Hello Learners, I am Rajneesh K. Arya again here with my new blog on OTP bypassing. So let’s check what google said about it.Continue reading on Medium » (https://medium.com/@RajneeshKarya/how-i-bypass-the-otp-of-a-well-known-website-520669e34472?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

How I Found P1 with Google Dork on Bugcrowd Program
https://medium.com/@ittipatjitrada_72022/how-i-found-p1-with-google-dork-on-bugcrowd-program-8d141ec049e4?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

ToolContinue reading on Medium » (https://medium.com/@ittipatjitrada_72022/how-i-found-p1-with-google-dork-on-bugcrowd-program-8d141ec049e4?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

How I Found P1 in Bugcrowd with only Recon

ToolContinue reading on Medium »
Read more...

How I Found P1 with Google Dork on Bugcrowd Program

ToolContinue reading on Medium »
Read more...

Creating Fully Undetectable (FUD) Stager in C
https://www.reddit.com/r/redteamsec/comments/yeoif6/creating_fully_undetectable_fud_stager_in_c/

Hope you enjoyed the video and learned something new! https://youtu.be/Pu06zYUdpGs Still a lot of things to implement in order for this to be practical but I think it was fun seeing 0/26 AV detection. Feel free to improve it yourself and do it responsible, you are responsible for your own actions with that. submitted by /u/lsecqt (https://www.reddit.com/user/lsecqt)
[link] (https://www.reddit.com/r/redteamsec/comments/yeoif6/creating_fully_undetectable_fud_stager_in_c/) [comments] (https://www.reddit.com/r/redteamsec/comments/yeoif6/creating_fully_undetectable_fud_stager_in_c/)

___________________________
@hacking_Attack
@Hacking_Video

How come you got into pen testing?
https://www.reddit.com/r/Pentesting/comments/yeog95/how_come_you_got_into_pen_testing/

Pen testers of Reddit, what made you get into pen testing? And what did you guys say in your interviews when the person that interviewed you asked you the reason for your job? submitted by /u/ELIDAL99 (https://www.reddit.com/user/ELIDAL99)
[link] (https://www.reddit.com/r/Pentesting/comments/yeog95/how_come_you_got_into_pen_testing/) [comments] (https://www.reddit.com/r/Pentesting/comments/yeog95/how_come_you_got_into_pen_testing/)

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
PartyLoud : A Simple Tool To Generate Fake Web Browsing And Mitigate Tracking

PartyLoud is a highly configurable and straightforward free tool that helps you prevent tracking directly from your linux terminal, no special skills required. Once started, you can forget it is running. It provides several flags; each flag lets you customize your experience and change PartyLoud behaviour according to your needs.

* Simple. 3 files only, no installation required, just clone this repo an you’re ready to go.
* Powerful. Thread-based navigation.
* Stealthy. Optimized to emulate user navigation.
* Portable. You can use this script on every unix-based OS. How It Works?* URLs and keywords are loaded (either from partyloud.conf and badwords or from user-defined files)
* If proxy flag has been used, proxy config will be tested
* For each URL in ULR-list a thread is started, each thread as an user agent associated
* Each thread will start by sending an HTTP request to the given URL
* The response if filtered using the keywords in order to prevent 404s and malformed URLs
* A new URL is choosen from the list generated after filering
* Current thread sleeps for a random time
* Actions from 4 to 7 are repeated using the new URL until user send kill signal (CTRL-C or enter key) Features* Configurable urls list and blocklist
* Random DNS Mode : each request is done on a different DNS Server
* Multi-threaded request engine (# of thread are equal to # of urls in partyloud.conf)
* Error recovery mechanism to protect Engines from failures
* Spoofed User Agent prevent from fingerprinting (each engine has a different user agent)
* Dynamic UI SetupClone the repository:

git clone https://github.com/realtho/PartyLoud.git

Navigate to the directory and make the script executable:

cd PartyLoud
chmod +x partyloud.sh

Run ‘partyloud’:

./partyloud.sh

Usage
Usage: ./partyloud.sh [options...]

