Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Container Security-Common issues
https://cdn-images-1.medium.com/max/1038/1*XWHG9906dZSQBIAZT7kdrg.png
A) Docker unix socket mounted in container(Container Breakout-1)-
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Container Security-Common issues
https://cdn-images-1.medium.com/max/1038/1*XWHG9906dZSQBIAZT7kdrg.png
A) Docker unix socket mounted in container(Container Breakout-1)-
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
Container Security-Common issues
A) Docker unix socket mounted in container(Container Breakout-1)-
hacking: security in practice
Ngrok not working wan
I’m testing a phishing tool kit and when I use the ngrok link on a device not on the network (my phone ) I get ‘Tunnel 22b7-108-246-4-62.ngrok.io not found
ERR_NGROK_3200’
submitted by /u/alotofquestionsforyk
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
Ngrok not working wan
I’m testing a phishing tool kit and when I use the ngrok link on a device not on the network (my phone ) I get ‘Tunnel 22b7-108-246-4-62.ngrok.io not found
ERR_NGROK_3200’
submitted by /u/alotofquestionsforyk
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
Ngrok not working wan
I’m testing a phishing tool kit and when I use the ngrok link on a device not on the network (my phone ) I get ‘Tunnel 22b7-108-246-4-62.ngrok.io...
hacking: security in practice
Is this electromagnetic hacking and how come there isn’t much about it?
I have an IPhone 12 and 4 years ago my IPad was hacked by my neighbour (now former). I caught her inside her car outside my parents house at 430 in the morning while I was losing control of my IPad including the storage filling up, not being able to download, upload, back up, record anything, vpn dropping, and pages I was trying to access either not loading or loading and then going elsewhere. 3 days after I caught her outside I lost control of my IPad completely as in the passcode was remotely changed faster than me while I was trying to change it locking me out of it. Since then, I’ve noticed the same with my IPhone as well as noticed her and her bf’s vehicle close by. From what I’ve gathered she needs proximity to hack me the way she seems to need to and I’m wondering if this is electromagnetic hacking which allows for a hacker to hack even airlocked systems. Is this what she is doing? Why am I experiencing a repeat of 4 years ago, the same tricks and what is the reason she needs to be so close to me. She’s been stalking me since I moved and I believe this has become something she’s very invested in bc she hates my guts and wants to teach me a lesson. It’s like it’s a game to her and I don’t know how to fight back.
I also think she’s able to read my sms, at least the ones that aren’t encrypted and to hear my convos so I’ve switched to Signal. Can anyone explain to me why she needs proximity, how this helps her hacking and what kind of hacking this is? She is also a ham radio operator and understands frequencies and shit which is how hackers intercept messages and calls I think. Thanks in advance to anyone who can help.
submitted by /u/Schneckie2
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
Is this electromagnetic hacking and how come there isn’t much about it?
I have an IPhone 12 and 4 years ago my IPad was hacked by my neighbour (now former). I caught her inside her car outside my parents house at 430 in the morning while I was losing control of my IPad including the storage filling up, not being able to download, upload, back up, record anything, vpn dropping, and pages I was trying to access either not loading or loading and then going elsewhere. 3 days after I caught her outside I lost control of my IPad completely as in the passcode was remotely changed faster than me while I was trying to change it locking me out of it. Since then, I’ve noticed the same with my IPhone as well as noticed her and her bf’s vehicle close by. From what I’ve gathered she needs proximity to hack me the way she seems to need to and I’m wondering if this is electromagnetic hacking which allows for a hacker to hack even airlocked systems. Is this what she is doing? Why am I experiencing a repeat of 4 years ago, the same tricks and what is the reason she needs to be so close to me. She’s been stalking me since I moved and I believe this has become something she’s very invested in bc she hates my guts and wants to teach me a lesson. It’s like it’s a game to her and I don’t know how to fight back.
I also think she’s able to read my sms, at least the ones that aren’t encrypted and to hear my convos so I’ve switched to Signal. Can anyone explain to me why she needs proximity, how this helps her hacking and what kind of hacking this is? She is also a ham radio operator and understands frequencies and shit which is how hackers intercept messages and calls I think. Thanks in advance to anyone who can help.
submitted by /u/Schneckie2
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
Is this electromagnetic hacking and how come there isn’t much...
I have an IPhone 12 and 4 years ago my IPad was hacked by my neighbour (now former). I caught her inside her car outside my parents house at 430...
Hacking Articles Tips Tricks Videos Tutorials
Photo
Black Hat Ethical Hacking
Malware now trying to exploit new Windows Installer zero-day
https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Malware now trying to exploit new Windows Installer zero-dayPost Views: 143
https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/BF2.gif
Reading Time: 1 Minute
Malware creators have already started testing a proof-of-concept exploit targeting a new Microsoft Windows Installer zero-day publicly disclosed by security researcher Abdelhamid Naceri over the weekend.
