Nimbus Bug Bounty Program #2

We are happy to announce the #2 edition of our Bug Bounty Program on Hacken Platform.Continue reading on Medium »
Read more...

DNSTake - A Fast Tool To Check Missing Hosted DNS Zones That Can Lead To Subdomain Takeover

A fast tool to check missing hosted DNS zones that can lead to subdomain takeover. What is a DNS takeover? DNS takeover vulnerabilities occur when a subdomain (subdomain.example.com) or domain has its authoritative nameserver set to a provider (e.g. AWS Route 53, Akamai, Microsoft Azure, etc.) but the hosted zone has been removed or deleted. Consequently, when making a request for DNS records the server responds with a SERVFAIL error. This allo ws an attacker to create the missing hosted zone on the service that was being used and thus control all DNS records for that (sub)domain.¹Installation from Binary The ez way! You can download a pre-built binary from releases page, just unpack and run! from Source NOTE: Go 1.16+ compiler should be installed & configured! Very quick & clean! ▶ go install github.com/pwnesia/dnstake/cmd/dnstake@latest — or Manual building executable from source code: ▶ git clone https://github.com/pwnesia/dnstake▶ cd dnstake/cmd/dnstake▶ go build .▶ (sudo) mv dnstake /usr/local/bin Usage $ dnstake -h ·▄▄▄▄ ▐ ▄ .▄▄ ·▄▄▄▄▄ ▄▄▄· ▄ •▄ ▄▄▄ . ██▪ ██ •█▌▐█▐█ ▀.•██ ▐█ ▀█ █▌▄▌▪▀▄.▀· ▐█· ▐█▌▐█▐▐▌▄▀▀▀█▄▐█.▪▄█▀▀█ ▐▀▀▄·▐▀▀▪▄ ██. ██ ██▐█▌▐█▄▪▐█▐█▌·▐█ ▪▐▌▐█.█▌▐█▄▄▌ ▀▀▀▀▀• ▀▀ ; █▪ ▀▀▀▀ ▀▀▀ ▀ ▀ ·▀ ▀ ▀▀▀ (c) pwnesia.org — v0.0.1Usage: stdin | dnstake options dnstake -t HOSTNAME optionsOptions: -t, --target Define single target host/list to check -c, --concurrent Set the concurrency level (default: 25) -s, --silent Suppress errors and/or clean output -h, --help Display its helpExamples: dnstake -t (sub.)domain.tld dnstake -t hosts.txt cat hosts.txt | dnstake subfinder -silent -d domain.tld | dnstake Workflow DNSTake use RetryableDNS client library to send DNS queries. Initial engagement using Google & Cloudflare DNS as the resolver, then check & fingerprinting the nameservers of target host — if there is one, it will resolving the target host again with its nameserver IPs as resolver, if it gets weird DNS status response (other than NOERROR/NXDOMAIN), then it's vulnerable to be taken over. More or less like this in form of a diagram. Currently supported DNS providers, see here. References 1 https://github.com/indianajson/can-i-take-over-dns#what-is-a-dns-takeover https://0xpatrik.com/subdomain-takeover-ns/ License DNSTake is distributed under MIT. See LICENSE. Download Dnstake
Read more...

___________________________
@hacking_Attack
@Hacking_Video

DNSTake - A Fast Tool To Check Missing Hosted DNS Zones That Can Lead To Subdomain Takeover
http://www.kitploit.com/2021/09/dnstake-fast-tool-to-check-missing.html

___________________________
@hacking_Attack
@Hacking_Video

A fast tool to check missing hosted DNS zones that can lead to subdomain takeover.
What is a DNS takeover?
DNS takeover vulnerabilities (https://www.kitploit.com/search/label/vulnerabilities) occur when a subdomain (subdomain.example.com) or domain has its authoritative nameserver set to a provider (e.g. AWS Route 53, Akamai, Microsoft Azure, etc.) but the hosted zone has been removed or deleted. Consequently, when making a request for DNS records (https://www.diggui.com/#type=A&hostname=github.technology&nameserver=public&public=8.8.8.8&specify=&clientsubnet=&tcp=def&transport=def&mapped=def&nssearch=def&trace=def&recurse=def&edns=def&dnssec=def&subnet=def&cookie=def&all=def&cmd=def&question=def&answer=def&authority=def&additional=def&comments=def&stats=def&multiline=def&short=def&colorize=on) the server responds with a SERVFAIL error. This allo ws an attacker to create the missing hosted zone on the service that was being used and thus control all DNS records for that (sub)domain.¹
Installation

