Redherd Framework -A Collaborative And Serverless Framework For Orchestrating A Geographically Distributed Group Of Assets
RedHerd is a collaborative and serverless framework for orchestrating a geographically distributed group of assets capable of conducting simulating complex offensive cyberspace operations.Getting StartedTake a look at the RedHerd documentation for instructions on how to getting started with the framework.Cite this workIf you use RedHerd Framework for your research activity, cite the following paper published by MDPI (Multidisciplinary Digital Publishing Institute) https://www.mdpi.com/2624-6120/2/4/38LinksHereafter, some interesting links referred to the project:DockerHub repositoryYouTube channelTwitter profileChangelogGo to CHANGELOG to see all the version changes.LicenseThis project is under the MIT license.Contact usFeel free to contact us at this e-mail address:DisclaimerThe provided contents and tools are for awareness and research purposes only. Our target audience is composed of those interested in learning about Ethical Hacking, Security, Penetration Testing and Red Teaming. We are not responsible for any inappropriate or illegal usage of both proposed material and discussed topics.FundingThis is a non-profit project which received neither funding nor sponsorship.Download Redherd-Framework
Read more...
RedHerd is a collaborative and serverless framework for orchestrating a geographically distributed group of assets capable of conducting simulating complex offensive cyberspace operations.Getting StartedTake a look at the RedHerd documentation for instructions on how to getting started with the framework.Cite this workIf you use RedHerd Framework for your research activity, cite the following paper published by MDPI (Multidisciplinary Digital Publishing Institute) https://www.mdpi.com/2624-6120/2/4/38LinksHereafter, some interesting links referred to the project:DockerHub repositoryYouTube channelTwitter profileChangelogGo to CHANGELOG to see all the version changes.LicenseThis project is under the MIT license.Contact usFeel free to contact us at this e-mail address:DisclaimerThe provided contents and tools are for awareness and research purposes only. Our target audience is composed of those interested in learning about Ethical Hacking, Security, Penetration Testing and Red Teaming. We are not responsible for any inappropriate or illegal usage of both proposed material and discussed topics.FundingThis is a non-profit project which received neither funding nor sponsorship.Download Redherd-Framework
Read more...
I let automation hack for me: Here is what I learned
https://thexssrat.medium.com/i-let-automation-hack-for-me-here-is-what-i-learned-b1476a2c6432?source=rss------bug_bounty-5
https://thexssrat.medium.com/i-let-automation-hack-for-me-here-is-what-i-learned-b1476a2c6432?source=rss------bug_bounty-5
Unauthenticated Sensitive Information Disclosure at [REDACTED]
https://wahaz.medium.com/unauthenticated-sensitive-information-disclosure-at-redacted-2702224098c?source=rss------bug_bounty-5
https://wahaz.medium.com/unauthenticated-sensitive-information-disclosure-at-redacted-2702224098c?source=rss------bug_bounty-5
Hello InfoSec Community, I want to share my submission about this vulnerability, sorry for bad writing, still learning ✌Continue reading on Medium » (https://wahaz.medium.com/unauthenticated-sensitive-information-disclosure-at-redacted-2702224098c?source=rss------bug_bounty-5)
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
TGB changes its smart contract : Why ? and when the new launch
https://cdn-images-1.medium.com/max/600/1*pZhWEBtHNBtQcVGWzk4aGQ.png
Traders Global Business token is making a new smart contract after a hack attempt on the first one.
Continue reading on Medium »
TGB changes its smart contract : Why ? and when the new launch
https://cdn-images-1.medium.com/max/600/1*pZhWEBtHNBtQcVGWzk4aGQ.png
Traders Global Business token is making a new smart contract after a hack attempt on the first one.
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Someone has just hacked $1m from Wanaka Farm (WANA)?
https://cdn-images-1.medium.com/max/1600/0*xzEqWPDZK93iePxD
Verichains Lab, together with BShield, has investigated a critical but simple bug that costed million USD to a NFT Game named Wanaka Farm.
Continue reading on VeriChains Lab »
Someone has just hacked $1m from Wanaka Farm (WANA)?
https://cdn-images-1.medium.com/max/1600/0*xzEqWPDZK93iePxD
Verichains Lab, together with BShield, has investigated a critical but simple bug that costed million USD to a NFT Game named Wanaka Farm.
Continue reading on VeriChains Lab »
hacking: security in practice
How do you Ddos your next door neighbor?
For context me and my neighbor have been in a multi-year dispute involving assault, vandalism, illegal distribution of nicotine among other misdemeanors. Today I’m fed up and want to ddos him to shut off his internet. How would I go about doing this? I’m a 27 Y/O NEET so I have a lot of time to spare to learn how to DDOS.
submitted by /u/South_Art7928
[link] [comments]
How do you Ddos your next door neighbor?
