Hacking Articles Tips Tricks Videos Tutorials
Photo
Black Hat Ethical Hacking
Kaseya Obtains Universal Decryptor for REvil Ransomware
https://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Kaseya Obtains Universal Decryptor for REvil RansomwarePost Views: 86
Reading Time: 1 Minute
Kaseya has obtained a master decryptor key for the REvil ransomware that locked up the systems of at least 60 of its customers in a spate of worldwide cyberattacks on July 2.
The vendor will work with customers affected by the early July spate of ransomware attacks to unlock files; it’s unclear if the ransom was paid.
The attacks, which exploited now-patched zero-days in the Kaseya Virtual System/Server Administrator (VSA) platform, affected Kaseya customers in 22 countries using the on-premises version of the platform – many of which are managed service providers (MSPs) who use VSA to manage the networks of other businesses. In addition to the 60 direct customers, around 1,500 downstream customers of those MSPs were also affected.
The VSA software is used by Kaseya customers to remotely monitor and manage software and network infrastructure.
In the wake of the attacks, the REvil gang (aka Sodinokibi) demanded $70 million for a universal public decryption key that will remediate all impacted victims – a price that one researcher said was eventually lowered to $50 million.
Late on Thursday afternoon, the vendor announced via its rolling advisory on the incident that it had obtained the decryptor “through a third party.” It’s unclear if the ransom was indeed paid.
See Also: Microsoft: New Unpatched Bug in Windows Print Spooler
“We can confirm that Kaseya obtained the tool from a third party and have teams actively helping customers affected by the ransomware to restore their environments, with no reports of any problem or issues associated with the decryptor,” it said. “Kaseya is working with Emsisoft to support our customer engagement efforts, and Emsisoft has confirmed the key is effective at unlocking victims…Customers who have been impacted by the ransomware will be contacted by Kaseya representatives.”
Deepening the mystery is the fact that REvil as a criminal organization went dark July 13, when its sites vanished and representatives were banned on prominent underground forums.
Emsisoft isn’t releasing further details: “We are working with Kaseya to support their customer engagement efforts,” Emsisoft said in a statement given to Threatpost. “We have confirmed the key is effective at unlocking victims and will continue to provide support to Kaseya and its customers.”
Threatpost has reached out to Kaseya as well and will update this post with any additional information.
“The sudden appearance of this universal key suggests that it is possible that this ransom may have been paid, although it is likely that the ransom would have been negotiate to a lower price,” Ivan Righi, cyber-threat intelligence analyst at Digital Shadows, said via email. See Also: Offensive Security Tool: VoIPmonitor Sniffer Despite Decryption, the Nightmare Isn’t OverEven though the master decryption key has been acquired, the attack should not be considered to be over, researchers warned. For one thing, REvil is known for its double-extortion attacks, where company data is stolen in addition to being hit with ransomware.
“The group may still have copies of data stolen from victims,” Righi said. “The group could use this data to extort victims or auction off the data, as it has done in the past on its website Happy Blog.”
Erich Kron, security awareness advocate at KnowBe4, noted that remediation will take more than simply applying the unlocking mechanism to files.
“Significant damage h[...]
___________________________
@hacking_Attack
@Hacking_Video
Kaseya Obtains Universal Decryptor for REvil Ransomware
https://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Kaseya Obtains Universal Decryptor for REvil RansomwarePost Views: 86
Reading Time: 1 Minute
Kaseya has obtained a master decryptor key for the REvil ransomware that locked up the systems of at least 60 of its customers in a spate of worldwide cyberattacks on July 2.
The vendor will work with customers affected by the early July spate of ransomware attacks to unlock files; it’s unclear if the ransom was paid.
The attacks, which exploited now-patched zero-days in the Kaseya Virtual System/Server Administrator (VSA) platform, affected Kaseya customers in 22 countries using the on-premises version of the platform – many of which are managed service providers (MSPs) who use VSA to manage the networks of other businesses. In addition to the 60 direct customers, around 1,500 downstream customers of those MSPs were also affected.
The VSA software is used by Kaseya customers to remotely monitor and manage software and network infrastructure.
In the wake of the attacks, the REvil gang (aka Sodinokibi) demanded $70 million for a universal public decryption key that will remediate all impacted victims – a price that one researcher said was eventually lowered to $50 million.
Late on Thursday afternoon, the vendor announced via its rolling advisory on the incident that it had obtained the decryptor “through a third party.” It’s unclear if the ransom was indeed paid.
See Also: Microsoft: New Unpatched Bug in Windows Print Spooler
“We can confirm that Kaseya obtained the tool from a third party and have teams actively helping customers affected by the ransomware to restore their environments, with no reports of any problem or issues associated with the decryptor,” it said. “Kaseya is working with Emsisoft to support our customer engagement efforts, and Emsisoft has confirmed the key is effective at unlocking victims…Customers who have been impacted by the ransomware will be contacted by Kaseya representatives.”
Deepening the mystery is the fact that REvil as a criminal organization went dark July 13, when its sites vanished and representatives were banned on prominent underground forums.
Emsisoft isn’t releasing further details: “We are working with Kaseya to support their customer engagement efforts,” Emsisoft said in a statement given to Threatpost. “We have confirmed the key is effective at unlocking victims and will continue to provide support to Kaseya and its customers.”
Threatpost has reached out to Kaseya as well and will update this post with any additional information.
“The sudden appearance of this universal key suggests that it is possible that this ransom may have been paid, although it is likely that the ransom would have been negotiate to a lower price,” Ivan Righi, cyber-threat intelligence analyst at Digital Shadows, said via email. See Also: Offensive Security Tool: VoIPmonitor Sniffer Despite Decryption, the Nightmare Isn’t OverEven though the master decryption key has been acquired, the attack should not be considered to be over, researchers warned. For one thing, REvil is known for its double-extortion attacks, where company data is stolen in addition to being hit with ransomware.
“The group may still have copies of data stolen from victims,” Righi said. “The group could use this data to extort victims or auction off the data, as it has done in the past on its website Happy Blog.”
Erich Kron, security awareness advocate at KnowBe4, noted that remediation will take more than simply applying the unlocking mechanism to files.
“Significant damage h[...]
___________________________
@hacking_Attack
@Hacking_Video
Hacking Articles Tips Tricks Videos Tutorials
Black Hat Ethical Hacking Kaseya Obtains Universal Decryptor for REvil Ransomware https://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Kaseya Obtains Universal Decryptor for REvil RansomwarePost Views: 86 …
as been done already in the way of downtime and recovery costs, both currently and in the future,” he noted via email. “Even with the data decrypted, there are significant costs associated with restoring devices and data. Simply decrypting the data does not resolve issues that remain, such as potentially installed back doors the attackers could use at a later date. This means there is still a lot of work ahead.”