from Binary
The ez way! You can download a pre-built binary from releases page (https://github.com/pwnesia/dnstake/releases), just unpack and run!
from Source
NOTE: Go 1.16+ compiler (https://golang.org/doc/install) should be installed & configured! Very quick & clean! ▶ go install github.com/pwnesia/dnstake/cmd/dnstake@latest
— or
Manual building executable from source code: ▶ git clone https://github.com/pwnesia/dnstake
▶ cd dnstake/cmd/dnstake
▶ go build .
▶ (sudo) mv dnstake /usr/local/bin
Usage
Define single target host/list to check -c, --concurrent Set the concurrency level (default: 25) -s, --silent Suppress errors and/or clean output -h, --help Display its help Examples: dnstake -t (sub.)domain.tld dnstake -t hosts.txt cat hosts.txt | dnstake subfinder -silent -d domain.tld | dnstake ">$ dnstake -h

·▄▄▄▄ ▐ ▄ .▄▄ ·▄▄▄▄▄ ▄▄▄· ▄ •▄ ▄▄▄ .
██▪ ██ •█▌▐█▐█ ▀.•██ ▐█ ▀█ █▌▄▌▪▀▄.▀·
▐█· ▐█▌▐█▐▐▌▄▀▀▀█▄▐█.▪▄█▀▀█ ▐▀▀▄·▐▀▀▪▄
██. ██ ██▐█▌▐█▄▪▐█▐█▌·▐█ ▪▐▌▐█.█▌▐█▄▄▌
▀▀▀▀▀• ▀▀ ; █▪ ▀▀▀▀ ▀▀▀ ▀ ▀ ·▀ ▀ ▀▀▀

(c) pwnesia.org — v0.0.1

Usage:
[stdin] | dnstake [options]
dnstake -t HOSTNAME [options]

Options:
-t, --target Define single target host/list to check
-c, --concurrent Set the concurrency level (default: 25)
-s, --silent Suppress errors and/or clean output
-h, --help Display its help

Examples:
dnstake -t (sub.)domain.tld
dnstake -t hosts.txt
cat hosts.txt | dnstake
subfinder -silent -d domain.tld | dnstake
Workflow
DNSTake use RetryableDNS client library (https://github.com/projectdiscovery/retryabledns) to send DNS queries. Initial engagement using Google & Cloudflare DNS as the resolver, then check & fingerprinting (https://www.kitploit.com/search/label/Fingerprinting) the nameservers of target host — if there is one, it will resolving the target host again with its nameserver IPs as resolver, if it gets weird DNS status response (other than NOERROR/NXDOMAIN), then it's vulnerable (https://www.kitploit.com/search/label/Vulnerable) to be taken over. More or less like this (https://0xpatrik.com/content/images/2018/08/ns_automation-2.png) in form of a diagram. Currently supported DNS providers, see here (https://github.com/indianajson/can-i-take-over-dns/blob/97104102c8ce911fd978521c703f26e1c547c613/README.md#dns-providers).
References
[1] https://github.com/indianajson/can-i-take-over-dns#what-is-a-dns-takeover https://0xpatrik.com/subdomain-takeover-ns/
License
DNSTake is distributed (https://www.kitploit.com/search/label/Distributed) under MIT. See LICENSE.

