ts detection algorithm, eComscan, and the researchers had to rewrite it in order to catch the new threat.
See Also: Hacking stories – Operation Troy – How researchers linked the cyberattacks Source: www.bleepingcomputer.com (Click Link)https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/Untitled-design.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/Microsoft-Vulnerability-RCE-MSHTML-90x90.jpg Hackers exploit Microsoft MSHTML bug to steal Google, Instagram creds1 day ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/windows-hacking-90x90.jpg Malware now trying to exploit new Windows Installer zero-day2 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/https___specials-images.forbesimg.com_imageserve_503493618_Green-binary-code-on-screen-with-Zero-Day-highlighted-in-red-as-viewed-under-a_960x0-90x90.jpg New Windows zero-day with public exploit lets you become an admin3 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/ezgif.com-gif-maker-2-90x90.jpg Microsoft Exchange servers hacked in internal reply-chain attacks4 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/slembunk-android-banking-trojan-targets-31-banks-across-the-world-497808-3-90x90.jpg Android malware BrazKing returns as a stealthier banking trojan1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/redcurl-90x90.jpg RedCurl corporate espionage hackers resume attacks with updated tools1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/ezgif.com-gif-maker-1-1-90x90.jpg WordPress sites are being hacked in fake ransomware attacks1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/ECS-Instance-Types-90x90.png Alibaba ECS instances actively hijacked by cryptomining malware1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/ezgif.com-gif-maker-1-90x90.jpg QBot returns for a new wave of infections using Squirrelwaffle2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/face-malware-virus-infected-red-network-90x90.jpg BotenaGo botnet targets millions of IoT devices with 33 exploits2 weeks ago
The post New Linux malware hides in cron jobs with invalid dates first appeared on Black Hat Ethical Hacking.

___________________________
@hacking_Attack
@Hacking_Video

My First Bug Bounties — $100 For Twenty Minutes of Work
https://medium.com/@daniel.j.hunt/my-first-bug-bounties-100-for-twenty-minutes-of-work-f2d99cc9663?source=rss------bug_bounty-5

I just thought I would share my first success with the whole Bug Bounty thing. To be honest it wasn’t as glorious as a lot of other…Continue reading on Medium » (https://medium.com/@daniel.j.hunt/my-first-bug-bounties-100-for-twenty-minutes-of-work-f2d99cc9663?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

My First Bug Bounties — $100 For Twenty Minutes of Work

I just thought I would share my first success with the whole Bug Bounty thing. To be honest it wasn’t as glorious as a lot of other…Continue reading on Medium »
Read more...

goEnumBruteSpray - User Enumeration And Password Bruteforce On Azure, ADFS, OWA, O365 And Gather Emails On Linkedin

The recommended module is o365 for user enumeration and passwords bruteforce / spray . Additional information can be retrieved to avoid account lockout, to know that the password is good but expired, MFA enabled,...LinkedinThis module should be used to retrieve a list of email addresses before validating them through a user enumeration module. The company will be searched on Linkedin and all people working at these companies will be returned in the specified format.The Linkedin's session cookie li_at is required.SearchEngineThis module should be used to retrieve a list of email addresses before validating them through a user enumeration module. The company name will be searched on Google and Bing with a dork to find people working in the company (site:linkedin.com/in+"%s"). The results title will be parsed to output email addresses in the specified format.AzureUser enumerationThe Azure module is only available to enumerate the users of a tenant. The authentication request will be made on https://autologon.microsoftazuread-sso.com, a detailed response shows if the account does not exist, a MFA is required, if the account is locked, ...ADFSPasswords bruteforce / sprayThe ADFS module is only available to bruteforce or spray a password. The authentication request is sent to https:///adfs/ls/idpinitiatedsignon.aspx?client-request-id=&pullStatus=0. An error message can informs the user if the password is expired O365This module allows to enumerate users and bruteforce / spray passwords.User enumerationSeveral modes are available: office, oauth2 and onedrive (not implemented yet). The office mode is recommended as no authentication is made. Oauth2 can retrieve additional information through AADSTS error code (MFA enable, locked account, disabled account) Passwords bruteforce / sprayAs for the user enumeration, two modes are available: oauth2 and autodiscover (not implemented yet). The Oauth2 is the recommended mode, it allows to get much information thanks to the AADSTS error code.OWAThis module allows to enumerate users and bruteforce / spray passwords.User enumerationEnumeration is made with authentication requests. Authentication for a non-existent user will take longer than for a valid user. At first, the average response time for an invalid user will be calculated and then the response time for each authentication request will be compared.Passwords bruteforce / sprayPlease note that no account locking mechanism can be implemented because no information about it is returned.Creditshttps://github.com/busterb/msmailprobehttps://github.com/0xZDH/o365spray/https://github.com/xFreed0m/ADFSpray/https://github.com/m8r0wn/CrossLinkedDownload GoMapEnum
Read more...