“Talos has already detected malware samples in the wild that are attempting to take advantage of this vulnerability,” said Jaeson Schultz, Technical Leader for Cisco’s Talos Security Intelligence & Research Group.
However, as Cisco Talos’ Head of Outreach Nick Biasini told BleepingComputer, these exploitation attempts are part of low volume attacks likely focused on testing and tweaking exploits for full-blown campaigns.
“During our investigation, we looked at recent malware samples and were able to identify several that were already attempting to leverage the exploit,” Biasini told BleepingComputer.
“Since the volume is low, this is likely people working with the proof of concept code or testing for future campaigns. This is just more evidence on how quickly adversaries work to weaponize a publicly available exploit.”
See Also: Complete Offensive Security and Ethical Hacking Course Zero-day bypasses Windows Installer patchThe vulnerability in question is a local privilege elevation bug found as a bypass to a patch Microsoft released during November 2021’s Patch Tuesday to address a flaw tracked as CVE-2021-41379.
On Sunday, Naceri published a working proof-of-concept exploit for this new zero-day, saying it works on all supported versions of Windows.
If successfully exploited, this bypass gives attackers SYSTEM privileges on up-to-date devices running the latest Windows releases, including Windows 10, Windows 11, and Windows Server 2022.
SYSTEM privileges are the highest user rights available to a Windows user and make it possible to perform any operating system command.
By exploiting this zero-day, attackers with limited access to compromised systems can easily elevate their privileges to help spread laterally within a victim’s network.
See Also: New Windows zero-day with public exploit lets you become an admin BleepingComputer has tested Naceri’s exploit and used it to successfully open a command prompt with SYSTEM permissions from an account with low-level ‘Standard’ privileges.
“The best workaround available at the time of writing this is to wait Microsoft to release a security patch, due to the complexity of this vulnerability,” explained Naceri.
“Any attempt to patch the binary directly will break windows installer. So you better wait and see how Microsoft will screw the patch again.”
See Also: Offensive Security Tools: Awesome Bug Bounty Tools “We are aware of the disclosure and will do what is necessary to keep our customers safe and protected. An attacker using the methods described must already have access and the ability to run code on a target victim’s machine,” a Microsoft spokesperson told BleepingComputer when asked for more details regarding this vulnerability.
See Also: Hacking stories – Operation Troy – How researchers linked the cyberattacks Source: www.bleepingcomputer.com (Click Link)https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/Untitled-design.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/https___specials-images.forbesimg.com_imageserve_503493618_Green-binary-code-on-screen-with-Zero-Day[...]
___________________________
@hacking_Attack
@Hacking_Video
Malware now trying to exploit new Windows Installer zero-day
https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Malware now trying to exploit new Windows Installer zero-dayPost Views: 143
https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/BF2.gif
Reading Time: 1 Minute
Malware creators have already started testing a proof-of-concept exploit targeting a new Microsoft Windows Installer zero-day publicly disclosed by security researcher Abdelhamid Naceri over the weekend.
“Talos has already detected malware samples in the wild that are attempting to take advantage of this vulnerability,” said Jaeson Schultz, Technical Leader for Cisco’s Talos Security Intelligence & Research Group.
However, as Cisco Talos’ Head of Outreach Nick Biasini told BleepingComputer, these exploitation attempts are part of low volume attacks likely focused on testing and tweaking exploits for full-blown campaigns.
“During our investigation, we looked at recent malware samples and were able to identify several that were already attempting to leverage the exploit,” Biasini told BleepingComputer.
“Since the volume is low, this is likely people working with the proof of concept code or testing for future campaigns. This is just more evidence on how quickly adversaries work to weaponize a publicly available exploit.”
See Also: Complete Offensive Security and Ethical Hacking Course Zero-day bypasses Windows Installer patchThe vulnerability in question is a local privilege elevation bug found as a bypass to a patch Microsoft released during November 2021’s Patch Tuesday to address a flaw tracked as CVE-2021-41379.
On Sunday, Naceri published a working proof-of-concept exploit for this new zero-day, saying it works on all supported versions of Windows.
If successfully exploited, this bypass gives attackers SYSTEM privileges on up-to-date devices running the latest Windows releases, including Windows 10, Windows 11, and Windows Server 2022.
SYSTEM privileges are the highest user rights available to a Windows user and make it possible to perform any operating system command.
By exploiting this zero-day, attackers with limited access to compromised systems can easily elevate their privileges to help spread laterally within a victim’s network.
See Also: New Windows zero-day with public exploit lets you become an admin BleepingComputer has tested Naceri’s exploit and used it to successfully open a command prompt with SYSTEM permissions from an account with low-level ‘Standard’ privileges.
“The best workaround available at the time of writing this is to wait Microsoft to release a security patch, due to the complexity of this vulnerability,” explained Naceri.