Tim Wade, technical director on the CTO team at Vectra, said that there could be other nasty surprises for victims to watch out for following the attacks.
“From a distance, the emergence of a master key may appear more comforting than it should,” he warned. “The value of accelerating the restoration of data and services shouldn’t be trivialized, but it won’t exactly erase the already extensive cost of these attacks. And this is a cost carried both in terms of the historic disruption, but also given the proclivity of these criminal operators to leave lingering backdoors, the ongoing need to rebuild compromised infrastructure into a clean, trustworthy state. So yes, sidestepping how this key may have been acquired, it may have some positive outcomes but as they say – it isn’t over ’til it’s over.” See Also: Hacking Stories: Andrian Lamo – The ‘homeless’ Hacker Supply-Chain Attacks on MSPs SnowballWhile this particular attack was far-reaching and significant, it’s not the first cyberattack to affect MSPs and their downstream customers this year. The Clop ransomware gang for instance went after the Accellion legacy FTA software for file transfers in February; multiple Accellion FTA customers, including the Jones Day Law Firm, Kroger, Shell and Singtel were all affected.
The incidents point at a lesson for organizations of all sizes, researchers noted, when it comes to the MSP biz.
“Whenever an organization trusts external entities with the keys to their kingdom, they are undertaking a serious risk,” Kron said. “Likewise, when MSPs are given this access, it is imperative that they aggressively protect their customers. For organizations that have been taken down by ransomware due to the lack of backups, or if their backups were encrypted, leaving them vulnerable, this is a great time to have some hard discussions with their service providers in an effort to eliminate the threat in the future.”
Source: threatpost.com (Click Link)Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/07/Atlassian-Jira-90x90.png Critical Jira Flaw in Atlassian Could Lead to RCE3 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/07/Copy-of-Untitled-90x90.png MacOS Being Picked Apart by $49 XLoader Data Stealer4 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/07/printer-1-90x90.jpg 16-Year-Old HP Printer-Driver Bug Impacts Millions of Windows Machines5 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/07/p1050753-e1537277708291-90x90.jpg Leaked NSO Group Data Hints at Widespread Pegasus Spyware Infections6 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/07/Microsoft-Office-90x90.jpg Microsoft: New Unpatched Bug in Windows Print Spooler1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/07/linkedin_generic-90x90.jpg Safari Zero-Day Used in Malicious LinkedIn Campaign1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/07/Windows-Hello-e1626260072511-90x90.jpg Windows Hello Bypass Fools Biometrics Safeguards in PCs2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/07/ICS-90x90.jpg Unpatched Critical RCE Bug Allows Industrial, Utility Takeovers2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/07/patching-against-ransomware-100723134-large-90x90.jpg Kaseya Patches Zero-Days Used in REvil Attacks2 weeks ago[...]
___________________________
@hacking_Attack
@Hacking_Video
Tim Wade, technical director on the CTO team at Vectra, said that there could be other nasty surprises for victims to watch out for following the attacks.
“From a distance, the emergence of a master key may appear more comforting than it should,” he warned. “The value of accelerating the restoration of data and services shouldn’t be trivialized, but it won’t exactly erase the already extensive cost of these attacks. And this is a cost carried both in terms of the historic disruption, but also given the proclivity of these criminal operators to leave lingering backdoors, the ongoing need to rebuild compromised infrastructure into a clean, trustworthy state. So yes, sidestepping how this key may have been acquired, it may have some positive outcomes but as they say – it isn’t over ’til it’s over.” See Also: Hacking Stories: Andrian Lamo – The ‘homeless’ Hacker Supply-Chain Attacks on MSPs SnowballWhile this particular attack was far-reaching and significant, it’s not the first cyberattack to affect MSPs and their downstream customers this year. The Clop ransomware gang for instance went after the Accellion legacy FTA software for file transfers in February; multiple Accellion FTA customers, including the Jones Day Law Firm, Kroger, Shell and Singtel were all affected.
The incidents point at a lesson for organizations of all sizes, researchers noted, when it comes to the MSP biz.
“Whenever an organization trusts external entities with the keys to their kingdom, they are undertaking a serious risk,” Kron said. “Likewise, when MSPs are given this access, it is imperative that they aggressively protect their customers. For organizations that have been taken down by ransomware due to the lack of backups, or if their backups were encrypted, leaving them vulnerable, this is a great time to have some hard discussions with their service providers in an effort to eliminate the threat in the future.”
Source: threatpost.com (Click Link)Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/07/Atlassian-Jira-90x90.png Critical Jira Flaw in Atlassian Could Lead to RCE3 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/07/Copy-of-Untitled-90x90.png MacOS Being Picked Apart by $49 XLoader Data Stealer4 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/07/printer-1-90x90.jpg 16-Year-Old HP Printer-Driver Bug Impacts Millions of Windows Machines5 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/07/p1050753-e1537277708291-90x90.jpg Leaked NSO Group Data Hints at Widespread Pegasus Spyware Infections6 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/07/Microsoft-Office-90x90.jpg Microsoft: New Unpatched Bug in Windows Print Spooler1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/07/linkedin_generic-90x90.jpg Safari Zero-Day Used in Malicious LinkedIn Campaign1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/07/Windows-Hello-e1626260072511-90x90.jpg Windows Hello Bypass Fools Biometrics Safeguards in PCs2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/07/ICS-90x90.jpg Unpatched Critical RCE Bug Allows Industrial, Utility Takeovers2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/07/patching-against-ransomware-100723134-large-90x90.jpg Kaseya Patches Zero-Days Used in REvil Attacks2 weeks ago[...]
___________________________
@hacking_Attack
@Hacking_Video
Hacking Articles Tips Tricks Videos Tutorials
as been done already in the way of downtime and recovery costs, both currently and in the future,” he noted via email. “Even with the data decrypted, there are significant costs associated with restoring devices and data. Simply decrypting the data does not…
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/07/cisco-90x90.jpg Cisco BPA, WSA Bugs Allow Remote Cyberattacks2 weeks ago
style="display:block; text-align:center;"
data-ad-layout="in-article"
data-ad-format="fluid"
data-ad-client="ca-pub-6620833063853657"
data-ad-slot="4517761481">
The post Kaseya Obtains Universal Decryptor for REvil Ransomware first appeared on Black Hat Ethical Hacking.
___________________________
@hacking_Attack
@Hacking_Video
style="display:block; text-align:center;"
data-ad-layout="in-article"
data-ad-format="fluid"
data-ad-client="ca-pub-6620833063853657"
data-ad-slot="4517761481">
The post Kaseya Obtains Universal Decryptor for REvil Ransomware first appeared on Black Hat Ethical Hacking.
