Question About Hydra
https://www.reddit.com/r/Pentesting/comments/10vo7c7/question_about_hydra/
<!-- SC_OFF -->I’ve just started learning about Hydra and other penetration tools. I’m working through the easy CTF challenges on hacker101. Trying to run Hydra to solve for username, using rockyou.txt as the list. My question. Is 569 tries/min EXTREMELY slow? I’m using a 2018 Mac 3.2ghz 6Core i7. The updates are estimating 400hrs to complete. Just want to know if this is expected, or could I be possibly not configured correctly. Tks <!-- SC_ON --> submitted by /u/swapau (https://www.reddit.com/user/swapau)
[link] (https://www.reddit.com/r/Pentesting/comments/10vo7c7/question_about_hydra/) [comments] (https://www.reddit.com/r/Pentesting/comments/10vo7c7/question_about_hydra/)
https://www.reddit.com/r/Pentesting/comments/10vo7c7/question_about_hydra/
<!-- SC_OFF -->I’ve just started learning about Hydra and other penetration tools. I’m working through the easy CTF challenges on hacker101. Trying to run Hydra to solve for username, using rockyou.txt as the list. My question. Is 569 tries/min EXTREMELY slow? I’m using a 2018 Mac 3.2ghz 6Core i7. The updates are estimating 400hrs to complete. Just want to know if this is expected, or could I be possibly not configured correctly. Tks <!-- SC_ON --> submitted by /u/swapau (https://www.reddit.com/user/swapau)
[link] (https://www.reddit.com/r/Pentesting/comments/10vo7c7/question_about_hydra/) [comments] (https://www.reddit.com/r/Pentesting/comments/10vo7c7/question_about_hydra/)
Hacking Articles Tips Tricks Videos Tutorials
Photo
hacking: security in practice
Where To Draw The Legal Line
Hello all, I'm a white hat who is interested in advancing my offensive skills. I've just gotten my GCIH certification, and during that course I learned some of the basics. I'd love to continue testing and playing around with some of the tools I learned about outside of the VM environment they supplied us with. However, I am totally unsure about where my activity becomes illegal and I don't want to even come close to committing any crimes unknowingly. Does anyone have any information on how I can go about this? Can I use nmap on a public network? Can I throw some sql injection tests in some random website? How do bug bounty hunters do it? Let me know if anyone can advise on this, thank you!
submitted by /u/spenny1111
[link] [comments]
Where To Draw The Legal Line
Hello all, I'm a white hat who is interested in advancing my offensive skills. I've just gotten my GCIH certification, and during that course I learned some of the basics. I'd love to continue testing and playing around with some of the tools I learned about outside of the VM environment they supplied us with. However, I am totally unsure about where my activity becomes illegal and I don't want to even come close to committing any crimes unknowingly. Does anyone have any information on how I can go about this? Can I use nmap on a public network? Can I throw some sql injection tests in some random website? How do bug bounty hunters do it? Let me know if anyone can advise on this, thank you!
submitted by /u/spenny1111
[link] [comments]
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Metasploit: From Basics to Advanced Exploitation
Metasploit is a popular open-source framework used for developing and executing exploits against various systems and applications. It was…
Continue reading on Medium »
Metasploit: From Basics to Advanced Exploitation
Metasploit is a popular open-source framework used for developing and executing exploits against various systems and applications. It was…
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
The Dark Truth About the Dark Web
https://cdn-images-1.medium.com/max/2600/1*eSkFVl25ds6Aajf88Aahqw.jpeg
The dark web, often depicted as a shadowy and nefarious corner of the internet, has long been shrouded in mystery and intrigue. But just…
Continue reading on Medium »
The Dark Truth About the Dark Web
https://cdn-images-1.medium.com/max/2600/1*eSkFVl25ds6Aajf88Aahqw.jpeg
The dark web, often depicted as a shadowy and nefarious corner of the internet, has long been shrouded in mystery and intrigue. But just…
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Network Attacks Techniques
Network attacks are carried out over a network. When a network has many vulnerabilities or when its security model is not strategized…
Continue reading on Medium »
Network Attacks Techniques
Network attacks are carried out over a network. When a network has many vulnerabilities or when its security model is not strategized…
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Top 10 Best DoS and DDoS Attack Tools| Free DDoS Tools
What is DDOS Attack ?
Continue reading on Medium »
Top 10 Best DoS and DDoS Attack Tools| Free DDoS Tools
What is DDOS Attack ?
