Hacking on Medium
A Comprehensive Guide to Protecting Your Applications from XXE Vulnerabilities | 2023

https://cdn-images-1.medium.com/max/600/0*_QRlF1GrzvCxW8CM.png
Understanding XML External Entity (XXE) Attacks: Working Principle, Exploitation, and Prevention Techniques | Karthikeyan Nagaraj

Continue reading on Medium »

Hacking on Medium
Tricks and Tips to Bypass reCAPTCHA

https://cdn-images-1.medium.com/max/663/1*2YZ6Y35_l-m1EqzJ4ArYSg.png
before learning how to bypass recaptcha you need to know what is recaptcha

Continue reading on Medium »

Hacking on Medium
WMIC: Risks, Threats, and Detection Techniques

WMIC (Windows Management Instrumentation Command-line) is a powerful tool used for system administration in Windows operating systems…

Continue reading on Medium »

Hacking on Medium
The Amygdala: Your gateway to a bad decision and a criminals secret weapon

https://cdn-images-1.medium.com/max/600/1*N0aM3mirzNObKDQzi8kmQg.png
Ever look back at a bad decision and think……”Why on earth did that happen?” It can be as simple as a dodgy link you clicked on (while…

Continue reading on Medium »

Hacking on Medium
how hackers use chrome to hack?, and how to avoid them

https://cdn-images-1.medium.com/max/624/0*lXZQvQcAwK_aIxFr
Hackers can use Google Chrome to hack your computer by exploiting vulnerabilities in the browser or by tricking you into installing…

Continue reading on Medium »

Help MAKE Cardano Interoperable! Cardano Bridge Public Bug Bounty is LIVE!

Help test the Cardano Bridge and earn up to 10,000 $ADA and $WAN.Continue reading on Wanchain »
Read more...

A Comprehensive Guide to Protecting Your Applications from XXE Vulnerabilities | 2023

Understanding XML External Entity (XXE) Attacks: Working Principle, Exploitation, and Prevention Techniques | Karthikeyan NagarajContinue reading on Medium »
Read more...

KitPloit - PenTest Tools!
Wa-Tunnel - Tunneling Internet Traffic Over Whatsapp

https://blogger.googleusercontent.com/img/a/AVvXsEiG9XbOWByeWV3nnRBtj_KMeHuI3OkF4PffiaOiHCNYFLsdQkiY242rNSSQIEBZidPYNUiEQ_sPv9osmHThZY2QrctARAgXLExhMv3yloXFtVz8J_m6YTfUEynf4D0FGomXggej5-mQoeFdzePIlMsYLCR1sfr2LHtSlKWPr_H7iYikl_UpM4U6gXaJhw=w640-h360 This is a Baileys based piece of code that lets you tunnel TCP data through two Whatsapp accounts.

This can be usable in different situations, for example network carriers that give unlimited whatsapp data or airplanes where you also get unlimited social network data.

It's using Baileys since it's a WS based multi-device whatsapp library and therefore could be used in android in the future, using Termux for example.

The idea is to use it with a proxy setup on the server like this: [Client (restricted access) -> Whatsapp -> Server -> Proxy -> Internet]

Apologizes in advance since Javascript it's not one of my primary coding languages :/

Use only for educational purpose. How does it work?It sends TCP network packages through WhatsApp text and file messages, depending on the amount of characters it splits them into different text messages or files.

To not get timed out by WhatsApp by default it's limited at 20k characters per message, at the moment it's hardcoded in wasocket.js. I have done multiple tests and anything below that may get you banned for sending too many messages and any above 80k may timeout.

If a network package is over the limit (20k chars by default) it will be sent as a file if enabled. Also if multiple network packages are cached it will use the same cryteria.

File messages are sent as binary files, TCP responses are concatenated with a delimiter and compressed using brotli to reduce data usage.

It caches TCP socket responses to group them and send the maximum amount of data in a message therefore reducing the amount of messages, improving the speed and reducing the probability of getting banned. Performance improvementsBefore: (without files and no response caching) curl -x localhost:12345 https://www.youtube.com
- 50-80 messages
- 30-40 seconds After: (with files and response caching) curl -x localhost:12345 https://www.youtube.com
- 6-8 messages
- 7-15 seconds In case you are not allowed to send files use the --disable-filesflag when starting the server and client to disable this functionality. Why?I got the idea While travelling through South America network data on carriers is usually restricted to not many GBs but WhatsApp is usually unlimited, I tried to create this library since I didn't find any usable at the date. SetupYou must have access to two Whatsapp accounts, one for the server and one for the client. You can forward a local port or use an external proxy. Server sideClone the repository on your server and install node dependencies.

1. cd path/to/wa-tunnel2. npm installThen you can start the server with the following command where port is the proxy port and host is the proxy host you want to forward. And number is the client WhatsApp number with the country code alltogether and without +. npm run server host port number You can use a local proxy server like follows: npm run server localhost 3128 12345678901 Or you can use a normal proxy server like follows: npm run server 192.168.0.1 3128 12345678901 Client SideClone the repository on your server and install node dependencies.

1. cd path/to/wa-tunnel2. npm installThen you can start the server with the following command where port is the local port where you will connect and number is the server WhatsApp number with the country code alltogether and without +. npm run client port number For example npm run client 8080 1234567890 UsageThe [...]

first time you open the script Baileys will ask you to scan the QR code with the whatsapp app, after that the session is saved for later usage.

It may crash, that's normal after that just restart the script and you will have your client/server ready!

