Friday, June 14, 2019

Open-source intelligence (OSINT)

Note : Copied from Github (jivoi/awesome-osint) for future reference if the original source not available.

General Search

The main search engines used by users.

Thursday, June 13, 2019

Parrot and Kali linux tools

Anon surf
""""""""""
Anon surf setting up the environment for anonymous internet browsing and it all so setup tor network to user. it will stop all the vulnerable apps and services and start tor connection to the machine. Then entire connection will setup using annonsurf
anonsurf start
anonsurf stop
anonsurf myip  -  check ip

zulucrypt, sirikali
"""""""""""""""""""
both are veracrypt like tools.

Remote desktop viewer
"""""""""""""""""""""
get rdp ssh etc connections to linux and windows machines

qBittorrent
"""""""""""
Bit torrent tool

Saturday, March 30, 2019

What is shellcode

Simply shellcode is opcode in machine language.
This can be extract from low level languages such as assembly, c
Lets say there is a c file which do something called dosomething.c

gcc -o dosomething.o dosomething.c

When execute shellcode.o it will do something. We need to get machine code of this process.

C:\Users\Ali\Desktop>objdump -D shellcode.o

Now we can see machine code and asm instructions. Using this we can build the shellcode.

00000000 <.text>:
   0:   31 c0                   xor    %eax,%eax
   2:   50                      push   %eax
   3:   b8 41 41 41 64          mov    $0x64414141,%eax
   8:   c1 e8 08                shr    $0x8,%eax
   b:   c1 e8 08                shr    $0x8,%eax
   e:   c1 e8 08                shr    $0x8,%eax

Thursday, February 7, 2019

Password extractor from local machine

LaZagne project is python based tool to extract passwords from local machine. Good password extractor. For remote use psexec can be utilized.

Github project link - https://github.com/AlessandroZ/LaZagne