For context me and my neighbor have been in a multi-year dispute involving assault, vandalism, illegal distribution of nicotine among other misdemeanors. Today I’m fed up and want to ddos him to shut off his internet. How would I go about doing this? I’m a 27 Y/O NEET so I have a lot of time to spare to learn how to DDOS.
submitted by /u/South_Art7928
[link] [comments]
reddit
How do you Ddos your next door neighbor?
For context me and my neighbor have been in a multi-year dispute involving assault, vandalism, illegal distribution of nicotine among other...
Unauthenticated Sensitive Information Disclosure at [REDACTED]
Hello InfoSec Community, I want to share my submission about this vulnerability, sorry for bad writing, still learning ✌Continue reading on Medium »
Read more...
Hello InfoSec Community, I want to share my submission about this vulnerability, sorry for bad writing, still learning ✌Continue reading on Medium »
Read more...
How many vm do i need in pentesting?
https://www.reddit.com/r/Pentesting/comments/r1nxnu/how_many_vm_do_i_need_in_pentesting/
<!-- SC_OFF -->Guys new pentester here, been wondering do i need a vm ware inside a vm ware or it's fine to use one vm ware on a windows? <!-- SC_ON --> submitted by /u/Orah_Orah (https://www.reddit.com/user/Orah_Orah)
[link] (https://www.reddit.com/r/Pentesting/comments/r1nxnu/how_many_vm_do_i_need_in_pentesting/) [comments] (https://www.reddit.com/r/Pentesting/comments/r1nxnu/how_many_vm_do_i_need_in_pentesting/)
https://www.reddit.com/r/Pentesting/comments/r1nxnu/how_many_vm_do_i_need_in_pentesting/
<!-- SC_OFF -->Guys new pentester here, been wondering do i need a vm ware inside a vm ware or it's fine to use one vm ware on a windows? <!-- SC_ON --> submitted by /u/Orah_Orah (https://www.reddit.com/user/Orah_Orah)
[link] (https://www.reddit.com/r/Pentesting/comments/r1nxnu/how_many_vm_do_i_need_in_pentesting/) [comments] (https://www.reddit.com/r/Pentesting/comments/r1nxnu/how_many_vm_do_i_need_in_pentesting/)
hacking: security in practice
Experiences with card readers of any kinds
I’m just high and wanna read some stories (stories because everything is fiction and theoretical just a mental exercise)
submitted by /u/Enigma-3301
[link] [comments]
Experiences with card readers of any kinds
I’m just high and wanna read some stories (stories because everything is fiction and theoretical just a mental exercise)
submitted by /u/Enigma-3301
[link] [comments]
reddit
Experiences with card readers of any kinds
I’m just high and wanna read some stories (stories because everything is fiction and theoretical just a mental exercise)
hacking: security in practice
An interesting virus for my project.
My Cyber security professor asked us to write a small text like 5 pages about a virus. We must write about how it works,where it attacks , when did it happened and so on.
Do you have any interesting suggestions? If i had to choose i would like an more a clever virus.
Thanks a lot
submitted by /u/Aggelos2001
[link] [comments]
An interesting virus for my project.
My Cyber security professor asked us to write a small text like 5 pages about a virus. We must write about how it works,where it attacks , when did it happened and so on.
Do you have any interesting suggestions? If i had to choose i would like an more a clever virus.
Thanks a lot
submitted by /u/Aggelos2001
[link] [comments]
reddit
An interesting virus for my project.
My Cyber security professor asked us to write a small text like 5 pages about a virus. We must write about how it works,where it attacks , when...
Hacking Articles Tips Tricks Videos Tutorials
Photo
Black Hat Ethical Hacking
Hackers exploit Microsoft MSHTML bug to steal Google, Instagram creds
https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Hackers exploit Microsoft MSHTML bug to steal Google, Instagram credsPost Views: 118
https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/BF2.gif
Reading Time: 1 Minute
A newly discovered Iranian threat actor is stealing Google and Instagram credentials belonging to Farsi-speaking targets worldwide using a new PowerShell-based stealer dubbed PowerShortShell by security researchers at SafeBreach Labs.
The info stealer is also used for Telegram surveillance and collecting system information from compromised devices that get sent to attacker-controlled servers together with the stolen credentials.
As SafeBreach Labs discovered, the attacks (publicly reported in September on Twitter by the Shadow Chaser Group) started in July as spear-phishing emails.
They target Windows users with malicious Winword attachments that exploit a Microsoft MSHTML remote code execution (RCE) bug tracked as CVE-2021-40444.
The PowerShortShell stealer payload is executed by a DLL downloaded on compromised systems. Once launched, the PowerShell script starts collecting data and screen snapshots, exfiltrating it to the attacker’s command-and-control server.
“Almost half of the victims are located in the United States. Based on the Microsoft Word document content – which blames Iran’s leader for the ‘Corona massacre’ and the nature of the collected data, we assume that the victims might be Iranians who live abroad and might be seen as a threat to Iran’s Islamic regime,” said Tomer Bar, Director of Security Research at SafeBreach Labs.
