Hacking Articles|Raj Chandel's Blog
Wireshark for Pentester: Decrypting RDP Traffic

Over the last few years, attackers used the Remote Desktop Protocol (RDP) for accessing unsecured servers and company networks. In ransomware malware attacks since 2017, RDP has become a major vector. Security professionals have focused their attention increasingly on this protocol by writing signatures to detect and prevent attacks of RDP vulnerabilities.

RDP supports several operating modes to encrypt network traffic, as a proprietary protocol from Microsoft. This encryption, unfortunately, makes it hard to write RDP signatures because the content of RDP is hidden.This article shows how the environment is prepared, a decryption key is obtained, and how RDP traffic can be deciphered.Table of contents You can download the trace file from hereMachine 1In cryptography, forward secrecy (FS), also known as perfect forward secrecy (PFS), is a feature of specific key agreement protocols that gives assurances that session keys will not be compromised even if long-term secrets are used in the session key exchange are compromised. For HTTPS, the long-term secret is typically the Private signing key of the server. Forward secrecy protects past sessions against future compromises of keys or passwords. By generating a unique session key for every session a user initiates, the compromise of a single session key will not affect any data other than that exchanged in the specific session protected by that particular key. ___________________________
@hacking_Attack
@Hacking_Video

n-in-the-Middle (MITM) attack. Forward secrecy typically uses an ephemeral Diffie-Hellman key exchange to prevent reading past traffic. The ephemeral Diffie-Hellman key exchange is often signed by the server using a static signing key.For this, we are using a Windows 10 host as an RDP Client. Administrative Templates > Network > SSL Configuration SettingsSSL Cipher Suite OrderEnable” option to Enable the SSL Cipher Suite Order.Applybutton to save the configuration and hit OKto close the window.Machine 2We have used another Running Windows 10 Host as an RDP server.Settings > System > Remote Desktop” and then “Enable Remote Desktop”.___________________________
@hacking_Attack
@Hacking_Video

tract Private Key from its Operating system. Windows don’t allow to export of any kind of certificate so we are going to use tools like Mimikatz or Jailbreak.So, I’m going to show you how this is done from both methods. You can stick with the method which feels you like easy.Method 1: - MimikatzMimikatz is a shell for various modules. Run the following commands to export RDP keys or Certificates with private Keys. Run Mimikatz as an administrator. # Export Remote Desktop certificate(s) with private keys, password is "mimikatz"crypto::certificates -systemstore:CERT_SYSTEM_STORE_LOCAL_MACHINE -store:"Remote Desktop" /exporthttps://1.bp.blogspot.com/-Y4qUFhW9hUc/YJKgbJptYtI/AAAAAAAAvxw/Ag6ClWzpFt4Gi5xDBsy3B5voia-M4KfKQCLcBGAsYHQ/s16000/9.png Method 2: - Jailbreak A jailbreak is an iSECPartners tool that can export the RDP certificate of a server. We could extract the private key from the exported certificate. On our newly developed RDP server, we downloaded the following Jailbreak binaries from this GitHub repository to use Jailbreak.Jailbreak-master > binariesand copy the location of the binary folder select All Tasks,and then Export. Next” button.___________________________
@hacking_Attack
@Hacking_Video

Hacking Articles|Raj Chandel's Blog
Wireshark for Pentester: Decrypting RDP Traffic

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Strike: What moves us

https://cdn-images-1.medium.com/max/600/1*Onlp5uF0n5Ls8mix6cinZw.jpeg
Do you want to find out about our motives to do what we do? In this article we explain our purpose, core values and brand promises :)

Continue reading on strike.sh »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Introducing Mystikal

https://cdn-images-1.medium.com/max/736/1*P_kZbL3kg4m_XwvMGTeyvQ.png
Addressing the pain of macOS initial access payloads

Continue reading on Posts By SpecterOps Team Members »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Juice Jacking Nedir?

https://cdn-images-1.medium.com/max/750/0*KoZf1WrFjPsy9zXc.jpg
Juice Jacking Nedir? — Juice jacking, virüslü bir USB şarj istasyonunu kullanan kişileri ve bağlı cihazları tehlikeye atmak için…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
Botkube - An App That Helps You Monitor Your Kubernetes Cluster, Debug Critical Deployments And Gives Recommendations For Standard Practices

https://1.bp.blogspot.com/-AKnMfBRfIUo/YJCQsUheh1I/AAAAAAAAWEg/pjla2FxUGNApMfGWUrvB9dv4T56nW6eigCNcBGAsYHQ/w640-h126/botkube_8_botkube-title.jpeg
For complete documentation visit www.botkube.io

BotKube integration with Slack, Mattermost or Microsoft Teams helps you monitor your Kubernetes cluster, debug critical deployments and gives recommendations for standard practices by running checks on the Kubernetes resources. You can also ask BotKube to execute kubectl commands on k8s cluster which helps debugging an application or cluster.
Hacktoberfest 2020

BotKube is participating in Hacktoberfest 2020. We are giving some really cool swags to our contributors, learn more at - https://www.infracloud.io/blogs/infracloud-joins-hacktoberfest-2020/.

Getting started

Please follow this for a complete BotKube installation guide.

Architecture
https://1.bp.blogspot.com/-Cb_u-VSHCiY/YJCQ1GhSHyI/AAAAAAAAWEk/SG0NrLB_Yngfa4yHnbGWSjhaAF_a7XJaQCNcBGAsYHQ/w640-h572/botkube_9_botkube_arch.png
* Informer Controller: Registers informers to kube-apiserver to watch events on the configured k8s resources. It forwards the incoming k8s event to the Event Manager.
* Event Manager: Extracts required fields from k8s event object and creates a new BotKube event struct. It passes BotKube event struct to the Filter Engine.
* Filter Engine: Takes the k8s object and BotKube event struct and runs Filters on them. Each filter runs some validations on the k8s object and modifies the messages in the BotKube event struct if required.
* Event Notifier: Finally, notifier sends BotKube event over the configured communication channel.
* Bot Interface: Bot interface takes care of authenticating and managing connections with communication mediums like Slack, Mattermost, Microsoft Teams and reads/sends messages from/to them.
* Executor: Executes BotKube or kubectl command and sends back the result to the Bot interface.

Visit www.botkube.io for Configuration, Usage and Examples.
Download Botkube

___________________________
@hacking_Attack
@Hacking_Video

Deep Web
Protection

What kind of Protection is necessary to be safe? Do i need special Protection when I`m just surfing around and don`t want buy anything or is it just a must?

submitted by /u/Background-Mix9859
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Will 2021 Mark the End of World Password Day?

We might be leaving the world of mandatory asterisks and interrobangs behind for good.

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Are there any tools similar to thelinuxchoice's blackeye tool for phishing because the original repo has been taken down.

I have tried the "upgraded" versions of blackeye but I couldn't get the "Waiting victim click link: " to show the link.

submitted by /u/H3XEX
[link] [comments]

hacking: security in practice
They Told Their Therapists Everything. Hackers Leaked It All

https://external-preview.redd.it/UpjzfPH1n-th5ssHgtEewtwsHoexrCS0LTxzOQSQ1vw.jpg?width=640&crop=smart&auto=webp&s=661386f4ccd1693150a0fab2c65c5a1fd69c6afd submitted by /u/isotalonjooseppi
[link] [comments]

hacking: security in practice
Intel ME backdoor

Ok as you can see by the title Intel has a chip in almost every cpu they have that can control basically everything in your computer it is like a backdoor now my question is, is there a vulnerability to it that has been found, and how would someone go about removing it if its possible?

submitted by /u/An0nym0usXV
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video