https://enlacehacktivista.org/api.php?action=feedcontributions&feedformat=atom&user=Amongomous 2026-04-22T19:16:19Z User contributions MediaWiki 1.43.8 https://enlacehacktivista.org/index.php?title=Roskomnadzor&diff=381 2022-03-12T13:35:46Z

<p>Amongomous: </p> <hr /> <div>Hack of over 360,000 files or 820GB of data from the Russian Federal Service for Supervision of Communications, Information Technology and Mass Media, commonly known as Roskomnadzor - the government agency responsible for monitoring, controlling and censoring Russian mass media and the internet.<br /> <br /> https://ddosecrets.com/wiki/Roskomnadzor<br /> <br /> The hacker who identified themselves only as being part of the hacktivist collective Anonymous stated that they urgently felt the Russian people should have access to information about their government's involvement in the Russo-Ukrainian War. They also expressed their opposition to the Russian people being cut off from independent media and the outside world.<br /> <br /> == Media Coverage ==<br /> <br /> * https://www.vice.com/en/article/xgdmj7/russian-censorship-roskomnadzor-hacked-leak-distributed-denial-of-secrets<br /> * https://torrentfreak.com/anonymous-hacks-russias-roscomnadzor-site-blocking-agency-220311/<br /> <br /> [[Category:Hacks]]</div>

Amongomous https://enlacehacktivista.org/index.php?title=Hacker_History&diff=380 2022-03-12T13:23:39Z

<p>Amongomous: /* 2022 */</p> <hr /> <div>==2008==<br /> * [[Sarah Palin emails]]<br /> <br /> == 2010 ==<br /> * [[SRS Electronic Declaration System]]<br /> * [[Operation Payback]]<br /> <br /> == 2011 ==<br /> * [[Chinga la Migra]]<br /> * [[CorruptBrazil]]<br /> * [[Fuck FBI Friday]]<br /> * [[HBGary]]<br /> * [[LeakyMails]]<br /> * [[Shooting Sheriffs Saturday]]<br /> * [[Sownage]]<br /> * [[Stratfor]]<br /> <br /> == 2012 ==<br /> * [[Apple UDIDs]]<br /> * [[CSLEA]]<br /> * [[Norton AntiVirus]]<br /> * [[Syria emails]]<br /> * [[Bureau Of Justice]]<br /> <br /> == 2013 ==<br /> * [[Project AIG]]<br /> <br /> == 2014 ==<br /> * [[LulzSecPeru]]<br /> * [[Gamma Group]]<br /> * [[Russian Interior Ministry]]<br /> <br /> == 2015 ==<br /> * [[wikipedia:Football Leaks]]<br /> * [[Hacking Team]]<br /> <br /> == 2016 ==<br /> * [[Berat Albayrak Emails]]<br /> * [[Panama Papers]]<br /> * [[Surkov Leaks]]<br /> <br /> == 2017 ==<br /> * [[Bob Otto emails]]<br /> * [[Cellebrite]]<br /> * [[Flexispy]]<br /> * [[Freedom Hosting II]]<br /> <br /> == 2018 ==<br /> * [[Salvini emails]]<br /> * [[Doxxing-Adventskalender]]<br /> <br /> == 2019 ==<br /> * [[GorraLeaks]]<br /> * [[Paco Leaks]]<br /> * [[Milico Leaks]]<br /> * [[Capital One]]<br /> * [[Perceptics]]<br /> * [[Cayman National Bank and Trust (Isle of Man)]]<br /> * [[Iron March]]<br /> * [[Varela Leaks]]<br /> <br /> == 2020 ==<br /> * [[Luanda Leaks]]<br /> * [[BlueLeaks]]<br /> * [[Intel exconfidential Lake]]<br /> <br /> == 2021 ==<br /> * [[Gab]]<br /> * [[Myanmar Investments]]<br /> * [[American Patriots Three Percent‎]]<br /> * [[Verkada]]<br /> * [[Sons of Confederate Veterans]]<br /> * [[MagaCoin]]<br /> * [[Electronic Arts]]<br /> * [[Tea Party Patriots]]<br /> * [[Cyber Partisans]]<br /> * [[HART]]<br /> * [[Policía Nacional Civil de El Salvador]]<br /> * [[Epik]]<br /> * [[Oath Keepers]]<br /> * [[America's Frontline Doctors]]<br /> * [[Twitch]]<br /> * [[Attila Hildmann‎]]<br /> * [[Metropolitan Police Department D.C.]]<br /> * [[Academy of Public Administration (Belarus)]]<br /> * [[AnibalLeaks]]<br /> <br /> == 2022 ==<br /> * [[Patriot Front]]<br /> * [[Belarusian Railway]]<br /> * [[Pronico]]<br /> * [[Roskomnadzor]]</div>

Amongomous https://enlacehacktivista.org/index.php?title=Roskomnadzor&diff=379 2022-03-12T13:22:28Z

<p>Amongomous: Created page with &quot;Hack of over 360,000 files or 820GB of data from the Russian Federal Service for Supervision of Communications, Information Technology and Mass Media, commonly known as Roskomnadzor - the government agency responsible for monitoring, controlling and censoring Russian mass media. https://ddosecrets.com/wiki/Roskomnadzor The hacker who identified themselves only as being part of the hacktivist collective Anonymous stated that they urgently felt the Russian people should...&quot;</p> <hr /> <div>Hack of over 360,000 files or 820GB of data from the Russian Federal Service for Supervision of Communications, Information Technology and Mass Media, commonly known as Roskomnadzor - the government agency responsible for monitoring, controlling and censoring Russian mass media.<br /> <br /> https://ddosecrets.com/wiki/Roskomnadzor<br /> <br /> The hacker who identified themselves only as being part of the hacktivist collective Anonymous stated that they urgently felt the Russian people should have access to information about their government's involvement in the Russo-Ukrainian War. They also expressed their opposition to the Russian people being cut off from independent media and the outside world.<br /> <br /> == Media Coverage ==<br /> <br /> * https://www.vice.com/en/article/xgdmj7/russian-censorship-roskomnadzor-hacked-leak-distributed-denial-of-secrets<br /> * https://torrentfreak.com/anonymous-hacks-russias-roscomnadzor-site-blocking-agency-220311/<br /> <br /> [[Category:Hacks]]</div>

Amongomous https://enlacehacktivista.org/index.php?title=AgainstTheWest&diff=378 2022-03-12T12:44:38Z

<p>Amongomous: Created page with &quot;AgainstTheWest was a NATO-based hacktivist collective originating from RaidForums that focused on leaking source code and other intellectual property from countries that were &quot;against the west.&quot; Pascal, also known as BlueHornet (the leader of the group) passed away from natural causes in March 2022. https://backchannel.substack.com/p/againstthewest-the-hacking-group Category:Hackers&quot;</p> <hr /> <div>AgainstTheWest was a NATO-based hacktivist collective originating from RaidForums that focused on leaking source code and other intellectual property from countries that were &quot;against the west.&quot;<br /> <br /> Pascal, also known as BlueHornet (the leader of the group) passed away from natural causes in March 2022.<br /> <br /> https://backchannel.substack.com/p/againstthewest-the-hacking-group<br /> <br /> [[Category:Hackers]]</div>

Amongomous https://enlacehacktivista.org/index.php?title=Learn_to_hack&diff=363 2022-03-07T15:13:55Z

<p>Amongomous: </p> <hr /> <div>This page aims to compile high quality resources for hackers. All books listed on this page can be found on [https://libgen.fun/ Library Genesis] and [https://z-lib.org/ Z-Library]<br /> <br /> == General Resources == <br /> <br /> Resources that assume little to no background knowledge:<br /> * https://www.hoppersroppers.org/training.html<br /> * https://tryhackme.com/<br /> <br /> Resources that assume minimal tech background:<br /> * (book) Penetration Testing: A Hands-On Introduction to Hacking<br /> * Bassterlord Networking Manual (translated): https://papers.vx-underground.org/papers/VXUG/Mirrors/BassterlordNetworkingManual.pdf<br /> <br /> Resources that assume a tech or hacking background:<br /> * (book) The Hacker Playbook 3<br /> * books by [https://b-ok.cc/g/Sparc%20Flow Sparc Flow]<br /> * [[Hack Back! A DIY Guide]]<br /> * https://github.com/ForbiddenProgrammer/conti-pentester-guide-leak<br /> ** translated: https://s3.amazonaws.com/talos-intelligence-site/production/document_files/files/000/095/639/original/Conti_playbook_translated.pdf<br /> <br /> Practice labs:<br /> * https://www.hackthebox.com/<br /> * https://www.pentesteracademy.com/<br /> * https://lab.pentestit.ru/<br /> * https://overthewire.org/wargames/<br /> <br /> General references:<br /> * https://www.ired.team/<br /> * http://pwnwiki.io/<br /> * https://dmcxblue.gitbook.io/red-team-notes-2-0/<br /> * https://github.com/swisskyrepo/PayloadsAllTheThings<br /> * https://github.com/S3cur3Th1sSh1t/Pentest-Tools<br /> <br /> == Active Directory ==<br /> <br /> * [https://github.com/swisskyrepo/PayloadsAllTheThings/blob/master/Methodology%20and%20Resources/Active%20Directory%20Attack.md An excellent practical reference]<br /> * [https://github.com/Integration-IT/Active-Directory-Exploitation-Cheat-Sheet A practical reference focused on powershell]<br /> * https://gist.github.com/TarlogicSecurity/2f221924fef8c14a1d8e29f3cb5c5c4a<br /> * https://m0chan.github.io/2019/07/30/Windows-Notes-and-Cheatsheet.html<br /> * https://casvancooten.com/posts/2020/11/windows-active-directory-exploitation-cheat-sheet-and-command-reference/<br /> * https://github.com/S1ckB0y1337/Active-Directory-Exploitation-Cheat-Sheet<br /> * https://wadcoms.github.io/<br /> * https://www.blackhillsinfosec.com/webcast-attack-tactics-5-zero-to-hero-attack/<br /> * https://byt3bl33d3r.github.io/practical-guide-to-ntlm-relaying-in-2017-aka-getting-a-foothold-in-under-5-minutes.html<br /> * https://s3cur3th1ssh1t.github.io/The-most-common-on-premise-vulnerabilities-and-misconfigurations/<br /> * A very thorough technical background: https://zer1t0.gitlab.io/posts/attacking_ad/<br /> * kerberos background: https://www.tarlogic.com/blog/how-kerberos-works/<br /> * A good overview of different lateral movement techniques: https://hackmag.com/security/lateral-guide/<br /> <br /> === Tools ===<br /> * https://mpgn.gitbook.io/crackmapexec/<br /> * https://www.secureauth.com/labs/open-source-tools/impacket/<br /> * https://github.com/dirkjanm/mitm6<br /> * https://github.com/lgandx/Responder<br /> * https://github.com/FuzzySecurity/StandIn<br /> * https://www.joeware.net/freetools/tools/adfind/<br /> * https://github.com/CravateRouge/bloodyAD<br /> * https://github.com/blacklanternsecurity/MANSPIDER<br /> * https://github.com/login-securite/DonPAPI<br /> * Powerview/Sharpview<br /> * Bloodhound/Sharphound<br /> <br /> == Office 365 &amp; Azure ==<br /> * Extremely in-depth technical info on everything https://o365blog.com/<br /> * https://www.synacktiv.com/en/publications/azure-ad-introduction-for-red-teamers.html<br /> * https://blog.xpnsec.com/azuread-connect-for-redteam/<br /> * AAD Connect Cloud Sync: as local admin impersonate or retrieve managed password of the provagentgMSA account to dcsync.<br /> ** see: https://github.com/swisskyrepo/PayloadsAllTheThings/blob/master/Methodology%20and%20Resources/Active%20Directory%20Attack.md#reading-gmsa-password<br /> * https://www.blackhillsinfosec.com/webcast-getting-started-in-pentesting-the-cloud-azure/<br /> * https://github.com/dafthack/CloudPentestCheatsheets/blob/master/cheatsheets/Azure.md<br /> * https://www.inversecos.com/<br /> <br /> === Tools ===<br /> * https://github.com/nyxgeek/o365recon<br /> * https://github.com/dirkjanm/ROADtools<br /> * https://github.com/fox-it/adconnectdump<br /> <br /> * https://github.com/LMGsec/o365creeper<br /> * https://bloodhound.readthedocs.io/en/latest/data-collection/azurehound.html<br /> * https://github.com/rvrsh3ll/TokenTactics<br /> * https://github.com/nyxgeek/onedrive_user_enum<br /> * https://github.com/dafthack/MSOLSpray<br /> * https://github.com/dafthack/MFASweep<br /> <br /> == GSuite ==<br /> https://www.slideshare.net/dafthack/ok-google-how-do-i-red-team-gsuite<br /> <br /> == C2 Frameworks ==<br /> <br /> * https://docs.google.com/spreadsheets/d/1b4mUxa6cDQuTV2BPC6aA-GR4zGZi0ooPYtBe4IgPsSc<br /> <br /> == Antivirus &amp; EDR Evasion ==<br /> <br /> * https://s3cur3th1ssh1t.github.io/Bypass_AMSI_by_manual_modification/<br /> * https://s3cur3th1ssh1t.github.io/Customizing_C2_Frameworks/<br /> * https://s3cur3th1ssh1t.github.io/Powershell-and-the-.NET-AMSI-Interface/<br /> * https://www.blackhillsinfosec.com/tag/sacred-cash-cow-tipping/<br /> * https://blog.securityevaluators.com/creating-av-resistant-malware-part-1-7604b83ea0c0<br /> * https://www.ired.team/offensive-security/defense-evasion<br /> * https://www.youtube.com/watch?v=UO3PjJIiBIE<br /> * https://github.com/matterpreter/DefenderCheck<br /> * https://github.com/RythmStick/AMSITrigger<br /> * https://amsi.fail<br /> <br /> == VMware ==<br /> * Exploiting vCenter to add vSphere user: https://github.com/HynekPetrak/HynekPetrak/blob/master/take_over_vcenter_670.md<br /> <br /> == RocketChat ==<br /> * Account hijacking and RCE as admin: https://edbrsk.dev/content/real-cases/how-I-compromised-300-stores-and-a-spanish-consultancy<br /> <br /> == Microsoft Exchange ==<br /> <br /> ProxyLogon is dead. It's mitigated by Defender. ProxyShell is not. AMSI catches unmodified public exploits.<br /> <br /> * ProxyShell: https://github.com/dmaasland/proxyshell-poc<br /> * ProxyShell (webshell via New-MailboxExportRequest): https://github.com/rapid7/metasploit-framework/blob/master/documentation/modules/exploit/windows/http/exchange_proxyshell_rce.md<br /> * ProxyShell (webshell via New-ExchangeCertificate): https://gist.github.com/dmaasland/0720891aaf6dec8d3b42a5b92c8d6f94<br /> * Polymorphic webshells: https://github.com/grCod/poly<br /> * ProxyShell (no webshell, dump mailboxes via PowerShell): https://github.com/Jumbo-WJB/Exchange_SSRF<br /> * Export all mailboxes: &lt;code&gt;foreach ($mbx in (Get-Mailbox)){New-MailboxExportRequest -mailbox $mbx.alias -FilePath &quot;\\127.0.0.1\C$\Folder\$($mbx.Alias).pst&quot;}&lt;/code&gt;<br /> <br /> == Initial Access == <br /> <br /> === Phishing ===<br /> * https://0xboku.com/2021/07/12/ArtOfDeviceCodePhish.html<br /> * https://medium.com/maltrak/com-objects-p-2-your-stealthy-fileless-attack-bf78318d9165<br /> * https://infosecwriteups.com/recipe-for-a-successful-phishing-campaign-part-1-2-dc23d927ec55<br /> * https://www.xanthus.io/mastering-the-simulated-phishing-attack<br /> * https://github.com/Arno0x/EmbedInHTML<br /> * https://github.com/L4bF0x/PhishingPretexts<br /> * http://lockboxx.blogspot.com/2018/12/gophish-evilginx2-for-phishing.html<br /> * https://book.hacktricks.xyz/phishing-methodology<br /> * https://outflank.nl/blog/2020/03/30/mark-of-the-web-from-a-red-teams-perspective<br /> <br /> === Password spraying ===<br /> * https://github.com/dafthack/MSOLSpray<br /> * https://pentestlab.blog/2019/09/05/microsoft-exchange-password-spraying/<br /> * https://github.com/blacklanternsecurity/TREVORspray<br /> <br /> == Scanning and Recon ==<br /> * https://github.com/robertdavidgraham/masscan<br /> * https://github.com/projectdiscovery/naabu<br /> * https://github.com/OWASP/Amass<br /> * https://www.shodan.io/<br /> * https://www.zoomeye.org/<br /> <br /> == Opsec ==<br /> * https://www.qubes-os.org/<br /> * https://www.whonix.org/<br /> * https://tails.boum.org/<br /> * The whonix wiki has lots of great info on anonymity even if you're not using whonix: https://www.whonix.org/wiki/Documentation<br /> * https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TransparentProxy<br /> * https://veracrypt.fr/</div>

Amongomous https://enlacehacktivista.org/index.php?title=Learn_to_hack&diff=360 2022-03-04T16:04:40Z

<p>Amongomous: /* Office 365 &amp; Azure */</p> <hr /> <div>This page aims to compile high quality resources for hackers. All books listed on this page can be found on [https://libgen.fun/ Library Genesis] and [https://z-lib.org/ Z-Library]<br /> <br /> == General Resources == <br /> <br /> Resources that assume little to no background knowledge:<br /> * https://www.hoppersroppers.org/training.html<br /> * https://tryhackme.com/<br /> <br /> Resources that assume minimal tech background:<br /> * (book) Penetration Testing: A Hands-On Introduction to Hacking<br /> * Bassterlord Networking Manual (translated): https://papers.vx-underground.org/papers/VXUG/Mirrors/BassterlordNetworkingManual.pdf<br /> <br /> Resources that assume a tech or hacking background:<br /> * (book) The Hacker Playbook 3<br /> * books by [https://b-ok.cc/g/Sparc%20Flow Sparc Flow]<br /> * [[Hack Back! A DIY Guide]]<br /> * https://github.com/ForbiddenProgrammer/conti-pentester-guide-leak<br /> ** translated: https://s3.amazonaws.com/talos-intelligence-site/production/document_files/files/000/095/639/original/Conti_playbook_translated.pdf<br /> <br /> Practice labs:<br /> * https://www.hackthebox.com/<br /> * https://www.pentesteracademy.com/<br /> * https://lab.pentestit.ru/<br /> * https://overthewire.org/wargames/<br /> <br /> General references:<br /> * https://www.ired.team/<br /> * http://pwnwiki.io/<br /> * https://dmcxblue.gitbook.io/red-team-notes-2-0/<br /> * https://github.com/swisskyrepo/PayloadsAllTheThings<br /> * https://github.com/S3cur3Th1sSh1t/Pentest-Tools<br /> <br /> == Active Directory ==<br /> <br /> * [https://github.com/swisskyrepo/PayloadsAllTheThings/blob/master/Methodology%20and%20Resources/Active%20Directory%20Attack.md An excellent practical reference]<br /> * [https://github.com/Integration-IT/Active-Directory-Exploitation-Cheat-Sheet A practical reference focused on powershell]<br /> * https://gist.github.com/TarlogicSecurity/2f221924fef8c14a1d8e29f3cb5c5c4a<br /> * https://m0chan.github.io/2019/07/30/Windows-Notes-and-Cheatsheet.html<br /> * https://casvancooten.com/posts/2020/11/windows-active-directory-exploitation-cheat-sheet-and-command-reference/<br /> * https://github.com/S1ckB0y1337/Active-Directory-Exploitation-Cheat-Sheet<br /> * https://wadcoms.github.io/<br /> * https://www.blackhillsinfosec.com/webcast-attack-tactics-5-zero-to-hero-attack/<br /> * https://byt3bl33d3r.github.io/practical-guide-to-ntlm-relaying-in-2017-aka-getting-a-foothold-in-under-5-minutes.html<br /> * https://s3cur3th1ssh1t.github.io/The-most-common-on-premise-vulnerabilities-and-misconfigurations/<br /> * A very thorough technical background: https://zer1t0.gitlab.io/posts/attacking_ad/<br /> * kerberos background: https://www.tarlogic.com/blog/how-kerberos-works/<br /> * A good overview of different lateral movement techniques: https://hackmag.com/security/lateral-guide/<br /> <br /> === Tools ===<br /> * https://mpgn.gitbook.io/crackmapexec/<br /> * https://www.secureauth.com/labs/open-source-tools/impacket/<br /> * https://github.com/dirkjanm/mitm6<br /> * https://github.com/lgandx/Responder<br /> * https://github.com/FuzzySecurity/StandIn<br /> * https://www.joeware.net/freetools/tools/adfind/<br /> * https://github.com/CravateRouge/bloodyAD<br /> * https://github.com/blacklanternsecurity/MANSPIDER<br /> * https://github.com/login-securite/DonPAPI<br /> * Powerview/Sharpview<br /> * Bloodhound/Sharphound<br /> <br /> == Office 365 &amp; Azure ==<br /> * Extremely in-depth technical info on everything https://o365blog.com/<br /> * https://www.synacktiv.com/en/publications/azure-ad-introduction-for-red-teamers.html<br /> * https://blog.xpnsec.com/azuread-connect-for-redteam/<br /> * AAD Connect Cloud Sync: as local admin impersonate or retrieve managed password of the provagentgMSA account to dcsync.<br /> ** see: https://github.com/swisskyrepo/PayloadsAllTheThings/blob/master/Methodology%20and%20Resources/Active%20Directory%20Attack.md#reading-gmsa-password<br /> * https://www.blackhillsinfosec.com/webcast-getting-started-in-pentesting-the-cloud-azure/<br /> * https://github.com/dafthack/CloudPentestCheatsheets/blob/master/cheatsheets/Azure.md<br /> * https://www.inversecos.com/<br /> <br /> === Tools ===<br /> * https://github.com/nyxgeek/o365recon<br /> * https://github.com/dirkjanm/ROADtools<br /> * https://github.com/fox-it/adconnectdump<br /> <br /> * https://github.com/LMGsec/o365creeper<br /> * https://bloodhound.readthedocs.io/en/latest/data-collection/azurehound.html<br /> * https://github.com/rvrsh3ll/TokenTactics<br /> * https://github.com/nyxgeek/onedrive_user_enum<br /> * https://github.com/dafthack/MSOLSpray<br /> * https://github.com/dafthack/MFASweep<br /> <br /> == GSuite ==<br /> https://www.slideshare.net/dafthack/ok-google-how-do-i-red-team-gsuite<br /> <br /> == C2 Frameworks ==<br /> <br /> * https://docs.google.com/spreadsheets/d/1b4mUxa6cDQuTV2BPC6aA-GR4zGZi0ooPYtBe4IgPsSc<br /> <br /> == Antivirus &amp; EDR Evasion ==<br /> <br /> * https://s3cur3th1ssh1t.github.io/Bypass_AMSI_by_manual_modification/<br /> * https://s3cur3th1ssh1t.github.io/Customizing_C2_Frameworks/<br /> * https://s3cur3th1ssh1t.github.io/Powershell-and-the-.NET-AMSI-Interface/<br /> * https://www.blackhillsinfosec.com/tag/sacred-cash-cow-tipping/<br /> * https://blog.securityevaluators.com/creating-av-resistant-malware-part-1-7604b83ea0c0<br /> * https://www.ired.team/offensive-security/defense-evasion<br /> * https://www.youtube.com/watch?v=UO3PjJIiBIE<br /> * https://github.com/matterpreter/DefenderCheck<br /> * https://github.com/RythmStick/AMSITrigger<br /> * https://amsi.fail<br /> <br /> == VMware ==<br /> * Exploiting vCenter to add vSphere user: https://github.com/HynekPetrak/HynekPetrak/blob/master/take_over_vcenter_670.md<br /> <br /> == RocketChat ==<br /> * Account hijacking and RCE as admin: https://edbrsk.dev/content/real-cases/how-I-compromised-300-stores-and-a-spanish-consultancy<br /> <br /> == Initial Access == <br /> <br /> === Phishing ===<br /> * https://0xboku.com/2021/07/12/ArtOfDeviceCodePhish.html<br /> * https://medium.com/maltrak/com-objects-p-2-your-stealthy-fileless-attack-bf78318d9165<br /> * https://infosecwriteups.com/recipe-for-a-successful-phishing-campaign-part-1-2-dc23d927ec55<br /> * https://www.xanthus.io/mastering-the-simulated-phishing-attack<br /> * https://github.com/Arno0x/EmbedInHTML<br /> * https://github.com/L4bF0x/PhishingPretexts<br /> * http://lockboxx.blogspot.com/2018/12/gophish-evilginx2-for-phishing.html<br /> * https://book.hacktricks.xyz/phishing-methodology<br /> * https://outflank.nl/blog/2020/03/30/mark-of-the-web-from-a-red-teams-perspective<br /> <br /> === Password spraying ===<br /> * https://github.com/dafthack/MSOLSpray<br /> * https://pentestlab.blog/2019/09/05/microsoft-exchange-password-spraying/<br /> * https://github.com/blacklanternsecurity/TREVORspray<br /> <br /> == Scanning and Recon ==<br /> * https://github.com/robertdavidgraham/masscan<br /> * https://github.com/projectdiscovery/naabu<br /> * https://github.com/OWASP/Amass<br /> * https://www.shodan.io/<br /> * https://www.zoomeye.org/<br /> <br /> == Opsec ==<br /> * https://www.qubes-os.org/<br /> * https://www.whonix.org/<br /> * https://tails.boum.org/<br /> * The whonix wiki has lots of great info on anonymity even if you're not using whonix: https://www.whonix.org/wiki/Documentation<br /> * https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TransparentProxy<br /> * https://veracrypt.fr/</div>

