Understanding CVE-2023–23397: The Microsoft Outlook Vulnerability You Need to Know About

Introduction:Continue reading on InfoSec Write-ups »
Read more...

KitPloit - PenTest Tools!
NimPlant - A Light-Weight First-Stage C2 Implant Written In Nim

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiTvWF-hWsmT64ueqlJxKqahZ8Vo-V7hh064x6tkQ-wH1l_RYIeb5qn78iM_Fb4GXoH-zjpIz6OgdHdSbyBp4EeBvpwY_TbUXXKml5uuWVeUiXTHcQIW02Kr6APuaGHKOCZeIlhI_CtNcHH9eRW--PANMF88Mnw6GlAr8nWmVxpN7E6995LVqalCtYB3g/w640-h142/nimplant-logomark.png By Cas van Cooten (@chvancooten), with special thanks to some awesome folks:

* Fabian Mosch (@S3cur3Th1sSh1t) for sharing dynamic invocation implementation in Nim and the Ekko sleep mask function
* snovvcrash (@snovvcrash) for adding the initial version of execute-assembly& self-deleting implant option
* Furkan Göksel (@frkngksl) for his work on NiCOFF and Guillaume Caillé (@OffenseTeacher) for the initial implementation of inline-execute* Kadir Yamamoto (@yamakadi) for the design work, initial Vue.JS front-end and rusty nimplant, part of an older branch (unmaintained)
* Mauricio Velazco (@mvelazco), Dylan Makowski (@AnubisOnSec), Andy Palmer (@pivotal8ytes), Medicus Riddick (@retsdem22), Spencer Davis (@nixbyte), and Florian Roth (@cyb3rops), for their efforts in testing the pre-release and contributing detections Feature Overview* Lightweight and configurable implant written in the Nim programming language
* Pretty web GUI that will make you look cool during all your ops
* Encryption and compression of all traffic by default, obfuscates static strings in implant artefacts
* Support for several implant types, including native binaries (exe/dll), shellcode or self-deleting executables
* Wide selection of commands focused on early-stage operations including local enumeration, file or registry management, and web interactions
* Easy deployment of more advanced functionality or payloads via inline-execute, shinject(using dynamic invocation), or in-thread execute-assembly* Support for operations on any platform, implant only targeting x64 Windows for now
* Comprehensive logging of all interactions and file operations
* Much, much more, just see below :) InstructionsInstallation* Install Nim and Python3 on your OS of choice (installation via choosenimis recommended, as aptdoesn't always have the latest version).
* Install required packages using the Nimble package manager (cd client; nimble install -d).
* Install requirements.txtfrom the server folder (pip3 install -r server/requirements.txt).
* If you're on Linux or MacOS, install the mingwtoolchain for your platform (brew install mingw-w64 or apt install mingw-w64). Getting StartedConfigurationBefore using NimPlant, create the configuration file config.toml. It is recommended to copy config.toml.exampleand work from there.

An overview of settings is provided below.
Category Setting Description server ip The IP that the C2 web server (including API) will listen on. Recommended to use 127.0.0.1, only use 0.0.0.0 when you have setup proper firewall or routing rules to protect the C2. server port The port that the C2 web server (including API) will listen on. listener type The listener type, either HTTP or HTTPS. HTTPS options configured below. listener sslCertPath The local path to a HTTPS certificate file (e.g. requested via LetsEncrypt CertBot or self-signed). Ignored when listener type is 'HTTP'. listener sslKeyPath The local path to the corresponding HTTPS certificate private key file. Password will be prompted when running the NimPlant server if set. Ignored when listener type is 'HTTP'. listener hostname The listener hostname. If not empty (""), NimPlant will use this hostname to connect. Make sure you are properly routing traffic from this host to the NimPlant listener port. listener ip The listener IP. Required even if[...]

Hacking on Medium
Bypass Windows Defender with FindWindow Code Injection

https://cdn-images-1.medium.com/max/1239/1*mazlp_pLsmVAubPwJ5STYg.png
Introduction

Continue reading on Medium »

Hacking on Medium
Türkiye’nin ilk ‘Uygulamalı Siber Güvenlikte Yapay Zeka’ Eğitimi

https://cdn-images-1.medium.com/max/1323/1*1mAqCvWka8owlr_0wEsK1g.png
2000'lerin başlarından beri siber güvenlik, yazılım ve gene uzun yıllardır yapay zeka alanında yaptığım çalışmaları birleştirerek siber…

Continue reading on Medium »

Hacking on Medium
Modern Social Engineering Explained: 10 Forms of Social Engineering Cyberattacks

https://cdn-images-1.medium.com/max/744/0*gMWjfaXWX6wgkNtF
Have you ever received a suspicious email or phone call from an unknown number asking for information? Or clicked on that link promising…

Continue reading on Medium »

Hacking on Medium
“Meditation: The Ultimate Mind Hack for Modern Life

https://cdn-images-1.medium.com/max/600/0*2ZURg1folAxnQ-WT.png
Meditation is a practice that has been around for centuries, but many people may not realize the full extent of its benefits. While most…

Continue reading on Medium »

Hacking on Medium
pWnOS Walkthrough

https://cdn-images-1.medium.com/max/666/0*w_PW2Ox7zY3p84ix
pWnOS is a simple boot to root machine I came across at NetSecFocus Trophy Room. Let’s try and get the root together!

Continue reading on Medium »

hacking: security in practice
How do you bypass "this app has been blocked by administrator" when you aren't the admin

Everytime I open a .exe file, i get "this app has been blocked by administrator", how can i access the file anyway? is there some form of code i could write into a notepad or something?

submitted by /u/HaloTravis6
[link] [comments]

hacking: security in practice
Ransomware Group Claims Massive Data Leak But MN Files’ Whereabouts a Mystery

https://external-preview.redd.it/OSwfonntbqsx79eSihhOleDumXATASwPKI8irykLu68.jpg?width=640&crop=smart&auto=webp&s=0ce263c387913267d32b2f2abfbbd56d0038c398 submitted by /u/mkerbs942
[link] [comments]

hacking: security in practice
Suggestions for C2 server implementation

Is there any other frameworks besides Powershell Empire that have an option to create a C2 server ? I did not find any other tutorials besides empire. If there are other options would be nice if you leave me a reference link because I don't have a large knowledge on this topic.

submitted by /u/2010toxicrain
[link] [comments]

Dark Reading: Attacks/Breaches
Cyberattackers Hoop NBA Fan Data via Third-Party Vendor

The basketball playoffs are around the corner and convincing social-engineering attacks on fans using NBA-themed lures could be too.