“Any attempt to patch the binary directly will break windows installer. So you better wait and see how Microsoft will screw the patch again.”
See Also: Offensive Security Tools: Awesome Bug Bounty Tools “We are aware of the disclosure and will do what is necessary to keep our customers safe and protected. An attacker using the methods described must already have access and the ability to run code on a target victim’s machine,” a Microsoft spokesperson told BleepingComputer when asked for more details regarding this vulnerability.
See Also: Hacking stories – Operation Troy – How researchers linked the cyberattacks Source: www.bleepingcomputer.com (Click Link)https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/Untitled-design.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/https___specials-images.forbesimg.com_imageserve_503493618_Green-binary-code-on-screen-with-Zero-Day[...]
___________________________
@hacking_Attack
@Hacking_Video
Black Hat Ethical Hacking
Malware now trying to exploit new Windows Installer zero-day | Black Hat Ethical Hacking
Malware creators have already started testing a proof-of-concept exploit targeting a new Microsoft Windows Installer zero-day publicly disclosed by security researcher Abdelhamid Naceri over the weekend.
Hacking Articles Tips Tricks Videos Tutorials
Black Hat Ethical Hacking Malware now trying to exploit new Windows Installer zero-day https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Malware now trying to exploit new Windows Installer zero-dayPost Views: 143 …
-highlighted-in-red-as-viewed-under-a_960x0-90x90.jpg New Windows zero-day with public exploit lets you become an admin1 day ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/ezgif.com-gif-maker-2-90x90.jpg Microsoft Exchange servers hacked in internal reply-chain attacks2 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/slembunk-android-banking-trojan-targets-31-banks-across-the-world-497808-3-90x90.jpg Android malware BrazKing returns as a stealthier banking trojan5 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/redcurl-90x90.jpg RedCurl corporate espionage hackers resume attacks with updated tools6 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/ezgif.com-gif-maker-1-1-90x90.jpg WordPress sites are being hacked in fake ransomware attacks1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/ECS-Instance-Types-90x90.png Alibaba ECS instances actively hijacked by cryptomining malware1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/ezgif.com-gif-maker-1-90x90.jpg QBot returns for a new wave of infections using Squirrelwaffle1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/face-malware-virus-infected-red-network-90x90.jpg BotenaGo botnet targets millions of IoT devices with 33 exploits2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/ezgif.com-gif-maker-90x90.jpg Microsoft patches Excel zero-day used in attacks, asks Mac users to wait2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/Microsoft-Exchange-90x90.png Microsoft urges Exchange admins to patch bug exploited in the wild2 weeks ago
The post Malware now trying to exploit new Windows Installer zero-day first appeared on Black Hat Ethical Hacking.
___________________________
@hacking_Attack
@Hacking_Video
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/ezgif.com-gif-maker-2-90x90.jpg Microsoft Exchange servers hacked in internal reply-chain attacks2 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/slembunk-android-banking-trojan-targets-31-banks-across-the-world-497808-3-90x90.jpg Android malware BrazKing returns as a stealthier banking trojan5 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/redcurl-90x90.jpg RedCurl corporate espionage hackers resume attacks with updated tools6 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/ezgif.com-gif-maker-1-1-90x90.jpg WordPress sites are being hacked in fake ransomware attacks1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/ECS-Instance-Types-90x90.png Alibaba ECS instances actively hijacked by cryptomining malware1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/ezgif.com-gif-maker-1-90x90.jpg QBot returns for a new wave of infections using Squirrelwaffle1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/face-malware-virus-infected-red-network-90x90.jpg BotenaGo botnet targets millions of IoT devices with 33 exploits2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/ezgif.com-gif-maker-90x90.jpg Microsoft patches Excel zero-day used in attacks, asks Mac users to wait2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/Microsoft-Exchange-90x90.png Microsoft urges Exchange admins to patch bug exploited in the wild2 weeks ago
The post Malware now trying to exploit new Windows Installer zero-day first appeared on Black Hat Ethical Hacking.
___________________________
@hacking_Attack
@Hacking_Video
Account Takeover in $Million Company? Report Rejected? Whats wrong???
Hi, I am GodsonContinue reading on Medium »
Read more...
Hi, I am GodsonContinue reading on Medium »
Read more...
Account Takeover in $Million Company? Report Rejected? Whats wrong???
https://0xgodson.medium.com/account-takeover-in-million-company-report-rejected-whats-wrong-60041f1815fb?source=rss------bug_bounty-5
___________________________
@hacking_Attack
@Hacking_Video
https://0xgodson.medium.com/account-takeover-in-million-company-report-rejected-whats-wrong-60041f1815fb?source=rss------bug_bounty-5
___________________________
@hacking_Attack
@Hacking_Video
Medium
Account Takeover in $Million Company?