Amongomous https://enlacehacktivista.org/index.php?title=Learn_to_hack&diff=359 2022-02-23T19:35:53Z

<p>Amongomous: /* Office 365 &amp; Azure */</p> <hr /> <div>This page aims to compile high quality resources for hackers. All books listed on this page can be found on [https://libgen.fun/ Library Genesis] and [https://z-lib.org/ Z-Library]<br /> <br /> == General Resources == <br /> <br /> Resources that assume little to no background knowledge:<br /> * https://www.hoppersroppers.org/training.html<br /> * https://tryhackme.com/<br /> <br /> Resources that assume minimal tech background:<br /> * (book) Penetration Testing: A Hands-On Introduction to Hacking<br /> * Bassterlord Networking Manual (translated): https://papers.vx-underground.org/papers/VXUG/Mirrors/BassterlordNetworkingManual.pdf<br /> <br /> Resources that assume a tech or hacking background:<br /> * (book) The Hacker Playbook 3<br /> * books by [https://b-ok.cc/g/Sparc%20Flow Sparc Flow]<br /> * [[Hack Back! A DIY Guide]]<br /> * https://github.com/ForbiddenProgrammer/conti-pentester-guide-leak<br /> ** translated: https://s3.amazonaws.com/talos-intelligence-site/production/document_files/files/000/095/639/original/Conti_playbook_translated.pdf<br /> <br /> Practice labs:<br /> * https://www.hackthebox.com/<br /> * https://www.pentesteracademy.com/<br /> * https://lab.pentestit.ru/<br /> * https://overthewire.org/wargames/<br /> <br /> General references:<br /> * https://www.ired.team/<br /> * http://pwnwiki.io/<br /> * https://dmcxblue.gitbook.io/red-team-notes-2-0/<br /> * https://github.com/swisskyrepo/PayloadsAllTheThings<br /> * https://github.com/S3cur3Th1sSh1t/Pentest-Tools<br /> <br /> == Active Directory ==<br /> <br /> * [https://github.com/swisskyrepo/PayloadsAllTheThings/blob/master/Methodology%20and%20Resources/Active%20Directory%20Attack.md An excellent practical reference]<br /> * [https://github.com/Integration-IT/Active-Directory-Exploitation-Cheat-Sheet A practical reference focused on powershell]<br /> * https://gist.github.com/TarlogicSecurity/2f221924fef8c14a1d8e29f3cb5c5c4a<br /> * https://m0chan.github.io/2019/07/30/Windows-Notes-and-Cheatsheet.html<br /> * https://casvancooten.com/posts/2020/11/windows-active-directory-exploitation-cheat-sheet-and-command-reference/<br /> * https://github.com/S1ckB0y1337/Active-Directory-Exploitation-Cheat-Sheet<br /> * https://wadcoms.github.io/<br /> * https://www.blackhillsinfosec.com/webcast-attack-tactics-5-zero-to-hero-attack/<br /> * https://byt3bl33d3r.github.io/practical-guide-to-ntlm-relaying-in-2017-aka-getting-a-foothold-in-under-5-minutes.html<br /> * https://s3cur3th1ssh1t.github.io/The-most-common-on-premise-vulnerabilities-and-misconfigurations/<br /> * A very thorough technical background: https://zer1t0.gitlab.io/posts/attacking_ad/<br /> * kerberos background: https://www.tarlogic.com/blog/how-kerberos-works/<br /> * A good overview of different lateral movement techniques: https://hackmag.com/security/lateral-guide/<br /> <br /> === Tools ===<br /> * https://mpgn.gitbook.io/crackmapexec/<br /> * https://www.secureauth.com/labs/open-source-tools/impacket/<br /> * https://github.com/dirkjanm/mitm6<br /> * https://github.com/lgandx/Responder<br /> * https://github.com/FuzzySecurity/StandIn<br /> * https://www.joeware.net/freetools/tools/adfind/<br /> * https://github.com/CravateRouge/bloodyAD<br /> * https://github.com/blacklanternsecurity/MANSPIDER<br /> * https://github.com/login-securite/DonPAPI<br /> * Powerview/Sharpview<br /> * Bloodhound/Sharphound<br /> <br /> == Office 365 &amp; Azure ==<br /> * Extremely in-depth technical info on everything https://o365blog.com/<br /> * https://www.synacktiv.com/en/publications/azure-ad-introduction-for-red-teamers.html<br /> * https://blog.xpnsec.com/azuread-connect-for-redteam/<br /> * AAD Connect Cloud Sync: as local admin impersonate or retrieve managed password of the provagentgMSA account to dcsync.<br /> ** see: https://github.com/swisskyrepo/PayloadsAllTheThings/blob/master/Methodology%20and%20Resources/Active%20Directory%20Attack.md#reading-gmsa-password<br /> * https://www.blackhillsinfosec.com/webcast-getting-started-in-pentesting-the-cloud-azure/<br /> * https://github.com/dafthack/CloudPentestCheatsheets/blob/master/cheatsheets/Azure.md<br /> <br /> === Tools ===<br /> * https://github.com/nyxgeek/o365recon<br /> * https://github.com/dirkjanm/ROADtools<br /> * https://github.com/fox-it/adconnectdump<br /> <br /> * https://github.com/LMGsec/o365creeper<br /> * https://bloodhound.readthedocs.io/en/latest/data-collection/azurehound.html<br /> * https://github.com/rvrsh3ll/TokenTactics<br /> * https://github.com/nyxgeek/onedrive_user_enum<br /> * https://github.com/dafthack/MSOLSpray<br /> * https://github.com/dafthack/MFASweep<br /> <br /> == GSuite ==<br /> https://www.slideshare.net/dafthack/ok-google-how-do-i-red-team-gsuite<br /> <br /> == C2 Frameworks ==<br /> <br /> * https://docs.google.com/spreadsheets/d/1b4mUxa6cDQuTV2BPC6aA-GR4zGZi0ooPYtBe4IgPsSc<br /> <br /> == Antivirus &amp; EDR Evasion ==<br /> <br /> * https://s3cur3th1ssh1t.github.io/Bypass_AMSI_by_manual_modification/<br /> * https://s3cur3th1ssh1t.github.io/Customizing_C2_Frameworks/<br /> * https://s3cur3th1ssh1t.github.io/Powershell-and-the-.NET-AMSI-Interface/<br /> * https://www.blackhillsinfosec.com/tag/sacred-cash-cow-tipping/<br /> * https://blog.securityevaluators.com/creating-av-resistant-malware-part-1-7604b83ea0c0<br /> * https://www.ired.team/offensive-security/defense-evasion<br /> * https://www.youtube.com/watch?v=UO3PjJIiBIE<br /> * https://github.com/matterpreter/DefenderCheck<br /> * https://github.com/RythmStick/AMSITrigger<br /> * https://amsi.fail<br /> <br /> == VMware ==<br /> * Exploiting vCenter to add vSphere user: https://github.com/HynekPetrak/HynekPetrak/blob/master/take_over_vcenter_670.md<br /> <br /> == RocketChat ==<br /> * Account hijacking and RCE as admin: https://edbrsk.dev/content/real-cases/how-I-compromised-300-stores-and-a-spanish-consultancy<br /> <br /> == Initial Access == <br /> <br /> === Phishing ===<br /> * https://0xboku.com/2021/07/12/ArtOfDeviceCodePhish.html<br /> * https://medium.com/maltrak/com-objects-p-2-your-stealthy-fileless-attack-bf78318d9165<br /> * https://infosecwriteups.com/recipe-for-a-successful-phishing-campaign-part-1-2-dc23d927ec55<br /> * https://www.xanthus.io/mastering-the-simulated-phishing-attack<br /> * https://github.com/Arno0x/EmbedInHTML<br /> * https://github.com/L4bF0x/PhishingPretexts<br /> * http://lockboxx.blogspot.com/2018/12/gophish-evilginx2-for-phishing.html<br /> * https://book.hacktricks.xyz/phishing-methodology<br /> * https://outflank.nl/blog/2020/03/30/mark-of-the-web-from-a-red-teams-perspective<br /> <br /> === Password spraying ===<br /> * https://github.com/dafthack/MSOLSpray<br /> * https://pentestlab.blog/2019/09/05/microsoft-exchange-password-spraying/<br /> * https://github.com/blacklanternsecurity/TREVORspray<br /> <br /> == Scanning and Recon ==<br /> * https://github.com/robertdavidgraham/masscan<br /> * https://github.com/projectdiscovery/naabu<br /> * https://github.com/OWASP/Amass<br /> * https://www.shodan.io/<br /> * https://www.zoomeye.org/<br /> <br /> == Opsec ==<br /> * https://www.qubes-os.org/<br /> * https://www.whonix.org/<br /> * https://tails.boum.org/<br /> * The whonix wiki has lots of great info on anonymity even if you're not using whonix: https://www.whonix.org/wiki/Documentation<br /> * https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TransparentProxy<br /> * https://veracrypt.fr/</div>

Amongomous https://enlacehacktivista.org/index.php?title=Learn_to_hack&diff=350 2022-02-12T14:13:31Z

<p>Amongomous: </p> <hr /> <div>This page aims to compile high quality resources for hackers. All books listed on this page can be found on [https://libgen.fun/ Library Genesis] and [https://z-lib.org/ Z-Library]<br /> <br /> == General Resources == <br /> <br /> Resources that assume little to no background knowledge:<br /> * https://www.hoppersroppers.org/training.html<br /> * https://tryhackme.com/<br /> <br /> Resources that assume minimal tech background:<br /> * (book) Penetration Testing: A Hands-On Introduction to Hacking<br /> * Bassterlord Networking Manual (translated): https://papers.vx-underground.org/papers/VXUG/Mirrors/BassterlordNetworkingManual.pdf<br /> <br /> Resources that assume a tech or hacking background:<br /> * (book) The Hacker Playbook 3<br /> * books by [https://b-ok.cc/g/Sparc%20Flow Sparc Flow]<br /> * [[Hack Back! A DIY Guide]]<br /> * https://github.com/ForbiddenProgrammer/conti-pentester-guide-leak<br /> ** translated: https://s3.amazonaws.com/talos-intelligence-site/production/document_files/files/000/095/639/original/Conti_playbook_translated.pdf<br /> <br /> Practice labs:<br /> * https://www.hackthebox.com/<br /> * https://www.pentesteracademy.com/<br /> * https://lab.pentestit.ru/<br /> * https://overthewire.org/wargames/<br /> <br /> General references:<br /> * https://www.ired.team/<br /> * http://pwnwiki.io/<br /> * https://dmcxblue.gitbook.io/red-team-notes-2-0/<br /> * https://github.com/swisskyrepo/PayloadsAllTheThings<br /> * https://github.com/S3cur3Th1sSh1t/Pentest-Tools<br /> <br /> == Active Directory ==<br /> <br /> * [https://github.com/swisskyrepo/PayloadsAllTheThings/blob/master/Methodology%20and%20Resources/Active%20Directory%20Attack.md An excellent practical reference]<br /> * [https://github.com/Integration-IT/Active-Directory-Exploitation-Cheat-Sheet A practical reference focused on powershell]<br /> * https://gist.github.com/TarlogicSecurity/2f221924fef8c14a1d8e29f3cb5c5c4a<br /> * https://m0chan.github.io/2019/07/30/Windows-Notes-and-Cheatsheet.html<br /> * https://casvancooten.com/posts/2020/11/windows-active-directory-exploitation-cheat-sheet-and-command-reference/<br /> * https://github.com/S1ckB0y1337/Active-Directory-Exploitation-Cheat-Sheet<br /> * https://wadcoms.github.io/<br /> * https://www.blackhillsinfosec.com/webcast-attack-tactics-5-zero-to-hero-attack/<br /> * https://byt3bl33d3r.github.io/practical-guide-to-ntlm-relaying-in-2017-aka-getting-a-foothold-in-under-5-minutes.html<br /> * https://s3cur3th1ssh1t.github.io/The-most-common-on-premise-vulnerabilities-and-misconfigurations/<br /> * A very thorough technical background: https://zer1t0.gitlab.io/posts/attacking_ad/<br /> * kerberos background: https://www.tarlogic.com/blog/how-kerberos-works/<br /> * A good overview of different lateral movement techniques: https://hackmag.com/security/lateral-guide/<br /> <br /> === Tools ===<br /> * https://mpgn.gitbook.io/crackmapexec/<br /> * https://www.secureauth.com/labs/open-source-tools/impacket/<br /> * https://github.com/dirkjanm/mitm6<br /> * https://github.com/lgandx/Responder<br /> * https://github.com/FuzzySecurity/StandIn<br /> * https://www.joeware.net/freetools/tools/adfind/<br /> * https://github.com/CravateRouge/bloodyAD<br /> * https://github.com/blacklanternsecurity/MANSPIDER<br /> * https://github.com/login-securite/DonPAPI<br /> * Powerview/Sharpview<br /> * Bloodhound/Sharphound<br /> <br /> == Office 365 &amp; Azure ==<br /> * Extremely in-depth technical info on everything https://o365blog.com/<br /> * https://www.synacktiv.com/en/publications/azure-ad-introduction-for-red-teamers.html<br /> * https://blog.xpnsec.com/azuread-connect-for-redteam/<br /> * https://www.blackhillsinfosec.com/webcast-getting-started-in-pentesting-the-cloud-azure/<br /> * https://github.com/dafthack/CloudPentestCheatsheets/blob/master/cheatsheets/Azure.md<br /> <br /> === Tools ===<br /> * https://github.com/nyxgeek/o365recon<br /> * https://github.com/dirkjanm/ROADtools<br /> * https://github.com/fox-it/adconnectdump<br /> * https://github.com/LMGsec/o365creeper<br /> * https://bloodhound.readthedocs.io/en/latest/data-collection/azurehound.html<br /> * https://github.com/rvrsh3ll/TokenTactics<br /> * https://github.com/nyxgeek/onedrive_user_enum<br /> * https://github.com/dafthack/MSOLSpray<br /> * https://github.com/dafthack/MFASweep<br /> <br /> == GSuite ==<br /> https://www.slideshare.net/dafthack/ok-google-how-do-i-red-team-gsuite<br /> <br /> == C2 Frameworks ==<br /> <br /> * https://docs.google.com/spreadsheets/d/1b4mUxa6cDQuTV2BPC6aA-GR4zGZi0ooPYtBe4IgPsSc<br /> <br /> == Antivirus &amp; EDR Evasion ==<br /> <br /> * https://s3cur3th1ssh1t.github.io/Bypass_AMSI_by_manual_modification/<br /> * https://s3cur3th1ssh1t.github.io/Customizing_C2_Frameworks/<br /> * https://s3cur3th1ssh1t.github.io/Powershell-and-the-.NET-AMSI-Interface/<br /> * https://www.blackhillsinfosec.com/tag/sacred-cash-cow-tipping/<br /> * https://blog.securityevaluators.com/creating-av-resistant-malware-part-1-7604b83ea0c0<br /> * https://www.ired.team/offensive-security/defense-evasion<br /> * https://www.youtube.com/watch?v=UO3PjJIiBIE<br /> * https://github.com/matterpreter/DefenderCheck<br /> * https://github.com/RythmStick/AMSITrigger<br /> * https://amsi.fail<br /> <br /> == VMware ==<br /> * Exploiting vCenter to add vSphere user: https://github.com/HynekPetrak/HynekPetrak/blob/master/take_over_vcenter_670.md<br /> <br /> == RocketChat ==<br /> * Account hijacking and RCE as admin: https://edbrsk.dev/content/real-cases/how-I-compromised-300-stores-and-a-spanish-consultancy<br /> <br /> == Initial Access == <br /> <br /> === Phishing ===<br /> * https://0xboku.com/2021/07/12/ArtOfDeviceCodePhish.html<br /> * https://medium.com/maltrak/com-objects-p-2-your-stealthy-fileless-attack-bf78318d9165<br /> * https://infosecwriteups.com/recipe-for-a-successful-phishing-campaign-part-1-2-dc23d927ec55<br /> * https://www.xanthus.io/mastering-the-simulated-phishing-attack<br /> * https://github.com/Arno0x/EmbedInHTML<br /> * https://github.com/L4bF0x/PhishingPretexts<br /> * http://lockboxx.blogspot.com/2018/12/gophish-evilginx2-for-phishing.html<br /> * https://book.hacktricks.xyz/phishing-methodology<br /> * https://outflank.nl/blog/2020/03/30/mark-of-the-web-from-a-red-teams-perspective<br /> <br /> === Password spraying ===<br /> * https://github.com/dafthack/MSOLSpray<br /> * https://pentestlab.blog/2019/09/05/microsoft-exchange-password-spraying/<br /> * https://github.com/blacklanternsecurity/TREVORspray<br /> <br /> == Scanning and Recon ==<br /> * https://github.com/robertdavidgraham/masscan<br /> * https://github.com/projectdiscovery/naabu<br /> * https://github.com/OWASP/Amass<br /> * https://www.shodan.io/<br /> * https://www.zoomeye.org/<br /> <br /> == Opsec ==<br /> * https://www.qubes-os.org/<br /> * https://www.whonix.org/<br /> * https://tails.boum.org/<br /> * The whonix wiki has lots of great info on anonymity even if you're not using whonix: https://www.whonix.org/wiki/Documentation<br /> * https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TransparentProxy<br /> * https://veracrypt.fr/</div>

Amongomous https://enlacehacktivista.org/index.php?title=Learn_to_hack&diff=349 2022-02-12T06:54:44Z

<p>Amongomous: /* Tools */</p> <hr /> <div>This page aims to compile high quality resources for hackers. All books listed on this page can be found on [https://libgen.fun/ Library Genesis] and [https://z-lib.org/ Z-Library]<br /> <br /> == General Resources == <br /> <br /> Resources that assume little to no background knowledge:<br /> * https://www.hoppersroppers.org/training.html<br /> * https://tryhackme.com/<br /> <br /> Resources that assume minimal tech background:<br /> * (book) Penetration Testing: A Hands-On Introduction to Hacking<br /> * Bassterlord Networking Manual (translated): https://papers.vx-underground.org/papers/VXUG/Mirrors/BassterlordNetworkingManual.pdf<br /> <br /> Resources that assume a tech or hacking background:<br /> * (book) The Hacker Playbook 3<br /> * books by [https://b-ok.cc/g/Sparc%20Flow Sparc Flow]<br /> * [[Hack Back! A DIY Guide]]<br /> * https://github.com/ForbiddenProgrammer/conti-pentester-guide-leak<br /> ** translated: https://s3.amazonaws.com/talos-intelligence-site/production/document_files/files/000/095/639/original/Conti_playbook_translated.pdf<br /> <br /> Practice labs:<br /> * https://www.hackthebox.com/<br /> * https://www.pentesteracademy.com/<br /> * https://lab.pentestit.ru/<br /> * https://overthewire.org/wargames/<br /> <br /> General references:<br /> * https://www.ired.team/<br /> * http://pwnwiki.io/<br /> * https://dmcxblue.gitbook.io/red-team-notes-2-0/<br /> * https://github.com/swisskyrepo/PayloadsAllTheThings<br /> * https://github.com/S3cur3Th1sSh1t/Pentest-Tools<br /> <br /> == Active Directory ==<br /> <br /> * [https://github.com/swisskyrepo/PayloadsAllTheThings/blob/master/Methodology%20and%20Resources/Active%20Directory%20Attack.md An excellent practical reference]<br /> * [https://github.com/Integration-IT/Active-Directory-Exploitation-Cheat-Sheet A practical reference focused on powershell]<br /> * https://gist.github.com/TarlogicSecurity/2f221924fef8c14a1d8e29f3cb5c5c4a<br /> * https://m0chan.github.io/2019/07/30/Windows-Notes-and-Cheatsheet.html<br /> * https://casvancooten.com/posts/2020/11/windows-active-directory-exploitation-cheat-sheet-and-command-reference/<br /> * https://github.com/S1ckB0y1337/Active-Directory-Exploitation-Cheat-Sheet<br /> * https://wadcoms.github.io/<br /> * https://www.blackhillsinfosec.com/webcast-attack-tactics-5-zero-to-hero-attack/<br /> * https://byt3bl33d3r.github.io/practical-guide-to-ntlm-relaying-in-2017-aka-getting-a-foothold-in-under-5-minutes.html<br /> * https://s3cur3th1ssh1t.github.io/The-most-common-on-premise-vulnerabilities-and-misconfigurations/<br /> * A very thorough technical background: https://zer1t0.gitlab.io/posts/attacking_ad/<br /> * kerberos background: https://www.tarlogic.com/blog/how-kerberos-works/<br /> * A good overview of different lateral movement techniques: https://hackmag.com/security/lateral-guide/<br /> <br /> === Tools ===<br /> * https://mpgn.gitbook.io/crackmapexec/<br /> * https://www.secureauth.com/labs/open-source-tools/impacket/<br /> * https://github.com/dirkjanm/mitm6<br /> * https://github.com/lgandx/Responder<br /> * https://github.com/FuzzySecurity/StandIn<br /> * https://www.joeware.net/freetools/tools/adfind/<br /> * https://github.com/CravateRouge/bloodyAD<br /> * https://github.com/blacklanternsecurity/MANSPIDER<br /> * Powerview/Sharpview<br /> * Bloodhound/Sharphound<br /> <br /> == Office 365 &amp; Azure ==<br /> * Extremely in-depth technical info on everything https://o365blog.com/<br /> * https://www.synacktiv.com/en/publications/azure-ad-introduction-for-red-teamers.html<br /> * https://blog.xpnsec.com/azuread-connect-for-redteam/<br /> * https://www.blackhillsinfosec.com/webcast-getting-started-in-pentesting-the-cloud-azure/<br /> * https://github.com/dafthack/CloudPentestCheatsheets/blob/master/cheatsheets/Azure.md<br /> <br /> === Tools ===<br /> * https://github.com/nyxgeek/o365recon<br /> * https://github.com/dirkjanm/ROADtools<br /> * https://github.com/fox-it/adconnectdump<br /> * https://gist.github.com/xpn/f12b145dba16c2eebdd1c6829267b90c#file-azuread_decrypt_msol_v2-ps1<br /> * https://github.com/login-securite/DonPAPI<br /> * https://github.com/LMGsec/o365creeper<br /> * https://bloodhound.readthedocs.io/en/latest/data-collection/azurehound.html<br /> * https://github.com/rvrsh3ll/TokenTactics<br /> * https://github.com/nyxgeek/onedrive_user_enum<br /> * https://github.com/dafthack/MSOLSpray<br /> * https://github.com/dafthack/MFASweep<br /> <br /> == GSuite ==<br /> https://www.slideshare.net/dafthack/ok-google-how-do-i-red-team-gsuite<br /> <br /> == C2 Frameworks ==<br /> <br /> * https://docs.google.com/spreadsheets/d/1b4mUxa6cDQuTV2BPC6aA-GR4zGZi0ooPYtBe4IgPsSc<br /> <br /> == Antivirus &amp; EDR Evasion ==<br /> <br /> * https://s3cur3th1ssh1t.github.io/Bypass_AMSI_by_manual_modification/<br /> * https://s3cur3th1ssh1t.github.io/Customizing_C2_Frameworks/<br /> * https://s3cur3th1ssh1t.github.io/Powershell-and-the-.NET-AMSI-Interface/<br /> * https://www.blackhillsinfosec.com/tag/sacred-cash-cow-tipping/<br /> * https://blog.securityevaluators.com/creating-av-resistant-malware-part-1-7604b83ea0c0<br /> * https://www.ired.team/offensive-security/defense-evasion<br /> * https://www.youtube.com/watch?v=UO3PjJIiBIE<br /> * https://github.com/matterpreter/DefenderCheck<br /> * https://github.com/RythmStick/AMSITrigger<br /> * https://amsi.fail<br /> <br /> == VMware ==<br /> * Exploiting vCenter to add vSphere user: https://github.com/HynekPetrak/HynekPetrak/blob/master/take_over_vcenter_670.md<br /> <br /> == RocketChat ==<br /> * Account hijacking and RCE as admin: https://edbrsk.dev/content/real-cases/how-I-compromised-300-stores-and-a-spanish-consultancy<br /> <br /> == Initial Access == <br /> <br /> === Phishing ===<br /> * https://0xboku.com/2021/07/12/ArtOfDeviceCodePhish.html<br /> * https://medium.com/maltrak/com-objects-p-2-your-stealthy-fileless-attack-bf78318d9165<br /> * https://infosecwriteups.com/recipe-for-a-successful-phishing-campaign-part-1-2-dc23d927ec55<br /> * https://www.xanthus.io/mastering-the-simulated-phishing-attack<br /> * https://github.com/Arno0x/EmbedInHTML<br /> * https://github.com/L4bF0x/PhishingPretexts<br /> * http://lockboxx.blogspot.com/2018/12/gophish-evilginx2-for-phishing.html<br /> * https://book.hacktricks.xyz/phishing-methodology<br /> * https://outflank.nl/blog/2020/03/30/mark-of-the-web-from-a-red-teams-perspective<br /> <br /> === Password spraying ===<br /> * https://github.com/dafthack/MSOLSpray<br /> * https://pentestlab.blog/2019/09/05/microsoft-exchange-password-spraying/<br /> * https://github.com/blacklanternsecurity/TREVORspray<br /> <br /> == Scanning and Recon ==<br /> * https://github.com/robertdavidgraham/masscan<br /> * https://github.com/projectdiscovery/naabu<br /> * https://github.com/OWASP/Amass<br /> * https://www.shodan.io/<br /> * https://www.zoomeye.org/<br /> <br /> == Opsec ==<br /> * https://www.qubes-os.org/<br /> * https://www.whonix.org/<br /> * https://tails.boum.org/<br /> * The whonix wiki has lots of great info on anonymity even if you're not using whonix: https://www.whonix.org/wiki/Documentation<br /> * https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TransparentProxy<br /> * https://veracrypt.fr/</div>

