Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Why America is Global Cyber Power?
https://cdn-images-1.medium.com/max/678/1*rnpeB8XGGDCX_8X1aqfZ1Q.jpeg
The United States of America, the Global Super Power, and the Global Cyber Power is the leader in Cyber Warfare or the Cyber Space…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Why America is Global Cyber Power?
https://cdn-images-1.medium.com/max/678/1*rnpeB8XGGDCX_8X1aqfZ1Q.jpeg
The United States of America, the Global Super Power, and the Global Cyber Power is the leader in Cyber Warfare or the Cyber Space…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
Why America is Global Cyber Power?
The United States of America, the Global Super Power, and the Global Cyber Power is the leader in Cyber Warfare or the Cyber Space…
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Top 7 websites that tech you how to hack legally
https://cdn-images-1.medium.com/max/1400/0*FuDYrRbOyG_Tu2BW
Here are some websites that teach you ways to how to hack legally without stepping into trouble.but some of these website provide you paid…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Top 7 websites that tech you how to hack legally
https://cdn-images-1.medium.com/max/1400/0*FuDYrRbOyG_Tu2BW
Here are some websites that teach you ways to how to hack legally without stepping into trouble.but some of these website provide you paid…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
Top 7 websites that tech you how to hack legally
Here are some websites that teach you ways to how to hack legally without stepping into trouble.but some of these website provide you paid…
hacking: security in practice
Monitor PC Screen on the same network from another PC
Hey everyone, like the title says. I was wondering if anyone knows of an open source solution that I can use to monitor my son's PC Screen from mine. The catch is that I need it to be discreate/hidden from his screen. Reason being is I would like to capture his class zoom sessions because his teacher keeps doing... inappropriate things for an elementary kid. Principle isn't believing the kids until she has solid prof. The teacher always checks their screens when they share their screen for any recording software. So OBS, Shadow Play, and Xbox Game Bar are no good. Any solutions that you might be able to share? Could WireShark capture video on the network? If this doesn't really fall under the "hacking" genre, I am sorry, feel free to delete the post. I am an IT guy, but I am no expert, so I need some advice in this area. Thank you all for your time.
submitted by /u/xCOLONELDIRTYx
[link] [comments]
Monitor PC Screen on the same network from another PC
Hey everyone, like the title says. I was wondering if anyone knows of an open source solution that I can use to monitor my son's PC Screen from mine. The catch is that I need it to be discreate/hidden from his screen. Reason being is I would like to capture his class zoom sessions because his teacher keeps doing... inappropriate things for an elementary kid. Principle isn't believing the kids until she has solid prof. The teacher always checks their screens when they share their screen for any recording software. So OBS, Shadow Play, and Xbox Game Bar are no good. Any solutions that you might be able to share? Could WireShark capture video on the network? If this doesn't really fall under the "hacking" genre, I am sorry, feel free to delete the post. I am an IT guy, but I am no expert, so I need some advice in this area. Thank you all for your time.
submitted by /u/xCOLONELDIRTYx
[link] [comments]
reddit
Monitor PC Screen on the same network from another PC
Hey everyone, like the title says. I was wondering if anyone knows of an open source solution that I can use to monitor my son's PC Screen from...
Escort Product Mainnet Launch: RAI Finance and Immunefi Co launch the Bug Bounty Program
What is the Bug Bounty Program?Continue reading on Medium »
Read more...
What is the Bug Bounty Program?Continue reading on Medium »
Read more...
Deep Web
Its this a good idea?
Hi, i'm new of this kind of stuff, i'm wodering if its a good idea use a old windows 7 era laptop to browse the darkweb? i dont know where this idea came from i think that is to keep my files or the whole computer safe if i acidentally put a virus on my micro. your thoughts about it?
submitted by /u/Null42x64
[link] [comments]
Its this a good idea?
Hi, i'm new of this kind of stuff, i'm wodering if its a good idea use a old windows 7 era laptop to browse the darkweb? i dont know where this idea came from i think that is to keep my files or the whole computer safe if i acidentally put a virus on my micro. your thoughts about it?
submitted by /u/Null42x64
[link] [comments]
reddit
Its this a good idea?
Hi, i'm new of this kind of stuff, i'm wodering if its a good idea use a old windows 7 era laptop to browse the darkweb? i dont know where this...
