Hacking Articles Tips Tricks Videos Tutorials

아파트 월패드 해킹으로 알아보는 IoT 보안 현황

실제 피해 사례와 예방법을 알아보자.

12 viewsedited 04:10

11 views04:44

Does NP in GetNPUsers stand for Non-Preauth?

hacking: security in practice
Does NP in GetNPUsers stand for Non-Preauth?

I believe SPN in GetUserSPNs stands for "Service Principal Names" as this tool is used to find Service Principal Names that are associated with normal user account.

https://github.com/SecureAuthCorp/impacket/blob/master/examples/GetUserSPNs.py

Then, I've also looking at impacket GetNPUsers and wondering what is the meaning of NP in it's name?

https://github.com/SecureAuthCorp/impacket/blob/master/examples/GetNPUsers.py

Does NP stand for Non-Preauth as the technique attempt to harvest the non-preauth AS_REP responses?

submitted by /u/w0lfcat
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

I believe SPN in GetUserSPNs stands for "Service Principal Names" as this tool is used to find Service Principal Names that are associated with...

13 viewsedited 04:44

are there anything i can do with a 30gb zune other then turning the zune in to a portable hdd ?

hacking: security in practice
zune 30gb

are there anything i can do with a 30gb zune other then turning the zune in to a portable hdd ?

submitted by /u/ilovewomancum
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

zune 30gb

13 viewsedited 04:44

14 views08:10

Hacking on Medium
Simple File Upload Vulnerability on Post request of Payment Gateway

Introduction:

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Simple File Upload Vulnerability on Post request of Payment Gateway

Introduction:

12 viewsedited 08:10

9 views08:10

Hacking on Medium
Microsoft Announces New Endpoint Security Solutions For SMBs

https://cdn-images-1.medium.com/max/1600/0*RjKNpcS8CJSaTXIr
Defender for Business helps SMBs defend against cybersecurity threats, in conjunction with but not restricted to malware and ransomware…

Continue reading on rootissh »

___________________________
@hacking_Attack
@Hacking_Video

Microsoft Announces New Endpoint Security Solutions For SMBs

Defender for Business helps SMBs defend against cybersecurity threats, in conjunction with but not restricted to malware and ransomware…

8 viewsedited 08:10

How does a TPM actually protect you?

hacking: security in practice
How does a TPM actually protect you?

Sorry if this counts as off topic, but i guess hackers knows the most about how to also protect yourself from hackers.

To me it sounds like a TPM serves no purpose unless your computer gets physically stolen, but i'm pretty sure that's wrong, so i have to ask. I know the TPM 2.0 can be used for DRM purposes with win11. And i know its used in some way with the BitLocker and secure boot, making so you cant usb- / remote boot, like for adding admin accounts and stuff. But i don't know much else.

submitted by /u/tekett
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Sorry if this counts as off topic, but i guess hackers knows the most about how to also protect yourself from hackers. To me it sounds like a TPM...

8 viewsedited 08:44

So I'm a bit new to metasploit , I used to use metasploit across networks using ngrok for port forwarding as my isp doesnt support it. recently ,...

hacking: security in practice
Metasploit....

So I'm a bit new to metasploit , I used to use metasploit across networks using ngrok for port forwarding as my isp doesnt support it. recently , ngrok got banned by most isps in my country , I was wondering if there were any other alternatives to ngrok . and if not help me out with a solution

submitted by /u/Shark_613
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Metasploit....

