hacking: security in practice
Manufacturer Leaving WiFi Key on New PC?

Hey,

I am not sure if this is the right forum for this--apologize if not--but I'm not sure what to make of this question I was asked.

A friend just got a new computer this week from a company we've all heard of before. She has only had it for a couple of days. While trying to remember the password to a wifi hotspot she connected to, she entered netsh wlan show profile (or whatever the command is) to see the name of the hotspot so she could do a key=clear.

After running the command, she noticed there was a profile of the name of the company. After running key=clear, it revealed that profile had a 9 digit key.

Questions:

1) Is this a normal thing? I've never noticed it before on any of my devices.
2) Are there any other security concerns (hardware or otherwise) that should be audited as a result of this

3) What--if any--use would this information be to anyone

​

That's it. Thanks for reading, and looking onward to reading the comments

submitted by /u/5kidmark2
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Host Header Injection On Password Reset Functionality An Easy #P2
https://medium.com/@tameemkhalid786/host-header-injection-on-password-reset-functionality-an-easy-p2-5c6263c2e3d4?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

This article is about a vulnerability I was able to find in the BugCrowd private program.Continue reading on Medium » (https://medium.com/@tameemkhalid786/host-header-injection-on-password-reset-functionality-an-easy-p2-5c6263c2e3d4?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

What is the Bug bounty ?
https://medium.com/@i.vachot/what-is-the-bug-bounty-b0482a46f061?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Often translated into French as “prime au bogue” or “bounty for the detected flaw”, the bug bounty appeared in the 90s…Continue reading on Medium » (https://medium.com/@i.vachot/what-is-the-bug-bounty-b0482a46f061?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Alan post-exploitation framework v4.0 released
https://www.reddit.com/r/redteamsec/comments/pwd7ey/alan_postexploitation_framework_v40_released/

submitted by /u/aparata_s4tan (https://www.reddit.com/user/aparata_s4tan)
[link] (http://antonioparata.blogspot.com/2021/09/alan-post-exploitation-framework-v40.html) [comments] (https://www.reddit.com/r/redteamsec/comments/pwd7ey/alan_postexploitation_framework_v40_released/)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Windows Threat Hunting : Processes of Interest (Part 2)

https://cdn-images-1.medium.com/max/1920/1*oBrhQK9GA3-W86qmeGcQYg.jpeg
A list of common Windows processes and how they can be used maliciously by hackers

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
CVSS

https://cdn-images-1.medium.com/max/662/1*Ew5xZ4ttA2lPwsEX2lmgpg.png
Common Vulnerability Scoring System

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Cronos — HackTheBox WriteUp

https://cdn-images-1.medium.com/max/936/1*_qmPkudKwlr9tS8L_u6fIw.png
Hello and welcome to my article about Cronos machine in HTB.
My name is Idan and I am a penetration tester / red teamer.
Also, I am Linux…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Stealthier zloader variant spreading via pretend teamviewer transfer ads!!

https://cdn-images-1.medium.com/max/768/0*UpauvKMAupyR6WqC
Author-Prabhjot Kaur

Continue reading on rootissh »

___________________________
@hacking_Attack
@Hacking_Video

Black Hat Ethical Hacking
Hackers exploiting critical VMware vCenter CVE-2021-22005 bug

https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Hackers exploiting critical VMware vCenter CVE-2021-22005 bugPost Views: 172
Reading Time: 1 Minute
Exploit code that could be used for remote code execution on VMware vCenter Server vulnerable to CVE-2021-22005 has been released today and attackers are already using it.
Publicly disclosed earlier this week when VMware also addressed it, the bug comes with a critical severity rating of 9.8 and a strong recommendation to install the available patch. Attacks have startedThe vulnerability affects machines running vCenter Server versions 6.7, and 7.0. Given the severity of the issue, VMware urges administrators to act immediately under the assumption that an adversary is already on the network, ready to take advantage.

Exposed vCenter servers are currently being targeted from various countries over multiple ports, threat intelligence company Bad Packets shared with BleepingComputer today; VMware confirmed this in an update to their security advisory for CVE-2021-22005, an arbitrary file upload vulnerability:
“VMware has confirmed reports that CVE-2021-22005 is being exploited in the wild”
Data recorded by Bad Packets shows attacks starting to hit their VMware honeypots at 16:21 (GMT) originating from Canada, the U.S., Romania, the Netherlands, China, and Singapore.
See Also: Complete Offensive Security and Ethical Hacking Course
Signs of these attacks coming were seen shortly after VMware disclosed the security issue and released a patch. Just hours later, Bad Packets saw scanning activity targeting CVE-2021-22005. The spark for the exploitTroy Mursch, chief research officer at Bad Packets, told BleepingComputer that the attacks he saw against the company honeypots used code based on an incomplete exploit released earlier today by Vietnamese security researcher Jang.

