goBox - GO Sandbox To Run Untrusted Code

Monday, April 20, 2020 9:07 PM Posted by Unknown

GO sandbox to run untrusted code.
goBox uses Ptrace to hook into READ syscalls, giving you the option to accept or deny syscalls before they are executed.

Usage
Usage of ./gobox:

  gobox [FLAGS] command

  flags:
    -h Print Usage.
    -n value
        A glob pattern for automatically blocking file reads.
    -y value
        A glob pattern for automatically allowing file reads.

Use cases

You want to install anything
> gobox -n "/etc/password.txt" npm install sketchy-module

  BLOCKED READ on /etc/password.txt
> gobox -n "/etc/password.txt" bash <(curl  https://danger.zone/install.sh)

  BLOCKED READ on /etc/password.txt

You are interested in what file reads you favourite program makes.
Sure you could use strace, but it references file descriptors goBox makes the this much easier at a glance by printing the absolute path of the fd.
> gobox ls
Wanting to READ /usr/lib/x86_64-linux-gnu/libselinux.so.1 [y/n]
NOTE: It's definitely a better idea to encrypt all your sensitive data, goBox should probably only be used when that is inconvenient or impractical.
NOTE: I haven't made any effort for cross-x compatibility so it currently only works on linux. I'd happily accept patches to improve portability.




via KitPloit
This article is the property of Tenochtitlan Offensive Security. Verlo Completo --> https://tenochtitlan-sec.blogspot.com
Related posts

0 comments

How To Start | How To Become An Ethical Hacker

6:57 PM Posted by Unknown
Are you tired of reading endless news stories about ethical hacking and not really knowing what that means? Let's change that!
This Post is for the people that:

  • Have No Experience With Cybersecurity (Ethical Hacking)
  • Have Limited Experience.
  • Those That Just Can't Get A Break


OK, let's dive into the post and suggest some ways that you can get ahead in Cybersecurity.
I receive many messages on how to become a hacker. "I'm a beginner in hacking, how should I start?" or "I want to be able to hack my friend's Facebook account" are some of the more frequent queries. Hacking is a skill. And you must remember that if you want to learn hacking solely for the fun of hacking into your friend's Facebook account or email, things will not work out for you. You should decide to learn hacking because of your fascination for technology and your desire to be an expert in computer systems. Its time to change the color of your hat 😀

 I've had my good share of Hats. Black, white or sometimes a blackish shade of grey. The darker it gets, the more fun you have.

If you have no experience don't worry. We ALL had to start somewhere, and we ALL needed help to get where we are today. No one is an island and no one is born with all the necessary skills. Period.OK, so you have zero experience and limited skills…my advice in this instance is that you teach yourself some absolute fundamentals.
Let's get this party started.
  •  What is hacking?
Hacking is identifying weakness and vulnerabilities of some system and gaining access with it.
Hacker gets unauthorized access by targeting system while ethical hacker have an official permission in a lawful and legitimate manner to assess the security posture of a target system(s)

 There's some types of hackers, a bit of "terminology".
White hat — ethical hacker.
Black hat — classical hacker, get unauthorized access.
Grey hat — person who gets unauthorized access but reveals the weaknesses to the company.
Script kiddie — person with no technical skills just used pre-made tools.
Hacktivist — person who hacks for some idea and leaves some messages. For example strike against copyright.
  •  Skills required to become ethical hacker.
  1. Curosity anf exploration
  2. Operating System
  3. Fundamentals of Networking
*Note this sites





Related articles


0 comments

Medusa: A Speedy, Parallel And Modular Login Brute-forcing Tool

10:46 AM Posted by Unknown

About Medusa
   Medusa is a speedy, parallel, and modular, login brute-forcer. The goal is to support as many services which allow remote authentication as possible. The author considers following items as some of the key features of this application:

   Thread-based parallel testing. Brute-force testing can be performed against multiple hosts, users or passwords concurrently.

   Flexible user input. Target information (host/user/password) can be specified in a variety of ways. For example, each item can be either a single entry or a file containing multiple entries. Additionally, a combination file format allows the user to refine their target listing.

   Modular design. Each service module exists as an independent .mod file. This means that no modifications are necessary to the core application in order to extend the supported list of services for brute-forcing.

