Hacking on Medium
Using HTTPS Redirectors With Metasploit and SilentTrinity C2 Frameworks

https://cdn-images-1.medium.com/max/760/1*hWYdgV5afEHbocE7k7eIeA.png
Command and Control frameworks are a staple of red team operations. Although many frameworks have come and gone (Empire), the…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
Evasor - A Tool To Be Used In Post Exploitation Phase For Blue And Red Teams To Bypass APPLICATIONCONTROL Policies

https://1.bp.blogspot.com/-LdcQW9cj0Bk/YIyE5r3UuaI/AAAAAAAAWDs/nfeEAqxWt5UYenXIIkwRPXUtwXZRLmYuwCNcBGAsYHQ/w640-h440/Evasor_2_Evasor_WCpOGoPmka.png The Evasor is an automated security assessment tool which locates existing executables on the Windows operating system that can be used to bypass any Application Control rules. It is very easy to use, quick, saves time and fully automated which generates for you a report including description, screenshots and mitigations suggestions, suites for both blue and red teams in the assessment of a post-exploitation phase. Requirements* Windows OS.
* Visual studio 2017 installed. Usage instructionsDownload the Evasor project and complie it. Verify to exclude from the project the App.config file from the reference tree. https://1.bp.blogspot.com/-m28Ryh_UNfE/YIyFD_0QHGI/AAAAAAAAWDw/vHnq-BbNoAk63YOEtijav62TpaL3d1MUgCNcBGAsYHQ/w640-h360/Evasor_1_devenv_vTcX5EfWI2.png run Evasor.exe from the bin folder. Choose your numeric option from the follwoing: https://1.bp.blogspot.com/-TSZNAJrwrFQ/YIyFJa0jKbI/AAAAAAAAWD0/cLAHno_rR2oT3KzoUS7Pfsa4ggwTjhWxQCNcBGAsYHQ/w640-h440/Evasor_2_Evasor_WCpOGoPmka.png 1. Locating executable files that can be used to bypass the Application Control!

* Retrieving the all running processes relative paths
* Checking every process (executable file) if it vulnerable to DLL Injection by:
1. Running “MavInject” Microsoft component from path C:\Windows\System32\mavinject.exe with default parameters.
2. Checking the exit code of the MavInject execution, if the process exited normally it means that the process is vulnerable to DLL Injection and can be used to bypass the Application Control.
1. Locating processes that vulnerable to DLL Hijacking!

* Retrieving the all running processes
* For each running Process:
1. Retrieving the loaded process modules
2. Checking if there is a permission to write data into the directory of the working process by creating an empty file with the name of the loaded module (DLL) or overwriting an existence module file on the working process directory.
3. If the write operation succeeds – it seems that the process is vulnerable to DLL Hijacking.
1. Locating for potential hijackable resource files

* Searching for specific files on the computer by their extension.
* Trying to replace that files to another place in order to validate that the file can be replaceable and finally, potentially vulnerable to Resource Hijacking.
* Extensions: xml,config,json,bat,cmd,ps1,vbs,ini,js,exe,dll,msi,yaml,lib,inf,reg,log,htm,hta,sys,rsp

1. Generating an automatic assessment report word document includes a description of tests and screenshots taken. ContributingWe welcome contributions of all kinds to this repository. For instructions on how to get started and descriptions of our development workflows, please see our contributing guide. Share Your Thoughts And FeedbackFor more comments, suggestions or questions, you can contact Arik Kublanov from CyberArk Labs: Copyright © 2020 CyberArk Software Ltd. All rights reserved. Labs. You can find more projects developed by us in https://github.com/cyberark/. Notes* The original code developed and being used on CyberArk Labs: Copyright © 2020 CyberArk Software Ltd. All rights reserved. internaly, makes full automation and exploitation of the informative results.
* The original code contains part of activation and exploitation but we removed it from here.
* The files content under the DLLs folder are empty and not contains any exploitation code also and it's for the Cyber Security community Red and Blue teams to be used and to be implemented according to their own needs and can be a starting point for their assessment o[...]

___________________________
@hacking_Attack
@Hacking_Video

bjectives. Download Evasor

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
SQLMAP - Automatic SQL Injection Tool 1.5.5

https://3.bp.blogspot.com/-XNOhyhmygqg/WWlvTLzMLRI/AAAAAAAAINo/1vKZqL-UEc0yrpuP08mTX_Jxjx_k32PvQCLcBGAs/s1600/h41.png
sqlmap is an open source command-line automatic SQL injection tool. Its goal is to detect and take advantage of SQL injection vulnerabilities in web applications. Once it detects one or more SQL injections on the target host, the user can choose among a variety of options to perform an extensive back-end database management system fingerprint, retrieve DBMS session user and database, enumerate users, password hashes, privileges, databases, dump entire or user's specified DBMS tables/columns, run his own SQL statement, read or write either text or binary files on the file system, execute arbitrary commands on the operating system, establish an out-of-band stateful connection between the attacker box and the database server via Metasploit payload stager, database stored procedure buffer overflow exploitation or SMB relay attack and more.

MD5 | 2423575bab9b29b2cb5a2f5b97d36e86

Download
Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Researchers Explore Active Directory Attack Vectors

Incident responders who investigate attacks targeting Active Directory discuss methods used to gain entry, elevate privileges, and control target systems.

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
BotNet

Anyone know of any good tools for creating botnets and controlling multiple servers and PCs through one interface?

submitted by /u/Technalysis_Offical
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Agent Sudo THM (Detailed Writeup)

https://cdn-images-1.medium.com/max/860/1*IkfMlpUnCpOHg3xFlv-DKw.png
Beginner walkthrough by 0xBush1do.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Hacking RF for Physical Security

https://cdn-images-1.medium.com/max/1011/1*zbx_8ay7bY-j6fwRfuIajQ.jpeg
Basics of RF Security

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Pentesting journey — starting again

https://cdn-images-1.medium.com/max/640/1*cEC29HUMLk7F8GuUwI3Mbg.jpeg
Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Vulnerability affecting some versions of centreon.

https://cdn-images-1.medium.com/max/600/1*eeia9FENcWcPJKFLd_UBTg.png
During my arduous journey to obtain OSCP certification, which happened in Nov/2020, I discovered a zero-day vulnerability in Centreon…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Can an Intrusion Prevention System (e.g. Snort) prevent CSRF and XSS attacks?

Hi all,

I am currently learning about IPS and was wondering about a query that applies to how IPS works. I have knowledge of CSRF and XSS attacks, however I am unsure if Intrusion Prevention Systems can prevent these attacks as it aims to block intrusions and is performed in-line/in-band. If someone could provide me further clarification that would be great, thanks

submitted by /u/Dwayne_Daddy11
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How to Brute force a android app requiring 4 digits/pin?

Google didn't helped much.

submitted by /u/karan3100
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How to run basic programs in notepad or a free executor?

New to hacking I have a program I want to try i think it's basic html but all the free executors people use are sketchy like krnl any help would be appreciated

submitted by /u/Xtoxiczombie
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
I Suspect a Family Member is Reading My Text Messages

Hello!

This is my first post here and I'm sorry if this isn't the place to post this but I wasn't sure where to go. (If this is the wrong place, PLEASE tell me where to go and I will).

I'll keep it short:

I have strong reason to believe that someone in my family has access to my text messages. I want to know if there is a way for me to confirm this (technologically) and how to remove it if that's the case. Does anyone here have any suggestions? Thank you for your time.

submitted by /u/TheFourthAct
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video