hacking: security in practice
Bunkerized-Nginx is a web server based on the notorious nginx and focused on security.

https://github.com/bunkerity/bunkerized-nginx

submitted by /u/totie01010
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Why Log4j Mitigation Is Fraught With Challenges

The Log4j flaw exists in a component that is not always easy to detect and is widely used beyond an organization's own networks and systems.

Installing go written tools with go version 1.17 and above
https://medium.com/@Albertini_/installing-go-written-tools-with-go-version-1-17-and-above-14437bfcdbf3?source=rss------bug_bounty-5

Hi, Let me guess having issues with your normal go installation process,Continue reading on Medium » (https://medium.com/@Albertini_/installing-go-written-tools-with-go-version-1-17-and-above-14437bfcdbf3?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Some POS is stealing my brother’s content

This kid name @colesonairsoft has been stealing my brothers tiktok videos and reposting them for millions of views. My brother was decently successful with his videos but hasn’t been able to post since he’s at a special therapy school. Any way I could get some info of his just from his user name or anything to get it to stop.

submitted by /u/Vaultboy905
[link] [comments]
➖ Sent by @TheFeedReaderBot ➖

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Bypass of allowedLdapHost mitigation in Log4j 2.15.0

https://external-preview.redd.it/mkz7vXKBGaq4pECXyRuGxqrinT4t6z0FqFuHWemL4CA.jpg?width=108&crop=smart&auto=webp&s=0512370297937f3304cff941dbbba5b28b28f73b submitted by /u/Gallus
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
The CrowdSec Log4J worldwide threat tracker

submitted by /u/klausagnoletti
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Black Hat Ethical Hacking
Log4j attackers switch to injecting Monero miners via RMI

https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Log4j attackers switch to injecting Monero miners via RMIPost Views: 66 https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/BECOME-A-PATRON-AND-UNLOCK-EXCLUSIVE-VIDEOS-1.png Reading Time: 1 Minute
Some threat actors exploiting the Apache Log4j vulnerability have switched from LDAP callback URLs to RMI or even used both in a single request for maximum chances of success. For now, this trend was observed by threat actors looking to hijack resources for Monero mining, but others could adopt it at any time. From LDAP to RMIMost attacks targeting the Log4j “Log4Shell” vulnerability have been through the LDAP (Lightweight Directory Access Protocol) service.

The switch to RMI (Remote Method Invocation) API seems counter-intuitive at first, considering that this mechanism is subject to additional checks and constraints, but that’s not always the case.

Some JVM (Java Virtual Machine) versions do not feature stringent policies, and as such, RMI can sometimes be a more effortless channel to achieving RCE (remote code execution) than LDAP.

Moreover, LDAP requests are now solidified as part of the infection chain and are more tightly monitored by defenders.

For example, many IDS/IPS tools are currently filtering requests with JNDI and LDAP, so there’s a chance that RMI may be ignored at this point.
https://www.bleepstatic.com/images/news/u/1220909/Code%20and%20Details/post_request.png
Hijacking resources to make moneyIn the attacks seen by Juniper Labs, threat actors are interested in mining Monero on the compromised servers and present it as an almost innocuous activity that “ain’t going to harm anyone else.”
https://www.bleepstatic.com/images/news/u/1220909/Security/actor_message.png
Locate, update, reportThe only feasible way to defend against what has become one of the most impactful vulnerabilities in recent history is to upgrade Log4j to version 2.16.0.

Additionally, admins should keep a close eye on Apache’s security section for new version announcements and apply them immediately.

For mitigation guidance and complete technical information resources, check out CISA’s detailed page on Log4Shell.
See Also: Offe[...]

___________________________
@hacking_Attack
@Hacking_Video

nsive Security Tool: Cobalt Strike
There’s an extensive list of products affected by CVE-2021-44228, and a list with vendor-supplied advisories is constantly updated on this GitHub repository.

