الثلاثاء، 5 مايو 2020

Pcap Of Wannacry Spreading Using EthernalBlue

Saw that a lot of people were looking for a pcap with WannaCry spreading Using EthernalBlue.

I have put together a little "petri dish" test environment and started looking for a sample that has the exploit. Some samples out there simply do not have the exploit code, and even tough they will encrypt the files locally, sometimes the mounted shares too, they would not spread.

Luckily, I have found this nice blog post from McAfee Labs: https://securingtomorrow.mcafee.com/mcafee-labs/analysis-wannacry-ransomware/ with the reference to the sample SHA256: 24d004a104d4d54034dbcffc2a4b19a11f39008a575aa614ea04703480b1022c (they keep referring to samples with MD5, which is still a very-very bad practice, but the hash is MD5: DB349B97C37D22F5EA1D1841E3C89EB4)

Once I got the sample from the VxStream Sandbox site, dropped it in the test environment, and monitored it with Security Onion. I was super happy to see it spreading, despite the fact that for the first run my Windows 7 x64 VM went to BSOD as the EthernalBlue exploit failed.

But the second run was a full success, all my Windows 7 VMs got infected. Brad was so kind and made a guest blog post at one of my favorite sites, www.malware-traffic-analysis.net so you can find the pcap, description of the test environment and some screenshots here: http://malware-traffic-analysis.net/2017/05/18/index2.htmlRelated word

goGetBucket - A Penetration Testing Tool To Enumerate And Analyse Amazon S3 Buckets Owned By A Domain


When performing a recon on a domain - understanding assets they own is very important. AWS S3 bucket permissions have been confused time and time again, and have allowed for the exposure of sensitive material.

What this tool does, is enumerate S3 bucket names using common patterns I have identified during my time bug hunting and pentesting. Permutations are supported on a root domain name using a custom wordlist. I highly recommend the one packaged within AltDNS.

The following information about every bucket found to exist will be returned:
  • List Permission
  • Write Permission
  • Region the Bucket exists in
  • If the bucket has all access disabled

Installation
go get -u github.com/glen-mac/goGetBucket

Usage
goGetBucket -m ~/tools/altdns/words.txt -d <domain> -o <output> -i <wordlist>
Usage of ./goGetBucket:
-d string
Supplied domain name (used with mutation flag)
-f string
Path to a testfile (default "/tmp/test.file")
-i string
Path to input wordlist to enumerate
-k string
Keyword list (used with mutation flag)
-m string
Path to mutation wordlist (requires domain flag)
-o string
Path to output file to store log
-t int
Number of concurrent threads (default 100)
Throughout my use of the tool, I have produced the best results when I feed in a list (-i) of subdomains for a root domain I am interested in. E.G:
www.domain.com
mail.domain.com
dev.domain.com
The test file (-f) is a file that the script will attempt to store in the bucket to test write permissions. So maybe store your contact information and a warning message if this is performed during a bounty?
The keyword list (-k) is concatenated with the root domain name (-d) and the domain without the TLD to permutate using the supplied permuation wordlist (-m).
Be sure not to increase the threads too high (-t) - as the AWS has API rate limiting that will kick in and start giving an undesired return code.

Related articles

الاثنين، 4 مايو 2020

PortWitness - Tool For Checking Whether A Domain Or Its Multiple Sub-Domains Are Up And Running



PortWitness is a bash tool designed to find out active domain and subdomains of websites using port scanning. It helps penetration testers and bug hunters collect and gather information about active subdomains for the domain they are targeting.PortWitness enumerates subdomains using Sublist3r and uses Nmap alongwith nslookup to check for active sites.Active domain or sub-domains are finally stored in an output file.Using that Output file a user can directly start testing those sites.
Sublist3r has also been integrated with this module.It's very effective and accurate when it comes to find out which sub-domains are active using Nmap and nslookup.
This tool also helps a user in getting the ip addresses of all sub-domains and stores then in a text file , these ip's can be used for further scanning of the target.

Installation
git clone https://github.com/viperbluff/PortWitness.git

BASH
This tool has been created using bash scripting so all you require is a linux machine.

Usage
bash portwitness.sh url




More info

الجمعة، 1 مايو 2020

Ep 28: Grimdunk Is Live!