Amongomous https://enlacehacktivista.org/index.php?title=Learn_to_hack&diff=348 2022-02-08T22:14:00Z

<p>Amongomous: /* Phishing */</p> <hr /> <div>This page aims to compile high quality resources for hackers. All books listed on this page can be found on [https://libgen.fun/ Library Genesis] and [https://z-lib.org/ Z-Library]<br /> <br /> == General Resources == <br /> <br /> Resources that assume little to no background knowledge:<br /> * https://www.hoppersroppers.org/training.html<br /> * https://tryhackme.com/<br /> <br /> Resources that assume minimal tech background:<br /> * (book) Penetration Testing: A Hands-On Introduction to Hacking<br /> * Bassterlord Networking Manual (translated): https://papers.vx-underground.org/papers/VXUG/Mirrors/BassterlordNetworkingManual.pdf<br /> <br /> Resources that assume a tech or hacking background:<br /> * (book) The Hacker Playbook 3<br /> * books by [https://b-ok.cc/g/Sparc%20Flow Sparc Flow]<br /> * [[Hack Back! A DIY Guide]]<br /> * https://github.com/ForbiddenProgrammer/conti-pentester-guide-leak<br /> ** translated: https://s3.amazonaws.com/talos-intelligence-site/production/document_files/files/000/095/639/original/Conti_playbook_translated.pdf<br /> <br /> Practice labs:<br /> * https://www.hackthebox.com/<br /> * https://www.pentesteracademy.com/<br /> * https://lab.pentestit.ru/<br /> * https://overthewire.org/wargames/<br /> <br /> General references:<br /> * https://www.ired.team/<br /> * http://pwnwiki.io/<br /> * https://dmcxblue.gitbook.io/red-team-notes-2-0/<br /> * https://github.com/swisskyrepo/PayloadsAllTheThings<br /> * https://github.com/S3cur3Th1sSh1t/Pentest-Tools<br /> <br /> == Active Directory ==<br /> <br /> * [https://github.com/swisskyrepo/PayloadsAllTheThings/blob/master/Methodology%20and%20Resources/Active%20Directory%20Attack.md An excellent practical reference]<br /> * [https://github.com/Integration-IT/Active-Directory-Exploitation-Cheat-Sheet A practical reference focused on powershell]<br /> * https://gist.github.com/TarlogicSecurity/2f221924fef8c14a1d8e29f3cb5c5c4a<br /> * https://m0chan.github.io/2019/07/30/Windows-Notes-and-Cheatsheet.html<br /> * https://casvancooten.com/posts/2020/11/windows-active-directory-exploitation-cheat-sheet-and-command-reference/<br /> * https://github.com/S1ckB0y1337/Active-Directory-Exploitation-Cheat-Sheet<br /> * https://wadcoms.github.io/<br /> * https://www.blackhillsinfosec.com/webcast-attack-tactics-5-zero-to-hero-attack/<br /> * https://byt3bl33d3r.github.io/practical-guide-to-ntlm-relaying-in-2017-aka-getting-a-foothold-in-under-5-minutes.html<br /> * https://s3cur3th1ssh1t.github.io/The-most-common-on-premise-vulnerabilities-and-misconfigurations/<br /> * A very thorough technical background: https://zer1t0.gitlab.io/posts/attacking_ad/<br /> * kerberos background: https://www.tarlogic.com/blog/how-kerberos-works/<br /> * A good overview of different lateral movement techniques: https://hackmag.com/security/lateral-guide/<br /> <br /> === Tools ===<br /> * https://mpgn.gitbook.io/crackmapexec/<br /> * https://www.secureauth.com/labs/open-source-tools/impacket/<br /> * https://github.com/dirkjanm/mitm6<br /> * https://github.com/lgandx/Responder<br /> * https://github.com/FuzzySecurity/StandIn<br /> * https://www.joeware.net/freetools/tools/adfind/<br /> * https://github.com/CravateRouge/bloodyAD<br /> * https://github.com/blacklanternsecurity/MANSPIDER<br /> * Powerview/Sharpview<br /> * Bloodhound/Sharphound<br /> <br /> == Office 365 &amp; Azure ==<br /> * Extremely in-depth technical info on everything https://o365blog.com/<br /> * https://www.synacktiv.com/en/publications/azure-ad-introduction-for-red-teamers.html<br /> * https://blog.xpnsec.com/azuread-connect-for-redteam/<br /> * https://www.blackhillsinfosec.com/webcast-getting-started-in-pentesting-the-cloud-azure/<br /> * https://github.com/dafthack/CloudPentestCheatsheets/blob/master/cheatsheets/Azure.md<br /> <br /> === Tools ===<br /> * https://github.com/nyxgeek/o365recon<br /> * https://github.com/dirkjanm/ROADtools<br /> * https://github.com/fox-it/adconnectdump<br /> * https://gist.github.com/xpn/f12b145dba16c2eebdd1c6829267b90c#file-azuread_decrypt_msol_v2-ps1<br /> * https://github.com/LMGsec/o365creeper<br /> * https://bloodhound.readthedocs.io/en/latest/data-collection/azurehound.html<br /> * https://github.com/rvrsh3ll/TokenTactics<br /> * https://github.com/nyxgeek/onedrive_user_enum<br /> * https://github.com/dafthack/MSOLSpray<br /> * https://github.com/dafthack/MFASweep<br /> <br /> == GSuite ==<br /> https://www.slideshare.net/dafthack/ok-google-how-do-i-red-team-gsuite<br /> <br /> == C2 Frameworks ==<br /> <br /> * https://docs.google.com/spreadsheets/d/1b4mUxa6cDQuTV2BPC6aA-GR4zGZi0ooPYtBe4IgPsSc<br /> <br /> == Antivirus &amp; EDR Evasion ==<br /> <br /> * https://s3cur3th1ssh1t.github.io/Bypass_AMSI_by_manual_modification/<br /> * https://s3cur3th1ssh1t.github.io/Customizing_C2_Frameworks/<br /> * https://s3cur3th1ssh1t.github.io/Powershell-and-the-.NET-AMSI-Interface/<br /> * https://www.blackhillsinfosec.com/tag/sacred-cash-cow-tipping/<br /> * https://blog.securityevaluators.com/creating-av-resistant-malware-part-1-7604b83ea0c0<br /> * https://www.ired.team/offensive-security/defense-evasion<br /> * https://www.youtube.com/watch?v=UO3PjJIiBIE<br /> * https://github.com/matterpreter/DefenderCheck<br /> * https://github.com/RythmStick/AMSITrigger<br /> * https://amsi.fail<br /> <br /> == VMware ==<br /> * Exploiting vCenter to add vSphere user: https://github.com/HynekPetrak/HynekPetrak/blob/master/take_over_vcenter_670.md<br /> <br /> == RocketChat ==<br /> * Account hijacking and RCE as admin: https://edbrsk.dev/content/real-cases/how-I-compromised-300-stores-and-a-spanish-consultancy<br /> <br /> == Initial Access == <br /> <br /> === Phishing ===<br /> * https://0xboku.com/2021/07/12/ArtOfDeviceCodePhish.html<br /> * https://medium.com/maltrak/com-objects-p-2-your-stealthy-fileless-attack-bf78318d9165<br /> * https://infosecwriteups.com/recipe-for-a-successful-phishing-campaign-part-1-2-dc23d927ec55<br /> * https://www.xanthus.io/mastering-the-simulated-phishing-attack<br /> * https://github.com/Arno0x/EmbedInHTML<br /> * https://github.com/L4bF0x/PhishingPretexts<br /> * http://lockboxx.blogspot.com/2018/12/gophish-evilginx2-for-phishing.html<br /> * https://book.hacktricks.xyz/phishing-methodology<br /> * https://outflank.nl/blog/2020/03/30/mark-of-the-web-from-a-red-teams-perspective<br /> <br /> === Password spraying ===<br /> * https://github.com/dafthack/MSOLSpray<br /> * https://pentestlab.blog/2019/09/05/microsoft-exchange-password-spraying/<br /> * https://github.com/blacklanternsecurity/TREVORspray<br /> <br /> == Scanning and Recon ==<br /> * https://github.com/robertdavidgraham/masscan<br /> * https://github.com/projectdiscovery/naabu<br /> * https://github.com/OWASP/Amass<br /> * https://www.shodan.io/<br /> * https://www.zoomeye.org/<br /> <br /> == Opsec ==<br /> * https://www.qubes-os.org/<br /> * https://www.whonix.org/<br /> * https://tails.boum.org/<br /> * The whonix wiki has lots of great info on anonymity even if you're not using whonix: https://www.whonix.org/wiki/Documentation<br /> * https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TransparentProxy<br /> * https://veracrypt.fr/</div>

Amongomous https://enlacehacktivista.org/index.php?title=Learn_to_hack&diff=347 2022-02-08T04:29:51Z

<p>Amongomous: /* Office 365 &amp; Azure */</p> <hr /> <div>This page aims to compile high quality resources for hackers. All books listed on this page can be found on [https://libgen.fun/ Library Genesis] and [https://z-lib.org/ Z-Library]<br /> <br /> == General Resources == <br /> <br /> Resources that assume little to no background knowledge:<br /> * https://www.hoppersroppers.org/training.html<br /> * https://tryhackme.com/<br /> <br /> Resources that assume minimal tech background:<br /> * (book) Penetration Testing: A Hands-On Introduction to Hacking<br /> * Bassterlord Networking Manual (translated): https://papers.vx-underground.org/papers/VXUG/Mirrors/BassterlordNetworkingManual.pdf<br /> <br /> Resources that assume a tech or hacking background:<br /> * (book) The Hacker Playbook 3<br /> * books by [https://b-ok.cc/g/Sparc%20Flow Sparc Flow]<br /> * [[Hack Back! A DIY Guide]]<br /> * https://github.com/ForbiddenProgrammer/conti-pentester-guide-leak<br /> ** translated: https://s3.amazonaws.com/talos-intelligence-site/production/document_files/files/000/095/639/original/Conti_playbook_translated.pdf<br /> <br /> Practice labs:<br /> * https://www.hackthebox.com/<br /> * https://www.pentesteracademy.com/<br /> * https://lab.pentestit.ru/<br /> * https://overthewire.org/wargames/<br /> <br /> General references:<br /> * https://www.ired.team/<br /> * http://pwnwiki.io/<br /> * https://dmcxblue.gitbook.io/red-team-notes-2-0/<br /> * https://github.com/swisskyrepo/PayloadsAllTheThings<br /> * https://github.com/S3cur3Th1sSh1t/Pentest-Tools<br /> <br /> == Active Directory ==<br /> <br /> * [https://github.com/swisskyrepo/PayloadsAllTheThings/blob/master/Methodology%20and%20Resources/Active%20Directory%20Attack.md An excellent practical reference]<br /> * [https://github.com/Integration-IT/Active-Directory-Exploitation-Cheat-Sheet A practical reference focused on powershell]<br /> * https://gist.github.com/TarlogicSecurity/2f221924fef8c14a1d8e29f3cb5c5c4a<br /> * https://m0chan.github.io/2019/07/30/Windows-Notes-and-Cheatsheet.html<br /> * https://casvancooten.com/posts/2020/11/windows-active-directory-exploitation-cheat-sheet-and-command-reference/<br /> * https://github.com/S1ckB0y1337/Active-Directory-Exploitation-Cheat-Sheet<br /> * https://wadcoms.github.io/<br /> * https://www.blackhillsinfosec.com/webcast-attack-tactics-5-zero-to-hero-attack/<br /> * https://byt3bl33d3r.github.io/practical-guide-to-ntlm-relaying-in-2017-aka-getting-a-foothold-in-under-5-minutes.html<br /> * https://s3cur3th1ssh1t.github.io/The-most-common-on-premise-vulnerabilities-and-misconfigurations/<br /> * A very thorough technical background: https://zer1t0.gitlab.io/posts/attacking_ad/<br /> * kerberos background: https://www.tarlogic.com/blog/how-kerberos-works/<br /> * A good overview of different lateral movement techniques: https://hackmag.com/security/lateral-guide/<br /> <br /> === Tools ===<br /> * https://mpgn.gitbook.io/crackmapexec/<br /> * https://www.secureauth.com/labs/open-source-tools/impacket/<br /> * https://github.com/dirkjanm/mitm6<br /> * https://github.com/lgandx/Responder<br /> * https://github.com/FuzzySecurity/StandIn<br /> * https://www.joeware.net/freetools/tools/adfind/<br /> * https://github.com/CravateRouge/bloodyAD<br /> * https://github.com/blacklanternsecurity/MANSPIDER<br /> * Powerview/Sharpview<br /> * Bloodhound/Sharphound<br /> <br /> == Office 365 &amp; Azure ==<br /> * Extremely in-depth technical info on everything https://o365blog.com/<br /> * https://www.synacktiv.com/en/publications/azure-ad-introduction-for-red-teamers.html<br /> * https://blog.xpnsec.com/azuread-connect-for-redteam/<br /> * https://www.blackhillsinfosec.com/webcast-getting-started-in-pentesting-the-cloud-azure/<br /> * https://github.com/dafthack/CloudPentestCheatsheets/blob/master/cheatsheets/Azure.md<br /> <br /> === Tools ===<br /> * https://github.com/nyxgeek/o365recon<br /> * https://github.com/dirkjanm/ROADtools<br /> * https://github.com/fox-it/adconnectdump<br /> * https://gist.github.com/xpn/f12b145dba16c2eebdd1c6829267b90c#file-azuread_decrypt_msol_v2-ps1<br /> * https://github.com/LMGsec/o365creeper<br /> * https://bloodhound.readthedocs.io/en/latest/data-collection/azurehound.html<br /> * https://github.com/rvrsh3ll/TokenTactics<br /> * https://github.com/nyxgeek/onedrive_user_enum<br /> * https://github.com/dafthack/MSOLSpray<br /> * https://github.com/dafthack/MFASweep<br /> <br /> == GSuite ==<br /> https://www.slideshare.net/dafthack/ok-google-how-do-i-red-team-gsuite<br /> <br /> == C2 Frameworks ==<br /> <br /> * https://docs.google.com/spreadsheets/d/1b4mUxa6cDQuTV2BPC6aA-GR4zGZi0ooPYtBe4IgPsSc<br /> <br /> == Antivirus &amp; EDR Evasion ==<br /> <br /> * https://s3cur3th1ssh1t.github.io/Bypass_AMSI_by_manual_modification/<br /> * https://s3cur3th1ssh1t.github.io/Customizing_C2_Frameworks/<br /> * https://s3cur3th1ssh1t.github.io/Powershell-and-the-.NET-AMSI-Interface/<br /> * https://www.blackhillsinfosec.com/tag/sacred-cash-cow-tipping/<br /> * https://blog.securityevaluators.com/creating-av-resistant-malware-part-1-7604b83ea0c0<br /> * https://www.ired.team/offensive-security/defense-evasion<br /> * https://www.youtube.com/watch?v=UO3PjJIiBIE<br /> * https://github.com/matterpreter/DefenderCheck<br /> * https://github.com/RythmStick/AMSITrigger<br /> * https://amsi.fail<br /> <br /> == VMware ==<br /> * Exploiting vCenter to add vSphere user: https://github.com/HynekPetrak/HynekPetrak/blob/master/take_over_vcenter_670.md<br /> <br /> == RocketChat ==<br /> * Account hijacking and RCE as admin: https://edbrsk.dev/content/real-cases/how-I-compromised-300-stores-and-a-spanish-consultancy<br /> <br /> == Initial Access == <br /> <br /> === Phishing ===<br /> * https://0xboku.com/2021/07/12/ArtOfDeviceCodePhish.html<br /> * https://medium.com/maltrak/com-objects-p-2-your-stealthy-fileless-attack-bf78318d9165<br /> * https://infosecwriteups.com/recipe-for-a-successful-phishing-campaign-part-1-2-dc23d927ec55<br /> * https://www.xanthus.io/mastering-the-simulated-phishing-attack<br /> * https://github.com/Arno0x/EmbedInHTML<br /> * https://github.com/L4bF0x/PhishingPretexts<br /> * http://lockboxx.blogspot.com/2018/12/gophish-evilginx2-for-phishing.html<br /> * https://book.hacktricks.xyz/phishing-methodology<br /> <br /> === Password spraying ===<br /> * https://github.com/dafthack/MSOLSpray<br /> * https://pentestlab.blog/2019/09/05/microsoft-exchange-password-spraying/<br /> * https://github.com/blacklanternsecurity/TREVORspray<br /> <br /> == Scanning and Recon ==<br /> * https://github.com/robertdavidgraham/masscan<br /> * https://github.com/projectdiscovery/naabu<br /> * https://github.com/OWASP/Amass<br /> * https://www.shodan.io/<br /> * https://www.zoomeye.org/<br /> <br /> == Opsec ==<br /> * https://www.qubes-os.org/<br /> * https://www.whonix.org/<br /> * https://tails.boum.org/<br /> * The whonix wiki has lots of great info on anonymity even if you're not using whonix: https://www.whonix.org/wiki/Documentation<br /> * https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TransparentProxy<br /> * https://veracrypt.fr/</div>

Amongomous https://enlacehacktivista.org/index.php?title=Learn_to_hack&diff=346 2022-02-03T19:20:50Z

<p>Amongomous: </p> <hr /> <div>This page aims to compile high quality resources for hackers. All books listed on this page can be found on [https://libgen.fun/ Library Genesis] and [https://z-lib.org/ Z-Library]<br /> <br /> == General Resources == <br /> <br /> Resources that assume little to no background knowledge:<br /> * https://www.hoppersroppers.org/training.html<br /> * https://tryhackme.com/<br /> <br /> Resources that assume minimal tech background:<br /> * (book) Penetration Testing: A Hands-On Introduction to Hacking<br /> * Bassterlord Networking Manual (translated): https://papers.vx-underground.org/papers/VXUG/Mirrors/BassterlordNetworkingManual.pdf<br /> <br /> Resources that assume a tech or hacking background:<br /> * (book) The Hacker Playbook 3<br /> * books by [https://b-ok.cc/g/Sparc%20Flow Sparc Flow]<br /> * [[Hack Back! A DIY Guide]]<br /> * https://github.com/ForbiddenProgrammer/conti-pentester-guide-leak<br /> ** translated: https://s3.amazonaws.com/talos-intelligence-site/production/document_files/files/000/095/639/original/Conti_playbook_translated.pdf<br /> <br /> Practice labs:<br /> * https://www.hackthebox.com/<br /> * https://www.pentesteracademy.com/<br /> * https://lab.pentestit.ru/<br /> * https://overthewire.org/wargames/<br /> <br /> General references:<br /> * https://www.ired.team/<br /> * http://pwnwiki.io/<br /> * https://dmcxblue.gitbook.io/red-team-notes-2-0/<br /> * https://github.com/swisskyrepo/PayloadsAllTheThings<br /> * https://github.com/S3cur3Th1sSh1t/Pentest-Tools<br /> <br /> == Active Directory ==<br /> <br /> * [https://github.com/swisskyrepo/PayloadsAllTheThings/blob/master/Methodology%20and%20Resources/Active%20Directory%20Attack.md An excellent practical reference]<br /> * [https://github.com/Integration-IT/Active-Directory-Exploitation-Cheat-Sheet A practical reference focused on powershell]<br /> * https://gist.github.com/TarlogicSecurity/2f221924fef8c14a1d8e29f3cb5c5c4a<br /> * https://m0chan.github.io/2019/07/30/Windows-Notes-and-Cheatsheet.html<br /> * https://casvancooten.com/posts/2020/11/windows-active-directory-exploitation-cheat-sheet-and-command-reference/<br /> * https://github.com/S1ckB0y1337/Active-Directory-Exploitation-Cheat-Sheet<br /> * https://wadcoms.github.io/<br /> * https://www.blackhillsinfosec.com/webcast-attack-tactics-5-zero-to-hero-attack/<br /> * https://byt3bl33d3r.github.io/practical-guide-to-ntlm-relaying-in-2017-aka-getting-a-foothold-in-under-5-minutes.html<br /> * https://s3cur3th1ssh1t.github.io/The-most-common-on-premise-vulnerabilities-and-misconfigurations/<br /> * A very thorough technical background: https://zer1t0.gitlab.io/posts/attacking_ad/<br /> * kerberos background: https://www.tarlogic.com/blog/how-kerberos-works/<br /> * A good overview of different lateral movement techniques: https://hackmag.com/security/lateral-guide/<br /> <br /> === Tools ===<br /> * https://mpgn.gitbook.io/crackmapexec/<br /> * https://www.secureauth.com/labs/open-source-tools/impacket/<br /> * https://github.com/dirkjanm/mitm6<br /> * https://github.com/lgandx/Responder<br /> * https://github.com/FuzzySecurity/StandIn<br /> * https://www.joeware.net/freetools/tools/adfind/<br /> * https://github.com/CravateRouge/bloodyAD<br /> * https://github.com/blacklanternsecurity/MANSPIDER<br /> * Powerview/Sharpview<br /> * Bloodhound/Sharphound<br /> <br /> == Office 365 &amp; Azure ==<br /> * Extremely in-depth technical info on everything https://o365blog.com/<br /> * https://www.synacktiv.com/en/publications/azure-ad-introduction-for-red-teamers.html<br /> * https://blog.xpnsec.com/azuread-connect-for-redteam/<br /> * https://www.blackhillsinfosec.com/webcast-getting-started-in-pentesting-the-cloud-azure/<br /> * https://github.com/dafthack/CloudPentestCheatsheets/blob/master/cheatsheets/Azure.md<br /> <br /> === Tools ===<br /> * https://github.com/nyxgeek/o365recon<br /> * https://github.com/dirkjanm/ROADtools<br /> * https://github.com/fox-it/adconnectdump<br /> * https://github.com/LMGsec/o365creeper<br /> * https://bloodhound.readthedocs.io/en/latest/data-collection/azurehound.html<br /> * https://github.com/rvrsh3ll/TokenTactics<br /> * https://github.com/nyxgeek/onedrive_user_enum<br /> * https://github.com/dafthack/MSOLSpray<br /> * https://github.com/dafthack/MFASweep<br /> <br /> == GSuite ==<br /> https://www.slideshare.net/dafthack/ok-google-how-do-i-red-team-gsuite<br /> <br /> == C2 Frameworks ==<br /> <br /> * https://docs.google.com/spreadsheets/d/1b4mUxa6cDQuTV2BPC6aA-GR4zGZi0ooPYtBe4IgPsSc<br /> <br /> == Antivirus &amp; EDR Evasion ==<br /> <br /> * https://s3cur3th1ssh1t.github.io/Bypass_AMSI_by_manual_modification/<br /> * https://s3cur3th1ssh1t.github.io/Customizing_C2_Frameworks/<br /> * https://s3cur3th1ssh1t.github.io/Powershell-and-the-.NET-AMSI-Interface/<br /> * https://www.blackhillsinfosec.com/tag/sacred-cash-cow-tipping/<br /> * https://blog.securityevaluators.com/creating-av-resistant-malware-part-1-7604b83ea0c0<br /> * https://www.ired.team/offensive-security/defense-evasion<br /> * https://www.youtube.com/watch?v=UO3PjJIiBIE<br /> * https://github.com/matterpreter/DefenderCheck<br /> * https://github.com/RythmStick/AMSITrigger<br /> * https://amsi.fail<br /> <br /> == VMware ==<br /> * Exploiting vCenter to add vSphere user: https://github.com/HynekPetrak/HynekPetrak/blob/master/take_over_vcenter_670.md<br /> <br /> == RocketChat ==<br /> * Account hijacking and RCE as admin: https://edbrsk.dev/content/real-cases/how-I-compromised-300-stores-and-a-spanish-consultancy<br /> <br /> == Initial Access == <br /> <br /> === Phishing ===<br /> * https://0xboku.com/2021/07/12/ArtOfDeviceCodePhish.html<br /> * https://medium.com/maltrak/com-objects-p-2-your-stealthy-fileless-attack-bf78318d9165<br /> * https://infosecwriteups.com/recipe-for-a-successful-phishing-campaign-part-1-2-dc23d927ec55<br /> * https://www.xanthus.io/mastering-the-simulated-phishing-attack<br /> * https://github.com/Arno0x/EmbedInHTML<br /> * https://github.com/L4bF0x/PhishingPretexts<br /> * http://lockboxx.blogspot.com/2018/12/gophish-evilginx2-for-phishing.html<br /> * https://book.hacktricks.xyz/phishing-methodology<br /> <br /> === Password spraying ===<br /> * https://github.com/dafthack/MSOLSpray<br /> * https://pentestlab.blog/2019/09/05/microsoft-exchange-password-spraying/<br /> * https://github.com/blacklanternsecurity/TREVORspray<br /> <br /> == Scanning and Recon ==<br /> * https://github.com/robertdavidgraham/masscan<br /> * https://github.com/projectdiscovery/naabu<br /> * https://github.com/OWASP/Amass<br /> * https://www.shodan.io/<br /> * https://www.zoomeye.org/<br /> <br /> == Opsec ==<br /> * https://www.qubes-os.org/<br /> * https://www.whonix.org/<br /> * https://tails.boum.org/<br /> * The whonix wiki has lots of great info on anonymity even if you're not using whonix: https://www.whonix.org/wiki/Documentation<br /> * https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TransparentProxy<br /> * https://veracrypt.fr/</div>