___________________________
@hacking_Attack
@Hacking_Video

Setup Requirements for home lab!
https://www.reddit.com/r/Pentesting/comments/r2kgph/setup_requirements_for_home_lab/

I have 8gbs of ram Single ssd 128 gigs Extra hdd 1 tb i5 7th gen submitted by /u/Dry-Brilliant3087 (https://www.reddit.com/user/Dry-Brilliant3087)
[link] (https://www.reddit.com/r/Pentesting/comments/r2kgph/setup_requirements_for_home_lab/) [comments] (https://www.reddit.com/r/Pentesting/comments/r2kgph/setup_requirements_for_home_lab/)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
List of Bug Bounty write-ups :

FROM INTERNET

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
My First Bug Bounties — $100 For Twenty Minutes of Work

I just thought I would share my first success with the whole Bug Bounty thing. To be honest it wasn’t as glorious as a lot of other…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How to set up Raspberry [ssh+wi-fi]

https://cdn-images-1.medium.com/max/2600/1*RLmj0rI1BBFcJ3mW5osB9g.jpeg
this article shows you how to properly set up and configure your raspberry pi with WI-FI and SSH service enable.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

goEnumBruteSpray - User Enumeration And Password Bruteforce On Azure, ADFS, OWA, O365 And Gather Emails On Linkedin
http://www.kitploit.com/2021/11/goenumbrutespray-user-enumeration-and.html

___________________________
@hacking_Attack
@Hacking_Video

The recommended module is o365 for user enumeration (https://www.kitploit.com/search/label/User%20Enumeration) and passwords bruteforce (https://www.kitploit.com/search/label/Bruteforce) / spray . Additional information can be retrieved to avoid account lockout, to know that the password is good but expired, MFA enabled,...
LinkedinThis module should be used to retrieve a list of email addresses before validating them through a user enumeration (https://www.kitploit.com/search/label/Enumeration) module. The company will be searched on Linkedin and all people working at these companies will be returned in the specified format.The Linkedin's session cookie li_at is required.

___________________________
@hacking_Attack
@Hacking_Video

SearchEngineThis module should be used to retrieve a list of email addresses before validating them through a user enumeration module. The company name will be searched on Google and Bing with a dork to find people working in the company (site:linkedin.com/in+"%s"). The results title will be parsed to output email addresses in the specified format.

___________________________
@hacking_Attack
@Hacking_Video

AzureUser enumerationThe Azure module is only available to enumerate the users of a tenant. The authentication request will be made on https://autologon.microsoftazuread-sso.com, a detailed response shows if the account does not exist, a MFA is required, if the account is locked, ...

___________________________
@hacking_Attack
@Hacking_Video

ADFSPasswords bruteforce / sprayThe ADFS module is only available to bruteforce or spray a password. The authentication request is sent to https:///adfs/ls/idpinitiatedsignon.aspx?client-request-id=&pullStatus=0. An error message can informs the user if the password is expired

___________________________
@hacking_Attack
@Hacking_Video

O365This module allows to enumerate users (https://www.kitploit.com/search/label/Enumerate%20Users) and bruteforce / spray passwords.User enumerationSeveral modes are available: office, oauth2 and onedrive (not implemented yet). The office mode is recommended as no authentication is made. Oauth2 can retrieve additional information through AADSTS error code (https://docs.microsoft.com/en-us/azure/active-directory/develop/reference-aadsts-error-codes) (MFA enable, locked account, disabled account)

___________________________
@hacking_Attack
@Hacking_Video

Passwords bruteforce / sprayAs for the user enumeration, two modes are available: oauth2 and autodiscover (not implemented yet). The Oauth2 is the recommended mode, it allows to get much information thanks to the AADSTS error code (https://docs.microsoft.com/en-us/azure/active-directory/develop/reference-aadsts-error-codes).

___________________________
@hacking_Attack
@Hacking_Video