Hacking Articles
A Detailed Guide on Log4J Penetration Testing

In this article, we are going to discuss and demonstrate in our lab setup, the exploitation of the new vulnerability identified as CVE-2021-44228 affecting the

The post A Detailed Guide on Log4J Penetration Testing appeared first on Hacking Articles.

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Mercury: Vulnhub Walkthrough

https://cdn-images-1.medium.com/max/950/0*5ln8EB952NYwOgOI.png
Makineyi indirebilirsiniz.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
I think I found an undetected malware... I think. What now? Do I report it somewhere?

Hi all,
Writing for some advice as I'm not an expert on the topic at all.

I went to a copy shop with a USB stick with some files on it. I plugged it in the PC, and something weird happen to the directory structure of the USB stick. I paid little attention I was in a rush, and in the end I managed to print the files.

Week after, I go back to the same copy shop and the same thing happens again. Now I got curious and I poked around the USB stick at home. It turns out the "weird directory structure" on the USB stick is a windows shortcut (.lnk) that looks like a link to the USB stick itself (same icon, same name as the USB stick) BUT in reality it executes cmd.exewith some parameters. The original content of the USB stick has been moved to a folder on the stick that has been made hidden, so when opening the USB stick one sees a shortcut to the USB stick itself only. As said, the shortcut is not actually a shortcut to the USB stick, it just looks like it. From what I understand the shortcut passes the content of a hidden file, that is now also on the USB stick, as input to cmd.exe(i.e. something like cmd.exe < wbq.usb). And then somehow it opens the hidden folder with your original files. The user, if they fail to notice the little "shortcut" icon badge on the shortcut, might thing double clicking on the USB drive didn't work the first time and just click it again and now it works (but they unknowingly run the cmd.exe)

So, now I want to know if I got infected with malware, and with what malware.

I submitted the lnkfile and the hidden file to VirusTotal.

For the lnkfile, I get 4 vendors out of 57 flagging it as malicious. I guess it flags anything that executes CMD as potentially malicious? For the hidden file (wbq.usb), I get 0 vendors detecting it as malicious.

There so many red flags here that I'm pretty sure something fishy is going on. I opened the hidden file with an hex editor and I found a string with an http URL that looks fishy and includes the URL parameter "%computername%" as if it was sending this info out.

This must be some kind of malware, right? None of the VirusTotal vendor detected the wbq.usbas malicious, should I report it to someone for further analysis? Would it help at all? i.e. if it's indeed a malware that currently evades detection, vendors can add it to their list, right? I just want to make sure this malware doesn't cause damage to others.

... and from now on, better change copy shop :)

submitted by /u/pidumobe
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Need some help to share my passion for cybersecurity with a younger generation

submitted by /u/2X2Dragon
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How to add code for file saving to a software?

I downloaded the free trial version of asesprite. the only problem is that it doesn't save (because it's a trial version).

I have access to all the files that run the program (I think). I also know how to code. I was wondering how I can save a thing I have created as a .ase file.

even better it has a button for saving and downloading. but when I click it it just tells me that you can't save and doesnt nothing at the moment.

does anyone know how I can fix this. or should I be a normal person and do it the right way?

submitted by /u/Wheezenog
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Fake Wifi Network

Disclaimer: I am not one to use hacking for malicious purposes, only for testing on my own network and my own machine(s).

Hello,

I am relatively new to hacking however I do have some prior experience. I am looking for a way to setup a fake wifi network to do some info testing on my backup machine. Any recommendations?

submitted by /u/ChickenParm277
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
picoCTF write up: Where are the robots

https://cdn-images-1.medium.com/max/600/1*KlGimrIDTFUJqDXnARmz1w.jpeg
Note: You should not copy flag from here just find one by following steps mentioned here.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
I want to hack the FB feed so it displays my metrics, quotes, reminders and other positive things.

Hi all - hoping for your help.

I’m hoping for posts to be in my feed that I want - things like my weight, my goals, inspirational posts.

My initial thinking is to create a few pages, profiles and somehow integrate it into a social media auto posting app linking it to my metrics.

Does anyone have any other suggestions etc?

I was inspired @doomscroll_bot on Twitter.

submitted by /u/J748DB10
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
So.. yall know how this happened?

So basically me, my bro, and my cousin are all chilling when all of a sudden my cousin gets a call from my brothers phone... who isn't calling him. My cousin answers and there's this literal grown man saying "WHERES THE VACCINES??" So my cousin hangs up and trys to call back, which calls my brothers phone... wth??

submitted by /u/DylanNoll
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Alan c2 post-exploitation framework v5.0 - All you can in-memory edition
https://www.reddit.com/r/redteamsec/comments/rjowin/alan_c2_postexploitation_framework_v50_all_you/

submitted by /u/aparata_s4tan (https://www.reddit.com/user/aparata_s4tan)
[link] (https://antonioparata.blogspot.com/2021/12/alan-c2-framework-v50-all-you-can-in.html) [comments] (https://www.reddit.com/r/redteamsec/comments/rjowin/alan_c2_postexploitation_framework_v50_all_you/)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
picoCTF write up: vault-door-1

https://cdn-images-1.medium.com/max/600/1*KlGimrIDTFUJqDXnARmz1w.jpeg
Note: Here flag is given but you should not copy flag from here just find one by following steps mentioned here.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Zararlı Process Tespiti 1 — Log Analysis — Security | Sysmon | T1055

https://cdn-images-1.medium.com/max/600/1*gSutEhxzeZaBDoOJAruPhA.png
Zararlı process tespiti blog yazısı ile elimizdeki mevcut loglar üzerinden olay analizini yaparken nelere dikkat etmemiz gerektiğini…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Malicious Process Detection 1 — Log Analysis — Security | Sysmon | T1055

https://cdn-images-1.medium.com/max/600/1*gSutEhxzeZaBDoOJAruPhA.png
With the malicious process detection blog post, I will explain what we should pay attention to when analyzing the event through the…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Cybersecurity researchers have discovered an entirely new attack vector that enables adversaries to…

https://cdn-images-1.medium.com/max/1600/0*Vgr5C2fnOfXNbrHL.jpg
“This newly-discovered attack vector means that anyone with a vulnerable Log4j version on their machine or local private network can…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video