hacking: security in practice
Find out Mobile Number from Email ID?
I was wondering if there is a way in which I can find out a person's mobile number from its Email ID?
submitted by /u/Lmao_py
[link] [comments]
Find out Mobile Number from Email ID?
I was wondering if there is a way in which I can find out a person's mobile number from its Email ID?
submitted by /u/Lmao_py
[link] [comments]
reddit
Find out Mobile Number from Email ID?
I was wondering if there is a way in which I can find out a person's mobile number from its Email ID?
Hacking Articles Tips Tricks Videos Tutorials
Photo
Augmented Finance Testnet Progress Update: Week 1
https://augmentedfinance.medium.com/augmented-finance-testnet-progress-update-week-1-7df4b318351b?source=rss------bug_bounty-5
https://augmentedfinance.medium.com/augmented-finance-testnet-progress-update-week-1-7df4b318351b?source=rss------bug_bounty-5
1700+ testers joined during the first week of public testing! 300+ reports submitted by testers. Augmented Finance devs fixed many issuesContinue reading on Medium » (https://augmentedfinance.medium.com/augmented-finance-testnet-progress-update-week-1-7df4b318351b?source=rss------bug_bounty-5)
Polkalokr Bug Bounty Launch
https://medium.com/polkalokr/polkalokr-bug-bounty-launch-4b02f7620020?source=rss------bug_bounty-5
https://medium.com/polkalokr/polkalokr-bug-bounty-launch-4b02f7620020?source=rss------bug_bounty-5
Inviting users to stress test our multichain token bridge in the Polkalokr Bug Bounty.Continue reading on Polkalokr » (https://medium.com/polkalokr/polkalokr-bug-bounty-launch-4b02f7620020?source=rss------bug_bounty-5)
Deep Web
Sites like prnt.sc or something closer to it?
The site is supposed to be a service for screenshots on the cloud but there’s no privacy. Try combining two letters followed by 4 numbers after forward dash and you’ll get a random screenshot. Ex: prnt.sc/ba4444
Is there something like this where you could poke around people’s photos or something?
submitted by /u/Buillshirt
[link] [comments]
Sites like prnt.sc or something closer to it?
The site is supposed to be a service for screenshots on the cloud but there’s no privacy. Try combining two letters followed by 4 numbers after forward dash and you’ll get a random screenshot. Ex: prnt.sc/ba4444
Is there something like this where you could poke around people’s photos or something?
submitted by /u/Buillshirt
[link] [comments]
reddit
Sites like prnt.sc or something closer to it?
The site is supposed to be a service for screenshots on the cloud but there’s no privacy. Try combining two letters followed by 4 numbers after...
Hacking Articles Tips Tricks Videos Tutorials
Photo
Black Hat Ethical Hacking
Azure Zero-Day Flaws Highlight Lurking Supply-Chain Risk
https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Azure Zero-Day Flaws Highlight Lurking Supply-Chain RiskPost Views: 107
Reading Time: 1 Minute
Dubbed OMIGOD, a series of vulnerabilities in the Open Management Infrastructure used in Azure on Linux demonstrate hidden security threats
Four Microsoft zero-day vulnerabilities in the Azure cloud platform’s Open Management Infrastructure (OMI) — a software that many don’t know is embedded in a host of services — show that OMI represents a significant security blind spot, researchers said.
Collectively dubbed “OMIGOD” because of the name and the reaction of the researchers who discovered them, the flaws — which were zero-day when found — affect thousands of Azure customers and millions of endpoints, according to a blog post published this week by cloud infrastructure security firm Wiz.
Though Microsoft patched them this week in its monthly Patch Tuesday raft of updates, their presence in OMI highlights the risk for the supply chain when companies unknowingly run code — particularly open-source code — on their systems that allows for exploitation, researchers said.
Indeed, recent high-profile supply-chain attacks such as SolarWinds and Kaseya demonstrate how much damage can be done when undetected flaws in third-party software that organizations use in larger systems are exploited.
“One of the biggest challenges in preventing them is that our digital supply chain is not transparent,” senior security researcher Nir Ohfeld wrote in the Wiz post. “If you don’t know what’s hidden in the services and products you use every day, how can you manage the risk?
Indeed, the OMIGOD vulnerabilities discovered by Ohfeld and his colleagues present a security danger to potentially millions of unsuspecting customers of cloud computing services, he said.
