Dark Reading: Attacks/Breaches
Elizabeth Kolade on How AI Is a 'Double-Edged Sword' & the Challenge of Harmonizing Cyber and Physical Security

An analyst at the Defence Space Administration, Nigeria, Elizabeth Kolade was named in the list of 'One to watch: Security' for the IFSEC Global Influencers in Security and Fire 2021. Julian Hall put some quickfire questions to her on the trends and issues she's witnessing in the sector.

Dark Reading: Attacks/Breaches
archTIS Acquires Cipherpoint Technology Assets and Customers

Accretive asset purchase adds to archTIS’ rapidly growing annual recurring revenue, global distribution and industry-leading intellectual property.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
5 Ways to Become a Better Cyber-Threat Exterminator

Tactical threat intelligence feeds directly into security operations and helps tighten existing security controls and improve incident response times.

Dark Reading: Attacks/Breaches
10 Threat Trends in DNS Security

Cisco Security examines Cisco Umbrella data for trends in malicious DNS activity during 2020.

Dark Reading: Attacks/Breaches
CTO 2.0: Maiffret Rejoins BeyondTrust

Hacker-turned-entrepreneur Marc Maiffret reflects on his past few years "embedded" with enterprise security teams and how it has shaped his security view.

Dark Reading: Attacks/Breaches
Apple Patches Zero-Days in iOS, Known Vuln in macOS

One of the iOS vulnerabilities was discovered by Citizen Lab; the Google Threat Analysis Group reported iOS and macOS flaws.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
BlackFog ARM 64 Edition Provides Anti Data Exfiltration Across New Patforms

New BlackFog ARM 64 edition maximizes performance, battery life, and data security.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
FamousSparrow APT Group Flocks to Hotels, Governments, Businesses

The cyber espionage group has a custom backdoor and has added the ProxyLogon Microsoft Exchange flaw to its toolkit.

Dark Reading: Attacks/Breaches
Supply Chain and Ransomware Threats Drove 60% Increase in Global Cyber Intelligence Sharing Among Financial Firms

AMEX, Banco Falabella, IAG, and UBS win global award for annual cyber intelligence sharing efforts.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
SAIC Appoints Kevin Brown as Chief Information Security Officer

Industry leader with decades of information security experience manages SAIC’s security strategy and oversees critical cybersecurity operations.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Primer: Microsoft Active Directory Security for AD Admins

Nearly all AD environments are vulnerable to identity attack paths -- a powerful, widespread, and difficult-to-detect attack technique. But we didn't say impossible. Here's how admins can stop them.

Dark Reading: Attacks/Breaches
Google Spots New Technique to Sneak Malware Past Detection Tools

The operator behind OpenSUpdater is using a new way to sneak adware and other malware past security tools.

Dark Reading: Attacks/Breaches
Our Eye Is on the SPARROW

How unauthorized users can exploit wireless infrastructures for covert communication.

Dark Reading: Attacks/Breaches
TangleBot Campaign Underscores SMS Threat

The attack targets Android devices and starts with a malicious SMS message that aims to bring malware onto compromised devices.

Dark Reading: Attacks/Breaches
Endpoint Still a Prime Target for Attack

A vast majority of security professionals surveyed think any exploit will start with the endpoint.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Contrast Application Security Platform Scales to Support OWASP Risks

Contrast's platform detects and prevents against OWASP Top Ten risks from development to production with out-of-the-box policy rules and automated compliance reporting.

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
targetedKerberoast : Kerberoast With ACL Abuse Capabilities

targetedKerberoast is a Python script that can, like many others (e.g. GetUserSPNs.py), print “kerberoast” hashes for user accounts that have a SPN set. This tool brings the following additional feature: for each user without SPNs, it tries to set one (abuse of a write permission on the servicePrincipalNameattribute), print the “kerberoast” hash, and delete the temporary SPN set for that operation. This is called targeted Kerberoasting. This tool can be used against all users of a domain, or supplied in a list, or one user supplied in the CLI.

