Hacking Articles Tips Tricks Videos Tutorials

Meta expands its bug bounty program to include data scrapping
https://techgigdotcom.medium.com/meta-expands-its-bug-bounty-program-to-include-data-scrapping-66defaf3781?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Medium

Meta expands its bug bounty program to include data scrapping

Financial rewards starting at $500 are on offer for scraping bugs and scraped database reports.

10 viewsedited 09:01

Hacking Articles Tips Tricks Videos Tutorials

10 views09:01

Hacking Articles Tips Tricks Videos Tutorials

Financial rewards starting at $500 are on offer for scraping bugs and scraped database reports.Continue reading on Medium » (https://techgigdotcom.medium.com/meta-expands-its-bug-bounty-program-to-include-data-scrapping-66defaf3781?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Medium

Meta expands its bug bounty program to include data scrapping

Financial rewards starting at $500 are on offer for scraping bugs and scraped database reports.

11 viewsedited 09:01

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
Intercepting kernel / system traffic?

Is it possible to intercept traffic on a system? Im thinking of the same way as one would intercept and record network traffic would it be possible on a multiuser system to record any activity the other users are doing, (not thinking of only network traffic but general computer activity aswell)

Thanks in advance :)

submitted by /u/FranciscoBlackmore
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Intercepting kernel / system traffic?

Is it possible to intercept traffic on a system? Im thinking of the same way as one would intercept and record network traffic would it be...

10 viewsedited 09:22

Hacking Articles Tips Tricks Videos Tutorials

11 views09:40

Hacking Articles Tips Tricks Videos Tutorials

Photo

Black Hat Ethical Hacking
Hackers steal Microsoft Exchange credentials using IIS module

https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Hackers steal Microsoft Exchange credentials using IIS modulePost Views: 148 https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/BECOME-A-PATRON-AND-UNLOCK-EXCLUSIVE-VIDEOS-1.png Reading Time: 1 Minute
Threat actors are installing a malicious IIS web server module named ‘Owowa’ on Microsoft Exchange Outlook Web Access servers to steal credentials and execute commands on the server remotely.
The development of Owowa likely started in late 2020 based on compilation data and when it was uploaded to the VirtusTotal malware scanning service.

Based on Kaspersky’s telemetry data, the most recent sample in circulation is from April 2021, targeting servers in Malaysia, Mongolia, Indonesia, and the Philippines.

These systems belong to government organizations, public transportation companies, and other crucial entities.

Kaspersky underlines that the ‘Owowa’ targets aren’t limited to Southeast Asia, and they have also seen signs of infections in Europe.
https://www.bleepstatic.com/images/news/u/1220909/Diagrams/map(1).png
An uncommon backdoorMicrosoft Exchange servers are commonly targeted with web shells that allow threat actors to remotely execute commands on a server and are usually the focus of defenders.

As such, using an IIS module as a backdoor is an excellent way to stay hidden. The actors can send seemingly innocuous authentication requests to OWA, evading standard network monitoring rules as well.

“IIS modules are not a common format for backdoors, especially when compared to typical web application threats like web shells and can therefore easily be missed during standard file monitoring efforts.” explains the report by Kaspersky.

Additionally, the implant persists even after the Exchange software is updated, so the infection needs to take place only once.

Kaspersky comments that the actor may rely on ProxyLogon flaws to compromise the server, which remains a problem even after being patched nine months ago.

However, the actors didn’t do a perfect job with Owowa’s development, failing to hide PDB paths in the malware executable and causing server crashes in some cases.
See Also: New Windows zero-day with public exploit lets you become an admin Powerful capabilitiesOwowa specifically targets OWA applications of Exchange servers and is designed to log the credentials of users that successfully authenticate on the OWA login web page.

The login success is automatically validated by monitoring the OWA application to generate an authentication token.
https://www.bleepstatic.com/images/news/u/1220909/Code%20and%20Details/token.png
___________________________
@hacking_Attack
@Hacking_Video

Black Hat Ethical Hacking

Hackers steal Microsoft Exchange credentials using IIS module | Black Hat Ethical Hacking

Threat actors are installing a malicious IIS web server module named 'Owowa' on Microsoft Exchange Outlook Web Access servers to steal credentials and execute commands on the server remotely.

