Hello fellow hunters, i hope you all are doing good and learning new things daily :) . I am writing today about a lab/mission i solved by…Continue reading on InfoSec Write-ups » (https://infosecwriteups.com/web-cache-poisoning-a-tale-of-chaining-unkeyed-inputs-6e3cb026bd23?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

AMSITrigger - The Hunt For Malicious Strings
http://www.kitploit.com/2021/05/amsitrigger-hunt-for-malicious-strings.html

___________________________
@hacking_Attack
@Hacking_Video

Hunting for Malicious Strings

Usage:
AMSI calls (xmas tree mode) -d, --debug Show Debug Info -m, --maxsiglength=VALUE Maximum signature Length to cater for, default=2048 -c, --chunksize=VALUE Chunk size to send to AMSIScanBuffer, default=4096 -h, -?, --help Show Help ">-i, --inputfile=VALUE Powershell filename
-u, --url=VALUE URL eg. https://10.1.1.1/Invoke-NinjaCopy.ps1
-f, --format=VALUE Output Format:
1 - Only show Triggers
2 - Show Triggers with Line numbers
3 - Show Triggers inline with code
4 - Show AMSI calls (xmas tree mode)
-d, --debug Show Debug Info
-m, --maxsiglength=VALUE Maximum signature Length to cater for,
default=2048
-c, --chunksize=VALUE Chunk size to send to AMSIScanBuffer,
default=4096
-h, -?, --help Show Help
For details see https://www.rythmstick.net/posts/amsitrigger

Download AMSITrigger (https://github.com/RythmStick/AMSITrigger)

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
AMSITrigger - The Hunt For Malicious Strings

https://1.bp.blogspot.com/-Vlzn49ifpjY/YKS5N-yR7vI/AAAAAAAAWPA/Qnlnzsc9JEs4YO-7KV6BkQYfN9muTXlHQCNcBGAsYHQ/w640-h270/amsitrigger.gif
Hunting for Malicious Strings

Usage:

AMSI calls (xmas tree mode) -d, --debug Show Debug Info -m, --maxsiglength=VALUE Maximum signature Length to cater for, default=2048 -c, --chunksize=VALUE Chunk size to send to AMSIScanBuffer, default=4096 -h, -?, --help Show Help ">-i, --inputfile=VALUE Powershell filename
-u, --url=VALUE URL eg. https://10.1.1.1/Invoke-NinjaCopy.ps1
-f, --format=VALUE Output Format:
1 - Only show Triggers
2 - Show Triggers with Line numbers
3 - Show Triggers inline with code
4 - Show AMSI calls (xmas tree mode)
-d, --debug Show Debug Info
-m, --maxsiglength=VALUE Maximum signature Length to cater for,
default=2048
-c, --chunksize=VALUE Chunk size to send to AMSIScanBuffer,
default=4096
-h, -?, --help Show Help


For details see https://www.rythmstick.net/posts/amsitrigger
Download AMSITrigger

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
10 Signs You’ve Been Working In Infosec Too Long

https://cdn-images-1.medium.com/max/960/1*-O5zl0WE7oUQwavsUbJShA.jpeg
When your mom calls you ask her three security questions to verify her identity

Continue reading on Medium »

Hacking on Medium
Web Cache Poisoning: A Tale of chaining unkeyed inputs

https://cdn-images-1.medium.com/max/2600/1*0E1tfiiTvku35JS9BfIDVg.png
Hello fellow hunters, i hope you all are doing good and learning new things daily :) . I am writing today about a lab/mission i solved by…

Continue reading on InfoSec Write-ups »

Hacking on Medium
What nobody tells you about spam calls and emails

https://cdn-images-1.medium.com/max/2600/1*LWzp_7nAjktxVcJBzfraug.jpeg
I watched a YouTube video yesterday where a YouTuber went into elaborate detail to track and find the criminals who were stealing a lot of…

Continue reading on Medium »

Hacking on Medium
How to Create A SQL database in Python

Hi everyone! Today’s blog will cover python and SQL. Now, if you don’t know what python or sql is, that’s okay, we’ll cover it. Let’s get…

Continue reading on Medium »

Hacking Articles
Watcher TryHackMe Walkthrough

Today it is time to solve another challenge called “Watcher”. It is available at TryHackMe for penetration testing practice. The challenge is of medium difficulty if you have the right basic knowledge and are attentive to little details that are required in the enumeration process. The credit for making this

The post Watcher TryHackMe Walkthrough appeared first on Hacking Articles.

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Kali + Whonix VMs

Hello there!

Noob question

If I set up Kali and configure it to run through Whonix all inside VMs wouldn't the traffic still go through the main PC -> Router and the ISP will be still able to see the data or what am I doing?

Thank you in advance and best regards!

Edit: and is it possible to set a home vpn server which goes through Whonix first?

submitted by /u/relax_de_vara
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Can QR code be used to send data?

My cousin was telling me about his online exams and how there's a rumor that the exam board placed qr codes on the screen that can't be seen. If a student were to take a picture of the screen, the examiner will receive information that the student is cheating. I'm not sure how true this is.

submitted by /u/Man_highcastle
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
I want to get in touch with my friend from years ago but don't know how.

I don't know who to ask but my friend who I used to play with online hasn't been on for years (this was on the PS3). all I know is his gamertag but I miss him so I came on here for help. If you are willing to help just message me and I can give you his username/gamertag.

submitted by /u/Rock_fire07
[link] [comments]