Amongomous https://enlacehacktivista.org/index.php?title=Twitch&diff=345 2022-01-29T02:45:57Z

<p>Amongomous: /* Media Coverage */</p> <hr /> <div>Hack of source code and financial information from the Amazon-owned video game livestreaming platform Twitch.<br /> <br /> While little is known about the hacker's motives, it's speculated to have been retaliation for organized harassment campaigns faced by the site's users.<br /> <br /> * https://ddosecrets.com/wiki/Twitch<br /> * [[Media:Twitchleaks-4chan.jpg|Statement from the hacker]]<br /> <br /> == Media Coverage ==<br /> <br /> * [https://www.dailydot.com/debug/twitch-leak-data/ Daily Dot: Twitch creators’ incomes, source code part of massive data leak]<br /> * [https://www.dailydot.com/debug/twitch-leak-qanon-toresays-150000/ Daily Dot: Twitch leak reveals prominent QAnon streamer made $150,000 in 2 years]<br /> * [https://www.theverge.com/2021/10/7/22714160/twitch-hack-security-data-breach-problems/ The Verge: Twitch’s security problems started long before this week’s hack]<br /> * [https://www.theverge.com/2021/10/8/22716184/twitch-hack-jeff-bezos-pictures-defaced The Verge: Twitch defaced with pictures of Jeff Bezos]<br /> * [https://www.washingtonpost.com/video-games/2021/10/08/twitch-hack-leak-minimum-wage-pay-hasan/ Washington Post: The Twitch hack revealed much more than streamer salaries]<br /> * [https://www.vice.com/en/article/pkb7qg/urgent-pizza-untold-story-of-the-largest-twitch-hack-in-history Vice: ‘Urgent Pizza’: The Untold Story of the Largest Hack in Twitch’s History]<br /> * [https://www.middleeasteye.net/news/turkey-twitch-money-laundering-fraud Middle East Eye: Turkey: Hackers allegedly used streaming platform Twitch to launder $10m]<br /> * [https://www.washingtonpost.com/video-games/2022/01/11/twitch-bit-money-laundering-turkey-police/ Washington Post: Turkish police detain 40 people over Twitch streamer money laundering scheme]<br /> <br /> [[Category:Hacks]]</div>

Amongomous https://enlacehacktivista.org/index.php?title=Learn_to_hack&diff=344 2022-01-29T02:24:12Z

<p>Amongomous: /* VMware */</p> <hr /> <div>This page aims to compile high quality resources for hackers. All books listed on this page can be found on [https://libgen.fun/ Library Genesis] and [https://z-lib.org/ Z-Library]<br /> <br /> == General Resources == <br /> <br /> Resources that assume little to no background knowledge:<br /> * https://www.hoppersroppers.org/training.html<br /> * https://tryhackme.com/<br /> <br /> Resources that assume minimal tech background:<br /> * (book) Penetration Testing: A Hands-On Introduction to Hacking<br /> * Bassterlord Networking Manual (translated): https://papers.vx-underground.org/papers/VXUG/Mirrors/BassterlordNetworkingManual.pdf<br /> <br /> Resources that assume a tech or hacking background:<br /> * (book) The Hacker Playbook 3<br /> * books by [https://b-ok.cc/g/Sparc%20Flow Sparc Flow]<br /> * [[Hack Back! A DIY Guide]]<br /> * https://github.com/ForbiddenProgrammer/conti-pentester-guide-leak<br /> ** translated: https://s3.amazonaws.com/talos-intelligence-site/production/document_files/files/000/095/639/original/Conti_playbook_translated.pdf<br /> <br /> Practice labs:<br /> * https://www.hackthebox.com/<br /> * https://www.pentesteracademy.com/<br /> * https://lab.pentestit.ru/<br /> * https://overthewire.org/wargames/<br /> <br /> General references:<br /> * https://www.ired.team/<br /> * http://pwnwiki.io/<br /> * https://dmcxblue.gitbook.io/red-team-notes-2-0/<br /> * https://github.com/swisskyrepo/PayloadsAllTheThings<br /> * https://github.com/S3cur3Th1sSh1t/Pentest-Tools<br /> <br /> == Active Directory ==<br /> <br /> * [https://github.com/swisskyrepo/PayloadsAllTheThings/blob/master/Methodology%20and%20Resources/Active%20Directory%20Attack.md An excellent practical reference]<br /> * [https://github.com/Integration-IT/Active-Directory-Exploitation-Cheat-Sheet A practical reference focused on powershell]<br /> * https://gist.github.com/TarlogicSecurity/2f221924fef8c14a1d8e29f3cb5c5c4a<br /> * https://m0chan.github.io/2019/07/30/Windows-Notes-and-Cheatsheet.html<br /> * https://casvancooten.com/posts/2020/11/windows-active-directory-exploitation-cheat-sheet-and-command-reference/<br /> * https://github.com/S1ckB0y1337/Active-Directory-Exploitation-Cheat-Sheet<br /> * https://wadcoms.github.io/<br /> * https://www.blackhillsinfosec.com/webcast-attack-tactics-5-zero-to-hero-attack/<br /> * https://byt3bl33d3r.github.io/practical-guide-to-ntlm-relaying-in-2017-aka-getting-a-foothold-in-under-5-minutes.html<br /> * https://s3cur3th1ssh1t.github.io/The-most-common-on-premise-vulnerabilities-and-misconfigurations/<br /> * A very thorough technical background: https://zer1t0.gitlab.io/posts/attacking_ad/<br /> * kerberos background: https://www.tarlogic.com/blog/how-kerberos-works/<br /> * A good overview of different lateral movement techniques: https://hackmag.com/security/lateral-guide/<br /> <br /> === Tools ===<br /> * https://mpgn.gitbook.io/crackmapexec/<br /> * https://www.secureauth.com/labs/open-source-tools/impacket/<br /> * https://github.com/dirkjanm/mitm6<br /> * https://github.com/lgandx/Responder<br /> * https://github.com/FuzzySecurity/StandIn<br /> * https://www.joeware.net/freetools/tools/adfind/<br /> * https://github.com/CravateRouge/bloodyAD<br /> * Powerview/Sharpview<br /> * Bloodhound/Sharphound<br /> <br /> == Office 365 &amp; Azure ==<br /> * Extremely in-depth technical info on everything https://o365blog.com/<br /> * https://www.synacktiv.com/en/publications/azure-ad-introduction-for-red-teamers.html<br /> * https://blog.xpnsec.com/azuread-connect-for-redteam/<br /> * https://www.blackhillsinfosec.com/webcast-getting-started-in-pentesting-the-cloud-azure/<br /> * https://github.com/dafthack/CloudPentestCheatsheets/blob/master/cheatsheets/Azure.md<br /> <br /> === Tools ===<br /> * https://github.com/nyxgeek/o365recon<br /> * https://github.com/dirkjanm/ROADtools<br /> * https://github.com/fox-it/adconnectdump<br /> * https://github.com/LMGsec/o365creeper<br /> * https://bloodhound.readthedocs.io/en/latest/data-collection/azurehound.html<br /> * https://github.com/rvrsh3ll/TokenTactics<br /> * https://github.com/nyxgeek/onedrive_user_enum<br /> * https://github.com/dafthack/MSOLSpray<br /> * https://github.com/dafthack/MFASweep<br /> <br /> == GSuite ==<br /> https://www.slideshare.net/dafthack/ok-google-how-do-i-red-team-gsuite<br /> <br /> == C2 Frameworks ==<br /> <br /> * https://docs.google.com/spreadsheets/d/1b4mUxa6cDQuTV2BPC6aA-GR4zGZi0ooPYtBe4IgPsSc<br /> <br /> == Antivirus &amp; EDR Evasion ==<br /> <br /> * https://s3cur3th1ssh1t.github.io/Bypass_AMSI_by_manual_modification/<br /> * https://s3cur3th1ssh1t.github.io/Customizing_C2_Frameworks/<br /> * https://s3cur3th1ssh1t.github.io/Powershell-and-the-.NET-AMSI-Interface/<br /> * https://www.blackhillsinfosec.com/tag/sacred-cash-cow-tipping/<br /> * https://blog.securityevaluators.com/creating-av-resistant-malware-part-1-7604b83ea0c0<br /> * https://www.ired.team/offensive-security/defense-evasion<br /> * https://www.youtube.com/watch?v=UO3PjJIiBIE<br /> * https://github.com/matterpreter/DefenderCheck<br /> * https://github.com/RythmStick/AMSITrigger<br /> * https://amsi.fail<br /> <br /> == VMware ==<br /> * Exploiting vCenter to add vSphere user: https://github.com/HynekPetrak/HynekPetrak/blob/master/take_over_vcenter_670.md<br /> <br /> == RocketChat ==<br /> * Account hijacking and RCE as admin: https://edbrsk.dev/content/real-cases/how-I-compromised-300-stores-and-a-spanish-consultancy<br /> <br /> == Initial Access == <br /> <br /> === Phishing ===<br /> * https://0xboku.com/2021/07/12/ArtOfDeviceCodePhish.html<br /> * https://medium.com/maltrak/com-objects-p-2-your-stealthy-fileless-attack-bf78318d9165<br /> * https://infosecwriteups.com/recipe-for-a-successful-phishing-campaign-part-1-2-dc23d927ec55<br /> * https://www.xanthus.io/mastering-the-simulated-phishing-attack<br /> * https://github.com/Arno0x/EmbedInHTML<br /> * https://github.com/L4bF0x/PhishingPretexts<br /> * http://lockboxx.blogspot.com/2018/12/gophish-evilginx2-for-phishing.html<br /> * https://book.hacktricks.xyz/phishing-methodology<br /> <br /> === Password spraying ===<br /> * https://github.com/dafthack/MSOLSpray<br /> * https://pentestlab.blog/2019/09/05/microsoft-exchange-password-spraying/<br /> <br /> == Scanning and Recon ==<br /> * https://github.com/robertdavidgraham/masscan<br /> * https://github.com/projectdiscovery/naabu<br /> * https://github.com/OWASP/Amass<br /> * https://www.shodan.io/<br /> * https://www.zoomeye.org/<br /> <br /> == Opsec ==<br /> * https://www.qubes-os.org/<br /> * https://www.whonix.org/<br /> * https://tails.boum.org/<br /> * The whonix wiki has lots of great info on anonymity even if you're not using whonix: https://www.whonix.org/wiki/Documentation<br /> * https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TransparentProxy<br /> * https://veracrypt.fr/</div>

Amongomous https://enlacehacktivista.org/index.php?title=Learn_to_hack&diff=343 2022-01-29T02:21:40Z

<p>Amongomous: </p> <hr /> <div>This page aims to compile high quality resources for hackers. All books listed on this page can be found on [https://libgen.fun/ Library Genesis] and [https://z-lib.org/ Z-Library]<br /> <br /> == General Resources == <br /> <br /> Resources that assume little to no background knowledge:<br /> * https://www.hoppersroppers.org/training.html<br /> * https://tryhackme.com/<br /> <br /> Resources that assume minimal tech background:<br /> * (book) Penetration Testing: A Hands-On Introduction to Hacking<br /> * Bassterlord Networking Manual (translated): https://papers.vx-underground.org/papers/VXUG/Mirrors/BassterlordNetworkingManual.pdf<br /> <br /> Resources that assume a tech or hacking background:<br /> * (book) The Hacker Playbook 3<br /> * books by [https://b-ok.cc/g/Sparc%20Flow Sparc Flow]<br /> * [[Hack Back! A DIY Guide]]<br /> * https://github.com/ForbiddenProgrammer/conti-pentester-guide-leak<br /> ** translated: https://s3.amazonaws.com/talos-intelligence-site/production/document_files/files/000/095/639/original/Conti_playbook_translated.pdf<br /> <br /> Practice labs:<br /> * https://www.hackthebox.com/<br /> * https://www.pentesteracademy.com/<br /> * https://lab.pentestit.ru/<br /> * https://overthewire.org/wargames/<br /> <br /> General references:<br /> * https://www.ired.team/<br /> * http://pwnwiki.io/<br /> * https://dmcxblue.gitbook.io/red-team-notes-2-0/<br /> * https://github.com/swisskyrepo/PayloadsAllTheThings<br /> * https://github.com/S3cur3Th1sSh1t/Pentest-Tools<br /> <br /> == Active Directory ==<br /> <br /> * [https://github.com/swisskyrepo/PayloadsAllTheThings/blob/master/Methodology%20and%20Resources/Active%20Directory%20Attack.md An excellent practical reference]<br /> * [https://github.com/Integration-IT/Active-Directory-Exploitation-Cheat-Sheet A practical reference focused on powershell]<br /> * https://gist.github.com/TarlogicSecurity/2f221924fef8c14a1d8e29f3cb5c5c4a<br /> * https://m0chan.github.io/2019/07/30/Windows-Notes-and-Cheatsheet.html<br /> * https://casvancooten.com/posts/2020/11/windows-active-directory-exploitation-cheat-sheet-and-command-reference/<br /> * https://github.com/S1ckB0y1337/Active-Directory-Exploitation-Cheat-Sheet<br /> * https://wadcoms.github.io/<br /> * https://www.blackhillsinfosec.com/webcast-attack-tactics-5-zero-to-hero-attack/<br /> * https://byt3bl33d3r.github.io/practical-guide-to-ntlm-relaying-in-2017-aka-getting-a-foothold-in-under-5-minutes.html<br /> * https://s3cur3th1ssh1t.github.io/The-most-common-on-premise-vulnerabilities-and-misconfigurations/<br /> * A very thorough technical background: https://zer1t0.gitlab.io/posts/attacking_ad/<br /> * kerberos background: https://www.tarlogic.com/blog/how-kerberos-works/<br /> * A good overview of different lateral movement techniques: https://hackmag.com/security/lateral-guide/<br /> <br /> === Tools ===<br /> * https://mpgn.gitbook.io/crackmapexec/<br /> * https://www.secureauth.com/labs/open-source-tools/impacket/<br /> * https://github.com/dirkjanm/mitm6<br /> * https://github.com/lgandx/Responder<br /> * https://github.com/FuzzySecurity/StandIn<br /> * https://www.joeware.net/freetools/tools/adfind/<br /> * https://github.com/CravateRouge/bloodyAD<br /> * Powerview/Sharpview<br /> * Bloodhound/Sharphound<br /> <br /> == Office 365 &amp; Azure ==<br /> * Extremely in-depth technical info on everything https://o365blog.com/<br /> * https://www.synacktiv.com/en/publications/azure-ad-introduction-for-red-teamers.html<br /> * https://blog.xpnsec.com/azuread-connect-for-redteam/<br /> * https://www.blackhillsinfosec.com/webcast-getting-started-in-pentesting-the-cloud-azure/<br /> * https://github.com/dafthack/CloudPentestCheatsheets/blob/master/cheatsheets/Azure.md<br /> <br /> === Tools ===<br /> * https://github.com/nyxgeek/o365recon<br /> * https://github.com/dirkjanm/ROADtools<br /> * https://github.com/fox-it/adconnectdump<br /> * https://github.com/LMGsec/o365creeper<br /> * https://bloodhound.readthedocs.io/en/latest/data-collection/azurehound.html<br /> * https://github.com/rvrsh3ll/TokenTactics<br /> * https://github.com/nyxgeek/onedrive_user_enum<br /> * https://github.com/dafthack/MSOLSpray<br /> * https://github.com/dafthack/MFASweep<br /> <br /> == GSuite ==<br /> https://www.slideshare.net/dafthack/ok-google-how-do-i-red-team-gsuite<br /> <br /> == C2 Frameworks ==<br /> <br /> * https://docs.google.com/spreadsheets/d/1b4mUxa6cDQuTV2BPC6aA-GR4zGZi0ooPYtBe4IgPsSc<br /> <br /> == Antivirus &amp; EDR Evasion ==<br /> <br /> * https://s3cur3th1ssh1t.github.io/Bypass_AMSI_by_manual_modification/<br /> * https://s3cur3th1ssh1t.github.io/Customizing_C2_Frameworks/<br /> * https://s3cur3th1ssh1t.github.io/Powershell-and-the-.NET-AMSI-Interface/<br /> * https://www.blackhillsinfosec.com/tag/sacred-cash-cow-tipping/<br /> * https://blog.securityevaluators.com/creating-av-resistant-malware-part-1-7604b83ea0c0<br /> * https://www.ired.team/offensive-security/defense-evasion<br /> * https://www.youtube.com/watch?v=UO3PjJIiBIE<br /> * https://github.com/matterpreter/DefenderCheck<br /> * https://github.com/RythmStick/AMSITrigger<br /> * https://amsi.fail<br /> <br /> == VMware ==<br /> * https://github.com/HynekPetrak/HynekPetrak/blob/master/take_over_vcenter_670.md<br /> <br /> == RocketChat ==<br /> * Account hijacking and RCE as admin: https://edbrsk.dev/content/real-cases/how-I-compromised-300-stores-and-a-spanish-consultancy<br /> <br /> == Initial Access == <br /> <br /> === Phishing ===<br /> * https://0xboku.com/2021/07/12/ArtOfDeviceCodePhish.html<br /> * https://medium.com/maltrak/com-objects-p-2-your-stealthy-fileless-attack-bf78318d9165<br /> * https://infosecwriteups.com/recipe-for-a-successful-phishing-campaign-part-1-2-dc23d927ec55<br /> * https://www.xanthus.io/mastering-the-simulated-phishing-attack<br /> * https://github.com/Arno0x/EmbedInHTML<br /> * https://github.com/L4bF0x/PhishingPretexts<br /> * http://lockboxx.blogspot.com/2018/12/gophish-evilginx2-for-phishing.html<br /> * https://book.hacktricks.xyz/phishing-methodology<br /> <br /> === Password spraying ===<br /> * https://github.com/dafthack/MSOLSpray<br /> * https://pentestlab.blog/2019/09/05/microsoft-exchange-password-spraying/<br /> <br /> == Scanning and Recon ==<br /> * https://github.com/robertdavidgraham/masscan<br /> * https://github.com/projectdiscovery/naabu<br /> * https://github.com/OWASP/Amass<br /> * https://www.shodan.io/<br /> * https://www.zoomeye.org/<br /> <br /> == Opsec ==<br /> * https://www.qubes-os.org/<br /> * https://www.whonix.org/<br /> * https://tails.boum.org/<br /> * The whonix wiki has lots of great info on anonymity even if you're not using whonix: https://www.whonix.org/wiki/Documentation<br /> * https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TransparentProxy<br /> * https://veracrypt.fr/</div>

Amongomous https://enlacehacktivista.org/index.php?title=Learn_to_hack&diff=342 2022-01-29T02:01:40Z

<p>Amongomous: </p> <hr /> <div>This page aims to compile high quality resources for hackers. All books listed on this page can be found on [https://libgen.fun/ Library Genesis] and [https://z-lib.org/ Z-Library]<br /> <br /> == General Resources == <br /> <br /> Resources that assume little to no background knowledge:<br /> * https://www.hoppersroppers.org/training.html<br /> * https://tryhackme.com/<br /> <br /> Resources that assume minimal tech background:<br /> * (book) Penetration Testing: A Hands-On Introduction to Hacking<br /> * Bassterlord Networking Manual (translated): https://papers.vx-underground.org/papers/VXUG/Mirrors/BassterlordNetworkingManual.pdf<br /> <br /> Resources that assume a tech or hacking background:<br /> * (book) The Hacker Playbook 3<br /> * books by [https://b-ok.cc/g/Sparc%20Flow Sparc Flow]<br /> * [[Hack Back! A DIY Guide]]<br /> * https://github.com/ForbiddenProgrammer/conti-pentester-guide-leak<br /> ** translated: https://s3.amazonaws.com/talos-intelligence-site/production/document_files/files/000/095/639/original/Conti_playbook_translated.pdf<br /> <br /> Practice labs:<br /> * https://www.hackthebox.com/<br /> * https://www.pentesteracademy.com/<br /> * https://lab.pentestit.ru/<br /> * https://overthewire.org/wargames/<br /> <br /> General references:<br /> * https://www.ired.team/<br /> * http://pwnwiki.io/<br /> * https://dmcxblue.gitbook.io/red-team-notes-2-0/<br /> * https://github.com/swisskyrepo/PayloadsAllTheThings<br /> * https://github.com/S3cur3Th1sSh1t/Pentest-Tools<br /> <br /> == Active Directory ==<br /> <br /> * [https://github.com/swisskyrepo/PayloadsAllTheThings/blob/master/Methodology%20and%20Resources/Active%20Directory%20Attack.md An excellent practical reference]<br /> * [https://github.com/Integration-IT/Active-Directory-Exploitation-Cheat-Sheet A practical reference focused on powershell]<br /> * https://gist.github.com/TarlogicSecurity/2f221924fef8c14a1d8e29f3cb5c5c4a<br /> * https://m0chan.github.io/2019/07/30/Windows-Notes-and-Cheatsheet.html<br /> * https://casvancooten.com/posts/2020/11/windows-active-directory-exploitation-cheat-sheet-and-command-reference/<br /> * https://github.com/S1ckB0y1337/Active-Directory-Exploitation-Cheat-Sheet<br /> * https://wadcoms.github.io/<br /> * https://www.blackhillsinfosec.com/webcast-attack-tactics-5-zero-to-hero-attack/<br /> * https://byt3bl33d3r.github.io/practical-guide-to-ntlm-relaying-in-2017-aka-getting-a-foothold-in-under-5-minutes.html<br /> * https://s3cur3th1ssh1t.github.io/The-most-common-on-premise-vulnerabilities-and-misconfigurations/<br /> * A very thorough technical background: https://zer1t0.gitlab.io/posts/attacking_ad/<br /> * kerberos background: https://www.tarlogic.com/blog/how-kerberos-works/<br /> * A good overview of different lateral movement techniques: https://hackmag.com/security/lateral-guide/<br /> <br /> === Tools ===<br /> * https://mpgn.gitbook.io/crackmapexec/<br /> * https://www.secureauth.com/labs/open-source-tools/impacket/<br /> * https://github.com/dirkjanm/mitm6<br /> * https://github.com/lgandx/Responder<br /> * https://github.com/FuzzySecurity/StandIn<br /> * https://www.joeware.net/freetools/tools/adfind/<br /> * https://github.com/CravateRouge/bloodyAD<br /> * Powerview/Sharpview<br /> * Bloodhound/Sharphound<br /> <br /> == Office 365 &amp; Azure ==<br /> * Extremely in-depth technical info on everything https://o365blog.com/<br /> * https://www.synacktiv.com/en/publications/azure-ad-introduction-for-red-teamers.html<br /> * https://blog.xpnsec.com/azuread-connect-for-redteam/<br /> * https://www.blackhillsinfosec.com/webcast-getting-started-in-pentesting-the-cloud-azure/<br /> * https://github.com/dafthack/CloudPentestCheatsheets/blob/master/cheatsheets/Azure.md<br /> <br /> === Tools ===<br /> * https://github.com/nyxgeek/o365recon<br /> * https://github.com/dirkjanm/ROADtools<br /> * https://github.com/fox-it/adconnectdump<br /> * https://github.com/LMGsec/o365creeper<br /> * https://bloodhound.readthedocs.io/en/latest/data-collection/azurehound.html<br /> * https://github.com/rvrsh3ll/TokenTactics<br /> * https://github.com/nyxgeek/onedrive_user_enum<br /> * https://github.com/dafthack/MSOLSpray<br /> * https://github.com/dafthack/MFASweep<br /> <br /> == GSuite ==<br /> https://www.slideshare.net/dafthack/ok-google-how-do-i-red-team-gsuite<br /> <br /> == C2 Frameworks ==<br /> <br /> * https://docs.google.com/spreadsheets/d/1b4mUxa6cDQuTV2BPC6aA-GR4zGZi0ooPYtBe4IgPsSc<br /> <br /> == Antivirus &amp; EDR Evasion ==<br /> <br /> * https://s3cur3th1ssh1t.github.io/Bypass_AMSI_by_manual_modification/<br /> * https://s3cur3th1ssh1t.github.io/Customizing_C2_Frameworks/<br /> * https://s3cur3th1ssh1t.github.io/Powershell-and-the-.NET-AMSI-Interface/<br /> * https://www.blackhillsinfosec.com/tag/sacred-cash-cow-tipping/<br /> * https://blog.securityevaluators.com/creating-av-resistant-malware-part-1-7604b83ea0c0<br /> * https://www.ired.team/offensive-security/defense-evasion<br /> * https://www.youtube.com/watch?v=UO3PjJIiBIE<br /> * https://github.com/matterpreter/DefenderCheck<br /> * https://github.com/RythmStick/AMSITrigger<br /> * https://amsi.fail<br /> <br /> == VMWare ==<br /> <br /> * [https://github.com/HynekPetrak/HynekPetrak/blob/master/take_over_vcenter_670.md Taking over VMware Vcenter 6.7.0 or 7.0]<br /> <br /> == RocketChat ==<br /> * Account hijacking and RCE as admin: [https://edbrsk.dev/content/real-cases/how-I-compromised-300-stores-and-a-spanish-consultancy The story about how I compromised 300 stores, and a “Spanish consultancy”]<br /> <br /> == Initial Access == <br /> <br /> === Phishing ===<br /> * https://0xboku.com/2021/07/12/ArtOfDeviceCodePhish.html<br /> * https://medium.com/maltrak/com-objects-p-2-your-stealthy-fileless-attack-bf78318d9165<br /> * https://infosecwriteups.com/recipe-for-a-successful-phishing-campaign-part-1-2-dc23d927ec55<br /> * https://www.xanthus.io/mastering-the-simulated-phishing-attack<br /> * https://github.com/Arno0x/EmbedInHTML<br /> * https://github.com/L4bF0x/PhishingPretexts<br /> * http://lockboxx.blogspot.com/2018/12/gophish-evilginx2-for-phishing.html<br /> * https://book.hacktricks.xyz/phishing-methodology<br /> <br /> === Password spraying ===<br /> * https://github.com/dafthack/MSOLSpray<br /> * https://pentestlab.blog/2019/09/05/microsoft-exchange-password-spraying/<br /> <br /> == Scanning and Recon ==<br /> * https://github.com/robertdavidgraham/masscan<br /> * https://github.com/projectdiscovery/naabu<br /> * https://github.com/OWASP/Amass<br /> * https://www.shodan.io/<br /> * https://www.zoomeye.org/<br /> <br /> == Opsec ==<br /> * https://www.qubes-os.org/<br /> * https://www.whonix.org/<br /> * https://tails.boum.org/<br /> * The whonix wiki has lots of great info on anonymity even if you're not using whonix: https://www.whonix.org/wiki/Documentation<br /> * https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TransparentProxy<br /> * https://veracrypt.fr/</div>

