Black Hat Ethical Hacking
Kali Linux 2021.3 released: Kali NetHunter on a smartwatch, wider OpenSSL compatibility, new tools

https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Kali Linux 2021.3 released: Kali NetHunter on a smartwatch, wider OpenSSL compatibility, new toolsPost Views: 697
Reading Time: 1 Minute Kali Linux 2021.3 Release (OpenSSL, Kali-Tools, Kali Live VM Support, Kali NetHunter Smartwatch)A summary of the changes since the 2021.2 release from June are:

* OpenSSL – Wide compatibility by default – Keep reading for what that means
* New Kali-Tools site – Following the footsteps of Kali-Docs, Kali-Tools has had a complete refresh
* Better VM support in the Live image session – Copy & paste and drag & drop from your machine into a Kali VM by default
* New tools – From adversary emulation, to subdomain takeover to Wi-Fi attacks
* Kali NetHunter smartwatch – first of its kind, for TicHunter Pro
* KDE 5.21 – Plasma desktop received a version bump
See Also: Complete Offensive Security and Ethical Hacking Course Kali Linux 2021.3 changesThe changes in this version include: OpenSSL has been configured for wider compatibility, allowing the use of legacy protocols, meaning that Kali can now talk to older, legacy systems that use them.

The option allows users to search for additional attack surfaces. As the developers noted, “If your target has these End of Life services running, having then forgotten about them, what else could this undercover?”
See Also: Windows MSHTML zero-day defenses bypassed as new info emerges The use of Kali (Live image) in virtualization environments (VMware, VirtualBox, Hyper-V and QEMU+Spice) has been made easier with, and so has configuring Kali for Hyper-V Enhanced Session Mode.

The developers have also released the first Kali NetHunter version for a smartwatch – the TicHunter Pro (running Wear OS).

“It is still experimental, hence the features are limited to USB attacks, and some basic functions. The hardware also has limitations, as such a small battery won’t supply enough voltage for any OTG adapters, so huge antennas won’t stick out of your wrist,” the developers noted. Future improvements include support for Nexmon and internal Bluetooth usage.
See Also: Offensive Security Tool: Jenkins Attack Framework Kali Linux 2021.3 also comes with a number of new tools:

* Berate_ap (for orchestrating MANA rogue Wi-Fi Access Points)
* CALDERA (scalable automated adversary emulation platform)
* EAPHammer (for targeted evil twin attacks against WPA2-Enterprise Wi-Fi networks)
* HostHunter (a recon tool for discovering hostnames using OSINT techniques)
* RouterKeygenPC (for generating default WPA/WEP Wi-Fi keys)
* Subjack (a tool for pulling off a subdomain takeover)
* WPA_Sycophant (evil client portion of EAP relay attack)

The developers have also announced tweaks to Kali ARM images, a new site for exploring Kali Tools, and redesigned desktop and themes.

For more details, check out Offensive Security’s blog post.
Source: www.helpnetsecurity.com (Click Link)Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/Google-Chrome-Browser-90x90.jpg Pair of Google Chrome Zero-Day Bugs Actively Exploited19 hours ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/microsoft-exploit-90x90.jpg Microsoft Patches Actively Exploited Windows Zero-Day Bug2 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/Apple-marketing-communications-mix-90x90.jpg Apple Issues Emergency Fix for NSO Zero-Click Zero Day3 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/202[...]

1/09/zeroday-90x90.png Windows MSHTML zero-day exploits shared on hacking forums4 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/microsoft-zero-day-vulnerabilities-800x358-1-90x90.png Windows MSHTML zero-day defenses bypassed as new info emerges7 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/Malware-90x90.jpg Microsoft shares temp fix for ongoing Office 365 zero-day attacks1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/Jenkins-90x90.jpg Jenkins project’s Confluence server hacked to mine Monero1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/unnamed-e1630998483665-90x90.jpg Critical Auth Bypass Bug Affect NETGEAR Smart Switches1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/loyalty-card-90x90.jpg Brute-Force Attacks Target Inboxes for Gift Card Data2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/Braktooth-New-Bluetooth-gaps-threaten-countless-devices-1024x576-1-90x90.jpg Bluetooth Bugs Open Billions of Devices to DoS, Code Execution2 weeks ago
The post Kali Linux 2021.3 released: Kali NetHunter on a smartwatch, wider OpenSSL compatibility, new tools first appeared on Black Hat Ethical Hacking.

