Hacking on Medium
How to start information gathering?

https://cdn-images-1.medium.com/max/1370/0*zHOY-CztIjNM5mHe
Control is an Illusion is what I believe in and it’s the showtime now. Yes! today we’ll move towards this quote by understanding how to do…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Black Hat Ethical Hacking
FinFisher malware hijacks Windows Boot Manager with UEFI bootkit

https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png FinFisher malware hijacks Windows Boot Manager with UEFI bootkitPost Views: 156
Reading Time: 1 Minute
Commercially developed FinFisher malware now can infect Windows devices using a UEFI bootkit that it injects in the Windows Boot Manager. FinFisher (also known as FinSpy and Wingbird) is a surveillance solution developed by Gamma Group that also comes with malware-like capabilities often found in spyware strains.

Its developer says it’s sold exclusively to government agencies and law enforcement worldwide, but cybersecurity firms have also detected it while being delivered via spearphishing campaigns and the infrastructure of Internet Service Providers (ISPs). Evasiveness and persistence powerhouse “During our research, we found a UEFI bootkit that was loading FinSpy. All machines infected with the UEFI bootkit had the Windows Boot Manager (bootmgfw.efi) replaced with a malicious one,” Kasperksy researchers revealed today.

“This method of infection allowed the attackers to install a bootkit without the need to bypass firmware security checks. UEFI infections are very rare and generally hard to execute, and they stand out due to their evasiveness and persistence.”

UEFI (Unified Extensible Firmware Interface) firmware allows for highly persistent bootkit malware as it’s installed within SPI flash storage soldered to computers’ motherboard making it impossible to get rid of via hard drive replacement or even OS re-installation.

Bootkits are malicious code planted in the firmware invisible to security solutions within the operating system since it’s designed to load before everything else, in the initial stage of a device’s booting sequence.
See Also: Complete Offensive Security and Ethical Hacking Course
They provide attackers with control over an operating systems’ boot process and make it possible to sabotage OS defenses bypassing the Secure Boot mechanism depending on the system’s boot security mode (enabling “full boot” or “thorough boot” mod would block the malware as the NSA explains).

Publicly documented attacks and malware using bootkits in the wild are extremely rare — Lojax used by the Russian-backed APT28 hacker group, MosaicRegressor was deployed by Chinese-speaking hackers, TrickBot’s TrickBoot module, and Moriya which Chinese-speaking threat actors likely used for espionage since 2018.

“While in this case the attackers did not infect the UEFI firmware itself, but its next boot stage, the attack was particularly stealthy, as the malicious module was installed on a separate partition and could control the boot process of the infected machine,” the researchers added.

Older computers that don’t come with UEFI support were infected using a similar tactic, through the MBR (Master Boot Record) with a bootkit first detected in 2014.
See Also: Hackers exploiting critical VMware vCenter CVE-2021-22005 bug Advanced obfuscation and anti-analysis measuresFor other malware samples used in the attacks analyzed by Kaspersky, the spyware’s developers also used four layers of obfuscation and anti-analysis measures designed to make FinFisher one of the “hardest-to-detect spywares to date.”

Their efforts were highly effective since the malware samples could evade almost any detection attempt and were virtually impossible to analyze (every sample spotted by Kaspersky required “overwhelming” amounts of work to unscramble).

“The amount of work put into making FinFisher not accessible to security researchers is particularly worrying and somewhat impress[...]

___________________________
@hacking_Attack
@Hacking_Video

ive,” added Igor Kuznetsov, principal security researcher at Kaspersky’s Global Research and Analysis Team (GReAT).
See Also: Offensive Security Tool: Discover
“It seems like the developers put at least as much work into obfuscation and anti-analysis measures as in the Trojan itself. As a result, its capabilities to evade any detection and analysis make this spyware particularly hard to track and detect.”