Amongomous https://enlacehacktivista.org/index.php?title=Academy_of_Public_Administration_(Belarus)&diff=341 2022-01-26T01:53:05Z

<p>Amongomous: </p> <hr /> <div>Two hacks wiping and encrypting the internal network of the Academy of Public Administration in Belarus, by [[Cyber Partisans]].<br /> <br /> * Video of the second hack: https://www.youtube.com/watch?v=8l4etG0YKKQ<br /> <br /> == Explanation of the Hack ==<br /> <br /> According to an incident report leaked by the hackers themselves during the second hack, they gained initial access using the CVE-2019-0708 BlueKeep exploit on an unpatched Windows 2008 server that had RDP exposed to the internet. They proceeded to dump local user credentials using [https://github.com/swisskyrepo/PayloadsAllTheThings/blob/87be30d3b286677d878f98b7f49b81844fb7f474/Methodology%20and%20Resources/Windows%20-%20Mimikatz.md mimikatz], tunneled out using [https://github.com/jpillora/chisel chisel] and [https://github.com/3proxy/3proxy 3proxy] to use RDP and [https://github.com/swisskyrepo/PayloadsAllTheThings/blob/1a3058f40c145a7c97fc71444cf3f1f38e3b4614/Methodology%20and%20Resources/Windows%20-%20Using%20credentials.md#psexecpy--smbexecpy--wmiexecpy psexec.py] for lateral movement on the internal network until landing on and taking over the domain controller. They then deleted data from both live and backup systems.<br /> <br /> https://www.curatedintel.org/2022/01/hacktivist-group-shares-details-related.html<br /> <br /> [[Category:Hacks]]</div>

Amongomous https://enlacehacktivista.org/index.php?title=Academy_of_Public_Administration_(Belarus)&diff=340 2022-01-26T01:51:31Z

<p>Amongomous: /* Explanation of the Hack */</p> <hr /> <div>Two hacks wiping and encrypting the internal network of the Academy of Public Administration in Belarus, by [[Cyber Partisans]].<br /> <br /> * Video of the second hack: https://www.youtube.com/watch?v=8l4etG0YKKQ<br /> <br /> == Explanation of the Hack ==<br /> <br /> According to an incident report leaked by the hackers themselves during the second hack, they gained initial access using the CVE-2019-0708 BlueKeep exploit on an unpatched Windows 2008 server that had RDP exposed to the internet (on a non-standard port.) They proceeded to dump local user credentials using [https://github.com/swisskyrepo/PayloadsAllTheThings/blob/87be30d3b286677d878f98b7f49b81844fb7f474/Methodology%20and%20Resources/Windows%20-%20Mimikatz.md mimikatz], tunneled out using [https://github.com/jpillora/chisel chisel] and [https://github.com/3proxy/3proxy 3proxy] to use RDP and [https://github.com/swisskyrepo/PayloadsAllTheThings/blob/1a3058f40c145a7c97fc71444cf3f1f38e3b4614/Methodology%20and%20Resources/Windows%20-%20Using%20credentials.md#psexecpy--smbexecpy--wmiexecpy psexec.py] for lateral movement on the internal network until landing on and taking over the domain controller. They then deleted data from both live and backup systems.<br /> <br /> https://www.curatedintel.org/2022/01/hacktivist-group-shares-details-related.html<br /> <br /> [[Category:Hacks]]</div>

Amongomous https://enlacehacktivista.org/index.php?title=Cyber_Partisans&diff=339 2022-01-26T01:19:46Z

<p>Amongomous: </p> <hr /> <div>Cyber Partisans (Кибер-Партизаны) is a Belarusian hacktivist collective known for its attacks against the Belarusian government after the 2020 presidential election and subsequent protests.<br /> <br /> * Telegram channel: http://t.me/cpartisans<br /> * Release telegram channel: https://t.me/cpartisans_dumps<br /> * Twitter: https://twitter.com/cpartisans<br /> * Youtube: https://www.youtube.com/c/cpartisans<br /> * Manifesto: https://telegra.ph/Supratsiu-Manifesto-08-24<br /> * List of previous actions: https://telegra.ph/Spisok-akcij-i-prodelannoj-raboty-dvizheniya-Suprac%D1%96%D1%9E-05-20<br /> <br /> == Media Coverage ==<br /> <br /> * [https://www.bloomberg.com/news/articles/2021-08-24/belarus-hackers-seek-to-overthrow-local-government Bloomberg News: Hackers Release Data Trove From Belarus in Bid to Overthrow Lukashenko Regime]<br /> * [https://www.technologyreview.com/2021/08/26/1033205/belarus-cyber-partisans-lukashenko-hack-opposition/ MIT Technology Review: Hackers are trying to topple Belarus’s dictator, with help from the inside]<br /> <br /> [[Category:Hackers]]</div>

Amongomous https://enlacehacktivista.org/index.php?title=Cyber_Partisans&diff=338 2022-01-26T01:14:29Z

<p>Amongomous: </p> <hr /> <div>Cyber Partisans (Belarusian: кіберпартызаны, Russian: киберпартизаны) is a Belarusian hacktivist collective known for its attacks against the Belarusian government after the 2020 presidential election and subsequent protests.<br /> <br /> * Telegram channel: http://t.me/cpartisans<br /> * Twitter: https://twitter.com/cpartisans<br /> * Youtube: https://www.youtube.com/c/cpartisans<br /> * Manifesto: https://telegra.ph/Supratsiu-Manifesto-08-24<br /> <br /> == Media Coverage ==<br /> <br /> * [https://www.bloomberg.com/news/articles/2021-08-24/belarus-hackers-seek-to-overthrow-local-government Bloomberg News: Hackers Release Data Trove From Belarus in Bid to Overthrow Lukashenko Regime]<br /> * [https://www.technologyreview.com/2021/08/26/1033205/belarus-cyber-partisans-lukashenko-hack-opposition/ MIT Technology Review: Hackers are trying to topple Belarus’s dictator, with help from the inside]<br /> <br /> [[Category:Hackers]]</div>

Amongomous https://enlacehacktivista.org/index.php?title=Belarusian_Railway&diff=337 2022-01-26T00:49:09Z

<p>Amongomous: Created page with &quot;Hack of Belarusian Railway meant to disrupt the movement of Russian troops into Belarus and demanding the release of political prisoners in exchange for ransomware decryption keys, by Cyber Partisans. * https://www.reuters.com/legal/litigation/belarusian-group-claims-hack-railway-system-after-russian-troop-moves-2022-01-24/ * https://www.bloomberg.com/news/articles/2022-01-24/hackers-say-they-breached-belarusian-rail-to-stop-russian-troops == Explanation of the Hac...&quot;</p> <hr /> <div>Hack of Belarusian Railway meant to disrupt the movement of Russian troops into Belarus and demanding the release of political prisoners in exchange for ransomware decryption keys, by [[Cyber Partisans]].<br /> <br /> * https://www.reuters.com/legal/litigation/belarusian-group-claims-hack-railway-system-after-russian-troop-moves-2022-01-24/<br /> * https://www.bloomberg.com/news/articles/2022-01-24/hackers-say-they-breached-belarusian-rail-to-stop-russian-troops<br /> <br /> == Explanation of the Hack ==<br /> <br /> According to the hackers, they used similar methods during their previous hack of the [[Academy of Public Administration (Belarus)|Academy of Public Administration]].<br /> <br /> https://www.curatedintel.org/2022/01/hacktivist-group-shares-details-related.html<br /> <br /> [[Category:Hacks]]</div>

Amongomous https://enlacehacktivista.org/index.php?title=Hacker_History&diff=336 2022-01-26T00:38:27Z

<p>Amongomous: /* 2022 */</p> <hr /> <div>==2008==<br /> * [[Sarah Palin emails]]<br /> <br /> == 2010 ==<br /> * [[SRS Electronic Declaration System]]<br /> * [[Operation Payback]]<br /> <br /> == 2011 ==<br /> * [[Chinga la Migra]]<br /> * [[CorruptBrazil]]<br /> * [[Fuck FBI Friday]]<br /> * [[HBGary]]<br /> * [[LeakyMails]]<br /> * [[Shooting Sheriffs Saturday]]<br /> * [[Sownage]]<br /> * [[Stratfor]]<br /> <br /> == 2012 ==<br /> * [[Apple UDIDs]]<br /> * [[CSLEA]]<br /> * [[Norton AntiVirus]]<br /> * [[Syria emails]]<br /> * [[Bureau Of Justice]]<br /> <br /> == 2013 ==<br /> * [[Project AIG]]<br /> <br /> == 2014 ==<br /> * [[LulzSecPeru]]<br /> * [[Gamma Group]]<br /> * [[Russian Interior Ministry]]<br /> <br /> == 2015 ==<br /> * [[wikipedia:Football Leaks]]<br /> * [[Hacking Team]]<br /> <br /> == 2016 ==<br /> * [[Berat Albayrak Emails]]<br /> * [[Panama Papers]]<br /> * [[Surkov Leaks]]<br /> <br /> == 2017 ==<br /> * [[Bob Otto emails]]<br /> * [[Cellebrite]]<br /> * [[Flexispy]]<br /> * [[Freedom Hosting II]]<br /> <br /> == 2018 ==<br /> * [[Salvini emails]]<br /> * [[Doxxing-Adventskalender]]<br /> <br /> == 2019 ==<br /> * [[GorraLeaks]]<br /> * [[Paco Leaks]]<br /> * [[Milico Leaks]]<br /> * [[Capital One]]<br /> * [[Perceptics]]<br /> * [[Cayman National Bank and Trust (Isle of Man)]]<br /> * [[Iron March]]<br /> * [[Varela Leaks]]<br /> <br /> == 2020 ==<br /> * [[Luanda Leaks]]<br /> * [[BlueLeaks]]<br /> * [[Intel exconfidential Lake]]<br /> <br /> == 2021 ==<br /> * [[Gab]]<br /> * [[Myanmar Investments]]<br /> * [[American Patriots Three Percent‎]]<br /> * [[Verkada]]<br /> * [[Sons of Confederate Veterans]]<br /> * [[MagaCoin]]<br /> * [[Electronic Arts]]<br /> * [[Tea Party Patriots]]<br /> * [[Cyber Partisans]]<br /> * [[HART]]<br /> * [[Policía Nacional Civil de El Salvador]]<br /> * [[Epik]]<br /> * [[Oath Keepers]]<br /> * [[America's Frontline Doctors]]<br /> * [[Twitch]]<br /> * [[Attila Hildmann‎]]<br /> * [[Metropolitan Police Department D.C.]]<br /> * [[Academy of Public Administration (Belarus)]]<br /> * [[AnibalLeaks]]<br /> <br /> == 2022 ==<br /> * [[Patriot Front]]<br /> * [[Belarusian Railway]]</div>

Amongomous https://enlacehacktivista.org/index.php?title=Hacker_History&diff=335 2022-01-26T00:37:45Z

<p>Amongomous: /* 2021 */</p> <hr /> <div>==2008==<br /> * [[Sarah Palin emails]]<br /> <br /> == 2010 ==<br /> * [[SRS Electronic Declaration System]]<br /> * [[Operation Payback]]<br /> <br /> == 2011 ==<br /> * [[Chinga la Migra]]<br /> * [[CorruptBrazil]]<br /> * [[Fuck FBI Friday]]<br /> * [[HBGary]]<br /> * [[LeakyMails]]<br /> * [[Shooting Sheriffs Saturday]]<br /> * [[Sownage]]<br /> * [[Stratfor]]<br /> <br /> == 2012 ==<br /> * [[Apple UDIDs]]<br /> * [[CSLEA]]<br /> * [[Norton AntiVirus]]<br /> * [[Syria emails]]<br /> * [[Bureau Of Justice]]<br /> <br /> == 2013 ==<br /> * [[Project AIG]]<br /> <br /> == 2014 ==<br /> * [[LulzSecPeru]]<br /> * [[Gamma Group]]<br /> * [[Russian Interior Ministry]]<br /> <br /> == 2015 ==<br /> * [[wikipedia:Football Leaks]]<br /> * [[Hacking Team]]<br /> <br /> == 2016 ==<br /> * [[Berat Albayrak Emails]]<br /> * [[Panama Papers]]<br /> * [[Surkov Leaks]]<br /> <br /> == 2017 ==<br /> * [[Bob Otto emails]]<br /> * [[Cellebrite]]<br /> * [[Flexispy]]<br /> * [[Freedom Hosting II]]<br /> <br /> == 2018 ==<br /> * [[Salvini emails]]<br /> * [[Doxxing-Adventskalender]]<br /> <br /> == 2019 ==<br /> * [[GorraLeaks]]<br /> * [[Paco Leaks]]<br /> * [[Milico Leaks]]<br /> * [[Capital One]]<br /> * [[Perceptics]]<br /> * [[Cayman National Bank and Trust (Isle of Man)]]<br /> * [[Iron March]]<br /> * [[Varela Leaks]]<br /> <br /> == 2020 ==<br /> * [[Luanda Leaks]]<br /> * [[BlueLeaks]]<br /> * [[Intel exconfidential Lake]]<br /> <br /> == 2021 ==<br /> * [[Gab]]<br /> * [[Myanmar Investments]]<br /> * [[American Patriots Three Percent‎]]<br /> * [[Verkada]]<br /> * [[Sons of Confederate Veterans]]<br /> * [[MagaCoin]]<br /> * [[Electronic Arts]]<br /> * [[Tea Party Patriots]]<br /> * [[Cyber Partisans]]<br /> * [[HART]]<br /> * [[Policía Nacional Civil de El Salvador]]<br /> * [[Epik]]<br /> * [[Oath Keepers]]<br /> * [[America's Frontline Doctors]]<br /> * [[Twitch]]<br /> * [[Attila Hildmann‎]]<br /> * [[Metropolitan Police Department D.C.]]<br /> * [[Academy of Public Administration (Belarus)]]<br /> * [[AnibalLeaks]]<br /> <br /> == 2022 ==<br /> * [[Patriot Front]]</div>

Amongomous https://enlacehacktivista.org/index.php?title=Academy_of_Public_Administration_(Belarus)&diff=334 2022-01-26T00:37:00Z

<p>Amongomous: Created page with &quot;Two hacks wiping and encrypting the internal network of the Academy of Public Administration in Belarus, by Cyber Partisans. * Video of the second hack: https://www.youtube.com/watch?v=8l4etG0YKKQ == Explanation of the Hack == According to an incident report leaked by the hackers themselves during the second hack, they gained initial access using the CVE-2019-0708 BlueKeep exploit in an unpatched Windows 2008 server that had its RDP port exposed to the internet. T...&quot;</p> <hr /> <div>Two hacks wiping and encrypting the internal network of the Academy of Public Administration in Belarus, by [[Cyber Partisans]].<br /> <br /> * Video of the second hack: https://www.youtube.com/watch?v=8l4etG0YKKQ<br /> <br /> == Explanation of the Hack ==<br /> <br /> According to an incident report leaked by the hackers themselves during the second hack, they gained initial access using the CVE-2019-0708 BlueKeep exploit in an unpatched Windows 2008 server that had its RDP port exposed to the internet. They proceeded to dump local user credentials using [https://github.com/swisskyrepo/PayloadsAllTheThings/blob/87be30d3b286677d878f98b7f49b81844fb7f474/Methodology%20and%20Resources/Windows%20-%20Mimikatz.md#mimikatz---mini-dump mimikatz], tunneled out using [https://github.com/jpillora/chisel chisel] and [https://github.com/3proxy/3proxy 3proxy] to use RDP and [https://github.com/swisskyrepo/PayloadsAllTheThings/blob/1a3058f40c145a7c97fc71444cf3f1f38e3b4614/Methodology%20and%20Resources/Windows%20-%20Using%20credentials.md#psexecpy--smbexecpy--wmiexecpy psexec.py] for lateral movement on the internal network until landing on and taking over the domain controller. They then deleted data from both live and backup systems.<br /> <br /> https://www.curatedintel.org/2022/01/hacktivist-group-shares-details-related.html<br /> <br /> [[Category:Hacks]]</div>

Amongomous https://enlacehacktivista.org/index.php?title=Hacker_History&diff=333 2022-01-22T06:52:35Z

<p>Amongomous: /* 2021 */</p> <hr /> <div>==2008==<br /> * [[Sarah Palin emails]]<br /> <br /> == 2010 ==<br /> * [[SRS Electronic Declaration System]]<br /> * [[Operation Payback]]<br /> <br /> == 2011 ==<br /> * [[Chinga la Migra]]<br /> * [[CorruptBrazil]]<br /> * [[Fuck FBI Friday]]<br /> * [[HBGary]]<br /> * [[LeakyMails]]<br /> * [[Shooting Sheriffs Saturday]]<br /> * [[Sownage]]<br /> * [[Stratfor]]<br /> <br /> == 2012 ==<br /> * [[Apple UDIDs]]<br /> * [[CSLEA]]<br /> * [[Norton AntiVirus]]<br /> * [[Syria emails]]<br /> * [[Bureau Of Justice]]<br /> <br /> == 2013 ==<br /> * [[Project AIG]]<br /> <br /> == 2014 ==<br /> * [[LulzSecPeru]]<br /> * [[Gamma Group]]<br /> * [[Russian Interior Ministry]]<br /> <br /> == 2015 ==<br /> * [[wikipedia:Football Leaks]]<br /> * [[Hacking Team]]<br /> <br /> == 2016 ==<br /> * [[Berat Albayrak Emails]]<br /> * [[Panama Papers]]<br /> * [[Surkov Leaks]]<br /> <br /> == 2017 ==<br /> * [[Bob Otto emails]]<br /> * [[Cellebrite]]<br /> * [[Flexispy]]<br /> * [[Freedom Hosting II]]<br /> <br /> == 2018 ==<br /> * [[Salvini emails]]<br /> * [[Doxxing-Adventskalender]]<br /> <br /> == 2019 ==<br /> * [[GorraLeaks]]<br /> * [[Paco Leaks]]<br /> * [[Milico Leaks]]<br /> * [[Capital One]]<br /> * [[Perceptics]]<br /> * [[Cayman National Bank and Trust (Isle of Man)]]<br /> * [[Iron March]]<br /> * [[Varela Leaks]]<br /> <br /> == 2020 ==<br /> * [[Luanda Leaks]]<br /> * [[BlueLeaks]]<br /> * [[Intel exconfidential Lake]]<br /> <br /> == 2021 ==<br /> * [[Gab]]<br /> * [[Myanmar Investments]]<br /> * [[American Patriots Three Percent‎]]<br /> * [[Verkada]]<br /> * [[Sons of Confederate Veterans]]<br /> * [[MagaCoin]]<br /> * [[Electronic Arts]]<br /> * [[Tea Party Patriots]]<br /> * [[Cyber Partisans]]<br /> * [[HART]]<br /> * [[Policía Nacional Civil de El Salvador]]<br /> * [[Epik]]<br /> * [[Oath Keepers]]<br /> * [[America's Frontline Doctors]]<br /> * [[Twitch]]<br /> * [[Attila Hildmann‎]]<br /> * [[Metropolitan Police Department D.C.]]<br /> * [[AnibalLeaks]]<br /> <br /> == 2022 ==<br /> * [[Patriot Front]]</div>

Amongomous https://enlacehacktivista.org/index.php?title=Hacker_History&diff=332 2022-01-22T06:50:49Z

<p>Amongomous: /* 2019 */</p> <hr /> <div>==2008==<br /> * [[Sarah Palin emails]]<br /> <br /> == 2010 ==<br /> * [[SRS Electronic Declaration System]]<br /> * [[Operation Payback]]<br /> <br /> == 2011 ==<br /> * [[Chinga la Migra]]<br /> * [[CorruptBrazil]]<br /> * [[Fuck FBI Friday]]<br /> * [[HBGary]]<br /> * [[LeakyMails]]<br /> * [[Shooting Sheriffs Saturday]]<br /> * [[Sownage]]<br /> * [[Stratfor]]<br /> <br /> == 2012 ==<br /> * [[Apple UDIDs]]<br /> * [[CSLEA]]<br /> * [[Norton AntiVirus]]<br /> * [[Syria emails]]<br /> * [[Bureau Of Justice]]<br /> <br /> == 2013 ==<br /> * [[Project AIG]]<br /> <br /> == 2014 ==<br /> * [[LulzSecPeru]]<br /> * [[Gamma Group]]<br /> * [[Russian Interior Ministry]]<br /> <br /> == 2015 ==<br /> * [[wikipedia:Football Leaks]]<br /> * [[Hacking Team]]<br /> <br /> == 2016 ==<br /> * [[Berat Albayrak Emails]]<br /> * [[Panama Papers]]<br /> * [[Surkov Leaks]]<br /> <br /> == 2017 ==<br /> * [[Bob Otto emails]]<br /> * [[Cellebrite]]<br /> * [[Flexispy]]<br /> * [[Freedom Hosting II]]<br /> <br /> == 2018 ==<br /> * [[Salvini emails]]<br /> * [[Doxxing-Adventskalender]]<br /> <br /> == 2019 ==<br /> * [[GorraLeaks]]<br /> * [[Paco Leaks]]<br /> * [[Milico Leaks]]<br /> * [[Capital One]]<br /> * [[Perceptics]]<br /> * [[Cayman National Bank and Trust (Isle of Man)]]<br /> * [[Iron March]]<br /> * [[Varela Leaks]]<br /> <br /> == 2020 ==<br /> * [[Luanda Leaks]]<br /> * [[BlueLeaks]]<br /> * [[Intel exconfidential Lake]]<br /> <br /> == 2021 ==<br /> * [[Gab]]<br /> * [[Myanmar Investments]]<br /> * [[American Patriots Three Percent‎]]<br /> * [[Verkada]]<br /> * [[Sons of Confederate Veterans]]<br /> * [[MagaCoin]]<br /> * [[Electronic Arts]]<br /> * [[Tea Party Patriots]]<br /> * [[Cyber Partisans]]<br /> * [[HART]]<br /> * [[Policía Nacional Civil de El Salvador]]<br /> * [[Epik]]<br /> * [[Oath Keepers]]<br /> * [[America's Frontline Doctors]]<br /> * [[Twitch]]<br /> * [[Attila Hildmann‎]]<br /> * [[AnibalLeaks]]<br /> <br /> == 2022 ==<br /> * [[Patriot Front]]</div>

