Dark Reading: Attacks/Breaches
Baffle's Data Privacy Cloud Protects Data for Amazon Redshift Customers

Amazon Redshift customers can use Baffle’s Data Privacy Cloud to secure the data pipeline as source data is migrated to Redshift and used for data analytics.

___________________________
@hacking_Attack
@Hacking_Video

Whispers - Identify Hardcoded Secrets In Static Structured Text

"My little birds are everywhere, even in the North, they whisper to me the strangest stories." - Lord VarysWhispers is a static code analysis tool designed for parsing various common data formats in search of hardcoded credentials and dangerous functions. Whispers can run in the CLI or you can integrate it in your CI/CD pipeline.DetectsPasswordsAPI tokensAWS keysPrivate keysHashed credentialsAuthentication tokensDangerous functionsSensitive filesSupported FormatsWhispers is intended to be a structured text parser, not a code parser.The following commonly used formats are currently supported:YAMLJSONXML.npmrc.pypirc.htpasswd.propertiespip.confconf / iniDockerfileDockercfgShell scriptsPython3Python3 files are parsed as ASTs because of native language support.Declaration & Assignment FormatsThe following language files are parsed as text, and checked for common variable declaration and assignment patterns:JavaScriptJavaGoPHPSpecial FormatsAWS credentials filesJDBC connection stringsJenkins config filesSpringFramework Beans config filesJava Properties filesDockercfg private registry auth filesGithub tokensInstallationFrom PyPIpip3 install whispersFrom GitHubgit clone https://github.com/Skyscanner/whisperscd whispersmake installUsageCLIwhispers --helpwhispers --infowhispers source/code/fileOrDirwhispers --config config.yml source/code/fileOrDirwhispers --output /tmp/secrets.yml source/code/fileOrDirwhispers --rules aws-id,aws-secret source/code/fileOrDirwhispers --severity BLOCKER,CRITICAL source/code/fileOrDirwhispers --exitcode 7 source/code/fileOrDirPythonfrom whispers.cli import parse_argsfrom whispers.core import runsrc = "tests/fixtures"configfile = "whispers/config.yml"args = parse_args("-c", configfile, src)for secret in run(args): print(secret)ConfigThere are several configuration options available in Whispers. It’s possible to include/exclude results based on file path, key, or value. File path specifications are interpreted as globs. Keys and values accept regular expressions and several other parameters. There is a default configuration file built-in that will be used if you don't provide a custom one.config.yml should have the following structure:include: files: - "**/*.yml"exclude: files: - "**/test/**/*" - "**/tests/**/*" keys: - ^foo values: - bar$rules: starks: message: Whispers from the North severity: CRITICAL value: regex: (Aria|Ned) Stark ignorecase: TrueThe fastest way to tweak detection (ie: remove false positives and unwanted results) is to copy the default config.yml into a new file, adapt it, and pass it as an argument to Whispers.whispers --config config.yml --rules starks src/file/or/dirCustom RulesRules specify the actual things that should be pulled out from key-value pairs. There are several common ones that come built-in, such as AWS keys and passwords, but the tool is made to be easily expandable with new rules.Custom rules can be defined in the main config file under rules:Custom rules can be added to whispers/rulesrule-id: # unique rule name description: Values formatted like AWS Session Token message: AWS Session Token # report will show this message severity: BLOCKER # one of BLOCKER, CRITICAL, MAJOR, MINOR, INFO key: # specify key format regex: (aws.?session.?token)? ignorecase: True # case-insensitive matching value: # specify value format regex: ^(?=.*a-z)(?=.*A-Z)A-Za-z0-9\+\/{270,450}$ ignorecase: False # case-sensitive matching minlen: 270 # value is at least this long isBase64: True # value is base64-encoded isAscii: False # value is binary data when decoded isUri: False # value is not formatted like a URI similar: 0.35 # maximum allowed similarity between key and value # (1.0 being exactly the same)PluginsAll parsing functionality is implemented via plugins. Each plugin implements a class with the pairs() method that runs through files and returns the key-value pairs to be checked with rules.class PluginName: def pairs(self, file): yield "key", "value"Download Whispers
Read more...

hacking: security in practice
Here's a cool way to capture login credentials between a Windows machine and a Linux file server using MITM ARP poisoning attack and Wireshark. Of course, you can use this approach between any type of system that authenticates over the network in the same subnet. Enjoy!

