Kali Linux Tutorials
Gmailc2 : A Fully Undetectable C2 Server That Communicates Via Google SMTP To Evade Antivirus Protections And Network Traffic Restrictions

Gmailc2 is a Fully Undetectable C2 Server That Communicates Via Google SMTP to evade Antivirus Protections and Network Traffic Restrictions.

Note:

This RAT communicates Via Gmail SMTP (or u can use any other smtps as well) but Gmail SMTP is valid
because most of the companies block unknown traffic so gmail traffic is valid and allowed everywhere.

Warning:
1. Don't Upload Any Payloads To VirusTotal.com Bcz This tool will not work
with Time.
2. Virustotal Share Signatures With AV Comapnies.
3. Again Don't be an Idiot!


How To Setup
1. Create Two seperate Gmail Accounts.
2. Now enable SMTP On Both Accounts (check youtube if u don't know)
3. Suppose you have already created Two Seperate Gmail Accounts With SMTP enabled
A -> first account represents Your_1st_gmail@gmail.com
B -> 2nd account represents your_2nd_gmail@gmail.com
4. Now Go To server.py file and fill the following at line 67:
smtpserver="smtp.gmail.com" (don't change this)
smtpuser="Your_1st_gmail@gmail.com"
smtpkey="your_1st_gmail_app_password"
imapserver="imap.gmail.com" (don't change this)
imapboy="your_2nd_gmail@gmail.com"
5. Now Go To client.py file and fill the following at line 16:
imapserver = "imap.gmail.com" (dont change this)
username = "your_2nd_gmail@gmail.com"
password = "your2ndgmailapp password"
getting = "Your_1st_gmail@gmail.com"
smtpserver = "smtp.gmail.com" (don't change this)
6. Enjoy


How To Run:
For Windows:
1. Make Sure python3 and pip is installed and requriements also installed
2. python server.py (on server side)


For Linux:
1. Make Sure All Requriements is installed.
2. python3 server.py (on server side)


C2 Feature:
1) Persistence (type persist)
2) Shell Access
3) System Info (type info)
4) More Features Will Be Added


Features:
1) FUD Ratio 0/40
2) Bypass Any EDR's Solutions
3) Bypass Any Network Restrictions
4) Commands Are Being Sent in Base64 And Decoded on server side
5) No More Tcp Shits


Warning:

Use this tool Only for Educational Purpose And I will Not be Responsible For your cruel act.
Click Here To Download

Hacking on Medium
The Art of Crafting the Perfect Product: Why A/B Testing Alone Won’t Get You There

https://cdn-images-1.medium.com/max/1024/1*i42IliYQqpVyOXHgQei0zg@2x.jpeg
As a passionate entrepreneur, you’re driven to create a groundbreaking product that will captivate your target market. You’re no stranger…

Continue reading on Medium »

Hacking on Medium
HTB — Stocker Writeup

https://cdn-images-1.medium.com/max/1400/1*XMRf04WHQ2Ek_pDj0LLm5g.png
Mulai dengan menganalisa hasil scanning nmap. Kita menemukan hanya 2 port yang terbuka.

Continue reading on Medium »

Hacking on Medium
Screenshot Un-Edit, Hack for Google Pixel

https://cdn-images-1.medium.com/max/2600/0*YOHpDe-iNbiR4VV9
Google Pixel phone has a hack, CVE-2023–21036, known as “aCropalypse”, that allows someone to see the unedited version of a screenshot…

Continue reading on Medium »

Hacking on Medium
How to start your journey as ethical hacking in 90 Days

https://cdn-images-1.medium.com/max/1080/1*U5xnGqfWDdkN9FZUdqJ_Xw.png
Introduction: Ethical hacking is a growing field that has become increasingly important in today’s digital age. It involves testing…

Continue reading on Medium »

Hacking on Medium
Hack The Box Paper Writeup

https://cdn-images-1.medium.com/max/1944/0*NthAb0tWgnYN6Q7M.png
Paper is a retired vulnerable Linux machine on Hack The Box created by secnigma. Hello world, welcome to Haxez where today I will be…

Continue reading on Medium »

Hacking on Medium
Using Your Tools Against You

https://cdn-images-1.medium.com/max/1024/1*OgrUYRKewE6DPJXf59XvqQ.png
Introduction