___________________________
@hacking_Attack
@Hacking_Video
hacking: security in practice
Which one can be much more suitable to start for a newbie on these topics? Malware Analysis or Reverse Engineering?
Hello, dear sub. I get stucked a bit to choose on which I can start. Actually, I want to have better path. Do you have any recommendations?
submitted by /u/m3t3kh4n
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
Which one can be much more suitable to start for a newbie on these topics? Malware Analysis or Reverse Engineering?
Hello, dear sub. I get stucked a bit to choose on which I can start. Actually, I want to have better path. Do you have any recommendations?
submitted by /u/m3t3kh4n
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
Which one can be much more suitable to start for a newbie on these...
Hello, dear sub. I get stucked a bit to choose on which I can start. Actually, I want to have better path. Do you have any recommendations?
hacking: security in practice
How would you fake a long time history for a new website?
Could you, say, 3 years ago have created a boat load of random urls that can later be changed to show it being around for a long time? Maybe use your own systems to ping the sites a bunch with random IPs to make it show activity? Apologies if it sounds stupid. I'm not extremely tech savvy, I just stayed at a Holiday Inn Express last night.
submitted by /u/ToyotaSupra00
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
How would you fake a long time history for a new website?
Could you, say, 3 years ago have created a boat load of random urls that can later be changed to show it being around for a long time? Maybe use your own systems to ping the sites a bunch with random IPs to make it show activity? Apologies if it sounds stupid. I'm not extremely tech savvy, I just stayed at a Holiday Inn Express last night.
submitted by /u/ToyotaSupra00
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
How would you fake a long time history for a new website?
Could you, say, 3 years ago have created a boat load of random urls that can later be changed to show it being around for a long time? Maybe use...
hacking: security in practice
Is The Fanatical Cybersecurity Bundle Worth It?
Hello,
I recently saw this bundle on Fanatical containing 15 Packt books. I have an interest in cybersecurity and am looking for a simple introduction to basic concepts of the field. I am not close to college age nor do I have plans to become an IT professional. It seems that this publisher has a bad reputation for poor editing etc. but the bundle is only $10. In my situation is this purchase worth it? Can the books communicate well enough to get the basics through?
submitted by /u/Socrat3z1
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
Is The Fanatical Cybersecurity Bundle Worth It?
Hello,
I recently saw this bundle on Fanatical containing 15 Packt books. I have an interest in cybersecurity and am looking for a simple introduction to basic concepts of the field. I am not close to college age nor do I have plans to become an IT professional. It seems that this publisher has a bad reputation for poor editing etc. but the bundle is only $10. In my situation is this purchase worth it? Can the books communicate well enough to get the basics through?
submitted by /u/Socrat3z1
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
Is The Fanatical Cybersecurity Bundle Worth It?
Hello, I recently saw [this](https://www.fanatical.com/en/bundle/cybersecurity-bundle) bundle on Fanatical containing 15 Packt books. I have an...
Hacking Articles Tips Tricks Videos Tutorials
Photo
KitPloit - PenTest Tools!
Juumla - Tool Designed To Identify And Scan For Version, Config Files In The CMS Joomla!
https://1.bp.blogspot.com/-bbraG4TyDzU/YPn-wgjFLFI/AAAAAAAAk5k/DXwPnKiyZrAqUCOLnguHltVAj9qbkZkMwCNcBGAsYHQ/w640-h558/juumla_1_banner.png
Juumlais a python tool developed to identify the current Joomla version and scan for readable Joomla config files.
Installing / Getting started
A quick guide of how to install and use Juumla.
Docker
If you want to run Juumla in a Docker container, follow this commands:
container - sudo docker run juumla:latest ">
Pre-requisites
* Python 3 installed on your machine.
* Install the libraries with
Features
* Fast scan
* Low RAM and CPU usage
* Identify Joomla version
* Config files detection
* Open-Source
To-Do
* Vulnerability Scanner
* Improve Joomla detection
* Config files detection
* Improve code
Contributing
A quick guide of how to contribute with the project.
Resources
https://skynettools.com/juumla-python-cli-tool-for-joomla-information-hathering/
Warning
* The developer is not responsible for any malicious use of this tool.
Download Juumla
___________________________
@hacking_Attack
@Hacking_Video
Juumla - Tool Designed To Identify And Scan For Version, Config Files In The CMS Joomla!
https://1.bp.blogspot.com/-bbraG4TyDzU/YPn-wgjFLFI/AAAAAAAAk5k/DXwPnKiyZrAqUCOLnguHltVAj9qbkZkMwCNcBGAsYHQ/w640-h558/juumla_1_banner.png
Juumlais a python tool developed to identify the current Joomla version and scan for readable Joomla config files.
Installing / Getting started
A quick guide of how to install and use Juumla.
1. Clone the repository - git clone https://github.com/oppsec/juumla.git
2. Install the libraries - pip3 install -r requirements.txt
3. Run Juumla - python3 main.py -u https://example.com
Docker
If you want to run Juumla in a Docker container, follow this commands:
container - sudo docker run juumla:latest ">
1. Clone the repository - git clone https://github.com/oppsec/juumla.git
2. Build the image - sudo docker build -t juumla:latest .
3. Run container - sudo docker run juumla:latest
Pre-requisites
* Python 3 installed on your machine.
* Install the libraries with
pip3 install -r requirements.txtFeatures
* Fast scan
* Low RAM and CPU usage
* Identify Joomla version
* Config files detection
* Open-Source
To-Do
* Vulnerability Scanner
* Improve Joomla detection
* Config files detection
* Improve code
Contributing
A quick guide of how to contribute with the project.
1. Create a fork from Juumla repository
2. Download the project with git clone https://github.com/your/juumla.git
3. Type cd juumla/
4. Make your changes
5. Commit and make a git push
6. Open a pull request
Resources
https://skynettools.com/juumla-python-cli-tool-for-joomla-information-hathering/
Warning
* The developer is not responsible for any malicious use of this tool.
Download Juumla
___________________________
@hacking_Attack
@Hacking_Video
KitPloit - PenTest & Hacking Tools
Juumla - Tool Designed To Identify And Scan For Version, Config Files In The CMS Joomla!
Juumla - Tool Designed To Identify And Scan For Version, Config Files In The CMS Joomla!
http://www.kitploit.com/2021/07/juumla-tool-designed-to-identify-and.html
___________________________
@hacking_Attack
@Hacking_Video
http://www.kitploit.com/2021/07/juumla-tool-designed-to-identify-and.html
___________________________
@hacking_Attack
@Hacking_Video
KitPloit - PenTest & Hacking Tools
Juumla - Tool Designed To Identify And Scan For Version, Config Files In The CMS Joomla!
Juumla is a python tool developed to identify the current Joomla version and scan (https://www.kitploit.com/search/label/Scan) for readable Joomla config files.