Finally, if you notice suspicious activity on your systems, consider reporting it to the FBI or CISA, who are working feverishly to contain the damage and remediate the situation.
See Also: Hacking stories – Rafael Núñez (aka RaFa), hacking NASA with the hacking group: World of Hell
Source: www.bleepingcomputer.com (Click Link)https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/Untitled-design.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/Hackers-Using-Malicious-IIS-Server-Module-to-Steal-Microsoft-Exchange-560x380-1-90x90.jpg Hackers steal Microsoft Exchange credentials using IIS module1 day ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/how-ransomware-works-1024x535-1-90x90.png New ransomware now being deployed in Log4Shell attacks2 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/0d73-article-201111-ubuntu-90x90.jpg Attackers can get root by crashing Ubuntu’s AccountsService3 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/frame_2_delay-0.5s-90x90.jpg Hackers start pushing malware in worldwide Log4Shell attacks4 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/ezgif.com-gif-maker-3-90x90.jpg Malicious Notepad++ installers push StrongPity malware1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/Kali-Linux-2021.4-Released-90x90.png Kali Linux 2021.4 Released – New Themes and Tools, name-that-hash, truffleHog, S3Scanner, KDE Plasma 5.231 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/cover_image_1598944248.jpg.760x400_q85_crop_upscale-90x90.jpg Hackers infect random WordPress plugins to steal credit cards1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/ezgif.com-gif-maker-2-90x90.jpg 27 flaws in USB-over-network SDK affect millions of cloud users1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/5fdb9e7105edc00d5378b856_kafkalogo-90x90.jpg Apache Kafka Cloud Clusters Expose Sensitive Data for Large Companies1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/Excel-als-Malware-Schleuder-Gefahr-durch-XLL-Dateien-Twitter-90x90.png Malicious Excel XLL add-ins push RedLine password-stealing malware2 weeks ago
The post Log4j attackers switch to injecting Monero miners via RMI first appeared on Black Hat Ethical Hacking.

___________________________
@hacking_Attack
@Hacking_Video

Installing go written tools with go version 1.17 and above

Hi, Let me guess having issues with your normal go installation process,Continue reading on Medium »
Read more...

Dark Reading: Attacks/Breaches
Mobile App Developers Keep Fraudulent Traffic at Bay with Anti-Fraud API

The new API and SDK from Pixalate helps mobile developers avoid getting their apps delisted from app stores by detecting and blocking fraudulent traffic.

CALDERA
https://www.reddit.com/r/redteamsec/comments/ries0q/caldera/

Hey everyone, Does anyone here use or have used CALDERA? A small question regarding initial access; Are we meant to deploy an agent locally then do lateral movement within the network to reach another target machines? Thank you! submitted by /u/lifeislemon_not_cake (https://www.reddit.com/user/lifeislemon_not_cake)
[link] (https://www.reddit.com/r/redteamsec/comments/ries0q/caldera/) [comments] (https://www.reddit.com/r/redteamsec/comments/ries0q/caldera/)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
She got Government standard Cyber Protection and tested it

https://cdn-images-1.medium.com/max/800/1*vD_m7r0AG8iUG26913E_-g.jpeg
As someone who helps businesses with “ business transformation processes and procedures “ and who has tested eg #intrusiondetection…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Chinese Spies Accused of Using Huawei in Secret Australia Telecom Hack

https://external-preview.redd.it/5abmbtm4j4M0PMkSZ50yDzVxSx11bs6bzLy30OmWZiE.jpg?width=640&crop=smart&auto=webp&s=3109a06ea802f79674de8df16693b8ee4b8f42b5 submitted by /u/thegreatblazed
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Black Hat Ethical Hacking
Offensive Security Tool: log4j-scan

https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Offensive Security Tool: log4j-scanPost Views: 490 https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/BECOME-A-PATRON-AND-UNLOCK-EXCLUSIVE-VIDEOS-1.png Reading Time: 4 Minutes

Offensive Security Tool: log4j-scan GitHub Link log4j-scanA fully automated, accurate, and extensive scanner for finding vulnerable log4j hosts.

https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/log4j.png DescriptionThis tool written by fullhunt, who have been researching the Log4J RCE (CVE-2021-44228) since it was released, and worked in preventing this vulnerability with their customers. They are open-sourcing an open detection and scanning tool for discovering and fuzzing for Log4J RCE CVE-2021-44228 vulnerability. This shall be used by security teams to scan their infrastructure for Log4J RCE, and also test for WAF bypasses that can result in achieving code execution on the organization’s environment.