See Also: Complete Offensive Security and Ethical Hacking Course
“In a small sample of Azure tenants we analyzed, over 65 percent [of Azure customers] were unknowingly at risk,” Ohfeld wrote.
The vulnerabilities that Wiz researchers discovered include one that allows for remote code execution (RCE), CVE-2021-38647. The other three are privilege-escalation vulnerabilities (CVE-2021-38648, CVE-2021-38645 and CVE-2021-38649) of lower risk but which are critical for a full attack chain.
“Unless a patch is applied, attackers can easily exploit these four vulnerabilities to escalate to root privileges and remotely execute malicious code (for instance, encrypting files for ransom),” Ohfeld said. Hidden Cloud Security Danger in OMIOne reason for the significant alarm over the flaws is that they are found in OMI, an agent automatically deployed when customers set up a Linux virtual machine (VM) in their cloud and enable certain Azure services, researchers explained.
“This happens without customers’ explicit consent or knowledge,” Ohfeld wrote. “Users simply click ‘agree’ to log collection during setup, and they have unknowingly opted in.”
OMI is a perilous attack surface because Azure provides “virtually no public documentation” about it, he said. That means most customers have never heard of it and are unaware that it even exists as an exploitable entity in their deployment.
Moreover, the OMI agent runs as root with the highest privileges, so any user can communicate with it using a UNIX socket or via an HTTP API when configured to allow external access, Ohfeld explained.
See Also: Windows MSHTML zero-day defenses bypassed as new info emerges “As a result, the vulnerabilities we found would allow external users or low-privileged users to remotely execute [...]
Azure Zero-Day Flaws Highlight Lurking Supply-Chain Risk
https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Azure Zero-Day Flaws Highlight Lurking Supply-Chain RiskPost Views: 107
Reading Time: 1 Minute
Dubbed OMIGOD, a series of vulnerabilities in the Open Management Infrastructure used in Azure on Linux demonstrate hidden security threats
Four Microsoft zero-day vulnerabilities in the Azure cloud platform’s Open Management Infrastructure (OMI) — a software that many don’t know is embedded in a host of services — show that OMI represents a significant security blind spot, researchers said.
Collectively dubbed “OMIGOD” because of the name and the reaction of the researchers who discovered them, the flaws — which were zero-day when found — affect thousands of Azure customers and millions of endpoints, according to a blog post published this week by cloud infrastructure security firm Wiz.
Though Microsoft patched them this week in its monthly Patch Tuesday raft of updates, their presence in OMI highlights the risk for the supply chain when companies unknowingly run code — particularly open-source code — on their systems that allows for exploitation, researchers said.
Indeed, recent high-profile supply-chain attacks such as SolarWinds and Kaseya demonstrate how much damage can be done when undetected flaws in third-party software that organizations use in larger systems are exploited.
“One of the biggest challenges in preventing them is that our digital supply chain is not transparent,” senior security researcher Nir Ohfeld wrote in the Wiz post. “If you don’t know what’s hidden in the services and products you use every day, how can you manage the risk?
Indeed, the OMIGOD vulnerabilities discovered by Ohfeld and his colleagues present a security danger to potentially millions of unsuspecting customers of cloud computing services, he said.
See Also: Complete Offensive Security and Ethical Hacking Course
“In a small sample of Azure tenants we analyzed, over 65 percent [of Azure customers] were unknowingly at risk,” Ohfeld wrote.
The vulnerabilities that Wiz researchers discovered include one that allows for remote code execution (RCE), CVE-2021-38647. The other three are privilege-escalation vulnerabilities (CVE-2021-38648, CVE-2021-38645 and CVE-2021-38649) of lower risk but which are critical for a full attack chain.
“Unless a patch is applied, attackers can easily exploit these four vulnerabilities to escalate to root privileges and remotely execute malicious code (for instance, encrypting files for ransom),” Ohfeld said. Hidden Cloud Security Danger in OMIOne reason for the significant alarm over the flaws is that they are found in OMI, an agent automatically deployed when customers set up a Linux virtual machine (VM) in their cloud and enable certain Azure services, researchers explained.
“This happens without customers’ explicit consent or knowledge,” Ohfeld wrote. “Users simply click ‘agree’ to log collection during setup, and they have unknowingly opted in.”
