Hacking on Medium
How I hacked into one of India’s biggest online book stores(RCE and more)

https://cdn-images-1.medium.com/max/2424/1*gkIdvKFZpyzR-b8zrGsIuA.jpeg
This article is going to be about how I found my 1st RCE on one of India’s biggest e-commerce sites(+ a few more bugs).

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Keylogger For PC

https://cdn-images-1.medium.com/max/1284/1*jYfK0N7SjIfZF1StmZekOQ.gif
BE THE MASTER OF YOUR TARGET’S PERSONAL COMPUTER!

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Record number of information spill destinations recognized in 2021

https://cdn-images-1.medium.com/max/600/1*sGLXFGJymcvpd0UmR-aqZw.jpeg
Succumbing to a ransomware assault is one of the most noticeably terrible things that can happen to an organization from a network…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How to enter darknet in 2021?

https://cdn-images-1.medium.com/max/2600/0*QORIvlMyf4yQ--3o
How to enter the dark site of Internet? How to use it? Is it legal? What content can you find there? In this article you will learn dark…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
What is the most clever life hack you’ve learned?

https://cdn-images-1.medium.com/max/600/0*2lFi7M9Qu06PuXAs
Golden spending rule: If you can’t afford two of it, you can’t afford it.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
So many updates in the Open-Source firmware scanner EMBA right before christmas. We have created a new teaser video to give you some insights ... Check it out

https://external-preview.redd.it/F_D4tMht0UVqxGkTFLkUoQriCIL-DYavcbLQ4D87cRc.jpg?width=640&crop=smart&auto=webp&s=4a5fa132ea3ef4e604f0f2dca3b1e998bb723c42 submitted by /u/_m-1-k-3_
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Reverse ransomware

Instead of it being used to extort a target, could ransomware or some zero day be used to de incentivize personal data from being exfiltrated? For example, could sensitive data be stored in a folder with a malicious payload that automatically launches any time the folder is attempted to be accessed by an unauthorized user?

Edit: added attempted to be

submitted by /u/plantsnotevolution
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Writing an article on hackers

I am writing a piece on hackers focusing on the resulting lifestyle and living challenges of choosing this as a profession. Obviously there would be no attribution to anyone involved. My interests are focused on understanding and documenting all that is involved and what is good, bad, and of course ugly.

I'm looking for forums where I might find what I'm looking for and/or contacts with individuals if possible. Anyone willing to help?

PM me if your interested of have information that would be useful for my article.

Thanks.

submitted by /u/ggregC
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Subdomain Takeover Via Flywheel

Flywheel is managed WordPress hosting built for designers and creative agencies to build, scale, and manage hundreds of WordPress sites…Continue reading on Medium »
Read more...

Exploit Collector
Backdoor.Win32.BNLite Buffer Overflow

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Android VM_MAYWRITE Access To Shared Zygote JIT Mapping

https://1.bp.blogspot.com/-q1b99IBpI9c/WWlu5sPD0hI/AAAAAAAAIJI/No13BTu40mUIIhRH8r1ULckiDMJCd7zkQCLcBGAs/s1600/h106.png
This bug report describes a vulnerability in ART that allows normal applications to insert arbitrary code into unused executable memory in zygote and other applications.

MD5 | 8485539d964fd35ecf94557cacb68903

Download
Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Backdoor.Win32.Mellpon.b Information Disclosure

https://1.bp.blogspot.com/-oHWy7Hh5Fq0/WWlvjd6DOFI/AAAAAAAAIQk/2SpYZjutgb8xmw4nQNmHjmGkgvDsryz_gCLcBGAs/s1600/h93.png
Backdoor.Win32.Mellpon.b malware suffers from an information leakage vulnerability.

MD5 | 9fb1627230f1b16ea76628ed71fca5e9

Download
Discovery / credits: Malvuln - malvuln.com (c) 2021
Original source: https://malvuln.com/advisory/e499a4c359a8cc46e641f39c0ed548f9.txt
Contact: malvuln13@gmail.com
Media: twitter.com/malvuln

Threat: Backdoor.Win32.Mellpon.b
Vulnerability: Remote Unauthenticated Information Disclosure
Description: The malware listens on TCP port 80 and creates a dir named "tanaka" with a file named C.html, the HTML file contains a list of all dirs on the system and their contents. Third-party attackers who can reach an infected system can view the screen dumps taken periodically as well as view all directories and files on the system. The screen dumps are in a JPG file named "~ss.jpg" and can be accessed by URL http://x.x.x.x/~ss.jpg.
Type: PE32
MD5: e499a4c359a8cc46e641f39c0ed548f9
Vuln ID: MVID-2021-0430
Disclosure: 12/16/2021

Exploit/PoC:
1) Open a web browser to the infected host and navigate to C.html or ~ss.jpg.

Screenshots of the infected host.
http://x.x.x.x/~ss.jpg

2) All files and directory contents.
http://x.x.x.x/C.html

2021/10/13 20:24 28131582 C.html

../
C:/
2016/11/21 15:06 DIR $Recycle.Bin/
2018/03/13 15:36 DIR Boot/
2016/11/21 11:28 DIR Documents and Settings/
2021/12/13 20:21 DIR dump/
2017/12/13 20:41 DIR PerfLogs/
2021/12/13 20:17 DIR Program Files/
2021/10/03 20:49 DIR Program Files (x86)/
2021/10/03 21:12 DIR ProgramData/
2018/03/13 00:44 DIR Recovery/
2018/03/13 00:45 DIR System Volume Information/
2018/03/13 00:45 DIR Users/
2021/07/07 21:14 DIR Windows/
2018/03/01 01:53 398082 bootmgr
2017/09/29 08:41 1 BOOTNXT
2018/03/13 00:40 8192 BOOTSECT.BAK
2021/10/12 21:10 671088640 pagefile.sys
2021/10/12 21:10 16777216 swapfile.sys
C:/$Recycle.Bin/

etc...

Disclaimer: The information contained within this advisory is supplied "as-is" with no warranties or guarantees of fitness of use or otherwise. Permission is hereby granted for the redistribution of this advisory, provided that it is not altered except by reformatting it, and that due credit is given. Permission is explicitly given for insertion in vulnerability databases and similar, provided that due credit is given to the author. The author is not responsible for any misuse of the information contained herein and accepts no responsibility for any damage caused by the use or misuse of this information. The author prohibits any malicious use of security related information or exploits by the author or elsewhere. Do not attempt to download Malware samples. The author of this website takes no responsibility for any kind of damages occurring from improper Malware handling or the downloading of ANY Malware mentioned on this website or elsewhere. All content Copyright (c) Malvuln.com (TM).

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video