8 viewsedited 08:44

7 views08:45

Cybersecurity in the ROS 2 communication middleware, targeting the...

hacking: security in practice
Cybersecurity in the ROS 2 communication middleware, targeting the top 6 DDS implementations

https://external-preview.redd.it/YIGtgf8FJr1pFrWObmPQxIRb5_PQ8v_-1EIH1IDPWnk.jpg?width=320&crop=smart&auto=webp&s=c68cb2b88663c9974178f4df94ec2dc394f95dd0 submitted by /u/phretor
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Posted in r/hacking by u/phretor • 1 point and 0 comments

7 viewsedited 08:45

7 views08:46

Your Brain Against Phishing

hacking: security in practice
Your Brain Against Phishing

https://external-preview.redd.it/UlSmMYulvsthxXoTTmbfWHk_9M873GrTHkSwsGhfQRQ.jpg?width=320&crop=smart&auto=webp&s=cd68c065dd4ce7af87bb933f8d527b38b887aa75 submitted by /u/DrinkMoreCodeMore
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Posted in r/hacking by u/DrinkMoreCodeMore • 1 point and 0 comments

8 viewsedited 08:46

7 views09:19

Black Hat Ethical Hacking

Black Hat Ethical Hacking
New Linux malware hides in cron jobs with invalid dates

https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png New Linux malware hides in cron jobs with invalid datesPost Views: 181
https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/BF2.gif
Reading Time: 1 Minute
Security researchers have discovered a new remote access trojan (RAT) for Linux that keeps an almost invisible profile by hiding in tasks scheduled for execution on a non-existent day, February 31st.
Dubbed CronRAT, the malware is currently targeting web stores and enables attackers to steal credit card data by deploying online payment skimmers on Linux servers.

Characterized by both ingenuity and sophistication, as far as malware for online stores is concerned, CronRAT is undetected by many antivirus engines. Clever hideout for payloadsCronRAT abuses the Linux task scheduling system, cron, which allows scheduling tasks to run on non-existent days of the calendar, such as February 31st.

The Linux cron system accepts date specifications as long as they have a valid format, even if the day does not exist in the calendar – which means that the scheduled task won’t execute.

This is what CronRAT relies on to achieve its stealth. A report today from Dutch cyber-security company Sansec explains that it hides a “sophisticated Bash program” in the names of the scheduled tasks.
See Also: Complete Offensive Security and Ethical Hacking Course
“The CronRAT adds a number of tasks to crontab with a curious date specification: 52 23 31 2 3. These lines are syntactically valid, but would generate a run time error when executed. However, this will never happen as they are scheduled to run on February 31st,” Sansec Researchers explain.
https://www.bleepstatic.com/images/news/u/1100723/2021/CronRAT-payload.png
The payloads are obfuscated via multiple layers of compression and Base64 encoding. Cleaned up, the code includes commands for self-destruction, timing modulation, and a custom protocol that allows communication with a remote server.

The researchers note that the malware contacts a command and control (C2) server (47.115.46.167) using an “exotic feature of the Linux kernel that enables TCP communication via a file.”

Furthermore, the connection is done over TCP via port 443 using a fake banner for the Dropbear SSH service, which also helps the malware stay under the radar.

After contacting the C2 server, the disguise falls, sends and receives several commands, and gets a malicious dynamic library. At the end of these exchanges, the attackers behind CronRAT can run any command on the compromised system.

CronRAT has been found on multiple stores across the world, where it was used to inject on the server scripts that steal payment card data – the so-called Magecart attacks.
See Also: New Windows zero-day with public exploit lets you become an admin Sansec describes the new malware as “a serious threat to Linux eCommerce servers,” due to its capabilities:

* Fileless execution
* Timing modulation
* Anti-tampering checksums
* Controlled via binary, obfuscated protocol
* Launches tandem RAT in separate Linux subsystem
* Control server disguised as “Dropbear SSH” service
* Payload hidden in legitimate CRON scheduled task names

All these features make CronRAT virtually undetectable. On VirusTotal scanning service, 12 antivirus engines were unable to process the malicious file and 58 of them did not detect it as a threat.
See Also: Offensive Security Tools: Awesome Bug Bounty Tools https://www.bleepstatic.com/images/news/u/1100723/2021/CronRAT-undetect.jpg
Sansec notes that CronRAT’s novel execution technique also bypassed i[...]

