hacking: security in practice
Fuzzware
I came up with an interesting concept and was wondering if something like this exists or has existed in the wild. Obviously botnets have insane distributed computing power. With this a botnet could share a database of vital binaries running on infected machines. An algorithm could then select binaries to target based on various factors and then use the resources of the network to fuzz the binary and record bugs/crashes. From here the herder (assuming he is not a kiddie) can turn the bug into an exploit assuming it is an exploitable crash and then add this to the propagation mechanism of the malware and the network targets the next binary in the list. This theoretically would result in more infections. More infections result in more computing power, more computing power results in faster bug discovery, more exploits and the cycle continues.
This seems like it would result in a highly scalable botnet and seems like a good way of utilising cpu resources of the machine. I understand that the incentive for this may be low as crypto mining etc is more directly profitable however in the long term this seems like it would pay dividends. More bots on the network and exclusive access to any zero days found.
Tldr: does fuzzware exist and if so what are the limitations of this.
submitted by /u/ryan75195
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
Fuzzware
I came up with an interesting concept and was wondering if something like this exists or has existed in the wild. Obviously botnets have insane distributed computing power. With this a botnet could share a database of vital binaries running on infected machines. An algorithm could then select binaries to target based on various factors and then use the resources of the network to fuzz the binary and record bugs/crashes. From here the herder (assuming he is not a kiddie) can turn the bug into an exploit assuming it is an exploitable crash and then add this to the propagation mechanism of the malware and the network targets the next binary in the list. This theoretically would result in more infections. More infections result in more computing power, more computing power results in faster bug discovery, more exploits and the cycle continues.
This seems like it would result in a highly scalable botnet and seems like a good way of utilising cpu resources of the machine. I understand that the incentive for this may be low as crypto mining etc is more directly profitable however in the long term this seems like it would pay dividends. More bots on the network and exclusive access to any zero days found.
Tldr: does fuzzware exist and if so what are the limitations of this.
submitted by /u/ryan75195
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
Fuzzware
I came up with an interesting concept and was wondering if something like this exists or has existed in the wild. Obviously botnets have insane...
Hacking Articles Tips Tricks Videos Tutorials
Photo
hacking: security in practice
Log4j JNDI inj. vuln scanner
https://external-preview.redd.it/TObBUcbVrZqRfjb7L-byC-mva8mnRFzT1VwApAvfMVM.jpg?width=640&crop=smart&auto=webp&s=817a209da99caaa52157172f44d7006598c50789 submitted by /u/DrinkMoreCodeMore
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
Log4j JNDI inj. vuln scanner
https://external-preview.redd.it/TObBUcbVrZqRfjb7L-byC-mva8mnRFzT1VwApAvfMVM.jpg?width=640&crop=smart&auto=webp&s=817a209da99caaa52157172f44d7006598c50789 submitted by /u/DrinkMoreCodeMore
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
Log4j JNDI inj. vuln scanner
Posted in r/hacking by u/DrinkMoreCodeMore • 1 point and 0 comments
hacking: security in practice
Patator broke and I'm trying to find another http brute forced that works well
Hey guys, I have been using patator on Kali after getting frustrated with Hydra, but the last Kali 2021.4 update seems to have broken it and now I just get FAILs with some pycurl CURLOPT parsing error. First if anyone has got past this issue I'd be very grateful if you could help me too, but otherwise I'm trying to find a tool for brute forcing https authentication forms, including using json requests/responses, which generally isn't a big deal as long as you can edit the body content.
To be clear my issues with Hydra have been misleading errors, especially being told to use a different module when I'm using the right module, but I will try going back to it and putting up with it. I have fiddled with the python install on Kali a lot and can't see myself fixing this issue.
Many thanks if you can help me!
submitted by /u/ripperroo5
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
Patator broke and I'm trying to find another http brute forced that works well
Hey guys, I have been using patator on Kali after getting frustrated with Hydra, but the last Kali 2021.4 update seems to have broken it and now I just get FAILs with some pycurl CURLOPT parsing error. First if anyone has got past this issue I'd be very grateful if you could help me too, but otherwise I'm trying to find a tool for brute forcing https authentication forms, including using json requests/responses, which generally isn't a big deal as long as you can edit the body content.