You can find further details and indicators of compromise (IOCs) related to FinFisher’s Windows, Linux, and macOS infection vectors at the end of Kaspersky’s report.
Source: www.bleepingcomputer.com (Click Link)Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/computer-3923644_1920_1627303851339_1632808464296-90x90.jpg New malware steals Steam, Epic Games Store, and EA Origin accounts1 day ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/VMware-90x90.jpg Hackers exploiting critical VMware vCenter CVE-2021-22005 bug2 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/malware-800x449-1-90x90.jpg Malware devs trick Windows validation with malformed certs5 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/ezgif.com-gif-maker-1-1-90x90.jpg Unpatched Apple Zero-Day in macOS Finder Allows Code Execution6 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/ezgif.com-gif-maker-1-90x90.jpg New macOS zero-day bug lets attackers run commands remotely1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/Windows-attack-90x90.jpg Hacked sites push TeamViewer using fake expired certificate alert1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/hackers-waging-living-off-land-attacks-on-azure-showcase_image-7-a-16158-90x90.jpg Azure Zero-Day Flaws Highlight Lurking Supply-Chain Risk1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/Anonymous-90x90.png Anonymous leaks gigabytes of data from alt-right web host Epik2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/ezgif.com-gif-maker-90x90.jpg New malware uses Windows Subsystem for Linux for stealthy attacks2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/Google-Chrome-Browser-90x90.jpg Pair of Google Chrome Zero-Day Bugs Actively Exploited2 weeks ago
The post FinFisher malware hijacks Windows Boot Manager with UEFI bootkit first appeared on Black Hat Ethical Hacking.

___________________________
@hacking_Attack
@Hacking_Video

6 Simple Steps to Fix Clickjacking on NGINX Server

What is Clickjacking?Continue reading on InfoSec Write-ups »
Read more...

Bypass Open Redirection Protection Via Google Sites [BugBounty writeup]

Hi Everyone!Continue reading on Medium »
Read more...

Bypass Open Redirection Protection Via Google Sites [BugBounty writeup]
https://mazoka777.medium.com/bypass-open-redirection-protection-via-google-sites-bugbounty-writeup-7e9b6dbe0403?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hi Everyone!Continue reading on Medium » (https://mazoka777.medium.com/bypass-open-redirection-protection-via-google-sites-bugbounty-writeup-7e9b6dbe0403?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Augmented Finance Testnet Bug Bounty: Retrospective and Prizes
https://augmentedfinance.medium.com/augmented-finance-testnet-bug-bounty-retrospective-and-prizes-e4293277d0fc?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Incredible 2,600+ testers during the past 2 weeks. Devs fixed all of 24 findings. 5,000+ new followers on social media. Welcome 81 winners!Continue reading on Medium » (https://augmentedfinance.medium.com/augmented-finance-testnet-bug-bounty-retrospective-and-prizes-e4293277d0fc?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
Kodex - A Privacy And Security Engineering Toolkit: Discover, Understand, Pseudonymize, Anonymize, Encrypt And Securely Share Sensitive And Personal Data: Privacy And Security As Code

http://3.bp.blogspot.com/-aIwgBu6UR1A/YUOvqMcVmAI/AAAAAAAAu4I/Q4FSMQUKaR8WSE1p7tS7kH1JdHVW7QQ0ACK4BGAYYCw/w640-h144/kodex_1-722463.png Kodex (Community Edition - CE) is an open-source toolkit for privacy and security engineering. It helps you to automate data security and data protection measures in your data engineering workflows. It offers the following functionality:

* Read data items from a variety of sources such as files, databases or message queues.
* Protect these data items using various privacy- & security enhancing transformations, like de-identification, masking, pseudonymization, anonymization or encryption.
* Send the protected items to a variety of destinations.

With Kodex, you can describe your data protection and data security workflows using a simple, declarative configuration language: Just like DevOps tools let you describe infrastructure as code, Kodex is a PrivacyOps & SecurityOps tool that let you describe privacy and security measures as code.