-d --dns To stop the script press either enter or CRTL-CFile SpecificationsIn current release there is no input-validation on files.
If you find bugs or have suggestions on how to improve this features please help me by opening issues on GitHub IntroIf you don’t have special needs , default config files are just fine to get you started.
Default files are located in:

* badwords
* partyloud.conf
* DNSList

Please note that file name and extension are not important, just content of files matter badwords – Keywords-based blocklistbadwords is a keywords-based blocklist used to filter non-HTML content, images, document and so on.
The default config as been created after several weeks of testing. If you really think you need a custom blocklist, my suggestion is to start by copy and modifying default config according to your needs.
Here are some hints on how to create a great blocklist file:
DO https://s.w.org/images/core/emoji/14.0.0/72x72/2705.png DONT https://s.w.org/images/core/emoji/14.0.0/72x72/1f6ab.png Use only ASCII charsDefine one-site-only rulesTry to keep the rules as general as possibleDefine case-sensitive rulesPrefer relative pathPlace more than one rule per line partyloud.conf – ULR Listpartyloud.conf is a ULR List used as starting point for fake navigation generators.
The[...]

___________________________
@hacking_Attack
@Hacking_Video

goal here is to create a good list of sites containing a lot of URLs.
Aside suggesting you not to use google, youtube and social networks related links, I’ve really no hints for you. Note #1 – To work properly the URLs must be well-formed Note #2 – Even if the file contains 1000 lines only 10 are used (first 10, working on randomness) Note #3 – Only one URL per line is allowed DNSList – DNS ListDNSList is a List of DNS used as argument for random DNS feature. Random DNS is not enable by default, so the “default file” is really just a guide line and a test used while developing the function to se if everything was working as expected.
The only suggestion here is to add as much address as possible to increase randomness. Note #1 – Only one address per line is allowed FAQIsn’t this literally just a cli based frontend to curl?

How does the error recovery mechanism work?

May I fork your project? How easy is this fake traffic to detect?

What does badwords do?

What does partyloud.conf do?
partyloud.conf is just a list of root urls used to start the fake navigation. You can create your own conf file, but pay attention that the more urls you add, the more threads you start. This is an “open issue”. Upcoming releases will come with a max thread number in order to avoid Fork Bombs. Click Here To Download

___________________________
@hacking_Attack
@Hacking_Video

The Best Vulnerability Disclosure Programs (Less Competitive Bounties)
https://grahamzemel.medium.com/the-best-vulnerability-disclosure-programs-less-competitive-bounties-a166acbbbd1b?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

TL;DR- There’s a ton of programs for bug bounties and vulnerability disclosure, but they’re usually filled with competition because…Continue reading on Medium » (https://grahamzemel.medium.com/the-best-vulnerability-disclosure-programs-less-competitive-bounties-a166acbbbd1b?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
Whids - Open Source EDR For Windows

https://blogger.googleusercontent.com/img/a/AVvXsEheovpufCWwXP4iRTrI2hGRysAnGZIBLSkylv77MvyKDOhjdTMR3Zo114IjQznPn97hfzm9whr-hcjNTRSOS220wQwTQNG32ONikU34DKnDGMifN3heP76x0mWBrRm_1VQzvE52zSZym3RPzVgFWSBonkp5WWSOMLmGe1aaBq3hi6dvCKK3FOAR5okDvA=w640-h380 WhatEDR with artifact collection driven by detection. The detection engine is built on top of a previous project Gene specially designed to match Windows events against user defined rules. What do you mean by "artifact collection driven by detection" ?It means that an alert can directly trigger some artifact collection (file, registry, process memory). This way you are sure you collected the artifacts as soon as you could (near real time).