Amongomous https://enlacehacktivista.org/index.php?title=Myanmar_Investments&diff=331 2022-01-22T06:27:13Z

<p>Amongomous: /* Media Coverage */</p> <hr /> <div>Hack of thousands of documents from the Myanmar Investment Commission following the 2021 coup d'état and protests by Sugondese separatist Bofa. <br /> <br /> * https://ddosecrets.com/wiki/Myanmar_Investments<br /> * [https://bofa.substack.com/p/full-disclosure-dica-ims-privilege Statement from the hacker (English)]<br /> * [https://bofa.substack.com/p/-dica-ims-privilege-escalation-exploit Statement from the hacker (Burmese)]<br /> <br /> == Explanation of the Hack ==<br /> <br /> The hacker breached a low-privileged account to gain access to a web-based investment management portal. <br /> <br /> She then exploited a broken access control vulnerability to create a new admin account with full access to the leaked documents.<br /> <br /> == Media Coverage ==<br /> <br /> * [https://www.justiceformyanmar.org/stories/how-hundreds-of-millions-of-dollars-from-mytel-consumers-will-flow-to-military-generals How hundreds of millions of dollars from Mytel subscribers will flow to military generals]<br /> * [https://www.justiceformyanmar.org/stories/mapping-the-myanmar-military-cartels-global-reach-through-posco Mapping the Myanmar Military Cartel’s global reach through POSCO]<br /> * [https://www.justiceformyanmar.org/stories/land-lease-payments-tie-japanese-gov-and-investors-to-myanmars-military Land lease payments tie Japanese gov and investors to Myanmar's military]<br /> * [https://www.justiceformyanmar.org/stories/dirty-secrets-3-min-aung-hlaings-daughter-in-secret-deal-with-mytel Min Aung Hlaing’s daughter in secret deal with Mytel]<br /> * [https://www.lemonde.fr/international/article/2021/05/04/birmanie-comment-total-finance-les-generaux-a-travers-des-comptes-offshore_6078990_3210.html Birmanie: comment Total finance les généraux à travers des comptes offshore]<br /> * [https://www.justiceformyanmar.org/stories/total-profiteering Is Total profiteering in Myanmar?]<br /> * [https://www.justiceformyanmar.org/stories/myanmar-military-controlled-businesses-associates-that-require-targeted-sanctions Myanmar military-controlled businesses and associates that require targeted sanctions]<br /> * [https://www.justiceformyanmar.org/stories/htoo-groups-business-with-the-myanmar-military Htoo Group’s business with the Myanmar military]<br /> * [https://www.justiceformyanmar.org/stories/boycott-and-coup-attempt-cost-mytel-usd-24-9-million-in-three-months Boycott and coup attempt cost Mytel USD$24.9 million in three months]<br /> * [https://www.justiceformyanmar.org/stories/international-businesses-linked-to-the-quartermaster-general International businesses linked to the Quartermaster General]<br /> * [https://www.nytimes.com/2021/12/24/world/asia/myanmar-coup-military-tatmadaw-kyaw-thaung.html NYTimes: Worldly, Charming, and Quietly Equipping a Brutal Military]<br /> * [https://www.reuters.com/business/energy/french-company-totalenergies-withdraws-myanmar-2022-01-21/ Reuters: Oil majors TotalEnergies and Chevron withdraw from Myanmar] <br /> <br /> [[Category:Hacks]]</div>

Amongomous https://enlacehacktivista.org/index.php?title=Patriot_Front&diff=330 2022-01-22T06:04:44Z

<p>Amongomous: </p> <hr /> <div>Leak of RocketChat messages and other data from U.S. neo-nazi hate group Patriot Front, published by Unicorn Riot and DDoSecrets.<br /> <br /> * https://discordleaks.unicornriot.ninja/rocket-chat/<br /> * https://vault.unicornriot.ninja/patriotfrontleaks/<br /> * https://ddosecrets.com/wiki/Patriot_Front<br /> <br /> == Explanation of the Hack ==<br /> <br /> The leaked chatlogs cut off as members of the #tech-team channel discover a hidden backdoor harvesting credentials from the RocketChat login page, inserted by a suspected infiltrator with admin rights, who they realize must be one of them. There is also discussion of server logs for an outgoing message webhook firing that wasn't listed in the RocketChat server settings. It's unclear if either of these things is related to the leak.<br /> <br /> https://discordleaks.unicornriot.ninja/rocket-chat/room/97f5b993-3c92-434d-a0ff-9a6afa764218<br /> <br /> == Media Coverage ==<br /> <br /> * https://unicornriot.ninja/2022/patriot-front-fascist-leak-exposes-nationwide-racist-campaigns/<br /> * https://www.dailydot.com/debug/patriot-front-leak-march-for-life/<br /> * https://gizmodo.com/patriot-front-leak-data-breach-hate-crimes-1848401943<br /> <br /> [[Category:Hacks]]</div>

Amongomous https://enlacehacktivista.org/index.php?title=Patriot_Front&diff=329 2022-01-22T05:59:16Z

<p>Amongomous: /* Explanation of the Hack */</p> <hr /> <div>Leak of RocketChat messages and other data from U.S. neo-nazi hate group Patriot Front, published by Unicorn Riot and DDoSecrets.<br /> <br /> * https://discordleaks.unicornriot.ninja/rocket-chat/<br /> * https://ddosecrets.com/wiki/Patriot_Front<br /> <br /> == Explanation of the Hack ==<br /> <br /> The leaked chatlogs cut off as members of the #tech-team channel discover a hidden backdoor harvesting credentials from the RocketChat login page, inserted by a suspected infiltrator with admin rights, who they realize must be one of them. There is also discussion of server logs for an outgoing message webhook firing that wasn't listed in the RocketChat server settings. It's unclear if either of these things is related to the leak.<br /> <br /> https://discordleaks.unicornriot.ninja/rocket-chat/room/97f5b993-3c92-434d-a0ff-9a6afa764218<br /> <br /> == Media Coverage ==<br /> <br /> * https://unicornriot.ninja/2022/patriot-front-fascist-leak-exposes-nationwide-racist-campaigns/<br /> * https://www.dailydot.com/debug/patriot-front-leak-march-for-life/<br /> * https://gizmodo.com/patriot-front-leak-data-breach-hate-crimes-1848401943<br /> <br /> [[Category:Hacks]]</div>

Amongomous https://enlacehacktivista.org/index.php?title=Patriot_Front&diff=328 2022-01-22T05:58:35Z

<p>Amongomous: /* Explanation of the Hack */</p> <hr /> <div>Leak of RocketChat messages and other data from U.S. neo-nazi hate group Patriot Front, published by Unicorn Riot and DDoSecrets.<br /> <br /> * https://discordleaks.unicornriot.ninja/rocket-chat/<br /> * https://ddosecrets.com/wiki/Patriot_Front<br /> <br /> == Explanation of the Hack ==<br /> <br /> The leaked chatlogs cut off as members of the #tech-team channel discover a hidden backdoor harvesting credentials from the RocketChat login page, inserted by a suspected infiltrator with admin rights, who they realize must be one of them. There is also discussion of logs for an outgoing message webhook firing that wasn't listed in the RocketChat server settings. It's unclear if either of these things is related to the leak.<br /> <br /> https://discordleaks.unicornriot.ninja/rocket-chat/room/97f5b993-3c92-434d-a0ff-9a6afa764218<br /> <br /> == Media Coverage ==<br /> <br /> * https://unicornriot.ninja/2022/patriot-front-fascist-leak-exposes-nationwide-racist-campaigns/<br /> * https://www.dailydot.com/debug/patriot-front-leak-march-for-life/<br /> * https://gizmodo.com/patriot-front-leak-data-breach-hate-crimes-1848401943<br /> <br /> [[Category:Hacks]]</div>

Amongomous https://enlacehacktivista.org/index.php?title=Patriot_Front&diff=327 2022-01-22T05:57:21Z

<p>Amongomous: /* Explanation of the Hack */</p> <hr /> <div>Leak of RocketChat messages and other data from U.S. neo-nazi hate group Patriot Front, published by Unicorn Riot and DDoSecrets.<br /> <br /> * https://discordleaks.unicornriot.ninja/rocket-chat/<br /> * https://ddosecrets.com/wiki/Patriot_Front<br /> <br /> == Explanation of the Hack ==<br /> <br /> The leaked chatlogs cut off as members of the #tech-team channel discover a hidden backdoor harvesting credentials from the RocketChat login page, inserted by a suspected infiltrator with admin rights. There is also discussion of logs for an outgoing message webhook firing that wasn't listed in the RocketChat server settings. It's unclear if either of these things is related to the leak.<br /> <br /> https://discordleaks.unicornriot.ninja/rocket-chat/room/97f5b993-3c92-434d-a0ff-9a6afa764218<br /> <br /> == Media Coverage ==<br /> <br /> * https://unicornriot.ninja/2022/patriot-front-fascist-leak-exposes-nationwide-racist-campaigns/<br /> * https://www.dailydot.com/debug/patriot-front-leak-march-for-life/<br /> * https://gizmodo.com/patriot-front-leak-data-breach-hate-crimes-1848401943<br /> <br /> [[Category:Hacks]]</div>

Amongomous https://enlacehacktivista.org/index.php?title=Hacker_History&diff=326 2022-01-22T05:56:46Z

<p>Amongomous: </p> <hr /> <div>==2008==<br /> * [[Sarah Palin emails]]<br /> <br /> == 2010 ==<br /> * [[SRS Electronic Declaration System]]<br /> * [[Operation Payback]]<br /> <br /> == 2011 ==<br /> * [[Chinga la Migra]]<br /> * [[CorruptBrazil]]<br /> * [[Fuck FBI Friday]]<br /> * [[HBGary]]<br /> * [[LeakyMails]]<br /> * [[Shooting Sheriffs Saturday]]<br /> * [[Sownage]]<br /> * [[Stratfor]]<br /> <br /> == 2012 ==<br /> * [[Apple UDIDs]]<br /> * [[CSLEA]]<br /> * [[Norton AntiVirus]]<br /> * [[Syria emails]]<br /> * [[Bureau Of Justice]]<br /> <br /> == 2013 ==<br /> * [[Project AIG]]<br /> <br /> == 2014 ==<br /> * [[LulzSecPeru]]<br /> * [[Gamma Group]]<br /> * [[Russian Interior Ministry]]<br /> <br /> == 2015 ==<br /> * [[wikipedia:Football Leaks]]<br /> * [[Hacking Team]]<br /> <br /> == 2016 ==<br /> * [[Berat Albayrak Emails]]<br /> * [[Panama Papers]]<br /> * [[Surkov Leaks]]<br /> <br /> == 2017 ==<br /> * [[Bob Otto emails]]<br /> * [[Cellebrite]]<br /> * [[Flexispy]]<br /> * [[Freedom Hosting II]]<br /> <br /> == 2018 ==<br /> * [[Salvini emails]]<br /> * [[Doxxing-Adventskalender]]<br /> <br /> == 2019 ==<br /> * [[GorraLeaks]]<br /> * [[Paco Leaks]]<br /> * [[Milico Leaks]]<br /> * [[Capital One]]<br /> * [[Cayman National Bank and Trust (Isle of Man)]]<br /> * [[Iron March]]<br /> * [[Varela Leaks]]<br /> <br /> == 2020 ==<br /> * [[Luanda Leaks]]<br /> * [[BlueLeaks]]<br /> * [[Intel exconfidential Lake]]<br /> <br /> == 2021 ==<br /> * [[Gab]]<br /> * [[Myanmar Investments]]<br /> * [[American Patriots Three Percent‎]]<br /> * [[Verkada]]<br /> * [[Sons of Confederate Veterans]]<br /> * [[MagaCoin]]<br /> * [[Electronic Arts]]<br /> * [[Tea Party Patriots]]<br /> * [[Cyber Partisans]]<br /> * [[HART]]<br /> * [[Policía Nacional Civil de El Salvador]]<br /> * [[Epik]]<br /> * [[Oath Keepers]]<br /> * [[America's Frontline Doctors]]<br /> * [[Twitch]]<br /> * [[Attila Hildmann‎]]<br /> * [[AnibalLeaks]]<br /> <br /> == 2022 ==<br /> * [[Patriot Front]]</div>

Amongomous https://enlacehacktivista.org/index.php?title=Patriot_Front&diff=325 2022-01-22T05:55:17Z

<p>Amongomous: Created page with &quot;Leak of RocketChat messages and other data from U.S. neo-nazi hate group Patriot Front, published by Unicorn Riot and DDoSecrets. * https://discordleaks.unicornriot.ninja/rocket-chat/ * https://ddosecrets.com/wiki/Patriot_Front == Explanation of the Hack == The leaked logs cut off as members of the #tech-team channel discover a hidden backdoor harvesting credentials from the RocketChat login page, inserted by a suspected infiltrator with admin rights. There is also di...&quot;</p> <hr /> <div>Leak of RocketChat messages and other data from U.S. neo-nazi hate group Patriot Front, published by Unicorn Riot and DDoSecrets.<br /> <br /> * https://discordleaks.unicornriot.ninja/rocket-chat/<br /> * https://ddosecrets.com/wiki/Patriot_Front<br /> <br /> == Explanation of the Hack ==<br /> <br /> The leaked logs cut off as members of the #tech-team channel discover a hidden backdoor harvesting credentials from the RocketChat login page, inserted by a suspected infiltrator with admin rights. There is also discussion of logs for an outgoing message webhook firing that wasn't listed in the RocketChat server settings. It's unclear if either of these things is related to the leak.<br /> <br /> https://discordleaks.unicornriot.ninja/rocket-chat/room/97f5b993-3c92-434d-a0ff-9a6afa764218<br /> <br /> == Media Coverage ==<br /> <br /> * https://unicornriot.ninja/2022/patriot-front-fascist-leak-exposes-nationwide-racist-campaigns/<br /> * https://www.dailydot.com/debug/patriot-front-leak-march-for-life/<br /> * https://gizmodo.com/patriot-front-leak-data-breach-hate-crimes-1848401943<br /> <br /> [[Category:Hacks]]</div>

Amongomous https://enlacehacktivista.org/index.php?title=Learn_to_hack&diff=324 2022-01-21T21:43:05Z

<p>Amongomous: </p> <hr /> <div>This page aims to compile high quality resources for hackers. All books listed on this page can be found on [https://libgen.fun/ Library Genesis] and [https://z-lib.org/ Z-Library]<br /> <br /> == General Resources == <br /> <br /> Resources that assume little to no background knowledge:<br /> * https://www.hoppersroppers.org/training.html<br /> * https://tryhackme.com/<br /> <br /> Resources that assume minimal tech background:<br /> * (book) Penetration Testing: A Hands-On Introduction to Hacking<br /> <br /> Resources that assume a tech or hacking background:<br /> * (book) The Hacker Playbook 3<br /> * books by [https://b-ok.cc/g/Sparc%20Flow Sparc Flow]<br /> * [[Hack Back! A DIY Guide]]<br /> * https://github.com/ForbiddenProgrammer/conti-pentester-guide-leak<br /> ** translated: https://s3.amazonaws.com/talos-intelligence-site/production/document_files/files/000/095/639/original/Conti_playbook_translated.pdf<br /> * Bassterlord Networking Manual (translated): https://papers.vx-underground.org/papers/VXUG/Mirrors/BassterlordNetworkingManual.pdf<br /> <br /> Practice labs:<br /> * https://www.hackthebox.com/<br /> * https://www.pentesteracademy.com/<br /> * https://lab.pentestit.ru/<br /> * https://overthewire.org/wargames/<br /> <br /> General references:<br /> * https://www.ired.team/<br /> * http://pwnwiki.io/<br /> * https://dmcxblue.gitbook.io/red-team-notes-2-0/<br /> * https://github.com/swisskyrepo/PayloadsAllTheThings<br /> * https://github.com/S3cur3Th1sSh1t/Pentest-Tools<br /> <br /> == Active Directory ==<br /> <br /> * [https://github.com/swisskyrepo/PayloadsAllTheThings/blob/master/Methodology%20and%20Resources/Active%20Directory%20Attack.md An excellent practical reference]<br /> * [https://github.com/Integration-IT/Active-Directory-Exploitation-Cheat-Sheet A practical reference focused on powershell]<br /> * https://gist.github.com/TarlogicSecurity/2f221924fef8c14a1d8e29f3cb5c5c4a<br /> * https://m0chan.github.io/2019/07/30/Windows-Notes-and-Cheatsheet.html<br /> * https://casvancooten.com/posts/2020/11/windows-active-directory-exploitation-cheat-sheet-and-command-reference/<br /> * https://github.com/S1ckB0y1337/Active-Directory-Exploitation-Cheat-Sheet<br /> * https://wadcoms.github.io/<br /> * https://www.blackhillsinfosec.com/webcast-attack-tactics-5-zero-to-hero-attack/<br /> * https://byt3bl33d3r.github.io/practical-guide-to-ntlm-relaying-in-2017-aka-getting-a-foothold-in-under-5-minutes.html<br /> * https://s3cur3th1ssh1t.github.io/The-most-common-on-premise-vulnerabilities-and-misconfigurations/<br /> * A very thorough technical background: https://zer1t0.gitlab.io/posts/attacking_ad/<br /> * kerberos background: https://www.tarlogic.com/blog/how-kerberos-works/<br /> * A good overview of different lateral movement techniques: https://hackmag.com/security/lateral-guide/<br /> <br /> === Tools ===<br /> * https://mpgn.gitbook.io/crackmapexec/<br /> * https://www.secureauth.com/labs/open-source-tools/impacket/<br /> * https://github.com/dirkjanm/mitm6<br /> * https://github.com/lgandx/Responder<br /> * https://github.com/FuzzySecurity/StandIn<br /> * https://www.joeware.net/freetools/tools/adfind/<br /> * Powerview/Sharpview<br /> * Bloodhound/Sharphound/Jackdaw<br /> <br /> == Office 365 &amp; Azure ==<br /> * Extremely in-depth technical info on everything https://o365blog.com/<br /> * https://www.synacktiv.com/en/publications/azure-ad-introduction-for-red-teamers.html<br /> * https://blog.xpnsec.com/azuread-connect-for-redteam/<br /> * https://www.blackhillsinfosec.com/webcast-getting-started-in-pentesting-the-cloud-azure/<br /> * https://github.com/dafthack/CloudPentestCheatsheets/blob/master/cheatsheets/Azure.md<br /> <br /> === Tools ===<br /> * https://github.com/nyxgeek/o365recon<br /> * https://github.com/dirkjanm/ROADtools<br /> * https://github.com/fox-it/adconnectdump<br /> * https://github.com/LMGsec/o365creeper<br /> * https://bloodhound.readthedocs.io/en/latest/data-collection/azurehound.html<br /> * https://github.com/rvrsh3ll/TokenTactics<br /> * https://github.com/nyxgeek/onedrive_user_enum<br /> * https://github.com/dafthack/MSOLSpray<br /> * https://github.com/dafthack/MFASweep<br /> <br /> == GSuite ==<br /> https://www.slideshare.net/dafthack/ok-google-how-do-i-red-team-gsuite<br /> <br /> == C2 Frameworks ==<br /> <br /> * https://docs.google.com/spreadsheets/d/1b4mUxa6cDQuTV2BPC6aA-GR4zGZi0ooPYtBe4IgPsSc<br /> <br /> == Antivirus &amp; EDR Evasion ==<br /> <br /> * https://s3cur3th1ssh1t.github.io/Bypass_AMSI_by_manual_modification/<br /> * https://s3cur3th1ssh1t.github.io/Customizing_C2_Frameworks/<br /> * https://s3cur3th1ssh1t.github.io/Powershell-and-the-.NET-AMSI-Interface/<br /> * https://www.blackhillsinfosec.com/tag/sacred-cash-cow-tipping/<br /> * https://blog.securityevaluators.com/creating-av-resistant-malware-part-1-7604b83ea0c0<br /> * https://www.ired.team/offensive-security/defense-evasion<br /> * https://www.youtube.com/watch?v=UO3PjJIiBIE<br /> * https://github.com/matterpreter/DefenderCheck<br /> * https://github.com/RythmStick/AMSITrigger<br /> * https://amsi.fail<br /> <br /> == VMWare ==<br /> <br /> * [https://github.com/HynekPetrak/HynekPetrak/blob/master/take_over_vcenter_670.md Taking over VMware Vcenter 6.7.0 or 7.0]<br /> <br /> == RocketChat ==<br /> * Account hijacking and RCE as admin: [https://edbrsk.dev/content/real-cases/how-I-compromised-300-stores-and-a-spanish-consultancy The story about how I compromised 300 stores, and a “Spanish consultancy”]<br /> <br /> == Initial Access == <br /> <br /> === Phishing ===<br /> * https://0xboku.com/2021/07/12/ArtOfDeviceCodePhish.html<br /> * https://medium.com/maltrak/com-objects-p-2-your-stealthy-fileless-attack-bf78318d9165<br /> * https://infosecwriteups.com/recipe-for-a-successful-phishing-campaign-part-1-2-dc23d927ec55<br /> * https://www.xanthus.io/mastering-the-simulated-phishing-attack<br /> * https://github.com/Arno0x/EmbedInHTML<br /> * https://github.com/L4bF0x/PhishingPretexts<br /> * http://lockboxx.blogspot.com/2018/12/gophish-evilginx2-for-phishing.html<br /> * https://book.hacktricks.xyz/phishing-methodology<br /> <br /> === Password spraying ===<br /> * https://github.com/dafthack/MSOLSpray<br /> * https://pentestlab.blog/2019/09/05/microsoft-exchange-password-spraying/<br /> <br /> == Scanning and Recon ==<br /> * https://github.com/robertdavidgraham/masscan<br /> * https://github.com/projectdiscovery/naabu<br /> * https://github.com/OWASP/Amass<br /> * https://www.shodan.io/<br /> * https://www.zoomeye.org/<br /> <br /> == Opsec ==<br /> * https://www.qubes-os.org/<br /> * https://www.whonix.org/<br /> * https://tails.boum.org/<br /> * The whonix wiki has lots of great info on anonymity even if you're not using whonix: https://www.whonix.org/wiki/Documentation<br /> * https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TransparentProxy<br /> * https://veracrypt.fr/</div>

Amongomous https://enlacehacktivista.org/index.php?title=Hacker_History&diff=323 2022-01-20T14:54:35Z

<p>Amongomous: /* 2019 */</p> <hr /> <div>==2008==<br /> * [[Sarah Palin emails]]<br /> <br /> == 2010 ==<br /> * [[SRS Electronic Declaration System]]<br /> * [[Operation Payback]]<br /> <br /> == 2011 ==<br /> * [[Chinga la Migra]]<br /> * [[CorruptBrazil]]<br /> * [[Fuck FBI Friday]]<br /> * [[HBGary]]<br /> * [[LeakyMails]]<br /> * [[Shooting Sheriffs Saturday]]<br /> * [[Sownage]]<br /> * [[Stratfor]]<br /> <br /> == 2012 ==<br /> * [[Apple UDIDs]]<br /> * [[CSLEA]]<br /> * [[Norton AntiVirus]]<br /> * [[Syria emails]]<br /> * [[Bureau Of Justice]]<br /> <br /> == 2013 ==<br /> * [[Project AIG]]<br /> <br /> == 2014 ==<br /> * [[LulzSecPeru]]<br /> * [[Gamma Group]]<br /> * [[Russian Interior Ministry]]<br /> <br /> == 2015 ==<br /> * [[wikipedia:Football Leaks]]<br /> * [[Hacking Team]]<br /> <br /> == 2016 ==<br /> * [[Berat Albayrak Emails]]<br /> * [[Panama Papers]]<br /> * [[Surkov Leaks]]<br /> <br /> == 2017 ==<br /> * [[Bob Otto emails]]<br /> * [[Cellebrite]]<br /> * [[Flexispy]]<br /> * [[Freedom Hosting II]]<br /> <br /> == 2018 ==<br /> * [[Salvini emails]]<br /> * [[Doxxing-Adventskalender]]<br /> <br /> == 2019 ==<br /> * [[GorraLeaks]]<br /> * [[Paco Leaks]]<br /> * [[Milico Leaks]]<br /> * [[Capital One]]<br /> * [[Cayman National Bank and Trust (Isle of Man)]]<br /> * [[Iron March]]<br /> * [[Varela Leaks]]<br /> <br /> == 2020 ==<br /> * [[Luanda Leaks]]<br /> * [[BlueLeaks]]<br /> * [[Intel exconfidential Lake]]<br /> <br /> == 2021 ==<br /> * [[Gab]]<br /> * [[Myanmar Investments]]<br /> * [[American Patriots Three Percent‎]]<br /> * [[Verkada]]<br /> * [[Sons of Confederate Veterans]]<br /> * [[MagaCoin]]<br /> * [[Electronic Arts]]<br /> * [[Tea Party Patriots]]<br /> * [[Cyber Partisans]]<br /> * [[HART]]<br /> * [[Policía Nacional Civil de El Salvador]]<br /> * [[Epik]]<br /> * [[Oath Keepers]]<br /> * [[America's Frontline Doctors]]<br /> * [[Twitch]]<br /> * [[Attila Hildmann‎]]<br /> * [[AnibalLeaks]]</div>