Ep 28: Grimdunk is live!
We talk with Mike Hobbs about Warhammer 40,000 and his new fantasy wargame project.

https://soundcloud.com/user-989538417/episode-28-grimdunk

Join the conversation at https://theveteranwargamer.blogspot.com, email theveteranwargamer@gmail.com, Twitter @veteranwargamer

Follow Mike on Twitter @wargamer_mike or his blog http://mikehobbs.co.uk/

Other companies we mentioned:
McVitie's Dark Chocolate Digestives http://www.mcvities.co.uk/products/chocolate-digestives
McVitie's Chocolate Hobnobs http://www.mcvities.co.uk/products/hobnobs
Sachertorte https://www.sacher.com/en/original-sacher-cake/
Previous Episode with Mike https://soundcloud.com/user-989538417/episode-15-in-my-day
Oldhammer https://soundcloud.com/user-989538417/episode-3-everything-oldhammer-is-new-again
Oldhammer II https://soundcloud.com/user-989538417/episode-22-give-me-lead-til-im-dead
Meeples and Minatures with Jon Tuffley https://www.youtube.com/watch?v=iH4MJlW8vHk




Music courtesy bensound.com. Recorded with zencastr.com. Edited with Audacity. Make your town beautiful; get a haircut.

People Behind The Meeples - Episode 222: Mikael Lyck

Welcome to People Behind the Meeples, a series of interviews with indie game designers.  Here you'll find out more than you ever wanted to know about the people who make the best games that you may or may not have heard of before.  If you'd like to be featured, head over to http://gjjgames.blogspot.com/p/game-designer-interview-questionnaire.html and fill out the questionnaire! You can find all the interviews here: People Behind the Meeples. Support me on Patreon!


Name:Mikael Lyck
Email:info@gamesbylyck.com
Location:Sweden
Day Job:Developer
Designing:Two to five years.
Webpage:gamesbylyck.com
BGG:Mikael Lyck
Facebook:Phan Card Game/
Instagram:@thephantomthecardgame
Other:https://kickstarter.com/projects/gamesbylyck/the-phantom-the-card-game
Find my games at:https://gamesbylyck.com/print-and-play/
Today's Interview is with:

Mikael Lyck
Interviewed on: 2/17/2020

This week's interview is with Mikael Lyck, who is planning on Kickstarting his card game based on the comic book hero The Phantom this week! He has a number of other projects in the works as well. Keep reading to learn more about Mikael!

Some Basics
Tell me a bit about yourself.

How long have you been designing tabletop games?
Two to five years.

Why did you start designing tabletop games?
It started with a thought about how I would do a game if I got the chance, I could not get the thought out of my head so I had to write the rules and a deck of cards. I realized that I love the process of designing games and figuring out how to do things in the best possible way.

What game or games are you currently working on?
The Phantom the Card Game

Have you designed any games that have been published?
Not yet

What is your day job?
Developer

Your Gaming Tastes
My readers would like to know more about you as a gamer.

Where do you prefer to play games?
At home or flgs

Who do you normally game with?
Friends and family

If you were to invite a few friends together for game night tonight, what games would you play?
Dominion, 7 wonders and lately these exit games have been a blast.

And what snacks would you eat?
Potato crisps and loose candy

Do you like to have music playing while you play games? If so, what kind?
Depends on the game, fantasy games are ok with some ambient music, but I prefer no music since it can be distracting.

What's your favorite FLGS?
Dragons Lair here in Stockholm

What is your current favorite game? Least favorite that you still enjoy? Worst game you ever played?
Dominion has been my favorite for years that gets played, I might love Hansa Teutonica more, but have a hard time convincing people to play it with me… The worst game for me is Uno and memory, I didn't enjoy them that much a few years ago and after that my kids have made me play them quite more than I like.

What is your favorite game mechanic? How about your least favorite?
Love drafting and my least favourite must be rolling dice, it can be so frustrating. It works in some games but kill other games for me, like x-wing

What's your favorite game that you just can't ever seem to get to the table?
Oh that would be Hansa Teutonica that I mentioned earlier.

What styles of games do you play?
I like to play Board Games, Card Games, Miniatures Games, Video Games

Do you design different styles of games than what you play?
I like to design Board Games, Card Games

OK, here's a pretty polarizing game. Do you like and play Cards Against Humanity?
No

You as a Designer
OK, now the bit that sets you apart from the typical gamer. Let's find out about you as a game designer.

When you design games, do you come up with a theme first and build the mechanics around that? Or do you come up with mechanics and then add a theme? Or something else?
It is either theme or mechanic first, but it is important to me that they work together.

Have you ever entered or won a game design competition?
Haven't entered but looked at a few and gotten inspiration on design ideas from the different rules.