All this work has been done on my free time in the hope it would help other people, I hope you will enjoy it. Unless I get some funding to further develop this project, I will continue doing so. I will make all I can to fix issues in time and provide updates. Feel free to open issues to improve that project and keep it alive. Why* Provide an Open Source EDR to the community
* Make transparency on the detection rules to make analysts understand why a rule triggered
* Offer powerful detection primitives though a flexible rule engine
* Optimize Incident Response processes by drastically reducing the time between detection and artifact collection Howhttps://blogger.googleusercontent.com/img/a/AVvXsEg6QksZ1mgHh6vya-4yIUj2P74tu_ZE0EjIp3Hm7xWxs3Klcb9YL7FI3RAHqcK7UZcudTXBOQB4ZyRl9iSYhKNnC819-zTdPI892LX0J0mNcIZz0Gt51nrKwkLuiX1CfIbAMDd3zCTsURndSQ6AActOu-PhsWWvtfQ_28yaHLmrFJTkgGvAS3AAF9b_Lg=w640-h430 NB: the EDR agent can be ran standalone (without being connected to an EDR manager) Strengths* Open Source
* Relies on Sysmon for all the heavy lifting (kernel component)
* Very powerful but also customizable detection engine
* Built by an Incident Responder for all Incident Responders to make their job easier
* Low footprint (no process injection)
* Can co-exist with any antivirus product (advised to run it along with MS Defender)
* Designed for high throughput. It can easily enrich and analyze 4M events a day per endpoint without performance impact. Good luck to achieve that with a SIEM.
* Easily integrable with other tools (Splunk, ELK, MISP ...)
* Integrated with ATT&CK framework Weaknesses* Only works on Windows
* Detection limited to what is available in Windows event logs channels ETW providers/sessions (already a lot in there)
* No process instrumentation (it is also a strength as it depends on the point of view)
* No GUI yet (will develop one if requested by the community)
* No support for ETW (available in beta)
* Tell me if you notice others ... InstallationRequirements1. Install Sysmon
2. Configure Sysmon
* You can find optimized Sysmon configurations here
* Logging any ProcessCreate and ProcessTerminate is mandatory

3. Take note of the path to your Sysmon binary because you will need it later on

NB: event filtering can be done at 100% with Gene rules so do not bother creating a complicated Sysmon configuration. Pre-Installation RecommendationsIn order to get the most of WHIDS you might want to improve your logging policy.

* Enable Powershell Module Logging
* Audit Service Creation: gpedit.msc -> Computer Configuration\Windows Settings\Security Settings\Advanced Audit Policy Configuration\System Audit Policies\System\Audit Security System Extension-> Enable
* Enable File System Audit. Sysmon only provides FileCreate events when new files are created, so if you want/need to log other kind of accesses (Read, Write, ...) you need to enable FS Auditing.
1. gpedit.msc -> Computer Configuration\Windows Settings\Security Settings\Advanced Audit Policy Configuration\System Audit Policies\Object Access\Audit File System-> Enable[...]

___________________________
@hacking_Attack
@Hacking_Video

2. Right Click Any Folder -> Properties -> Security -> Advanced -> Auditing -> Add
1. Select a principal(put here the name of the user/group you want the audit for). Put group Everyone if you want to log access from any user.
2. Apply this tois used to select the scope of this audit policy starting from the folder you have selected
3. Basic permissionsselect the kinds of accesses you want the logs to be generated for
4. Validate

3. File System auditing logs will appear in the Securitylog channel

* If you want an antivirus to run on your endpoints, keep Microsoft Defender, first because it is a good AV but also because it logs alerts in a dedicated log channel Microsoft-Windows-Windows Defender/Operationalmonitored by the EDR. EDR Endpoint agent (Whids.exe)This section covers the installation of the agent on the endpoint.

1. Download and extract the latest WHIDS release https://github.com/0xrawsec/whids/releases
2. Run manage.batas administrator
3. Launch installation by selecting the appropriate option
4. Verify that files have been created at the installation directory
5. Edit configuration file by selecting the appropriate option in manage.bator using your preferred text editor
6. Skip this if running with a connection to a manager, because rules will be updated automatically. If there is nothing in the rules directory the tool will be useless, so make sure there are some gene rules in there. Some rules are packaged with WHIDS and you will be prompted to choose if you want to install those or not. If you want the last up to date rules, you can get those here (take the compiled ones)
7. Start the services from appropriate option in manage.bator just reboot (preferred option otherwise some enrichment fields will be incomplete leading to false alerts)
8. If you configured a manager do not forget to run it in order to receive alerts and dumps

NB: At installation time the Sysmon service will be made dependent of WHIDS service so that we are sure the EDR runs before Sysmon starts generating some events. EDR ManagerThe EDR manager can be installed on several platforms, pre-built binaries are provided for Windows, Linux and Darwin.

