Hacking Articles Tips Tricks Videos Tutorials
Photo
Kali Linux Tutorials
AWS Pen-Testing Laboratory : Pentesting Lab With A Kali Linux Instance Accessible Via Ssh And Wireguard VPN And With Vulnerable Instances In A Private Subnet
AWS Pen-Testing Laboratory deployed as IaC with Terraform on AWS. It deploys a Kali Linux instance accessible via ssh & wire guard VPN. Vulnerable instances in a private subnet. NOTE: Ids only defined for region “eu-west-1” For other regions, kali ami id must be specified and metasploitable3 id (after building it) Changelog [2021-06-02] AMI IDs […]
The post AWS Pen-Testing Laboratory : Pentesting Lab With A Kali Linux Instance Accessible Via Ssh And Wireguard VPN And With Vulnerable Instances In A Private Subnet appeared first on Kali Linux Tutorials.
AWS Pen-Testing Laboratory : Pentesting Lab With A Kali Linux Instance Accessible Via Ssh And Wireguard VPN And With Vulnerable Instances In A Private Subnet
AWS Pen-Testing Laboratory deployed as IaC with Terraform on AWS. It deploys a Kali Linux instance accessible via ssh & wire guard VPN. Vulnerable instances in a private subnet. NOTE: Ids only defined for region “eu-west-1” For other regions, kali ami id must be specified and metasploitable3 id (after building it) Changelog [2021-06-02] AMI IDs […]
The post AWS Pen-Testing Laboratory : Pentesting Lab With A Kali Linux Instance Accessible Via Ssh And Wireguard VPN And With Vulnerable Instances In A Private Subnet appeared first on Kali Linux Tutorials.
Hacking Articles Tips Tricks Videos Tutorials
Photo
Black Hat Ethical Hacking
Western Digital Users Face Another RCE
https://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Western Digital Users Face Another RCEPost Views: 80
Reading Time: 1 Minute
The latest zero-day entails an attack chain that allows an unauthenticated intruder to execute code as root and install a permanent backdoor on the vendor’s network-attached storage (NAS) devices. It’s found in all Western Digital NAS devices running the old, no-longer-supported My Cloud 3 operating system: an OS that the researchers said is “in limbo,” given that Western Digital recently stopped supporting it.
Bad news comes in threes, most particularly for Western Digital customers.
As if things weren’t bad enough for the untold number of Western Digital customers whose data blinked out of existence last month, there’s another zero-day waiting for whoever can’t or won’t upgrade its My Cloud storage devices.
Western Digital has said that its update – My Cloud OS 5 – fixed the bug. Maybe so, but the researchers who found the OS 3 vulnerability, Radek Domanski and Pedro Ribeiro, told security journalist Brian Krebs that OS 5 was a complete rewrite of OS 3 that skewered some popular features and functionality. As such, not all users are likely to upgrade: a presumption underscored by the many users who cited using OS 3 in the support forum when the remote data wipe happened in June.
“It broke a lot of functionality,” Domanski said of OS 5, as quoted by Krebs. “So some users might not decide to migrate to OS 5.”
There is hope. Domanski and Ribeiro have developed and released their own patch that fixes the vulnerabilities they found in OS 3. One problem: It needs to be reapplied every time the device reboots. The Global RCE Data WipeLast month, we saw what a bug like this can lead to: Customers across the world wailed as years – decades, in some cases – of data were remotely wiped off of their old My Book Live and My Book Live Duo devices.
The June attack actually turned out to be two attacks rolled into what at first seemed like one: An old remote-code execution (RCE) bug from 2018 that Western Digital first blamed for the remote wipes, and then a previously unknown zero-day flaw that enabled unauthenticated remote factory-reset device wipes.
As Ars Technica’s Dan Goodin detailed in a fascinating writeup, Ars and Derek Abdine, CTO at security firm Censys, analyzed logs from affected devices and found that the devices seemed to have been caught in some kind of tug-of-war, in what Abdine hypothesized might have been a struggle between multiple attackers for control of the compromised devices.
See Also: Kaseya ransomware supply chain attack: What you need to know The Latest Zero DayNow comes this one, the latest bug, reported last week by Krebs. It’s a third, similarly serious zero-day vulnerability in a much broader range of newer Western Digital My Cloud NAS boxes. Domanski and Ribeiro originally planned to present it at the Pwn2Own hacking contest in Tokyo last year.
They never did: As vendors tend to do, Western Digital pushed out an update a mere week before the pair – who hack together as Flashback Team – were going to present. Given that the update squashed their bug, the researchers couldn’t compete. Pwn2Own rules stipulate that exploits work against the latest firmware or software supported for a targeted device.