Installing / Getting started A quick guide of how to install and use Juumla. 1. Clone the repository - git clone https://github.com/oppsec/juumla.git
2. Install the libraries - pip3 install -r requirements.txt
3. Run Juumla - python3 main.py -u https://example.com
Docker If you want to run Juumla in a Docker container, follow this commands: container - sudo docker run juumla:latest ">1. Clone the repository - git clone https://github.com/oppsec/juumla.git
2. Build the image - sudo docker build -t juumla:latest .
3. Run container - sudo docker run juumla:latest
Pre-requisites Python 3 (https://www.python.org/downloads/) installed on your machine. Install the libraries with pip3 install -r requirements.txt
Features Fast scan Low RAM and CPU usage Identify Joomla version Config files detection Open-Source
To-Do Vulnerability (https://www.kitploit.com/search/label/Vulnerability) Scanner Improve Joomla detection Config files detection Improve code
Contributing A quick guide of how to contribute with the project. 1. Create a fork from Juumla repository
2. Download the project with git clone https://github.com/your/juumla.git
3. Type cd juumla/
4. Make your changes
5. Commit and make a git push
6. Open a pull request
Resources https://skynettools.com/juumla-python-cli-tool-for-joomla-information-hathering/
Warning The developer is not responsible for any malicious use of this tool.
Download Juumla (https://github.com/oppsec/juumla)
___________________________
@hacking_Attack
@Hacking_Video
Installing / Getting started A quick guide of how to install and use Juumla. 1. Clone the repository - git clone https://github.com/oppsec/juumla.git
2. Install the libraries - pip3 install -r requirements.txt
3. Run Juumla - python3 main.py -u https://example.com
Docker If you want to run Juumla in a Docker container, follow this commands: container - sudo docker run juumla:latest ">1. Clone the repository - git clone https://github.com/oppsec/juumla.git
2. Build the image - sudo docker build -t juumla:latest .
3. Run container - sudo docker run juumla:latest
Pre-requisites Python 3 (https://www.python.org/downloads/) installed on your machine. Install the libraries with pip3 install -r requirements.txt
Features Fast scan Low RAM and CPU usage Identify Joomla version Config files detection Open-Source
To-Do Vulnerability (https://www.kitploit.com/search/label/Vulnerability) Scanner Improve Joomla detection Config files detection Improve code
Contributing A quick guide of how to contribute with the project. 1. Create a fork from Juumla repository
2. Download the project with git clone https://github.com/your/juumla.git
3. Type cd juumla/
4. Make your changes
5. Commit and make a git push
6. Open a pull request
Resources https://skynettools.com/juumla-python-cli-tool-for-joomla-information-hathering/
Warning The developer is not responsible for any malicious use of this tool.
Download Juumla (https://github.com/oppsec/juumla)
___________________________
@hacking_Attack
@Hacking_Video
KitPloit - PenTest & Hacking Tools
Leading source of security tools, hacking tools, cybersecurity and network security. Learn about new tools and updates in one place.
Juumla - Tool Designed To Identify And Scan For Version, Config Files In The CMS Joomla!
Juumla is a python tool developed to identify the current Joomla version and scan for readable Joomla config files.Installing / Getting started A quick guide of how to install and use Juumla. 1. Clone the repository - git clone https://github.com/oppsec/juumla.git2. Install the libraries - pip3 install -r requirements.txt3. Run Juumla - python3 main.py -u https://example.com Docker If you want to run Juumla in a Docker container, follow this commands: container - sudo docker run juumla:latest ">1. Clone the repository - git clone https://github.com/oppsec/juumla.git2. Build the image - sudo docker build -t juumla:latest .3. Run container - sudo docker run juumla:latest Pre-requisites Python 3 installed on your machine. Install the libraries with pip3 install -r requirements.txt Features Fast scan Low RAM and CPU usage Identify Joomla version Config files detection Open-Source To-Do Vulnerability Scanner Improve Joomla detection Config files detection Improve code Contributing A quick guide of how to contribute with the project. 1. Create a fork from Juumla repository2. Download the project with git clone https://github.com/your/juumla.git3. Type cd juumla/4. Make your changes5. Commit and make a git push6. Open a pull request Resources https://skynettools.com/juumla-python-cli-tool-for-joomla-information-hathering/ Warning The developer is not responsible for any malicious use of this tool. Download Juumla
Read more...
___________________________
@hacking_Attack
@Hacking_Video
Juumla is a python tool developed to identify the current Joomla version and scan for readable Joomla config files.Installing / Getting started A quick guide of how to install and use Juumla. 1. Clone the repository - git clone https://github.com/oppsec/juumla.git2. Install the libraries - pip3 install -r requirements.txt3. Run Juumla - python3 main.py -u https://example.com Docker If you want to run Juumla in a Docker container, follow this commands: container - sudo docker run juumla:latest ">1. Clone the repository - git clone https://github.com/oppsec/juumla.git2. Build the image - sudo docker build -t juumla:latest .3. Run container - sudo docker run juumla:latest Pre-requisites Python 3 installed on your machine. Install the libraries with pip3 install -r requirements.txt Features Fast scan Low RAM and CPU usage Identify Joomla version Config files detection Open-Source To-Do Vulnerability Scanner Improve Joomla detection Config files detection Improve code Contributing A quick guide of how to contribute with the project. 1. Create a fork from Juumla repository2. Download the project with git clone https://github.com/your/juumla.git3. Type cd juumla/4. Make your changes5. Commit and make a git push6. Open a pull request Resources https://skynettools.com/juumla-python-cli-tool-for-joomla-information-hathering/ Warning The developer is not responsible for any malicious use of this tool. Download Juumla
Read more...
___________________________
@hacking_Attack
@Hacking_Video
Apple Hall Of Fame for a Small Misconfiguration || Unauth Cache Purging
https://sapt.medium.com/apple-hall-of-fame-for-a-small-misconfiguration-unauth-cache-purging-faf81b19419b?source=rss------bug_bounty-5
___________________________
@hacking_Attack
@Hacking_Video
https://sapt.medium.com/apple-hall-of-fame-for-a-small-misconfiguration-unauth-cache-purging-faf81b19419b?source=rss------bug_bounty-5
___________________________
@hacking_Attack
@Hacking_Video
Medium
Apple Hall Of Fame for a Small Misconfiguration || Unauth Cache Purging
Hello guys👋👋 ,Prajit here from the BUG XS Team , recently I got acknowledgement for reporting a valid issue on Apple Program. So that…
Hello guys👋👋 ,Prajit here from the BUG XS Team , recently I got acknowledgement for reporting a valid issue on Apple Program. So that…Continue reading on Medium » (https://sapt.medium.com/apple-hall-of-fame-for-a-small-misconfiguration-unauth-cache-purging-faf81b19419b?source=rss------bug_bounty-5)
___________________________
@hacking_Attack
@Hacking_Video
___________________________
@hacking_Attack
@Hacking_Video
Medium
Apple Hall Of Fame for a Small Misconfiguration || Unauth Cache Purging
Hello guys👋👋 ,Prajit here from the BUG XS Team , recently I got acknowledgement for reporting a valid issue on Apple Program. So that…
Hacking Articles Tips Tricks Videos Tutorials
Photo
Black Hat Ethical Hacking
Hacking Stories: Jonathan James – The teenager who hacked NASA for fun
https://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Hacking Stories: Jonathan James – The teenager who hacked NASA for funhttps://www.blackhatethicalhacking.com/wp-content/uploads/2020/11/BECOME-A-PATRON-AND-UNLOCK-EXCLUSIVE-VIDEOS-8-1-300x120.png Support our work or become a Patron and find exclusive video content available ONLY on Patreon showing you continuous techniques and methodologies in Offensive Security.
