junio 2021 – hacklejandría.com

Qué son los metadatos y cómo se borran

15/06/2021 por Juan Espin

Los metadatos son los datos que se utilizan para describir otros datos, por lo que solemos referirnos a ellos como los «datos sobre datos». Los archivos que generas en tu ordenador con diferentes programas tienen datos concretos, que son los que tú introduces, pero también hay otra serie de datos que describen otras características sobre el … Leer más

¿Qualys, Rapid7 o Tenable Nessus?

09/05/202214/06/2021 por Juan Espin

VMDR (Qualys) VMDR: lo básico Plataformas: Windows, Linux / Unix, BSD, Apple Mac OS Cobertura de escaneo: servidores, dispositivos de red, periféricos, estaciones de trabajo (cualquier dispositivo con una dirección IP) Precios: prueba gratuita; VMDR empresarial desde $ 6,368 ($ 199 por activo, mínimo 32 activos) Ventajas de VMDR Jugador temprano en el campo de la vulnerabilidad … Leer más

Plan de Ciberseguridad o Plan de Director de Ciberseguridad

09/05/202214/06/2021 por Juan Espin

Hoy en día, con la evolución de las tecnologías de la información y comunicaciones, podemos automatizar la mayoría de las tareas realizadas en nuestra empresa. Y tienen tanta importancia que muchas de esas tareas sería imposible realizarlas sin ellas. Las empresas manejan una gran cantidad de información: bases de datos de clientes, facturas, pedidos, etc. … Leer más

CSAF - Cyber Security Awareness Framework 26/04/2024

The Cyber Security Awareness Framework (CSAF) is a structured approach aimed at enhancing Cybersecurity" title="Cybersecurity">cybersecurity awareness and understanding among individuals, organizations, and communities. It provides guidance for the development of effective Cybersecurity" title="Cybersecurity">cybersecurity awareness programs, covering key areas such as assessing awareness needs, creating educational m aterials, conducting training and simulations, implementing communication campaigns, and […]

Espionage - A Linux Packet Sniffing Suite For Automated MiTM Attacks 25/04/2024

Espionage is a network packet sniffer that intercepts large amounts of data being passed through an interface. The tool allows users to to run normal and verbose traffic analysis that shows a live feed of traffic, revealing packet direction, protocols, flags, etc. Espionage can also spoof ARP so, all data sent by the target gets […]

HackerInfo - Infromations Web Application Security 24/04/2024

Infromations Web Application Security install : sudo apt install python3 python3-pippip3 install termcolorpip3 install googlepip3 install optioncompletepip3 install bs4pip3 install prettytablegit clone https://github.com/Matrix07ksa/HackerInfo/cd HackerInfochmod +x HackerInfo./HackerInfo -h python3 HackerInfo.py -d www.facebook.com -f pdf [+] [+] https://www.facebook.com/gms_hub/share/dcvsda_wf.pdfhttps://www.facebook.com/gms_hub/share/facebook_groups_for_pages.pdfhttps://www.facebook.com/gms_hub/share/videorequirementschart.pdfhttps://www.facebook.com/gms_hub/share/fundraise-on-facebook_hi_in.pdfhttps://www.facebook.com/gms_hub/share/bidding-strategy_decision-tree_en_us.pdfhttps://www.facebook.com/gms_hub/share/fundraise-on-facebook_es_la.pdfhttps://www.facebook.com/gms_hub/share/fundraise-on-facebook_ar.pdfhttps://www.facebook.com/gms_hub/share/fundraise-on-facebook_ur_pk.pdfhttps://www.facebook.com/gms_hub/share/fundraise-on-facebook_cs_cz.pdfhttps://www.facebook.com/gms_hub/share/fundraise-on-facebook_it_it.pdfhttps://www.facebook.com/gms_hub/share/fundraise-on-facebook_pl_pl.pdfh ttps://www.facebook.com/gms_hub/share/fundraise-on-facebook_nl.pdfhttps://www.facebook.com/gms_hub/share/fundraise-on-facebook_pt_br.pdfhttps://www.facebook.com/gms_hub/share/creative-best-practices_id_id.pdfhttps://www.facebook.com/gms_hub/share/creative-best-practices_fr_fr.pdfhttps://www.facebook.com/gms_hub/share/fundraise-on-facebook_tr_tr.pdfhttps://www.facebook.com/gms_hub/share/creative-best-practices_hi_in.pdfhttps://www.facebook.com/rsrc.php/yA/r/AVye1Rrg376.pdfhttps://www.facebook.com/gms_hub/share/creative-best-practices_ur_pk.pdfhttps://www.facebook.com/gms_hub/share/creative-best-practices_nl_nl.pdfhttps://www.facebook.com/gms_hub/share/creative-best-practices_de_de.pdfhttps://www.facebook.com/gms_hub/share/fundraise-on-facebook_de_de.pdfhttps://www.facebook.com/gms_hub/share/creative-best-practices_cs_cz.pdfhttps://www.facebook.com/gms_hub/share/fundraise-on-facebook_sk_sk.pdfhttps://www.facebook.com/gms _hub/share/creative-best-practices_japanese_jp.pdf#####################[Finshid]######################## Usage: Library install hackinfo: sudo python setup.py installpip3 install hackinfo Download HackerInfo