But in February, they did publish the attack chain they pieced together, shown in the YouTube video below. The duo gave Western Digital “a taste of their own medicine,” giving the company just one week to fix the vulnerability as a mirror to that one week the OS 5 update dropped leading up to the Pwn2Own event.
Why so little time[...]
Western Digital Users Face Another RCE
https://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Western Digital Users Face Another RCEPost Views: 80
Reading Time: 1 Minute
The latest zero-day entails an attack chain that allows an unauthenticated intruder to execute code as root and install a permanent backdoor on the vendor’s network-attached storage (NAS) devices. It’s found in all Western Digital NAS devices running the old, no-longer-supported My Cloud 3 operating system: an OS that the researchers said is “in limbo,” given that Western Digital recently stopped supporting it.
Bad news comes in threes, most particularly for Western Digital customers.
As if things weren’t bad enough for the untold number of Western Digital customers whose data blinked out of existence last month, there’s another zero-day waiting for whoever can’t or won’t upgrade its My Cloud storage devices.
Western Digital has said that its update – My Cloud OS 5 – fixed the bug. Maybe so, but the researchers who found the OS 3 vulnerability, Radek Domanski and Pedro Ribeiro, told security journalist Brian Krebs that OS 5 was a complete rewrite of OS 3 that skewered some popular features and functionality. As such, not all users are likely to upgrade: a presumption underscored by the many users who cited using OS 3 in the support forum when the remote data wipe happened in June.
“It broke a lot of functionality,” Domanski said of OS 5, as quoted by Krebs. “So some users might not decide to migrate to OS 5.”
There is hope. Domanski and Ribeiro have developed and released their own patch that fixes the vulnerabilities they found in OS 3. One problem: It needs to be reapplied every time the device reboots. The Global RCE Data WipeLast month, we saw what a bug like this can lead to: Customers across the world wailed as years – decades, in some cases – of data were remotely wiped off of their old My Book Live and My Book Live Duo devices.
The June attack actually turned out to be two attacks rolled into what at first seemed like one: An old remote-code execution (RCE) bug from 2018 that Western Digital first blamed for the remote wipes, and then a previously unknown zero-day flaw that enabled unauthenticated remote factory-reset device wipes.
As Ars Technica’s Dan Goodin detailed in a fascinating writeup, Ars and Derek Abdine, CTO at security firm Censys, analyzed logs from affected devices and found that the devices seemed to have been caught in some kind of tug-of-war, in what Abdine hypothesized might have been a struggle between multiple attackers for control of the compromised devices.
See Also: Kaseya ransomware supply chain attack: What you need to know The Latest Zero DayNow comes this one, the latest bug, reported last week by Krebs. It’s a third, similarly serious zero-day vulnerability in a much broader range of newer Western Digital My Cloud NAS boxes. Domanski and Ribeiro originally planned to present it at the Pwn2Own hacking contest in Tokyo last year.
They never did: As vendors tend to do, Western Digital pushed out an update a mere week before the pair – who hack together as Flashback Team – were going to present. Given that the update squashed their bug, the researchers couldn’t compete. Pwn2Own rules stipulate that exploits work against the latest firmware or software supported for a targeted device.
But in February, they did publish the attack chain they pieced together, shown in the YouTube video below. The duo gave Western Digital “a taste of their own medicine,” giving the company just one week to fix the vulnerability as a mirror to that one week the OS 5 update dropped leading up to the Pwn2Own event.
Why so little time[...]
Black Hat Ethical Hacking
Western Digital Users Face Another RCE
Western Digital Users Face Another RCE
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Enter the Grey Zone
https://cdn-images-1.medium.com/max/2600/1*4QXzZnSwV9OlWVeobM4rmw.png
We often mistake Hollywood’s dramatic interpretation of cyberwarfare for reality.In fact, it is prosaic, pervasive and already shaping…
Continue reading on The Conflict issue — Weapons of Reason »
Enter the Grey Zone
https://cdn-images-1.medium.com/max/2600/1*4QXzZnSwV9OlWVeobM4rmw.png
We often mistake Hollywood’s dramatic interpretation of cyberwarfare for reality.In fact, it is prosaic, pervasive and already shaping…
Continue reading on The Conflict issue — Weapons of Reason »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Learn Ethical Hacking for free
Hey guys I know Many of you want to pursue hacking as your career but you don’t from where you should start here I will teach you…
Continue reading on Medium »
Learn Ethical Hacking for free
Hey guys I know Many of you want to pursue hacking as your career but you don’t from where you should start here I will teach you…
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
How Likely Is It Your Smart Home Will Be Attacked By Hackers?
