When conducting penetration tests, it happens that we use multiple tools simultaneously. To make writing more exploits for known…Continue reading on Medium » (https://medium.com/@gpiechnik/nuclei-unleashed-writing-first-exploit-6a8dbd6b80b0?source=rss------bug_bounty-5)
The journey to find the websites or ip addresses that are using the vulnerable version of Ruckus, begins at the gates of Shodan. It…Continue reading on Medium » (https://medium.com/@whalebone71/cve-2023-25717-rce-hunt-ae6818766521?source=rss------bug_bounty-5)
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
What is Ethical Hacking?
https://cdn-images-1.medium.com/max/2600/1*yXuOFXBhClEM_wFH42fi5g.png
Ethical hacking, also known as penetration testing or white-hat hacking, refers to the practice of intentionally identifying…
Continue reading on Medium »
What is Ethical Hacking?
https://cdn-images-1.medium.com/max/2600/1*yXuOFXBhClEM_wFH42fi5g.png
Ethical hacking, also known as penetration testing or white-hat hacking, refers to the practice of intentionally identifying…
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Tuesday Morning Threat Report: June 13, 2023
https://cdn-images-1.medium.com/max/1050/0*g4X-h3ytB1FlvrfR.jpeg
Microsoft fined $425M, TikTok exec alleges CCP had full access to U.S. data, and social engineering attacks have doubled in the past year
Continue reading on Medium »
Tuesday Morning Threat Report: June 13, 2023
https://cdn-images-1.medium.com/max/1050/0*g4X-h3ytB1FlvrfR.jpeg
Microsoft fined $425M, TikTok exec alleges CCP had full access to U.S. data, and social engineering attacks have doubled in the past year
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
The Most Successful Offensive Cyber Security Service in The World | Hire a Hacker Pro
https://cdn-images-1.medium.com/max/820/1*KqMMLo8OhIbpU629jMoyTQ.jpeg
Once upon a time in the digital realm, there existed a clandestine organization known as Hire a Hacker Pro. This organization, shrouded in…
Continue reading on Medium »
The Most Successful Offensive Cyber Security Service in The World | Hire a Hacker Pro
https://cdn-images-1.medium.com/max/820/1*KqMMLo8OhIbpU629jMoyTQ.jpeg
Once upon a time in the digital realm, there existed a clandestine organization known as Hire a Hacker Pro. This organization, shrouded in…
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
CVE-2023–25717 RCE Hunt.
https://cdn-images-1.medium.com/max/2559/1*l_B-laCpBTdLIAVgPgDTxQ.png
The journey to find the websites or ip addresses that are using the vulnerable version of Ruckus, begins at the gates of Shodan. It…
Continue reading on System Weakness »
CVE-2023–25717 RCE Hunt.
https://cdn-images-1.medium.com/max/2559/1*l_B-laCpBTdLIAVgPgDTxQ.png
The journey to find the websites or ip addresses that are using the vulnerable version of Ruckus, begins at the gates of Shodan. It…
Continue reading on System Weakness »
Ready to Dive Into Bug Bounty? Follow the Roadmap I Crafted!
https://infosecwriteups.com/ready-to-dive-into-bug-bounty-follow-the-roadmap-i-crafted-79a49ac5b51c?source=rss------bug_bounty-5
https://infosecwriteups.com/ready-to-dive-into-bug-bounty-follow-the-roadmap-i-crafted-79a49ac5b51c?source=rss------bug_bounty-5
Introduction: Bug bounty programs have gained significant popularity in the cybersecurity community, offering exciting opportunities for…Continue reading on InfoSec Write-ups » (https://infosecwriteups.com/ready-to-dive-into-bug-bounty-follow-the-roadmap-i-crafted-79a49ac5b51c?source=rss------bug_bounty-5)
Hacking on Medium
How to Use msfconsole in Metasploit Framework
A powerful guide for businesses and not only.
Metasploit Framework is a powerful and widely used open-source penetration testing tool that…
Continue reading on Medium »
How to Use msfconsole in Metasploit Framework
A powerful guide for businesses and not only.
Metasploit Framework is a powerful and widely used open-source penetration testing tool that…
Continue reading on Medium »
Medium
How to Use msfconsole in Metasploit Framework
A powerful guide for businesses and not only. Metasploit Framework is a powerful and widely used open-source penetration testing tool that…
Hacking on Medium
Why Your Passwords Are Not Secure Enough | The Truth About Common Passwords and Expert Tips for…
https://cdn-images-1.medium.com/max/1828/1*NTj6V5nuB3-V4Tfp0LImTw.png
From ‘12345’ to ‘53cur3$P4ssw0rd’.