Jang published technical notes for CVE-2021-22005 based on the workaround and the patch from VMware. The details are enough for experienced developers to create a working exploit that allows remote code execution with root privileges, the researcher told BleepingComputer.

At the end of the post, Jang also provides a link to his PoC version for CVE-2021-22005. It is not a fully functional variant, though, intentionally so to prevent less skilled threat actors from using it in attacks directly.

The researcher told us that in its current form the code does no harm because it is missing the important part leading to remote code execution.

An adversary would have to put in some effort to turn it into a full-fledged exploit but they should be able to create an exploit that is 100% reliable.
See Also: Windows MSHTML zero-day defenses bypassed as new info emerges Penetration tester and Synack Envoy Nicolas Krassas tested the code and confirmed that it needs some modifications to work properly. But it does prove that CVE-2021-22005 can be used to create a backdoor on a vulnerable system. Attacks were imminentJang built a fully functional exploit and tested it in a controlled environment. He said that it works just fine, obtaining remote code execution before detection can catch it.

Currently, search engines for internet-connected devices show thousands of VMware vCenter Server instances exposed to the public internet. Shodan retrieved more than 5,000 machines while a rough search on Censys shows around 6,800.
https://www.bleepstatic.com/images/news/u/1100723/2021/Vulnerabilities/censys_vmware-1-1024x603.png
___________________________
@hacking_Attack
@Hacking_Video

otes that 3,264 of these internet-facing hosts are “are potentially vulnerable” and 436 are patched.

Still the number of potential targets is quite high and given the threat actors’ early interest in scanning for vulnerable machines it is easy to conclude that attacks were imminent.

Talking to BleepingComputer about his incomplete exploit, Jang said that an average-skilled adversary should need about an hour to build a working, reliable version. He strongly advises administrators to patch their systems to defend against attacks leveraging CVE-2021-22005.
See Also: Offensive Security Tool: Discover The U.S. Cybersecurity and Infrastructure Seurity Agency (CISA) urges critical infrastructrure organizations with vulnerable vCenter deployments to apply the updates or the termporary workaround from VMware.

A post from Censys explains that a remote code execution exploit is not difficult to create based on the technical details already published in the public space:
“The cURL-based exploit in blog post does not demonstrate direct code execution, although a savvy reader can use the information in this post to achieve this goal with some knowledge of the Linux operating system. Censys has decided to release this detail, given that opportunistic scanning is already taking place, and VMware’s workaround mentions the specific vulnerable endpoint.”
The researcher also published a video to demonstrate how an attacker could exploit the vulnerability:
Update [September 24, 2021 – 17:41 EST]: Shortly after publishing, BleepingComputer learned that hackers have started to exploit CVE-2021-22005 using code released by security researcher Jang. We have updated the article with information about the attacks.
Source: www.bleepingcomputer.com (Click Link)Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/malware-800x449-1-90x90.jpg Malware devs trick Windows validation with malformed certs3 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/ezgif.com-gif-maker-1-1-90x90.jpg Unpatched Apple Zero-Day in macOS Finder Allows Code Execution4 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/ezgif.com-gif-maker-1-90x90.jpg New macOS zero-day bug lets attackers run commands remotely5 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/Windows-attack-90x90.jpg Hacked sites push TeamViewer using fake expired certificate alert6 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/hackers-waging-living-off-land-attacks-on-azure-showcase_image-7-a-16158-90x90.jpg Azure Zero-Day Flaws Highlight Lurking Supply-Chain Risk1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/Anonymous-90x90.png Anonymous leaks gigabytes of data from alt-right web host Epik1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/ezgif.com-gif-maker-90x90.jpg New malware uses Windows Subsystem for Linux for stealthy attacks1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/Google-Chrome-Browser-90x90.jpg Pair of Google Chrome Zero-Day Bugs Actively Exploited2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/banner-2021.3-release-90x90.jpg Kali Linux 2021.3 released: Kali NetHunter on a smartwatch, wider OpenSSL compatibility, new tools2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/microsoft-exploit-90x90.jpg Microsoft Patches Actively Exploited Windows Zero-Day Bug2 weeks ago
The post Hackers exploiting critical VMware vCenter CVE-2021-22005 bug first appeared on Black Hat Ethical Hacking.

___________________________
@hacking_Attack
@Hacking_Video

Host Header Injection On Password Reset Functionality An Easy #P2

This article is about a vulnerability I was able to find in the BugCrowd private program.Continue reading on Medium »
Read more...

What is the Bug bounty ?

Often translated into French as “prime au bogue” or “bounty for the detected flaw”, the bug bounty appeared in the 90s…Continue reading on Medium »
Read more...