Twitter algorithm had found the preferring lighter, slimmer and younger faces. A graduate student from Switzerland was awared $3000 by…Continue reading on Medium » (https://medium.com/@rajkumar.rksen/twitter-algorithm-found-something-ae8c052a34eb?source=rss------bug_bounty-5)
___________________________
@hacking_Attack
@Hacking_Video
___________________________
@hacking_Attack
@Hacking_Video
Medium
Twitter algorithm found something?
Twitter algorithm had found the preferring lighter, slimmer and younger faces. A graduate student from Switzerland was awared $3000 by…
hacking: security in practice
Is Hackerone a joke?
There are some elite guys on there that really know there stuff. But something wild I've noticed is that some of the programs like Uber will accept and award a hackers submission, but another hacker who found another issue that is similar but not exactly the same nor duplicate will get rejected. And now to make matters worse, Hackerone does managed hacking for the companies so the Hackers submission is reviewed by HackerOne before being accepted or not and Hackerone staff can say "We don't see any security violation here".
Example, is a 2FA bypass some other Hacker found for the same program. And if I find a 2FA bypass in another process/login for the same company, or even a different company that has that in-scope, the Hackerone staff will reject it all because my signal rate isn't as high as other hackers that also found that same issue for other companies or same company I did. So it is all like a joke lol
submitted by /u/Holierthanhe
[link] [comments]
Is Hackerone a joke?
There are some elite guys on there that really know there stuff. But something wild I've noticed is that some of the programs like Uber will accept and award a hackers submission, but another hacker who found another issue that is similar but not exactly the same nor duplicate will get rejected. And now to make matters worse, Hackerone does managed hacking for the companies so the Hackers submission is reviewed by HackerOne before being accepted or not and Hackerone staff can say "We don't see any security violation here".
Example, is a 2FA bypass some other Hacker found for the same program. And if I find a 2FA bypass in another process/login for the same company, or even a different company that has that in-scope, the Hackerone staff will reject it all because my signal rate isn't as high as other hackers that also found that same issue for other companies or same company I did. So it is all like a joke lol
submitted by /u/Holierthanhe
[link] [comments]
reddit
Is Hackerone a joke?
There are some elite guys on there that really know there stuff. But something wild I've noticed is that some of the programs like Uber will...
hacking: security in practice
How do I flash a rubber ducky?
I can't find any tutorials from later than 2017 for this. All of the old ones include using an adapter from Micro-SD to USB. That didn't come in my shipment though, so I don't know what to do
submitted by /u/LordDerptCat123
[link] [comments]
How do I flash a rubber ducky?
I can't find any tutorials from later than 2017 for this. All of the old ones include using an adapter from Micro-SD to USB. That didn't come in my shipment though, so I don't know what to do
submitted by /u/LordDerptCat123
[link] [comments]
reddit
How do I flash a rubber ducky?
I can't find any tutorials from later than 2017 for this. All of the old ones include using an adapter from Micro-SD to USB. That didn't come in...
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
آموزش هک اندروید چیست؟
بررسی اجمالی
دوره آموزش هک اندروید برای هکر اخلاقی مجاز
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
آموزش هک اندروید چیست؟
بررسی اجمالی
دوره آموزش هک اندروید برای هکر اخلاقی مجاز
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
آموزش هک اندروید چیست؟
بررسی اجمالی دوره آموزش هک اندروید برای هکر اخلاقی مجاز
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
A Comprehensive Guide to Hacking WEP
https://cdn-images-1.medium.com/max/2600/1*gGwS0gJMXXAmw8s2UCNeLw.jpeg
A comprehensive guide to hacking WEP wireless networks plus how to secure them. finding hidden networks and generating packets also…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
A Comprehensive Guide to Hacking WEP
https://cdn-images-1.medium.com/max/2600/1*gGwS0gJMXXAmw8s2UCNeLw.jpeg
A comprehensive guide to hacking WEP wireless networks plus how to secure them. finding hidden networks and generating packets also…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
A Comprehensive Guide to Hacking WEP
A comprehensive guide to hacking WEP wireless networks plus how to secure them. finding hidden networks and generating packets also…
Hats.finance is live with $100k active bounty!
We are excited to create the first Hats bug bounty vault on mainnet to incentivize responsible disclosure for Hats protocol.Continue reading on Medium »
Read more...
