Hacking Articles Tips Tricks Videos Tutorials

Deep Web
where to sell my hacked data?

Where Can i post my Screen recorded videos which i captured , Files , Data and other stuff all of which i got from hacking other people's accounts of yahoo facebook instagram . Including some High class people- Directors of big Firms . I want to earn some money by selling that data.

submitted by /u/anythingfinder
[link] [comments]

13 views10:42

13 views11:53

Hacking Articles Tips Tricks Videos Tutorials

Photo

Black Hat Ethical Hacking
P2PInfect Server Botnet Turns Compromised Redis Servers into a Peer-to-Peer Network

P2PInfect Server Botnet Turns Compromised Redis Servers into a Peer-to-Peer NetworkPost Views: 3 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2023/07/Patreon.png Subscribe to Patreon to watch this episode.
Reading Time: 3 Minutes
A sophisticated and rapidly spreading malware, known as P2PInfect, is currently on the prowl, targeting vulnerable instances of SSH and Redis open-source data store. This malicious worm, developed in Rust, has versions compatible with both Windows and Linux, making it a cross-platform menace. P2PInfect methods of gaining footholdP2PInfect leverages two main methods to gain a foothold on its targets. Firstly, it exploits a critical vulnerability, CVE-2022-0543, which was disclosed and patched last year. This vulnerability is specific to Debian and allows remote code execution with a severity score of 10 out of 10. Secondly, the malware capitalizes on Redis’ replication feature, which enables the creation of exact replicas of the main database for high availability and failover scenarios.

Security researchers from Palo Alto Networks’ Unit 42 initially documented P2PInfect and found it exploiting the CVE-2022-0543 vulnerability. Once a vulnerable Redis instance is compromised, P2PInfect downloads OS-specific scripts and malicious binaries, incorporating the server into its list of infected systems. The malware then establishes a peer-to-peer network, allowing future compromised Redis servers to access the bundle of malicious payloads.
See Also: So you want to be a hacker? Offensive Security, Bug Bounty Courses
A sample of P2PInfect analyzed by Cado Security also revealed its compatibility with both Windows (PE binaries) and Linux (ELF binaries). The malware demonstrates a level of sophistication that poses a serious challenge for security experts.

https://www.bleepstatic.com/images/news/u/1100723/P2PInfect_Redis_replica.jpg P2PInfect taking control via Redis replication feature
source: Cado Security

After execution, P2PInfect’s primary payload, an ELF binary written in a combination of C and Rust, updates the SSH configuration on the host, allowing the attacker to connect via SSH and enable password authentication. The malware further takes steps to hinder incident responders and evade detection by renaming critical binaries like wget and curl. Additionally, it installs necessary utilities, such as iptables and awk, to execute its actions.

Cado Security researchers discovered that P2PInfect treats each compromised Redis server as a node, effectively transforming the network into a decentralized, peer-to-peer botnet. This approach eliminates the need for a centralized command and control (C2) server, making it more resilient and difficult to track.

Communication between the peer-to-peer network occurs through a simple HTTP server over random ports, while botnet coordination is conducted over HTTPS using a hardcoded certificate. The campaign appears to have started on or after June 29th, as indicated by the certificate.
Trending: The Difference between Internal and External Pentesting Trending: Offensive Security Tool: Nucleimonst3r P2PInfect’s method of finding vulnerable servers involves scanning for exposed SSH and Redis instances, using a list of passwords for brute-force attempts on weakly protected hosts. Researchers estimate that there are over 307,000 Redis instances reachable over the public internet, making it a massive pool of potential targets.

As of now, the purpose of P2PInfect remains unclear. The presence of a binary called “miner” initially raised suspicions of cryptocurrency mining [...]

15 views11:53

Hacking Articles Tips Tricks Videos Tutorials

Black Hat Ethical Hacking P2PInfect Server Botnet Turns Compromised Redis Servers into a Peer-to-Peer Network P2PInfect Server Botnet Turns Compromised Redis Servers into a Peer-to-Peer NetworkPost Views: 3 Premium Contenthttps://www.blackhatethicalhacking.com/wp…

activity, but further investigation by Cado Security showed no evidence of such activity. Instead, the binary seemed to be in a dormant state, suggesting that additional functionality, possibly cryptomining, may be activated after a sufficient number of Redis instances have been compromised.
Trending: HotRat Malware -The Sneaky Trojan Lurking in Cracked Software Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?

If you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com
Source: bleepingcomputer.com Source Link https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Store.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/07/Images-for-the-News-posts-300x150.png Abyss Locker: New Linux Encryptor Targets VMware’s ESXi Virtual MachinesJuly 31, 2023
* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/07/Images-for-the-News-posts-16-300x150.png 40% of Ubuntu users vulnerable to new privilege elevation flawsJuly 28, 2023
* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/07/Images-for-the-News-posts-15-300x150.png SEC Mandates Rapid Cyberattack Disclosures, Companies Must Act Within 4 Business DaysJuly 27, 2023
* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/07/Images-for-the-News-posts-14-300x150.png Super Admin Privilege Vulnerability Plagues MikroTik RoutersJuly 26, 2023 https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/OffSec-Course.png Offensive Security & Ethical Hacking CourseBegin the learning curve of hacking now! https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Solutions.png Information Security SolutionsFind out how Pentesting Services can help you.
The post P2PInfect Server Botnet Turns Compromised Redis Servers into a Peer-to-Peer Network first appeared on Black Hat Ethical Hacking.

11 views11:53

Hacking Articles Tips Tricks Videos Tutorials

7 views13:10

Hacking Articles Tips Tricks Videos Tutorials

5 views13:10

Hacking Articles Tips Tricks Videos Tutorials

Photo

Hacking on Medium
Cryptocurrency CRV Arbitration Case.

https://cdn-images-1.medium.com/max/1243/1*N-YVU23_DIsMydGBesT-Xg.png
One of the largest decentralized exchanges (DEX), Curve Finance, was subjected to a hacking attack, resulting in estimated losses ranging…

Continue reading on Medium »

5 views13:10

Hacking Articles Tips Tricks Videos Tutorials

3 views13:10

Hacking Articles Tips Tricks Videos Tutorials