Kodex takes care of the boring and difficult aspects of privacy, such as

* Key management: Kodex manages encryption and pseudonymization keys for you (if you want that).
* Parameter management: Kodex keeps track of how every single data item was processed so you can prove the compliance of your data workflows and create an audit trail.
* Data transformation: Kodex implements modern cryptographic and statistical techniques to protect your data. Getting startedTo download and install Kodex from source, simply run git clone https://github.com/kiprotect/kodex
cd kiprotect

make
make install DocumentationYou can find the official documentation at https://heykodex.com/docs. Transforming dataKodex reads its configuration from so-called blueprints. To get an idea of how this works, check out our blueprints repository, which contains example blueprints together with instructions on how to run them. You can install these blueprints via Kodex (requires Internet access): kodex blueprints download Alternatively, you can copy them to your machine manually, please refer to the documentation for more details. To then run the pseudonymization example, simply type # pseudonymize the example data and write it to a file named 'pseudonymized.json'
kodex run pseudonymization/examples/data-types/pseudonymize

# depseudonymize the data again and print the result on stdout
kodex run pseudonymization/examples/data-types/depseudonymize That's it! Kodex takes care of generating and storing cryptographic parameters for the pseudonymization. If you want to manually enter a key instead to generate parameters, you can do that too: # pseudonymize the data with a user-supplied key
kodex run pseudonymization/examples/data-types/pseudonymize-with-key

# depseudonymize with a key as well
kodex run pseudonymization/examples/data-types/depseudonymize-with-key Running the testsKodex comes with a suite of automated unit tests, which you can run with Make: make test Testing PluginsThe plugin test may fail with an error message "plugin was built with a different version of package internal/cpu" which can occur if the compile flags used for compiling the main code and the plugin differ. This might happen e.g. if you perform race condition detection tests. To fix the problem, go to the plugin folder and run make clean
make Running the benchmarksKodex also comes with a number of benchmarks that you can run as follows: make bench Status & RoadmapThis is still an early version of Kodex and does not contain man[...]

___________________________
@hacking_Attack
@Hacking_Video

y features yet. We will progressively port more functionality from our Enterprise Edition (EE). The following features are next up on our list:

* Anonymization: Anonymize streaming data using differentially private aggregations.
* Discovery: Discover sensitive and personal information in your structured and unstructured data.
* Encryption: Encrypt and decrypt structured data.
* Data Mapping: Analyze and map your data infrastructure.
* Consent Management: Manage and enforce processing purposes and user consent for all your data streams. Enterprise EditionOur open-source work is made possible by commercially offering a Kodex enterprise edition (EE), which extends the community edition (CE) with functionality that supports a deployment of Kodex in a professional enterprise environment. It includes e.g. the following functionality:

* Advanced, SQL-based configuration & parameter management and storage.
* REST-based API to control all Kodex functionality.
* Web interface to manage and monitor data streams.
* More advanced data transformations.
* Role-based access control mechanism.

Are you interested to learn more about Kodex EE? Just visit our website or get in touch with us! Download Kodex

___________________________
@hacking_Attack
@Hacking_Video

Kodex - A Privacy And Security Engineering Toolkit: Discover, Understand, Pseudonymize, Anonymize, Encrypt And Securely Share Sensitive And Personal Data: Privacy And Security As Code
http://www.kitploit.com/2021/09/kodex-privacy-and-security-engineering.html