Download Dnstake (https://github.com/pwnesia/dnstake)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Malware samples found trying to hack Windows from its Linux subsystem

https://external-preview.redd.it/KpKCWOgVTzbKzZmTi5D4DprSVLiys6vJX7_l_JLs2cw.jpg?width=640&crop=smart&auto=webp&s=449174a10ccee5a7ebd5cb19cfa2624955ffed67 submitted by /u/n0SiS
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Can someone tell me what is this? Someone sent me this and i cant tell if this is a hack or not

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
17 Free Cybersecurity Tools You Should Know About

https://external-preview.redd.it/il470lEYPVPTYlOMq5dvLrU_h-D7CVPfDWabkOB08N0.jpg?width=640&crop=smart&auto=webp&s=1787bed3c4f31a8b9a576eb8ead3a5dd7da61481 submitted by /u/Anastasia_IT
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Thinking about creating a Twitch channel about ethical hacking

Hey guys (and girls),

​

I was thinking about creating a Twitch channel with a primary focus on ethical hacking and everything that comes with it (doing CTF challenges live, answering questions about security in general etc ...)

​

I work as a professional pentester and trainer in infosec so that could be an interesting thing to do.

​

What do you think about that ? Is this something you would be interested in ?

If yes, do you maybe have a some tips about how to get started ?

​

Thanks

submitted by /u/Peyphour
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Can someone here set something up to make my home internet almost unusably terrible

Hi, Is there any service that will block one website at all times with no custom error message(Blackboard.com) and randomly block other websites to give the illusion of bad internet? also remotely restart my router to disable the internet for a few minutes at a time? My parents are consistently berating me about my grades(which are on blackboard, which the school has had to specifically tell them that's it's a felony to access them without my consent) and it nearly drove me to commit suicide as legal collateral against them a month ago. I can't take the pain anymore and we got a new router that is super locked down(SerComm SAX2V1R) so I can't use a remote desktop to constantly restart my home router while I'm at university anymore. If they continue to do this I am going through with suicide as it's the last straw in my heart that I can't deal with. I will provide my public ip to anyone who wants to take a crack at DoSing me

submitted by /u/UAvi8tor
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Bounty Hacker Tryhackme Walkthrough


Hello guys and welcome back , Ayush this side, today we’ll talk about one of the tryhackme room “Bounty Hacker”, it’s a quite easy room in…

Continue reading on InfoSec Write-ups »

KitPloit - PenTest Tools!DNSTake - A Fast Tool To Check Missing Hosted DNS Zones That Can Lead To Subdomain Takeover





A fast tool to check missing hosted DNS zones that can lead to subdomain takeover.

What is a DNS takeover?

DNS takeover vulnerabilities occur when a subdomain (subdomain.example.com) or domain has its authoritative nameserver set to a provider (e.g. AWS Route 53, Akamai, Microsoft Azure, etc.) but the hosted zone has been removed or deleted. Consequently, when making a request for DNS records the server responds with a SERVFAILerror. This allo ws an attacker to create the missing hosted zone on the service that was being used and thus control all DNS records for that (sub)domain.¹



Installation

from Binary

The ez way! You can download a pre-built binary from releases page, just unpack and run!

from Source
NOTE:Go 1.16+ compiler should be installed & configured!
Very quick & clean!

▶ go install github.com/pwnesia/dnstake/cmd/dnstake@latest

— or

Manual building executable from source code:

▶ git clone https://github.com/pwnesia/dnstake
▶ cd dnstake/cmd/dnstake
▶ go build .
▶ (sudo) mv dnstake /usr/local/bin

Usage

$ dnstake -h

·▄▄▄▄ ▐ ▄ .▄▄ ·▄▄▄▄▄ ▄▄▄· ▄ •▄ ▄▄▄ .
██▪ ██ •█▌▐█▐█ ▀.•██ ▐█ ▀█ █▌▄▌▪▀▄.▀·
▐█· ▐█▌▐█▐▐▌▄▀▀▀█▄▐█.▪▄█▀▀█ ▐▀▀▄·▐▀▀▪▄
██. ██ ██▐█▌▐█▄▪▐█▐█▌·▐█ ▪▐▌▐█.█▌▐█▄▄▌
▀▀▀▀▀• ▀&#9600 ; █▪ ▀▀▀▀ ▀▀▀ ▀ ▀ ·▀ ▀ ▀▀▀

