Hacking on Medium
Neovim for Beginners — Fuzzy File Search (Part 1)

https://cdn-images-1.medium.com/max/1524/1*s0ZFYIxRvbwRbHjZxUkDZA.png
File searching in Neovim, with and without plugins.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
My Favourite Sleep Supplement

https://cdn-images-1.medium.com/max/1600/1*5jL7PfUCIe4JQ9o2CFhM1A.jpeg
The amino acid you’ve never heard of may help get you to the Land of Nod, even after you’ve had a few.

Continue reading on Better Humans »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Cracking a Weak Password

https://cdn-images-1.medium.com/max/1172/1*u_oIPzeBBQXWr9xLP3TdgA.png
It has been a while since I have documented myself going through a lab, but I think it will be good to look back on and show my progress…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Extremely Critical Log4J Vulnerability Leaves Much of the Internet at Risk

https://cdn-images-1.medium.com/max/728/0*wJuJHEmPt8hf14Da
An Apache Software Foundation update contains fixes to a zero-day vulnerability affecting Apache Log4j (Java-based logging library). The…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
SpyderSec VM Walkthrough

https://cdn-images-1.medium.com/max/750/0*pGkqRq6ZbEGCpI7g.png
Makineyi indirebilirsiniz.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Cómo evitar la fuga de datos corporativos en la nube

https://cdn-images-1.medium.com/max/1622/0*XRsDlmevuUq6R5VX
PUBLICADO EN 6 ENERO, 2022POR EHACKING

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
New Mac Malware Samples Underscore Growing Threat

A handful of malicious tools that emerged last year showed threat actors may be getting more serious about attacking Apple macOS and iOS environments.

Dark Reading: Attacks/Breaches
Rethinking Cybersecurity Jobs as a Vocation Instead of a Profession

The prevailing mindset is that security practitioners are professionals, and thus, require a college degree. But there are some flaws in that logic.

Dark Reading: Attacks/Breaches
CDN Cache Poisoning Allows DoS Attacks Against Cloud Apps

A Romanian researcher discovers more than 70 vulnerabilities in how applications and their content delivery networks handle cache misses that open the doors to denial-of-service attacks.

___________________________
@hacking_Attack
@Hacking_Video

Another simple .NET executable to create and add a backdoor user
https://www.reddit.com/r/redteamsec/comments/rxjijb/another_simple_net_executable_to_create_and_add_a/

Another simple but useful .NET executable that creates and adds an arbitrary user or domain user to the Local Administrators groups. Very useful for privilege escalations on Windows (i.e. unquoted service path) Repo: https://github.com/notdodo/LocalAdminSharp submitted by /u/d_o_d_o_ (https://www.reddit.com/user/d_o_d_o_)
[link] (https://www.reddit.com/r/redteamsec/comments/rxjijb/another_simple_net_executable_to_create_and_add_a/) [comments] (https://www.reddit.com/r/redteamsec/comments/rxjijb/another_simple_net_executable_to_create_and_add_a/)

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Backdoor.Win32.Dsklite.a Denial Of Service

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Backdoor.Win32.Jtram.a Insecure Credential Storage

https://4.bp.blogspot.com/-hp3wB9AXd0k/WWlvDY5V44I/AAAAAAAAIKs/ScSIhWVAvDAhjeMkIwqbNby9r3gKQvOEgCLcBGAs/s1600/h128.png
Backdoor.Win32.Jtram.a malware suffers from an insecure credential storage vulnerability.

MD5 | a67cc235af4c610f3be1873cf9b09cf6

Download
Discovery / credits: Malvuln - malvuln.com (c) 2021
Original source: https://malvuln.com/advisory/596882dfba543b23ad3225d24ee5e800.txt
Contact: malvuln13@gmail.com
Media: twitter.com/malvuln

Threat: Backdoor.Win32.Jtram.a
Vulnerability: Insecure Credential Storage
Description: The malware listens on TCP port 1321 as an FTP server. The credentials are stored in cleartext in a file named "rconnect.conf.
Type: PE32
MD5: 596882dfba543b23ad3225d24ee5e800
Vuln ID: MVID-2022-0442
Disclosure: 01/05/2022

Exploit/PoC:
C:\Windows\walker\rconnect.conf

"rconnect.conf"

LicenseName "thanksKRUPT"
LicenseKey "8337B4C8:7A6C84D2"
MaxConnections 100
BindInterface All
BindPort 1321
CommandTimeout 300
ConnectTimeout 15
LookupHosts On

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video