C2-Tracker - Live Feed Of C2 Servers, Tools, And Botnets 24/04/2024

Free to use IOC feed for various tools/malware. It started out for just C2 tools but has morphed into tracking infostealers and botnets as well. It uses shodan.io/">Shodan searches to collect the IPs. The most recent collection is always stored in data; the IPs are broken down by tool and there is an all.txt. The […]

VectorKernel - PoCs For Kernelmode Rootkit Techniques Research 18/04/2024

PoCs for Kernelmode rootkit techniques research or education. Currently focusing on Windows OS. All modules support 64bit OS only. NOTE Some modules use ExAllocatePool2 API to allocate kernel pool memory. ExAllocatePool2 API is not supported in OSes older than Windows 10 Version 2004. If you want to test the modules in old OSes, replace ExAllocatePool2 […]

Cookie-Monster - BOF To Steal Browser Cookies & Credentials 17/04/2024

Steal browser cookies for edge, chrome and firefox through a BOF or exe! Cookie-Monster will extract the WebKit master key, locate a browser process with a handle to the Cookies and Login Data files, copy the handle(s) and then filelessly download the target. Once the Cookies/Login Data file(s) are downloaded, the python decryption script can […]

NoArgs - Tool Designed To Dynamically Spoof And Conceal Process Arguments While Staying Undetected 16/04/2024

NoArgs is a tool designed to dynamically spoof and conceal process arguments while staying undetected. It achieves this by hooking into Windows APIs to dynamically manipulate the Windows internals on the go. This allows NoArgs to alter process arguments discreetly. Default Cmd: Windows Event Logs: Using NoArgs: Windows Event Logs: Functionality Overview The tool primarily […]

Frameless-Bitb - A New Approach To Browser In The Browser (BITB) Without The Use Of Iframes, Allowing The Bypass Of Traditional Framebusters Implemented By Login Pages Like Microsoft And The Use With Evilginx 15/04/2024

A new approach to Browser In The Browser (BITB) without the use of iframes, allowing the bypass of traditional framebusters implemented by login pages like Microsoft. This POC code is built for using this new BITB with Evilginx, and a Microsoft Enterprise phishlet. Before diving deep into this, I recommend that you first check my […]

Toolkit - The Essential Toolkit For Reversing, Malware Analysis, And Cracking 14/04/2024

This tool compilation is carefully crafted with the purpose of being useful both for the beginners and veterans from the malware analysis world. It has also proven useful for people trying their luck at the cracking underworld. It's the ideal complement to be used with the manuals from the site, and to play with the […]

Porch-Pirate - The Most Comprehensive Postman Recon / OSINT Client And Framework That Facilitates The Automated Discovery And Exploitation Of API Endpoints And Secrets Committed To Workspaces, Collections, Requests, Users And Teams 12/04/2024

Porch Pirate started as a tool to quickly uncover Postman secrets, and has slowly begun to evolve into a multi-purpose reconaissance / OSINT framework for Postman. While existing tools are great proof of concepts, they only attempt to identify very specific keywords as "secrets", and in very limited locations, with no consideration to recon beyond […]