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Password reuse: Should you be doing it?
https://cdn-images-1.medium.com/max/600/1*_viIgfn5Xuyftxq8O0UF5Q.png
Human instincts dictate password habits
Continue reading on synologyc2 »
Password reuse: Should you be doing it?
https://cdn-images-1.medium.com/max/600/1*_viIgfn5Xuyftxq8O0UF5Q.png
Human instincts dictate password habits
Continue reading on synologyc2 »
Evading EDR Detection with Reentrancy Abuse | Deep Instinct
https://www.reddit.com/r/redteamsec/comments/qs5urh/evading_edr_detection_with_reentrancy_abuse_deep/
submitted by /u/dmchell (https://www.reddit.com/user/dmchell)
[link] (https://www.deepinstinct.com/blog/evading-antivirus-detection-with-inline-hooks) [comments] (https://www.reddit.com/r/redteamsec/comments/qs5urh/evading_edr_detection_with_reentrancy_abuse_deep/)
https://www.reddit.com/r/redteamsec/comments/qs5urh/evading_edr_detection_with_reentrancy_abuse_deep/
submitted by /u/dmchell (https://www.reddit.com/user/dmchell)
[link] (https://www.deepinstinct.com/blog/evading-antivirus-detection-with-inline-hooks) [comments] (https://www.reddit.com/r/redteamsec/comments/qs5urh/evading_edr_detection_with_reentrancy_abuse_deep/)
hacking: security in practice
Locked android phone and locked windows 10 laptop
I have a LG velvet 5g android phone that is locked. I bought it from a friend and they wiped it but starting up it asks for their google account login (frp) and they don’t remember it. I have watched many tutorials and videos on unlocking it and still can’t get it… any idea?
I also have a Dell Latitude laptop that the same person sold me and it has their local account login on there but since she hasn’t used it in forever she doesn’t remember passcode. I have tried getting into Bios settings and everything but can’t get thru. I know I can probably boot from USB or something along those lines any other ideas?
submitted by /u/blotter64
[link] [comments]
Locked android phone and locked windows 10 laptop
I have a LG velvet 5g android phone that is locked. I bought it from a friend and they wiped it but starting up it asks for their google account login (frp) and they don’t remember it. I have watched many tutorials and videos on unlocking it and still can’t get it… any idea?
I also have a Dell Latitude laptop that the same person sold me and it has their local account login on there but since she hasn’t used it in forever she doesn’t remember passcode. I have tried getting into Bios settings and everything but can’t get thru. I know I can probably boot from USB or something along those lines any other ideas?
submitted by /u/blotter64
[link] [comments]
reddit
Locked android phone and locked windows 10 laptop
I have a LG velvet 5g android phone that is locked. I bought it from a friend and they wiped it but starting up it asks for their google account...
https://b.thumbs.redditmedia.com/PvUMQQyMQDa7MzPyOGJVF95IBLewp8KBt5go0qoPvos.jpg https://redhuntlabs.com/blog/scanning-millions-of-publicly-exposed-docker-containers-thousands-of-secrets-leaked.html
https://preview.redd.it/5yugso8i44z71.png?width=1200&format=png&auto=webp&s=9bf265fa59b0036f70788328378809ffefa9d475
submitted by /u/redhuntlabs
[link] [comments]
https://preview.redd.it/5yugso8i44z71.png?width=1200&format=png&auto=webp&s=9bf265fa59b0036f70788328378809ffefa9d475
submitted by /u/redhuntlabs
[link] [comments]
hacking: security in practice
Determining target SSID?
For example: During a pentest (SSID name isn’t obvious) , how does one determine an SSID is the right target? Do you move around the building and pay attention to the signal loss? Is there a command line or online tool?
submitted by /u/DoubleAgent10
[link] [comments]
Determining target SSID?
For example: During a pentest (SSID name isn’t obvious) , how does one determine an SSID is the right target? Do you move around the building and pay attention to the signal loss? Is there a command line or online tool?
submitted by /u/DoubleAgent10
[link] [comments]
reddit
Determining target SSID?
For example: During a pentest (SSID name isn’t obvious) , how does one determine an SSID is the right target? Do you move around the building and...