Continue reading on Medium »
Hacking on Medium
The Rise of State-Sponsored Hackers: A Global Threat
https://cdn-images-1.medium.com/max/768/1*IlErz4LxrbRF6qGIAAlj9Q.jpeg
In recent years, there has been a growing trend of state-sponsored hackers targeting organizations around the world. These hackers are…
Continue reading on Medium »
The Rise of State-Sponsored Hackers: A Global Threat
https://cdn-images-1.medium.com/max/768/1*IlErz4LxrbRF6qGIAAlj9Q.jpeg
In recent years, there has been a growing trend of state-sponsored hackers targeting organizations around the world. These hackers are…
Continue reading on Medium »
Medium
The Rise of State-Sponsored Hackers: A Global Threat
In recent years, there has been a growing trend of state-sponsored hackers targeting organizations around the world. These hackers are…
Hacking on Medium
OhSINT room tryhackme
https://cdn-images-1.medium.com/max/757/1*llJFEKl8PYiXbOkn9CDgeg.png
So yeah, this is actually my first ever article to write in my Medium, hope I can do more. The sole reason for me doing this is to record…
Continue reading on Medium »
OhSINT room tryhackme
https://cdn-images-1.medium.com/max/757/1*llJFEKl8PYiXbOkn9CDgeg.png
So yeah, this is actually my first ever article to write in my Medium, hope I can do more. The sole reason for me doing this is to record…
Continue reading on Medium »
Medium
OhSINT room tryhackme
So yeah, this is actually my first ever article to write in my Medium, hope I can do more. The sole reason for me doing this is to record…
Hacking on Medium
Most used Kali Linux commands
https://cdn-images-1.medium.com/max/2600/0*TU6UiIfycFUmp04z
Kali Linux is a popular open-source operating system used for penetration testing and security assessments. Here are some of the most…
Continue reading on Medium »
Most used Kali Linux commands
https://cdn-images-1.medium.com/max/2600/0*TU6UiIfycFUmp04z
Kali Linux is a popular open-source operating system used for penetration testing and security assessments. Here are some of the most…
Continue reading on Medium »
Medium
Most used Kali Linux commands
Kali Linux is a popular open-source operating system used for penetration testing and security assessments. Here are some of the most…
Hacking Articles Tips Tricks Videos Tutorials
Photo
Kali Linux Tutorials
DotDumper : An Automatic Unpacker & Logger For DotNet Framework
DotDumper is a automatic unpacker and logger for DotNet Framework targeting files! This tool has been unveiled at Black Hat USA 2022.
The automatic detection and classification of any given file in a reliable manner is often considered the holy grail of malware analysis. The trials and tribulations to get there are plenty, which is why the creation of such a system is held in high regard. When it comes to DotNet targeting binaries, our new open-source tool DotDumper aims to assist in several of the crucial steps along the way: logging (in-memory) activity, dumping interesting memory segments, and extracting characteristics from the given sample. Why DotDumper?In brief, manual unpacking is a tedious process which consumes a disproportional amount of time for analysts. Obfuscated binaries further increase the time an analyst must spend to unpack a given file. When scaling this, organizations need numerous analysts who dissect malware daily, likely in combination with a scalable sandbox. The lost valuable time could be used to dig into interesting campaigns or samples to uncover new threats, rather than the mundane generic malware that is widely spread. Afterall, analysts look for the few needles in the haystack.
So, what difference does DotDumper make? Running a DotNet based malware sample via DotDumper provides log files of crucial, contextualizing, and common function calls in three formats (human readable plaintext, JSON, and XML), as well as copies from useful in-memory segments. As such, an analyst can skim through the function call log. Additionally, the dumped files can be scanned to classify them, providing additional insight into the malware sample and the data it contains. This cuts down on time vital to the triage and incident response processes, and frees up SOC analyst and researcher time for more sophisticated analysis needs. FeaturesTo log and dump the contextualizing function calls and their results, DotDumper uses a mixture of reflection and managed hooks, all written in pure C#. Below, key features will be highlighted and elaborated upon, in combination with excerpts of DotDumper’s results of a packed AgentTesla stealer sample, the hashes of which are below.
Hash typeHash valueSHA-256b7512e6b8e9517024afdecc9e97121319e7dad2539eb21a79428257401e5558dSHA-1c10e48ee1f802f730f41f3d11ae9d7bcc649080cMD-523541daadb154f1f59119952e7232d6b Using the command-line interfaceDotDumper is accessible through a command-line interface, with a variety of arguments. The image below shows the help menu. Note that not all arguments will be discussed, but rather the most used ones.