We are excited to create the first Hats bug bounty vault on mainnet to incentivize responsible disclosure for Hats protocol.Continue reading on Medium »
Read more...
The Graph Joins Immunefi with the World’s Largest ug bounty in history: $2.5 Million
The Graph Foundation is offering a record-breaking $2.5 million bug bounty to incentivize developers and whitehat hackers to dig up…Continue reading on Immunefi »
Read more...
The Graph Foundation is offering a record-breaking $2.5 million bug bounty to incentivize developers and whitehat hackers to dig up…Continue reading on Immunefi »
Read more...
Dexfolio x Immunifi: $12,000 Bug Bounty
With the largest hack in DEFI history — $600M stolen through Poly Network—every project should be thinking about how to make their funds…Continue reading on Medium »
Read more...
With the largest hack in DEFI history — $600M stolen through Poly Network—every project should be thinking about how to make their funds…Continue reading on Medium »
Read more...
Twitter algorithm found something?
Twitter algorithm had found the preferring lighter, slimmer and younger faces. A graduate student from Switzerland was awared $3000 by…Continue reading on Medium »
Read more...
Twitter algorithm had found the preferring lighter, slimmer and younger faces. A graduate student from Switzerland was awared $3000 by…Continue reading on Medium »
Read more...
Deep Web
Need a job
Where can i sign up to become a military grade trained assassin like agent 47 / james bond? ( a private hitman) If possible, how?
submitted by /u/Exabyte1024
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
Need a job
Where can i sign up to become a military grade trained assassin like agent 47 / james bond? ( a private hitman) If possible, how?
submitted by /u/Exabyte1024
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
Need a job
Where can i sign up to become a military grade trained assassin like agent 47 / james bond? ( a private hitman) If possible, how?
Hacking Articles Tips Tricks Videos Tutorials
Photo
Black Hat Ethical Hacking
Actively Exploited Windows Zero-Day Gets a Patch
https://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Actively Exploited Windows Zero-Day Gets a PatchPost Views: 60
Reading Time: 2 Minutes
Microsoft has patched 51 security vulnerabilities in its scheduled August Patch Tuesday update, including seven critical bugs, two issues that were publicly disclosed but unpatched until now, and one that’s listed as a zero-day that has been exploited in the wild.
Microsoft’s August 2021 Patch Tuesday addressed a smaller set of bugs than usual, including more Print Spooler problems, a zero-day and seven critical vulnerabilities.
Of note, there are 17 elevation-of-privilege (EoP) vulnerabilities, 13 remote code-execution (RCE) issues, eight information-disclosure flaws and two denial-of-service (DoS) bugs.
The update also includes patches for three more Print Spooler bugs, familiar from the PrintNightmare saga.
“Fortunately, it was a lighter month than usual,” said Eric Feldman, senior product marketing manager at Automox, in a Patch Tuesday analysis from the vendor. “This represents a 56 percent reduction in overall vulnerabilities from July, and 33 percent fewer vulnerabilities on average for each month so far this year. We have also seen a similar reduction in critical vulnerabilities this month, with 30 percent less compared to the monthly average.” Windows Critical Security VulnerabilitiesThe seven critical bugs addressed in August are as follows:
* CVE-2021-26424 – Windows TCP/IP RCE Vulnerability
* CVE-2021-26432 – Windows Services for NFS ONCRPC XDR Driver RCE Vulnerability
* CVE-2021-34480 – Scripting Engine Memory Corruption Vulnerability
* CVE-2021-34530 – Windows Graphics Component RCE Vulnerability
* CVE-2021-34534 – Windows MSHTML Platform RCE Vulnerability
* CVE-2021-34535 – Remote Desktop Client RCE Vulnerability
* CVE-2021-36936 – Windows Print Spooler RCE Vulnerability
See Also: Auth Bypass Bug Exploited, Affecting Millions of Routers The bug tracked as CVE-2021-26424 exists in the TCP/IP protocol stack identified in Windows 7 and newer Microsoft operating systems, including servers.
“Despite its CVSS rating of 9.9, this may prove to be a trivial bug, but it’s still fascinating,” said Dustin Childs of Trend Micro’s Zero Day Initiative (ZDI) in his Tuesday analysis. “An attacker on a guest Hyper-V OS could execute code on the host Hyper-V server by sending a specially crafted IPv6 ping. This keeps it out of the wormable category. Still, a successful attack would allow the guest OS to completely take over the Hyper-V host. While not wormable, it’s still cool to see new bugs in new scenarios being found in protocols that have been around for years.”