It supports DNS OOB callbacks out of the box, there is no need to setup a DNS callback server.
See Also: Log4j attackers switch to injecting Monero miners via RMI Features* Support for lists of URLs.
* Fuzzing for more than 60 HTTP request headers (not only 3-4 headers as previously seen tools).
* Fuzzing for HTTP POST Data parameters.
* Fuzzing for JSON data parameters.
* Supports DNS callback for vulnerability discovery and validation.
* WAF Bypass payloads. Usage$ python3 log4j-scan.py -h
[•] CVE-2021-44228 - Apache Log4j RCE Scanner
[•] Scanner provided by FullHunt.io - The Next-Gen Attack Surface Management Platform.
[•] Secure your External Attack Surface with FullHunt.io. usage: log4j-scan.py [-h] [-u URL] [-l USEDLIST] [--request-type REQUEST_TYPE] [--headers-file HEADERS_FILE] [--run-all-tests] [--exclude-user-agent-fuzzing]
[--wait-time WAIT_TIME] [--waf-bypass] [--dns-callback-provider DNS_CALLBACK_PROVIDER] [--custom-dns-callback-host CUSTOM_DNS_CALLBACK_HOST] optional arguments: -h, --help show this help message and exit -u URL, --url URL Check a single URL. -p PROXY, --proxy PROXY Send requests through proxy. -l USEDLIST, --list USEDLIST Check a list of URLs. --request-type REQUEST_TYPE Request Type: (get, post) - [Default: get]. --headers-file HEADERS_FILE Headers fuzzing list - [default: headers.txt]. --run-all-tests Run all available tests on each URL. --exclude-user-agent-fuzzing Exclude User-Agent header from fuzzing - useful to bypass weak checks on User-Agents. --wait-time WAIT_TIME Wait time after all URLs are processed (in seconds) - [Default: 5]. --waf-bypass Extend scans with WAF bypass payloads. --dns-callback-provider DNS_CALLBACK_PROVIDER DNS Callback provider (Options: dnslog.cn, interact.sh) - [Default: interact.sh]. --custom-dns-callback-host CUSTOM_DNS_CALLBACK_HOST Custom DNS Callback Host.
See Also: Complete Offensive Security and Ethical Hacking Course Scan a Single URL$ python3 log4j-scan.py -u https://log4j.lab.secbot.local Scan a Single URL using all Request Methods: GET, POST (url-encoded form), POST (JSON body)$ python3 log4j-scan.py -u https://log4j.lab.secbot.local –run-all-tests Discover WAF bypasses on the environment.$ python3 log4j-scan.py -u https://log4j.lab.secbot.local –waf-bypass Scan a list of URLs$ python3 log4j-scan.py -l urls.txt Installation$ pip3 install -r requirements.txt Docker Supportgit clone https://github.com/fullhunt/log4j-scan.git cd log4j-scan
sudo docker build -t log4j-scan .
sudo docker run -it --rm log4j-scan # With URL list "urls.txt" in current directory
docker run -it --rm -v $PWD:/data log4j-scan -l /data/urls.txt Legal DisclaimerT[...]

___________________________
@hacking_Attack
@Hacking_Video

his project is made for educational and ethical testing purposes only. Usage of log4j-scan for attacking targets without prior mutual consent is illegal. It is the end user’s responsibility to obey all applicable local, state and federal laws.
See Also: Hacking stories – Rafael Núñez (aka RaFa), hacking NASA with the hacking group: World of Hell https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/Untitled-design.png Recent Tools* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/40pivot2-90x90.png Offensive Security Tool: Cobalt Strike1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/gomapenum-90x90.png Offensive Security Tool: GoMapEnum2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/hashcat-90x90.png Offensive Security Tool: Hashcat3 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/bugbountytools-90x90.png Offensive Security Tools: Awesome Bug Bounty Tools4 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/unknown-1-90x90.png Offensive Security Tool: Pentesting Tools1 month ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/unknown-90x90.png Offensive Security Tool: DotDotPwn – The Directory Traversal Fuzzer1 month ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/10/unknown-1-90x90.png Offensive Security Tool: ZipExec2 months ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/10/carbon-2048x1374-1-90x90.png OSINT Tool: Osintgram2 months ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/10/dalfox-90x90.png Offensive Security Tool: Dalfox2 months ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/10/unknown-90x90.png Offensive Security Tool: Whispers2 months ago
The post Offensive Security Tool: log4j-scan first appeared on Black Hat Ethical Hacking.

___________________________
@hacking_Attack
@Hacking_Video