Hacking Articles Tips Tricks Videos Tutorials
GIF
Hacking on Medium
CSC CTF 2021 — Flag Shop (Reverse Engineering Android)(Smali Patch) #4
https://cdn-images-1.medium.com/max/600/1*-0Iapp0BY4LfoJ-kb46kaQ.gif
Pada part kali ini kita akan menyelesaikan challenge ini. Pertama-tama pilih 1 dari 3 cara yang sudah dijelaskan dari part sebelumnya.
Continue reading on Medium »
CSC CTF 2021 — Flag Shop (Reverse Engineering Android)(Smali Patch) #4
https://cdn-images-1.medium.com/max/600/1*-0Iapp0BY4LfoJ-kb46kaQ.gif
Pada part kali ini kita akan menyelesaikan challenge ini. Pertama-tama pilih 1 dari 3 cara yang sudah dijelaskan dari part sebelumnya.
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Black Hat Ethical Hacking
PoC Exploit Circulating for Critical Windows Print Spooler Bug
https://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg PoC Exploit Circulating for Critical Windows Print Spooler BugPost Views: 49
Reading Time: 2 Minutes
A proof-of-concept for a critical Windows security vulnerability that allows remote code execution (RCE) was dropped on GitHub on Tuesday – and while it was taken back down within a few hours, the code was copied and is still out there circulating on the platform.
The “PrintNightmare” bug may not be fully patched, some experts are warning, leaving the door open for widespread remote code-execution attacks.
The bug (CVE-2021-1675) exists in the Windows Print Spooler and has been dubbed “PrintNightmare” by researchers. It was originally addressed in June’s Patch Tuesday updates from Microsoft as a minor elevation-of-privilege vulnerability, but the listing was updated last week after researchers from Tencent and NSFOCUS TIANJI Lab figured out it could be used for RCE.
“There are 40 entries in Microsoft’s list of affected products, from Windows 7 to Windows 10 and from Server 2008 to Server 2019,” Dirk Schrader, global vice president of security research at New Net Technologies (NNT), now part of Netwrix, told Threatpost. “Given this broad surface, it is likely that this vulnerability will become an element in the tool chain of current malware families.”
On Sunday, the QiAnXin security team tweeted a video showing successful RCE – but it held back any technical or PoC details. Two days later, though, a full-blown PoC with a complete technical analysis appeared on GitHub, authored by another security firm, Sangfor.
See Also: Data for 700M LinkedIn Users Posted for Sale in Cyber-Underground Claire Tills, senior security engineer with Tenable, which spotted the PoC posting, noted that “the GitHub repository was publicly available long enough for others to clone it. The PoC is likely still circulating and is likely to resurface publicly, if it hasn’t already done so.”
And indeed, according to one security practitioner, the code was successfully forked to another page.
Looks like the original PoC for PrintNightmare (CVE-2021-1675) got deleted but someone has forked it since https://t.co/8MiP62SlzC
— Andy Gill (@ZephrFish) June 29, 2021
See Also: Offensive Security Tool: Pixload
On Wednesday, other researchers tweeted videos and more analysis that could be used for successful exploitation as word spread of the PoC.
Impacket implementation of CVE-2021-1675 https://s.w.org/images/core/emoji/13.0.1/72x72/1f525.png https://t.co/UpKOueij4c
— Cube0x0 (@cube0x0) June 29, 2021 See Also: Hacking Stories: Andrian Lamo – The ‘homeless’ Hacker It should be noted that some sources are also saying that the existing Microsoft patch doesn’t remedy the RCE version. Cube0x0’a impacket implementation above for instance works on a fully patched Windows machine, the authors said.
“We’re still evaluating the efficacy of the patch ourselves, but there are multiple reports indicating the proof-of-concept code works against fully patched systems,” Dustin Childs, of Trend Micro’s Zero Day Initiative, told Threatpost. “This does indicate the patch released in June does not completely address the root cause of the bug. Either way, enterprises should treat this as an incomplete fix and implement other workarounds, such as disabling the print spooler and blocking TCP ports 135 and 445 at the perimeter.”
He made note of Microsoft’s CVE nomenclature too: “It’s curious that the CVE here is -1675 while most of the CVEs Microsoft patched in June are -31000 and higher. This could be an indicato[...]
PoC Exploit Circulating for Critical Windows Print Spooler Bug
https://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg PoC Exploit Circulating for Critical Windows Print Spooler BugPost Views: 49
Reading Time: 2 Minutes
A proof-of-concept for a critical Windows security vulnerability that allows remote code execution (RCE) was dropped on GitHub on Tuesday – and while it was taken back down within a few hours, the code was copied and is still out there circulating on the platform.
The “PrintNightmare” bug may not be fully patched, some experts are warning, leaving the door open for widespread remote code-execution attacks.