(c) pwnesia.org — v0.0.1

Usage:
[stdin] | dnstake [options]
dnstake -t HOSTNAME [options]

Options:
-t, --target <HOST/FILE> Define single target host/list to check
-c, --concurrent <i> Set the concurrency level (default: 25)
-s, --silent Suppress errors and/or clean output
-h, --help Display its help

Examples:
dnstake -t (sub.)domain.tld
dnstake -t hosts.txt
cat hosts.txt | dnstake
subfinder -silent -d domain.tld | dnstake

Workflow

DNSTake use RetryableDNS client library to send DNS queries. Initial engagement using Google & Cloudflare DNS as the resolver, then check & fingerprinting the nameservers of target host — if there is one, it will resolving the target host again with its nameserver IPs as resolver, if it gets weird DNS status response (other than NOERROR/NXDOMAIN), then it's vulnerable to be taken over. More or less like this in form of a diagram.

Currently supported DNS providers, see here.

References

* [1] https://github.com/indianajson/can-i-take-over-dns#what-is-a-dns-takeover
* https://0xpatrik.com/subdomain-takeover-ns/

License

DNSTake is distributed under MIT. See LICENSE.



Download Dnstake

Black Hat Ethical Hacking
Kali Linux 2021.3 released: Kali NetHunter on a smartwatch, wider OpenSSL compatibility, new tools

https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Kali Linux 2021.3 released: Kali NetHunter on a smartwatch, wider OpenSSL compatibility, new toolsPost Views: 697
Reading Time: 1 Minute Kali Linux 2021.3 Release (OpenSSL, Kali-Tools, Kali Live VM Support, Kali NetHunter Smartwatch)A summary of the changes since the 2021.2 release from June are:

* OpenSSL – Wide compatibility by default – Keep reading for what that means
* New Kali-Tools site – Following the footsteps of Kali-Docs, Kali-Tools has had a complete refresh
* Better VM support in the Live image session – Copy & paste and drag & drop from your machine into a Kali VM by default
* New tools – From adversary emulation, to subdomain takeover to Wi-Fi attacks
* Kali NetHunter smartwatch – first of its kind, for TicHunter Pro
* KDE 5.21 – Plasma desktop received a version bump
See Also: Complete Offensive Security and Ethical Hacking Course Kali Linux 2021.3 changesThe changes in this version include: OpenSSL has been configured for wider compatibility, allowing the use of legacy protocols, meaning that Kali can now talk to older, legacy systems that use them.

The option allows users to search for additional attack surfaces. As the developers noted, “If your target has these End of Life services running, having then forgotten about them, what else could this undercover?”
See Also: Windows MSHTML zero-day defenses bypassed as new info emerges The use of Kali (Live image) in virtualization environments (VMware, VirtualBox, Hyper-V and QEMU+Spice) has been made easier with, and so has configuring Kali for Hyper-V Enhanced Session Mode.

The developers have also released the first Kali NetHunter version for a smartwatch – the TicHunter Pro (running Wear OS).

“It is still experimental, hence the features are limited to USB attacks, and some basic functions. The hardware also has limitations, as such a small battery won’t supply enough voltage for any OTG adapters, so huge antennas won’t stick out of your wrist,” the developers noted. Future improvements include support for Nexmon and internal Bluetooth usage.
See Also: Offensive Security Tool: Jenkins Attack Framework Kali Linux 2021.3 also comes with a number of new tools:

* Berate_ap (for orchestrating MANA rogue Wi-Fi Access Points)
* CALDERA (scalable automated adversary emulation platform)
* EAPHammer (for targeted evil twin attacks against WPA2-Enterprise Wi-Fi networks)
* HostHunter (a recon tool for discovering hostnames using OSINT techniques)
* RouterKeygenPC (for generating default WPA/WEP Wi-Fi keys)
* Subjack (a tool for pulling off a subdomain takeover)
* WPA_Sycophant (evil client portion of EAP relay attack)

The developers have also announced tweaks to Kali ARM images, a new site for exploring Kali Tools, and redesigned desktop and themes.

