re trying to run Codecepticon against it. VBA/VB6The VBA obfuscation works against source code itself rather than a Microsoft Office document. This means that you cannot pass a doc(x)or xls(x)file to Codecepticon. It will have to be the source code of the module itself (press Alt-F11 and copy the code from there). PowerShellDue to the complexity of PowerShell scripts, along with the freedom it provides in how to write scripts it is challenging to cover all edge cases and ensure that the obfuscated result will be fully functional. Although it's expected for Codecepticon to work fine against simple scripts/functionality, running it against complex ones such as PowerView will not work - this is a work in progress. Obfuscating Command Line ArgumentsAfter obfuscating an application or a script, it is very likely that the command line arguments have also been renamed. The solution to this is to use the HTML mapping file to find what the new names are. For example, let's convert the following command line: SharpHound.exe --CollectionMethods DCOnly --OutputDirectory C:\temp\ By searching through the HTML mapping file for each argument, we get: https://blogger.googleusercontent.com/img/a/AVvXsEiDTm2ofjGHkbYImXfsQM2NkHuO5skV2PiAn3pJCB61DaqLj47l3_wFTefGUyFTLssy-87m0w4fpXYmYjH3ll-x5ne5SlX0wV64I-x8S0ekYc9Th_oY0S3GjFGC0ZiRIVzRZU1ftIOKspK4Yb_0LlfhwEObafZLLklL_CRbQ2FtkWtwg-8nEYvww9gpTg=s16000 https://blogger.googleusercontent.com/img/a/AVvXsEiwMeP40qmRuOR7yKGon19uDtG8_YE4XvixdXjOYnfZxIsPK6zjr09wDHTW21K8avdqVlhKQit6dQ8MpweOBXcWWSMyQKjQJhExyUQGzrpED4fVY1BDo_bMSECD5aNqISKyXtYwtZoklkiW_3spFSduUPf6VW_dayGdP1VslKUloU1HB7i_FB1J6kCBmg=s16000 https://blogger.googleusercontent.com/img/a/AVvXsEgXroY4sju_1AjTU_nBt4uQhFnU3kBBspzZelw_UmM3ihSMvYOyAofS6rG6nDURa-h8u29Zt9YJ9ohLzGSNsAtf6X33Be85nNYGmmWWd1KJtCuKBa57Id3e-P6Vywy1pVbx6P90oZE6xZylZ1fWuttijM3Sb_J1sET3s7hDgTOSCTbdUpnbvwiugpUplQ=s16000 And by replacing all strings the result is: ObfuscatedSharpHound.exe --AphylesPiansAsp TurthsTance --AnineWondon C:\temp\ However, some values may exist in more than one category: https://blogger.googleusercontent.com/img/a/AVvXsEjrCH8LCCArv6gyGWa6btqYIj68jT2zKwlfjNiRbOryJFiroCtqT8qjkmGwHt0w8kvfeOo7vzLpnEdIUrC7eru2ada88pWyqEitGNapm6QNYPRqO9XMebg01gmQ2yCZkti5LKpgTfHYO4wgOs61-WGh9Xe-LGnmbIpxoQ89RtVsPLUHTvastpy7e8lgCg=s16000 Therefore it is critical to always test your result in a local environment first. FAQWhy isn't there a compiled version under Releases that I can download?The compiled output includes a lot of dependency DLLs, which due to licensing requirements we can't re-distribute without written consent. Does Codecepticon only work for C# projects that already have a supported profile?No, Codecepticon should work with everything. The profiles are just a bit of extra tweaks that are done to the target project in order to make it more reliable and easier to work with.

But as all code is unique, there will be instances where obfuscating a project will end up with an error or two that won't allow it to be compiled or executed. In this case a new profile may be in order - please raise a new issue if this is the case.

Same principle applies to PowerShell/VBA code - although those currently have no profiles that come with Codecepticon, it's an easy task to add if some are needed. Can I contribute?For reporting bugs and suggesting new features, please create an issue.

For submitting pull requests, please see the Contributions section. TroubleshootingI'm using Codecepticon against a C# project, it runs, but afterwards I can't compile the target project.Before running Codecepticon make sure you can compile a clean version of the target project. Very often when this issue appears, it's due to missing dependencies for the target solution rather than Codecepticon. But if it still doesn't compile:

* Is it a public project? Create an issue and paste the link with as much detail as possible. If the tool is[...]

part of SharpCollection, even better.
* Is it a private project? In the spirit of improving Codecepticon we'll try to provide as much support as possible via screenshots and error/debug messages. But we will not be accessing/running any clean/obfuscated code via private repos etc. Same as above, but it's a PowerShell/VBA script - can you help?I will do my best, but as PowerShell scripts can be VERY complex and the PSParser isn't as advanced as Roslyn for C#, no promises can be made. Same applies for VBA/VB6. I keep getting: "Method not found: 'System.Collections.Immutable.ImmutableArray"You may at some point encounter the following error: https://blogger.googleusercontent.com/img/a/AVvXsEjr5wGIaPNogKNtIzTqpLcuzN7ZkAy4QkcVa0VB3tZEd67lBKkHy4t6tnhnQ2ISqHlxWoeOwOtcpOKFssDP-KtyllM4OGUE2EEOm_bdXON4_13mZRCuNk9wUYIpiEF-2zAkg773VZ1BABBXhpMlN1X62XRQXqFfyzdNymJA1joCCux5asuK_N4nvaLMhg=w640-h388 Still trying to get to the bottom of this one, a quick fix is to uninstall and reinstall the System.Collections.Immutablepackage, from the NuGet Package Manager. ContributionsWhether it's a typo, a bug, or a new feature, Codecepticon is very open to contributions as long as we agree on the following:

* You are OK with the MIT license of this project.
* Before creating a pull request, create an issue so it could be discussed before doing any work as internal development is not tracked via the public GitHub repository. Otherwise you risk having a pull request rejected if for example we are already working on the same/similar feature, or for any other reason. References / Credits* https://blog.xpnsec.com/building-modifying-packing-devops/
* https://twitter.com/EmericNasi/status/1460640760928296966
* https://github.com/MagicMau/ProceduralNameGenerator
* https://github.com/uwol/proleap-vb6-parser
* https://github.com/dwyl/english-words Download Codecepticon

Kali Linux Tutorials
Pylirt : Python Linux Incident Response Toolkit

Pylirt application, it is aimed to accelerate the incident response processes by collecting information in Linux operating systems.