Continue reading on Medium »
Why Your Passwords Are Not Secure Enough | The Truth About Common Passwords and Expert Tips for…
https://cdn-images-1.medium.com/max/1828/1*NTj6V5nuB3-V4Tfp0LImTw.png
From ‘12345’ to ‘53cur3$P4ssw0rd’.
Continue reading on Medium »
Medium
Why Your Passwords Are Not Secure Enough | The Truth About Common Passwords and Expert Tips for Better Security.
From ‘12345’ to ‘53cur3$P4ssw0rd’.
Introducing Cloudbets new Bug Bounty Program
https://medium.com/@CloudbetGaming/introducing-cloudbets-new-bug-bounty-program-88c680a50c51?source=rss------bug_bounty-5
Cloudbet is a leading online crypto entertainment platform, committed to upholding the highest standards of integrity and safety for our…Continue reading on Medium » (https://medium.com/@CloudbetGaming/introducing-cloudbets-new-bug-bounty-program-88c680a50c51?source=rss------bug_bounty-5)
https://medium.com/@CloudbetGaming/introducing-cloudbets-new-bug-bounty-program-88c680a50c51?source=rss------bug_bounty-5
Cloudbet is a leading online crypto entertainment platform, committed to upholding the highest standards of integrity and safety for our…Continue reading on Medium » (https://medium.com/@CloudbetGaming/introducing-cloudbets-new-bug-bounty-program-88c680a50c51?source=rss------bug_bounty-5)
Black Hat Ethical Hacking
Microsoft Visual Studio Flaw Enables Impersonation of Trusted Publishers
Microsoft Visual Studio Flaw Enables Impersonation of Trusted PublishersPost Views: 2 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/12/Patreon.png Subscribe to Patreon to watch this episode.
Reading Time: 3 Minutes
Varonis Threat Labs has discovered a significant user interface (UI) bug (CVE-2023-28299) in Microsoft Visual Studio’s extension installer. This vulnerability allows attackers to manipulate extension signatures, effectively impersonating any publisher. Microsoft promptly addressed the issue by releasing a patch for CVE-2023-28299 on April 11, 2023.
Failure to apply the patch leaves systems susceptible to targeted attacks, as threat actors can distribute malicious extensions to compromise vulnerable systems.
Why is this a matter of concern? Visual Studio, the second most popular Integrated Development Environment (IDE) in the market, boasts a substantial user base of over thirty thousand customers, commanding a significant 26% market share.
Visual Studio’s appeal lies in its extensive collection of extensions, which range from integrating GitHub and SQL servers to simple productivity tools like spell checks and code snippets. The most popular extensions often accumulate millions of downloads. However, the UI bug discovered by Varonis Threat Labs (CVE-2023-28299) exposes a critical risk: threat actors can impersonate well-known publishers and distribute malicious extensions to compromise targeted systems. These malicious extensions have been known to facilitate data theft, unauthorized code access and alteration, and even complete system takeover.
See Also: So you want to be a hacker? Offensive Security, Bug Bounty Courses
The nature of the bug revolves around Visual Studio’s prevention of newline characters within an extension’s name, specifically by blocking user input in the “Product Name” extension property. However, this restriction can be easily bypassed by opening the VSIX file as a ZIP archive and manually adding newline characters to the “<displayname” tag in the “extension.vsixmanifest” file.
https://info.varonis.com/hubfs/image-png-3.png Creating a new C# project and editing its property
https://info.varonis.com/hubfs/image-png-Jun-02-2023-12-25-29-4200-AM.png Editing in 7zip
By adding a sufficient number of newline characters, the extension’s name pushes down the remaining text in the Visual Studio installation prompt, effectively concealing the warning “Digital Signature: None.” Spoofing SignaturesThis exploit allows threat actors to create a spoofed extension that appears legitimate but lacks a digital signature, a critical indicator of authenticity. Furthermore, the threat actor gains control over the extension’s signature area, enabling them to insert fake “Digital Signature” text that appears genuine to the user.