To be clear my issues with Hydra have been misleading errors, especially being told to use a different module when I'm using the right module, but I will try going back to it and putting up with it. I have fiddled with the python install on Kali a lot and can't see myself fixing this issue.
Many thanks if you can help me!
submitted by /u/ripperroo5
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
Patator broke and I'm trying to find another http brute forced...
Hey guys, I have been using patator on Kali after getting frustrated with Hydra, but the last Kali 2021.4 update seems to have broken it and now I...
hacking: security in practice
are there any hackers that do it just to mess with people?
first im no hacker, not by any means. but im curious to know if people do shit because its funny (ie hacking into a advertising billboard and displaying a dick drawn in ms paint)
submitted by /u/FURRYPORN42069
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
are there any hackers that do it just to mess with people?
first im no hacker, not by any means. but im curious to know if people do shit because its funny (ie hacking into a advertising billboard and displaying a dick drawn in ms paint)
submitted by /u/FURRYPORN42069
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
Reddit
Explore this post and more from the hacking community
Kubernetes Pentesting, which entry point?
https://www.reddit.com/r/Pentesting/comments/rg12qn/kubernetes_pentesting_which_entry_point/
<!-- SC_OFF -->How you all protect your kubernetes against pentest? For example, if google.com (https://google.com/) is hosted in a kubernetes cluster, the ip address I get from nslookup is the entry point that i want to pentest or what else? note: I am doing to my own machine and has fully consent to do it <!-- SC_ON --> submitted by /u/anonymous_2600 (https://www.reddit.com/user/anonymous_2600)
[link] (https://www.reddit.com/r/Pentesting/comments/rg12qn/kubernetes_pentesting_which_entry_point/) [comments] (https://www.reddit.com/r/Pentesting/comments/rg12qn/kubernetes_pentesting_which_entry_point/)
https://www.reddit.com/r/Pentesting/comments/rg12qn/kubernetes_pentesting_which_entry_point/
<!-- SC_OFF -->How you all protect your kubernetes against pentest? For example, if google.com (https://google.com/) is hosted in a kubernetes cluster, the ip address I get from nslookup is the entry point that i want to pentest or what else? note: I am doing to my own machine and has fully consent to do it <!-- SC_ON --> submitted by /u/anonymous_2600 (https://www.reddit.com/user/anonymous_2600)
[link] (https://www.reddit.com/r/Pentesting/comments/rg12qn/kubernetes_pentesting_which_entry_point/) [comments] (https://www.reddit.com/r/Pentesting/comments/rg12qn/kubernetes_pentesting_which_entry_point/)
Accidental Bug leads to google honorable-mentions
https://infosecwriteups.com/accidental-bug-leads-to-google-honorable-mentions-7dad9eecbd7f?source=rss------bug_bounty-5
https://infosecwriteups.com/accidental-bug-leads-to-google-honorable-mentions-7dad9eecbd7f?source=rss------bug_bounty-5
Hey fellow hackers and bug hunter’s,Continue reading on InfoSec Write-ups » (https://infosecwriteups.com/accidental-bug-leads-to-google-honorable-mentions-7dad9eecbd7f?source=rss------bug_bounty-5)
First reported on Friday turning out to be cybersecurity nightmare for all major companies. This is likely to impact wide range of…Continue reading on Medium » (https://medium.com/@R3V3R53/the-log4j-vulnerability-1d746c6ce576?source=rss------bug_bounty-5)
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Best Ethical Hacking Certification Course
https://cdn-images-1.medium.com/max/2400/1*WCfRLpXXoYCOWWTMQvLPbw.jpeg
With growing cyber threats, the ethical hacking certification has become more popular.
Continue reading on Medium »
Best Ethical Hacking Certification Course
https://cdn-images-1.medium.com/max/2400/1*WCfRLpXXoYCOWWTMQvLPbw.jpeg
With growing cyber threats, the ethical hacking certification has become more popular.