https://external-preview.redd.it/7SpxRngiQygp74IskQp88T-jOb5b3LYqqZcXiu5-nVI.jpg?width=640&crop=smart&auto=webp&s=0b8577a9c40b6e0665f9507f6a8e54a5c8c4c53e submitted by /u/nexenta81
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Cisco anyconnect exploits 4.10

Anyone??

submitted by /u/Sicfast
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Container Security-Common issues

https://cdn-images-1.medium.com/max/1038/1*XWHG9906dZSQBIAZT7kdrg.png
A) Docker unix socket mounted in container(Container Breakout-1)-

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Ngrok not working wan

I’m testing a phishing tool kit and when I use the ngrok link on a device not on the network (my phone ) I get ‘Tunnel 22b7-108-246-4-62.ngrok.io not found

ERR_NGROK_3200’

submitted by /u/alotofquestionsforyk
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Is this electromagnetic hacking and how come there isn’t much about it?

I have an IPhone 12 and 4 years ago my IPad was hacked by my neighbour (now former). I caught her inside her car outside my parents house at 430 in the morning while I was losing control of my IPad including the storage filling up, not being able to download, upload, back up, record anything, vpn dropping, and pages I was trying to access either not loading or loading and then going elsewhere. 3 days after I caught her outside I lost control of my IPad completely as in the passcode was remotely changed faster than me while I was trying to change it locking me out of it. Since then, I’ve noticed the same with my IPhone as well as noticed her and her bf’s vehicle close by. From what I’ve gathered she needs proximity to hack me the way she seems to need to and I’m wondering if this is electromagnetic hacking which allows for a hacker to hack even airlocked systems. Is this what she is doing? Why am I experiencing a repeat of 4 years ago, the same tricks and what is the reason she needs to be so close to me. She’s been stalking me since I moved and I believe this has become something she’s very invested in bc she hates my guts and wants to teach me a lesson. It’s like it’s a game to her and I don’t know how to fight back.
I also think she’s able to read my sms, at least the ones that aren’t encrypted and to hear my convos so I’ve switched to Signal. Can anyone explain to me why she needs proximity, how this helps her hacking and what kind of hacking this is? She is also a ham radio operator and understands frequencies and shit which is how hackers intercept messages and calls I think. Thanks in advance to anyone who can help.

submitted by /u/Schneckie2
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Black Hat Ethical Hacking
Malware now trying to exploit new Windows Installer zero-day

https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Malware now trying to exploit new Windows Installer zero-dayPost Views: 143
https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/BF2.gif
Reading Time: 1 Minute
Malware creators have already started testing a proof-of-concept exploit targeting a new Microsoft Windows Installer zero-day publicly disclosed by security researcher Abdelhamid Naceri over the weekend.
“Talos has already detected malware samples in the wild that are attempting to take advantage of this vulnerability,” said Jaeson Schultz, Technical Leader for Cisco’s Talos Security Intelligence & Research Group.

However, as Cisco Talos’ Head of Outreach Nick Biasini told BleepingComputer, these exploitation attempts are part of low volume attacks likely focused on testing and tweaking exploits for full-blown campaigns.

“During our investigation, we looked at recent malware samples and were able to identify several that were already attempting to leverage the exploit,” Biasini told BleepingComputer.

“Since the volume is low, this is likely people working with the proof of concept code or testing for future campaigns. This is just more evidence on how quickly adversaries work to weaponize a publicly available exploit.”
See Also: Complete Offensive Security and Ethical Hacking Course Zero-day bypasses Windows Installer patchThe vulnerability in question is a local privilege elevation bug found as a bypass to a patch Microsoft released during November 2021’s Patch Tuesday to address a flaw tracked as CVE-2021-41379.

On Sunday, Naceri published a working proof-of-concept exploit for this new zero-day, saying it works on all supported versions of Windows.

If successfully exploited, this bypass gives attackers SYSTEM privileges on up-to-date devices running the latest Windows releases, including Windows 10, Windows 11, and Windows Server 2022.

SYSTEM privileges are the highest user rights available to a Windows user and make it possible to perform any operating system command.