Hacking Articles Tips Tricks Videos Tutorials
Photo
Black Hat Ethical Hacking
BotenaGo botnet targets millions of IoT devices with 33 exploits
https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png BotenaGo botnet targets millions of IoT devices with 33 exploitsPost Views: 141
Reading Time: 1 Minute
The new BotenaGo malware botnet has been discovered using over thirty exploits to attack millions of routers and IoT devices.
BotenaGo was written in Golang (Go), which has been exploding in popularity in recent years, with malware authors loving it for making payloads that are harder to detect and reverse engineer.
In the case of BotenaGo, only six out of 62 AV engines on VirusTotal flag the sample as malicious, and some identify it as Mirai.
https://www.bleepstatic.com/images/news/u/1220909/Security/scan.jpg
<figcaptionBotenaGo goes primarily unnoticed by AV scanners
Source: AT&T
See Also: Complete Offensive Security and Ethical Hacking Course Targeting millions of devicesBotenaGo incorporates 33 exploits for a variety of routers, modems, and NAS devices, with some notable examples given below:
* CVE-2015-2051, CVE-2020-9377, CVE-2016-11021: D-Link routers
* CVE-2016-1555, CVE-2017-6077, CVE-2016-6277, CVE-2017-6334: Netgear devices
* CVE-2019-19824: Realtek SDK based routers
* CVE-2017-18368, CVE-2020-9054: Zyxel routers and NAS devices
* CVE-2020-10987: Tenda products
* CVE-2014-2321: ZTE modems
* CVE-2020-8958: Guangzhou 1GE ONU
Researchers at AT&T who analyzed the new botnet found that it targets millions of devices with functions that exploit the above flaws.
An example given is the search string for Boa, which is a discontinued open-source web server used in embedded applications and one that still returns nearly two million internet-facing devices on Shodan.
https://www.bleepstatic.com/images/news/u/1220909/Security/botenago_shodan.jpg
<figcaptionShodan search returned 2 million results on Boa
Source: AT&T
See Also: All Windows versions impacted by new LPE zero-day vulnerability Another notable example is the targeting of CVE-2020-10173, a command-injection flaw in Comtrend VR-3033 gateway devices, of which 250,000 are still exploitable.
When installed, the malware will listen on two ports (31412 and 19412), where it waits for an IP address to be sent to it. Once one is received, the bot will exploit each vulnerability on that IP address to gain access.
https://www.bleepstatic.com/images/news/u/1220909/Security/mapping.jpg
<figcaptionBotenaGo mapping attack functions.
Source: AT&T
Once BotenaGo gains access, it will execute remote shell commands to recruit the device into the botnet.
Depending on which device is targeted, the malware uses different links to fetch a matching payload.
At the time of the analysis, though, there were no payloads on the hosting server, so none could be retrieved for analysis.
See Also: Offensive Security Tool: DotDotPwn – The Directory Traversal Fuzzer Furthermore, the researchers didn’t find an active C2 communication between BotenaGo and an actor-controlled server, so they give three potential explanations on how it operates:
1. BotenaGo is only one part (module) of a multi-stage modular malware attack, and it’s not the one responsible for handling communications.
2. BotenaGo is a new tool used by Mirai operators on certain machines, a scenario that is backed by common payload dropping links.
3. The malware isn’t ready to operate yet, and a sample from its early development phase leaked in the wild accidentally.
In conclusion, the appearance of BotenaGo in the wild is unusual given its incomplete operational status, but its underlying capabilities are leaving no doubt about the int[...]
BotenaGo botnet targets millions of IoT devices with 33 exploits
https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png BotenaGo botnet targets millions of IoT devices with 33 exploitsPost Views: 141
Reading Time: 1 Minute
The new BotenaGo malware botnet has been discovered using over thirty exploits to attack millions of routers and IoT devices.
BotenaGo was written in Golang (Go), which has been exploding in popularity in recent years, with malware authors loving it for making payloads that are harder to detect and reverse engineer.
