021/03/21/retoolkit-ergaleiothiki-gia-reverse-engineering/

#retoolkit #RE

___________________________

@hacking_Attack

@Hacking_Video
___________________________

RapidScan – The Multi-Tool Web Vulnerability Scanner.https://secnhack.in/rapidscan-the-multi-tool-web-vulnerability-scanner/

#RapidScan #Web

___________________________

@hacking_Attack

@Hacking_Video
___________________________

Subcert - a subdomain enumeration tool.https://hakin9.org/subcert-a-subdomain-enumeration-tool/

#Subcert

___________________________

@hacking_Attack

@Hacking_Video
___________________________

Nessus Vulnerability Scanner Tool Installation.https://secnhack.in/nessus-vulnerability-scanner-tool-installation/

#Nessus

___________________________

@hacking_Attack

@Hacking_Video
___________________________

I-See-You - a tool to find the location of users during social engineering or phishing engagements.https://hakin9.org/i-see-you-a-tool-to-find-the-location-of-users-during-social-engineering-or-phishing-engagements/

#phishing

___________________________

@hacking_Attack

@Hacking_Video
___________________________

Hidden OAuth attack vectors

https://portswigger.net/research/hidden-oauth-attack-vectors

___________________________

@hacking_Attack

@Hacking_Video
___________________________

apkleaks: Scan APK files for URIs and endpoints.https://en.iguru.gr/2021/03/24/apkleaks-skanare-apk-archeia-gia-uris-kai-endpoints/

#apkleaks

___________________________

@hacking_Attack

@Hacking_Video
___________________________

Keep Malware Off Your Disk With SentinelOne’s IDA Pro Memory Loader Plugin.https://labs.sentinelone.com/keep-malware-off-your-disk-with-sentinelones-ida-pro-memory-loader-plugin/

#SentinelOne

___________________________

@hacking_Attack

@Hacking_Video
___________________________

Kraker: Breaking passwords easily and quickly.https://en.iguru.gr/2021/03/26/kraker-spasimo-kodikon-efkola-kai-grigora/

#Kraker

___________________________

@hacking_Attack

@Hacking_Video
___________________________