Continue reading on Medium »

Hacking on Medium
2,400 Wallets Compromised in Arbitrum Airdrop, Raising Security Concerns

https://cdn-images-1.medium.com/max/2600/1*g8k7n2_nwMspoiD65iPF5Q.jpeg
Article outline:

Continue reading on Medium »

hacking: security in practice
Can we finally remove bloatware on Samsung phones, how would a bad actor do this?

https://external-preview.redd.it/kq8eI9WCgCpplHkXexuJKaDqMhuS5oBJCwKO0spB3EE.jpg?width=640&crop=smart&auto=webp&s=a315b00d66dda2568a0d82675a7458fafe0b5551 submitted by /u/pyrilampes
[link] [comments]

hacking: security in practice
Hacker vs Hacker: North Koreans Attempt to Phish Euler Exploiter of $200M in Crypto

https://external-preview.redd.it/lqmRwNXtxnamFUkipNCN5J1Uc74k6D0fLziZSDQUn70.jpg?width=640&crop=smart&auto=webp&s=1e6392632278b7da2eef7b62aa9f635fd250201a submitted by /u/fap_fap_fap_fapper
[link] [comments]

Black Hat Ethical Hacking
Severe Privacy Vulnerability ‘Acropalypse’ Affects Windows 11 Snipping Tool

Severe Privacy Vulnerability ‘Acropalypse’ Affects Windows 11 Snipping ToolPost Views: 94 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/12/Patreon.png Subscribe to Patreon to watch this episode.
Reading Time: 3 Minutes Acropalypse FlawMicrosoft’s Windows 11 Snipping Tool has been found to contain a severe privacy flaw named ‘acropalypse’. The flaw, which has already been discovered in Google Pixel’s Markup Tool, allows partially edited content to be recovered. Security researchers David Buchanan and Simon Aarons recently found that the original image data is retained even after editing or cropping out. The bug poses a significant privacy risk, as it can allow sensitive information, such as credit card numbers or revealing photos, to be partially recovered.

The researchers created an online screenshot recovery tool, acropalypse, which attempts to recover edited images created on Google Pixel.
See Also: So you want to be a hacker? Offensive Security, Bug Bounty Courses Acropalypse privacy flaw also affects the Windows 11 Snipping Tool.Today, software engineer Chris Blume confirmed that the acropalypse privacy flaw also affects the Windows 11 Snipping Tool. Overwriting an existing file in the tool leaves unused data behind, making it partially recoverable.
I've got a fun one for you all to look at.

I opened a 198 byte PNG with Microsoft's Snipping Tool, chose "Save As" to overwrite a different PNG file (no editing), and saves a 4,762 byte file with all that extra after the PNG IEND chunk.

Sounds similar 😀

— Chris Blume (@ProgramMax) March 21, 2023
To test this flaw, BleepingComputer opened an existing PNG file in the Windows 11 Snipping Tool, cropped it, and then saved the changes to the original file. Surprisingly, the file sizes for the original image file and the cropped image file were the same, indicating that unused data was not truncated, but left behind.

While the untruncated data may not be visible in an image viewer, it can be used to recreate sensitive portions of the original image. Buchanan shared a Python script with BleepingComputer that can be used to recover Windows files.
Trending: A primer on OS Command Injection Attacks Trending: Offensive Security Tool: Bypass Url Parser Recovery of sensitive informationEven though the online acropalypse screenshot recovery app does not currently work with Windows files, Buchanan warned that a potential privacy risk exists. Users may have sensitive information in screenshots that they cropped out, but this information can still be partially recovered by someone with the right tools.

Microsoft acknowledged the reports and stated that they are investigating the issue to protect their customers. However, the researchers noted that not all PNG files, such as optimized PNGs, are affected by this flaw. Additionally, opening an untruncated PNG file in an image editor and saving it to another file can strip off the unused data at the end, making it no longer recoverable.

The Windows 11 Snipping Tool also behaves similarly with JPG files, leaving untruncated data if overwritten. Buchanan warned that his exploit does not currently work on JPGs, but it could be possible.
Trending: Kali Linux 2023.1 – Adds Kali Purple for defensive security, python updates, new tools Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?

If you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacki[...]