In the case of BotenaGo, only six out of 62 AV engines on VirusTotal flag the sample as malicious, and some identify it as Mirai.
https://www.bleepstatic.com/images/news/u/1220909/Security/scan.jpg
<figcaptionBotenaGo goes primarily unnoticed by AV scanners
Source: AT&T
See Also: Complete Offensive Security and Ethical Hacking Course Targeting millions of devicesBotenaGo incorporates 33 exploits for a variety of routers, modems, and NAS devices, with some notable examples given below:
* CVE-2015-2051, CVE-2020-9377, CVE-2016-11021: D-Link routers
* CVE-2016-1555, CVE-2017-6077, CVE-2016-6277, CVE-2017-6334: Netgear devices
* CVE-2019-19824: Realtek SDK based routers
* CVE-2017-18368, CVE-2020-9054: Zyxel routers and NAS devices
* CVE-2020-10987: Tenda products
* CVE-2014-2321: ZTE modems
* CVE-2020-8958: Guangzhou 1GE ONU
Researchers at AT&T who analyzed the new botnet found that it targets millions of devices with functions that exploit the above flaws.
An example given is the search string for Boa, which is a discontinued open-source web server used in embedded applications and one that still returns nearly two million internet-facing devices on Shodan.
https://www.bleepstatic.com/images/news/u/1220909/Security/botenago_shodan.jpg
<figcaptionShodan search returned 2 million results on Boa
Source: AT&T
See Also: All Windows versions impacted by new LPE zero-day vulnerability Another notable example is the targeting of CVE-2020-10173, a command-injection flaw in Comtrend VR-3033 gateway devices, of which 250,000 are still exploitable.
When installed, the malware will listen on two ports (31412 and 19412), where it waits for an IP address to be sent to it. Once one is received, the bot will exploit each vulnerability on that IP address to gain access.
https://www.bleepstatic.com/images/news/u/1220909/Security/mapping.jpg
<figcaptionBotenaGo mapping attack functions.
Source: AT&T
Once BotenaGo gains access, it will execute remote shell commands to recruit the device into the botnet.
Depending on which device is targeted, the malware uses different links to fetch a matching payload.
At the time of the analysis, though, there were no payloads on the hosting server, so none could be retrieved for analysis.
See Also: Offensive Security Tool: DotDotPwn – The Directory Traversal Fuzzer Furthermore, the researchers didn’t find an active C2 communication between BotenaGo and an actor-controlled server, so they give three potential explanations on how it operates:
1. BotenaGo is only one part (module) of a multi-stage modular malware attack, and it’s not the one responsible for handling communications.
2. BotenaGo is a new tool used by Mirai operators on certain machines, a scenario that is backed by common payload dropping links.
3. The malware isn’t ready to operate yet, and a sample from its early development phase leaked in the wild accidentally.
In conclusion, the appearance of BotenaGo in the wild is unusual given its incomplete operational status, but its underlying capabilities are leaving no doubt about the int[...]
Hacking Articles Tips Tricks Videos Tutorials
Black Hat Ethical Hacking BotenaGo botnet targets millions of IoT devices with 33 exploits https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png BotenaGo botnet targets millions of IoT devices with 33 exploitsPost Views:…
ention of its authors.
Fortunately, the new botnet has been spotted early, and the indicators of compromise are already available. Still, as long as there’s a wealth of vulnerable online devices to exploit, the incentive is there for the threat actors to continue the development of BotenaGo.
See Also: Hacking stories – Operation Troy – How researchers linked the cyberattacks Source: www.bleepingcomputer.com (Click Link)https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/Untitled-design.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/ezgif.com-gif-maker-90x90.jpg Microsoft patches Excel zero-day used in attacks, asks Mac users to wait1 day ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/Microsoft-Exchange-90x90.png Microsoft urges Exchange admins to patch bug exploited in the wild2 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/b57e07db-82a4-43ef-be64-a15c45b31804-90x90.jpg Robinhood discloses data breach impacting 7 million customers3 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/Pwn2OwnBlur-90x90.png Pwn2Own – Over 1 million dollars in Bounties, Samsung Galaxy S21 hacked twice, Printer plays AC/DC4 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/maxresdefault-1024x576-1-90x90.jpg Microsoft Exchange ProxyShell exploits used to deploy Babuk ransomware1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/Mekotio-Banking-Trojan-90x90.png Mekotio Banking Trojan Resurges with Tweaked Code, Stealthy Campaign1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/GitLab-90x90.jpg Over 30,000 GitLab servers still unpatched against critical bug1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/trojan-source-invisible-vulnerabilities-in-most-code-showcase_image-7-a-17833-90x90.jpg ‘Trojan Source’ attack method can hide bugs into open-source code1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/ezgif.com-gif-maker-4-90x90.jpg Chaos ransomware targets gamers via fake Minecraft alt lists2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/10/microsoft-zero-day-vulnerabilities-800x358-1-90x90.png All Windows versions impacted by new LPE zero-day vulnerability2 weeks ago
The post BotenaGo botnet targets millions of IoT devices with 33 exploits first appeared on Black Hat Ethical Hacking.