   Multiple protocols supported. Many services are currently supported (e.g. SMB, HTTP, MS-SQL, POP3, RDP, SSHv2, among others).

   See doc/medusa.html for Medusa documentation. For additional information:

Building on macOS

#getting the source
git clone https://github.com/jmk-foofus/medusa
cd medusa

#macOS dependencies
brew install freerdp
$ export FREERDP2_CFLAGS='-I/usr/local/include'
$ export FREERDP2_LIBS='-I/usr/local/lib/freerdp'

#building
./configure
make

#executing

./src/medusa
Medusa's Installation
   Medusa is already installed on Kali Linux, Parrot Security OS, BlackArch and any other Linux distros based for security pentesting purposes.

   For Debian-based distro users, open your Terminal and enter this command:
sudo apt install medusa
   For Arch Linux-based distro users, enter this command: sudo pacman -S medusa

About the author:

You might like these similar tools:

Read more


  1. Hacking Tools Windows
  2. Hack App
  3. Hacker Tools Mac
  4. Best Hacking Tools 2019
  5. Pentest Tools Github
  6. World No 1 Hacker Software
  7. Pentest Box Tools Download
  8. Hacker Security Tools
  9. Hacking Tools 2019
  10. Pentest Tools Online
  11. Hacking Tools Online
  12. Hacking Tools Windows 10
  13. Hacking Tools Free Download
  14. Pentest Tools Free
  15. Hacking Tools For Beginners
  16. Bluetooth Hacking Tools Kali
  17. How To Make Hacking Tools
  18. Pentest Tools Open Source
  19. Best Hacking Tools 2019
  20. Hacker Tools 2020
  21. Pentest Tools Github
  22. Pentest Tools Apk
  23. How To Make Hacking Tools
  24. How To Hack
  25. Github Hacking Tools
  26. Top Pentest Tools
  27. Hacker Tools Online
  28. Easy Hack Tools
0 comments

How To Bind Payload Any Software Using Shellter

10:25 AM Posted by Unknown
Related news
  1. Hacking Tools Hardware
  2. New Hacker Tools
  3. What Are Hacking Tools
  4. Nsa Hack Tools
  5. World No 1 Hacker Software
  6. New Hacker Tools
  7. Pentest Tools Tcp Port Scanner
  8. Pentest Tools Alternative
  9. Hacker Tools Free
  10. Pentest Tools Apk
  11. Hacker Tools Online
  12. Hacking Tools Hardware
  13. Free Pentest Tools For Windows
  14. Hacking Tools Kit
  15. Ethical Hacker Tools
  16. Nsa Hacker Tools
  17. Pentest Tools Port Scanner
  18. Hacks And Tools
  19. Hacker Tools Windows
  20. Hack Tools Online
  21. Hacking App
  22. Best Pentesting Tools 2018
  23. Hack Tool Apk
  24. Pentest Tools Bluekeep
  25. Hacker Tools
  26. Hacker Tools 2019
  27. Pentest Tools Windows
0 comments

La Última Charla En Que Participé Antes Del COVID-19

9:35 AM Posted by Unknown
Justo antes de que se declarara el periodo de confinamiento en España, yo tuve la oportunidad de participar en un seminario de ciberseguridad en la ciudad de Ontinyent gracias a la organización AITEX. En el seminario participados dos ponentes, donde intentamos dar algunos consejos de ciberseguridad orientados a empresas de la zona. Después de esta charla, ya solo estuve en RootedCON con una conferencia nueva sobre las Gremlin Botnets.

Figura 1: La última charla en que participé antes del COVID-19

Mi compañero en este seminario habló de Ransomware, del problema de la fortificación de seguridad de los puestos de trabajo, y de cómo los ataques de Phishing son uno de los mayores problemas en las pequeñas y medianas empresas, sobre todo para aquellas que no tienen equipos de seguridad dedicados. Continuando con su charla, yo hablé de los ataques de Phishing para robar Tokens OAuth y comprometer el correo electrónico de las personas clave de las organizaciones, utilizando nuestra herramienta SAPPO de la que os he hablado por aquí varias veces.