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjSV9qUBP49LWh7s4HEIsQVkqMLLFRQ0Tz5MSalBNfrFIRIbyO2V3AU2s0jc1a-qBUgIugY_sv8RN4hnWZqIBHxMW9A2qElbXVFcUz9duukIMBvXxyalytkPijc9iRz_5eIkcMtOgxa4-3gy9Rab8rqLHUWE0GQsUPFKUJGz_pq3xib7aTRdMDxOcbA/s975/DotDumper2.png
The minimal requirement to run a given sample, is to provide the “-file” argument, along with a file name or file path. If a full path is given, it is used. If a file name is given, the current working directory is checked, as well as the folder of DotDumper’s executable location.
Unless a directory name is provided, the “-log” folder name is set equal to the file name of the sample without the extension (if any). The folder is located in the same folder as DotDumper resides in, which is where the logs and dumped files will be saved in.
In the case of a library, or an alternative entry point into a binary, one must override the entry point using “-overrideEntry true”. Additionally, one has to provide the fully qualified class, which includes the name space using “-fqcn My.NameSpace.MyClass”. This tells DotDumper which class to select, which is where the provided function name (using “-functionName MyFunction”) is retrieved.
If the selected function requires a[...]
DotDumper : An Automatic Unpacker & Logger For DotNet Framework
DotDumper is a automatic unpacker and logger for DotNet Framework targeting files! This tool has been unveiled at Black Hat USA 2022.
The automatic detection and classification of any given file in a reliable manner is often considered the holy grail of malware analysis. The trials and tribulations to get there are plenty, which is why the creation of such a system is held in high regard. When it comes to DotNet targeting binaries, our new open-source tool DotDumper aims to assist in several of the crucial steps along the way: logging (in-memory) activity, dumping interesting memory segments, and extracting characteristics from the given sample. Why DotDumper?In brief, manual unpacking is a tedious process which consumes a disproportional amount of time for analysts. Obfuscated binaries further increase the time an analyst must spend to unpack a given file. When scaling this, organizations need numerous analysts who dissect malware daily, likely in combination with a scalable sandbox. The lost valuable time could be used to dig into interesting campaigns or samples to uncover new threats, rather than the mundane generic malware that is widely spread. Afterall, analysts look for the few needles in the haystack.
So, what difference does DotDumper make? Running a DotNet based malware sample via DotDumper provides log files of crucial, contextualizing, and common function calls in three formats (human readable plaintext, JSON, and XML), as well as copies from useful in-memory segments. As such, an analyst can skim through the function call log. Additionally, the dumped files can be scanned to classify them, providing additional insight into the malware sample and the data it contains. This cuts down on time vital to the triage and incident response processes, and frees up SOC analyst and researcher time for more sophisticated analysis needs. FeaturesTo log and dump the contextualizing function calls and their results, DotDumper uses a mixture of reflection and managed hooks, all written in pure C#. Below, key features will be highlighted and elaborated upon, in combination with excerpts of DotDumper’s results of a packed AgentTesla stealer sample, the hashes of which are below.
Hash typeHash valueSHA-256b7512e6b8e9517024afdecc9e97121319e7dad2539eb21a79428257401e5558dSHA-1c10e48ee1f802f730f41f3d11ae9d7bcc649080cMD-523541daadb154f1f59119952e7232d6b Using the command-line interfaceDotDumper is accessible through a command-line interface, with a variety of arguments. The image below shows the help menu. Note that not all arguments will be discussed, but rather the most used ones.
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjSV9qUBP49LWh7s4HEIsQVkqMLLFRQ0Tz5MSalBNfrFIRIbyO2V3AU2s0jc1a-qBUgIugY_sv8RN4hnWZqIBHxMW9A2qElbXVFcUz9duukIMBvXxyalytkPijc9iRz_5eIkcMtOgxa4-3gy9Rab8rqLHUWE0GQsUPFKUJGz_pq3xib7aTRdMDxOcbA/s975/DotDumper2.png
The minimal requirement to run a given sample, is to provide the “-file” argument, along with a file name or file path. If a full path is given, it is used. If a file name is given, the current working directory is checked, as well as the folder of DotDumper’s executable location.
Unless a directory name is provided, the “-log” folder name is set equal to the file name of the sample without the extension (if any). The folder is located in the same folder as DotDumper resides in, which is where the logs and dumped files will be saved in.
In the case of a library, or an alternative entry point into a binary, one must override the entry point using “-overrideEntry true”. Additionally, one has to provide the fully qualified class, which includes the name space using “-fqcn My.NameSpace.MyClass”. This tells DotDumper which class to select, which is where the provided function name (using “-functionName MyFunction”) is retrieved.
If the selected function requires a[...]