Black Hat Ethical Hacking
Pair of Google Chrome Zero-Day Bugs Actively Exploited

https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Pair of Google Chrome Zero-Day Bugs Actively ExploitedPost Views: 187
Reading Time: 1 Minute
As part of the internet giant’s latest stable channel release (version 93.0.4577.82 for Windows, Mac and Linux), it fixed 11 total vulnerabilities, all of them rated high-severity. The two zero days are tracked as CVE-2021-30632 and CVE-2021-30633.
The security vulnerabilities bring the web behemoth up to 10 browser zero-days found so far this year.
Google has addressed two zero-day security bugs that are being actively exploited in the wild.
“Google is aware that exploits for [these] exist in the wild,” the company said in its short website notice on the update, issued Monday.

Google is restricting any technical details “until a majority of users are updated with a fix,” it said. The vulnerabilities were reported anonymously, precluding any gleaning of details from the researcher who found them. Here’s what we know:

* CVE-2021-30632: Out of bounds write in V8 JavaScript Engine; and
* CVE-2021-30633: Use after free in the IndexedDB API.

Out-of-bounds write flaws can result in corruption of data, a crash or code execution. Use-after-free issues can result in any number of attack types, ranging from the corruption of valid data to the execution of arbitrary code. Both bugs have TBD bug-bounty awards attached to them and were reported on Sept. 8.
See Also: Complete Offensive Security and Ethical Hacking Course V8 is Google’s open-source, high-performance JavaScript and WebAssembly engine for Chrome and Chromium-based browsers. It translates JavaScript code into a more efficient machine code instead of using an interpreter, which speeds up the web browser. Since this vulnerable components is not specific to Google Chrome, it’s a good bet that other browsers are affected by the bug as well.

IndexedDB, meanwhile, allows users to persistently store large amounts of structured data client-side, inside their browsers. The API is a JavaScript application programming interface provided by web browsers for managing these NoSQL databases. It’s a standard maintained by the World Wide Web Consortium.

“Browser bugs discovered from exploitation in the wild are among the most significant security threats,” John Bambenek, principal threat hunter at Netenrich, said via email. “Now that they are patched, exploitation will ramp up. That said, almost 20 years on and we haven’t made web browsing safe shows that the rapid embrace of technology continues to leave users exposed to criminals and nation-state actors. Everyone wants to learn how to hack, too few people are working on defense.”
See Also: Windows MSHTML zero-day defenses bypassed as new info emerges The other nine bugs addressed by Google are as follows:

* CVE-2021-30625: Use after free in Selection API. Reported by Marcin Towalski of Cisco Talos on 2021-08-06
* CVE-2021-30626: Out of bounds memory access in ANGLE. Reported by Jeonghoon Shin of Theori on 2021-08-18
* CVE-2021-30627: Type Confusion in Blink layout. Reported by Aki Helin of OUSPG on 2021-09-01
* CVE-2021-30628: Stack buffer overflow in ANGLE. Reported by Jaehun Jeong(@n3sk) of Theori on 2021-08-18
* CVE-2021-30629: Use after free in Permissions. Reported by Weipeng Jiang (@Krace) from Codesafe Team of Legendsec at Qi’anxin Group on 2021-08-26
* CVE-2021-30630: Inappropriate implementation in Blink. Reported by SorryMybad (@S0rryMybad) of Kunlun Lab on 2021-08-30
* CVE-2021-30631: Type Confusion in Blink layout. Reported by Atte Kettunen of OUSPG on 2021-09-06

Kevin Dunne, president at Pathl[...]

ock, pointed out that Google has patched plenty of zero-days already this year – eight prior to the latest two, to be exact – and he said to expect more.
See Also: Offensive Security Tool: Jenkins Attack Framework 10th Zero-Day in 2021 for Google“Today, Google released a patch for its tenth [and ninth] zero-day exploit of the year,” Dunne said in an email to media. “This milestone highlights the emphasis that bad actors are putting on browser exploits, with Chrome becoming a clear favorite, allowing a streamlined way to gain access to millions of devices regardless of OS.

“We expect to see continued zero-day exploits in the wild,” he added.