The next bug, CVE-2021-26432 in Windows Services, is more likely to be exploited given its low complexity status, according to Microsoft’s advisory; it doesn’t require privileges or user interaction to exploit, but Microsoft offered no further details.
“This may fall into the ‘wormable’ category, at least between servers with NFS installed, especially since the open network computing remote procedure call (ONCRPC) consists of an External Data Representation (XDR) runtime built on the Winsock Kernel (WSK) interface,” Childs said. “That certainly sounds like elevated code on a listening network service. Don’t ignore this patch.”
Aleks Haugom, product marketing manager at Automox, added, “Exploitation results in total loss of confidentiality across all devices managed by the same security authority. Furthermore, attackers can utilize it for denial-of-service attacks or to maliciously modify files. So far, no further details have been divulged by Mic[...]
___________________________
@hacking_Attack
@Hacking_Video
Actively Exploited Windows Zero-Day Gets a Patch
https://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Actively Exploited Windows Zero-Day Gets a PatchPost Views: 60
Reading Time: 2 Minutes
Microsoft has patched 51 security vulnerabilities in its scheduled August Patch Tuesday update, including seven critical bugs, two issues that were publicly disclosed but unpatched until now, and one that’s listed as a zero-day that has been exploited in the wild.
Microsoft’s August 2021 Patch Tuesday addressed a smaller set of bugs than usual, including more Print Spooler problems, a zero-day and seven critical vulnerabilities.
Of note, there are 17 elevation-of-privilege (EoP) vulnerabilities, 13 remote code-execution (RCE) issues, eight information-disclosure flaws and two denial-of-service (DoS) bugs.
The update also includes patches for three more Print Spooler bugs, familiar from the PrintNightmare saga.
“Fortunately, it was a lighter month than usual,” said Eric Feldman, senior product marketing manager at Automox, in a Patch Tuesday analysis from the vendor. “This represents a 56 percent reduction in overall vulnerabilities from July, and 33 percent fewer vulnerabilities on average for each month so far this year. We have also seen a similar reduction in critical vulnerabilities this month, with 30 percent less compared to the monthly average.” Windows Critical Security VulnerabilitiesThe seven critical bugs addressed in August are as follows:
* CVE-2021-26424 – Windows TCP/IP RCE Vulnerability
* CVE-2021-26432 – Windows Services for NFS ONCRPC XDR Driver RCE Vulnerability
* CVE-2021-34480 – Scripting Engine Memory Corruption Vulnerability
* CVE-2021-34530 – Windows Graphics Component RCE Vulnerability
* CVE-2021-34534 – Windows MSHTML Platform RCE Vulnerability
* CVE-2021-34535 – Remote Desktop Client RCE Vulnerability
* CVE-2021-36936 – Windows Print Spooler RCE Vulnerability
See Also: Auth Bypass Bug Exploited, Affecting Millions of Routers The bug tracked as CVE-2021-26424 exists in the TCP/IP protocol stack identified in Windows 7 and newer Microsoft operating systems, including servers.
“Despite its CVSS rating of 9.9, this may prove to be a trivial bug, but it’s still fascinating,” said Dustin Childs of Trend Micro’s Zero Day Initiative (ZDI) in his Tuesday analysis. “An attacker on a guest Hyper-V OS could execute code on the host Hyper-V server by sending a specially crafted IPv6 ping. This keeps it out of the wormable category. Still, a successful attack would allow the guest OS to completely take over the Hyper-V host. While not wormable, it’s still cool to see new bugs in new scenarios being found in protocols that have been around for years.”
The next bug, CVE-2021-26432 in Windows Services, is more likely to be exploited given its low complexity status, according to Microsoft’s advisory; it doesn’t require privileges or user interaction to exploit, but Microsoft offered no further details.
“This may fall into the ‘wormable’ category, at least between servers with NFS installed, especially since the open network computing remote procedure call (ONCRPC) consists of an External Data Representation (XDR) runtime built on the Winsock Kernel (WSK) interface,” Childs said. “That certainly sounds like elevated code on a listening network service. Don’t ignore this patch.”
