Q: Why enabling CONFIG_STATIC_USERMODEHELPER breaks various things in my GNU/Linux system? Do I really need that feature? A: Linux kernel usermode helpers can be used for privilege escalation (https://www.kitploit.com/search/label/Privilege%20Escalation) in kernel exploits (example 1 (https://googleprojectzero.blogspot.com/2018/09/a-cache-invalidation-bug-in-linux.html), example 2 (https://a13xp0p0v.github.io/2020/02/15/CVE-2019-18683.html)). CONFIG_STATIC_USERMODEHELPER prevents that method. But it requires the corresponding support in the userspace: see the example implementation (https://github.com/tych0/huldufolk) by Tycho Andersen @tych0 (https://github.com/tych0).
Q: Does my kernel have all those mitigations of Transient Execution Vulnerabilities in my hardware? A: Checking the kernel config is not enough to answer this question. I highly recommend using spectre-meltdown-checker (https://github.com/speed47/spectre-meltdown-checker) tool maintained by Stéphane Lesimple @speed47 (https://github.com/speed47).

Download Kconfig-Hardened-Check (https://github.com/a13xp0p0v/kconfig-hardened-check)

___________________________
@hacking_Attack
@Hacking_Video

CSRF on Password Reset

My name is Filipe Azevedo and in this post, I’m going to talk about a CSRF that I recently found on a private program on HackerOne.Continue reading on Medium »
Read more...

CSRF on Password Reset
https://filipaze.medium.com/csrf-on-password-reset-c79d30615b77?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

My name is Filipe Azevedo and in this post, I’m going to talk about a CSRF that I recently found on a private program on HackerOne.Continue reading on Medium » (https://filipaze.medium.com/csrf-on-password-reset-c79d30615b77?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Accidental Insider Leaks Prove Major Source of Risk

Research reports highlight growing concerns around insider negligence that leads to data breaches.

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Time is finite. 5 ways to use your time productively.

https://cdn-images-1.medium.com/max/1244/1*KUasf_caV4MW5yBCdkiRhQ.jpeg
Time spent ____ing is time well spent. Can you fill in the blank?

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Hybrid Analyst Article of the Day: The Rise of the Malware Lab

https://cdn-images-1.medium.com/max/1254/1*sICytYkBfywWl2DsmtAwbA.jpeg
As Threat Hunting Matures, Malware Labs Emerge — Tomislav Pericin, DarkReading, 5/24/2021

Continue reading on Hybrid Analyst »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Tryhackme Toolsrus Writeup

https://cdn-images-1.medium.com/max/2600/0*-hS_6bpz6GFo6lKa
Task 1 ToysRus

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
Kconfig-Hardened-Check - A Tool For Checking The Hardening Options In The Linux Kernel Config

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Molerats Hackers Return With New Attacks Targeting Middle Eastern Governments

https://external-preview.redd.it/GV5kDpo91DshLyd-BVwBBYim9q-Eaw3f6WaapobNvDc.jpg?width=640&crop=smart&auto=webp&s=747afbfce2add2a028a65775c8ee9c374146a1d7 submitted by /u/CodePerfect
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Ransomware attack!!!

This morning, I received a call from my sister, who informed me that her computer had been attacked by ransomware, and that a payment of $700/$490 (within 72 hours) was needed for the key. I was able to trace down the .exe malware that was used to spread the virus, through analysis I was able to remove it all, but the files were still encrypted with the extension IQLL. I've tried a few things (Safe mode, Photorec, Reset PC, Emsisoft, and so on), but none of them have worked so far. Is there anyone who knows how to decrypt these files legitimately?

submitted by /u/Mace_Killer
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
TryHackMe write-up: The Marketplace

https://cdn-images-1.medium.com/max/600/0*j9eZ5-F0VUHvfPEN.png
Introduction

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video