The other zero days discovered so far in 2021 are as follows, many of them in the V8 engine:

* CVE-2021-21148 – (February)
* CVE-2021-21166 – (March)
* CVE-2021-21193 – (March)
* CVE-2021-21220 – (April)
* CVE-2021-21224 – (April, later used in Windows attacks)
* CVE-2021-30551 – (June)
* CVE-2021-30554 – (June)
* CVE-2021-30563 – (July)

“Google’s commitment to patching these exploits quickly is commendable, as they operate Google Chrome as freeware and therefore are the sole entity who can provide these updates,” Dunne wrote. “Google is committed to providing Chrome as a free browser, as it is a critical entry point for other businesses such as Google Search and Google Workspace.”

The news comes as Apple rushed a fix for a zero-click zero-day exploit targeting iMessaging. It’s allegedly been used to illegally spy on Bahraini activists with NSO Group’s Pegasus spyware, according to researchers.
Microsoft is also expected to release its monthly Patch Tuesday set of updates today, so we’ll see if there are yet more zero-day exploits to worry about.
Source: threatpost.com (Click Link)Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/banner-2021.3-release-90x90.jpg Kali Linux 2021.3 released: Kali NetHunter on a smartwatch, wider OpenSSL compatibility, new tools1 day ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/microsoft-exploit-90x90.jpg Microsoft Patches Actively Exploited Windows Zero-Day Bug2 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/Apple-marketing-communications-mix-90x90.jpg Apple Issues Emergency Fix for NSO Zero-Click Zero Day3 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/zeroday-90x90.png Windows MSHTML zero-day exploits shared on hacking forums4 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/microsoft-zero-day-vulnerabilities-800x358-1-90x90.png Windows MSHTML zero-day defenses bypassed as new info emerges7 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/Malware-90x90.jpg Microsoft shares temp fix for ongoing Office 365 zero-day attacks1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/Jenkins-90x90.jpg Jenkins project’s Confluence server hacked to mine Monero1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/unnamed-e1630998483665-90x90.jpg Critical Auth Bypass Bug Affect NETGEAR Smart Switches1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/loyalty-card-90x90.jpg Brute-Force Attacks Target Inboxes for Gift Card Data2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/Braktooth-New-Bluetooth-gaps-threaten-countless-devices-1024x576-1-90x90.jpg Bluetooth Bugs Open Billions of Devices to DoS, Code Execution2 weeks ago
The post Pair of Google Chrome Zero-Day Bugs Actively Exploited first appeared on Black Hat Ethical Hacking.

Black Hat Ethical Hacking
Microsoft Patches Actively Exploited Windows Zero-Day Bug

https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Microsoft Patches Actively Exploited Windows Zero-Day BugPost Views: 286
Reading Time: 2 Minutes
In September’s Patch Tuesday crop of security fixes, Microsoft released patches for 66 CVEs, three of which are rated critical, and one of which – the Windows MSHTML zero-day – has been under active attack for nearly two weeks.
One other bug is listed as publicly known but isn’t (yet) being exploited. Immersive Labs’ Kevin Breen, director of cyber threat research, observed that with only one CVE under active attack in the wild, it’s “quite a light Patch Tuesday” – at least on the surface, that is.

The flaws were found in Microsoft Windows and Windows components, Microsoft Edge (Chromium, iOS, and Android), Azure, Office and Office Components, SharePoint Server, Microsoft Windows DNS and the Windows Subsystem for Linux.

Of the 66 new CVEs patched today, three are rated critical, 62 are rated important, and one is rated moderate in severity.

Over the past nine months of 2021, this is the seventh month in which Microsoft patched fewer than 100 CVEs, in stark contrast to 2020, when Redmond spent eight months gushing out more than 100 CVE patches per month. But while the overall number of vulnerabilities is lighter, the severity ratings have ticked up, as the Zero Day Initiative noted.

Some observers pegged the top patching priority in this month’s batch as being a fix for CVE-2021-40444: An important-rated vulnerability in Microsoft’s MSHTML (Trident) engine that rates 8.8 out of 10 on the CVSS scale.

Disclosed on Sept. 7, it’s a painfully throbbing sore thumb, given that researchers developed a number of proof-of-concept (PoC) exploits showing how drop-dead simple it is to exploit, and attackers have been sharing guides on how to do just that.
See Also: Complete Offensive Security and Ethical Hacking Course Under Active Attack: CVE-2021-40444It’s been nearly two weeks since this serious, simple to exploit bug has been under active attack, and it’s been nearly a week since attackers started to share blueprints on how to carry out an exploit.

