Hacking Articles Tips Tricks Videos Tutorials
Photo
Deep Web
where to sell my hacked data?
Where Can i post my Screen recorded videos which i captured , Files , Data and other stuff all of which i got from hacking other people's accounts of yahoo facebook instagram . Including some High class people- Directors of big Firms . I want to earn some money by selling that data.
submitted by /u/anythingfinder
[link] [comments]
where to sell my hacked data?
Where Can i post my Screen recorded videos which i captured , Files , Data and other stuff all of which i got from hacking other people's accounts of yahoo facebook instagram . Including some High class people- Directors of big Firms . I want to earn some money by selling that data.
submitted by /u/anythingfinder
[link] [comments]
Hacking Articles Tips Tricks Videos Tutorials
Photo
Black Hat Ethical Hacking
P2PInfect Server Botnet Turns Compromised Redis Servers into a Peer-to-Peer Network
P2PInfect Server Botnet Turns Compromised Redis Servers into a Peer-to-Peer NetworkPost Views: 3 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2023/07/Patreon.png Subscribe to Patreon to watch this episode.
Reading Time: 3 Minutes
A sophisticated and rapidly spreading malware, known as P2PInfect, is currently on the prowl, targeting vulnerable instances of SSH and Redis open-source data store. This malicious worm, developed in Rust, has versions compatible with both Windows and Linux, making it a cross-platform menace. P2PInfect methods of gaining footholdP2PInfect leverages two main methods to gain a foothold on its targets. Firstly, it exploits a critical vulnerability, CVE-2022-0543, which was disclosed and patched last year. This vulnerability is specific to Debian and allows remote code execution with a severity score of 10 out of 10. Secondly, the malware capitalizes on Redis’ replication feature, which enables the creation of exact replicas of the main database for high availability and failover scenarios.
Security researchers from Palo Alto Networks’ Unit 42 initially documented P2PInfect and found it exploiting the CVE-2022-0543 vulnerability. Once a vulnerable Redis instance is compromised, P2PInfect downloads OS-specific scripts and malicious binaries, incorporating the server into its list of infected systems. The malware then establishes a peer-to-peer network, allowing future compromised Redis servers to access the bundle of malicious payloads.
See Also: So you want to be a hacker? Offensive Security, Bug Bounty Courses
A sample of P2PInfect analyzed by Cado Security also revealed its compatibility with both Windows (PE binaries) and Linux (ELF binaries). The malware demonstrates a level of sophistication that poses a serious challenge for security experts.
https://www.bleepstatic.com/images/news/u/1100723/P2PInfect_Redis_replica.jpg P2PInfect taking control via Redis replication feature
source: Cado Security
After execution, P2PInfect’s primary payload, an ELF binary written in a combination of C and Rust, updates the SSH configuration on the host, allowing the attacker to connect via SSH and enable password authentication. The malware further takes steps to hinder incident responders and evade detection by renaming critical binaries like wget and curl. Additionally, it installs necessary utilities, such as iptables and awk, to execute its actions.
Cado Security researchers discovered that P2PInfect treats each compromised Redis server as a node, effectively transforming the network into a decentralized, peer-to-peer botnet. This approach eliminates the need for a centralized command and control (C2) server, making it more resilient and difficult to track.
Communication between the peer-to-peer network occurs through a simple HTTP server over random ports, while botnet coordination is conducted over HTTPS using a hardcoded certificate. The campaign appears to have started on or after June 29th, as indicated by the certificate.
Trending: The Difference between Internal and External Pentesting Trending: Offensive Security Tool: Nucleimonst3r P2PInfect’s method of finding vulnerable servers involves scanning for exposed SSH and Redis instances, using a list of passwords for brute-force attempts on weakly protected hosts. Researchers estimate that there are over 307,000 Redis instances reachable over the public internet, making it a massive pool of potential targets.
As of now, the purpose of P2PInfect remains unclear. The presence of a binary called “miner” initially raised suspicions of cryptocurrency mining [...]
P2PInfect Server Botnet Turns Compromised Redis Servers into a Peer-to-Peer Network
P2PInfect Server Botnet Turns Compromised Redis Servers into a Peer-to-Peer NetworkPost Views: 3 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2023/07/Patreon.png Subscribe to Patreon to watch this episode.