Once you have both client and server ready you can test using curl and see the magic happen. curl -v -x proxyHost:proxyPort https://httpbin.org/ip With the example commands would be: curl -v -x localhost:8080 https://httpbin.org/ip It has been tested also with a normal browser like Firefox, it's slow but can be used.

You can also forward other protocol ports like SSH by setting up the server like this: npm run server localhost 22 12345678901 And then connect to the server by using in the client: ssh root@localhost -p 8080 Usage on AndroidTo use on Android, you can use it with Termux using the following commands: pkg update && pkg upgrade
pkg install git nodejs -y
git clone https://github.com/aleixrodriala/wa-tunnel.git
cd wa-tunnel
npm install DisclaimerUsing this library may get your WhatsApp account banned, use with a temporary number or at your own risk. TO-DO* Make an Android script to install node dependencies on termux
* When Baileys supports calls, implement package sending through calls
* Implement sending files for big data packages to reduce messages and maybe improve speed
* Cache socket responses to reduce even further the amount of messages sent
* Documentation LicenseMIT Download Wa-Tunnel

Black Hat Ethical Hacking
Chinese hacking group APT41 caught using Google tool for data theft

Chinese hacking group APT41 caught using Google tool for data theftPost Views: 6 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/12/Patreon.png Subscribe to Patreon to watch this episode.
Reading Time: 3 Minutes Google’s Threat Analysis Group Uncovers APT41’s Misuse of the GC2 Tool in CyberattacksChinese state-sponsored hacking group APT41, also known as HOODOO, has been caught using Google’s open-source GC2 (Google Command and Control) red teaming tool in data theft attacks against a Taiwanese media company and an Italian job search website. Mandiant, which has been tracking APT41 since 2014, has linked the group to other known Chinese hacking groups such as BARIUM and Winnti.

Google’s Threat Horizons Report in April 2023 revealed that the threat actors used the GC2 tool to deploy additional payloads on compromised devices and exfiltrate stolen data to Google Drive. The report also highlights a trend of threat actors shifting to legitimate red teaming tools and remote monitoring and management (RMM) platforms to evade detection.

https://www.bleepstatic.com/images/news/security/h/hoodoo-gc2/hoodoo-attack-flow.jpg APT41 GC2 attack workflow
Source: Google APT41’s Use of Legitimate Tools Highlights Trend of Threat Actors Evading DetectionAPT41’s use of GC2 further highlights the trend of threat actors moving to legitimate red teaming tools and RMM platforms to evade detection during their attacks. While the use of Cobalt Strike has been widespread for years, it has also led to significant investments into detecting it in attacks, making it more easily spotted by defenders. As a result, threat actors have started to shift to other red teaming tools, such as Brute Ratel and Sliver, to evade detection during their attacks.

Ransomware gangs have also begun abusing the Action1 RMM tool for persistence on compromised networks and to execute commands, scripts, and binaries. Unfortunately, any tool that can help red teamers conduct exercises or for admins to manage a network remotely can equally be abused by threat actors in their own attacks.
See Also: So you want to be a hacker? Offensive Security, Bug Bounty Courses APT41’s use of GC2 in phishing attacks against media and job search companiesGoogle’s report notes that TAG disrupted an APT41 phishing attack against a Taiwanese media company that attempted to distribute the GC2 agent through phishing emails. APT41 also used GC2 in attacks against an Italian job search website in July 2022. While it is not known what malware was distributed in these attacks, APT41 is known to deploy a wide variety of malware on compromised systems, including rootkits, bootkits, custom malware, backdoors, Point of Sale malware, and even ransomware in an isolated incident.

In 2020, the Department of Justice indicted three Chinese nationals believed to be part of APT41 for conducting supply chain attacks, data theft, and breaches against countries worldwide.
Trending: The Rise and Fall of Sabu: From Hacker Hero to FBI Informant Trending: Offensive Security Tool: Mythic In conclusion, APT41’s use of GC2 is just one example of how threat actors are constantly evolving their tactics to evade detection. As defenders invest more in detecting widely used tools such as Cobalt Strike, threat actors will continue to shift to new tools that are less likely to be detected. As such, it is imperative that defenders stay vigilant and adapt their strategies to detect and prevent these attacks.
Trending: 10-Year-Old Windows vulnerability still being exploited in the 3CX attacks
Are u a security researcher? Or a company that writes articles or write ups a[...]

bout Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?

If you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com
Source: bleepingcomputer.com Source Link https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Store.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/04/Images-for-the-News-posts-17-300x150.png LockBit Ransomware Gang Testing First-Ever Ransomware for macOSApril 17, 2023
* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/04/Images-for-the-News-posts-16-300x150.png Meet ‘Legion’: The New Python-Based Credential Harvester and SMTP Hijacking ToolApril 14, 2023
* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/04/Images-for-the-News-posts-15-300x150.png New generation of botnets builds high-performance VPS-based DDoS attacksApril 13, 2023
* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/04/Images-for-the-News-posts-14-300x150.png Microsoft Patches Windows Zero-Day Exploited to Spread RansomwareApril 12, 2023 https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/OffSec-Course.png Offensive Security & Ethical Hacking CourseBegin the learning curve of hacking now! https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Solutions.png Information Security SolutionsFind out how Pentesting Services can help you.
The post Chinese hacking group APT41 caught using Google tool for data theft first appeared on Black Hat Ethical Hacking.

https://preview.redd.it/3ob5bdspjoua1.jpg?width=640&crop=smart&auto=webp&s=2e73ff250767732d50ef5628bbd0c05f8dbe8b89 submitted by /u/BoggedRex2366
[link] [comments]