Microsoft said last week that the flaw could let an attacker “craft a malicious ActiveX control to be used by a Microsoft Office document that hosts the browser rendering engine,” after which “the attacker would then have to convince the user to open the malicious document.” Unfortunately, malicious macro attacks continue to be prevalent: In July, for example, legacy users of Microsoft Excel were being targeted in a malware campaign that used a novel malware-obfuscation technique to disable malicious macro warnings and deliver the ZLoader trojan.

An attacker would need to convince a user to open a specially crafted Microsoft Office document containing the exploit code.

Satnam Narang, staff research engineer at Tenable, noted via email that there have been warnings that this vulnerability will be incorporated into malware payloads and used to distribute ransomware: A solid reason to put the patch at the top of your priority list.

“There are no indications that this has happened yet, but with the patch now available, organizations should prioritize updating their systems as soon as possible,” Narang told Threatpost.

Last Wednesday, Sept. 8, Kevin Beaumont – head of the security operations center for U.K. fashion retailer Arcadia Group and a past senior threat intelligence analyst at Microsoft – noted that the exploit had been in the wild for about a week or more.

It got worse: Last Thursday, Sept. 9, threat actors began sharing exploit h[...]

ow-tos and PoCs for the Windows MSHTML zero-day. BleepingComputer gave it a try and found that the guides are “simple to follow and [allow] anyone to create their own working version” of the exploit, “including a Python server to distribute the malicious documents and CAB files.”

It took the publication all of 15 minutes to recreate the exploit.

A week ago, on Tuesday, Sept. 7, Microsoft and the Cybersecurity and Infrastructure Security Agency (CISA) had urged mitigations of the remote-code execution (RCE) flaw, which is found in all modern Windows operating systems.

Last week, the company didn’t say much about the bug in MSHTML, aka Trident, which is the HTML engine built into Windows since Internet Explorer debuted more than 20 years ago and which allows Windows to read and display HTML files.

Microsoft did say, however, that it was aware of targeted attacks trying to exploit it via specially crafted Microsoft Office documents.

In spite of there being no security updates available for the vulnerability at that time, MIcrosoft went ahead and disclosed it, along with mitigations meant to help prevent exploitation.
See Also: Windows MSHTML zero-day defenses bypassed as new info emerges Mitigations That Don’t MitigateTracked as CVE-2021-40444, the flaw is serious enough that CISA sent its own advisory, alerting users and administrators and recommending that they use the mitigations and workarounds Microsoft recommended – mitigations that try to prevent exploitation by blocking ActiveX controls and Word/RTF document previews in Windows Explorer.

Emphasis on “try to:” Unfortunately, those mitigations proved to be less than foolproof, as researchers, including Beaumont, managed to modify the exploit so that it didn’t use ActiveX, effectively skirting Microsoft’s mitigations.

The Zero Day Initiative said that for now, the most-effective defense is “to apply the patch and avoid Office docs you aren’t expecting to receive.”

Be sure to carefully review and install all the needed patches for your setup: There’s a long list of updates for specific platforms, and it’s important not to slather on too thin a layer of protection.

Credit for finding this bug goes to Rick Cole of MSTIC; Bryce Abdo, Dhanesh Kizhakkinan and Genwei Jiang, all from Mandiant; and Haifei Li of EXPMON. Baddest Bug AwardThe award for baddest bug – or at least, the one with the highest severity rating, with a CVSS score of 9.8 – goes to CVE-2021-38647: a critical remote-code execution (RCE) vulnerability in Open Management Infrastructure. OMI is an open-source project to further the development of a production-quality implementation of the DMTF CIM/WBEM standards.

“This vulnerability requires no user interaction or privileges, so an attacker can run their code on an affected system just by sending a specially crafted message to an affected system,” the Zero Day Initiatve explained. That makes it high priority: ZDI recommended that OMI users test and deploy this one quickly.
See Also: Offensive Security Tool: Jenkins Attack Framework Yet More PrintNightmare PatchesMicrosoft also patched three elevation of privilege vulnerabilities in Windows Print Spooler (CVE-2021-38667, CVE-2021-38671 and CVE-2021-40447), all rated important.

