Pinecone - A WLAN Red Team Framework
http://www.kitploit.com/2022/09/pinecone-wlan-red-team-framework.html

___________________________
@hacking_Attack
@Hacking_Video

InstallationFor running Pinecone, you need a Debian-based operating system (it has been tested on Raspbian, Raspberry Pi (https://www.kitploit.com/search/label/Raspberry%20Pi) Desktop and Kali Linux). Pinecone has the following requirements:Python 3.5+. Your distribution probably comes with Python3 already installed, if not it can be installed using apt-get install python3.dnsmasq (tested with version 2.76). Can be installed using apt-get install dnsmasq.hostapd-wpe (tested with version 2.6). Can be installed using apt-get install hostapd-wpe. If your distribution repository does not have a hostapd-wpe package, you can either try to install it using a Kali Linux repository pre-compiled package (https://http.kali.org/pool/main/h/hostapd-wpe), or compile it from its source code (https://github.com/aircrack-ng/aircrack-ng/tree/master/patches/wpe/hostapd-wpe).After installing the necessary packages, you can install the Python packages requirements (https://www.kitploit.com/search/label/Requirements) for Pinecone using pip3 install -r requirements.txt in the project root folder.UsageFor starting Pinecone, execute python3 pinecone.py from within the project root folder:root@kali:~/pinecone# python pinecone.py
[i] Database file: ~/pinecone/db/database.sqlite
pinecone >
Pinecone is controlled via a Metasploit-like command-line interface. You can type help to get the list of available commands, or help 'command' to get more information about a specific command:pinecone > help

Documented commands (type help ):
========================================
alias help load pyscript set shortcuts use
edit history py quit shell unalias

Undocumented commands:
======================
back run stop

pinecone > help use
Usage: use module [-h]

Interact with the specified module.

positional arguments:
module module ID

optional arguments:
-h, --help show this help message and exit
Use the command use 'moduleID' to activate a Pinecone module. You can use Tab auto-completion to see the list of current loaded modules:pinecone > use
attack/deauth daemon/hostapd-wpe report/db2json scripts/infrastructure/ap
daemon/dnsmasq discovery/recon scripts/attack/wpa_handshake
pinecone > use discovery/recon
pcn module(discovery/recon) >
Every module has options, that can be seen typing help run or run --help when a module is activated. Most modules have default values for their options (check them before running):pcn module(discovery/recon) > help run
usage: run [-h] [-i INTERFACE]

optional arguments:
-h, --help show this help message and exit
-i INTERFACE, --iface INTERFACE
monitor mode capable WLAN interface (default: wlan0)
When a module is activated, you can use the run [options...] command to start its functionality. The modules provide feedback of their execution state:pcn script(attack/wpa_handshake) > run -s TEST_SSID
[i] Sending 64 deauth frames to all clients from AP 00:11:22:33:44:55 on channel 1...
................................................................
Sent 64 packets.
[i] Monitoring for 10 secs on channel 1 WPA handshakes between all clients and AP 00:11:22:33:44:55...
If the module runs in background (for example, scripts/infrastructure/ap), you can stop it using the stop command when the module is running:When you are done using a module, you can deactivate it by using the back command. You can also activate another module issuing the use command again. Shell commands may be executed with the command shell or the ! shortcut:pinecone > !ls
LICENSE modules module_template.py pinecone pinecone.py README.md requirements.txt TODO.md
Currently, Pinecone reconnaissance (https://www.kitploit.com/search/label/Reconnaissance) SQLite database is stored in the db/ directory inside the project root folder. All the temporary files that Pinecone needs to use are stored in the tmp/ directory also under the project root folder.