See Also: Complete Offensive Security and Ethical Hacking Course “The adversary might be tied to Iran’s Islamic regime since the Telegram surveillance usage is typical of Iran’s threat actors like Infy, Ferocious Kitten, and Rampant Kitten.”
https://www.bleepstatic.com/images/news/u/1109292/2021/Victim_heat_map.png
<figcaptionVictims heat map (SafeBreach Labs)
The CVE-2021-40444 RCE bug impacting IE’s MSTHML rendering engine has been exploited in the wild as a zero-day starting with August 18, more than two weeks before Microsoft issued a security advisory with a partial workaround, and three weeks before a patch was released.
Most recently, it was exploited in conjunction with malicious advertisements by the Magniber ransomware gang to infect targets with malware and encrypt their devices. Microsoft also said multiple threat actors, including ransomware affiliates, targeted this Windows MSHTML RCE bug using maliciously crafted Office documents delivered via phishing attacks.
See Also: New Windows zero-day with public exploit lets you become an admin These attacks abused the CVE-2021-40444 flaw “as part of an initial access campaign that distributed custom Cobalt Strike Beacon loaders.”
The deployed beacons communicated with malicious infrastructure connected with several cybercrime campaigns, including but not limited to human-operated ransomware.
https://www.bleepstatic.com/images/news/u/1109292/2021/CVE-2021-40444-attack-chain%20.png
<figcaptionCVE-2021-40444 attack-chain (Microsoft)
It’s not surprising that more and more attackers are using CVE-2021-40444 exploits since threat actors started sharing tutorials and proof-of-concept exploits on hacking forums even before the bug was patched.
This likely allowed other threat actors and groups to start exploiting the security flaw in their own attacks.
See Also: Offensive Security Tools: Awesome Bug Bounty Tools The information shared online is simple to follow an[...]
Hackers exploit Microsoft MSHTML bug to steal Google, Instagram creds
https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Hackers exploit Microsoft MSHTML bug to steal Google, Instagram credsPost Views: 118
https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/BF2.gif
Reading Time: 1 Minute
A newly discovered Iranian threat actor is stealing Google and Instagram credentials belonging to Farsi-speaking targets worldwide using a new PowerShell-based stealer dubbed PowerShortShell by security researchers at SafeBreach Labs.
The info stealer is also used for Telegram surveillance and collecting system information from compromised devices that get sent to attacker-controlled servers together with the stolen credentials.
As SafeBreach Labs discovered, the attacks (publicly reported in September on Twitter by the Shadow Chaser Group) started in July as spear-phishing emails.
They target Windows users with malicious Winword attachments that exploit a Microsoft MSHTML remote code execution (RCE) bug tracked as CVE-2021-40444.
The PowerShortShell stealer payload is executed by a DLL downloaded on compromised systems. Once launched, the PowerShell script starts collecting data and screen snapshots, exfiltrating it to the attacker’s command-and-control server.
“Almost half of the victims are located in the United States. Based on the Microsoft Word document content – which blames Iran’s leader for the ‘Corona massacre’ and the nature of the collected data, we assume that the victims might be Iranians who live abroad and might be seen as a threat to Iran’s Islamic regime,” said Tomer Bar, Director of Security Research at SafeBreach Labs.
See Also: Complete Offensive Security and Ethical Hacking Course “The adversary might be tied to Iran’s Islamic regime since the Telegram surveillance usage is typical of Iran’s threat actors like Infy, Ferocious Kitten, and Rampant Kitten.”
https://www.bleepstatic.com/images/news/u/1109292/2021/Victim_heat_map.png
<figcaptionVictims heat map (SafeBreach Labs)
The CVE-2021-40444 RCE bug impacting IE’s MSTHML rendering engine has been exploited in the wild as a zero-day starting with August 18, more than two weeks before Microsoft issued a security advisory with a partial workaround, and three weeks before a patch was released.
Most recently, it was exploited in conjunction with malicious advertisements by the Magniber ransomware gang to infect targets with malware and encrypt their devices. Microsoft also said multiple threat actors, including ransomware affiliates, targeted this Windows MSHTML RCE bug using maliciously crafted Office documents delivered via phishing attacks.
See Also: New Windows zero-day with public exploit lets you become an admin These attacks abused the CVE-2021-40444 flaw “as part of an initial access campaign that distributed custom Cobalt Strike Beacon loaders.”
The deployed beacons communicated with malicious infrastructure connected with several cybercrime campaigns, including but not limited to human-operated ransomware.
https://www.bleepstatic.com/images/news/u/1109292/2021/CVE-2021-40444-attack-chain%20.png
<figcaptionCVE-2021-40444 attack-chain (Microsoft)
It’s not surprising that more and more attackers are using CVE-2021-40444 exploits since threat actors started sharing tutorials and proof-of-concept exploits on hacking forums even before the bug was patched.
This likely allowed other threat actors and groups to start exploiting the security flaw in their own attacks.
See Also: Offensive Security Tools: Awesome Bug Bounty Tools The information shared online is simple to follow an[...]