13 viewsedited 09:40

Hacking Articles Tips Tricks Videos Tutorials

Black Hat Ethical Hacking Hackers steal Microsoft Exchange credentials using IIS module https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Hackers steal Microsoft Exchange credentials using IIS modulePost Views: 148…

Tool: Cobalt Strike Detect and remove the IIS moduleAdmins can use the command ‘appcmd.exe’ or the IIS configuration tool to get a list of all loaded modules on an IIS server.

In the cases seen by the researchers, the malicious module uses the name “ExtenderControlDesigner,” as shown below.
https://www.bleepstatic.com/images/news/u/1220909/Security/list%20of%20modules.png
(Click Link)https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/Untitled-design.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/how-ransomware-works-1024x535-1-90x90.png New ransomware now being deployed in Log4Shell attacks1 day ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/0d73-article-201111-ubuntu-90x90.jpg Attackers can get root by crashing Ubuntu’s AccountsService2 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/frame_2_delay-0.5s-90x90.jpg Hackers start pushing malware in worldwide Log4Shell attacks3 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/ezgif.com-gif-maker-3-90x90.jpg Malicious Notepad++ installers push StrongPity malware6 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/Kali-Linux-2021.4-Released-90x90.png Kali Linux 2021.4 Released – New Themes and Tools, name-that-hash, truffleHog, S3Scanner, KDE Plasma 5.236 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/cover_image_1598944248.jpg.760x400_q85_crop_upscale-90x90.jpg Hackers infect random WordPress plugins to steal credit cards1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/ezgif.com-gif-maker-2-90x90.jpg 27 flaws in USB-over-network SDK affect millions of cloud users1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/5fdb9e7105edc00d5378b856_kafkalogo-90x90.jpg Apache Kafka Cloud Clusters Expose Sensitive Data for Large Companies1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/Excel-als-Malware-Schleuder-Gefahr-durch-XLL-Dateien-Twitter-90x90.png Malicious Excel XLL add-ins push RedLine password-stealing malware1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/ezgif.com-gif-maker-1-90x90.jpg New malware hides as legit nginx process on e-commerce servers2 weeks ago
The post Hackers steal Microsoft Exchange credentials using IIS module first appeared on Black Hat Ethical Hacking.

___________________________
@hacking_Attack
@Hacking_Video

15 viewsedited 09:40

Hacking Articles Tips Tricks Videos Tutorials

11 views10:00

Hacking Articles Tips Tricks Videos Tutorials

Photo

Hacking Articles
Thales1 Vulnhub Walkthrough

“Thales” is a Capture the Flag challenge available on Vulnhub. MachineBoy deserves credit for developing this box. In this box, we will learn how to

The post Thales1 Vulnhub Walkthrough appeared first on Hacking Articles.

___________________________
@hacking_Attack
@Hacking_Video

Hacking Articles

Thales1 Vulnhub Walkthrough

Thales1 VulnHub guide: Perform SQL injection to gain shell and escalate privileges via sudo abuse on a misconfigured Linux machine.

14 viewsedited 10:00

Hacking Articles Tips Tricks Videos Tutorials

Dark Reading: Attacks/Breaches
Rise in API-Based Attacks Underscore Investments in New Tools

Noname Security's Series C fundraising tips the startup to over $1 billion in valuation, a sign that organizations are beginning to look for API security tools and investor are looking for innovation in the space.

14 views10:49

Source

Hacking Articles Tips Tricks Videos Tutorials

13 views12:26

Hacking Articles Tips Tricks Videos Tutorials

Photo

Hacking on Medium
Log4j — Consequences for Data Science Teams?

https://cdn-images-1.medium.com/max/2600/1*E1BhHySLxKtThD067wyq2g.jpeg
What does Data Teams have to do with it?

Continue reading on CodeX »

___________________________
@hacking_Attack
@Hacking_Video

Medium

Log4j — Consequences for Data Science Teams?

What does Data Teams have to do with it?

15 viewsedited 12:26

Hacking Articles Tips Tricks Videos Tutorials