Aleks Haugom, product marketing manager at Automox, added, “Exploitation results in total loss of confidentiality across all devices managed by the same security authority. Furthermore, attackers can utilize it for denial-of-service attacks or to maliciously modify files. So far, no further details have been divulged by Mic[...]
___________________________
@hacking_Attack
@Hacking_Video
Hacking Articles Tips Tricks Videos Tutorials
Black Hat Ethical Hacking Actively Exploited Windows Zero-Day Gets a Patch https://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Actively Exploited Windows Zero-Day Gets a PatchPost Views: 60 Reading Time:…
rosoft or the security researcher (Liubenjin from Codesafe Team of Legendsec at Qi’anxin Group) that discovered this vulnerability. Given the broad potential impact, its label ‘Exploitation More Likely’ and apparent secrecy, patching should be completed ASAP.”
Meanwhile, the memory-corruption bug (CVE-2021-34480) arises from how the scripting engine handles objects in memory, and it also allows RCE. Using a web-based attack or a malicious file, such as a malicious landing page or phishing email, attackers can use this vulnerability to take control of an affected system, install programs, view or change data, or create new user accounts with full user rights.
“CVE-2021-34480 should also be a priority,” Kevin Breen, director of cyber-threat research at Immersive Labs, told Threatpost. “It is a low score in terms of CVSS, coming in at 6.8, but has been marked by Microsoft as ‘Exploitation More Likely’ because it is the type of attack commonly used to increase the success rate of spear phishing attacks to gain network access. Simple, but effective.”
See Also: Offensive Security Tool: Mimikatz The Windows Graphic Component bug (CVE-2021-34530) allows attackers to remotely execute malicious code in the context of the current user, according to Microsoft – if they can social-engineer a target into opening a specially crafted file.
Another bug exists in the Windows MSHTML platform, also known as Trident (CVE-2021-34534). Trident is the rendering engine (mshtml.dll) used by Internet Explorer. The bug affects many Windows 10 versions (1607, 1809,1909, 2004, 20H2, 21H1) as well as Windows Server 2016 and 2019.
But while it potentially affects a large number of users, exploitation is not trivial.
“To exploit, a threat actor would need to pull off a highly complex attack with user interaction – still entirely possible with the sophisticated attackers of today,” said Peter Pflaster, technical product marketing manager at Automox.
The bug tracked as CVE-2021-34535 impacts the Microsoft Remote Desktop Client, Microsoft’s nearly ubiquitous utility for connecting to remote PCs.
“With today’s highly dispersed workforce, CVE-2021-34535, an RCE vulnerability in Remote Desktop Clients, should be a priority patch,” said Breen. “Attackers increasingly use RDP access as the tip of the spear to gain network access, often combining it with privilege escalation to move laterally. These can be powerful as, depending on the method, it may allow the attacker to authenticate in the network in the same way a user would, making detection difficult.”
It’s not as dangerous of a bug as BlueKeep, according to Childs, which also affected RDP.
“Before you start having flashbacks to BlueKeep, this bug affects the RDP client and not the RDP server,” he said. “However, the CVSS 9.9 bug is nothing to ignore. An attacker can take over a system if they can convince an affected RDP client to connect to an RDP server they control. On Hyper-V servers, a malicious program running in a guest VM could trigger guest-to-host RCE by exploiting this vulnerability in the Hyper-V Viewer. This is the more likely scenario and the reason you should test and deploy this patch quickly.” See Also: Hacking Stories: Andrian Lamo – The ‘homeless’ HackerWindows Print Spooler Bugs – AgainThe final critical bug is CVE-2021-36936, a Windows Print Spooler RCE bug that’s listed as publicly known.
Print Spooler made headlines last month, when Microsoft patched what it thought was a minor elevation-of-privilege vulnerability in the service (CVE-2021-1675). But the listing was updated later in the week, after researchers from Tencent and NSFOCUS TIANJI Lab figured out it could be used for RCE – requiring a new patch.
It also disclosed a second bug, similar to PrintNightmare (CVE-2021-34527); and a third, an EoP issue (CVE-2021-34481).
“Another month, another remote code-execution bug in the Print Spooler,” said ZDI’s Childs. [...]