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Mango @ HackTheBox
https://cdn-images-1.medium.com/max/1280/0*TeqZg6QZdVjfa_H4.jpg
Mango is a 30-point linux machine on hackthebox that involves a NoSQL-Injection which allows to obtain user passwords from a mongo…
Continue reading on Medium »
Mango @ HackTheBox
https://cdn-images-1.medium.com/max/1280/0*TeqZg6QZdVjfa_H4.jpg
Mango is a 30-point linux machine on hackthebox that involves a NoSQL-Injection which allows to obtain user passwords from a mongo…
Continue reading on Medium »
hacking: security in practice
Windows VM recommendations for running Linux OS’s
Wondering if anyone knows of a well optimized VM geared towards or even specifically for Linux distributions. From what I remember all the ones I’ve tried before were also visually challenging to use at first, is there one with a UI that flows better?
It’s been a while since I’ve messed with VM, so I really have no idea where it’s gone.
Thanks in advance for the feedback!
submitted by /u/NoSloMo
[link] [comments]
Windows VM recommendations for running Linux OS’s
Wondering if anyone knows of a well optimized VM geared towards or even specifically for Linux distributions. From what I remember all the ones I’ve tried before were also visually challenging to use at first, is there one with a UI that flows better?
It’s been a while since I’ve messed with VM, so I really have no idea where it’s gone.
Thanks in advance for the feedback!
submitted by /u/NoSloMo
[link] [comments]
reddit
Windows VM recommendations for running Linux OS’s
Wondering if anyone knows of a well optimized VM geared towards or even specifically for Linux distributions. From what I remember all the ones...
Hacking Articles Tips Tricks Videos Tutorials
Photo
Black Hat Ethical Hacking
Attackers can get root by crashing Ubuntu’s AccountsService
https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Attackers can get root by crashing Ubuntu’s AccountsServicePost Views: 190 https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/BECOME-A-PATRON-AND-UNLOCK-EXCLUSIVE-VIDEOS-1.png Reading Time: 1 Minute
A local privilege escalation security vulnerability could allow attackers to gain root access on Ubuntu systems by exploiting a double-free memory corruption bug in GNOME’s AccountsService component. AccountsService is a D-Bus service that helps manipulate and query information attached to the user accounts available on a device.
The security flaw (a memory management bug tracked as CVE-2021-3939) was accidentally spotted by GitHub security researcher Kevin Backhouse while testing an exploit demo for another AccountsService bug that also made it possible to escalate privileges to root on vulnerable devices.
“AccountsService could be made to crash or run programs as an administrator if it received a specially crafted command,” an Ubuntu security advisory explains.
Backhouse found that AccountsService incorrectly handled memory during some language setting operations, a flaw that local attackers could abuse to escalate privileges.
The bug only affects Ubuntu’s fork of AccountsService. Versions impacted by this vulnerability include Ubuntu 21.10, Ubuntu 21.04, and Ubuntu 20.04 LTS.
This privilege escalation flaw was fixed by Canonical in November when AccountsService versions 0.6.55-0ubuntu12~20.04.5, 0.6.55-0ubuntu13.3, 0.6.55-0ubuntu14.1 were released. After applying the updates, you will also need to restart the computer to apply the changes.
See Also: Complete Offensive Security and Ethical Hacking Course Not the fastest, but definitely reliableAs he explains, his CVE-2021-3939 proof of concept exploit is slow (could that several hours) and will not work every time. However, it doesn’t matter since it can be executed until successful, seeing that the double-free bug allows crashing AccountsService as many times as needed.
The only restriction to successfully exploiting this bug is that the AccountsService crashes are rate-limited by systemd, blocking attempts to restart it more than five times every 10 seconds.
PoC video for Ubuntu accountsservice CVE-2021-3939. It's not quick, but it gets you a root shell eventually. https://t.co/YBQStkalNY pic.twitter.com/RRs2vF3vdH
— Kevin Backhouse (@kevin_backhouse) December 13, 2021
See Also: New Windows zero-day with public exploit lets you become an admin
“It relies on chance and the fact that I can keep crashing accountsservice until it’s successful. But would an attacker care? It gets you a root shell, even if you have to wait a few hours,” Backhouse said.
