Hacking Articles Tips Tricks Videos Tutorials
468 subscribers
65.9K photos
15 videos
157 files
132K links
Exploit
Pentesting
Hacking
Red Team
Blue Team
Kali Linux
Bug Bounty
Black Hat
Cyber security etc

@Hacking_Video
@Hacking_attack
Download Telegram
OSripper is a fully undetectable (https://www.kitploit.com/search/label/Undetectable) Backdoor generator (https://www.kitploit.com/search/label/Generator) and Crypter which specialises in OSX M1 malware. It will also work on windows but for now there is no support for it and it IS NOT FUD for windows (yet at least) and for now i will not focus on windows.You can also PM me on discord for support or to ask for new features SubGlitch1#2983
FeaturesFUD (for macOS)Cloacks as an official app (Microsoft, ExpressVPN etc)Dumps; Sys info, Browser History, Logins, ssh/aws/azure/gcloud creds, clipboard content, local users etc. (more on Cedric Owens swiftbelt)Encrypted communicationsRootkit-like BehaviourEvery Backdoor generated is entirely uniqueDescriptionPlease check the wiki for information on how OSRipper functions (which changes extremely frequently)https://github.com/SubGlitch1/OSRipper/wikiHere are example backdoors which were generated with OSRipper

___________________________
@hacking_Attack
@Hacking_Video
macOS .apps will look like this on vtGetting StartedDependenciesYou need python. If you do not wish to download python you can download a compiled release. The python dependencies are specified in the requirements.txt file.Since Version 1.4 you will need metasploit (https://www.kitploit.com/search/label/Metasploit) installed and on path so that it can handle the meterpreter listeners.InstallingLinuxapt install git python -y
git clone https://github.com/SubGlitch1/OSRipper.git
cd OSRipper
pip3 install -r requirements.txtWindowsgit clone https://github.com/SubGlitch1/OSRipper.git
cd OSRipper
pip3 install -r requirements.txtor download the latest release from https://github.com/SubGlitch1/OSRipper/releases/tag/v0.2.3Executing programOnly thissudo python3 main.py
ContributingPlease feel free to fork and open pull repuests. Suggestions/critisizm are appreciated as wellRoadmapv0.1Get down detection to 0/26 on antiscan.meAdd ChangelogDaemonise BackdoorAdd CrypterAdd More Backdoor templatesGet down detection to at least 0/68 on VT (for mac malware)v0.2Add AntiVM[] Implement tor hidden servicesAdd LoggerAdd Password stealer[] Add KeyLoggerAdd some new evasion optionsAdd SilentMiner[] Make proper C2 serverv0.3Coming soonHelpJust open a issue and ill make sure to get back to youChangelog0.2.1OSRipper will now pull all information from the Target and send them to the c2 server (https://www.kitploit.com/search/label/C2%20Server) over sockets. This includes information like browser history, passwords, system information, keys and etc.0.1.6Proccess will now trojanise itself as com.apple.system.monitor and drop to /Users/Shared0.1.5Added Crypter0.1.4Added 4th Module0.1.3Got detection on VT down to 0. Made the Proccess invisible0.1.2Added 3rd module and listener0.1.1Initial ReleaseLicenseMITAcknowledgmentsInspiration, code snippets, etc.htr (https://github.com/htr-tech/PyObfuscate)swiftbelt (https://github.com/cedowens/SwiftBelt)SupportI am very sorry to even write this here but my finances are not looking good right now. If you appreciate my work i would really be happy about any donation. You do NOT have to this is solely optionalBTC: 1LTq6rarb13Qr9j37176p3R9eGnp5WZJ9TDisclaimerI am not responsible for what is done with this project. This tool is solely written to be studied by other security researchers to see how easy it is to develop macOS malware.

Download OSRipper (https://github.com/SubGlitch1/OSRipper)

___________________________
@hacking_Attack
@Hacking_Video
Immunefi Raises $24m for Series A to Secure Web3

Today, we’re announcing that we’ve raised $24m for our Series A round, led by Framework Ventures and joined by other investors like…Continue reading on Immunefi »
Read more...
hacking: security in practice
WPS Offline Attack, What to do?

Hi, I have a task for school where the task is to calculate the WPS PIN that was used to create the hashes given.

I have the following data/values :

EHASH1, and EHASH2, ENonce, RENonce, Enrollee MAC, Public Key Enrollee, Private Key Enrollee, Public Key Registrar, and the shared secret(256 Bit hash).

I tried using some pixiewps (offline was brute force) tool from GitHub, but all I got out was jibberish.

So what I was thinking of writing a python script that brute forces the combination, but every thing I have tried so far has not worked.

I you have any tips for how to solve this task, I would really appreciate if you could send me a message or comment.

submitted by /u/TheDragonPenguin
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video
hacking: security in practice
Strange encryption

Hi, I bumped into a weir encryption type that I cannot recognize, I know a password and its encrypted form, but I can't figure which encryption it is.

The password in plaintext is "CYM-Juri2016", and encrypted it is "dÔ£Žœ¦ï”eh["

Does it ring a bell ?

Thank you in advance

submitted by /u/megatronchote
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video