These are the three latest fixes in a steady stream of patches for flaws in Windows Print Spooler that followed the disclosure of PrintNightmare in June. This probably won’t be the last patch in that parade: Tenable’s Narang told Threatpost that “researchers continue to discover ways to exploit Print Spooler” and that the firm expects “continued research in this area.”

Only one – CVE-2021-38671 – of today’s patch trio is rated as “exploitation more likely.” Regardless, organizations should prioritize patching these flaws as “they are extremely valuable to attackers in post-exploitation scenarios,” Narang observed. More ‘Exploitation More Likely’Immersive’s Breen told Thre[...]

atpost that a trio of local privilege-escalation vulnerabilities in the Windows Common Log File System Driver (CVE-2021-36955, CVE-2021-36963, CVE-2021-38633) are also noteworthy, all of them being listed as “exploitation more likely.”

“Local priv-esc vulnerabilities are a key component of almost every successful cyberattack, especially for the likes of ransomware operators who abuse this kind of exploit to gain the highest level of access,” Breen said via email. “This allows them to disable antivirus, delete backups and ensure their encryptors can reach even the most sensitive of files.”

One glaring example of that emerged in May, when hundreds of millions of Dell users were found to be at risk from kernel-privilege bugs. The bugs lurked undisclosed for 12 years, and could have allowed attackers to bypass security products, execute code and pivot to other parts of the network for lateral movement.

The three exploits Microsoft patched on Tuesday aren’t remote, meaning that attackers need to have achieved code execution by other means. One such way would be via CVE-2021-40444.

Two other vulnerabilities – CVE-2021-38639 and CVE-2021-36975, both Win32k escalation of privilege flaws – have also been listed as “exploitation more likely” and, together, cover the full range of supported Windows versions.

Breen said that he’s starting to feel like a broken record when it comes to privilege escalation vulnerabilities. They’re not rated as high a severity risk as RCE bugs, but “these local exploits can be the linchpin in the post-exploitation phases of an experienced attacker,” he asserted. “If you can block them here you have the potential to significantly limit their damage.”

he added, “If we assume a determined attacker will be able to infect a victim’s device through social engineering or other techniques, I would argue that patching priv-esc vulnerabilities is even more important than patching some other remote code-execution vulns,” Breen said. See Also: Hacking Stories: Andrian Lamo – The ‘homeless’ HackerStill, This RCE Is Pretty ImportantDanny Kim, a principal architect at Virsec who spent time at Microsoft during his graduate work on the OS security development team, wants security teams to pay attention to CVE-2021-36965 – an important-rated Windows WLAN AutoConfig Service RCE vulnerability – given its combination of severity (with a CVSS:3.0 base score of 8.8); no requirement for privilege escalation/user interaction to exploit; and breadth of affected Windows versions.

The WLAN AutoConfig Service is part of the mechanism that Windows 10 uses to choose the wireless network a computer will connect to, and to the Windows Scripting Engine, respectively.

The patch fixes a flaw that could allow network-adjacent attackers to run their code on affected systems at system level.

As the Zero Day Initiative explained, that means an attacker could “completely take over the target – provided they are on an adjacent network.” That would come in quite handy in a coffee-shop attack, where multiple people use an unsecured Wi-Fi network.

This one “is especially alarming,” Kim said: Think SolarWinds and PrintNightmare.

“As recent trends have shown, remote code execution-based attacks are the most critical vulnerabilities that can lead to the largest negative impact on an enterprise, as we have seen in the Solarwinds and PrintNightmare attacks,” he said in an email.

Kim said that in spite of the exploit code maturity being currently unproven, the vulnerability has been confirmed to exist, leaving an opening for attackers.

“It specifically relies on the attacker being located in the same network, so it would not be surprising to see this vulnerability used in combination with another CVE/attack to achieve an attacker’s end goal,” he predicted. “Remote code execution attacks can lead to unverified processes running on the server workload, only highlighting the need for constant, deter[...]

ministic runtime monitoring. Without this protection in place, RCE attacks can lead to a total loss of confidentiality and integrity of an enterprise’s data.”