The bug (CVE-2021-1675) exists in the Windows Print Spooler and has been dubbed “PrintNightmare” by researchers. It was originally addressed in June’s Patch Tuesday updates from Microsoft as a minor elevation-of-privilege vulnerability, but the listing was updated last week after researchers from Tencent and NSFOCUS TIANJI Lab figured out it could be used for RCE.
“There are 40 entries in Microsoft’s list of affected products, from Windows 7 to Windows 10 and from Server 2008 to Server 2019,” Dirk Schrader, global vice president of security research at New Net Technologies (NNT), now part of Netwrix, told Threatpost. “Given this broad surface, it is likely that this vulnerability will become an element in the tool chain of current malware families.”
On Sunday, the QiAnXin security team tweeted a video showing successful RCE – but it held back any technical or PoC details. Two days later, though, a full-blown PoC with a complete technical analysis appeared on GitHub, authored by another security firm, Sangfor.
See Also: Data for 700M LinkedIn Users Posted for Sale in Cyber-Underground Claire Tills, senior security engineer with Tenable, which spotted the PoC posting, noted that “the GitHub repository was publicly available long enough for others to clone it. The PoC is likely still circulating and is likely to resurface publicly, if it hasn’t already done so.”
And indeed, according to one security practitioner, the code was successfully forked to another page.
Looks like the original PoC for PrintNightmare (CVE-2021-1675) got deleted but someone has forked it since https://t.co/8MiP62SlzC
— Andy Gill (@ZephrFish) June 29, 2021
See Also: Offensive Security Tool: Pixload
On Wednesday, other researchers tweeted videos and more analysis that could be used for successful exploitation as word spread of the PoC.
Impacket implementation of CVE-2021-1675 https://s.w.org/images/core/emoji/13.0.1/72x72/1f525.png https://t.co/UpKOueij4c
— Cube0x0 (@cube0x0) June 29, 2021 See Also: Hacking Stories: Andrian Lamo – The ‘homeless’ Hacker It should be noted that some sources are also saying that the existing Microsoft patch doesn’t remedy the RCE version. Cube0x0’a impacket implementation above for instance works on a fully patched Windows machine, the authors said.
“We’re still evaluating the efficacy of the patch ourselves, but there are multiple reports indicating the proof-of-concept code works against fully patched systems,” Dustin Childs, of Trend Micro’s Zero Day Initiative, told Threatpost. “This does indicate the patch released in June does not completely address the root cause of the bug. Either way, enterprises should treat this as an incomplete fix and implement other workarounds, such as disabling the print spooler and blocking TCP ports 135 and 445 at the perimeter.”
He made note of Microsoft’s CVE nomenclature too: “It’s curious that the CVE here is -1675 while most of the CVEs Microsoft patched in June are -31000 and higher. This could be an indicato[...]
Black Hat Ethical Hacking
PoC Exploit Circulating for Critical Windows Print Spooler Bug
PoC Exploit Circulating for Critical Windows Print Spooler Bug
Motivation to learn Cybersecurity
Hi,i am Tejas 14 year old moreover cybersec enthusiast.If you need a mentor or guidence feel free to contact me on twitter.Continue reading on Medium »
Read more...
Hi,i am Tejas 14 year old moreover cybersec enthusiast.If you need a mentor or guidence feel free to contact me on twitter.Continue reading on Medium »
Read more...
Deep Web
can discord report crimes to the police?
if an account gets banned for breaking discords TOS can they take this to the police if it was also a crime ?
submitted by /u/M4TT-20
[link] [comments]
can discord report crimes to the police?
if an account gets banned for breaking discords TOS can they take this to the police if it was also a crime ?
submitted by /u/M4TT-20
[link] [comments]
reddit
can discord report crimes to the police?
if an account gets banned for breaking discords TOS can they take this to the police if it was also a crime ?
hacking: security in practice
App Isolation
Is it possible to take an app like Tik Tok and isolate it so that it cannot collect any user or device information, while still being able to functionally use the app?
I know using it on a separate device would achieve the same result but I wondered if this way were possible.
submitted by /u/DemonNecron
[link] [comments]
App Isolation
Is it possible to take an app like Tik Tok and isolate it so that it cannot collect any user or device information, while still being able to functionally use the app?
I know using it on a separate device would achieve the same result but I wondered if this way were possible.
submitted by /u/DemonNecron
[link] [comments]
reddit
App Isolation
Is it possible to take an app like Tik Tok and isolate it so that it cannot collect any user or device information, while still being able to...
