Usage
Once you have your encoded payload, use the -N flag for the name of the payload when it's written to disk, the -U flag for the URL the encoded payload is going be hosted on (i.e https:///), and -F flag for the name of the file being hosted by the site. The outputted code is designed to work in a macro document .
Lack of WDAPT Sensor Recording
Through further investigation, it was observed not as a gap in WDATP's sensors, but rather that WDATP does have visibility into this activity, but it is ignored. Through WDATP endpoint's timeline of events looking for any reference to Appwiz.xll, we observed that WDAPT recorded a “created file” event when Word created the file AppWiz.xll. It is important to note that .XLL files are executable.
Disclosure Time
11/20/2020 - Research development and article written. 03/14/2021 - Provided Microsoft a preliminary disclosure document outlining identified issues. 03/31/2021 - Microsoft recognized and acknowledged that the vulnerabilities related to spawning an Office child process and writing files to disk were real vulnerabilities and began working on remediation. However, the permissions inconsistencies in the registry were deemed not a vulnerability (https://www.kitploit.com/search/label/Vulnerability) due to the requirement of elevated privileges. 04/21/2021 - Microsoft informed the author that signature build 1.333.1055.0 released on 03/22/2021 and 1.335.1321.0 released on 04/21/2021 contained the detection for the Office application-based vulnerabilities and closed the case. 04/22/2021 - The author retested the same techniques identifying that the vulnerabilities were still present.

Download Dent (https://github.com/optiv/Dent)

___________________________
@hacking_Attack
@Hacking_Video

Deep Web
What DNS do you all use and think suits best for privacy and anonymity?

submitted by /u/CrikeyKillz
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Deep Web
How To Create Full Screen Video Background with Html & CSS || Full Screen Video Background with Html

https://external-preview.redd.it/2dSToMXILljlG2RnTpJXhHRX_EH6KPBAdVMowrqlZpQ.jpg?width=320&crop=smart&auto=webp&s=829a729a50151cfc1d2c1b4af5f6aa59318a8448 submitted by /u/TaylorM_Clark
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Our Modern Day Hero "The BAM Investor" is being attacked by outsider threats, most likely paid for buy hedge funds.

https://external-preview.redd.it/m6t2Yrqs7mIiv00w27F7U8zaD1M39aD8BrXkSHljgBE.jpg?width=640&crop=smart&auto=webp&s=c87eb24df9b84e975e19c4957b31977beff217fe submitted by /u/XxWiReDxX
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Azusa police hack

Does anyone have info on where I can see the information these guys released?

submitted by /u/LittleLemonKenndy
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Is this possible?

This morning I was awoken by a call from the Sheriff’s Office, and I was left a message stating that I had called 911.

Perplexed, I checked my call history and a 911 call had in fact been made from my phone two minutes prior. I was asleep when the call was made, and my phone was lying in my bed. It is practically impossible for me to have made that call. I have an iPhone, and would have to press my power button 5x, or access the emergency call button from my lock screen and dial 911. The auto call feature for emergency numbers is also disabled.

I know that if you are doxxed people can make spoof calls using your number (IE: swatting). My question is, if I was targeted by a hacker, would the call have appeared in the call log on my own phone?

Edit: I downloaded the McAfee Security app a few hours ago, and the scan stated there is no malware on my phone.

submitted by /u/C4Corrosive
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
What are some fun (non-nefarious) XSS pranks/tricks?

Sorry if this isn't the right kind of question for this sub, but one of my friends has badly secured their site, and there's an easy way to do XSS, so what are some fun, harmless pranks that I could try? I don't care about logging cookies or anything. The obvious idea is redirecting to this, and another one I found is this code which flips the page:
document.body.style['transform'] = 'rotate(180deg)'
What are some other ones?

submitted by /u/fun840
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
New Barebones Ransomware Strain Surfaces

The authors of Epsilon Red have offloaded many tasks that are usually integrated into the ransomware -- such as Volume Shadow Copy deletion -- to PowerShell scripts.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
US Seizes Attacker Domains Used in USAID Phishing Campaign

The move follows last week's disclosure of an ongoing attack designed to mimic emails from the US Agency for International Development.

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
The Ramifications of Cyber attacks on Databases

https://cdn-images-1.medium.com/max/1200/0*5NgBep6apuio4mmJ.jpg
Databases are a structured collection of data in a digital form. The structure consists of schema definitions, tables which store the data…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Is there a way to prevent ISP from knowing what sites you visited?

How long does a ISP keep this record for? Does a VPN really prevent an ISP from knowing where youve been. Can someone recommend a link to read more on the topic.

submitted by /u/2627277
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Cyber attack on world’s largest meat company is disrupting production around the world. The attack comes just weeks after hackers shut down operation of the Colonial Pipeline, the largest U.S. fuel pipeline

https://external-preview.redd.it/EHfbaTVn8knFoSFSOnL1B-TNs3e6pbCBZRQ0AAHwJD8.jpg?width=640&crop=smart&auto=webp&s=028a6088aa44fa05e9d567c14515150678df709a submitted by /u/cenotaphx
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Massive Cyber Attack JBS - Russian Link - Nigel Green CEO

Massive Cyber Attack JBS - Russian Link - Nigel Green CEO https://youtu.be/6VsET5Oqkqk

submitted by /u/cryptoplatforms
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video