OMI is a perilous attack surface because Azure provides “virtually no public documentation” about it, he said. That means most customers have never heard of it and are unaware that it even exists as an exploitable entity in their deployment.
Moreover, the OMI agent runs as root with the highest privileges, so any user can communicate with it using a UNIX socket or via an HTTP API when configured to allow external access, Ohfeld explained.
See Also: Windows MSHTML zero-day defenses bypassed as new info emerges “As a result, the vulnerabilities we found would allow external users or low-privileged users to remotely execute [...]
Hacking Articles Tips Tricks Videos Tutorials
Photo
Black Hat Ethical Hacking
New malware uses Windows Subsystem for Linux for stealthy attacks
https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png New malware uses Windows Subsystem for Linux for stealthy attacksPost Views: 821
Reading Time: 1 Minute
Security researchers have discovered malicious Linux binaries created for the Windows Subsystem for Linux (WSL), indicating that hackers are trying out new methods to compromise Windows machines.
The finding underlines that threat actors are exploring new methods of attack and are focusing their attention on WSL to evade detection. Using WSL to avoid detectionThe first samples targeting the WSL environment were discovered in early May and continued to appear every two to three weeks until August 22. They act as loaders for the WSL environment and enjoy very low detection on public file scanning services.
In a report today, security researchers at Lumen’s Black Lotus Labs say that the malicious files either have the payload embedded or fetch it from a remote server.
The next step is to inject the malware into a running process using Windows API calls, a technique that is neither new nor sophisticated.
From the small number of samples identified, only one came with a publicly routable IP address, hinting that threat actors are testing the use of WSL to install malware on Windows.
The malicious files rely mainly on Python 3 for carrying out their tasks and are packaged as an ELF executable for Debian using PyInstaller.
“As the negligible detection rate on VirusTotal suggests, most endpoint agents designed for Windows systems don’t have signatures built to analyze ELF files, though they frequently detect non-WSL agents with similar functionality” – Black Lotus Labs
See Also: Complete Offensive Security and Ethical Hacking Course Less than a month ago, one of the malicious Linux files was detected by just one antivirus engine on VirusTotal. Refreshing the scan on another sample showed that it went completely undetected by the engines on the scanning service
https://www.bleepstatic.com/images/news/u/1100723/2021/WSLMalwareScan.jpg Python and PowerShellOne of the variants, written completely in Python 3, does not use any Windows API and seems to be the first attempt at a loader for WSL. It uses standard Python libraries, which makes it compatible with both Windows and Linux.
The researcher found in a test sample code that prints “Hello Sanya” in Russian. All but one file associated with this sample contained local IP addresses, while the public IP pointed to 185.63.90[.]137, already offline when the researchers tried to grab the payload.
See Also: Windows MSHTML zero-day defenses bypassed as new info emerges Another “ELF to Windows” loader variant relied on PowerShell to inject and execute the shellcode. One of these samples used Python to call functions that killed the running antivirus solution, established persistence on the system, and run a PowerShell script every 20 seconds.
Based on inconsistencies observed when analyzing several samples, the researchers believe that the code is still being developed, although in the final stage.
The limited visibility from the public IP address indicates activity restricted to targets in Ecuador and France between late June and early July.
Black Lotus Labs assesses that the WSL malware loaders are the work of a threat actor testing the method from a VPN or proxy node.
Microsoft introduced Windows Subsystem for Linux in April 2016. In September 2017, when WSL was freshly out of beta, researchers at Check Point demonstrated an attack they called Bashware where WSL could be abused to hide malicio[...]
New malware uses Windows Subsystem for Linux for stealthy attacks
https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png New malware uses Windows Subsystem for Linux for stealthy attacksPost Views: 821
Reading Time: 1 Minute
Security researchers have discovered malicious Linux binaries created for the Windows Subsystem for Linux (WSL), indicating that hackers are trying out new methods to compromise Windows machines.
The finding underlines that threat actors are exploring new methods of attack and are focusing their attention on WSL to evade detection. Using WSL to avoid detectionThe first samples targeting the WSL environment were discovered in early May and continued to appear every two to three weeks until August 22. They act as loaders for the WSL environment and enjoy very low detection on public file scanning services.