Alternatives to wmiexec and dealing with EDR?
https://www.reddit.com/r/Pentesting/comments/obinrr/alternatives_to_wmiexec_and_dealing_with_edr/
<!-- SC_OFF -->Sounds like a dumb question, yes, but for context I'm on an internal pen test where an EDR solution (not naming that) is deployed. I've already got around it and managed to get hold of local admins and domain cached credentials, latter I'm leaving to hashcat as they can't be passed around. I know 100% that anything over RDP, and from previous engagements wmiexec, trigger EDR. Targets also do not have any shares available so smbclient can't really be used to poke around underneath it or copy a binary over (though I should be able to with local admin to a main drive). I have a funny feeling that although xfreerdp can be used for pth that it will trigger once I start a session with a legit user. I've probably got enough dirt for the report in terms of configuration improvements but for more of a POC I want to show a command shell, where I can place a payload to talk back to a C2 framework. So, main question is, has anybody been in a similar situation? Were you able to find an alternative to wmiexec? <!-- SC_ON --> submitted by /u/SpaceLionBlues (https://www.reddit.com/user/SpaceLionBlues)
[link] (https://www.reddit.com/r/Pentesting/comments/obinrr/alternatives_to_wmiexec_and_dealing_with_edr/) [comments] (https://www.reddit.com/r/Pentesting/comments/obinrr/alternatives_to_wmiexec_and_dealing_with_edr/)
https://www.reddit.com/r/Pentesting/comments/obinrr/alternatives_to_wmiexec_and_dealing_with_edr/
<!-- SC_OFF -->Sounds like a dumb question, yes, but for context I'm on an internal pen test where an EDR solution (not naming that) is deployed. I've already got around it and managed to get hold of local admins and domain cached credentials, latter I'm leaving to hashcat as they can't be passed around. I know 100% that anything over RDP, and from previous engagements wmiexec, trigger EDR. Targets also do not have any shares available so smbclient can't really be used to poke around underneath it or copy a binary over (though I should be able to with local admin to a main drive). I have a funny feeling that although xfreerdp can be used for pth that it will trigger once I start a session with a legit user. I've probably got enough dirt for the report in terms of configuration improvements but for more of a POC I want to show a command shell, where I can place a payload to talk back to a C2 framework. So, main question is, has anybody been in a similar situation? Were you able to find an alternative to wmiexec? <!-- SC_ON --> submitted by /u/SpaceLionBlues (https://www.reddit.com/user/SpaceLionBlues)
[link] (https://www.reddit.com/r/Pentesting/comments/obinrr/alternatives_to_wmiexec_and_dealing_with_edr/) [comments] (https://www.reddit.com/r/Pentesting/comments/obinrr/alternatives_to_wmiexec_and_dealing_with_edr/)
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Hub Weekly Digest: Denmark’s Central Bank, NIST Guidelines, Western Digital Hack, and Germany’s…
https://cdn-images-1.medium.com/max/2600/1*VyiQ-H8tkOXiBDk681iChQ.jpeg
Hub Security’s weekly digest covers top stories happening around the world related to fintech, critical infrastructure, cloud, and…
Continue reading on HUB Security »
Hub Weekly Digest: Denmark’s Central Bank, NIST Guidelines, Western Digital Hack, and Germany’s…
https://cdn-images-1.medium.com/max/2600/1*VyiQ-H8tkOXiBDk681iChQ.jpeg
Hub Security’s weekly digest covers top stories happening around the world related to fintech, critical infrastructure, cloud, and…
Continue reading on HUB Security »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Cyber criminali nordcoreani attaccano l’istituto nucleare della Corea del Sud
https://cdn-images-1.medium.com/max/2048/1*Q7YAiT6Pcspkb8FauBdB8Q.png
Ci sarebbe un gruppo di hacker nordcoreani dietro la violazione dei server del Korea Atomic Energy Research Institute (KAERI).
Continue reading on BV TECH Group »
Cyber criminali nordcoreani attaccano l’istituto nucleare della Corea del Sud
https://cdn-images-1.medium.com/max/2048/1*Q7YAiT6Pcspkb8FauBdB8Q.png
Ci sarebbe un gruppo di hacker nordcoreani dietro la violazione dei server del Korea Atomic Energy Research Institute (KAERI).
Continue reading on BV TECH Group »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
How your typo can get you hacked ?
https://cdn-images-1.medium.com/max/2560/1*HdIwiTM_jB7IdZp3wORwsg.jpeg
Have you ever wondered that your simple typing error can get you in trouble If “No” then start wondering because it can and after going…
Continue reading on Bobble Engineering »
How your typo can get you hacked ?
https://cdn-images-1.medium.com/max/2560/1*HdIwiTM_jB7IdZp3wORwsg.jpeg
Have you ever wondered that your simple typing error can get you in trouble If “No” then start wondering because it can and after going…
Continue reading on Bobble Engineering »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
What is Ethical Hacking? Types Of Ethical Hacking
https://cdn-images-1.medium.com/max/1580/1*aiDV89xwNbBNVB4epbeFhQ.jpeg
Hacking refers to one of the largest shortcomings with computer technology regards. We are living in the digital age currently where…
Continue reading on Medium »
What is Ethical Hacking? Types Of Ethical Hacking
https://cdn-images-1.medium.com/max/1580/1*aiDV89xwNbBNVB4epbeFhQ.jpeg
Hacking refers to one of the largest shortcomings with computer technology regards. We are living in the digital age currently where…
Continue reading on Medium »