KitPloit - PenTest Tools!
SCMKit - Source Code Management Attack Toolkit

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgSFHzfp_0fwm8HENFxmHuIDfxDmOe-1lAo3YiqDCfxVfzb6JovdYIpJyMKGu03c1J-Yc7ADqT-v2LOMoalLkj7T-IWLlTLzh4puPwy8mlYpWn0SHrlbxzrcKaKu4yc6qIMb7nR6GTksEeO5FUPDQtdQyEMBWp1G7A__EpPOdun1x-dAs20Z162tVTgcg/w640-h418/h37.png Source Code Management Attack Toolkit - SCMKit is a toolkit that can be used to attack SCM systems. SCMKit allows the user to specify the SCM system and attack module to use, along with specifying valid credentials (username/password or API key) to the respective SCM system. Currently, the SCM systems that SCMKit supports are GitHub Enterprise, GitLab Enterprise and Bitbucket Server. The attack modules supported include reconnaissance, privilege escalation and persistence. SCMKit was built in a modular approach, so that new modules and SCM systems can be added in the future by the information security community. Installation/BuildingLibraries UsedThe below 3rd party libraries are used in this project.
Library URL License Octokit https://github.com/octokit/octokit.net MIT License Fody https://github.com/Fody/Fody MIT License GitLabApiClient https://github.com/nmklotas/GitLabApiClient MIT License Newtonsoft.Json https://github.com/JamesNK/Newtonsoft.Json MIT License Pre-Compiled* Use the pre-compiled binary in Releases Building YourselfTake the below steps to setup Visual Studio in order to compile the project yourself. This requires a .NET library that can be installed from the NuGet package manager.

* Load the Visual Studio project up and go to "Tools" --> "NuGet Package Manager" --> "Package Manager Settings"
* Go to "NuGet Package Manager" --> "Package Sources"
* Add a package source with the URL https://api.nuget.org/v3/index.json* Install the below NuGet packages
* Install-Package Costura.Fody -Version 3.3.3* Install-Package Octokit* Install-Package GitLabApiClient* Install-Package Newtonsoft.Json* You can now build the project yourself! UsageArguments/Options* -c, -credential - credential for authentication (username:password or apiKey)
* -s, -system - system to attack (github,gitlab,bitbucket)
* -u, -url - URL for GitHub Enterprise, GitLab Enterprise or Bitbucket Server
* -m, -module - module to run
* -o, -option - options (when applicable) Systems (-s, -system)* github:GitHub Enterprise
* gitlab:GitLab Enterprise
* bitbucket:Bitbucket Server Modules (-m, -module)* listrepo:list all repos the current user can see
* searchrepo:search for a given repo
* searchcode:search for code containing keyword search term
* searchfile:search for filename containing keyword search term
* listsnippet:list all snippets of current user
* listrunner:list all GitLab runners available to current user
* listgist:list all gists of current user
* listorg:list all orgs current user belongs to
* privs:get privs of current API token
* addadmin:promote given user to admin role
* removeadmin:demote given user from admin role
* createpat:create personal access token for target user
* listpat:list personal access tokens for a target user
* removepat:remove personal access token for a target user
* createsshkey:create SSH key for current user
* listsshkey:list SSH keys for current user
* removesshkey:remove SSH key for current user
* adminstats:get admin stats (users, repos, orgs, gists)
* protection:get branch protection settings Module Details TableThe below table shows where each module is supported
Attack Scenario Module Requires Admin? GitHub Enterprise GitLab Enterprise Bitbucket Server Reconnaissance listrepo[...]

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
SCMKit - Source Code Management Attack Toolkit

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
VuCSA : Vulnerable Client-Server Application – Made For Learning/Presenting

Vulnerable client-server application (VuCSA) is made for learning/presenting how to perform penetration tests of non-http thick clients. It is written in Java (with JavaFX graphical user interface).

Currently the vulnerable application contains the following challenges:

1. Buffer Over-read (simulated)
2. Command Execution
3. SQL Injection
4. Enumeration
5. XML
6. Horizontal Access Control
7. Vertical Access Control

If you want to know how to solve these challenges, take a look at the PETEP website, which describes how to use the open-source tool PETEP to exploit them.

Tip: Before you start hacking, do not forget to check the data structure of messages bellow.

How to Run?

In order to run the vulnerable server and client, you can use one of releases on GitHub or run gradle assemble, which creates distribution packages (for both Windows and Unix). These packages contain sh/bat scripts that will run the server and client using JVM.