In a report today, security researchers at Lumen’s Black Lotus Labs say that the malicious files either have the payload embedded or fetch it from a remote server.
The next step is to inject the malware into a running process using Windows API calls, a technique that is neither new nor sophisticated.
From the small number of samples identified, only one came with a publicly routable IP address, hinting that threat actors are testing the use of WSL to install malware on Windows.
The malicious files rely mainly on Python 3 for carrying out their tasks and are packaged as an ELF executable for Debian using PyInstaller.
“As the negligible detection rate on VirusTotal suggests, most endpoint agents designed for Windows systems don’t have signatures built to analyze ELF files, though they frequently detect non-WSL agents with similar functionality” – Black Lotus Labs
See Also: Complete Offensive Security and Ethical Hacking Course Less than a month ago, one of the malicious Linux files was detected by just one antivirus engine on VirusTotal. Refreshing the scan on another sample showed that it went completely undetected by the engines on the scanning service
https://www.bleepstatic.com/images/news/u/1100723/2021/WSLMalwareScan.jpg Python and PowerShellOne of the variants, written completely in Python 3, does not use any Windows API and seems to be the first attempt at a loader for WSL. It uses standard Python libraries, which makes it compatible with both Windows and Linux.
The researcher found in a test sample code that prints “Hello Sanya” in Russian. All but one file associated with this sample contained local IP addresses, while the public IP pointed to 185.63.90[.]137, already offline when the researchers tried to grab the payload.
See Also: Windows MSHTML zero-day defenses bypassed as new info emerges Another “ELF to Windows” loader variant relied on PowerShell to inject and execute the shellcode. One of these samples used Python to call functions that killed the running antivirus solution, established persistence on the system, and run a PowerShell script every 20 seconds.
Based on inconsistencies observed when analyzing several samples, the researchers believe that the code is still being developed, although in the final stage.
The limited visibility from the public IP address indicates activity restricted to targets in Ecuador and France between late June and early July.
Black Lotus Labs assesses that the WSL malware loaders are the work of a threat actor testing the method from a VPN or proxy node.
Microsoft introduced Windows Subsystem for Linux in April 2016. In September 2017, when WSL was freshly out of beta, researchers at Check Point demonstrated an attack they called Bashware where WSL could be abused to hide malicio[...]
Hacking Articles Tips Tricks Videos Tutorials
Photo
Black Hat Ethical Hacking
Offensive Security Tool: SniperPhish
https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Offensive Security Tool: SniperPhishPost Views: 983 https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/BECOME-A-PATRON-AND-UNLOCK-EXCLUSIVE-VIDEOS-1.png Reading Time: 4 Minutes
Offensive Security Tool: SniperPhish GitHub Link
https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/116806917-ab0f8d80-ab62-11eb-8d34-962fdfe692a7.png SniperPhishSniperPhish by GemGeorge is a new phishing toolkit for pentester or security professionals to enhance user awareness by simulating real-world phishing attacks. SniperPhish helps to combine both phishing emails and phishing websites you created to centrally track user actions. The tool is designed in a view of performing professional phishing exercise and would be reminded to take prior permission from the targeted organization to avoid legal implications. Basic Requirements* Operating System: Windows or Linux. The macOS support is not verified.
* Web Server: Any web server supporting PHP with minimum v7.3 (well, you have Apache).
* Database: MySQL
See Also: New malware uses Windows Subsystem for Linux for stealthy attacks Installation1. Clone the repo or download the latest release
2. Put the contents in your web root folder
3. Open installation page http://localhost/install in your browser and follow the steps
4. After installation, SniperPhish will redirect to login page http://localhost/spear
Default login – Username: admin Password: sniperphish Updating/Upgrading1. 1st keep a backup of your existing /spear/db.php, /spear/uploads/, /spear/sniperhost/hf_files/ and /spear/sniperhost/ht_files/ folders.
2. Then delete all your current SnipePhish files and replace with the new SniperPhish. You may clone the repo/unzip latest SniperPhish release to the same location.
3. Now, re-add the files and folders you backed up at the 1st step to the same locations.
Above steps applies to the update of all SniperPhish v1.0+ to the latest release as of now. There are no changes to the database.