Fortunately, the new botnet has been spotted early, and the indicators of compromise are already available. Still, as long as there’s a wealth of vulnerable online devices to exploit, the incentive is there for the threat actors to continue the development of BotenaGo.
See Also: Hacking stories – Operation Troy – How researchers linked the cyberattacks Source: www.bleepingcomputer.com (Click Link)https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/Untitled-design.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/ezgif.com-gif-maker-90x90.jpg Microsoft patches Excel zero-day used in attacks, asks Mac users to wait1 day ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/Microsoft-Exchange-90x90.png Microsoft urges Exchange admins to patch bug exploited in the wild2 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/b57e07db-82a4-43ef-be64-a15c45b31804-90x90.jpg Robinhood discloses data breach impacting 7 million customers3 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/Pwn2OwnBlur-90x90.png Pwn2Own – Over 1 million dollars in Bounties, Samsung Galaxy S21 hacked twice, Printer plays AC/DC4 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/maxresdefault-1024x576-1-90x90.jpg Microsoft Exchange ProxyShell exploits used to deploy Babuk ransomware1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/Mekotio-Banking-Trojan-90x90.png Mekotio Banking Trojan Resurges with Tweaked Code, Stealthy Campaign1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/GitLab-90x90.jpg Over 30,000 GitLab servers still unpatched against critical bug1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/trojan-source-invisible-vulnerabilities-in-most-code-showcase_image-7-a-17833-90x90.jpg ‘Trojan Source’ attack method can hide bugs into open-source code1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/ezgif.com-gif-maker-4-90x90.jpg Chaos ransomware targets gamers via fake Minecraft alt lists2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/10/microsoft-zero-day-vulnerabilities-800x358-1-90x90.png All Windows versions impacted by new LPE zero-day vulnerability2 weeks ago
The post BotenaGo botnet targets millions of IoT devices with 33 exploits first appeared on Black Hat Ethical Hacking.
Ports filtered but firewall off
https://www.reddit.com/r/Pentesting/comments/qs6z42/ports_filtered_but_firewall_off/
<!-- SC_OFF -->Ok so i got an Ubuntu host ready and a windows 10 pro machine(guest) running. I ping host from guest and everything is fine, works with no delay ( so... what's up <!-- SC_ON --> submitted by /u/kostas791 (https://www.reddit.com/user/kostas791)
[link] (https://www.reddit.com/r/Pentesting/comments/qs6z42/ports_filtered_but_firewall_off/) [comments] (https://www.reddit.com/r/Pentesting/comments/qs6z42/ports_filtered_but_firewall_off/)
https://www.reddit.com/r/Pentesting/comments/qs6z42/ports_filtered_but_firewall_off/
<!-- SC_OFF -->Ok so i got an Ubuntu host ready and a windows 10 pro machine(guest) running. I ping host from guest and everything is fine, works with no delay ( so... what's up <!-- SC_ON --> submitted by /u/kostas791 (https://www.reddit.com/user/kostas791)
[link] (https://www.reddit.com/r/Pentesting/comments/qs6z42/ports_filtered_but_firewall_off/) [comments] (https://www.reddit.com/r/Pentesting/comments/qs6z42/ports_filtered_but_firewall_off/)
Scanning Millions Of Publicly Exposed Docker Containers — Thousands Of Secrets Leaked — RedHunt…
https://redhuntlabs.medium.com/scanning-millions-of-publicly-exposed-docker-containers-thousands-of-secrets-leaked-redhunt-c924f892e01f?source=rss------bug_bounty-5
https://redhuntlabs.medium.com/scanning-millions-of-publicly-exposed-docker-containers-thousands-of-secrets-leaked-redhunt-c924f892e01f?source=rss------bug_bounty-5
Containers have been the rage. Containers allow developers to package the code, its dependencies, libraries, and more so they can run…Continue reading on Medium » (https://redhuntlabs.medium.com/scanning-millions-of-publicly-exposed-docker-containers-thousands-of-secrets-leaked-redhunt-c924f892e01f?source=rss------bug_bounty-5)