For more details, check out Offensive Security’s blog post.
Source: www.helpnetsecurity.com (Click Link)Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/Google-Chrome-Browser-90x90.jpg Pair of Google Chrome Zero-Day Bugs Actively Exploited19 hours ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/microsoft-exploit-90x90.jpg Microsoft Patches Actively Exploited Windows Zero-Day Bug2 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/Apple-marketing-communications-mix-90x90.jpg Apple Issues Emergency Fix for NSO Zero-Click Zero Day3 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/202[...]

1/09/zeroday-90x90.png Windows MSHTML zero-day exploits shared on hacking forums4 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/microsoft-zero-day-vulnerabilities-800x358-1-90x90.png Windows MSHTML zero-day defenses bypassed as new info emerges7 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/Malware-90x90.jpg Microsoft shares temp fix for ongoing Office 365 zero-day attacks1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/Jenkins-90x90.jpg Jenkins project’s Confluence server hacked to mine Monero1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/unnamed-e1630998483665-90x90.jpg Critical Auth Bypass Bug Affect NETGEAR Smart Switches1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/loyalty-card-90x90.jpg Brute-Force Attacks Target Inboxes for Gift Card Data2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/Braktooth-New-Bluetooth-gaps-threaten-countless-devices-1024x576-1-90x90.jpg Bluetooth Bugs Open Billions of Devices to DoS, Code Execution2 weeks ago
The post Kali Linux 2021.3 released: Kali NetHunter on a smartwatch, wider OpenSSL compatibility, new tools first appeared on Black Hat Ethical Hacking.

Black Hat Ethical Hacking
Pair of Google Chrome Zero-Day Bugs Actively Exploited

https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Pair of Google Chrome Zero-Day Bugs Actively ExploitedPost Views: 187
Reading Time: 1 Minute
As part of the internet giant’s latest stable channel release (version 93.0.4577.82 for Windows, Mac and Linux), it fixed 11 total vulnerabilities, all of them rated high-severity. The two zero days are tracked as CVE-2021-30632 and CVE-2021-30633.
The security vulnerabilities bring the web behemoth up to 10 browser zero-days found so far this year.
Google has addressed two zero-day security bugs that are being actively exploited in the wild.
“Google is aware that exploits for [these] exist in the wild,” the company said in its short website notice on the update, issued Monday.

Google is restricting any technical details “until a majority of users are updated with a fix,” it said. The vulnerabilities were reported anonymously, precluding any gleaning of details from the researcher who found them. Here’s what we know:

* CVE-2021-30632: Out of bounds write in V8 JavaScript Engine; and
* CVE-2021-30633: Use after free in the IndexedDB API.

Out-of-bounds write flaws can result in corruption of data, a crash or code execution. Use-after-free issues can result in any number of attack types, ranging from the corruption of valid data to the execution of arbitrary code. Both bugs have TBD bug-bounty awards attached to them and were reported on Sept. 8.
See Also: Complete Offensive Security and Ethical Hacking Course V8 is Google’s open-source, high-performance JavaScript and WebAssembly engine for Chrome and Chromium-based browsers. It translates JavaScript code into a more efficient machine code instead of using an interpreter, which speeds up the web browser. Since this vulnerable components is not specific to Google Chrome, it’s a good bet that other browsers are affected by the bug as well.

IndexedDB, meanwhile, allows users to persistently store large amounts of structured data client-side, inside their browsers. The API is a JavaScript application programming interface provided by web browsers for managing these NoSQL databases. It’s a standard maintained by the World Wide Web Consortium.