More information about this attack

* The Hacker Recipes – Kerberoast
* The Hacker Recipes – Targeted Kerberoasting

Usage

This tool supports the following authentications

* (NTLM) Cleartext password
* (NTLM) Pass-the-hash
* (Kerberos) Cleartext password
* (Kerberos) Pass-the-key / Overpass-the-hash
* (Kerberos) Pass-the-cache (type of Pass-the-ticket)

Among other things, targetedKerberoast supports multi-level verbosity, just append -v, -vv, … to the command https://s.w.org/images/core/emoji/13.1.0/72x72/1f642.png

usage: targetedKerberoast.py [-h] [-v] [-q] [-D TARGET_DOMAIN] [-U USERS_FILE] [–request-user username] [-o OUTPUT_FILE] [–use-ldaps] [–only-abuse] [–no-abuse] [–dc-ip ip address] [-d DOMAIN] [-u USER]
[-k] [–no-pass | -p PASSWORD | -H [LMHASH:]NTHASH | –aes-key hex key]
Queries target domain for SPNs that are running under a user account and operate targeted Kerberoasting
optional arguments:
-h, –help show this help message and exit
-v, –verbose verbosity level (-v for verbose, -vv for debug)
-q, –quiet show no information at all
-D TARGET_DOMAIN, –target-domain TARGET_DOMAIN
Domain to query/request if different than the domain of the user. Allows for Kerberoasting across trusts.
-U USERS_FILE, –users-file USERS_FILE
File with user per line to test
–request-user username
Requests TGS for the SPN associated to the user specified (just the username, no domain needed)
-o OUTPUT_FILE, –output-file OUTPUT_FILE
Output filename to write ciphers in JtR/hashcat format
–use-ldaps Use LDAPS instead of LDAP
–only-abuse Ignore accounts that already have an SPN and focus on targeted Kerberoasting
–no-abuse Don’t attempt targeted Kerberoasting
authentication & connection:
–dc-ip ip address IP Address of the domain controller or KDC (Key Distribution Center) for Kerberos. If omitted it will use the domain part (FQDN) specified in the identity parameter
-d DOMAIN, –domain DOMAIN
(FQDN) domain to authenticate to
-u USER, –user USER user to authenticate with
secrets:
-k, –kerberos Use Kerberos authentication. Grabs credentials from .ccache file (KRB5CCNAME) based on target parameters. If valid credentials cannot be found, it will use the ones specified in the
command line
–no-pass don’t ask for password (useful for -k)
-p PASSWORD, –password PASSWORD
password to authenticate with
-H [LMHASH:]NTHASH, –hashes [LMHASH:]NTHASH
NT/LM hashes, format is LMhash:NThash
–aes-key hex key AES key to use for Kerberos Authentication (128 or 256 bits)

Below is an example what the tool can do.
https://1.bp.blogspot.com/-mNigUfsg-l0/YUGFwEsbFwI/AAAAAAAAK2I/0Uq3AoxuuZkGMuhjljbkM3PgWmWhURrqwCLcBGAsYHQ/s1906/example.png

Download

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Peirates : Kubernetes Penetration Testing Tool

Peirates, a Kubernetes penetration tool, enables an attacker to escalate privilege and pivot through a Kubernetes cluster. It automates known techniques to steal and collect service accounts, obtain further code execution, and gain control of the cluster.

Where Do I Run Peirates?

You run Peirates from a container running on Kubernetes.

Does Peirates Attack A Kubernetes Cluster?

Yes, it absolutely does. Talk to your lawyer and the cluster owners before using this tool in a Kubernetes cluster.

Who Creates Peirates?

InGuardians’ CTO Jay Beale first conceived of Peirates and put together a group of InGuardians developers to create it with him, including Faith Alderson, Adam Crompton and Dave Mayer. Faith convinced us to all learn Golang, so she could implement the tool’s use of the kubectl library from the Kubernetes project. Adam persuaded the group to use a highly-interactive user interface. Dave brought contagious enthusiasm. Together, these four developers implemented attacks and began releasing this tool that we use on our penetration tests.

Modules

Building And Running

If you just want the peirates binary to start attacking things, grab the latest release from the releases page.

However, if you want to build from source, read on!

Get peirates

go get -v “github.com/inguardians/peirates”

Get libary sources if you haven’t already (Warning: this will take almost a gig of space because it needs the whole kubernetes repository)

go get -v “k8s.io/kubectl/pkg/cmd” “github.com/aws/aws-sdk-go”

Build the executable

cd $GOPATH/github.com/inguardians/peirates
./build.sh

This will generate an executable file named peiratesin the same directory.
Download

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
how to compile .afa, .qnd and .flat ?

i'm searching for a way to recompile .flat, .qnd and .afa files, if somebody has an idea on how to do that please hep me

submitted by /u/audaidai
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video