Post Views: 207
Reading Time: 5 Minutes Hacking Alias: c0mradeJonathan James, a prolific young hacker that was hacking NASA at night while being at school in the morning. He went on to be the first juvenile to be sentenced federally to a term of confinement for computer hacking.
Early Life – The start of his hacking journey
Jonathan James was born on December 12, 1983, in a small Village called Pinecrest that is located in Miami-Dade County, Florida.
His father was a computer programmer and his mother was a housewife.
https://www.blackhatethicalhacking.com/wp-content/uploads/2021/07/Pinecrest-1024x682.jpeg
Pinecrest, Miami-Dade County, Florida - source: exploremiamirealestate.com
His interest in computers began at the age of 6 where he would regularly use his father’s computer to play video games.
James’s parents would quickly realize that their son was spending too much time in front of the computer screen and tried to impose restrictions, which eventually James bypassed using his hacking “charisma” from a very young age.
His interests gradually changed with age, from playing games to learning the C language. His curiosity about computers came to light as a surprise to his father when he came home one day to see that his personal computer was converted from windows OS to Linux OS. James installed Linux on his father’s computer from curiosity to test the unfamiliar operating system and understand how it works.
During his teen years, he became obsessed with computers and technology as he was spending most of his free time day and night on his computer. At the age of 13, this led his parents to take stronger measures and took away his computer. He ran away from home refusing to come back until his parents return his computer, insisting that programming and video games weren’t affecting his grades (as he was getting high marks).
https://www.blackhatethicalhacking.com/wp-content/uploads/2021/07/1912c40315544c3ab595c676d79e89e1.jpg
Young Jonathan James - source: medium.com
Later it was found that he hacked into the network of educational institutions in Miami-Dade County and corrected his scores in the reports.
Around that time, James came up with his own hacking alias “c0mrade”, as he spent most of his time communicating with other hackers online and learning more about hacking day by day.
Hacking activity
At the age of 15, James had enough with hacking his educational institutions and set bigger hacking goals. Between June 23, 1999, and October 27, 1999, he committed a series of intrusions into various systems.
His first target was AT&T BellSouth, one of the largest telecommunications companies at the time in the US.
The hacking details are not completely known, but C0mrade hacked into the company’s servers without doing any damage. His main goal was not to profit or stealing information but more about testing his hacking abilities on a bigger target like AT&T Bellsouth.
In June 1999, he was looking for vulnerable servers to connect by bypassing their firewalls.
When he found one in Huntsville, Alabama, he went on and installed malware on it. He ma[...]
___________________________
@hacking_Attack
@Hacking_Video
Hacking Stories: Jonathan James – The teenager who hacked NASA for fun
https://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Hacking Stories: Jonathan James – The teenager who hacked NASA for funhttps://www.blackhatethicalhacking.com/wp-content/uploads/2020/11/BECOME-A-PATRON-AND-UNLOCK-EXCLUSIVE-VIDEOS-8-1-300x120.png Support our work or become a Patron and find exclusive video content available ONLY on Patreon showing you continuous techniques and methodologies in Offensive Security.
Post Views: 207
Reading Time: 5 Minutes Hacking Alias: c0mradeJonathan James, a prolific young hacker that was hacking NASA at night while being at school in the morning. He went on to be the first juvenile to be sentenced federally to a term of confinement for computer hacking.
Early Life – The start of his hacking journey
Jonathan James was born on December 12, 1983, in a small Village called Pinecrest that is located in Miami-Dade County, Florida.
His father was a computer programmer and his mother was a housewife.
https://www.blackhatethicalhacking.com/wp-content/uploads/2021/07/Pinecrest-1024x682.jpeg
Pinecrest, Miami-Dade County, Florida - source: exploremiamirealestate.com
His interest in computers began at the age of 6 where he would regularly use his father’s computer to play video games.
James’s parents would quickly realize that their son was spending too much time in front of the computer screen and tried to impose restrictions, which eventually James bypassed using his hacking “charisma” from a very young age.
His interests gradually changed with age, from playing games to learning the C language. His curiosity about computers came to light as a surprise to his father when he came home one day to see that his personal computer was converted from windows OS to Linux OS. James installed Linux on his father’s computer from curiosity to test the unfamiliar operating system and understand how it works.
During his teen years, he became obsessed with computers and technology as he was spending most of his free time day and night on his computer. At the age of 13, this led his parents to take stronger measures and took away his computer. He ran away from home refusing to come back until his parents return his computer, insisting that programming and video games weren’t affecting his grades (as he was getting high marks).
https://www.blackhatethicalhacking.com/wp-content/uploads/2021/07/1912c40315544c3ab595c676d79e89e1.jpg
Young Jonathan James - source: medium.com
Later it was found that he hacked into the network of educational institutions in Miami-Dade County and corrected his scores in the reports.
Around that time, James came up with his own hacking alias “c0mrade”, as he spent most of his time communicating with other hackers online and learning more about hacking day by day.
Hacking activity
At the age of 15, James had enough with hacking his educational institutions and set bigger hacking goals. Between June 23, 1999, and October 27, 1999, he committed a series of intrusions into various systems.
His first target was AT&T BellSouth, one of the largest telecommunications companies at the time in the US.
The hacking details are not completely known, but C0mrade hacked into the company’s servers without doing any damage. His main goal was not to profit or stealing information but more about testing his hacking abilities on a bigger target like AT&T Bellsouth.
In June 1999, he was looking for vulnerable servers to connect by bypassing their firewalls.
When he found one in Huntsville, Alabama, he went on and installed malware on it. He ma[...]
___________________________
@hacking_Attack
@Hacking_Video
Hacking Articles Tips Tricks Videos Tutorials
Black Hat Ethical Hacking Hacking Stories: Jonathan James – The teenager who hacked NASA for fun https://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Hacking Stories: Jonathan James – The teenager who hacked…
naged to escalate his privileges into the system, and then pivoted to another 13 computers on the compromised network.