Features

Information is collected in the following contents.

* /etc/passwd
* cat /etc/group
* cat /etc/sudoers
* lastlog
* cat /var/log/auth.log
* uptime/proc/meminfo
* ps aux
* /etc/resolv.conf
* /etc/hosts
* iptables -L -v -n
* find / -type f -size +512k -exec ls -lh {}/;
* find / -mtime -1 -ls
* ip a
* netstat -nap
* arp -a
* echo $PATH

Installation

git clone https://github.com/anil-yelken/pylirt
cd pylirt
sudo pip3 install paramiko

Usage

The following information should be specified in the cred_list.txt file:

IP|Username|Password
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhApwpWH_wx96l2e3wN3py2swkhJwXRkPPtLwRcY_gZ-jQBuBVMVWwFboe0dUAc0Nwka6oZ26wioXhKHOc13V_XbsDgfhST9HayB6liCSBnaiJIBXz7K3rAoNJTnAtS4IObX87W86ngBtyCT4ZH_tBNjxxdeGsncPglnzHSkT7DQUHbfVasnG8ec5bb/s261/Pylirt1.jpg
sudo python3 plirt.py
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjdwOGdPGk0pn5qas8q6cZxGsjb12CAq6NxG8i8h8j14vftEoKSTURq9oyAWawtmB8-N4YstlxwScZee2WWH68BKFWqMy3FbfpqWo_5GExGY-523vmOrg0JS8YK4ljvPkO1GkvZJkmbuUpBPn438VaTBtR7_-MfQXwvl6qAvsMeHyRstb_lNcrdPRM3/s728/Pylirt2.png

Click Here To Download

Getting Started With 5 Bugs part(1)
https://medium.com/@mahmoudkamel_52472/getting-started-with-5-bugs-part-1-c0d9df42e3cf?source=rss------bug_bounty-5

In today’s write-up I’m going to explain the first bug of this series to get you started in bug bountiesContinue reading on Medium » (https://medium.com/@mahmoudkamel_52472/getting-started-with-5-bugs-part-1-c0d9df42e3cf?source=rss------bug_bounty-5)

IDOR allows updating user profiles, leading to full account takeover. | Part 02
https://medium.com/@anmolvishwakarma7466/idor-allows-updating-user-profiles-leading-to-full-account-takeover-part-02-aaa57bb33d88?source=rss------bug_bounty-5

Hi there, amazing hackers and security enthusiasts! Today, I want to share something really important with you. I’m sure you’ll find it…Continue reading on Medium » (https://medium.com/@anmolvishwakarma7466/idor-allows-updating-user-profiles-leading-to-full-account-takeover-part-02-aaa57bb33d88?source=rss------bug_bounty-5)

IDOR allows updating user profiles, leading to full account takeover. | Part 02

Hi there, amazing hackers and security enthusiasts! Today, I want to share something really important with you. I’m sure you’ll find it…Continue reading on Medium »
Read more...

Hacking on Medium
Certified Red Team Operator (CRTO) Review

https://cdn-images-1.medium.com/max/600/1*otiV9Az7L0Xtw3w-tsYa4w.png
The Certified Red Team Operator (CRTO) course is an offering from Zero Point Security which aims to teach “the basic principles, tools and…

Continue reading on Medium »

Hacking on Medium
Fortinet advierte sobre la explotación activa de la nueva vulnerabilidad RCE de autenticación…

https://cdn-images-1.medium.com/max/1293/0*UuFnhA7txhDyKtN0
Fortinet emitió el lunes parches de emergencia para una falla de seguridad grave que afecta a su producto FortiOS SSL-VPN que, según dijo…

Continue reading on Medium »

Hacking on Medium
Simplified Hacking  —  Como fazer Bruteforce usando a ferramenta Hydra

https://cdn-images-1.medium.com/max/619/1*bGYoJ83I50wfkjQO2z593A.png
Bruteforce consiste em uma técnica muito utilizada para realizar a quebra de senha utilizando de tentativas repetitivas até que se…

Continue reading on Medium »

Hacking on Medium
SSL( Secure Sockets Layer) Analysis

https://cdn-images-1.medium.com/max/1060/1*PJrkIfHQbaMXvDytgeLT-Q.jpeg
In my previous articles, on Information gathering topics we started with DNA Analysis and covering all that today we are going to end this…

Continue reading on System Weakness »

Dark Reading: Attacks/Breaches
Accelerating Vulnerability Identification and Remediation

Software teams can now fix bugs faster with faster release cycles, but breach pressure is increasing. Using SBoM and automation will help better detect, prevent, and remediate security issues throughout the software development life cycle.

Dark Reading: Attacks/Breaches
Security Flaw in Atlassian Products Affecting Multiple Companies

Jira, Confluence,Trello, and BitBucket affected.

Dark Reading: Attacks/Breaches
Niels Provos Joins Lacework as Head of Security Efficacy

Former Head of Security at Stripe and Distinguished Security Engineer at Google joins cloud security leader to help scale security excellence across customer base.