Reading Time: 3 Minutes
A sophisticated and rapidly spreading malware, known as P2PInfect, is currently on the prowl, targeting vulnerable instances of SSH and Redis open-source data store. This malicious worm, developed in Rust, has versions compatible with both Windows and Linux, making it a cross-platform menace. P2PInfect methods of gaining footholdP2PInfect leverages two main methods to gain a foothold on its targets. Firstly, it exploits a critical vulnerability, CVE-2022-0543, which was disclosed and patched last year. This vulnerability is specific to Debian and allows remote code execution with a severity score of 10 out of 10. Secondly, the malware capitalizes on Redis’ replication feature, which enables the creation of exact replicas of the main database for high availability and failover scenarios.
Security researchers from Palo Alto Networks’ Unit 42 initially documented P2PInfect and found it exploiting the CVE-2022-0543 vulnerability. Once a vulnerable Redis instance is compromised, P2PInfect downloads OS-specific scripts and malicious binaries, incorporating the server into its list of infected systems. The malware then establishes a peer-to-peer network, allowing future compromised Redis servers to access the bundle of malicious payloads.
See Also: So you want to be a hacker? Offensive Security, Bug Bounty Courses
A sample of P2PInfect analyzed by Cado Security also revealed its compatibility with both Windows (PE binaries) and Linux (ELF binaries). The malware demonstrates a level of sophistication that poses a serious challenge for security experts.
https://www.bleepstatic.com/images/news/u/1100723/P2PInfect_Redis_replica.jpg P2PInfect taking control via Redis replication feature
source: Cado Security
After execution, P2PInfect’s primary payload, an ELF binary written in a combination of C and Rust, updates the SSH configuration on the host, allowing the attacker to connect via SSH and enable password authentication. The malware further takes steps to hinder incident responders and evade detection by renaming critical binaries like wget and curl. Additionally, it installs necessary utilities, such as iptables and awk, to execute its actions.
Cado Security researchers discovered that P2PInfect treats each compromised Redis server as a node, effectively transforming the network into a decentralized, peer-to-peer botnet. This approach eliminates the need for a centralized command and control (C2) server, making it more resilient and difficult to track.
Communication between the peer-to-peer network occurs through a simple HTTP server over random ports, while botnet coordination is conducted over HTTPS using a hardcoded certificate. The campaign appears to have started on or after June 29th, as indicated by the certificate.
Trending: The Difference between Internal and External Pentesting Trending: Offensive Security Tool: Nucleimonst3r P2PInfect’s method of finding vulnerable servers involves scanning for exposed SSH and Redis instances, using a list of passwords for brute-force attempts on weakly protected hosts. Researchers estimate that there are over 307,000 Redis instances reachable over the public internet, making it a massive pool of potential targets.
As of now, the purpose of P2PInfect remains unclear. The presence of a binary called “miner” initially raised suspicions of cryptocurrency mining [...]
Hacking Articles Tips Tricks Videos Tutorials
Black Hat Ethical Hacking P2PInfect Server Botnet Turns Compromised Redis Servers into a Peer-to-Peer Network P2PInfect Server Botnet Turns Compromised Redis Servers into a Peer-to-Peer NetworkPost Views: 3 Premium Contenthttps://www.blackhatethicalhacking.com/wp…
activity, but further investigation by Cado Security showed no evidence of such activity. Instead, the binary seemed to be in a dormant state, suggesting that additional functionality, possibly cryptomining, may be activated after a sufficient number of Redis instances have been compromised.
Trending: HotRat Malware -The Sneaky Trojan Lurking in Cracked Software Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?
If you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com
Source: bleepingcomputer.com Source Link https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Store.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/07/Images-for-the-News-posts-300x150.png Abyss Locker: New Linux Encryptor Targets VMware’s ESXi Virtual MachinesJuly 31, 2023
* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/07/Images-for-the-News-posts-16-300x150.png 40% of Ubuntu users vulnerable to new privilege elevation flawsJuly 28, 2023
* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/07/Images-for-the-News-posts-15-300x150.png SEC Mandates Rapid Cyberattack Disclosures, Companies Must Act Within 4 Business DaysJuly 27, 2023
* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/07/Images-for-the-News-posts-14-300x150.png Super Admin Privilege Vulnerability Plagues MikroTik RoutersJuly 26, 2023 https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/OffSec-Course.png Offensive Security & Ethical Hacking CourseBegin the learning curve of hacking now! https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Solutions.png Information Security SolutionsFind out how Pentesting Services can help you.
The post P2PInfect Server Botnet Turns Compromised Redis Servers into a Peer-to-Peer Network first appeared on Black Hat Ethical Hacking.
Trending: HotRat Malware -The Sneaky Trojan Lurking in Cracked Software Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?