The network comprised surprisingly belonged to a unit NASA, the Marshall Space Flight Center, located in Huntsville, Alabama. The unit has a lot of importance for NASA as it is the place where they develop and test rocket engines as well as communication systems for the ISS (International Space Station).
https://www.blackhatethicalhacking.com/wp-content/uploads/2021/07/https___cdn.cnn_.com_cnnnext_dam_assets_200314141254-01-marshall-space-flight-center-2019-1024x576.jpg
Marshall Space Flight Center, located in Huntsville, Alabama - source: nasa.gov
C0mrade gained access to a program’s source code which controlled critical elements of life support of the ISS. The system was designed to maintain the physical environment in the living rooms of the ISS, and It was firstly estimated to worth millions of dollars.
After NASA security experts discovered that their network was compromised, they disconnected the server, alongside the compromised machines for a period of 3 weeks to analyze the intrusion which led to 40 thousand dollars direct damages for NASA.
FBI and further hacking intrusions
FBI was working with NASA as they informed them from as soon as they detect the intrusion and begin tracking down the “dangerous” hacker.
James was still a schoolboy, as he would attend classes in the morning and hacking for fun at night.
At the end of his hacking journey, in September 1999, C0mrade detected a backdoor install on a server in Dulles, Virginia, letting every user on the Internet to connect to it. Without a second thought, he connected to the server and installed a sniffing program to intercept all the network traffic that was going through the server, including login credentials, etc.
The compromised server belonged to DTRA (Defense Threat Reduction Agency), a hugely significant division of the US Department of Defense that was analyzing external threats to the country’s National Security.
James went on and intercept numerous credentials of DTRA users, leading to him getting access to dozens of computers of the Department of Defense. He managed to download thousands of letters from email users working for Pentagon.
https://www.blackhatethicalhacking.com/wp-content/uploads/2021/07/DTRA-hq.jpg
DTRA Headquarters - source: emptywheel.net
That was the first successful intrusion into the internal networks of one of the Pentagon external units.
Arrest and charges
This hack went on to be his last one, the last intrusion didn’t go unnoticed because of the importance of the target. In January 2000, Defense Department agents, along with Pinecrest police they proceeded to order an arrest for James.
On January 26th, agents with bulletproof vests and guns raided his home and arrested him. They seized four PCs, a laptop, and one pocket computer from the house.
That made James the first juvenile to be sentenced federally to a term of confinement for computer hacking. James was actively cooperating with the investigators and explained to them in detail how he was able to hack them.
Sentences and Aftermath
After the news of his arrest, he became famous at his school and also made public comments to the media, accusing the government of not taking security measures on their computer network seriously.
He pointed out that he knew the C computer programming language like the back of his hand, tirelessly studying all day and night in order to be in a position to easily compromise un-secure systems.
During the investigation, it was cleared out that James didn’t run viruses, didn’t deleted files, or change passwords. He did not cause any damage in any of the compromised systems, and being only 16 years old at the time served him well on the day of the announcement of the verdict. If he were an adult, he could face at least 10 years in prison and a hefty fine.
He volun[...]
___________________________
@hacking_Attack
@Hacking_Video
The network comprised surprisingly belonged to a unit NASA, the Marshall Space Flight Center, located in Huntsville, Alabama. The unit has a lot of importance for NASA as it is the place where they develop and test rocket engines as well as communication systems for the ISS (International Space Station).
https://www.blackhatethicalhacking.com/wp-content/uploads/2021/07/https___cdn.cnn_.com_cnnnext_dam_assets_200314141254-01-marshall-space-flight-center-2019-1024x576.jpg
Marshall Space Flight Center, located in Huntsville, Alabama - source: nasa.gov
C0mrade gained access to a program’s source code which controlled critical elements of life support of the ISS. The system was designed to maintain the physical environment in the living rooms of the ISS, and It was firstly estimated to worth millions of dollars.
After NASA security experts discovered that their network was compromised, they disconnected the server, alongside the compromised machines for a period of 3 weeks to analyze the intrusion which led to 40 thousand dollars direct damages for NASA.
FBI and further hacking intrusions
FBI was working with NASA as they informed them from as soon as they detect the intrusion and begin tracking down the “dangerous” hacker.
James was still a schoolboy, as he would attend classes in the morning and hacking for fun at night.
At the end of his hacking journey, in September 1999, C0mrade detected a backdoor install on a server in Dulles, Virginia, letting every user on the Internet to connect to it. Without a second thought, he connected to the server and installed a sniffing program to intercept all the network traffic that was going through the server, including login credentials, etc.
The compromised server belonged to DTRA (Defense Threat Reduction Agency), a hugely significant division of the US Department of Defense that was analyzing external threats to the country’s National Security.
James went on and intercept numerous credentials of DTRA users, leading to him getting access to dozens of computers of the Department of Defense. He managed to download thousands of letters from email users working for Pentagon.
https://www.blackhatethicalhacking.com/wp-content/uploads/2021/07/DTRA-hq.jpg
DTRA Headquarters - source: emptywheel.net
That was the first successful intrusion into the internal networks of one of the Pentagon external units.
Arrest and charges
This hack went on to be his last one, the last intrusion didn’t go unnoticed because of the importance of the target. In January 2000, Defense Department agents, along with Pinecrest police they proceeded to order an arrest for James.
On January 26th, agents with bulletproof vests and guns raided his home and arrested him. They seized four PCs, a laptop, and one pocket computer from the house.
That made James the first juvenile to be sentenced federally to a term of confinement for computer hacking. James was actively cooperating with the investigators and explained to them in detail how he was able to hack them.
Sentences and Aftermath
After the news of his arrest, he became famous at his school and also made public comments to the media, accusing the government of not taking security measures on their computer network seriously.
He pointed out that he knew the C computer programming language like the back of his hand, tirelessly studying all day and night in order to be in a position to easily compromise un-secure systems.
During the investigation, it was cleared out that James didn’t run viruses, didn’t deleted files, or change passwords. He did not cause any damage in any of the compromised systems, and being only 16 years old at the time served him well on the day of the announcement of the verdict. If he were an adult, he could face at least 10 years in prison and a hefty fine.
He volun[...]
___________________________
@hacking_Attack
@Hacking_Video
Hacking Articles Tips Tricks Videos Tutorials
naged to escalate his privileges into the system, and then pivoted to another 13 computers on the compromised network. The network comprised surprisingly belonged to a unit NASA, the Marshall Space Flight Center, located in Huntsville, Alabama. The unit…
tarily pleaded guilty to two incriminated accusations, for hacking NASA and then the US Department of Defense. Adding to that, James’s cooperation with the government officials on the investigation made the court to found him guilty of crimes committed by minors.