Project Structure

Project is divided into three modules:

* vucsa-common – common functionality for both client and server (including protocol processing utilities)
* vucsa-client – vulnerable client with JavaFX GUI
* vucsa-server – vulnerable server for terminal use

Data Structure

Messages transmitted between server and client have the following simple format:
[type][target][length][payload]
32b 32b 32b ???
These four parts have the following meaning:

* type – type of the message (used for serialization/deserialization)
* target – target handler that will receive the message
* length – length of the payload
* payload – data serialized into bytes
Click Here To Download

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
GhostShell — Execute Commands Anonymously

https://cdn-images-1.medium.com/max/627/1*eVTg7F0Us18HOD4hc24RWg.png
Introduction

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Foxit PDF Reader: Schadcode-Attacken über präparierte PDFs möglich

https://cdn-images-1.medium.com/max/1880/0*wdmWXbm5AXVm-u-e.jpg
Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Testing for QakBot’s most recent techniques
https://www.reddit.com/r/redteamsec/comments/yu5mmh/testing_for_qakbots_most_recent_techniques/

Recovering purple teamer here, now leading CTI at Tidal Cyber. My role involves building freely available resources relevant for red, blue, & purple teamers. Last week I pushed a bunch of new threat maps to our community edition (no login required) - the goal is you can easily pivot or overlay offensive and/or defensive capabilities on top of these maps to see a) what you could readily test or b) where gaps exist that could be filled with custom tests/detections. This map shows the most recent techniques associated with QakBot, which I built based on a bunch of recent public CTI reports (sourcing throughout, and you can pivot to my notes with procedural details). I already overlaid Atomic Red Team's testing coverage on top, but you can modify this or add other testing capabilities like Scythe or AttackIQ: https://app.tidalcyber.com/share/47cf91c6-2afd-4027-9a00-cda5058cd41a A new US HHS report (https://www.hhs.gov/sites/default/files/venus-ransomware-analyst-note.pdf) out Thursday detailed a bunch of techniques associated with Venus ransomware. I made another custom map around those, and a few more for other ransomware threatening US healthcare orgs this year, none of which are yet defined in ATT&CK. The combined view for those 5 ransomware (60 techniques total) looks like this: https://app.tidalcyber.com/share/09809998-6c73-4208-a507-8c1ca1b311e9 The Community Spotlight (https://app.tidalcyber.com/community-spotlight) has all of the sub-components of those combined maps you can look at individually, and plenty of others. Let me know if I can look at making any others based on recent threats you'd like to see (or give it a go yourself and we can highlight your work in the spotlight). submitted by /u/Trop_Chaud (https://www.reddit.com/user/Trop_Chaud)
[link] (https://www.reddit.com/r/redteamsec/comments/yu5mmh/testing_for_qakbots_most_recent_techniques/) [comments] (https://www.reddit.com/r/redteamsec/comments/yu5mmh/testing_for_qakbots_most_recent_techniques/)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How powerful is the skill of knowing how to search for stuff?

I know and heard of a lot of pentesters who search for a ton of stuff most of the time and have a pretty low skill in hacking.
Of course, you need some basic skills, the classic linux, networking, active directory, some coding etc and you will learn how things work as you gain experience.

But a lot of hackers simply learn some basic skills and then google for exploits, vulns, tools, and other stuff that others made.
To be honest it is pretty simple to hack stuff when you have so much information available.
Of course, I don't want to be a simple script kiddie, but as a beginner myself I was wondering if I should focus my efforts on searching for stuff with google dorks and other osint stuff like that at this level.

I am going to be a web app pentester in a few months and this is my first real-life experience with hacking and my superior colleagues who both have OSCP said that they mostly google stuff.

What do you think ?

submitted by /u/Agent_B99
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Vulnhub — The Planets: Earth

https://cdn-images-1.medium.com/max/1366/1*_5i2tRjbQm1D7SnlCKIQkw.png
Introduction

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
My First Bounty Story

Hello Everyone,

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Hacking Androids from scratch. (Understanding Metasploit)

https://cdn-images-1.medium.com/max/1062/1*xvlLJNnblGZ83FNgpNXgTQ.png
Hacking phones is one of the most famous topics on the internet, so it is only obvious that I should write an article about it.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
A crypto implosion, Twitter shakeups and Patch Tuesday takeaways

https://cdn-images-1.medium.com/max/1600/1*qxayO9p4_kfdQpufReuqKg.png
Welcome to Changelog for 11/13/22, published by Synack!

Continue reading on README_ »

___________________________
@hacking_Attack
@Hacking_Video

My First Bounty Story

Hello Everyone,Continue reading on Medium »
Read more...

How to get in Bug Bounty?

Hello Everyone,Continue reading on Medium »
Read more...

My First Bounty Story
https://medium.com/@arpitkarnbestbro/my-first-bounty-story-fc59b68023d7?source=rss------bug_bounty-5

Hello Everyone,Continue reading on Medium » (https://medium.com/@arpitkarnbestbro/my-first-bounty-story-fc59b68023d7?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

How to get in Bug Bounty?
https://medium.com/@arpitkarnbestbro/how-to-get-in-bug-bounty-5763298befad?source=rss------bug_bounty-5

Hello Everyone,Continue reading on Medium » (https://medium.com/@arpitkarnbestbro/how-to-get-in-bug-bounty-5763298befad?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video