See Also: Hacking stories – The first botnet hijacker aka the Zombie King Main Features* Web tracker code generation – track your website visits and form submissions independently
* Tracks data from phishing website containg any number of pages
* Create and schedule Phishing mail campaigns
* Combine your phishing site with email campaign for centrally tracking
* An independent “Quick Tracker” module for quick tracking an email or web page visit
* Advance report generation – generate reports based on the tracking data you needed
* Mail campaigns with QR/Bar code support (both locally and remotely embedding in mails)
* Track phishing message replies
* Signed and encrypted mail support
* Advanced mail campaign customization – read receipt, TO/CC/BCC emails etc.
* Anti-flood control for emails
* Non-ASCII (Punycode transcription) support for email and domain
* Auto-renaming attachments on-the-fly Screenshotshttps://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/116777794-e9447880-aaa0-11eb-9697-af5f5617b279.png
https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/116777832-198c1700-aaa1-11eb-9f10-4a0b27c172d8.gif Creating Web-Email Campaign – Quick GuideIn short, we create web tracker ➡ Add the web tracker to the phishing website -> create mail campaign with a link pointing to the phishing website ➡ start mail campaign. Creating a web tracker:1. Design your website in your favorite programming language. Make sure you provided unique “id” and “name” value for HTML fields such as text field, checkbox etc.
2. Generate a web-tracker code Web Tracker ➡ New Tracker for your phishing site[...]
Offensive Security Tool: SniperPhish
https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Offensive Security Tool: SniperPhishPost Views: 983 https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/BECOME-A-PATRON-AND-UNLOCK-EXCLUSIVE-VIDEOS-1.png Reading Time: 4 Minutes
Offensive Security Tool: SniperPhish GitHub Link
https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/116806917-ab0f8d80-ab62-11eb-8d34-962fdfe692a7.png SniperPhishSniperPhish by GemGeorge is a new phishing toolkit for pentester or security professionals to enhance user awareness by simulating real-world phishing attacks. SniperPhish helps to combine both phishing emails and phishing websites you created to centrally track user actions. The tool is designed in a view of performing professional phishing exercise and would be reminded to take prior permission from the targeted organization to avoid legal implications. Basic Requirements* Operating System: Windows or Linux. The macOS support is not verified.
* Web Server: Any web server supporting PHP with minimum v7.3 (well, you have Apache).
* Database: MySQL
See Also: New malware uses Windows Subsystem for Linux for stealthy attacks Installation1. Clone the repo or download the latest release
2. Put the contents in your web root folder
3. Open installation page http://localhost/install in your browser and follow the steps
4. After installation, SniperPhish will redirect to login page http://localhost/spear
Default login – Username: admin Password: sniperphish Updating/Upgrading1. 1st keep a backup of your existing /spear/db.php, /spear/uploads/, /spear/sniperhost/hf_files/ and /spear/sniperhost/ht_files/ folders.
2. Then delete all your current SnipePhish files and replace with the new SniperPhish. You may clone the repo/unzip latest SniperPhish release to the same location.
3. Now, re-add the files and folders you backed up at the 1st step to the same locations.
Above steps applies to the update of all SniperPhish v1.0+ to the latest release as of now. There are no changes to the database.
See Also: Hacking stories – The first botnet hijacker aka the Zombie King Main Features* Web tracker code generation – track your website visits and form submissions independently
* Tracks data from phishing website containg any number of pages
* Create and schedule Phishing mail campaigns
* Combine your phishing site with email campaign for centrally tracking
* An independent “Quick Tracker” module for quick tracking an email or web page visit
* Advance report generation – generate reports based on the tracking data you needed
* Mail campaigns with QR/Bar code support (both locally and remotely embedding in mails)
* Track phishing message replies
* Signed and encrypted mail support
* Advanced mail campaign customization – read receipt, TO/CC/BCC emails etc.
* Anti-flood control for emails
* Non-ASCII (Punycode transcription) support for email and domain
* Auto-renaming attachments on-the-fly Screenshotshttps://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/116777794-e9447880-aaa0-11eb-9697-af5f5617b279.png
https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/116777832-198c1700-aaa1-11eb-9f10-4a0b27c172d8.gif Creating Web-Email Campaign – Quick GuideIn short, we create web tracker ➡ Add the web tracker to the phishing website -> create mail campaign with a link pointing to the phishing website ➡ start mail campaign. Creating a web tracker:1. Design your website in your favorite programming language. Make sure you provided unique “id” and “name” value for HTML fields such as text field, checkbox etc.