James received 6 months of house arrest and a ban on the use of a computer machine for entertainment purposes, but only for studies. The court also made him issue a written apology to NASA and the US Department of Defense for his actions.
Prison time
The court judges show leniency to James by giving him only 6 months of house arrest, but that did not go as planned. He was soon detained by the police on the streets for violating the terms of the house arrest. It was also found later from his blood work that he used some kind of drugs.
The court went on and suspended the old sentence and replaced it with jail time for six months, in a juvenile correctional center in Alabama. That was also the first time in the US that a teenager went to prison for committing a computer-related crime, making the story’s attention bigger all over the media/press.
He told reporters that he was determined to stop hacking after he was caught as it wasn’t worth the hassle and he was just doing it for fun, like playing video games.
James served the full sentence and was released after six months from the juvenile correctional center avoiding the media in order to lead an ordinary life in his parents’ house in Pinecrest.
TJX hack and Secret Service raid in James’s home
Sadly, the ordinary life that James wanted to live did not last long.
In January 2007, the Secret service was on the trail of an enormous cyber theft gang that was led by Albert Gonzalez, who was responsible for the massive credit card breaches at companies like TJX, Boston Market, Dave & Buster’s, DSW OfficeMax, etc. The damage was significant to the customers of the firms and also for the firms themselves as the hackers stole the credit card information of millions of users and used them illegally.
https://www.blackhatethicalhacking.com/wp-content/uploads/2021/07/soup_nazi-2001-defcon1.jpg
Albert Gonzalez - source: media.wired.com
Some of James‘s colleagues and friends were supposedly members of the gang. The Secret Service agents were on track to uncover the gang and contacted Gonzalez associates involved in the cybercrime. Several of them said that they knew James from the hacking forums, which also gave attention to the agents for the case.
The fact that led the investigators to be suspicious toward James was the fact that an unknown hacker who was collaborating with Gonzales had the pseudonym “JJ”. The pseudonym coincided with the initials of James (Jonathan James) and that was enough for the Secret service to issue a warrant to search his house.
In January 2007, secret service agents raided James’, his brother’s, and his girlfriend’s houses to investigate his potential role in the credit card breaches. During the raid on his house, they found a gun and a suicide note from a previous suicide attempt. James was claiming his innocence at the time of the ongoing raids.
As it was found later, the unknown “JJ” was Steven Watts, who often signed on the network with the pseudonym “Jim Jones”.
The agents could not find anything to connect James with the ongoing crimes and the rifle found was also officially registered, thus dropping any warrants.
Unfortunate Death of c0mrade
The events caused James’ severe depression. He was often anxious in a depressed state following the incidents with the Secret service again.
On May 18, 2008, James was found dead in the bathroom of his home with a self-inflicted gunshot wound to the head from the same rifle that the agents found during the raid.
A suicide note was found near him along with his passwords of Paypal, and several other accounts.
The note wrote: “I do not believe in our ‘justice’ system – perhaps my actions today and[...]
___________________________
@hacking_Attack
@Hacking_Video
James received 6 months of house arrest and a ban on the use of a computer machine for entertainment purposes, but only for studies. The court also made him issue a written apology to NASA and the US Department of Defense for his actions.
Prison time
The court judges show leniency to James by giving him only 6 months of house arrest, but that did not go as planned. He was soon detained by the police on the streets for violating the terms of the house arrest. It was also found later from his blood work that he used some kind of drugs.
The court went on and suspended the old sentence and replaced it with jail time for six months, in a juvenile correctional center in Alabama. That was also the first time in the US that a teenager went to prison for committing a computer-related crime, making the story’s attention bigger all over the media/press.
He told reporters that he was determined to stop hacking after he was caught as it wasn’t worth the hassle and he was just doing it for fun, like playing video games.
James served the full sentence and was released after six months from the juvenile correctional center avoiding the media in order to lead an ordinary life in his parents’ house in Pinecrest.
TJX hack and Secret Service raid in James’s home
Sadly, the ordinary life that James wanted to live did not last long.
In January 2007, the Secret service was on the trail of an enormous cyber theft gang that was led by Albert Gonzalez, who was responsible for the massive credit card breaches at companies like TJX, Boston Market, Dave & Buster’s, DSW OfficeMax, etc. The damage was significant to the customers of the firms and also for the firms themselves as the hackers stole the credit card information of millions of users and used them illegally.
https://www.blackhatethicalhacking.com/wp-content/uploads/2021/07/soup_nazi-2001-defcon1.jpg
Albert Gonzalez - source: media.wired.com
Some of James‘s colleagues and friends were supposedly members of the gang. The Secret Service agents were on track to uncover the gang and contacted Gonzalez associates involved in the cybercrime. Several of them said that they knew James from the hacking forums, which also gave attention to the agents for the case.
The fact that led the investigators to be suspicious toward James was the fact that an unknown hacker who was collaborating with Gonzales had the pseudonym “JJ”. The pseudonym coincided with the initials of James (Jonathan James) and that was enough for the Secret service to issue a warrant to search his house.
In January 2007, secret service agents raided James’, his brother’s, and his girlfriend’s houses to investigate his potential role in the credit card breaches. During the raid on his house, they found a gun and a suicide note from a previous suicide attempt. James was claiming his innocence at the time of the ongoing raids.
As it was found later, the unknown “JJ” was Steven Watts, who often signed on the network with the pseudonym “Jim Jones”.
The agents could not find anything to connect James with the ongoing crimes and the rifle found was also officially registered, thus dropping any warrants.
Unfortunate Death of c0mrade
The events caused James’ severe depression. He was often anxious in a depressed state following the incidents with the Secret service again.
On May 18, 2008, James was found dead in the bathroom of his home with a self-inflicted gunshot wound to the head from the same rifle that the agents found during the raid.
A suicide note was found near him along with his passwords of Paypal, and several other accounts.
The note wrote: “I do not believe in our ‘justice’ system – perhaps my actions today and[...]
___________________________
@hacking_Attack
@Hacking_Video
Hacking Articles Tips Tricks Videos Tutorials
tarily pleaded guilty to two incriminated accusations, for hacking NASA and then the US Department of Defense. Adding to that, James’s cooperation with the government officials on the investigation made the court to found him guilty of crimes committed by…
this letter will be a serious signal to the public, but I have lost control of the situation, and this is my only way to fix it. To be honest, I have nothing to do with this whole TJX story. Even though Chris (Scott) and Albert Gonzales are the most dangerous and destructive hackers the feds have ever caught, I am far more seductive [as a victim] to public opinion than these two random idiots. That is life. Remember, it’s not that you win or lose, but that I personally win or lose by being in prison for 20, 10, or even 5 years for a crime that I didn’t commit. This is my way of winning, but at least I’ll die free. “
Last thoughts
https://www.blackhatethicalhacking.com/wp-content/uploads/2021/07/jonathan-james.gif
Jonathan James - source: creocyber.blogspot.com
During the following years, many unverified rumors circulate about the circumstances of his death. Claims like, it was staged, and the real cause of his death was allegedly top-secret information that he managed to get when he hacked NASA and the Pentagon.