___________________________
@hacking_Attack
@Hacking_Video

New Linux malware hides in cron jobs with invalid dates | Black Hat Ethical Hacking

Security researchers have discovered a new remote access trojan (RAT) for Linux that keeps an almost invisible profile by hiding in tasks scheduled for execution on a non-existent day, February 31st.

15 viewsedited 09:19

Black Hat Ethical Hacking New Linux malware hides in cron jobs with invalid dates https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png New Linux malware hides in cron jobs with invalid datesPost Views: 181 https://ww…

13 viewsedited 09:19

My First Bug Bounties — $100 For Twenty Minutes of Work
https://medium.com/@daniel.j.hunt/my-first-bug-bounties-100-for-twenty-minutes-of-work-f2d99cc9663?source=rss------bug_bounty-5

I just thought I would share my first success with the whole Bug Bounty thing. To be honest it wasn’t as glorious as a lot of other…Continue reading on Medium » (https://medium.com/@daniel.j.hunt/my-first-bug-bounties-100-for-twenty-minutes-of-work-f2d99cc9663?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

My First Bug Bounties — $100 For Twenty Minutes of Work

I just thought I would share my first success with the whole Bug Bounty thing. To be honest it wasn’t as glorious as a lot of other…

17 viewsedited 09:53

My First Bug Bounties — $100 For Twenty Minutes of Work

I just thought I would share my first success with the whole Bug Bounty thing. To be honest it wasn’t as glorious as a lot of other…Continue reading on Medium »
Read more...

15 views10:18

goEnumBruteSpray - User Enumeration And Password Bruteforce On Azure, ADFS, OWA, O365 And Gather Emails On Linkedin

The recommended module is o365 for user enumeration and passwords bruteforce / spray . Additional information can be retrieved to avoid account lockout, to know that the password is good but expired, MFA enabled,...LinkedinThis module should be used to retrieve a list of email addresses before validating them through a user enumeration module. The company will be searched on Linkedin and all people working at these companies will be returned in the specified format.The Linkedin's session cookie li_at is required.SearchEngineThis module should be used to retrieve a list of email addresses before validating them through a user enumeration module. The company name will be searched on Google and Bing with a dork to find people working in the company (site:linkedin.com/in+"%s"). The results title will be parsed to output email addresses in the specified format.AzureUser enumerationThe Azure module is only available to enumerate the users of a tenant. The authentication request will be made on https://autologon.microsoftazuread-sso.com, a detailed response shows if the account does not exist, a MFA is required, if the account is locked, ...ADFSPasswords bruteforce / sprayThe ADFS module is only available to bruteforce or spray a password. The authentication request is sent to https:///adfs/ls/idpinitiatedsignon.aspx?client-request-id=&pullStatus=0. An error message can informs the user if the password is expired O365This module allows to enumerate users and bruteforce / spray passwords.User enumerationSeveral modes are available: office, oauth2 and onedrive (not implemented yet). The office mode is recommended as no authentication is made. Oauth2 can retrieve additional information through AADSTS error code (MFA enable, locked account, disabled account) Passwords bruteforce / sprayAs for the user enumeration, two modes are available: oauth2 and autodiscover (not implemented yet). The Oauth2 is the recommended mode, it allows to get much information thanks to the AADSTS error code.OWAThis module allows to enumerate users and bruteforce / spray passwords.User enumerationEnumeration is made with authentication requests. Authentication for a non-existent user will take longer than for a valid user. At first, the average response time for an invalid user will be calculated and then the response time for each authentication request will be compared.Passwords bruteforce / sprayPlease note that no account locking mechanism can be implemented because no information about it is returned.Creditshttps://github.com/busterb/msmailprobehttps://github.com/0xZDH/o365spray/https://github.com/xFreed0m/ADFSpray/https://github.com/m8r0wn/CrossLinkedDownload GoMapEnum
Read more...

___________________________
@hacking_Attack
@Hacking_Video

11 viewsedited 11:50