2. Generate a web-tracker code Web Tracker ➡ New Tracker for your phishing site[...]
Hacking Articles Tips Tricks Videos Tutorials
Photo
Black Hat Ethical Hacking
Anonymous leaks gigabytes of data from alt-right web host Epik
https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Anonymous leaks gigabytes of data from alt-right web host EpikPost Views: 488
Reading Time: 1 Minute
Hacktivist collective Anonymous claims to have obtained gigabytes of data from Epik, which provides domain name, hosting, and DNS services for a variety of clients.
These include the Texas GOP, Gab, Parler, and 8chan, among other right-wing sites. The stolen data has been released as a torrent. The hacktivist collective says that the data set, which is over 180GB in size, contains a “decade’s worth of data from the company.”
Anonymous says the data set is “all that’s needed to trace actual ownership and management of the fascist side of the Internet that has eluded researchers, activists, and, well, just about everybody.” If this information is correct, Epik’s customers’ data and identities could now fall into the hands of activists, researchers, and just about anyone curious enough to take a peek. Decades of Epik stuff, now in a torrent near youEpik is a domain registrar and web services provider known to serve right-wing clients, some of which have been turned down by more mainstream IT providers due to the objectionable and sometimes illicit content hosted by the clients.
Anonymous’ activities began with what the group calls “Operation Jane” after the Texas Heartbeat Act was signed into law this month. The restrictive abortion law allows private individuals, not necessarily government bodies or the police, to enforce the six-week abortion ban. According to the act, any Texas resident can bring a civil lawsuit against any person who performs or helps to facilitate an illegal abortion—and claim at least $10,000 in damages.
See Also: Complete Offensive Security and Ethical Hacking Course The note, shown below, was spotted by journalist Steven Monacelli, who has since been doxxed by an Epik supporter. https://cdn.arstechnica.net/wp-content/uploads/2021/09/anonymous-operation-jane-epik-note-640x794.jpg <figcaption Enlarge / A “press release” posted by Anonymous.
Among the data set are various SQL databases containing what appear to be customer records associated with every domain name hosted by Epik. Ars analyzed a small subset of the leaked data set, including what a source calls an Epik employee’s mailbox, which contains correspondence from Epik CEO Rob Monster.
Members of the whistleblower site, Distributed Denial of Secrets (DDoSecrets), have also made the data set available via alternate means for those unable to use torrents.
“We are not aware of any breach. We take the security of our clients’ data extremely seriously, and we are investigating the allegation,” an Epik representative told Ars.
See Also: Windows MSHTML zero-day defenses bypassed as new info emerges Hackers alter Epik’s knowledge base to mock company’s responseAnonymous also tampered with Epik’s knowledge base to mock the company’s denial of the breach.
“On September 13, 2021, a group of kids calling themselves ‘Anonymous’, whom we’ve never heard of, said they manage[d] to get a hold of, well, honestly, all our data, and then released it,” said the altered knowledge base, as seen in an archived copy. “They claim it included all the user data. All of it. All usernames, passwords, e-mails, support queries, breaching all anonymization service[s] we have. Of course it’s not true. We’re not so stupid we’d allow that to happen.” https://cdn.arstechnica.net/wp-content/uploads/2021/09/Screenshot-2021-09-15-at-10.22.20-640x620.png <figcaption Enlarge / Anonymous mocks Epik’s response by modify[...]
Anonymous leaks gigabytes of data from alt-right web host Epik
https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Anonymous leaks gigabytes of data from alt-right web host EpikPost Views: 488
Reading Time: 1 Minute
Hacktivist collective Anonymous claims to have obtained gigabytes of data from Epik, which provides domain name, hosting, and DNS services for a variety of clients.
These include the Texas GOP, Gab, Parler, and 8chan, among other right-wing sites. The stolen data has been released as a torrent. The hacktivist collective says that the data set, which is over 180GB in size, contains a “decade’s worth of data from the company.”