The official investigation ruled out any of those claims as pure speculations and ruled that James’ death was a suicide.
A short obituary was published from Miami Herald after James passed away, describing him as an exceptionally intelligent young man, a computer genius that will be missed by his family and friends.
The short life of Jonathan James will remain forever engraved in the hacking community world, not because of the way that James passed, but for his pure hacking genius and his genuine character that was more than enough for this cruel world.
Apparently, his hacking activities did not cause any damages since his goal was not profit but the pure joy of hacking and testing his own limitations. A prolific hacker with bad luck, born in a harsh world.
References:
⦿ Jonathan James – Wikipedia ⦿ Jonathan Joseph James – Hackers, Crackers And Thieves ⦿ AThe life and death story of a hacker who hacked the Pentagon and NASA at the age of 15 ⦿ Youth Sentenced in Government Hacking Case – The New York Times
⦿ Former Teen Hacker’s Suicide Linked to TJX Probe – WIRED ⦿ Boy Who Hacked NASA – Docsity Recent Articles* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/06/Untitled-design-4-90x90.png Hacking Stories: Andrian Lamo – The ‘homeless’ Hacker4 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/06/photo-1468436139062-f60a71c5c892-scaled-90x90.jpg “Worst” MacOS Security Bug Recently Patched by Apple1 month ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/05/wallpaperflare.com_wallpaper-90x90.jpg Jeff Moss, aka Dark Tangent, the person who founded DEF CON and Black Hat2 months ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/Xbox-Underground-90x90.png Hacking Stories: Xbox Underground3 months ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/03/Pentago-hak-90x90.png Hacking Stories: When two young hackers played war games with Pentagon4 months ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/01/picture-788930-90x90.jpg Hacking Stories: Albert Gonzalez & the ‘Get Rich or Die Trying’ Crew who stole 130 million credit-card numbers5 months ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/01/cover-photo-90x90.png SolarWinds Supply Chain Hack – The hack that shone a light on the gaps in the cybersecurity of governments and big companies6 months ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2020/12/1_alk8KxcB-XwJfMK71kQjvw-90x90.jpeg Steganography – How images can hide secret messages in plain sight7 months ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2020/10/pg-6-gary-mckinnon-ap-90x90.jpg Hacking Stories: Gary McKinnon and the “biggest military computer hack of all time”8 months ago
* https://www.blackhatethicalhacking.com/wp-content/uplo[...]
___________________________
@hacking_Attack
@Hacking_Video
Last thoughts
https://www.blackhatethicalhacking.com/wp-content/uploads/2021/07/jonathan-james.gif
Jonathan James - source: creocyber.blogspot.com
During the following years, many unverified rumors circulate about the circumstances of his death. Claims like, it was staged, and the real cause of his death was allegedly top-secret information that he managed to get when he hacked NASA and the Pentagon.
The official investigation ruled out any of those claims as pure speculations and ruled that James’ death was a suicide.
A short obituary was published from Miami Herald after James passed away, describing him as an exceptionally intelligent young man, a computer genius that will be missed by his family and friends.
The short life of Jonathan James will remain forever engraved in the hacking community world, not because of the way that James passed, but for his pure hacking genius and his genuine character that was more than enough for this cruel world.
Apparently, his hacking activities did not cause any damages since his goal was not profit but the pure joy of hacking and testing his own limitations. A prolific hacker with bad luck, born in a harsh world.
References:
⦿ Jonathan James – Wikipedia ⦿ Jonathan Joseph James – Hackers, Crackers And Thieves ⦿ AThe life and death story of a hacker who hacked the Pentagon and NASA at the age of 15 ⦿ Youth Sentenced in Government Hacking Case – The New York Times
⦿ Former Teen Hacker’s Suicide Linked to TJX Probe – WIRED ⦿ Boy Who Hacked NASA – Docsity Recent Articles* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/06/Untitled-design-4-90x90.png Hacking Stories: Andrian Lamo – The ‘homeless’ Hacker4 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/06/photo-1468436139062-f60a71c5c892-scaled-90x90.jpg “Worst” MacOS Security Bug Recently Patched by Apple1 month ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/05/wallpaperflare.com_wallpaper-90x90.jpg Jeff Moss, aka Dark Tangent, the person who founded DEF CON and Black Hat2 months ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/Xbox-Underground-90x90.png Hacking Stories: Xbox Underground3 months ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/03/Pentago-hak-90x90.png Hacking Stories: When two young hackers played war games with Pentagon4 months ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/01/picture-788930-90x90.jpg Hacking Stories: Albert Gonzalez & the ‘Get Rich or Die Trying’ Crew who stole 130 million credit-card numbers5 months ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/01/cover-photo-90x90.png SolarWinds Supply Chain Hack – The hack that shone a light on the gaps in the cybersecurity of governments and big companies6 months ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2020/12/1_alk8KxcB-XwJfMK71kQjvw-90x90.jpeg Steganography – How images can hide secret messages in plain sight7 months ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2020/10/pg-6-gary-mckinnon-ap-90x90.jpg Hacking Stories: Gary McKinnon and the “biggest military computer hack of all time”8 months ago
* https://www.blackhatethicalhacking.com/wp-content/uplo[...]
___________________________
@hacking_Attack
@Hacking_Video
Hacking Articles Tips Tricks Videos Tutorials
this letter will be a serious signal to the public, but I have lost control of the situation, and this is my only way to fix it. To be honest, I have nothing to do with this whole TJX story. Even though Chris (Scott) and Albert Gonzales are the most dangerous…
ads/2020/10/FBOs81602486302-90x90.png The history of Internet and how it became a worldwide “thing”10 months ago
style="display:block"
data-ad-client="ca-pub-6620833063853657"
data-ad-slot="8337846400"
data-ad-format="auto"
data-full-width-responsive="true">
The post Hacking Stories: Jonathan James – The teenager who hacked NASA for fun first appeared on Black Hat Ethical Hacking.
___________________________
@hacking_Attack
@Hacking_Video
style="display:block"
data-ad-client="ca-pub-6620833063853657"
data-ad-slot="8337846400"
data-ad-format="auto"
data-full-width-responsive="true">
The post Hacking Stories: Jonathan James – The teenager who hacked NASA for fun first appeared on Black Hat Ethical Hacking.
___________________________
@hacking_Attack
@Hacking_Video