Do you have a current favorite game designer or idol?
A few, nobody mentioned, nobody forgotten.

Where or when or how do you get your inspiration or come up with your best ideas?
When I try to sleep is most common, that and in the shower.

How do you go about playtesting your games?
Start out with close friends and family, after that with a great game design community in my hometown. First tests can be a disaster, where I look for what is fun and memorable in the game, usually I have over designed and need to cut away a lot of things after each playtests.

Do you like to work alone or as part of a team? Co-designers, artists, etc.?
I have help from a few great friends, Dejan have done the wonderful graphical design and Johan have helps me with contracts and deals

What do you feel is your biggest challenge as a game designer?
Second guessing myself about most of the steps I take.

If you could design a game within any IP, what would it be?
The IP that my game already is. If I get the chance my next IP would be Masters of the Universe.

What do you wish someone had told you a long time ago about designing games?
That I should reach out more online. There are so many nice people that are willing to help, and it is great. It also works both ways, it is quite fun to help others too!

What advice would you like to share about designing games?
Have fun! And focus on the fun things in game. Even if the fun part of the game you are designing is backstabbing or getting thinking so hard your brain hurts.

Would you like to tell my readers what games you're working on and how far along they are?
I'm planning to crowdfund: The Phantom the Card Game
Games that I'm playtesting are: Craft a Raft
Games that are in the early stages of development and beta testing are: Do My Bidding, Roll and Paint
And games that are still in the very early idea phase are: Motu fighting game, King of the Junk Hill

Are you a member of any Facebook or other design groups? (Game Maker's Lab, Card and Board Game Developers Guild, etc.)
Yes on most I can find, with my personal account

And the oddly personal, but harmless stuff…
OK, enough of the game stuff, let's find out what really makes you tick! These are the questions that I'm sure are on everyone's minds!

Star Trek or Star Wars? Coke or Pepsi? VHS or Betamax?
I am both a trekkie and a Star wars nerd, but if I had to choose it would be Star wars, named my kids Lucas and Leia after the Star wars characters. Pepsi max, I drink it too much… Growing up we had both, but haven't used a betamax for over 30 years.

What hobbies do you have besides tabletop games?
Video games, movies and comic books

What is something you learned in the last week?
I learn stuff all the time, last week I learned how to play wingspan

Favorite type of music? Books? Movies?
Listen to all kinds of music, punk, classic rock, pop mostly though. Am a sucker for Young adult books, fantasy and science fiction. I love the pretentious stuff, like Oscars winners.

What was the last book you read?
The latest book in the Magic 2.0 series, Out of sight out of mind if I recall correctly

Do you play any musical instruments?
The latest book in the Magic 2.0 series, "Out of Sight Out of Mind" if I recall correctly

Tell us something about yourself that you think might surprise people.
I am quite a good chef and enjoy making advanced dishes

Tell us about something crazy that you once did.
Quit my job to live on playing poker.

Biggest accident that turned out awesome?
Some old fungus was left unattended and antibiotics were discovered.

Who is your idol?
I try to not idolize people. But there are a lot of great people that I respect very much.

What would you do if you had a time machine?
I wouldn't use it, it seems very dangerous in the Back to the Future movies.

Are you an extrovert or introvert?
Depending on the day

If you could be any superhero, which one would you be?
Easy, The Phantom of course

Have any pets?
Nope, I am allergic to all cute furry animals.

When the next asteroid hits Earth, causing the Yellowstone caldera to explode, California to fall into the ocean, the sea levels to rise, and the next ice age to set in, what current games or other pastimes do you think (or hope) will survive into the next era of human civilization? What do you hope is underneath that asteroid to be wiped out of the human consciousness forever?
I hope compassion and love survives and hate and wars would be wiped out. "violins playing"

If you'd like to send a shout out to anyone, anyone at all, here's your chance (I can't guarantee they'll read this though):
Hi kids, hi wife and hi mom!


Thanks for answering all my crazy questions!




Thank you for reading this People Behind the Meeples indie game designer interview! You can find all the interviews here: People Behind the Meeples and if you'd like to be featured yourself, you can fill out the questionnaire here: http://gjjgames.blogspot.com/p/game-designer-interview-questionnaire.html

Did you like this interview?  Please show your support: Support me on Patreon! Or click the heart at Board Game Links , like GJJ Games on Facebook , or follow on Twitter .  And be sure to check out my games on  Tabletop Generation.