Anonymous says the data set is “all that’s needed to trace actual ownership and management of the fascist side of the Internet that has eluded researchers, activists, and, well, just about everybody.” If this information is correct, Epik’s customers’ data and identities could now fall into the hands of activists, researchers, and just about anyone curious enough to take a peek. Decades of Epik stuff, now in a torrent near youEpik is a domain registrar and web services provider known to serve right-wing clients, some of which have been turned down by more mainstream IT providers due to the objectionable and sometimes illicit content hosted by the clients.
Anonymous’ activities began with what the group calls “Operation Jane” after the Texas Heartbeat Act was signed into law this month. The restrictive abortion law allows private individuals, not necessarily government bodies or the police, to enforce the six-week abortion ban. According to the act, any Texas resident can bring a civil lawsuit against any person who performs or helps to facilitate an illegal abortion—and claim at least $10,000 in damages.
See Also: Complete Offensive Security and Ethical Hacking Course The note, shown below, was spotted by journalist Steven Monacelli, who has since been doxxed by an Epik supporter. https://cdn.arstechnica.net/wp-content/uploads/2021/09/anonymous-operation-jane-epik-note-640x794.jpg <figcaption Enlarge / A “press release” posted by Anonymous.
Among the data set are various SQL databases containing what appear to be customer records associated with every domain name hosted by Epik. Ars analyzed a small subset of the leaked data set, including what a source calls an Epik employee’s mailbox, which contains correspondence from Epik CEO Rob Monster.
Members of the whistleblower site, Distributed Denial of Secrets (DDoSecrets), have also made the data set available via alternate means for those unable to use torrents.
“We are not aware of any breach. We take the security of our clients’ data extremely seriously, and we are investigating the allegation,” an Epik representative told Ars.
See Also: Windows MSHTML zero-day defenses bypassed as new info emerges Hackers alter Epik’s knowledge base to mock company’s responseAnonymous also tampered with Epik’s knowledge base to mock the company’s denial of the breach.
“On September 13, 2021, a group of kids calling themselves ‘Anonymous’, whom we’ve never heard of, said they manage[d] to get a hold of, well, honestly, all our data, and then released it,” said the altered knowledge base, as seen in an archived copy. “They claim it included all the user data. All of it. All usernames, passwords, e-mails, support queries, breaching all anonymization service[s] we have. Of course it’s not true. We’re not so stupid we’d allow that to happen.” https://cdn.arstechnica.net/wp-content/uploads/2021/09/Screenshot-2021-09-15-at-10.22.20-640x620.png <figcaption Enlarge / Anonymous mocks Epik’s response by modify[...]
Hacking Articles Tips Tricks Videos Tutorials
Black Hat Ethical Hacking Azure Zero-Day Flaws Highlight Lurking Supply-Chain Risk https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Azure Zero-Day Flaws Highlight Lurking Supply-Chain RiskPost Views: 107 Reading Time:…
code on target machines or escalate privileges,” he wrote. ‘Textbook RCE Vulnerability”CVE-2021-38647, with a 9.8 severity rating, is the most serious of the flaws, allowing for RCE. However, for it to be exploited, the Azure product using OMI would have to be one, such as Configuration Management, that exposes an HTTPS port, or port 5986, for interacting with OMI.
“That’s what makes RCE possible,” Ohfeld explained. “Note that most Azure services that use OMI deploy it without exposing the HTTPS port.”
Calling the bug “a textbook RCE vulnerability that you would expect to see in the 90s” not in 2021, the flaw can expose millions of endpoints because “an attacker could use a single packet to become root on a remote machine by simply removing the authentication header,” Ohfeld wrote.
“Thanks to the combination of a simple conditional statement coding mistake and an uninitialized auth struct, any request without an Authorization header has its privileges default to uid=0, gid=0, which is root,” he explained.
In situations where the OMI ports are accessible to the internet to allow for remote management, threat actors can use the vulnerability co-obtain initial access to a target Azure environment and then move laterally within it, Ohfeld added.
“An exposed HTTPS port is the holy grail for malicious actors,” he observed. “With one simple exploit they can get access to new targets, execute commands at the highest privileges and possibly spread to new target machines.”
The other three flaws—with severity ratings that range from 7.1 to 7.8—can be used as part of attack chains once attackers gain initial low-privileged access to their targets, Ohfeld added.
See Also: Offensive Security Tool: SniperPhish Threat Discovery and MitigationsWiz researchers reported the four vulnerabilities to Microsoft through the responsible disclosure process; the company patched them as of Tuesday, researchers said.