1. Create TLS certificate if needed for HTTPS connections
2. Create a configuration file (there is a command line argument to generate a basic config)
3. Run the binary Configuration ExamplesPlease visit doc/configuration.md Further Documentation* Endpoint Manager REST API documentation
* How to write rules
* Getting EDR detection rules
* Overview of events enrichment Known Issues* Does not work properly when ran from a network share mapped as a network drive (this case prevent whids to identify itself and thus generate some noise). Example: if \\vbox\testis mounted as Z:drive, running Z:\whids.exewon't work while running \\vbox\test\whids.exeactually would. Roadmap until next release* find a new name to the project because we all agree it sucks
* better sysmon integration (config, deployment, update)
* endpoint configuration from manager
* tooling management (update, install), like OSQuery
* code refactoring and optimization
* implement a performance monitor
* get rid of any on-disk configuration
* implement IOC management capabilities
* ETW support
* automatic documentation (OpenAPI) and testing of manager's API
* provide endpoint system information in manager
* implement actionable rules
* provide canary file management
* builtin commands to be executed by endpoints
* provide Incident Response reports about endpoints
* overall manager API improvement
* provide event streams so that a client can receive events in realtime
* standardize HTTP headers
* provide a python library to interact with EDR manager (https://github.com/0xrawsec/pywhids) Changelogv1.7* New Administrative HTTP API with follo[...]

___________________________
@hacking_Attack
@Hacking_Video

wing features:
* Manage endpoints (list, create, delete)
* Get basic statistics about the manager
* Execute commands on endpoints and get results
* Can drop files prior to execution, to execute binaries/scripts not present on endpoint. Dropped files are deleted after command was ran.
* Can retrieve files (post command execution), to retrieve results of the command

* Collect files from endpoints for forensic purposes
* Contain / Uncontain endpoints by restricting any network traffic except communication to the manager.
* Query endpoints logs
* Query endpoints alerts
* Pivot on a timestamp and retrieve logs/alerts around that time pivot
* Access endpoint report
* Scoring (relative to each environment) allowing to sort endpoints and spot the ones behaving differently from the others.
* Alerts / TTPs observed on a given time frame

* Manage rules (list, create, update, save, delete)

* Integration with Sysmon v12 and v13
* Integrate ClipboardData events
* Put the content of the clipboard data inside the event to allow creating rule on the content of the clipboard

* Integrate ProcessTampering events
* Enrich event with a diffing score between .text section on disk and in memory
* Implemented certificate pinning on client to enhance security of the communication channel between endpoints and management server
* Log filtering capabilities, allowing one to collect contextual events. Log filtering is achieved by creating Gene filtering rules (c.f. Gene Documentation).
* Configuration files in TOML format for better readability
* Better protection of the installation directory Related Work* Sysmon Based EDR written in PowerShell: https://github.com/ion-storm/sysmon-edr
* Comodo Open Source EDR with user and kernel components: https://github.com/ComodoSecurity/openedr
* Sysmon X: https://github.com/marcosd4h/sysmonx Sponsorshttps://blogger.googleusercontent.com/img/a/AVvXsEjkB8pM6DnTqae0w06a2uoaPUmW8UQgB25XVCX3EoyT8HJWRebY0fcIrG0rAA2VkOpDB_nWDDWQOlyb3lhdNc779DcNVBqlXcrcphZ7JIoU0ZuBfzTo8ptCh8KJmsn8TknWpM5dB0D0v4qtECvEm2hKHZHg177RUZlDVqAaRm9xfvO9DK-VXole6M8RLA=s320 Github:https://github.com/tines Website:https://www.tines.com/ Twitter:@tines_io Download Whids

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
CORS With Allow-Credentials doesn't send cookies

Website is vulnerable with CORS but when i try to send XMLHttpRequest it doesn't send session. Is it because Samesmite Lax attributes is present ?

submitted by /u/gbarbakadze
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Whids - Open Source EDR For Windows
http://www.kitploit.com/2022/10/whids-open-source-edr-for-windows.html

___________________________
@hacking_Attack
@Hacking_Video