hacking: security in practice
Australia wants to introduce cybersecurity into its school curriculum

https://external-preview.redd.it/ftk5R7YkJYe-iVD4yRb3PcnGgsBbYPjGQs8MvRpFkl4.jpg?width=640&crop=smart&auto=webp&s=227442ea74054d19e63641c0911ac11d9820b4d0 submitted by /u/cenotaphx
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
I don’t know anyting about hacking but if you want to hack a scammer here you go

(https://t.me/Markaugustine1). On telegram Is a scammer that is not his real name i am pretty shure. But he scams people all over the world by acting like a drug dealer. I just don’t like these people so feel free to hack him. If this is possable and legal and you feel like it. Tims vince is also a name of someone he is working with.

submitted by /u/Sebasss99
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Ddos attack

For roughly 29 hours now I have been constantly ddos’s due to xresolver allowing someone to option my ip through my Xbox gamer tag. I have nord which is doing literally nothing and my internet service provider cannot see the attack through firewall logs. Can someone direct me on what to do? I clearly am not experienced enough with security to handle this and I’d also like to find out how I can find a ‘blacklisted’ ip in hopes sending him his ip will get him to fuck off. Thank you for any information in advanced. I know a lot of you on here are super talented and if I need to pay someone to help me I would be happy to, I don’t want someone’s time wasted.

submitted by /u/BIIIG_DOIIINKS
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Evasor - A Tool To Be Used In Post Exploitation Phase For Blue And Red Teams To Bypass APPLICATIONCONTROL Policies

The Evasor is an automated security assessment tool which locates existing executables on the Windows operating system that can be used to bypass any Application Control rules. It is very easy to use, quick, saves time and fully automated which generates for you a report including description, screenshots and mitigations suggestions, suites for both blue and red teams in the assessment of a post-exploitation phase.Requirements Windows OS. Visual studio 2017 installed. Usage instructions Download the Evasor project and complie it. Verify to exclude from the project the App.config file from the reference tree. run Evasor.exe from the bin folder. Choose your numeric option from the follwoing: Locating executable files that can be used to bypass the Application Control! Retrieving the all running processes relative paths Checking every process (executable file) if it vulnerable to DLL Injection by: Running “MavInject” Microsoft component from path C:\Windows\System32\mavinject.exe with default parameters. Checking the exit code of the MavInject execution, if the process exited normally it means that the process is vulnerable to DLL Injection and can be used to bypass the Application Control. Locating processes that vulnerable to DLL Hijacking! Retrieving the all running processes For each running Process: Retrieving the loaded process modules Checking if there is a permission to write data into the directory of the working process by creating an empty file with the name of the loaded module (DLL) or overwriting an existence module file on the working process directory. If the write operation succeeds – it seems that the process is vulnerable to DLL Hijacking. Locating for potential hijackable resource files Searching for specific files on the computer by their extension. Trying to replace that files to another place in order to validate that the file can be replaceable and finally, potentially vulnerable to Resource Hijacking. Extensions: xml,config,json,bat,cmd,ps1,vbs,ini,js,exe,dll,msi,yaml,lib,inf,reg,log,htm,hta,sys,rsp Generating an automatic assessment report word document includes a description of tests and screenshots taken. Contributing We welcome contributions of all kinds to this repository. For instructions on how to get started and descriptions of our development workflows, please see our contributing guide. Share Your Thoughts And Feedback For more comments, suggestions or questions, you can contact Arik Kublanov from CyberArk Labs: Copyright © 2020 CyberArk Software Ltd. All rights reserved. Labs. You can find more projects developed by us in https://github.com/cyberark/. Notes The original code developed and being used on CyberArk Labs: Copyright © 2020 CyberArk Software Ltd. All rights reserved. internaly, makes full automation and exploitation of the informative results. The original code contains part of activation and exploitation but we removed it from here. The files content under the DLLs folder are empty and not contains any exploitation code also and it's for the Cyber Security community Red and Blue teams to be used and to be implemented according to their own needs and can be a starting point for their assessment objectives. Download Evasor
Read more...

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
HOW I FOUND XSS IN PRIVATE PROGRAM

https://cdn-images-1.medium.com/max/1920/1*eSZvqYaz4Ph3tzX1nqUHPg.png
Hi there, Hope you all are doing great and healthy.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How to clone SIM Card and use it in two phones | SIM Card Cloning |

Things Required :