___________________________
@hacking_Attack
@Hacking_Video

Kodex (Community Edition - CE) is an open-source toolkit for privacy and security engineering. It helps you to automate data security and data protection measures in your data engineering workflows. It offers the following functionality: Read data items from a variety of sources such as files, databases or message queues. Protect these data items using various privacy- & security enhancing transformations, like de-identification, masking, pseudonymization, anonymization or encryption. Send the protected items to a variety of destinations. With Kodex, you can describe your data protection and data security workflows using a simple, declarative configuration language: Just like DevOps tools let you describe infrastructure (https://www.kitploit.com/search/label/Infrastructure) as code, Kodex is a PrivacyOps & SecurityOps tool that let you describe privacy and security measures as code. Kodex takes care of the boring and difficult aspects of privacy, such as Key management: Kodex manages encryption (https://www.kitploit.com/search/label/Encryption) and pseudonymization keys for you (if you want that). Parameter management: Kodex keeps track of how every single data item was processed so you can prove the compliance (https://www.kitploit.com/search/label/Compliance) of your data workflows and create an audit trail. Data transformation: Kodex implements modern cryptographic and statistical techniques to protect your data.
Getting started
To download and install Kodex from source, simply run git clone https://github.com/kiprotect/kodex
cd kiprotect

make
make install

Documentation
You can find the official documentation at https://heykodex.com/docs.
Transforming data
Kodex reads its configuration from so-called blueprints. To get an idea of how this works, check out our blueprints repository (https://github.com/kiprotect/blueprints), which contains example blueprints together with instructions on how to run them. You can install these blueprints via Kodex (requires Internet access): kodex blueprints download
Alternatively, you can copy them to your machine manually, please refer to the documentation (https://heykodex.com/docs/blueprints) for more details. To then run the pseudonymization example, simply type # pseudonymize the example data and write it to a file named 'pseudonymized.json'
kodex run pseudonymization/examples/data-types/pseudonymize

# depseudonymize the data again and print the result on stdout
kodex run pseudonymization/examples/data-types/depseudonymize
That's it! Kodex takes care of generating and storing cryptographic parameters for the pseudonymization. If you want to manually enter a key instead to generate parameters, you can do that too: # pseudonymize the data with a user-supplied key
kodex run pseudonymization/examples/data-types/pseudonymize-with-key

# depseudonymize with a key as well
kodex run pseudonymization/examples/data-types/depseudonymize-with-key

Running the tests
Kodex comes with a suite of automated unit tests, which you can run with Make: make test

Testing Plugins
The plugin test may fail with an error message "plugin was built with a different version of package internal/cpu" which can occur if the compile flags used for compiling the main code and the plugin differ. This might happen e.g. if you perform race condition detection tests. To fix the problem, go to the plugin folder and run make clean
make

Running the benchmarks
Kodex also comes with a number of benchmarks that you can run as follows: make bench

Status & Roadmap
This is still an early version of Kodex and does not contain many features yet. We will progressively port more functionality from our Enterprise Edition (EE). The following features are next up on our list: Anonymization: Anonymize streaming data using differentially private aggregations. Discovery: Discover sensitive and personal information

___________________________
@hacking_Attack
@Hacking_Video

(https://www.kitploit.com/search/label/Personal%20Information) in your structured and unstructured data. Encryption: Encrypt and decrypt structured data. Data Mapping: Analyze and map your data infrastructure. Consent Management: Manage and enforce processing purposes and user consent for all your data streams.
Enterprise Edition
Our open-source work is made possible by commercially offering a Kodex enterprise edition (EE), which extends the community edition (CE) with functionality that supports a deployment of Kodex in a professional enterprise environment. It includes e.g. the following functionality: Advanced, SQL-based configuration & parameter management (https://www.kitploit.com/search/label/Management) and storage. REST-based API to control all Kodex functionality. Web interface to manage and monitor data streams. More advanced data transformations. Role-based access control mechanism. Are you interested to learn more about Kodex EE? Just visit our website (https://heykodex.com/) or get in touch with us (mailto:kodex@kiprotect.com)!

Download Kodex (https://github.com/kiprotect/kodex)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Paying good money! for program that will do this for me

https://www.youtube.com/watch?v=-og0SchvZPA&ab_channel=Lobos

I need to check 100k names, i checked manaully 10k, need program for rest.

paying 100eur for this!

submitted by /u/darkharvestdiana
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video