Hacking Articles Tips Tricks Videos Tutorials

Threatest is a Go framework for testing threat detection (https://www.kitploit.com/search/label/Threat%20Detection) end-to-end. Threatest allows you to detonate an attack technique, and verify that the alert you expect was generated in your favorite security platform. Read the announcement blog post: https://securitylabs.datadoghq.com/articles/threatest-end-to-end-testing-threat-detection/
Concepts Detonators A detonator describes how and where an attack technique is executed. Supported detonators: Local command execution SSH command execution Stratus Red Team AWS detonator Alert matchers An alert matcher is a platform-specific integration that can check if an expected alert was triggered. Supported alert matchers: Datadog security signals Detonation and alert correlation Each detonation is assigned a UUID. This UUID is reflected in the detonation and used to ensure that the matched alert corresponds exactly to this detonation. The way this is done depends on the detonator; for instance, Stratus Red Team (https://www.kitploit.com/search/label/Red%20Team) and the AWS Detonator inject it in the user-agent; the SSH detonator uses a parent process containing the UUID. Sample usage See examples (https://github.com/DataDog/threatest/blob/main/examples) for complete usage example. Testing Datadog Cloud SIEM signals (https://www.kitploit.com/search/label/Signals) triggered by Stratus Red Team threatest := Threatest()

threatest.Scenario("AWS console login").
WhenDetonating(StratusRedTeamTechnique("aws.initial-access.console-login-without-mfa")).
Expect(DatadogSecuritySignal("AWS Console login without MFA").WithSeverity("medium")).
WithTimeout(15 * time.Minute)

assert.NoError(t, threatest.Run()) Testing Datadog Cloud Workload Security signals triggered by running commands over SSH ssh, _ := NewSSHCommandExecutor("test-box", "", "")

threatest := Threatest()

threatest.Scenario("curl to metadata service").
WhenDetonating(NewCommandDetonator(ssh, "curl http://169.254.169.254 --connect-timeout 1")).
Expect(DatadogSecuritySignal("EC2 Instance Metadata Service Accessed via Network Utility"))

assert.NoError(t, threatest.Run())

Download Threatest (https://github.com/DataDog/threatest)

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest & Hacking Tools

Leading source of security tools, hacking tools, cybersecurity and network security. Learn about new tools and updates in one place.

9 viewsedited 14:04

Kali Linux Tutorials
Usbsas : Tool And Framework For Securely Reading Untrusted USB Mass Storage Devices

usbsas is a free and open source (GPLv3) tool and framework for securely reading untrusted USB mass storage devices.

Description

Following the concept of defense in depth and the principle of least privilege, usbsas’s goal is to reduce the attack surface of the USB stack. To achieve this, most of the USB related tasks (parsing USB packets, SCSI commands, file systems etc.) usually executed in (privileged) kernel space has been moved to user space and separated in different processes (microkernel style), each being executed in its own restricted secure computing mode.

The main purpose of this project is to be deployed as a kiosk / sheep dip station to securely transfer files from an untrusted USB device to a trusted one.

It works on GNU/Linux and is written in Rust.

Features

usbsas can:

* read files from an untrusted USB device (without using kernel modules like uas, usb_storageand the file system ones). Supported file systems are FAT, exFat, ext4, NTFSand ISO9660
* analyze files with a remote antivirus
* copy files on a new file system to a trusted USB device. Supported file systems are FAT, exFATand NTFS
* upload files to a remote server
* make an image of a USB device
* wipe a USB device

Applications

Applications built on top of usbsas:

* Web client / server: This is the main application of usbsas, for deploying a secure USB to USB file transfer kiosk.
* Fuse implementation: mount USB devices (read-only) with usbsas.
* Python: usbsas can also be used with Python, a script that copies everything from a device to another is given as example.
Click Here To Download

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials

Usbsas : Tool For Securely Reading Untrusted USB Mass Storage Devices

usbsas is a free and open source (GPLv3) tool and framework for securely reading untrusted USB mass storage devices.

16 viewsedited 14:24

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
I started studying hacking since I watched the series Mr. Robot, I would like to know which content you would recommend I study in addition to the already known: kali linux, reverse engineering, social engineering.

Hello, I'm starting to study hacking and I intend to become a hobbyist pentester, since I'm very interested in the area. I started studying this since I watched the series Mr. Robot, I would like to know which content you would recommend I study in addition to the already known: kali linux, reverse engineering, social engineering. I want to hack "like" Elliot and I would be grateful for recommendations from people who already have experience in this area

ps: sorry for any grammar mistakes, english is not my primary language

submitted by /u/arkubis_
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

From the hacking community on Reddit

Explore this post and more from the hacking community

11 viewsedited 16:24

Hacking Articles Tips Tricks Videos Tutorials

9 views16:59

Hacking Articles Tips Tricks Videos Tutorials

Photo

Hacking on Medium
Simple DOM XSS Trick

https://cdn-images-1.medium.com/max/1603/1*HZkVae1agrUX2CGbwKdWDw.png
Hello hackers, c0ff33b34n here to teach you an easy DOM based XSS trick.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Medium

Simple DOM based XSS Trick

Hello hackers, c0ff33b34n here to teach you an easy DOM based XSS trick.

10 viewsedited 16:59