___________________________
@hacking_Attack
@Hacking_Video
Meanwhile, the memory-corruption bug (CVE-2021-34480) arises from how the scripting engine handles objects in memory, and it also allows RCE. Using a web-based attack or a malicious file, such as a malicious landing page or phishing email, attackers can use this vulnerability to take control of an affected system, install programs, view or change data, or create new user accounts with full user rights.
“CVE-2021-34480 should also be a priority,” Kevin Breen, director of cyber-threat research at Immersive Labs, told Threatpost. “It is a low score in terms of CVSS, coming in at 6.8, but has been marked by Microsoft as ‘Exploitation More Likely’ because it is the type of attack commonly used to increase the success rate of spear phishing attacks to gain network access. Simple, but effective.”
See Also: Offensive Security Tool: Mimikatz The Windows Graphic Component bug (CVE-2021-34530) allows attackers to remotely execute malicious code in the context of the current user, according to Microsoft – if they can social-engineer a target into opening a specially crafted file.
Another bug exists in the Windows MSHTML platform, also known as Trident (CVE-2021-34534). Trident is the rendering engine (mshtml.dll) used by Internet Explorer. The bug affects many Windows 10 versions (1607, 1809,1909, 2004, 20H2, 21H1) as well as Windows Server 2016 and 2019.
But while it potentially affects a large number of users, exploitation is not trivial.
“To exploit, a threat actor would need to pull off a highly complex attack with user interaction – still entirely possible with the sophisticated attackers of today,” said Peter Pflaster, technical product marketing manager at Automox.
The bug tracked as CVE-2021-34535 impacts the Microsoft Remote Desktop Client, Microsoft’s nearly ubiquitous utility for connecting to remote PCs.
“With today’s highly dispersed workforce, CVE-2021-34535, an RCE vulnerability in Remote Desktop Clients, should be a priority patch,” said Breen. “Attackers increasingly use RDP access as the tip of the spear to gain network access, often combining it with privilege escalation to move laterally. These can be powerful as, depending on the method, it may allow the attacker to authenticate in the network in the same way a user would, making detection difficult.”
It’s not as dangerous of a bug as BlueKeep, according to Childs, which also affected RDP.
“Before you start having flashbacks to BlueKeep, this bug affects the RDP client and not the RDP server,” he said. “However, the CVSS 9.9 bug is nothing to ignore. An attacker can take over a system if they can convince an affected RDP client to connect to an RDP server they control. On Hyper-V servers, a malicious program running in a guest VM could trigger guest-to-host RCE by exploiting this vulnerability in the Hyper-V Viewer. This is the more likely scenario and the reason you should test and deploy this patch quickly.” See Also: Hacking Stories: Andrian Lamo – The ‘homeless’ HackerWindows Print Spooler Bugs – AgainThe final critical bug is CVE-2021-36936, a Windows Print Spooler RCE bug that’s listed as publicly known.
Print Spooler made headlines last month, when Microsoft patched what it thought was a minor elevation-of-privilege vulnerability in the service (CVE-2021-1675). But the listing was updated later in the week, after researchers from Tencent and NSFOCUS TIANJI Lab figured out it could be used for RCE – requiring a new patch.
It also disclosed a second bug, similar to PrintNightmare (CVE-2021-34527); and a third, an EoP issue (CVE-2021-34481).
“Another month, another remote code-execution bug in the Print Spooler,” said ZDI’s Childs. [...]
___________________________
@hacking_Attack
@Hacking_Video
Hacking Articles Tips Tricks Videos Tutorials
rosoft or the security researcher (Liubenjin from Codesafe Team of Legendsec at Qi’anxin Group) that discovered this vulnerability. Given the broad potential impact, its label ‘Exploitation More Likely’ and apparent secrecy, patching should be completed ASAP.”…
“This bug is listed as publicly known, but it’s not clear if this bug is a variant of PrintNightmare or a unique vulnerability all on its own. There are quite a few print-spooler bugs to keep track of. Either way, attackers can use this to execute code on affected systems. Microsoft does state low privileges are required, so that should put this in the non-wormable category, but you should still prioritize testing and deployment of this critical-rated bug.”
The critical vulnerability is just one of three Print Spooler issues in the August Patch Tuesday release.