Don’t imagine that it’s only the unlucky few who get caught out by hackers penetrating their Smart Home Automation security protocols…
Continue reading on Medium »
How Likely Is It Your Smart Home Will Be Attacked By Hackers?
Don’t imagine that it’s only the unlucky few who get caught out by hackers penetrating their Smart Home Automation security protocols…
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
How to Save WhatsApp Chat from Hacking?
https://cdn-images-1.medium.com/max/600/0*h4RL3j5RLBdmJC6_.jpg
Jeff Bezos is within the information. Saudi crown prince Mohammed bin Salman is inside the news. Why? Due to the fact, WhatsApp. Now…
Continue reading on Medium »
How to Save WhatsApp Chat from Hacking?
https://cdn-images-1.medium.com/max/600/0*h4RL3j5RLBdmJC6_.jpg
Jeff Bezos is within the information. Saudi crown prince Mohammed bin Salman is inside the news. Why? Due to the fact, WhatsApp. Now…
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Keep your friends close…
https://cdn-images-1.medium.com/max/2600/0*vjdiwkbtb0eGbvWs
This isn’t fiction, but a warning for those of you who are on social media. Which, I’m thinking is a lot more people these days than not.
Continue reading on Medium »
Keep your friends close…
https://cdn-images-1.medium.com/max/2600/0*vjdiwkbtb0eGbvWs
This isn’t fiction, but a warning for those of you who are on social media. Which, I’m thinking is a lot more people these days than not.
Continue reading on Medium »
GitDump - A Pentesting Tool That Dumps The Source Code From .Git Even When The Directory Traversal Is Disabled
http://www.kitploit.com/2021/07/gitdump-pentesting-tool-that-dumps.html
http://www.kitploit.com/2021/07/gitdump-pentesting-tool-that-dumps.html
GitDump dumps the source code from .git when the directory traversal (https://www.kitploit.com/search/label/Directory%20Traversal) is disabled
Requirements
Python3
Tested on
Windows Kali Linux
What it does
Dump source code from website/.git directory when directory traversal is disabled.
How it works
Fetch all common files (.git/index, .git/HEAD, .git/ORIG_HEAD, etc.). Find as many objects (sha1) as possible by analyzing .git/packed-refs, .git/index, etc. Download idx and pack files. Now you can run git checkout -- . to retrieve source code.
How to Use
python3 git-dump.py https://website.com/.git/ Create the output directory and dump all the .git files in it. After running above script type: cd output && git checkout -- . It will recover all source code.
TODO
Search through git repository for secrets (https://www.kitploit.com/search/label/Secrets) by digging deep into commit history (https://www.kitploit.com/search/label/History) and branches. Credits Sean B. Palmer for his index file parser. (https://github.com/sbp/gin)
Download GitDump (https://github.com/Ebryx/GitDump)
Requirements
Python3
Tested on
Windows Kali Linux
What it does
Dump source code from website/.git directory when directory traversal is disabled.
How it works
Fetch all common files (.git/index, .git/HEAD, .git/ORIG_HEAD, etc.). Find as many objects (sha1) as possible by analyzing .git/packed-refs, .git/index, etc. Download idx and pack files. Now you can run git checkout -- . to retrieve source code.
How to Use
python3 git-dump.py https://website.com/.git/ Create the output directory and dump all the .git files in it. After running above script type: cd output && git checkout -- . It will recover all source code.
TODO
Search through git repository for secrets (https://www.kitploit.com/search/label/Secrets) by digging deep into commit history (https://www.kitploit.com/search/label/History) and branches. Credits Sean B. Palmer for his index file parser. (https://github.com/sbp/gin)
Download GitDump (https://github.com/Ebryx/GitDump)
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking Articles
Meterpreter for Pentester: Sessions
In this series of articles, we will be focusing on the various mechanisms of the Metasploit Framework that can be used by Penetration Testers. Today we are going to learn about the session’s command of the Metasploit Framework. Sessions command helps us to interact and manipulate the various sessions created
The post Meterpreter for Pentester: Sessions appeared first on Hacking Articles.
Meterpreter for Pentester: Sessions
In this series of articles, we will be focusing on the various mechanisms of the Metasploit Framework that can be used by Penetration Testers. Today we are going to learn about the session’s command of the Metasploit Framework. Sessions command helps us to interact and manipulate the various sessions created
The post Meterpreter for Pentester: Sessions appeared first on Hacking Articles.