First reported on Friday turning out to be cybersecurity nightmare for all major companies. This is likely to impact wide range of…Continue reading on Medium » (https://medium.com/@R3V3R53/the-log4j-vulnerability-1d746c6ce576?source=rss------bug_bounty-5)

Hacking on Medium
Best Ethical Hacking Certification Course

https://cdn-images-1.medium.com/max/2400/1*WCfRLpXXoYCOWWTMQvLPbw.jpeg
With growing cyber threats, the ethical hacking certification has become more popular.

Continue reading on Medium »

Hacking on Medium
Install Ngrok

https://cdn-images-1.medium.com/max/1284/1*H7m9XnI_Jj4y6zw7XwLyHQ.gif
Ngrok Installation:

Continue reading on Medium »

Hacking on Medium
Mango @ HackTheBox

https://cdn-images-1.medium.com/max/1280/0*TeqZg6QZdVjfa_H4.jpg
Mango is a 30-point linux machine on hackthebox that involves a NoSQL-Injection which allows to obtain user passwords from a mongo…

Continue reading on Medium »

hacking: security in practice
Windows VM recommendations for running Linux OS’s

Wondering if anyone knows of a well optimized VM geared towards or even specifically for Linux distributions. From what I remember all the ones I’ve tried before were also visually challenging to use at first, is there one with a UI that flows better?

It’s been a while since I’ve messed with VM, so I really have no idea where it’s gone.

Thanks in advance for the feedback!

submitted by /u/NoSloMo
[link] [comments]

Black Hat Ethical Hacking
Attackers can get root by crashing Ubuntu’s AccountsService

https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Attackers can get root by crashing Ubuntu’s AccountsServicePost Views: 190 https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/BECOME-A-PATRON-AND-UNLOCK-EXCLUSIVE-VIDEOS-1.png Reading Time: 1 Minute
A local privilege escalation security vulnerability could allow attackers to gain root access on Ubuntu systems by exploiting a double-free memory corruption bug in GNOME’s AccountsService component. AccountsService is a D-Bus service that helps manipulate and query information attached to the user accounts available on a device.

The security flaw (a memory management bug tracked as CVE-2021-3939) was accidentally spotted by GitHub security researcher Kevin Backhouse while testing an exploit demo for another AccountsService bug that also made it possible to escalate privileges to root on vulnerable devices.

“AccountsService could be made to crash or run programs as an administrator if it received a specially crafted command,” an Ubuntu security advisory explains.

Backhouse found that AccountsService incorrectly handled memory during some language setting operations, a flaw that local attackers could abuse to escalate privileges.

The bug only affects Ubuntu’s fork of AccountsService. Versions impacted by this vulnerability include Ubuntu 21.10, Ubuntu 21.04, and Ubuntu 20.04 LTS.

This privilege escalation flaw was fixed by Canonical in November when AccountsService versions 0.6.55-0ubuntu12~20.04.5, 0.6.55-0ubuntu13.3, 0.6.55-0ubuntu14.1 were released. After applying the updates, you will also need to restart the computer to apply the changes.
See Also: Complete Offensive Security and Ethical Hacking Course Not the fastest, but definitely reliableAs he explains, his CVE-2021-3939 proof of concept exploit is slow (could that several hours) and will not work every time. However, it doesn’t matter since it can be executed until successful, seeing that the double-free bug allows crashing AccountsService as many times as needed.

The only restriction to successfully exploiting this bug is that the AccountsService crashes are rate-limited by systemd, blocking attempts to restart it more than five times every 10 seconds.
PoC video for Ubuntu accountsservice CVE-2021-3939. It's not quick, but it gets you a root shell eventually. https://t.co/YBQStkalNY pic.twitter.com/RRs2vF3vdH

— Kevin Backhouse (@kevin_backhouse) December 13, 2021
See Also: New Windows zero-day with public exploit lets you become an admin
“It relies on chance and the fact that I can keep crashing accountsservice until it’s successful. But would an attacker care? It gets you a root shell, even if you have to wait a few hours,” Backhouse said.

“To me, it feels like magic that it’s even possible to exploit such a small bug, especially considering all the mitigations that have been added to make memory corruption vulnerabilities harder to exploit. Sometimes, all it takes to get root is a little wishful thinking!”

