Hacking on Medium
TryHackMe The Marketplace Writeup

https://cdn-images-1.medium.com/max/933/1*n1LRC04kHb9tE3TleZRkIg.png
This writeup will help you solve The Marketplace box on TryHackMe.com.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Surfer : Walkthrough

https://cdn-images-1.medium.com/max/811/1*id_jdNnv1Ah_KehAfAtw9w.jpeg
“Surfer” is a room that will help you to test your SSRF attack skill.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Whale Phishing. What Is It?

https://cdn-images-1.medium.com/max/2048/1*2ZmarVxmBJqn32Mdrkk5vw.png
High-level executives and other users with access to private corporate information are the main targets of whaling assaults attacks…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

GodGenesis - A Python3 Based C2 Server To Make Life Of Red Teamer A Bit Easier. The Payload Is Capable To Bypass All The Known Antiviruses And Endpoints
http://www.kitploit.com/2022/10/godgenesis-python3-based-c2-server-to.html

___________________________
@hacking_Attack
@Hacking_Video

God Genesis is a C2 server purely coded in Python3 created to help Red Teamers and Penetration Testers. Currently It only supports TCP reverse shell but wait a min, its a FUD and can give u admin shell from any targeted WINDOWS Machine.
The List Of Commands It Supports :- ===================================================================================================
BASIC COMMANDS:
===================================================================================================
help --> Show This Options
terminate --> Exit The Shell Completely
exit --> Shell Works In Background And Prompted To C2 Server
clear --> Clear The Previous Outputs

===================================================================================================
SYSTEM COMMANDS:
===================================================================================================
cd --& gt; Change Directory
pwd --> Prints Current Working Directory
mkdir *dir_name* --> Creates A Directory Mentioned
rm *dir_name* --> Deletes A Directoty Mentioned
powershell [command] --> Run Powershell Command
start *exe_name* --> Start Any Executable By Giving The Executable Name

===================================================================================================
INFORMATION GATHERING COMMANDS:
===================================================================================================
env --> Checks Enviornment Variables
sc --> Lists All Services Running
user --> Current User
info --> Gives Us All Information About Compromised System
av --> Lists All antivirus In Compromised System

===================================================================================================
DATA EXFILTRATION COMMANDS:
===================================================================================================
download *file_name* --> Download Files From Compromised System
upload *file_name* --> Uploads Files To Victim Pc


===================================================================================================
EXPLOITATION COMMANDS:
========================================================== =========================================
persistence1 --> Persistance (https://www.kitploit.com/search/label/Persistance) Via Method 1
persistence2 --> Persistance Via Method 2
get --> Download Files From Any URL
chrome_pass_dump --> Dump All Stored Passwords From Chrome Bowser
wifi_password --> Dump Passwords Of All Saved Wifi Networks
keylogger --> Starts Key Logging Via Keylogger
dump_keylogger --> Dump All Logs Done By Keylogger
python_install --> Installs Python In Victim Pc Without UI

___________________________
@hacking_Attack
@Hacking_Video

Features Of Our Framework :- Check The Video To Get A Detail Knowledge 1. The Payload.py is a FULLY UNDETECTABLE(FUD) use your own techniques for making an exe file. (Best Result When Backdoored With Some Other Legitimate Applictions)
2. Able to perform privilege escalation (https://www.kitploit.com/search/label/Privilege%20Escalation) on any windows systems.
3. Fud keylogger
4. 2 ways of achieving persistance
5. Recon automation to save your time.

How To Use Our Tool : git clone https://github.com/SaumyajeetDas/GodGenesis.git

pip3 install -r requirements.txt

python3 c2c.py

It is worth mentioning that Suman Chakraborty (https://github.com/ANON4MOUS) have contributed in the framework by coding the the the Fud Keyloger, Wifi Password Extraction and Chrome Password Dumper modules.Dont Forget To Change The IP ADDRESS Manually in both c2c.py and payload.py

Download GodGenesis (https://github.com/SaumyajeetDas/GodGenesis)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
picking up distant Wifi

Hey guys, I've read through some posts here but could only find incomplete info…

Out of all subs, I'm assuming someone here has to have this figured out…

My goal is to (legally) pickup free, distant wifi and wirelessly broadcast it to multiple devices.