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Using HTTPS Redirectors With Metasploit and SilentTrinity C2 Frameworks

https://cdn-images-1.medium.com/max/760/1*hWYdgV5afEHbocE7k7eIeA.png
Command and Control frameworks are a staple of red team operations. Although many frameworks have come and gone (Empire), the…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
Evasor - A Tool To Be Used In Post Exploitation Phase For Blue And Red Teams To Bypass APPLICATIONCONTROL Policies

https://1.bp.blogspot.com/-LdcQW9cj0Bk/YIyE5r3UuaI/AAAAAAAAWDs/nfeEAqxWt5UYenXIIkwRPXUtwXZRLmYuwCNcBGAsYHQ/w640-h440/Evasor_2_Evasor_WCpOGoPmka.png The Evasor is an automated security assessment tool which locates existing executables on the Windows operating system that can be used to bypass any Application Control rules. It is very easy to use, quick, saves time and fully automated which generates for you a report including description, screenshots and mitigations suggestions, suites for both blue and red teams in the assessment of a post-exploitation phase. Requirements* Windows OS.
* Visual studio 2017 installed. Usage instructionsDownload the Evasor project and complie it. Verify to exclude from the project the App.config file from the reference tree. https://1.bp.blogspot.com/-m28Ryh_UNfE/YIyFD_0QHGI/AAAAAAAAWDw/vHnq-BbNoAk63YOEtijav62TpaL3d1MUgCNcBGAsYHQ/w640-h360/Evasor_1_devenv_vTcX5EfWI2.png run Evasor.exe from the bin folder. Choose your numeric option from the follwoing: https://1.bp.blogspot.com/-TSZNAJrwrFQ/YIyFJa0jKbI/AAAAAAAAWD0/cLAHno_rR2oT3KzoUS7Pfsa4ggwTjhWxQCNcBGAsYHQ/w640-h440/Evasor_2_Evasor_WCpOGoPmka.png 1. Locating executable files that can be used to bypass the Application Control!

* Retrieving the all running processes relative paths
* Checking every process (executable file) if it vulnerable to DLL Injection by:
1. Running “MavInject” Microsoft component from path C:\Windows\System32\mavinject.exe with default parameters.
2. Checking the exit code of the MavInject execution, if the process exited normally it means that the process is vulnerable to DLL Injection and can be used to bypass the Application Control.
1. Locating processes that vulnerable to DLL Hijacking!

* Retrieving the all running processes
* For each running Process:
1. Retrieving the loaded process modules
2. Checking if there is a permission to write data into the directory of the working process by creating an empty file with the name of the loaded module (DLL) or overwriting an existence module file on the working process directory.
3. If the write operation succeeds – it seems that the process is vulnerable to DLL Hijacking.
1. Locating for potential hijackable resource files

* Searching for specific files on the computer by their extension.
* Trying to replace that files to another place in order to validate that the file can be replaceable and finally, potentially vulnerable to Resource Hijacking.
* Extensions: xml,config,json,bat,cmd,ps1,vbs,ini,js,exe,dll,msi,yaml,lib,inf,reg,log,htm,hta,sys,rsp

1. Generating an automatic assessment report word document includes a description of tests and screenshots taken. ContributingWe welcome contributions of all kinds to this repository. For instructions on how to get started and descriptions of our development workflows, please see our contributing guide. Share Your Thoughts And FeedbackFor more comments, suggestions or questions, you can contact Arik Kublanov from CyberArk Labs: Copyright © 2020 CyberArk Software Ltd. All rights reserved. Labs. You can find more projects developed by us in https://github.com/cyberark/. Notes* The original code developed and being used on CyberArk Labs: Copyright © 2020 CyberArk Software Ltd. All rights reserved. internaly, makes full automation and exploitation of the informative results.
* The original code contains part of activation and exploitation but we removed it from here.
* The files content under the DLLs folder are empty and not contains any exploitation code also and it's for the Cyber Security community Red and Blue teams to be used and to be implemented according to their own needs and can be a starting point for their assessment o[...]

___________________________
@hacking_Attack
@Hacking_Video

bjectives. Download Evasor

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
SQLMAP - Automatic SQL Injection Tool 1.5.5

https://3.bp.blogspot.com/-XNOhyhmygqg/WWlvTLzMLRI/AAAAAAAAINo/1vKZqL-UEc0yrpuP08mTX_Jxjx_k32PvQCLcBGAs/s1600/h41.png
sqlmap is an open source command-line automatic SQL injection tool. Its goal is to detect and take advantage of SQL injection vulnerabilities in web applications. Once it detects one or more SQL injections on the target host, the user can choose among a variety of options to perform an extensive back-end database management system fingerprint, retrieve DBMS session user and database, enumerate users, password hashes, privileges, databases, dump entire or user's specified DBMS tables/columns, run his own SQL statement, read or write either text or binary files on the file system, execute arbitrary commands on the operating system, establish an out-of-band stateful connection between the attacker box and the database server via Metasploit payload stager, database stored procedure buffer overflow exploitation or SMB relay attack and more.

MD5 | 2423575bab9b29b2cb5a2f5b97d36e86

Download
Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Researchers Explore Active Directory Attack Vectors

Incident responders who investigate attacks targeting Active Directory discuss methods used to gain entry, elevate privileges, and control target systems.

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
BotNet

Anyone know of any good tools for creating botnets and controlling multiple servers and PCs through one interface?

submitted by /u/Technalysis_Offical
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Agent Sudo THM (Detailed Writeup)

https://cdn-images-1.medium.com/max/860/1*IkfMlpUnCpOHg3xFlv-DKw.png
Beginner walkthrough by 0xBush1do.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video