Hacking Articles Tips Tricks Videos Tutorials
471 subscribers
66K photos
15 videos
157 files
132K links
Exploit
Pentesting
Hacking
Red Team
Blue Team
Kali Linux
Bug Bounty
Black Hat
Cyber security etc

@Hacking_Video
@Hacking_attack
Download Telegram
Hacking Articles Tips Tricks Videos Tutorials
Photo
KitPloit - PenTest Tools!
CIMplant - C# Port Of WMImplant Which Uses Either CIM Or WMI To Query Remote Systems

https://1.bp.blogspot.com/-KcEyq8IfPVg/YJhUl3X0XdI/AAAAAAAAWJ0/pX19pfbpJ8EVUeAo60WRQvqy0I2Pd9xaACNcBGAsYHQ/w400-h400/CIMplant_1_cimplant_logo_letters.png C# port of WMImplant which uses either CIM or WMI to query remote systems. It can use provided credentials or the current user's session.

Note: Some commands will use PowerShell in combination with WMI, denoted with ** in the --show-commandscommand. IntroductionCIMplant is a C# rewrite and expansion on @christruncer's WMImplant. It allows you to gather data about a remote system, execute commands, exfil data, and more. The tool allows connections using Windows Management Instrumentation, WMI, or Common Interface Model, CIM ; well more accurately Windows Management Infrastructure, MI. CIMplant requires local administrator permissions on the target system. Setup:It's probably easiest to use the built version under Releases, just note that it is compiled in Debug mode. If you want to build the solution yourself, follow the steps below.

1. Load CIMplant.sln into Visual Studio
2. Go to Build at the top and then Build Solution if no modifications are wanted UsageCIMplant.exe --help
CIMplant.exe --show-commands
CIMplant.exe --show-examples
CIMplant.exe -s [remote IP address] -c cat -f c:\users\user\desktop\file.txt
CIMplant.exe -s [remote IP address] -u [username] -d [domain] -p [password] -c cat -f c:\users\test\desktop\file.txt
CIMplant.exe -s [remote IP address] -u [username] -d [domain] -p [password] -c command_exec --execute "dir c:\\"
Some Helpful Commandshttps://1.bp.blogspot.com/-HBFoty7rD7U/YJhUyMJuasI/AAAAAAAAWJ4/Tn2wSiV_KQswCuSJfPhA9DcaMYTtLF6LwCNcBGAsYHQ/w640-h360/CIMplant_2_CIMplant-Help.gif Important Files1. Program.cs

This is the brains of the operation, the driver for the program.

1. Connector.cs

This is where the initial CIM/WMI connections are made and passed to the rest of the application

1. ExecuteWMI.cs

All function code for the WMI commands

1. ExecuteCIM.cs

All function code for the CIM (MI) commands DetectionOf course, the first thing we'll want to be aware of is the initial WMI or CIM connection. In general, WMI uses DCOM as a communication protocol whereas CIM uses WSMan (or, WinRM). This can be modified for CIM, and is in CIMplant, but let's just go over the default values for now. For DCOM, the first thing we can do is look for initial TCP connections over port 135. The connecting and receiving systems will then decide on a new, very high port to use so that will vary drastically. For WSMan, the initial TCP connection is over port 5985.

Next, you'll want to look at the Microsoft-Windows-WMI-Activity/Trace event log in the Event Viewer. Search for Event ID 11 and filter on the IsLocal property if possible. You can also look for Event ID 1295 within the Microsoft-Windows-WinRM/Analytic log.

Finally, you'll want to look for any modifications to the DebugFilePath property with the Win32_OSRecoveryConfiguration class. More detailed information about detection can be found at Part 1 of our blog series here: CIMplant Part 1: Detection of a C# Implementation of WMImplant Download CIMplant

___________________________
@hacking_Attack
@Hacking_Video
"Bug Bounty helper Utility"

I was using a tool by project discovery called nuclei and it was very helpful for me to know how to build my own script to help automate penetration testing and reconnaissance. But I was unaware about how I was getting notified about the vulnerabilities, but then I found out there is another tool called notify by project discovery. If you are also interested then I will leave a link to the video I referred to.

https://youtu.be/rbr7ZmBI9qs

https://redd.it/mwox6f
hacking: security in practice
GPS tracking through Tsheets

Is there a way to turn off you stops from registering while being tracked through GPS on your phone using QB Tsheets without being clocked out? If you turn off tracking/airplane mode your phone it’s supposed to clock you out. I know there are apps to change your location but is there a way not to get your route tracked?

submitted by /u/North_to_South88
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video
hacking: security in practice
Is it really possible to get hacked from whatsapp

I have talked to and heard of people who have supposedly been "hacked" through whatsapp. I don't really believe them so I am asking you guts if this is possible. If this can happen how are some ways that soneone can become hacked and what are some ways to prevent it.

submitted by /u/The_cursedchosen
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video