Amongomous https://enlacehacktivista.org/index.php?title=Iron_March&diff=322 2022-01-20T14:53:40Z

<p>Amongomous: Created page with &quot;Hack of white nationalist messaging board Iron March. Iron March was shut down due to getting hacked in 2017 and had a copy of its database uploaded by an anonymous user to the Internet Archive in 2019. https://ddosecrets.com/wiki/Iron_March == Media Coverage == * [https://www.bellingcat.com/resources/how-tos/2019/11/06/massive-white-supremacist-message-board-leak-how-to-access-and-interpret-the-data/ Bellingcat: Massive White Supremacist Message Board Leak: How to A...&quot;</p> <hr /> <div>Hack of white nationalist messaging board Iron March.<br /> <br /> Iron March was shut down due to getting hacked in 2017 and had a copy of its database uploaded by an anonymous user to the Internet Archive in 2019.<br /> <br /> https://ddosecrets.com/wiki/Iron_March<br /> <br /> == Media Coverage ==<br /> <br /> * [https://www.bellingcat.com/resources/how-tos/2019/11/06/massive-white-supremacist-message-board-leak-how-to-access-and-interpret-the-data/ Bellingcat: Massive White Supremacist Message Board Leak: How to Access and Interpret the Data]<br /> * [https://www.bellingcat.com/news/americas/2019/11/13/american-active-duty-servicemen-discovered-in-neo-nazi-forum-leak/ Bellingcat: American Active-Duty Servicemen Discovered in Neo-Nazi Forum Leak]<br /> * [https://www.bellingcat.com/news/2019/12/19/transnational-white-terror-exposing-atomwaffen-and-the-iron-march-networks/ Bellingcat: Transnational White Terror: Exposing Atomwaffen And The Iron March Networks]<br /> <br /> [[Category:Hacks]]</div>

Amongomous https://enlacehacktivista.org/index.php?title=Learn_to_hack&diff=320 2022-01-15T13:18:35Z

<p>Amongomous: </p> <hr /> <div>This page aims to compile high quality resources for hackers. All books listed on this page can be found on [https://libgen.fun/ Library Genesis] and [https://z-lib.org/ Z-Library]<br /> <br /> == General Resources == <br /> <br /> Resources that assume little to no background knowledge:<br /> * https://www.hoppersroppers.org/training.html<br /> * https://tryhackme.com/<br /> <br /> Resources that assume minimal tech background:<br /> * (book) Penetration Testing: A Hands-On Introduction to Hacking<br /> <br /> Resources that assume a tech or hacking background:<br /> * (book) The Hacker Playbook 3<br /> * books by [https://b-ok.cc/g/Sparc%20Flow Sparc Flow]<br /> * [[Hack Back! A DIY Guide]]<br /> * https://github.com/ForbiddenProgrammer/conti-pentester-guide-leak<br /> ** translated: https://s3.amazonaws.com/talos-intelligence-site/production/document_files/files/000/095/639/original/Conti_playbook_translated.pdf<br /> * Bassterlord Networking Manual (translated): https://papers.vx-underground.org/papers/VXUG/Mirrors/BassterlordNetworkingManual.pdf<br /> <br /> Practice labs:<br /> * https://www.hackthebox.com/<br /> * https://www.pentesteracademy.com/<br /> * https://lab.pentestit.ru/<br /> * https://overthewire.org/wargames/<br /> <br /> General references:<br /> * https://www.ired.team/<br /> * http://pwnwiki.io/<br /> * https://dmcxblue.gitbook.io/red-team-notes-2-0/<br /> * https://github.com/swisskyrepo/PayloadsAllTheThings<br /> * https://github.com/S3cur3Th1sSh1t/Pentest-Tools<br /> <br /> == Active Directory ==<br /> <br /> * [https://github.com/swisskyrepo/PayloadsAllTheThings/blob/master/Methodology%20and%20Resources/Active%20Directory%20Attack.md An excellent practical reference]<br /> * [https://github.com/Integration-IT/Active-Directory-Exploitation-Cheat-Sheet A practical reference focused on powershell]<br /> * https://gist.github.com/TarlogicSecurity/2f221924fef8c14a1d8e29f3cb5c5c4a<br /> * https://m0chan.github.io/2019/07/30/Windows-Notes-and-Cheatsheet.html<br /> * https://casvancooten.com/posts/2020/11/windows-active-directory-exploitation-cheat-sheet-and-command-reference/<br /> * https://github.com/S1ckB0y1337/Active-Directory-Exploitation-Cheat-Sheet<br /> * https://wadcoms.github.io/<br /> * https://www.blackhillsinfosec.com/webcast-attack-tactics-5-zero-to-hero-attack/<br /> * https://byt3bl33d3r.github.io/practical-guide-to-ntlm-relaying-in-2017-aka-getting-a-foothold-in-under-5-minutes.html<br /> * https://s3cur3th1ssh1t.github.io/The-most-common-on-premise-vulnerabilities-and-misconfigurations/<br /> * A very thorough technical background: https://zer1t0.gitlab.io/posts/attacking_ad/<br /> * kerberos background: https://www.tarlogic.com/blog/how-kerberos-works/<br /> <br /> === Tools ===<br /> * https://mpgn.gitbook.io/crackmapexec/<br /> * https://www.secureauth.com/labs/open-source-tools/impacket/<br /> * https://github.com/dirkjanm/mitm6<br /> * https://github.com/lgandx/Responder<br /> * https://github.com/FuzzySecurity/StandIn<br /> * https://www.joeware.net/freetools/tools/adfind/<br /> * Powerview/Sharpview<br /> * Bloodhound/Sharphound/Jackdaw<br /> <br /> == Office 365 &amp; Azure ==<br /> * Extremely in-depth technical info on everything https://o365blog.com/<br /> * https://www.synacktiv.com/en/publications/azure-ad-introduction-for-red-teamers.html<br /> * https://blog.xpnsec.com/azuread-connect-for-redteam/<br /> * https://www.blackhillsinfosec.com/webcast-getting-started-in-pentesting-the-cloud-azure/<br /> * https://github.com/dafthack/CloudPentestCheatsheets/blob/master/cheatsheets/Azure.md<br /> <br /> === Tools ===<br /> * https://github.com/nyxgeek/o365recon<br /> * https://github.com/dirkjanm/ROADtools<br /> * https://github.com/fox-it/adconnectdump<br /> * https://github.com/LMGsec/o365creeper<br /> * https://bloodhound.readthedocs.io/en/latest/data-collection/azurehound.html<br /> * https://github.com/rvrsh3ll/TokenTactics<br /> * https://github.com/nyxgeek/onedrive_user_enum<br /> * https://github.com/dafthack/MSOLSpray<br /> * https://github.com/dafthack/MFASweep<br /> <br /> == GSuite ==<br /> https://www.slideshare.net/dafthack/ok-google-how-do-i-red-team-gsuite<br /> <br /> == C2 Frameworks ==<br /> <br /> * https://docs.google.com/spreadsheets/d/1b4mUxa6cDQuTV2BPC6aA-GR4zGZi0ooPYtBe4IgPsSc<br /> <br /> == Antivirus &amp; EDR Evasion ==<br /> <br /> * https://s3cur3th1ssh1t.github.io/Bypass_AMSI_by_manual_modification/<br /> * https://s3cur3th1ssh1t.github.io/Customizing_C2_Frameworks/<br /> * https://s3cur3th1ssh1t.github.io/Powershell-and-the-.NET-AMSI-Interface/<br /> * https://www.blackhillsinfosec.com/tag/sacred-cash-cow-tipping/<br /> * https://blog.securityevaluators.com/creating-av-resistant-malware-part-1-7604b83ea0c0<br /> * https://www.ired.team/offensive-security/defense-evasion<br /> * https://www.youtube.com/watch?v=UO3PjJIiBIE<br /> * https://github.com/matterpreter/DefenderCheck<br /> * https://github.com/RythmStick/AMSITrigger<br /> * https://amsi.fail<br /> <br /> == VMWare ==<br /> <br /> * [https://github.com/HynekPetrak/HynekPetrak/blob/master/take_over_vcenter_670.md Taking over VMware Vcenter 6.7.0 or 7.0]<br /> <br /> == Initial Access == <br /> <br /> === Phishing ===<br /> * https://0xboku.com/2021/07/12/ArtOfDeviceCodePhish.html<br /> * https://medium.com/maltrak/com-objects-p-2-your-stealthy-fileless-attack-bf78318d9165<br /> * https://infosecwriteups.com/recipe-for-a-successful-phishing-campaign-part-1-2-dc23d927ec55<br /> * https://www.xanthus.io/mastering-the-simulated-phishing-attack<br /> * https://github.com/Arno0x/EmbedInHTML<br /> * https://github.com/L4bF0x/PhishingPretexts<br /> * http://lockboxx.blogspot.com/2018/12/gophish-evilginx2-for-phishing.html<br /> * https://book.hacktricks.xyz/phishing-methodology<br /> <br /> === Password spraying ===<br /> * https://github.com/dafthack/MSOLSpray<br /> * https://pentestlab.blog/2019/09/05/microsoft-exchange-password-spraying/<br /> <br /> == Scanning and Recon ==<br /> * https://github.com/robertdavidgraham/masscan<br /> * https://github.com/projectdiscovery/naabu<br /> * https://github.com/OWASP/Amass<br /> * https://www.shodan.io/<br /> * https://www.zoomeye.org/<br /> <br /> == Opsec ==<br /> * https://www.qubes-os.org/<br /> * https://www.whonix.org/<br /> * https://tails.boum.org/<br /> * The whonix wiki has lots of great info on anonymity even if you're not using whonix: https://www.whonix.org/wiki/Documentation<br /> * https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TransparentProxy<br /> * https://veracrypt.fr/</div>

Amongomous https://enlacehacktivista.org/index.php?title=SRS_Electronic_Declaration_System&diff=310 2022-01-01T18:37:33Z

<p>Amongomous: </p> <hr /> <div>Hack of 7.5 million tax records from the Latvian State Revenue Service's Electronic Declaration System, exposing pay rises for high-ranking banking and public sector employees during the country's austerity measures, by [[wikipedia:Ilmārs Poikāns|Neo]] and the Fourth Awakening People's Army.<br /> <br /> == Media Coverage ==<br /> <br /> * [https://www.theregister.com/2010/02/26/latvian_hacker_whistleblower/ The Register: Latvian hacker tweets hard on banking whistle]<br /> * [https://www.theregister.com/2010/05/14/latvian_hacker_whistleblower/ The Register: Latvia's 'Robin Hood' hacker unmasked as AI researcher]<br /> * [https://eng.lsm.lv/article/society/society/president-pardons-whistleblower-neo.a261433/ Public broadcasting of Latvia: President pardons whistleblower 'Neo']<br /> <br /> [[Category:Hacks]]</div>

Amongomous https://enlacehacktivista.org/index.php?title=SRS_Electronic_Declaration_System&diff=309 2022-01-01T18:36:40Z

<p>Amongomous: </p> <hr /> <div>Hack of 7.5 million tax records from the Latvian State Revenue Service's Electronic Declaration System, exposing pay rises for high-ranking banking and public sector employees during the country's austerity measures, by [[wikipedia:Ilmārs Poikāns|Neo]] of the Fourth Awakening People's Army.<br /> <br /> == Media Coverage ==<br /> <br /> * [https://www.theregister.com/2010/02/26/latvian_hacker_whistleblower/ The Register: Latvian hacker tweets hard on banking whistle]<br /> * [https://www.theregister.com/2010/05/14/latvian_hacker_whistleblower/ The Register: Latvia's 'Robin Hood' hacker unmasked as AI researcher]<br /> * [https://eng.lsm.lv/article/society/society/president-pardons-whistleblower-neo.a261433/ Public broadcasting of Latvia: President pardons whistleblower 'Neo']<br /> <br /> [[Category:Hacks]]</div>

Amongomous https://enlacehacktivista.org/index.php?title=Hacker_History&diff=308 2022-01-01T18:27:50Z

<p>Amongomous: /* 2010 */</p> <hr /> <div>==2008==<br /> * [[Sarah Palin emails]]<br /> <br /> == 2010 ==<br /> * [[SRS Electronic Declaration System]]<br /> * [[Operation Payback]]<br /> <br /> == 2011 ==<br /> * [[Chinga la Migra]]<br /> * [[CorruptBrazil]]<br /> * [[Fuck FBI Friday]]<br /> * [[HBGary]]<br /> * [[LeakyMails]]<br /> * [[Shooting Sheriffs Saturday]]<br /> * [[Sownage]]<br /> * [[Stratfor]]<br /> <br /> == 2012 ==<br /> * [[Apple UDIDs]]<br /> * [[CSLEA]]<br /> * [[Norton AntiVirus]]<br /> * [[Syria emails]]<br /> * [[Bureau Of Justice]]<br /> <br /> == 2013 ==<br /> * [[Project AIG]]<br /> <br /> == 2014 ==<br /> * [[LulzSecPeru]]<br /> * [[Gamma Group]]<br /> * [[Russian Interior Ministry]]<br /> <br /> == 2015 ==<br /> * [[wikipedia:Football Leaks]]<br /> * [[Hacking Team]]<br /> <br /> == 2016 ==<br /> * [[Berat Albayrak Emails]]<br /> * [[Panama Papers]]<br /> * [[Surkov Leaks]]<br /> <br /> == 2017 ==<br /> * [[Bob Otto emails]]<br /> * [[Cellebrite]]<br /> * [[Flexispy]]<br /> * [[Freedom Hosting II]]<br /> <br /> == 2018 ==<br /> * [[Salvini emails]]<br /> * [[Doxxing-Adventskalender]]<br /> <br /> == 2019 ==<br /> * [[GorraLeaks]]<br /> * [[Paco Leaks]]<br /> * [[Milico Leaks]]<br /> * [[Capital One]]<br /> * [[Cayman National Bank and Trust (Isle of Man)]]<br /> * [[Varela Leaks]]<br /> <br /> == 2020 ==<br /> * [[Luanda Leaks]]<br /> * [[BlueLeaks]]<br /> * [[Intel exconfidential Lake]]<br /> <br /> == 2021 ==<br /> * [[Gab]]<br /> * [[Myanmar Investments]]<br /> * [[American Patriots Three Percent‎]]<br /> * [[Verkada]]<br /> * [[Sons of Confederate Veterans]]<br /> * [[MagaCoin]]<br /> * [[Electronic Arts]]<br /> * [[Tea Party Patriots]]<br /> * [[Cyber Partisans]]<br /> * [[HART]]<br /> * [[Policía Nacional Civil de El Salvador]]<br /> * [[Epik]]<br /> * [[Oath Keepers]]<br /> * [[America's Frontline Doctors]]<br /> * [[Twitch]]<br /> * [[Attila Hildmann‎]]<br /> * [[AnibalLeaks]]</div>

Amongomous https://enlacehacktivista.org/index.php?title=SRS_Electronic_Declaration_System&diff=307 2022-01-01T18:27:10Z

<p>Amongomous: Created page with &quot;Hack of 7.5 million tax records from the Latvian State Revenue Service&#039;s Electronic Declaration System, exposing pay rises for high-ranking banking and public sector employees, by Neo of the Fourth Awakening People&#039;s Army. == Media Coverage == * [https://www.theregister.com/2010/02/26/latvian_hacker_whistleblower/ The Register: Latvian hacker tweets hard on banking whistle] * [https://www.theregister.com/2010/05/14/latvian_hacker_whistleb...&quot;</p> <hr /> <div>Hack of 7.5 million tax records from the Latvian State Revenue Service's Electronic Declaration System, exposing pay rises for high-ranking banking and public sector employees, by [[wikipedia:Ilmārs Poikāns|Neo]] of the Fourth Awakening People's Army.<br /> <br /> == Media Coverage ==<br /> <br /> * [https://www.theregister.com/2010/02/26/latvian_hacker_whistleblower/ The Register: Latvian hacker tweets hard on banking whistle]<br /> * [https://www.theregister.com/2010/05/14/latvian_hacker_whistleblower/ The Register: Latvia's 'Robin Hood' hacker unmasked as AI researcher]<br /> * [https://eng.lsm.lv/article/society/society/president-pardons-whistleblower-neo.a261433/ Public broadcasting of Latvia: President pardons whistleblower 'Neo']<br /> <br /> [[Category:Hacks]]</div>

Amongomous https://enlacehacktivista.org/index.php?title=Myanmar_Investments&diff=306 2022-01-01T17:58:51Z

<p>Amongomous: </p> <hr /> <div>Hack of thousands of documents from the Myanmar Investment Commission following the 2021 coup d'état and protests by Sugondese separatist Bofa. <br /> <br /> * https://ddosecrets.com/wiki/Myanmar_Investments<br /> * [https://bofa.substack.com/p/full-disclosure-dica-ims-privilege Statement from the hacker (English)]<br /> * [https://bofa.substack.com/p/-dica-ims-privilege-escalation-exploit Statement from the hacker (Burmese)]<br /> <br /> == Explanation of the Hack ==<br /> <br /> The hacker breached a low-privileged account to gain access to a web-based investment management portal. <br /> <br /> She then exploited a broken access control vulnerability to create a new admin account with full access to the leaked documents.<br /> <br /> == Media Coverage ==<br /> <br /> * [https://www.justiceformyanmar.org/stories/how-hundreds-of-millions-of-dollars-from-mytel-consumers-will-flow-to-military-generals How hundreds of millions of dollars from Mytel subscribers will flow to military generals]<br /> * [https://www.justiceformyanmar.org/stories/mapping-the-myanmar-military-cartels-global-reach-through-posco Mapping the Myanmar Military Cartel’s global reach through POSCO]<br /> * [https://www.justiceformyanmar.org/stories/land-lease-payments-tie-japanese-gov-and-investors-to-myanmars-military Land lease payments tie Japanese gov and investors to Myanmar's military]<br /> * [https://www.justiceformyanmar.org/stories/dirty-secrets-3-min-aung-hlaings-daughter-in-secret-deal-with-mytel Min Aung Hlaing’s daughter in secret deal with Mytel]<br /> * [https://www.lemonde.fr/international/article/2021/05/04/birmanie-comment-total-finance-les-generaux-a-travers-des-comptes-offshore_6078990_3210.html Birmanie: comment Total finance les généraux à travers des comptes offshore]<br /> * [https://www.justiceformyanmar.org/stories/total-profiteering Is Total profiteering in Myanmar?]<br /> * [https://www.justiceformyanmar.org/stories/myanmar-military-controlled-businesses-associates-that-require-targeted-sanctions Myanmar military-controlled businesses and associates that require targeted sanctions]<br /> * [https://www.justiceformyanmar.org/stories/htoo-groups-business-with-the-myanmar-military Htoo Group’s business with the Myanmar military]<br /> * [https://www.justiceformyanmar.org/stories/boycott-and-coup-attempt-cost-mytel-usd-24-9-million-in-three-months Boycott and coup attempt cost Mytel USD$24.9 million in three months]<br /> * [https://www.justiceformyanmar.org/stories/international-businesses-linked-to-the-quartermaster-general International businesses linked to the Quartermaster General]<br /> * [https://www.nytimes.com/2021/12/24/world/asia/myanmar-coup-military-tatmadaw-kyaw-thaung.html NYTimes: Worldly, Charming, and Quietly Equipping a Brutal Military]<br /> <br /> [[Category:Hacks]]</div>

Amongomous https://enlacehacktivista.org/index.php?title=Learn_to_hack&diff=291 2021-12-27T08:36:58Z

<p>Amongomous: </p> <hr /> <div>This page aims to compile high quality resources for hackers. All books listed on this page can be found on [https://libgen.fun/ Library Genesis] and [https://z-lib.org/ Z-Library]<br /> <br /> == General Resources == <br /> <br /> Resources that assume little to no background knowledge:<br /> * https://www.hoppersroppers.org/training.html<br /> * https://tryhackme.com/<br /> <br /> Resources that assume minimal tech background:<br /> * (book) Penetration Testing: A Hands-On Introduction to Hacking<br /> <br /> Resources that assume a tech or hacking background:<br /> * (book) The Hacker Playbook 3<br /> * books by [https://b-ok.cc/g/Sparc%20Flow Sparc Flow]<br /> * [[Hack Back! A DIY Guide]]<br /> * https://github.com/ForbiddenProgrammer/conti-pentester-guide-leak<br /> ** translated: https://s3.amazonaws.com/talos-intelligence-site/production/document_files/files/000/095/639/original/Conti_playbook_translated.pdf<br /> * Bassterlord Networking Manual (translated): https://papers.vx-underground.org/papers/VXUG/Mirrors/BassterlordNetworkingManual.pdf<br /> <br /> Practice labs:<br /> * https://www.hackthebox.com/<br /> * https://www.pentesteracademy.com/<br /> * https://lab.pentestit.ru/<br /> * https://overthewire.org/wargames/<br /> <br /> General references:<br /> * https://www.ired.team/<br /> * http://pwnwiki.io/<br /> * https://dmcxblue.gitbook.io/red-team-notes-2-0/<br /> * https://github.com/swisskyrepo/PayloadsAllTheThings<br /> * https://github.com/S3cur3Th1sSh1t/Pentest-Tools<br /> <br /> == Active Directory ==<br /> <br /> * [https://github.com/swisskyrepo/PayloadsAllTheThings/blob/master/Methodology%20and%20Resources/Active%20Directory%20Attack.md An excellent practical reference]<br /> * [https://github.com/Integration-IT/Active-Directory-Exploitation-Cheat-Sheet A practical reference focused on powershell]<br /> * https://gist.github.com/TarlogicSecurity/2f221924fef8c14a1d8e29f3cb5c5c4a<br /> * https://m0chan.github.io/2019/07/30/Windows-Notes-and-Cheatsheet.html<br /> * https://casvancooten.com/posts/2020/11/windows-active-directory-exploitation-cheat-sheet-and-command-reference/<br /> * https://github.com/S1ckB0y1337/Active-Directory-Exploitation-Cheat-Sheet<br /> * https://wadcoms.github.io/<br /> * https://www.blackhillsinfosec.com/webcast-attack-tactics-5-zero-to-hero-attack/<br /> * https://byt3bl33d3r.github.io/practical-guide-to-ntlm-relaying-in-2017-aka-getting-a-foothold-in-under-5-minutes.html<br /> * https://s3cur3th1ssh1t.github.io/The-most-common-on-premise-vulnerabilities-and-misconfigurations/<br /> * A very thorough technical background: https://zer1t0.gitlab.io/posts/attacking_ad/<br /> * kerberos background: https://www.tarlogic.com/blog/how-kerberos-works/<br /> <br /> === Tools ===<br /> * https://mpgn.gitbook.io/crackmapexec/<br /> * https://www.secureauth.com/labs/open-source-tools/impacket/<br /> * https://github.com/dirkjanm/mitm6<br /> * https://github.com/lgandx/Responder<br /> * https://github.com/FuzzySecurity/StandIn<br /> * https://www.joeware.net/freetools/tools/adfind/<br /> * Powerview/Sharpview<br /> * Bloodhound/Sharphound/Jackdaw<br /> <br /> == Office 365 &amp; Azure ==<br /> * Extremely in-depth technical info on everything https://o365blog.com/<br /> * https://www.synacktiv.com/en/publications/azure-ad-introduction-for-red-teamers.html<br /> * https://blog.xpnsec.com/azuread-connect-for-redteam/<br /> * https://www.blackhillsinfosec.com/webcast-getting-started-in-pentesting-the-cloud-azure/<br /> * https://github.com/dafthack/CloudPentestCheatsheets/blob/master/cheatsheets/Azure.md<br /> <br /> === Tools ===<br /> * https://github.com/nyxgeek/o365recon<br /> * https://github.com/dirkjanm/ROADtools<br /> * https://github.com/fox-it/adconnectdump<br /> * https://github.com/LMGsec/o365creeper<br /> * https://bloodhound.readthedocs.io/en/latest/data-collection/azurehound.html<br /> * https://github.com/rvrsh3ll/TokenTactics<br /> * https://github.com/nyxgeek/onedrive_user_enum<br /> * https://github.com/dafthack/MSOLSpray<br /> * https://github.com/dafthack/MFASweep<br /> <br /> == GSuite ==<br /> https://www.slideshare.net/dafthack/ok-google-how-do-i-red-team-gsuite<br /> <br /> == C2 Frameworks ==<br /> <br /> * https://docs.google.com/spreadsheets/d/1b4mUxa6cDQuTV2BPC6aA-GR4zGZi0ooPYtBe4IgPsSc<br /> <br /> == Antivirus &amp; EDR Evasion ==<br /> <br /> * https://s3cur3th1ssh1t.github.io/Bypass_AMSI_by_manual_modification/<br /> * https://s3cur3th1ssh1t.github.io/Customizing_C2_Frameworks/<br /> * https://s3cur3th1ssh1t.github.io/Powershell-and-the-.NET-AMSI-Interface/<br /> * https://www.blackhillsinfosec.com/tag/sacred-cash-cow-tipping/<br /> * https://blog.securityevaluators.com/creating-av-resistant-malware-part-1-7604b83ea0c0<br /> * https://www.ired.team/offensive-security/defense-evasion<br /> * https://www.youtube.com/watch?v=UO3PjJIiBIE<br /> * https://github.com/matterpreter/DefenderCheck<br /> * https://github.com/RythmStick/AMSITrigger<br /> * https://amsi.fail<br /> <br /> == Initial Access == <br /> <br /> === Phishing ===<br /> * https://0xboku.com/2021/07/12/ArtOfDeviceCodePhish.html<br /> * https://medium.com/maltrak/com-objects-p-2-your-stealthy-fileless-attack-bf78318d9165<br /> * https://infosecwriteups.com/recipe-for-a-successful-phishing-campaign-part-1-2-dc23d927ec55<br /> * https://www.xanthus.io/mastering-the-simulated-phishing-attack<br /> * https://github.com/Arno0x/EmbedInHTML<br /> * https://github.com/L4bF0x/PhishingPretexts<br /> * http://lockboxx.blogspot.com/2018/12/gophish-evilginx2-for-phishing.html<br /> * https://book.hacktricks.xyz/phishing-methodology<br /> <br /> === Password spraying ===<br /> * https://github.com/dafthack/MSOLSpray<br /> * https://pentestlab.blog/2019/09/05/microsoft-exchange-password-spraying/<br /> <br /> == Scanning and Recon ==<br /> * https://github.com/robertdavidgraham/masscan<br /> * https://github.com/projectdiscovery/naabu<br /> * https://github.com/OWASP/Amass<br /> * https://www.shodan.io/<br /> * https://www.zoomeye.org/<br /> <br /> == Opsec ==<br /> * https://www.qubes-os.org/<br /> * https://www.whonix.org/<br /> * https://tails.boum.org/<br /> * The whonix wiki has lots of great info on anonymity even if you're not using whonix: https://www.whonix.org/wiki/Documentation<br /> * https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TransparentProxy<br /> * https://veracrypt.fr/</div>