Upgrading OMI and thus patch installation happens through the parent Azure service that installed it, they added. “However, we urge customers to verify that their environment is indeed patched and they are running the latest version of OMI (Version 1.6.8.1),” Ohfeld wrote.
Different Azure services have different port numbers, Microsoft noted in its advisory for CVE-2021-38647. However, for customers who want to check that their Azure Linux Node does not have an exposed port, they should look for the command ‘netstat -an | grep <port-number‘ on most Linux distributions, which will indicate if any processes are listening on an open port, the company said.
Source: threatpost.com (Click Link)Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/Anonymous-90x90.png Anonymous leaks gigabytes of data from alt-right web host Epik3 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/ezgif.com-gif-maker-90x90.jpg New malware uses Windows Subsystem for Linux for stealthy attacks3 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/Google-Chrome-Browser-90x90.jpg Pair of Google Chrome Zero-Day Bugs Actively Exploited4 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/banner-2021.3-release-90x90.jpg Kali Linux 2021.3 released: Kali NetHunter on a smartwatch, wider OpenSSL compatibility, new tools5 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/microsoft-exploit-90x90.jpg Microsoft Patches Actively Exploited Windows Zero-Day Bug5 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/Apple-marketing-communications-mix-90x90.jpg Apple Issues Emergency Fix for NSO Zero-Click Zero Day6 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/zeroday-90x90.png Windows MSHTML zero-day exploits shared on hacking forums1 week ago
* https://www.blackhatethicalhackin[...]
“That’s what makes RCE possible,” Ohfeld explained. “Note that most Azure services that use OMI deploy it without exposing the HTTPS port.”
Calling the bug “a textbook RCE vulnerability that you would expect to see in the 90s” not in 2021, the flaw can expose millions of endpoints because “an attacker could use a single packet to become root on a remote machine by simply removing the authentication header,” Ohfeld wrote.
“Thanks to the combination of a simple conditional statement coding mistake and an uninitialized auth struct, any request without an Authorization header has its privileges default to uid=0, gid=0, which is root,” he explained.
In situations where the OMI ports are accessible to the internet to allow for remote management, threat actors can use the vulnerability co-obtain initial access to a target Azure environment and then move laterally within it, Ohfeld added.
“An exposed HTTPS port is the holy grail for malicious actors,” he observed. “With one simple exploit they can get access to new targets, execute commands at the highest privileges and possibly spread to new target machines.”
The other three flaws—with severity ratings that range from 7.1 to 7.8—can be used as part of attack chains once attackers gain initial low-privileged access to their targets, Ohfeld added.
See Also: Offensive Security Tool: SniperPhish Threat Discovery and MitigationsWiz researchers reported the four vulnerabilities to Microsoft through the responsible disclosure process; the company patched them as of Tuesday, researchers said.
Upgrading OMI and thus patch installation happens through the parent Azure service that installed it, they added. “However, we urge customers to verify that their environment is indeed patched and they are running the latest version of OMI (Version 1.6.8.1),” Ohfeld wrote.
Different Azure services have different port numbers, Microsoft noted in its advisory for CVE-2021-38647. However, for customers who want to check that their Azure Linux Node does not have an exposed port, they should look for the command ‘netstat -an | grep <port-number‘ on most Linux distributions, which will indicate if any processes are listening on an open port, the company said.
Source: threatpost.com (Click Link)Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/Anonymous-90x90.png Anonymous leaks gigabytes of data from alt-right web host Epik3 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/ezgif.com-gif-maker-90x90.jpg New malware uses Windows Subsystem for Linux for stealthy attacks3 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/Google-Chrome-Browser-90x90.jpg Pair of Google Chrome Zero-Day Bugs Actively Exploited4 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/banner-2021.3-release-90x90.jpg Kali Linux 2021.3 released: Kali NetHunter on a smartwatch, wider OpenSSL compatibility, new tools5 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/microsoft-exploit-90x90.jpg Microsoft Patches Actively Exploited Windows Zero-Day Bug5 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/Apple-marketing-communications-mix-90x90.jpg Apple Issues Emergency Fix for NSO Zero-Click Zero Day6 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/zeroday-90x90.png Windows MSHTML zero-day exploits shared on hacking forums1 week ago
* https://www.blackhatethicalhackin[...]