___________________________
@hacking_Attack
@Hacking_Video

Download Pinecone (https://github.com/pinecone-wifi/pinecone)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
EVERY HACKER USES THESE SEARCH ENGINE

https://cdn-images-1.medium.com/max/1200/1*H-Lb2Kz287vpE7ZNZGciog.jpeg
To become a hacker or PenTester, the following are some search engines hackers and pen-testers must know and use; these search engines are…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Blue Machine Walkthrough — How to get root ?

https://cdn-images-1.medium.com/max/1024/0*0Neqs0ptVQPHu9Oe.png
Difficulty : Easy

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
OSWP course review (2022)

https://cdn-images-1.medium.com/max/1094/1*pEf8NGX-HDr9xNLg58LVRg.png
A couple of months ago I finished OSWP and wanted to share an honest but brief and straight to the point review.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Ciphershastra — Maya Puzzle

https://cdn-images-1.medium.com/max/1594/1*h9rae3rIMBMvvQt0Qf3-OQ.png
You can find the challenge here: https://ciphershastra.com/Maya.html

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
A Perfect Routine Is the Quickest Way to Destroy Your Side Hustle

https://cdn-images-1.medium.com/max/2600/1*msMFovmqF4WnILS27OvkFg.jpeg
Sprinkle some fun into the day won’t you?

Continue reading on Practice in Public »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Hackers Demonstrate the Ability to Unlock a Tesla Model Y

https://cdn-images-1.medium.com/max/2600/1*KZGWJudeZ4EZ7qjmM1OW9g.png
A new hack has demonstrated the possibility for a Tesla Model Y to be unlocked and started in under a minute by replicating a keycard from…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Nim-RunPE : A Nim Implementation Of Reflective PE-Loading From Memory

Nim-RunPE , is a Nim implementation of reflective PE-Loading from memory. The base for this code was taken from RunPE-In-Memory – which I ported to Nim.

You’ll need to install the following dependencies:

nimble install ptr_math winim

I did test this with Nim Version 1.6.2 only, so use that version for testing or I cannot guarantee no errors when using another version.

Compile

If you want to pass arguments on runtime or don’t want to pass arguments at all compile via:

nim c NimRunPE.nim

If you want to hardcode custom arguments modify const exeArgsto your needs and compile with:

nim c -d:args NimRunPE.nim– this was contributed by @glynx, thanks

More Information

The technique itself it pretty old, but I didn’t find a Nim implementation yet. So this has changed now. https://s.w.org/images/core/emoji/14.0.0/72x72/1f642.png
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgZP1bKpmhyBWpqCcgK2mHuaBGMcQRN4GCSSfjwzk4O0flEpJiIuzV02pMFvkPB9Q6nzFU7FHs3C4HVDiu2d619WLtB2dwuxkShroq5eI0ApQVhI_meWQ6d-c5YreDeRmC1Sl2O3nZ6t7ZyjNc7k2R6WOv4S0qshqLtmzlWHiLTA14_kN22orZgzFW4/s1306/54.png
If you plan to load e.g. Mimikatz with this technique – make sure to compile a version from source on your own, as the release binaries don’t accept arguments after being loaded reflectively by this loader. Why? I really don’t know it’s strange but a fact. If you compile on your own it will still work:
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiQKl-WRaOXWh_yfpdJXZKtWVJyfvL6ZiWZMHIrAbv2Do6RVItdK5bXr3-LhXzhRa0fkkJ2z52AlNZuHIs_4cgm4sjm9_BePF7q5Q4kDbmMZ67D6N55IACGI5n9w7epivLdX3-e3tddc7VOa39Tkrv76MxCeItROYtx8ROMMOCh7_72gZHppQrqEvxO/s1493/78.png
My private Packer is also weaponized with this technique – but all Win32 functions are replaced with Syscalls there. That makes the technique stealthier.
Download

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Lorenz Ransomware Goes After SMBs via Mitel VoIP Phone Systems

The ransomware gang has been seen exploiting a Mitel RCE flaw discovered in VoIP devices in April (and patched in July) to perform double-extortion attacks.

Dark Reading: Attacks/Breaches
Business Security Starts With Identity

How identity-centric security can support business objectives.

Dark Reading: Attacks/Breaches
Attackers Can Compromise Most Cloud Data in Just 3 Steps

An analysis of cloud services finds that known vulnerabilities typically open the door for attackers, while insecure cloud architectures allow them to gain access to the crown jewels.