Amongomous https://enlacehacktivista.org/index.php?title=Paige_Thompson&diff=289 2021-12-26T11:44:14Z

<p>Amongomous: </p> <hr /> <div>[https://edition.cnn.com/2021/06/30/tech/capital-one-hacker-new-charges/index.html Alleged Capital One hacker faces 20 years in prison for stealing 100 million customers' data]<br /> <br /> [[Category:Hackers]]<br /> [[Category:Ongoing Cases]]</div>

Amongomous https://enlacehacktivista.org/index.php?title=Paige_Thompson&diff=288 2021-12-26T11:43:42Z

<p>Amongomous: Created page with &quot;[https://edition.cnn.com/2021/06/30/tech/capital-one-hacker-new-charges/index.html Alleged Capital One hacker faces 20 years in prison for stealing 100 million customers&#039; data] Category:Hackers&quot;</p> <hr /> <div>[https://edition.cnn.com/2021/06/30/tech/capital-one-hacker-new-charges/index.html Alleged Capital One hacker faces 20 years in prison for stealing 100 million customers' data]<br /> <br /> [[Category:Hackers]]</div>

Amongomous https://enlacehacktivista.org/index.php?title=Hacker_History&diff=287 2021-12-26T11:37:17Z

<p>Amongomous: /* 2019 */</p> <hr /> <div>==2008==<br /> * [[Sarah Palin emails]]<br /> <br /> == 2010 ==<br /> * [[Operation Payback]]<br /> <br /> == 2011 ==<br /> * [[Chinga la Migra]]<br /> * [[CorruptBrazil]]<br /> * [[Fuck FBI Friday]]<br /> * [[HBGary]]<br /> * [[LeakyMails]]<br /> * [[Shooting Sheriffs Saturday]]<br /> * [[Sownage]]<br /> * [[Stratfor]]<br /> <br /> == 2012 ==<br /> * [[Apple UDIDs]]<br /> * [[CSLEA]]<br /> * [[Norton AntiVirus]]<br /> * [[Syria emails]]<br /> * [[Bureau Of Justice]]<br /> <br /> == 2013 ==<br /> * [[Project AIG]]<br /> <br /> == 2014 ==<br /> * [[LulzSecPeru]]<br /> * [[Gamma Group]]<br /> * [[Russian Interior Ministry]]<br /> <br /> == 2015 ==<br /> * [[wikipedia:Football Leaks]]<br /> * [[Hacking Team]]<br /> <br /> == 2016 ==<br /> * [[Berat Albayrak Emails]]<br /> * [[Panama Papers]]<br /> * [[Surkov Leaks]]<br /> <br /> == 2017 ==<br /> * [[Bob Otto emails]]<br /> * [[Cellebrite]]<br /> * [[Flexispy]]<br /> * [[Freedom Hosting II]]<br /> <br /> == 2018 ==<br /> * [[Salvini emails]]<br /> * [[Doxxing-Adventskalender]]<br /> <br /> == 2019 ==<br /> * [[GorraLeaks]]<br /> * [[Paco Leaks]]<br /> * [[Milico Leaks]]<br /> * [[Capital One]]<br /> * [[Cayman National Bank and Trust (Isle of Man)]]<br /> * [[Varela Leaks]]<br /> <br /> == 2020 ==<br /> * [[Luanda Leaks]]<br /> * [[BlueLeaks]]<br /> * [[Intel exconfidential Lake]]<br /> <br /> == 2021 ==<br /> * [[Gab]]<br /> * [[Myanmar Investments]]<br /> * [[American Patriots Three Percent‎]]<br /> * [[Verkada]]<br /> * [[Sons of Confederate Veterans]]<br /> * [[MagaCoin]]<br /> * [[Electronic Arts]]<br /> * [[Tea Party Patriots]]<br /> * [[Cyber Partisans]]<br /> * [[HART]]<br /> * [[Policía Nacional Civil de El Salvador]]<br /> * [[Epik]]<br /> * [[Oath Keepers]]<br /> * [[America's Frontline Doctors]]<br /> * [[Twitch]]<br /> * [[Attila Hildmann‎]]<br /> * [[AnibalLeaks]]</div>

Amongomous https://enlacehacktivista.org/index.php?title=Capital_One&diff=286 2021-12-26T11:35:10Z

<p>Amongomous: Created page with &quot;Hack of Capital One by erratic. [https://edition.cnn.com/2021/06/30/tech/capital-one-hacker-new-charges/index.html CNN Business: A hacker gained access to 100 million Capital One credit card applications and accounts] == Explanation of the Hack == The hacker exploited an SSRF vulnerability in ModSecurity to grab [https://github.com/swisskyrepo/PayloadsAllTheThings/blob/master/Server%20Side%20Request%20Forgery/README.md#ssrf-url-for-cloud-instances A...&quot;</p> <hr /> <div>Hack of Capital One by [[Paige Thompson|erratic]].<br /> <br /> [https://edition.cnn.com/2021/06/30/tech/capital-one-hacker-new-charges/index.html CNN Business: A hacker gained access to 100 million Capital One credit card applications and accounts]<br /> <br /> == Explanation of the Hack ==<br /> <br /> The hacker exploited an SSRF vulnerability in ModSecurity to grab [https://github.com/swisskyrepo/PayloadsAllTheThings/blob/master/Server%20Side%20Request%20Forgery/README.md#ssrf-url-for-cloud-instances AWS instance credentials from the EC2 metadata service] and used them to access an S3 bucket containing credit applications.<br /> <br /> Even though the hacker used a combination of iPredator VPN and Tor to stay anonymous at the IP layer, she confessed to her activities in a Slack group of a local tech meetup group and uploaded exfiltration scripts to a GitHub account connected to her real identity. A member of the Slack group reported her to the FBI.<br /> <br /> No data from Capital One was ever leaked anywhere, but she's alleged to also have used the same exploit to deploy crypto miners.<br /> <br /> https://www.courtlistener.com/docket/15983291/united-states-v-thompson/<br /> <br /> [[Category:Hacks]]</div>

Amongomous https://enlacehacktivista.org/index.php?title=Electronic_Arts&diff=285 2021-12-26T03:48:33Z

<p>Amongomous: </p> <hr /> <div>Hack of the video game company Electronics Arts exposing 780GB of data including source code for the company's FrostBite engine, by LAPSUS$.<br /> <br /> [https://www.vice.com/en/article/wx5xpx/hackers-steal-data-electronic-arts-ea-fifa-source-code Vice: Hackers Steal Wealth of Data from Game Giant EA]<br /> <br /> == Explanation of the Hack ==<br /> <br /> The hackers bought a cookie that let them log into an EA slack account on Genesis Market, a marketplace for credentials stolen from computers infected with malware. The hackers then tricked an IT employee into granting them access to the company's internal network.<br /> <br /> * [https://www.vice.com/en/article/7kvkqb/how-ea-games-was-hacked-slack Vice: How Hackers Used Slack to Break into EA Games]<br /> * [https://www.vice.com/en/article/n7b3jm/genesis-market-buy-cookies-slack Vice: Inside the Market for Cookies That Lets Hackers Pretend to Be You]<br /> <br /> The hackers first tried to sell the access and source code on Raidforums. The Raidforums members got the hackers in touch with a Vice journalist who interviewed them and broke news of the hack to EA. The hackers then tried to solicit said journalist to pass along an extortion message to EA. Unfortunately, the journalist refused. The hackers proceeded to blackmail the company for $100m not to release the data and Vice was then able to confirm that EA had indeed received their message. EA does not seem to have paid as the hackers have subsequently released all of the data for free.<br /> <br /> [https://www.vice.com/en/article/m7e57n/hackers-extort-ea-fifa Vice: Hackers Move to Extort Gaming Giant EA]<br /> <br /> == Ransom note ==<br /> <br /> &lt;pre&gt;<br /> Hello EA<br /> <br /> we are the Hackers who breached your src and other data<br /> First of all we apologize to harm your company and reputation<br /> well what is the motive behind any hack Money right ?<br /> so we are here to discuss related to this thing<br /> we checked your statement on media where you mentioned &quot;&quot;No player data was accessed, and we have no reason to believe there is any risk to player privacy,<br /> Is this really true? We, in fact, got to some of your production database we have database (around 2TB of pure data)<br /> As you already know<br /> we have src , tools + unrevealed 2tb pure data<br /> with respect you also know if we leak this it can be big trouble for your company<br /> that's why i have a idea best offer to you<br /> we never sell your data to anyone<br /> only my team have this data if we want to kept his all private we can<br /> the deal is Pay us 100 mil$ in xmr (monero)<br /> we will never disclose your any type of data in public even we take full responsibility it will never leak and it will deleted from our system too<br /> You have 7 days for paying us first 33.34 mil$ to the first address<br /> After 8 th day we will contact news to tell them we have user data.<br /> After the 9th day we will start to post some part of your source code every day on the deepweb til the first payment is completed.<br /> we gave you the best offer if you pay in delay, everything will be deleted and your company can run,<br /> <br /> We have no interest in leaking if you pay. I know this sound like a ransomware, but just for one time, trust us. We just want money<br /> <br /> we know your are afraid of scammers<br /> we sending you here our proof ofdata for your trust<br /> <br /> So, how's that we gonna proceed,<br /> You will maintenance your fifa 21 servers the 5th of july at any time,<br /> Before the maintenance, you will post a message on your twitter account (@EA)<br /> After the first payment completed, you will have 2weeks to send the other 66.66mil USD<br /> <br /> Data : USER_EVENT_SESSION_ENGA... Rows : 348.0G Size : 30.3TB<br /> USER_EVENT_ECONOMY Rows : 108.5G Size : 11.4TB<br /> USER_EVENT_MESSAGING Rows : 190.9G Size : 11.2TB<br /> <br /> <br /> I really hope you understand that we are not kidding and we are friendly.<br /> Thoses addresses are one time payment, mean you can't send two time to an address.<br /> <br /> so here is out payment address<br /> <br /> XMR :<br /> <br /> again we are sorry but you know during this pandemic we all need money , just all people ways are different<br /> <br /> i hope you will send the first payment in less than 7 days so we can continue<br /> <br /> Instruction : Well for our own reasons we don't use any direct contact with you<br /> <br /> we will use indirect contact method<br /> So, I will give you some written content which you will post from your Twitter account so that we can understand.<br /> if you are ready and make payment with the address<br /> post on your twitter account : &quot;maintenance from 5 July 10 to 11 UTC<br /> <br /> If you posted this we will understand you are ready to make the payment and we will proceed<br /> <br /> In Case you want to deny our golden offer<br /> post :<br /> or if you need some more time post &quot;just report this to any reporter and made news again we so we understand you deny our offer and we will start to posting our code and start selling other sensitive data&quot;<br /> <br /> in one line : if you agree do a maintenance 5th of july from 10 to 11 UTC AND POST ON TWITTER<br /> We need 33.34 mil in this week after this We will recontact you in some times<br /> <br /> When the first payment will be completed we will delete 50% of what we have<br /> <br /> On the third payment we will delete the database from our servers<br /> <br /> You will have 2 weeks to pay the others payment<br /> <br /> 33.34 mil in this week after this We will recontact you in some times<br /> <br /> When the first payment will be completed we will delete 50% of what we have<br /> <br /> On the third payment we will delete the database from our servers<br /> <br /> You will have 2 weeks to pay the others payment<br /> hope you will understand and pay us as fast as you can<br /> <br /> Last thing<br /> If possible, do not tell this to the reporter and LE shits because we also do not want your reputation and worth to be down.<br /> &lt;/pre&gt;<br /> <br /> [[Category:Hacks]]</div>

Amongomous https://enlacehacktivista.org/index.php?title=Electronic_Arts&diff=284 2021-12-26T03:37:18Z

<p>Amongomous: </p> <hr /> <div>Hack of the video game company Electronics Arts exposing 780GB of data including source code for the company's FrostBite engine, by LAPSUS$.<br /> <br /> [https://www.vice.com/en/article/wx5xpx/hackers-steal-data-electronic-arts-ea-fifa-source-code Vice: Hackers Steal Wealth of Data from Game Giant EA]<br /> <br /> == Explanation of the Hack ==<br /> <br /> The hackers bought a cookie that let them log into the an EA slack account on Genesis Market, a marketplace for credentials stolen from computers infected with malware. The hackers then tricked an IT employee into granting them access to the company's internal network.<br /> <br /> * [https://www.vice.com/en/article/7kvkqb/how-ea-games-was-hacked-slack Vice: How Hackers Used Slack to Break into EA Games]<br /> * [https://www.vice.com/en/article/n7b3jm/genesis-market-buy-cookies-slack Vice: Inside the Market for Cookies That Lets Hackers Pretend to Be You]<br /> <br /> The hackers first tried to sell the access and source code on Raidforums. The Raidforums members got the hackers in touch with a Vice journalist who interviewed them and broke news of the hack to EA. The hackers then tried to solicit said journalist to pass along an extortion message to EA. Unfortunately, the journalist refused. The hackers proceeded to blackmail the company for $100m not to release the data and Vice was then able to confirm that EA had indeed received their message. EA does not seem to have paid as the hackers have subsequently released all of the data for free.<br /> <br /> [https://www.vice.com/en/article/m7e57n/hackers-extort-ea-fifa Vice: Hackers Move to Extort Gaming Giant EA]<br /> <br /> == Ransom note ==<br /> <br /> &lt;pre&gt;<br /> Hello EA<br /> <br /> we are the Hackers who breached your src and other data<br /> First of all we apologize to harm your company and reputation<br /> well what is the motive behind any hack Money right ?<br /> so we are here to discuss related to this thing<br /> we checked your statement on media where you mentioned &quot;&quot;No player data was accessed, and we have no reason to believe there is any risk to player privacy,<br /> Is this really true? We, in fact, got to some of your production database we have database (around 2TB of pure data)<br /> As you already know<br /> we have src , tools + unrevealed 2tb pure data<br /> with respect you also know if we leak this it can be big trouble for your company<br /> that's why i have a idea best offer to you<br /> we never sell your data to anyone<br /> only my team have this data if we want to kept his all private we can<br /> the deal is Pay us 100 mil$ in xmr (monero)<br /> we will never disclose your any type of data in public even we take full responsibility it will never leak and it will deleted from our system too<br /> You have 7 days for paying us first 33.34 mil$ to the first address<br /> After 8 th day we will contact news to tell them we have user data.<br /> After the 9th day we will start to post some part of your source code every day on the deepweb til the first payment is completed.<br /> we gave you the best offer if you pay in delay, everything will be deleted and your company can run,<br /> <br /> We have no interest in leaking if you pay. I know this sound like a ransomware, but just for one time, trust us. We just want money<br /> <br /> we know your are afraid of scammers<br /> we sending you here our proof ofdata for your trust<br /> <br /> So, how's that we gonna proceed,<br /> You will maintenance your fifa 21 servers the 5th of july at any time,<br /> Before the maintenance, you will post a message on your twitter account (@EA)<br /> After the first payment completed, you will have 2weeks to send the other 66.66mil USD<br /> <br /> Data : USER_EVENT_SESSION_ENGA... Rows : 348.0G Size : 30.3TB<br /> USER_EVENT_ECONOMY Rows : 108.5G Size : 11.4TB<br /> USER_EVENT_MESSAGING Rows : 190.9G Size : 11.2TB<br /> <br /> <br /> I really hope you understand that we are not kidding and we are friendly.<br /> Thoses addresses are one time payment, mean you can't send two time to an address.<br /> <br /> so here is out payment address<br /> <br /> XMR :<br /> <br /> again we are sorry but you know during this pandemic we all need money , just all people ways are different<br /> <br /> i hope you will send the first payment in less than 7 days so we can continue<br /> <br /> Instruction : Well for our own reasons we don't use any direct contact with you<br /> <br /> we will use indirect contact method<br /> So, I will give you some written content which you will post from your Twitter account so that we can understand.<br /> if you are ready and make payment with the address<br /> post on your twitter account : &quot;maintenance from 5 July 10 to 11 UTC<br /> <br /> If you posted this we will understand you are ready to make the payment and we will proceed<br /> <br /> In Case you want to deny our golden offer<br /> post :<br /> or if you need some more time post &quot;just report this to any reporter and made news again we so we understand you deny our offer and we will start to posting our code and start selling other sensitive data&quot;<br /> <br /> in one line : if you agree do a maintenance 5th of july from 10 to 11 UTC AND POST ON TWITTER<br /> We need 33.34 mil in this week after this We will recontact you in some times<br /> <br /> When the first payment will be completed we will delete 50% of what we have<br /> <br /> On the third payment we will delete the database from our servers<br /> <br /> You will have 2 weeks to pay the others payment<br /> <br /> 33.34 mil in this week after this We will recontact you in some times<br /> <br /> When the first payment will be completed we will delete 50% of what we have<br /> <br /> On the third payment we will delete the database from our servers<br /> <br /> You will have 2 weeks to pay the others payment<br /> hope you will understand and pay us as fast as you can<br /> <br /> Last thing<br /> If possible, do not tell this to the reporter and LE shits because we also do not want your reputation and worth to be down.<br /> &lt;/pre&gt;<br /> <br /> [[Category:Hacks]]</div>

Amongomous https://enlacehacktivista.org/index.php?title=Electronic_Arts&diff=283 2021-12-26T03:33:04Z

<p>Amongomous: </p> <hr /> <div>Hack of the video game company Electronics Arts exposing 780GB of data including source code for the company's FrostBite engine, by LAPSUS$.<br /> <br /> [https://www.vice.com/en/article/wx5xpx/hackers-steal-data-electronic-arts-ea-fifa-source-code Vice: Hackers Steal Wealth of Data from Game Giant EA]<br /> <br /> == Explanation of the Hack ==<br /> <br /> The hackers bought a cookie that let them log into the an EA slack account on Genesis Market, a marketplace for credentials stolen from computers infected with malware. The hackers then tricked an IT employee into granting them access to the company's internal network.<br /> <br /> * [https://www.vice.com/en/article/7kvkqb/how-ea-games-was-hacked-slack Vice: How Hackers Used Slack to Break into EA Games]<br /> * [https://www.vice.com/en/article/n7b3jm/genesis-market-buy-cookies-slack Vice: Inside the Market for Cookies That Lets Hackers Pretend to Be You]<br /> <br /> The hackers first tried to sell the access and source code on Raidforums. The Raidforums members got the hackers in touch with a Vice journalist who interviewed them and broke news of the hack to EA. The hackers then tried to solicit said journalist to pass along a ransom message to EA. Unfortunately, the journalist refused. The hackers proceeded to send a ransom message asking for $100m not to release the data and Vice was then able to confirm that EA had indeed received it. EA does not seem to have paid as the hackers have subsequently released all of the data for free.<br /> <br /> [https://www.vice.com/en/article/m7e57n/hackers-extort-ea-fifa Vice: Hackers Move to Extort Gaming Giant EA]<br /> <br /> == Ransom message ==<br /> <br /> &lt;pre&gt;<br /> Hello EA<br /> <br /> we are the Hackers who breached your src and other data<br /> First of all we apologize to harm your company and reputation<br /> well what is the motive behind any hack Money right ?<br /> so we are here to discuss related to this thing<br /> we checked your statement on media where you mentioned &quot;&quot;No player data was accessed, and we have no reason to believe there is any risk to player privacy,<br /> Is this really true? We, in fact, got to some of your production database we have database (around 2TB of pure data)<br /> As you already know<br /> we have src , tools + unrevealed 2tb pure data<br /> with respect you also know if we leak this it can be big trouble for your company<br /> that's why i have a idea best offer to you<br /> we never sell your data to anyone<br /> only my team have this data if we want to kept his all private we can<br /> the deal is Pay us 100 mil$ in xmr (monero)<br /> we will never disclose your any type of data in public even we take full responsibility it will never leak and it will deleted from our system too<br /> You have 7 days for paying us first 33.34 mil$ to the first address<br /> After 8 th day we will contact news to tell them we have user data.<br /> After the 9th day we will start to post some part of your source code every day on the deepweb til the first payment is completed.<br /> we gave you the best offer if you pay in delay, everything will be deleted and your company can run,<br /> <br /> We have no interest in leaking if you pay. I know this sound like a ransomware, but just for one time, trust us. We just want money<br /> <br /> we know your are afraid of scammers<br /> we sending you here our proof ofdata for your trust<br /> <br /> So, how's that we gonna proceed,<br /> You will maintenance your fifa 21 servers the 5th of july at any time,<br /> Before the maintenance, you will post a message on your twitter account (@EA)<br /> After the first payment completed, you will have 2weeks to send the other 66.66mil USD<br /> <br /> Data : USER_EVENT_SESSION_ENGA... Rows : 348.0G Size : 30.3TB<br /> USER_EVENT_ECONOMY Rows : 108.5G Size : 11.4TB<br /> USER_EVENT_MESSAGING Rows : 190.9G Size : 11.2TB<br /> <br /> <br /> I really hope you understand that we are not kidding and we are friendly.<br /> Thoses addresses are one time payment, mean you can't send two time to an address.<br /> <br /> so here is out payment address<br /> <br /> XMR :<br /> <br /> again we are sorry but you know during this pandemic we all need money , just all people ways are different<br /> <br /> i hope you will send the first payment in less than 7 days so we can continue<br /> <br /> Instruction : Well for our own reasons we don't use any direct contact with you<br /> <br /> we will use indirect contact method<br /> So, I will give you some written content which you will post from your Twitter account so that we can understand.<br /> if you are ready and make payment with the address<br /> post on your twitter account : &quot;maintenance from 5 July 10 to 11 UTC<br /> <br /> If you posted this we will understand you are ready to make the payment and we will proceed<br /> <br /> In Case you want to deny our golden offer<br /> post :<br /> or if you need some more time post &quot;just report this to any reporter and made news again we so we understand you deny our offer and we will start to posting our code and start selling other sensitive data&quot;<br /> <br /> in one line : if you agree do a maintenance 5th of july from 10 to 11 UTC AND POST ON TWITTER<br /> We need 33.34 mil in this week after this We will recontact you in some times<br /> <br /> When the first payment will be completed we will delete 50% of what we have<br /> <br /> On the third payment we will delete the database from our servers<br /> <br /> You will have 2 weeks to pay the others payment<br /> <br /> 33.34 mil in this week after this We will recontact you in some times<br /> <br /> When the first payment will be completed we will delete 50% of what we have<br /> <br /> On the third payment we will delete the database from our servers<br /> <br /> You will have 2 weeks to pay the others payment<br /> hope you will understand and pay us as fast as you can<br /> <br /> Last thing<br /> If possible, do not tell this to the reporter and LE shits because we also do not want your reputation and worth to be down.<br /> &lt;/pre&gt;<br /> <br /> [[Category:Hacks]]</div>

Amongomous