Hiding your callback through HTTPS
https://anonsys.net/display/bf69967c-1868-fce9-5e30-613967945901
Hiding your callback through HTTPS
https://anonsys.net/display/bf69967c-1868-fce9-5e30-613967945901
Used #girsh today for the first time with a #HTB box. It is a listener for a reverse shell spawning a fully interactive shell automatically. Worked quite well. I must say, I do miss autocomplete if it is not available.
I did not do a code review of this tool as I was only using it on an isolated VM. Run at your own risk ;)
BPFDoor Malware Uses Reverse Shell to Expand Control Over Compromised Networks
https://gbhackers.com/bpfdoor-malware/
#Infosec #Security #Cybersecurity #CeptBiro #BPFDoor #Malware #ReverseShell #CompromisedNetworks
Malware found on NPM infecting local package with reverse shell
https://www.reversinglabs.com/blog/malicious-npm-patch-delivers-reverse-shell
#HackerNews #Malware #NPM #ReverseShell #CyberSecurity #SoftwareDevelopment
Hacker in Snowflake Extortions May Be a U.S. Soldier
https://krebsonsecurity.com/2024/11/hacker-in-snowflake-extortions-may-be-a-u-s-soldier/
#Ne'er-Do-WellNews #ConnorRileyMoucka #telekomterrorist #ALittleSunshine #TheComingStorm #DDoS-for-Hire #JohnErinBinns #cyb3rph4nt0m #Kiberphant0m #Reverseshell #Ransomware #SouthKorea #buttholio #Proman557 #Snowflake #Vars_Secc #Judische #Shi-Bot #Verizon #Boxfan #Naver #Waifu #ATT
Mon dieu - Penelope is alright! Probably my favorite #reverseshell catcher for #linux targets. https://github.com/brightio/penelope
Highly recommend!
Chinese APT Abuses VSCode to Target Government in Asia
[TR: Wait what? VSCode has a reverse shell feature?! Turn this off. Sounds like something proposed by another large company’s dev team recently.] #devtools #reverseshell #c2
https://unit42.paloaltonetworks.com/stately-taurus-abuses-vscode-southeast-asian-espionage/
A first in our telemetry: Chinese APT Stately Taurus uses Visual Studio Code to maintain a reverse shell in victims' environments for Southeast Asian espionage. A first in our telemetry: Chinese APT Stately Taurus uses Visual Studio Code to maintain a reverse shell in victims' environments for Southeast Asian espionage.
Why ara #poc for #vulnerability always #reverseshell ? I get that a reverse shell via RCE is a scary magic trick. But in practical #pentesting more often than not I'd rather have a single fire DNS lookup or HTTP request. It's much saver than dropping a shell into a customers environment and it does the job.