hacking: security in practice
Is getting a VPN really worth it?

I’m confused by advertisements and people praising VPN services, but then hearing tech experts trashing some VPNs. What do you guys think?

submitted by /u/franfonse
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Exploit code for three iOS 15 zero-day flaws published

https://external-preview.redd.it/Nh8a6mOauM7Jy5J9P7GAEJSXUfUqDGH5Y0JEXtOzz0o.jpg?width=640&crop=smart&auto=webp&s=b1ab7cc254c327e04844f59b23ab11c2a234f40b submitted by /u/okhotspy
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Manufacturer Leaving WiFi Key on New PC?

Hey,

I am not sure if this is the right forum for this--apologize if not--but I'm not sure what to make of this question I was asked.

A friend just got a new computer this week from a company we've all heard of before. She has only had it for a couple of days. While trying to remember the password to a wifi hotspot she connected to, she entered netsh wlan show profile (or whatever the command is) to see the name of the hotspot so she could do a key=clear.

After running the command, she noticed there was a profile of the name of the company. After running key=clear, it revealed that profile had a 9 digit key.

Questions:

1) Is this a normal thing? I've never noticed it before on any of my devices.
2) Are there any other security concerns (hardware or otherwise) that should be audited as a result of this

3) What--if any--use would this information be to anyone

​

That's it. Thanks for reading, and looking onward to reading the comments

submitted by /u/5kidmark2
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Host Header Injection On Password Reset Functionality An Easy #P2
https://medium.com/@tameemkhalid786/host-header-injection-on-password-reset-functionality-an-easy-p2-5c6263c2e3d4?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

This article is about a vulnerability I was able to find in the BugCrowd private program.Continue reading on Medium » (https://medium.com/@tameemkhalid786/host-header-injection-on-password-reset-functionality-an-easy-p2-5c6263c2e3d4?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

What is the Bug bounty ?
https://medium.com/@i.vachot/what-is-the-bug-bounty-b0482a46f061?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Often translated into French as “prime au bogue” or “bounty for the detected flaw”, the bug bounty appeared in the 90s…Continue reading on Medium » (https://medium.com/@i.vachot/what-is-the-bug-bounty-b0482a46f061?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Alan post-exploitation framework v4.0 released
https://www.reddit.com/r/redteamsec/comments/pwd7ey/alan_postexploitation_framework_v40_released/

submitted by /u/aparata_s4tan (https://www.reddit.com/user/aparata_s4tan)
[link] (http://antonioparata.blogspot.com/2021/09/alan-post-exploitation-framework-v40.html) [comments] (https://www.reddit.com/r/redteamsec/comments/pwd7ey/alan_postexploitation_framework_v40_released/)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Windows Threat Hunting : Processes of Interest (Part 2)

https://cdn-images-1.medium.com/max/1920/1*oBrhQK9GA3-W86qmeGcQYg.jpeg
A list of common Windows processes and how they can be used maliciously by hackers

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
CVSS

https://cdn-images-1.medium.com/max/662/1*Ew5xZ4ttA2lPwsEX2lmgpg.png
Common Vulnerability Scoring System

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Cronos — HackTheBox WriteUp

https://cdn-images-1.medium.com/max/936/1*_qmPkudKwlr9tS8L_u6fIw.png
Hello and welcome to my article about Cronos machine in HTB.
My name is Idan and I am a penetration tester / red teamer.
Also, I am Linux…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Stealthier zloader variant spreading via pretend teamviewer transfer ads!!

https://cdn-images-1.medium.com/max/768/0*UpauvKMAupyR6WqC
Author-Prabhjot Kaur

Continue reading on rootissh »

___________________________
@hacking_Attack
@Hacking_Video

Black Hat Ethical Hacking
Hackers exploiting critical VMware vCenter CVE-2021-22005 bug

https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Hackers exploiting critical VMware vCenter CVE-2021-22005 bugPost Views: 172
Reading Time: 1 Minute
Exploit code that could be used for remote code execution on VMware vCenter Server vulnerable to CVE-2021-22005 has been released today and attackers are already using it.
Publicly disclosed earlier this week when VMware also addressed it, the bug comes with a critical severity rating of 9.8 and a strong recommendation to install the available patch. Attacks have startedThe vulnerability affects machines running vCenter Server versions 6.7, and 7.0. Given the severity of the issue, VMware urges administrators to act immediately under the assumption that an adversary is already on the network, ready to take advantage.

Exposed vCenter servers are currently being targeted from various countries over multiple ports, threat intelligence company Bad Packets shared with BleepingComputer today; VMware confirmed this in an update to their security advisory for CVE-2021-22005, an arbitrary file upload vulnerability:
“VMware has confirmed reports that CVE-2021-22005 is being exploited in the wild”
Data recorded by Bad Packets shows attacks starting to hit their VMware honeypots at 16:21 (GMT) originating from Canada, the U.S., Romania, the Netherlands, China, and Singapore.
See Also: Complete Offensive Security and Ethical Hacking Course
Signs of these attacks coming were seen shortly after VMware disclosed the security issue and released a patch. Just hours later, Bad Packets saw scanning activity targeting CVE-2021-22005. The spark for the exploitTroy Mursch, chief research officer at Bad Packets, told BleepingComputer that the attacks he saw against the company honeypots used code based on an incomplete exploit released earlier today by Vietnamese security researcher Jang.

Jang published technical notes for CVE-2021-22005 based on the workaround and the patch from VMware. The details are enough for experienced developers to create a working exploit that allows remote code execution with root privileges, the researcher told BleepingComputer.

At the end of the post, Jang also provides a link to his PoC version for CVE-2021-22005. It is not a fully functional variant, though, intentionally so to prevent less skilled threat actors from using it in attacks directly.

The researcher told us that in its current form the code does no harm because it is missing the important part leading to remote code execution.

An adversary would have to put in some effort to turn it into a full-fledged exploit but they should be able to create an exploit that is 100% reliable.
See Also: Windows MSHTML zero-day defenses bypassed as new info emerges Penetration tester and Synack Envoy Nicolas Krassas tested the code and confirmed that it needs some modifications to work properly. But it does prove that CVE-2021-22005 can be used to create a backdoor on a vulnerable system. Attacks were imminentJang built a fully functional exploit and tested it in a controlled environment. He said that it works just fine, obtaining remote code execution before detection can catch it.

Currently, search engines for internet-connected devices show thousands of VMware vCenter Server instances exposed to the public internet. Shodan retrieved more than 5,000 machines while a rough search on Censys shows around 6,800.
https://www.bleepstatic.com/images/news/u/1100723/2021/Vulnerabilities/censys_vmware-1-1024x603.png
___________________________
@hacking_Attack
@Hacking_Video