The Zero Day Initiative also found this one alarming. Even though it requires proximity to a target, it requires no privileges or user interaction, so “don’t let the adjacent aspect of this bug diminish the severity,” it said. “Definitely test and deploy this patch quickly.” And Don’t Forget to Patch ChromeBreen told Threatpost via email that security teams should also pay attention to 25 vulnerabilities patched in Chrome and ported over to Microsoft’s Chromium-based Edge.

Browsers are, after all, windows into things both private, sensitive and valuable to criminals, he said.

“I cannot underestimate the importance of patching your browsers and keeping them up to date,” he stressed. “After all, browsers are the way we interact with the internet and web-based services that contain all sorts of highly sensitive, valuable and private information. Whether you’re thinking about your online banking or the data collected and stored by your organization’s web apps, they could all be exposed by attacks that exploit the browser.”
Source: threatpost.com (Click Link)Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/Google-Chrome-Browser-90x90.jpg Pair of Google Chrome Zero-Day Bugs Actively Exploited19 hours ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/banner-2021.3-release-90x90.jpg Kali Linux 2021.3 released: Kali NetHunter on a smartwatch, wider OpenSSL compatibility, new tools1 day ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/Apple-marketing-communications-mix-90x90.jpg Apple Issues Emergency Fix for NSO Zero-Click Zero Day3 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/zeroday-90x90.png Windows MSHTML zero-day exploits shared on hacking forums4 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/microsoft-zero-day-vulnerabilities-800x358-1-90x90.png Windows MSHTML zero-day defenses bypassed as new info emerges7 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/Malware-90x90.jpg Microsoft shares temp fix for ongoing Office 365 zero-day attacks1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/Jenkins-90x90.jpg Jenkins project’s Confluence server hacked to mine Monero1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/unnamed-e1630998483665-90x90.jpg Critical Auth Bypass Bug Affect NETGEAR Smart Switches1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/loyalty-card-90x90.jpg Brute-Force Attacks Target Inboxes for Gift Card Data2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/Braktooth-New-Bluetooth-gaps-threaten-countless-devices-1024x576-1-90x90.jpg Bluetooth Bugs Open Billions of Devices to DoS, Code Execution2 weeks ago
The post Microsoft Patches Actively Exploited Windows Zero-Day Bug first appeared on Black Hat Ethical Hacking.

hacking: security in practice
Where are data breaches deposited/available from?

Apple just informed me that one of my accounts was found in a data breach. Where is this data coming from?

submitted by /u/DarwinApprentice
[link] [comments]
➖ Sent by @TheFeedReaderBot ➖

hacking: security in practice
Bypass mac admin password without resetting it?

Looking for a way to gain access to macbook pro admin user without resetting the password. Any information would be appreciated!

submitted by /u/JDDW
[link] [comments]

Hacking on Medium
Exploiting the Dev VM


Machine Info
IP Address: 192.168.48.132 
MAC Address: 00:0c:29:a9:5c:06

Continue reading on Medium »

Hacking on Medium
DXventures grants $100,000 to Hats.finance to build a decentralized cyber security network


DXventures is the internal venture arm of DXdao.

Continue reading on Medium »

Hacking on Medium
Investigate & Monitor Mobile Phone, Hack Facebook, WhatsApp, Instagram, Gmail, Legit Cyber Hacker…

Hello everyone, If you want to hire a reliable hacker to help you hack and program access into any device, system, website, Bitcoin site…

Continue reading on Medium »

What is Bug Bounty
https://medium.com/@vimukumarasiri/what-is-bug-bounty-20afa920ea02?source=rss------bug_bounty-5

Bug Bounty is a program offered by many websites, organizations, and app developers to report bugs on their apps or websites. Those kinds…Continue reading on Medium » (https://medium.com/@vimukumarasiri/what-is-bug-bounty-20afa920ea02?source=rss------bug_bounty-5)

Beyond rubber ducky: evil mass storage POC with AT90USBKEY2. malware-tool for offline system. USB composite device with keyboard + mass storage + exfiltration via radio.
https://www.reddit.com/r/redteamsec/comments/ppv1yd/beyond_rubber_ducky_evil_mass_storage_poc_with/

submitted by /u/gid0rah (https://www.reddit.com/user/gid0rah)
[link] (https://www.driverentry.com/node/104) [comments] (https://www.reddit.com/r/redteamsec/comments/ppv1yd/beyond_rubber_ducky_evil_mass_storage_poc_with/)