“To me, it feels like magic that it’s even possible to exploit such a small bug, especially considering all the mitigations that have been added to make memory corruption vulnerabilities harder to exploit. Sometimes, all it takes to get root is a little wishful thinking!”
Further details on how the vulnerability was found and the exploit developed are available in Backhouse’s CVE-2021-3939 writeup.
See Also: Offensive Security Tool: Cobalt Strike
Earlier this year, the researcher found an authentication bypass vulnerability in the polkit Linux system service that enabled unprivileged attackers to get a root shell on most modern distros.
See Also: Hacking stories – Rafael Núñez (aka RaFa), hacking NASA with the hacking group: World of Hell
Source: www.bleepingcomputer.com (Click Link)https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/Untitled[...]
Attackers can get root by crashing Ubuntu’s AccountsService
https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Attackers can get root by crashing Ubuntu’s AccountsServicePost Views: 190 https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/BECOME-A-PATRON-AND-UNLOCK-EXCLUSIVE-VIDEOS-1.png Reading Time: 1 Minute
A local privilege escalation security vulnerability could allow attackers to gain root access on Ubuntu systems by exploiting a double-free memory corruption bug in GNOME’s AccountsService component. AccountsService is a D-Bus service that helps manipulate and query information attached to the user accounts available on a device.
The security flaw (a memory management bug tracked as CVE-2021-3939) was accidentally spotted by GitHub security researcher Kevin Backhouse while testing an exploit demo for another AccountsService bug that also made it possible to escalate privileges to root on vulnerable devices.
“AccountsService could be made to crash or run programs as an administrator if it received a specially crafted command,” an Ubuntu security advisory explains.
Backhouse found that AccountsService incorrectly handled memory during some language setting operations, a flaw that local attackers could abuse to escalate privileges.
The bug only affects Ubuntu’s fork of AccountsService. Versions impacted by this vulnerability include Ubuntu 21.10, Ubuntu 21.04, and Ubuntu 20.04 LTS.
This privilege escalation flaw was fixed by Canonical in November when AccountsService versions 0.6.55-0ubuntu12~20.04.5, 0.6.55-0ubuntu13.3, 0.6.55-0ubuntu14.1 were released. After applying the updates, you will also need to restart the computer to apply the changes.
See Also: Complete Offensive Security and Ethical Hacking Course Not the fastest, but definitely reliableAs he explains, his CVE-2021-3939 proof of concept exploit is slow (could that several hours) and will not work every time. However, it doesn’t matter since it can be executed until successful, seeing that the double-free bug allows crashing AccountsService as many times as needed.
The only restriction to successfully exploiting this bug is that the AccountsService crashes are rate-limited by systemd, blocking attempts to restart it more than five times every 10 seconds.
PoC video for Ubuntu accountsservice CVE-2021-3939. It's not quick, but it gets you a root shell eventually. https://t.co/YBQStkalNY pic.twitter.com/RRs2vF3vdH
— Kevin Backhouse (@kevin_backhouse) December 13, 2021
See Also: New Windows zero-day with public exploit lets you become an admin
“It relies on chance and the fact that I can keep crashing accountsservice until it’s successful. But would an attacker care? It gets you a root shell, even if you have to wait a few hours,” Backhouse said.
“To me, it feels like magic that it’s even possible to exploit such a small bug, especially considering all the mitigations that have been added to make memory corruption vulnerabilities harder to exploit. Sometimes, all it takes to get root is a little wishful thinking!”
Further details on how the vulnerability was found and the exploit developed are available in Backhouse’s CVE-2021-3939 writeup.
See Also: Offensive Security Tool: Cobalt Strike
Earlier this year, the researcher found an authentication bypass vulnerability in the polkit Linux system service that enabled unprivileged attackers to get a root shell on most modern distros.
See Also: Hacking stories – Rafael Núñez (aka RaFa), hacking NASA with the hacking group: World of Hell
Source: www.bleepingcomputer.com (Click Link)https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/Untitled[...]