Further details on how the vulnerability was found and the exploit developed are available in Backhouse’s CVE-2021-3939 writeup.
See Also: Offensive Security Tool: Cobalt Strike
Earlier this year, the researcher found an authentication bypass vulnerability in the polkit Linux system service that enabled unprivileged attackers to get a root shell on most modern distros.
See Also: Hacking stories – Rafael Núñez (aka RaFa), hacking NASA with the hacking group: World of Hell
Source: www.bleepingcomputer.com (Click Link)https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/Untitled[...]

-design.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/frame_2_delay-0.5s-90x90.jpg Hackers start pushing malware in worldwide Log4Shell attacks1 day ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/ezgif.com-gif-maker-3-90x90.jpg Malicious Notepad++ installers push StrongPity malware4 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/Kali-Linux-2021.4-Released-90x90.png Kali Linux 2021.4 Released – New Themes and Tools, name-that-hash, truffleHog, S3Scanner, KDE Plasma 5.234 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/cover_image_1598944248.jpg.760x400_q85_crop_upscale-90x90.jpg Hackers infect random WordPress plugins to steal credit cards5 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/ezgif.com-gif-maker-2-90x90.jpg 27 flaws in USB-over-network SDK affect millions of cloud users6 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/5fdb9e7105edc00d5378b856_kafkalogo-90x90.jpg Apache Kafka Cloud Clusters Expose Sensitive Data for Large Companies1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/Excel-als-Malware-Schleuder-Gefahr-durch-XLL-Dateien-Twitter-90x90.png Malicious Excel XLL add-ins push RedLine password-stealing malware1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/ezgif.com-gif-maker-1-90x90.jpg New malware hides as legit nginx process on e-commerce servers2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/ezgif.com-gif-maker-90x90.jpg Microsoft Exchange servers hacked to deploy BlackByte ransomware2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/80-percent-e-commerce-android-apps-leak-personal-data-765x383-1-90x90.jpg Android banking malware infects 300,000 Google Play users2 weeks ago
The post Attackers can get root by crashing Ubuntu’s AccountsService first appeared on Black Hat Ethical Hacking.

Accidental Bug leads to google honorable-mentions

Hey fellow hackers and bug hunter’s,Continue reading on InfoSec Write-ups »
Read more...

The log4j Vulnerability

First reported on Friday turning out to be cybersecurity nightmare for all major companies. This is likely to impact wide range of…Continue reading on Medium »
Read more...

Dark Reading: Attacks/Breaches
XDR: What It Is, What It Isn't

The three must-haves in eXtended Detection and Response are: making data accessible, facilitating real-time threat detection, and providing remediation strategies.

Jektor - A Windows User-Mode Shellcode Execution Tool That Demonstrates Various Techniques That Malware Uses
http://www.kitploit.com/2021/12/jektor-windows-user-mode-shellcode.html

This utility focuses on shellcode injection (https://www.kitploit.com/search/label/Injection) techniques to demonstrate methods that malware may use to execute shellcode on a victim systemDynamically resolves API functions to evade IAT inclusionIncludes usage of undocumented NT Windows API (https://www.kitploit.com/search/label/Windows%20API) functionsSupports local shellcode execution via CreateThreadSupports remote shellcode execution via CreateRemoteThreadSupports local shellcode injection via QueueUserAPCSupports local shellcode injection via EnumTimeFormatsExSupports local shellcode injection via CreateFiber

 Anti-virus detection?:Pre-pending a set of NOPs to a Msfvenom XOR encrypted shellcode payload while using dynamic function address resolutions seems to bypass Windows Defender.IAT Import EvasionJektor makes use of dynamic function address resolutions using LoadLibrary and GetProcessAddress to make static analysis (https://www.kitploit.com/search/label/Static%20Analysis) more difficult.Important functions such as VirtualAlloc are not directly called which makes debugging (https://www.kitploit.com/search/label/Debugging) and dumping the shellcode through breakpoints more difficult.Local shellcode execution via CreateThreadOn Windows when you want to create a new thread for the current process you can call the CreateThread function, this is the most basic technique for executing malicious code or shellcode within a process. You can simply allocate a region of memory for your shellcode, move your shellcode into the allocated region, and then call CreateThread with a pointer to the address of the allocated region. When you call CreateThread you pass the lpStartAddress parameter which is a pointer to the application-defined function that will be executed by the newly created thread.