Hi, I am Godson
Hi, I am GodsonContinue reading on Medium » (https://0xgodson.medium.com/account-takeover-in-million-company-report-rejected-whats-wrong-60041f1815fb?source=rss------bug_bounty-5)
___________________________
@hacking_Attack
@Hacking_Video
___________________________
@hacking_Attack
@Hacking_Video
Medium
Account Takeover in $Million Company?
Hi, I am Godson
How I Found My First XSS Bug
https://medium.com/@thedarkwayg/how-i-found-my-first-xss-bug-96fb8e85a24c?source=rss------bug_bounty-5
___________________________
@hacking_Attack
@Hacking_Video
https://medium.com/@thedarkwayg/how-i-found-my-first-xss-bug-96fb8e85a24c?source=rss------bug_bounty-5
___________________________
@hacking_Attack
@Hacking_Video
Medium
How I Found My First XSS Bug
Hi everyone,
Hi everyone,Continue reading on Medium » (https://medium.com/@thedarkwayg/how-i-found-my-first-xss-bug-96fb8e85a24c?source=rss------bug_bounty-5)
___________________________
@hacking_Attack
@Hacking_Video
___________________________
@hacking_Attack
@Hacking_Video
Medium
How I Found My First XSS Bug
Hi everyone,
Wireless security assessments
https://www.reddit.com/r/Pentesting/comments/r12bvv/wireless_security_assessments/
I am looking for a framework like ASVS from OWASP that covers wireless security assessments. Anyone know of such a thing? Or checklists and maybe a lists of tools in use for these types of assessments. I have been doing ASVS assessments for years but want to start offering my clients the same level of assessment for wireless engagements. submitted by /u/73ninjas (https://www.reddit.com/user/73ninjas)
[link] (https://www.reddit.com/r/Pentesting/comments/r12bvv/wireless_security_assessments/) [comments] (https://www.reddit.com/r/Pentesting/comments/r12bvv/wireless_security_assessments/)
___________________________
@hacking_Attack
@Hacking_Video
https://www.reddit.com/r/Pentesting/comments/r12bvv/wireless_security_assessments/
I am looking for a framework like ASVS from OWASP that covers wireless security assessments. Anyone know of such a thing? Or checklists and maybe a lists of tools in use for these types of assessments. I have been doing ASVS assessments for years but want to start offering my clients the same level of assessment for wireless engagements. submitted by /u/73ninjas (https://www.reddit.com/user/73ninjas)
[link] (https://www.reddit.com/r/Pentesting/comments/r12bvv/wireless_security_assessments/) [comments] (https://www.reddit.com/r/Pentesting/comments/r12bvv/wireless_security_assessments/)
___________________________
@hacking_Attack
@Hacking_Video
reddit
Wireless security assessments
I am looking for a framework like ASVS from OWASP that covers wireless security assessments. Anyone know of such a thing? Or checklists and maybe...
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Fixing 0x0 00x0 Error Codes
https://cdn-images-1.medium.com/max/800/1*-IDTxUArvtZ6aQTded_-Tg.jpeg
If you have received an error message with the code ‘0x0 00x0’ on your computer, you may need to repair your PC.
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Fixing 0x0 00x0 Error Codes
https://cdn-images-1.medium.com/max/800/1*-IDTxUArvtZ6aQTded_-Tg.jpeg
If you have received an error message with the code ‘0x0 00x0’ on your computer, you may need to repair your PC.
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
Fixing 0x0 00x0 Error Codes
If you have received an error message with the code ‘0x0 00x0’ on your computer, you may need to repair your PC. While the problem might be…
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
TCAPT: DLL Hijacking
https://cdn-images-1.medium.com/max/1390/1*o0zq24LmGKC5X-L0HqSGbg.jpeg
Hello Hackmates, I’ve been learning about Thick Client Application Penetration Testing and recently, came up with the topic: DLL Hijacking…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
TCAPT: DLL Hijacking
https://cdn-images-1.medium.com/max/1390/1*o0zq24LmGKC5X-L0HqSGbg.jpeg
Hello Hackmates, I’ve been learning about Thick Client Application Penetration Testing and recently, came up with the topic: DLL Hijacking…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
TCAPT: DLL Hijacking
Hello Hackmates, I’ve been learning about Thick Client Application Penetration Testing and recently, came up with the topic: DLL Hijacking…
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Hacking personal space.
https://cdn-images-1.medium.com/max/1080/1*u93vo6LdY3RPNlPSwEPD1g.jpeg
Are we becoming or making a robot of ourselves?
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Hacking personal space.
https://cdn-images-1.medium.com/max/1080/1*u93vo6LdY3RPNlPSwEPD1g.jpeg
Are we becoming or making a robot of ourselves?
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
Hacking personal space.
Are we becoming or making a robot of ourselves?