“The specter of the PrintNightmare continues to haunt this patch Tuesday with three more print spooler vulnerabilities, CVE-2021-36947, CVE-2021-36936 and CVE-2021-34481,” said Breen. “All three are listed as RCE over the network, requiring a low level of access, similar to PrintNightmare. Microsoft has marked these as ‘Exploitation More Likely’ which, if the previous speed of POC code being published is anything to go by, is certainly true.” RCE Zero-Day in Windows Update Medic ServiceThe actively exploited bug is tracked as CVE-2021-36948 and is rated as important; it could pave the way for RCE via the Windows Update Medic Service in Windows 10 and Server 2019 and newer operating systems.
“Update Medic is a new service that allows users to repair Windows Update components from a damaged state such that the device can continue to receive updates,” Automox’ Jay Goodman explained. “The exploit is both low complexity and can be exploited without user interaction, making this an easy vulnerability to include in an adversary’s toolbox.”
Immersive’s Breen added, “CVE-2021-36948 is a privilege-escalation vulnerability – the cornerstone of modern intrusions as they allow attackers the level of access to do things like hide their tracks and create user accounts. In the case of ransomware attacks, they have also been used to ensure maximum damage.”
Though the bug is being reported as being exploited in the wild by Microsoft, activity appears to remain limited or targeted: “We have seen no evidence of it at Kenna Security at this time,” Jerry Gamblin, director of security research at Kenna Security (now part of Cisco) told Threatpost. Publicly Known Windows LSA Spoofing BugThe second publicly known bug (after the Print Spooler issue covered earlier) is tracked as CVE-2021-36942, and it’s an important-rated Windows LSA (Local Security Authority) spoofing vulnerability.
“It fixes a flaw that could be used to steal NTLM hashes from a domain controller or other vulnerable host,” Immersive’s Breen said. “These types of attacks are well known for lateral movement and privilege escalation, as has been demonstrated recently by a new exploit called PetitPotam. It is a post-intrusion exploit – further down the attack chain – but still a useful tool for attackers.”
Childs offered a bit of context around the bug.
“Microsoft released this patch to further protect against NTLM relay attacks by issuing this update to block the LSARPC interface,” he said. “This will impact some systems, notably Windows Server 2008 SP2, that use the EFS API OpenEncryptedFileRawA function. You should apply this to your Domain Controllers first and follow the additional guidance in ADV210003 and KB5005413. This has been an ongoing issue since 2009, and, likely, this isn’t the last we’ll hear of this persistent issue.”
Microsoft’s next Patch Tuesday will fall on September 14.
Source: threatpost.com (Click Link)Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/botnet-90x90.jpg Auth Bypass Bug Exploited, Affecting Millions of Routers1 day ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/cisco-patch-90x90.png Critical Cisco Bug in VPN Routers Allows Remote Takeover2 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/delete-telegram-message-e1628177080885[...]
___________________________
@hacking_Attack
@Hacking_Video
The critical vulnerability is just one of three Print Spooler issues in the August Patch Tuesday release.
“The specter of the PrintNightmare continues to haunt this patch Tuesday with three more print spooler vulnerabilities, CVE-2021-36947, CVE-2021-36936 and CVE-2021-34481,” said Breen. “All three are listed as RCE over the network, requiring a low level of access, similar to PrintNightmare. Microsoft has marked these as ‘Exploitation More Likely’ which, if the previous speed of POC code being published is anything to go by, is certainly true.” RCE Zero-Day in Windows Update Medic ServiceThe actively exploited bug is tracked as CVE-2021-36948 and is rated as important; it could pave the way for RCE via the Windows Update Medic Service in Windows 10 and Server 2019 and newer operating systems.
“Update Medic is a new service that allows users to repair Windows Update components from a damaged state such that the device can continue to receive updates,” Automox’ Jay Goodman explained. “The exploit is both low complexity and can be exploited without user interaction, making this an easy vulnerability to include in an adversary’s toolbox.”
Immersive’s Breen added, “CVE-2021-36948 is a privilege-escalation vulnerability – the cornerstone of modern intrusions as they allow attackers the level of access to do things like hide their tracks and create user accounts. In the case of ransomware attacks, they have also been used to ensure maximum damage.”