If you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com
Source: bleepingcomputer.com Source Link https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Store.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/07/Images-for-the-News-posts-300x150.png Abyss Locker: New Linux Encryptor Targets VMware’s ESXi Virtual MachinesJuly 31, 2023
* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/07/Images-for-the-News-posts-16-300x150.png 40% of Ubuntu users vulnerable to new privilege elevation flawsJuly 28, 2023
* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/07/Images-for-the-News-posts-15-300x150.png SEC Mandates Rapid Cyberattack Disclosures, Companies Must Act Within 4 Business DaysJuly 27, 2023
* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/07/Images-for-the-News-posts-14-300x150.png Super Admin Privilege Vulnerability Plagues MikroTik RoutersJuly 26, 2023 https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/OffSec-Course.png Offensive Security & Ethical Hacking CourseBegin the learning curve of hacking now! https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Solutions.png Information Security SolutionsFind out how Pentesting Services can help you.
The post P2PInfect Server Botnet Turns Compromised Redis Servers into a Peer-to-Peer Network first appeared on Black Hat Ethical Hacking.
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Cryptocurrency CRV Arbitration Case.
https://cdn-images-1.medium.com/max/1243/1*N-YVU23_DIsMydGBesT-Xg.png
One of the largest decentralized exchanges (DEX), Curve Finance, was subjected to a hacking attack, resulting in estimated losses ranging…
Continue reading on Medium »
Cryptocurrency CRV Arbitration Case.
https://cdn-images-1.medium.com/max/1243/1*N-YVU23_DIsMydGBesT-Xg.png
One of the largest decentralized exchanges (DEX), Curve Finance, was subjected to a hacking attack, resulting in estimated losses ranging…
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Recover Cryptocurrency with Experts can be a viable solution for individuals facing issues…
it’s essential to exercise caution and verify the legitimacy of such services, as scams and fraudulent entities exist. Researching…
Continue reading on Medium »
Recover Cryptocurrency with Experts can be a viable solution for individuals facing issues…
it’s essential to exercise caution and verify the legitimacy of such services, as scams and fraudulent entities exist. Researching…
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
How to Make It Look Like You are Hacking
https://cdn-images-1.medium.com/max/602/1*sxviCp8nht_TAs218eAEcw.png
Do you want people to think you are a computer genius and Master hacker? they are usually impressed. You don’t have to do anything illegal
Continue reading on Medium »
How to Make It Look Like You are Hacking
https://cdn-images-1.medium.com/max/602/1*sxviCp8nht_TAs218eAEcw.png
Do you want people to think you are a computer genius and Master hacker? they are usually impressed. You don’t have to do anything illegal
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
“Revealing the Layers of the Internet: Visible Web, Concealed Web, and Hidden Web Explained”
https://cdn-images-1.medium.com/max/960/1*ma8G_OQAt3vLVLAZDez7uA.jpeg
The internet is a vast network of information, but not all of it is easily accessible or visible to the average user. There are different…
Continue reading on Medium »
“Revealing the Layers of the Internet: Visible Web, Concealed Web, and Hidden Web Explained”
https://cdn-images-1.medium.com/max/960/1*ma8G_OQAt3vLVLAZDez7uA.jpeg
The internet is a vast network of information, but not all of it is easily accessible or visible to the average user. There are different…
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Exploring the Dark Web: Unraveling the Veil of Secrecy
https://cdn-images-1.medium.com/max/2600/0*AVsbuHLIIkU0Y4tK
The internet, a vast and interconnected network, has revolutionized the way we access information, connect with others, and conduct…
Continue reading on Medium »
Exploring the Dark Web: Unraveling the Veil of Secrecy
https://cdn-images-1.medium.com/max/2600/0*AVsbuHLIIkU0Y4tK
The internet, a vast and interconnected network, has revolutionized the way we access information, connect with others, and conduct…
Continue reading on Medium »
5 Most Underrated Reconnaissance Tools for Bug Bounty Hunting
https://medium.com/@ferliantinos/5-most-underrated-reconnaissance-tools-for-bug-bounty-hunting-1d873805ee13?source=rss------bug_bounty-5
https://medium.com/@ferliantinos/5-most-underrated-reconnaissance-tools-for-bug-bounty-hunting-1d873805ee13?source=rss------bug_bounty-5
Bug bounty hunting has become a popular way for ethical hackers and cybersecurity enthusiasts to earn rewards while contributing to the…Continue reading on Medium » (https://medium.com/@ferliantinos/5-most-underrated-reconnaissance-tools-for-bug-bounty-hunting-1d873805ee13?source=rss------bug_bounty-5)