By exploiting this zero-day, attackers with limited access to compromised systems can easily elevate their privileges to help spread laterally within a victim’s network.
See Also: New Windows zero-day with public exploit lets you become an admin BleepingComputer has tested Naceri’s exploit and used it to successfully open a command prompt with SYSTEM permissions from an account with low-level ‘Standard’ privileges.

“The best workaround available at the time of writing this is to wait Microsoft to release a security patch, due to the complexity of this vulnerability,” explained Naceri.

“Any attempt to patch the binary directly will break windows installer. So you better wait and see how Microsoft will screw the patch again.”
See Also: Offensive Security Tools: Awesome Bug Bounty Tools “We are aware of the disclosure and will do what is necessary to keep our customers safe and protected. An attacker using the methods described must already have access and the ability to run code on a target victim’s machine,” a Microsoft spokesperson told BleepingComputer when asked for more details regarding this vulnerability.
See Also: Hacking stories – Operation Troy – How researchers linked the cyberattacks Source: www.bleepingcomputer.com (Click Link)https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/Untitled-design.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/https___specials-images.forbesimg.com_imageserve_503493618_Green-binary-code-on-screen-with-Zero-Day[...]

___________________________
@hacking_Attack
@Hacking_Video

-highlighted-in-red-as-viewed-under-a_960x0-90x90.jpg New Windows zero-day with public exploit lets you become an admin1 day ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/ezgif.com-gif-maker-2-90x90.jpg Microsoft Exchange servers hacked in internal reply-chain attacks2 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/slembunk-android-banking-trojan-targets-31-banks-across-the-world-497808-3-90x90.jpg Android malware BrazKing returns as a stealthier banking trojan5 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/redcurl-90x90.jpg RedCurl corporate espionage hackers resume attacks with updated tools6 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/ezgif.com-gif-maker-1-1-90x90.jpg WordPress sites are being hacked in fake ransomware attacks1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/ECS-Instance-Types-90x90.png Alibaba ECS instances actively hijacked by cryptomining malware1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/ezgif.com-gif-maker-1-90x90.jpg QBot returns for a new wave of infections using Squirrelwaffle1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/face-malware-virus-infected-red-network-90x90.jpg BotenaGo botnet targets millions of IoT devices with 33 exploits2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/ezgif.com-gif-maker-90x90.jpg Microsoft patches Excel zero-day used in attacks, asks Mac users to wait2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/Microsoft-Exchange-90x90.png Microsoft urges Exchange admins to patch bug exploited in the wild2 weeks ago
The post Malware now trying to exploit new Windows Installer zero-day first appeared on Black Hat Ethical Hacking.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Why Should I Adopt a Zero Trust Security Strategy?

Zero Trust is the right approach for protecting your end users. Executing it in the right way will also help you comply with the NIST standards and upcoming federal mandates.

Account Takeover in $Million Company? Report Rejected? Whats wrong???

Hi, I am GodsonContinue reading on Medium »
Read more...

Account Takeover in $Million Company? Report Rejected? Whats wrong???
https://0xgodson.medium.com/account-takeover-in-million-company-report-rejected-whats-wrong-60041f1815fb?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hi, I am GodsonContinue reading on Medium » (https://0xgodson.medium.com/account-takeover-in-million-company-report-rejected-whats-wrong-60041f1815fb?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

How I Found My First XSS Bug
https://medium.com/@thedarkwayg/how-i-found-my-first-xss-bug-96fb8e85a24c?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hi everyone,Continue reading on Medium » (https://medium.com/@thedarkwayg/how-i-found-my-first-xss-bug-96fb8e85a24c?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Wireless security assessments
https://www.reddit.com/r/Pentesting/comments/r12bvv/wireless_security_assessments/

I am looking for a framework like ASVS from OWASP that covers wireless security assessments. Anyone know of such a thing? Or checklists and maybe a lists of tools in use for these types of assessments. I have been doing ASVS assessments for years but want to start offering my clients the same level of assessment for wireless engagements. submitted by /u/73ninjas (https://www.reddit.com/user/73ninjas)
[link] (https://www.reddit.com/r/Pentesting/comments/r12bvv/wireless_security_assessments/) [comments] (https://www.reddit.com/r/Pentesting/comments/r12bvv/wireless_security_assessments/)

___________________________
@hacking_Attack
@Hacking_Video