Figura: Seminario de Ciberseguridad por Chema Alonso
Además, para terminar, hablé de las amenazas a las que nos enfrenamos en el futuro gracias a la Inteligencia Artificial, y las evoluciones en Cognitive Services de visión artificial, recreación de personas, DeepFakes o ataques de CEO. Algo de lo que también he hablado mucho por aquí. Os dejo por aquí algunas de las referencias de los temas de los que hablo en la charla:


Este seminario, donde hablo de lo que he estado trabajando en los últimos tiempos, pero tiene la curiosidad de que es la última charla que he impartido y que, junto a la de RootedCON 2020, han sido las dos únicas en las que he participado este año.

Saludos Malignos!

Autor: Chema Alonso (Contactar con Chema Alonso)



Sigue Un informático en el lado del mal RSS 0xWord

This article is the property of Tenochtitlan Offensive Security. Verlo Completo --> https://tenochtitlan-sec.blogspot.com

Read more


0 comments

How To Recover Files That Are Deleted From Recycle Bin

8:02 AM Posted by Unknown
How To Recover Files That Are Deleted From Recycle Bin

How To Recover Files That Are Deleted From Recycle Bin

How To Recover Files That Are Deleted From Recycle Bin

Well, Windows users have a bad habit of removing files from recycle bin. Deleting useless files from Recycle Bin helps a user to save some storage space which can improve the speed of a computer. However, Windows users do that more frequently and later regret. Actually, Recycle Bin is a place from where we can get back our deleted files and folders.
Sometimes, we accidentally delete our important files and folders and due to some reason we lose them from Recycle bin too! At that time, we search for recovery methods. Well, there are many methods available over the web which can help you to recover deleted files from computer, but, when it comes to reliability, nothing can beat EaseUS.

What Is EaseUS Data Recovery Wizard?

EaseUS is one of the leading software providers which is known for its data recovery programme. EaseUS offers some free data recovery software that can help you to recover deleted, formatted or lost data from PC, laptop or removable device easily and quickly.
One of the best thing about EaseUS is that it provides tools for recycle bin recovery which can help you to get back files that you have deleted from the Recycle bin itself. EaseUS Data Recovery Wizard free can easily recover lost files, pictures, documents, videos and more from deleting, formatting, partition loss, OS crash, virus attack and other data loss cases.

How To Recover Deleted Files?

If you are struggling to get back your lost data files, then here is an easy data recovery method which will help you to get back deleted files on your computer. Below, we are going to share a mini guide on how to use EaseUS Recycle Bin Recovery to get back your deleted data.
Step 1. First of all, you need to download and install EaseUS Data Recovery Wizard on your Windows computer and then launch it normally. You need to select the location where you want to scan and then click on 'Scan'
Step 2. Now, wait for few minutes until the tool finishes scanning your drive. The tool search for files that got deleted or cleaned from the Recycle Bin.
Step 3. Now it will show you files that you can recover. Here you need to click on the file which you want to recover and click on 'Recover'
That's it, you are done! This is how you can use EaseUS data recovery to get back your deleted files on your computer.

Benefits of EaseUS Data Recovery

Well, the data recovery tool provided by EaseUS comes with many benefits. It can not only recover accidentally deleted files, but it can also recover data in case of Virus Attacks, Hard Disk Damage, OS Crash etc.
You can also use this awesome data recovery wizard to recover deleted files from External Disk, USB Drive, Camcorder, Mobile Devices, Zip Drive, iPod, Music Player and more.
Overall, this is one of the best data recovery tools you can have on your Windows computer. EaseUS Data Recovery also has a free version with restricted features. Overall, this is a stress-free solution to get back your deleted files

More articles


  1. Hack Tools Github
  2. Pentest Tools Github
  3. Hacking Tools For Games
  4. Pentest Tools Linux
  5. Hack Tool Apk No Root
  6. Hacking Tools Usb
  7. Pentest Box Tools Download
  8. Hacking Tools And Software
  9. Pentest Tools Apk
  10. Free Pentest Tools For Windows
  11. Hacking Tools For Games
  12. Tools Used For Hacking
  13. Hacking App
  14. Pentest Tools For Windows
  15. New Hack Tools
  16. Hack Tools For Games
  17. Tools 4 Hack
  18. Hacker Tools Hardware
  19. Hacking Tools For Windows 7
  20. Hacker Tools For Windows
0 comments

UserRecon Tool | Find Usernames | OSINT Tool

7:55 AM Posted by Unknown
More articles
0 comments
Subscribe to: Posts (Atom)
abcs