Ethical Hacking Tutorials

Best of Linux Privilege Escalation Linux Privilege Escalation using Capabilities https://lnkd.in/fuj7vUD Lxd Privilege Escalation https://lnkd.in/gRfBdJt Docker Privilege Escalation https://lnkd.in/f9kreJj Exploiting Wildcard for Privilege Escalation https://lnkd.in/dj3dagD Linux Privilege Escalation using LD_Preload https://lnkd.in/gbZJ9Mn Linux Privilege Escalation Using PATH Variable https://lnkd.in/fDNjsgB Linux Privilege Escalation using Misconfigured NFS https://lnkd.in/fgJfS3x Linux Privilege Escalation using Sudo Rights https://lnkd.in/fxPnTiU Linux Privilege Escalation using SUID Binaries https://lnkd.in/fkciJKr Editing /etc/passwd File for Privilege Escalation https://lnkd.in/fVj3c28 #Copied Learn More at @EthicalHackxCom

@ehackx : Learn Hacking

We are now 3000 members on our chat group (@ehakx) Join to Learn Hacking

@ehackx has been made into a public group, but is it bad idea to approve members ( now people cannot join automatically). Why it is good/bad ?

Any nice way to Learn about Linux Privilege Escalation ? Any resources for this ? Say at @ehackx or @ethicalhackx

Saturday !! What are you Learnign Saturday and Sunday ? Name topic, dont say hacking. People saying genric things are not serious people. Let us know more about what are you learning at @ehackx or @ethicalhackx

Warning: PyPi Feature Executes Code Automatically After Python Package Download https://thehackernews.com/2022/09/warning-pypi-feature-executes-code.html

What are discussing in VC today at @ehackx ??? Join for meaningful discussion

https://www.alteredsecurity.com/post/fantastic-windows-logon-types-and-where-to-find-credentials-in-them - More Hacking at @Ethicalhackx and @ehackx

What course / path are you following now ? What are you learning these days ? Share with us at @ethackx or @ethicalhackx

Dark Web Investigation - More Hacking at @Ethicalhackx and @ehackx • Ahmia (– one of the oldest and most reliable .onion search engines, accessible both from the darknet and the clearnet. • Onion Search Engine – for searching onion sites. It comes with browser extensions for Chrome and Firefox. Various supported search options include images, videos, maps and pastes. • Tor Taxi – a launchpad website with links to multiple different onion domains. It has a handy colour-coded system for displaying websites that are currently down. • Darkweb Wiki – a somewhat chaotic and not frequently updated list of onion sites – still, a valuable resource. • Hunchly – provides daily darkweb reports of what onion domains are up / down, in the form of a spreadsheet. • IACA Darkweb Tools – free resources provided by the International Anti Crime Academy. • Reddit communities – many subreddits dedicated to various aspects of the darkweb can be found, some of which are hit and miss. However, there are 3 that are consistently good and up to date: • https://www.reddit.com/r/darknet/ • https://www.reddit.com/r/TOR/ • https://www.reddit.com/r/onions/ • Discord – an up-and-coming alternative to Reddit for budding online communities and niche topics, Discord already dominates in some aspects. While I have not yet found a publicly available channel worthy of a recommendation, you can darknet-keyword search the available Discord servers. • Ahmia – as mentioned above, but specifically for Tor:

http://juhanurmihxlp77nkq76byazcldy2hlmovfu2epvl5ankdibsot4csyd.onion

• Haystak – the self appointed “darknet’s largest search engine” , with thousands of indexed .onion domains – including some historical ones.

http://haystak5njsmn2hqkewecpaxetahtwhsbsa64jom2k22z5afxhnpxfid.onion/

• Kilos – darknet market search engine allowing to search for vendors, listings, reviews, forums and forum posts. Useful for conducting broad keyword-based searches across multiple darkweb entities.

http://mlyusr6htlxsyc7t2f4z53wdxh3win7q3qpxcrbam6jf3dmua7tnzuyd.onion/se
arch

• TOR66 – on top of the standard search, this enables the “fresh onions” and “random onions” matches; tread with caution, these can bring you to some truly random sites. http://tor66sewebgixwhcqfnp5inzp5x5uohhdy3kvtnyfxc2e5mxiuh34iid.onion/ • Onioff – a Python tool for searching .onion URLs. • Onion Ingestor – for scraping and collecting darkweb intelligence – works with Kibana dashboards. • Onion Search – tool for scraping .onion URLs from darkweb search engines. • The Devils Eye – for extracting .onion site links and descriptions without connecting to Tor. • TorBot – onion crawler, with many additional features still in active development.

Volatility and Ransomware - More Hacking at @Ethicalhackx and @ehackx https://book.hacktricks.xyz/generic-methodologies-and-resources/basic-forensic-methodology/memory-dump-analysis/volatility-examples#installation https://github.com/volatilityfoundation/volatility/wiki/ https://github.com/volatilityfoundation/volatility/wiki/ • Identifying Malicious Processes (python3 vol.py -f <filename> pslist) • Below are the keys headers from ‘pslist’ that you will need to understand when you begin using the tool: • PID - Process ID number • PPID - Parent process ID number • ImageFileName - Name of the running process • Offset - Hexadecimal value representing the location in memory the process is running • CreateTime - Time process started • ExitTime - Time process ended

https://www.splunk.com/en_us/blog/industries/detecting-ransomware-attacks-with-splunk.html - More Hacking at @Ethicalhackx and @ehackx

IoCs Ransomware - More Hacking at @Ethicalhackx and @ehackx • Indicators of compromise (IoCs) are clues and evidence of a data breach in the form of digital breadcrumbs. These indicators can tell us whether a cyberattack has occurred, who was behind them and what tools may have been used. This information is generally obtained from software, including anti-malware and antivirus systems. • Some of the most common IoCs to watch for are: 1. Unusual traffic patterns between internal systems 2. Unusual usage patterns for privileged accounts 3. Administrative access to your network from unsuspected geographical locations 4. A spike in database read volumes 5. A high rate of authentication attempts and failures 6. Unusual configuration changes 7. C2 Servers Ips 8. Ethereum or Bitcoin Wallets 9. Hashes File

Create Malware Analysis Lab - More Hacking at @Ethicalhackx and @ehackx • Install Windows 7 and 10 and Linux on a VM • https://www.sentinelone.com/labs/building-a-custom- malware-analysis-lab-environment/ • https://www.youtube.com/watch?v=GE_aSVq8ZnQ • https://www.youtube.com/watch?v=fLJifLf_fRE • https://www.youtube.com/watch?v=bBvOiADXjEQ

Study Malware Samples [ Malware Analysis ] More Hacking at @Ethicalhackx and @ehackx • https://github.com/jstrosch/malware-samples • https://github.com/fabrimagic72/malware-samples • https://github.com/ytisf/theZoo • https://github.com/mstfknn/malware-sample-library

https://threadreaderapp.com/thread/1562871258190348289.html More Hacking at @Ethicalhackx and @ehackx