Though the bug is being reported as being exploited in the wild by Microsoft, activity appears to remain limited or targeted: “We have seen no evidence of it at Kenna Security at this time,” Jerry Gamblin, director of security research at Kenna Security (now part of Cisco) told Threatpost. Publicly Known Windows LSA Spoofing BugThe second publicly known bug (after the Print Spooler issue covered earlier) is tracked as CVE-2021-36942, and it’s an important-rated Windows LSA (Local Security Authority) spoofing vulnerability.
“It fixes a flaw that could be used to steal NTLM hashes from a domain controller or other vulnerable host,” Immersive’s Breen said. “These types of attacks are well known for lateral movement and privilege escalation, as has been demonstrated recently by a new exploit called PetitPotam. It is a post-intrusion exploit – further down the attack chain – but still a useful tool for attackers.”
Childs offered a bit of context around the bug.
“Microsoft released this patch to further protect against NTLM relay attacks by issuing this update to block the LSARPC interface,” he said. “This will impact some systems, notably Windows Server 2008 SP2, that use the EFS API OpenEncryptedFileRawA function. You should apply this to your Domain Controllers first and follow the additional guidance in ADV210003 and KB5005413. This has been an ongoing issue since 2009, and, likely, this isn’t the last we’ll hear of this persistent issue.”
Microsoft’s next Patch Tuesday will fall on September 14.
Source: threatpost.com (Click Link)Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/botnet-90x90.jpg Auth Bypass Bug Exploited, Affecting Millions of Routers1 day ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/cisco-patch-90x90.png Critical Cisco Bug in VPN Routers Allows Remote Takeover2 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/delete-telegram-message-e1628177080885[...]
___________________________
@hacking_Attack
@Hacking_Video
Hacking Articles Tips Tricks Videos Tutorials
“This bug is listed as publicly known, but it’s not clear if this bug is a variant of PrintNightmare or a unique vulnerability all on its own. There are quite a few print-spooler bugs to keep track of. Either way, attackers can use this to execute code on…
-90x90.jpg MacOS Flaw in Telegram Retrieves Deleted Messages5 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/spam-call-90x90.jpg Black Hat: ‘I’m Calling About Your Car Warranty’, aka PII Hijinx6 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Google-Chrome-Browser-Management-90x90.png Bugs in Chrome’s JavaScript engine can lead to powerful exploits. This project aims to stop them1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/chinese-flag-keyboard-internet-istock-90x90.jpg DeadRinger: Chinese APTs strike major telecommunications companies1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/public-wifi-90x90.jpg NSA Warns Public Networks are Hacker Hotbeds1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/07/iran-thumb-90x90.jpg Hackers used never-before-seen wiper in recent attack on Iranian train system2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/07/PunkSpider-90x90.png Reboot of PunkSpider Tool at DEF CON Stirs Debate2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/07/apple-mac-security-90x90.jpg Apple Patches Actively Exploited Zero-Day in iOS, MacOS2 weeks ago
style="display:block; text-align:center;"
data-ad-layout="in-article"
data-ad-format="fluid"
data-ad-client="ca-pub-6620833063853657"
data-ad-slot="4517761481">
The post Actively Exploited Windows Zero-Day Gets a Patch first appeared on Black Hat Ethical Hacking.
___________________________
@hacking_Attack
@Hacking_Video
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/spam-call-90x90.jpg Black Hat: ‘I’m Calling About Your Car Warranty’, aka PII Hijinx6 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Google-Chrome-Browser-Management-90x90.png Bugs in Chrome’s JavaScript engine can lead to powerful exploits. This project aims to stop them1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/chinese-flag-keyboard-internet-istock-90x90.jpg DeadRinger: Chinese APTs strike major telecommunications companies1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/public-wifi-90x90.jpg NSA Warns Public Networks are Hacker Hotbeds1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/07/iran-thumb-90x90.jpg Hackers used never-before-seen wiper in recent attack on Iranian train system2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/07/PunkSpider-90x90.png Reboot of PunkSpider Tool at DEF CON Stirs Debate2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/07/apple-mac-security-90x90.jpg Apple Patches Actively Exploited Zero-Day in iOS, MacOS2 weeks ago
style="display:block; text-align:center;"
data-ad-layout="in-article"
data-ad-format="fluid"
data-ad-client="ca-pub-6620833063853657"
data-ad-slot="4517761481">
The post Actively Exploited Windows Zero-Day Gets a Patch first appeared on Black Hat Ethical Hacking.
___________________________
@hacking_Attack
@Hacking_Video