Here's a simple diagram of my current goal setup for those who like pictures better! https://imgur.com/a/jz4TUmI

I'm imagining having a "regular wifi router", but instead of getting its signal from an ethernet cable provided by internet company, it gets its signal from some sort of external antenna.

What I've researched so far (mostly in this sub):

* wifi network adapters (eg alfa) - but they only provide internet connection via usb
* every time I search for "router with external antenna", I find information on how to boost your already existing wifi signal (OUTPUT), rather than a router that can accept an antenna as INPUT
* super expensive (overkill) mesh / outdoor systems that are hundreds of dollars
* I've looked at nanostations, mikrotik, cantennas, gl.inet, etc, but I can't figure out a complete implementation. (most solutions grab wifi from far away and feed it to a single device, rather than a router or something that can repeat / broadcast)

I understand basic signal & electronics, and can configure a router (static IP, etc) if I have to, but prefer not to. I also have some experience (many years ago) with Alfa antennas and Kismac…

I'd like this setup to be "travel friendly" - making use of a power outlet is fine, but I want to keep the wires relatively short, and the entire setup simple and compact. I'm imagining using this as an in-home setup, but can also pack and take to hotels, and even a vehicle. I'm ok with having 2 antennas to accommodate different circumstances (eg 1 omni, 1 directional).

Finally, if the broadcasting device not only received antenna as input, but could also use a SIM card (with local data plan), that would be amazing!

Thank you so much!

submitted by /u/whycomeimsocool
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
The Nomad Bridge — a Fast Mob Attack — Flaws, or other potential security holes that could invite…

Nomad is a cross-chain communication standard that facilitates quick and secure transfers of tokens and data between chains as well as the…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How to pass the CompTIA Security+…in 40 hours or less

Let’s be honest, this title is not creative.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
OverTheWire Wargames: Bandit L00

https://cdn-images-1.medium.com/max/2600/1*RS7SfLx18tD0xru15vCaBQ.jpeg
Brief intro on OverTheWire Bandit challenges

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Practical Guide to Malware Analysis and Reverse Engineering(Analyzing VBA“Macros” Code P-2.2)
https://medium.com/@abdul-samad/practical-guide-to-malware-analysis-and-reverse-engineering-analyzing-vba-macros-code-p-2-2-edb524de371e?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Manually Analyzing VBA”Macros” Code P-2.2Continue reading on Medium » (https://medium.com/@abdul-samad/practical-guide-to-malware-analysis-and-reverse-engineering-analyzing-vba-macros-code-p-2-2-edb524de371e?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Practical Guide to Malware Analysis and Reverse Engineering(Analyzing VBA“Macros” Code P-2.2)

Manually Analyzing VBA”Macros” Code P-2.2Continue reading on Medium »
Read more...

HACKING GOOGLE series, usb no code execution open sourced?
https://www.reddit.com/r/redteamsec/comments/y4tszp/hacking_google_series_usb_no_code_execution_open/

I was watching the hacking google series (https://www.youtube.com/playlist?list=PL590L5WQmH8dsxxz7ooJAgmijwOz0lh2H) and the Red Team hack some employees with some USB plasma globes. They say that they created a tool to counter that, and that they have open sourced it. But.... I can't find it. Someone knows where this could be found? submitted by /u/AlexIsPlaying (https://www.reddit.com/user/AlexIsPlaying)
[link] (https://www.reddit.com/r/redteamsec/comments/y4tszp/hacking_google_series_usb_no_code_execution_open/) [comments] (https://www.reddit.com/r/redteamsec/comments/y4tszp/hacking_google_series_usb_no_code_execution_open/)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
GitHub - datapartyjs/rfparty-monitor: its like a tricorder, for your wireless world.

https://external-preview.redd.it/6lUgPgaTtXI1MfA45b1Z3mYQCcIY3m1Js9LyL9CL-QY.jpg?width=640&crop=smart&auto=webp&s=ece3c967c4be4084941662f301895cdd96241603 submitted by /u/sevenbitbyte
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video