“Browser bugs discovered from exploitation in the wild are among the most significant security threats,” John Bambenek, principal threat hunter at Netenrich, said via email. “Now that they are patched, exploitation will ramp up. That said, almost 20 years on and we haven’t made web browsing safe shows that the rapid embrace of technology continues to leave users exposed to criminals and nation-state actors. Everyone wants to learn how to hack, too few people are working on defense.”
See Also: Windows MSHTML zero-day defenses bypassed as new info emerges The other nine bugs addressed by Google are as follows:

* CVE-2021-30625: Use after free in Selection API. Reported by Marcin Towalski of Cisco Talos on 2021-08-06
* CVE-2021-30626: Out of bounds memory access in ANGLE. Reported by Jeonghoon Shin of Theori on 2021-08-18
* CVE-2021-30627: Type Confusion in Blink layout. Reported by Aki Helin of OUSPG on 2021-09-01
* CVE-2021-30628: Stack buffer overflow in ANGLE. Reported by Jaehun Jeong(@n3sk) of Theori on 2021-08-18
* CVE-2021-30629: Use after free in Permissions. Reported by Weipeng Jiang (@Krace) from Codesafe Team of Legendsec at Qi’anxin Group on 2021-08-26
* CVE-2021-30630: Inappropriate implementation in Blink. Reported by SorryMybad (@S0rryMybad) of Kunlun Lab on 2021-08-30
* CVE-2021-30631: Type Confusion in Blink layout. Reported by Atte Kettunen of OUSPG on 2021-09-06

Kevin Dunne, president at Pathl[...]

ock, pointed out that Google has patched plenty of zero-days already this year – eight prior to the latest two, to be exact – and he said to expect more.
See Also: Offensive Security Tool: Jenkins Attack Framework 10th Zero-Day in 2021 for Google“Today, Google released a patch for its tenth [and ninth] zero-day exploit of the year,” Dunne said in an email to media. “This milestone highlights the emphasis that bad actors are putting on browser exploits, with Chrome becoming a clear favorite, allowing a streamlined way to gain access to millions of devices regardless of OS.

“We expect to see continued zero-day exploits in the wild,” he added.

The other zero days discovered so far in 2021 are as follows, many of them in the V8 engine:

* CVE-2021-21148 – (February)
* CVE-2021-21166 – (March)
* CVE-2021-21193 – (March)
* CVE-2021-21220 – (April)
* CVE-2021-21224 – (April, later used in Windows attacks)
* CVE-2021-30551 – (June)
* CVE-2021-30554 – (June)
* CVE-2021-30563 – (July)

“Google’s commitment to patching these exploits quickly is commendable, as they operate Google Chrome as freeware and therefore are the sole entity who can provide these updates,” Dunne wrote. “Google is committed to providing Chrome as a free browser, as it is a critical entry point for other businesses such as Google Search and Google Workspace.”

The news comes as Apple rushed a fix for a zero-click zero-day exploit targeting iMessaging. It’s allegedly been used to illegally spy on Bahraini activists with NSO Group’s Pegasus spyware, according to researchers.
Microsoft is also expected to release its monthly Patch Tuesday set of updates today, so we’ll see if there are yet more zero-day exploits to worry about.
Source: threatpost.com (Click Link)Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/banner-2021.3-release-90x90.jpg Kali Linux 2021.3 released: Kali NetHunter on a smartwatch, wider OpenSSL compatibility, new tools1 day ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/microsoft-exploit-90x90.jpg Microsoft Patches Actively Exploited Windows Zero-Day Bug2 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/Apple-marketing-communications-mix-90x90.jpg Apple Issues Emergency Fix for NSO Zero-Click Zero Day3 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/zeroday-90x90.png Windows MSHTML zero-day exploits shared on hacking forums4 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/microsoft-zero-day-vulnerabilities-800x358-1-90x90.png Windows MSHTML zero-day defenses bypassed as new info emerges7 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/Malware-90x90.jpg Microsoft shares temp fix for ongoing Office 365 zero-day attacks1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/Jenkins-90x90.jpg Jenkins project’s Confluence server hacked to mine Monero1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/unnamed-e1630998483665-90x90.jpg Critical Auth Bypass Bug Affect NETGEAR Smart Switches1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/loyalty-card-90x90.jpg Brute-Force Attacks Target Inboxes for Gift Card Data2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/Braktooth-New-Bluetooth-gaps-threaten-countless-devices-1024x576-1-90x90.jpg Bluetooth Bugs Open Billions of Devices to DoS, Code Execution2 weeks ago
The post Pair of Google Chrome Zero-Day Bugs Actively Exploited first appeared on Black Hat Ethical Hacking.