https://info.varonis.com/hubfs/image-png-Jun-02-2023-12-33-32-5189-AM.png Real extension with digital signature
https://info.varonis.com/hubfs/image-png-Jun-02-2023-12-33-23-9129-AM.png Extension without digital signature
https://info.varonis.com/hubfs/image-png-Jun-02-2023-12-33-14-1777-AM.png Extension with spoofed signature
Trending: Write up: Find hidden and encrypted secrets from any website Trending: Offensive Security Tool: Pypykatz
The attack scenario unfolds primarily through phishing techniques. Here’s an example:
1. The attacker disguises an email as a legitimate software update, targeting company developers.
2. The email includes the spoofed VSIX extension, mimicking the appearance of a genuine update.
3. Unable to differentiate the malicious VSIX from a legitimate signed update, the victim [...]
Microsoft Visual Studio Flaw Enables Impersonation of Trusted Publishers
Microsoft Visual Studio Flaw Enables Impersonation of Trusted PublishersPost Views: 2 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/12/Patreon.png Subscribe to Patreon to watch this episode.
Reading Time: 3 Minutes
Varonis Threat Labs has discovered a significant user interface (UI) bug (CVE-2023-28299) in Microsoft Visual Studio’s extension installer. This vulnerability allows attackers to manipulate extension signatures, effectively impersonating any publisher. Microsoft promptly addressed the issue by releasing a patch for CVE-2023-28299 on April 11, 2023.
Failure to apply the patch leaves systems susceptible to targeted attacks, as threat actors can distribute malicious extensions to compromise vulnerable systems.
Why is this a matter of concern? Visual Studio, the second most popular Integrated Development Environment (IDE) in the market, boasts a substantial user base of over thirty thousand customers, commanding a significant 26% market share.
Visual Studio’s appeal lies in its extensive collection of extensions, which range from integrating GitHub and SQL servers to simple productivity tools like spell checks and code snippets. The most popular extensions often accumulate millions of downloads. However, the UI bug discovered by Varonis Threat Labs (CVE-2023-28299) exposes a critical risk: threat actors can impersonate well-known publishers and distribute malicious extensions to compromise targeted systems. These malicious extensions have been known to facilitate data theft, unauthorized code access and alteration, and even complete system takeover.
See Also: So you want to be a hacker? Offensive Security, Bug Bounty Courses
The nature of the bug revolves around Visual Studio’s prevention of newline characters within an extension’s name, specifically by blocking user input in the “Product Name” extension property. However, this restriction can be easily bypassed by opening the VSIX file as a ZIP archive and manually adding newline characters to the “<displayname” tag in the “extension.vsixmanifest” file.
https://info.varonis.com/hubfs/image-png-3.png Creating a new C# project and editing its property
https://info.varonis.com/hubfs/image-png-Jun-02-2023-12-25-29-4200-AM.png Editing in 7zip
By adding a sufficient number of newline characters, the extension’s name pushes down the remaining text in the Visual Studio installation prompt, effectively concealing the warning “Digital Signature: None.” Spoofing SignaturesThis exploit allows threat actors to create a spoofed extension that appears legitimate but lacks a digital signature, a critical indicator of authenticity. Furthermore, the threat actor gains control over the extension’s signature area, enabling them to insert fake “Digital Signature” text that appears genuine to the user.
https://info.varonis.com/hubfs/image-png-Jun-02-2023-12-33-32-5189-AM.png Real extension with digital signature
https://info.varonis.com/hubfs/image-png-Jun-02-2023-12-33-23-9129-AM.png Extension without digital signature
https://info.varonis.com/hubfs/image-png-Jun-02-2023-12-33-14-1777-AM.png Extension with spoofed signature
Trending: Write up: Find hidden and encrypted secrets from any website Trending: Offensive Security Tool: Pypykatz
The attack scenario unfolds primarily through phishing techniques. Here’s an example:
1. The attacker disguises an email as a legitimate software update, targeting company developers.
2. The email includes the spoofed VSIX extension, mimicking the appearance of a genuine update.
3. Unable to differentiate the malicious VSIX from a legitimate signed update, the victim [...]
Black Hat Ethical Hacking
Microsoft Visual Studio Flaw Enables Impersonation of Trusted Publishers | Black Hat Ethical Hacking
significant user interface (UI) bug (CVE-2023-28299) in Microsoft Visual Studio's extension installer is discovered. This vulnerability allows attackers to manipulate extension signatures, effectively impersonating any publisher.
Hacking Articles Tips Tricks Videos Tutorials
Black Hat Ethical Hacking Microsoft Visual Studio Flaw Enables Impersonation of Trusted Publishers Microsoft Visual Studio Flaw Enables Impersonation of Trusted PublishersPost Views: 2 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uplo…
unknowingly installs the malicious extension.
4. Once the crafted payload within the extension takes effect, the attacker gains a foothold in the victim’s machine, establishing an initial access point within the organization.
