Hacking on Medium
Simpel reverse shell menggunakan netcat linux to linux

https://cdn-images-1.medium.com/max/1366/1*2lov0Ac3xUR4k5vb0Ig63A.png
Baik kali ini saya akan sedikit sharing tentang bagaimana cara membuat reverse shell dengan netcat antara attacker dan server korban…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Kali Linux bukan untuk Pemula! Tetapi Pemula boleh belajar Kali Linux!

https://cdn-images-1.medium.com/max/1200/0*1u5GHD63RTdm5xiQ
Tahukah kamu? Bahwa Kali Linux saat ini menjadi salah satu sistem operasi yang sangat populer lho! Khususnya di kalangan yang bisa disebut…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How To Find A Good Phone Hacker

https://cdn-images-1.medium.com/max/1240/0*wMHRqHYSUrH53xF_
A phone hacker is someone who can use their skills to break into a phone system.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Top 3 VPNs To Explore in 2022

https://cdn-images-1.medium.com/max/2600/0*OKVWiDIZUAyCD5HQ
I tried the top 3 VPNs so that you don’t have to.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

VPN bypass vulnerability in Apple iOS
https://www.reddit.com/r/Pentesting/comments/y2vwfu/vpn_bypass_vulnerability_in_apple_ios/

___________________________
@hacking_Attack
@Hacking_Video

submitted by /u/Blue_Master (https://www.reddit.com/user/Blue_Master)
[link] (https://protonvpn.com/blog/apple-ios-vulnerability-disclosure/) [comments] (https://www.reddit.com/r/Pentesting/comments/y2vwfu/vpn_bypass_vulnerability_in_apple_ios/)

___________________________
@hacking_Attack
@Hacking_Video

FUD-UUID-Shellcode - Another shellcode injection technique using C++ that attempts to bypass Windows Defender using XOR encryption sorcery and UUID strings madness
http://www.kitploit.com/2022/10/fud-uuid-shellcode-another-shellcode.html

___________________________
@hacking_Attack
@Hacking_Video

Introduction Another shellcode injection (https://www.kitploit.com/search/label/Injection) technique using C++ that attempts to bypass Windows Defender (https://www.kitploit.com/search/label/Windows%20Defender) using XOR encryption (https://www.kitploit.com/search/label/Encryption) sorcery and UUID strings madness :).
How it works Shellcode generation Firstly, generate a payload in binary format( using either CobaltStrike or msfvenom ) for instance, in msfvenom, you can do it like so( the payload I'm using is for illustration purposes, you can use whatever payload you want ): msfvenom -p windows/messagebox -f raw -o shellcode.bin Then convert the shellcode( in binary/raw format ) into a UUID string format using the Python3 script, bin_to_uuid.py: ./bin_to_uuid.py -p shellcode.bin > uuid.txt xor encrypt the UUID strings in the uuid.txt using the Python3 script, xor_encryptor.py. ./xor_encryptor.py uuid.txt > xor_crypted_out.txt Copy the C-style array in the file, xor_crypted_out.txt, and paste it in the C++ file as an array of unsigned char i.e. unsigned char payload[]{your_output_from_xor_crypted_out.txt} Execution This shellcode injection technique comprises the following subsequent steps: First things first, it allocates virtual memory for payload execution and residence via VirtualAlloc It xor decrypts the payload using the xor key value Uses UuidFromStringA to convert UUID strings into their binary representation and store them in the previously allocated memory. This is used to avoid the usage of suspicious APIs like WriteProcessMemory or memcpy. Use EnumChildWindows to execute the payload previously loaded into memory( in step 1 ) What makes it unique? It doesn't use standard functions like memcpy or WriteProcessMemory which are known to raise alarms to AVs/EDRs, this program uses the Windows API (https://www.kitploit.com/search/label/Windows%20API) function called UuidFromStringA which can be used to decode data as well as write it to memory( Isn't that great folks? And please don't say "NO!" :) ). It uses the function call obfuscation trick to call the Windows API functions Lastly, because it looks unique :) ( Isn't it? :) ) Important You have to change the xor key(row 86) to what you wish. This can be done in the ./xor_encryptor.py python3 script by changing the KEY variable. You have to change the default executable filename value(row 90) to your filename. The command for compiling is provided in the C++ file( around the top ). NB: mingw was used but you can use whichever compiler (https://www.kitploit.com/search/label/Compiler) you prefer. :) Compile make Proof-of-Concept( PoC )

___________________________
@hacking_Attack
@Hacking_Video

Static Analysis

___________________________
@hacking_Attack
@Hacking_Video

AV Scan results The binary was scanned using antiscan.me (https://antiscan.me/scan/new/result?id=3IYj6CtMq6h8) on 01/08/2022.

___________________________
@hacking_Attack
@Hacking_Video

Credits https://research.nccgroup.com/2021/01/23/rift-analysing-a-lazarus-shellcode-execution-method/

Download FUD-UUID-Shellcode (https://github.com/Bl4ckM1rror/FUD-UUID-Shellcode)

___________________________
@hacking_Attack
@Hacking_Video

Fall account takeover via Amazon Cognito misconfiguration
https://medium.com/@iknowhatodo/fall-account-takeover-via-amazon-cognito-misconfiguration-ba5975b06c24?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hello reader,
I hope you are doing well. Today I want to talk about one of my findings. It was a public program and the bug is not fixed…Continue reading on Medium » (https://medium.com/@iknowhatodo/fall-account-takeover-via-amazon-cognito-misconfiguration-ba5975b06c24?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
What the Uber Breach Verdict Means for CISOs in the US

Can already beleaguered CISOs now add possible legal charges to their smorgasbord of job considerations? Disclose a breach to comply and face dismissal, or cover it up and face personal punishment.