5. With this initial access, the threat actor can proceed to move laterally within the compromised organization, potentially stealing intellectual property (IP), confidential data, and causing further business impact.
Microsoft responded promptly to this exploit, assigning it the CVE-2023-28299 identifier and including a fix in the Patch Tuesday update released on April 11, 2023. Varonis Threat Labs delayed the publication of this article to ensure that a fix was made available.
It is strongly recommended that all systems susceptible to this vulnerability apply the patch provided by Microsoft and remain vigilant for any suspicious activity.
In summary, CVE-2023-28299 highlights a critical UI bug in Microsoft Visual Studio, a leading IDE, which enables the spoofing of publisher digital signatures. The ease of exploitation, coupled with the potential consequences, makes this vulnerability a significant concern. Threat actors can exploit this flaw to distribute malicious extensions, posing a serious risk to compromised systems. Microsoft has acknowledged this vulnerability and addressed it through the release of a patch as part of their April 11, 2023, Patch Tuesday update.
Trending: Anonymous Sudan Launches DDoS Attacks on Microsoft Outlook
Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?
If you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com
Source: www.varonis.com Source Link https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Store.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/06/Images-for-the-News-posts-27-300x150.png Fortinet Releases Urgent Firmware Updates to Address Critical SSL VPN VulnerabilityJune 12, 2023
* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/06/Images-for-the-News-posts-26-300x150.png Exposed Win32k Windows Vulnerability, Researchers Share Proof-of-Concept ExploitJune 9, 2023
* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/06/Images-for-the-News-posts-25-300x150.png Honda’s E-commerce Platform Exposed, Researcher Exploits API Flaws for Unrestricted Data AccessJune 8, 2023
* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/06/Images-for-the-News-posts-24-300x150.png Anonymous Sudan Launches DDoS Attacks on Microsoft OutlookJune 7, 2023 https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/OffSec-Course.png Offensive Security & Ethical Hacking CourseBegin the learning curve of hacking now! https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Solutions.png Information Security SolutionsFind out how Pentesting Services can help you.
The post Microsoft Visual Studio Flaw Enables Impersonation of Trusted Publishers first appeared on Black Hat Ethical Hacking.
4. Once the crafted payload within the extension takes effect, the attacker gains a foothold in the victim’s machine, establishing an initial access point within the organization.
5. With this initial access, the threat actor can proceed to move laterally within the compromised organization, potentially stealing intellectual property (IP), confidential data, and causing further business impact.
Microsoft responded promptly to this exploit, assigning it the CVE-2023-28299 identifier and including a fix in the Patch Tuesday update released on April 11, 2023. Varonis Threat Labs delayed the publication of this article to ensure that a fix was made available.
It is strongly recommended that all systems susceptible to this vulnerability apply the patch provided by Microsoft and remain vigilant for any suspicious activity.
In summary, CVE-2023-28299 highlights a critical UI bug in Microsoft Visual Studio, a leading IDE, which enables the spoofing of publisher digital signatures. The ease of exploitation, coupled with the potential consequences, makes this vulnerability a significant concern. Threat actors can exploit this flaw to distribute malicious extensions, posing a serious risk to compromised systems. Microsoft has acknowledged this vulnerability and addressed it through the release of a patch as part of their April 11, 2023, Patch Tuesday update.
Trending: Anonymous Sudan Launches DDoS Attacks on Microsoft Outlook
Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?
If you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com
Source: www.varonis.com Source Link https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Store.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/06/Images-for-the-News-posts-27-300x150.png Fortinet Releases Urgent Firmware Updates to Address Critical SSL VPN VulnerabilityJune 12, 2023
* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/06/Images-for-the-News-posts-26-300x150.png Exposed Win32k Windows Vulnerability, Researchers Share Proof-of-Concept ExploitJune 9, 2023
* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/06/Images-for-the-News-posts-25-300x150.png Honda’s E-commerce Platform Exposed, Researcher Exploits API Flaws for Unrestricted Data AccessJune 8, 2023
* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/06/Images-for-the-News-posts-24-300x150.png Anonymous Sudan Launches DDoS Attacks on Microsoft OutlookJune 7, 2023 https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/OffSec-Course.png Offensive Security & Ethical Hacking CourseBegin the learning curve of hacking now! https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Solutions.png Information Security SolutionsFind out how Pentesting Services can help you.
The post Microsoft Visual Studio Flaw Enables Impersonation of Trusted Publishers first appeared on Black Hat Ethical Hacking.
