Hacking Articles Tips Tricks Videos Tutorials

True Life: Recovering Bug Bounty Hacker: Chapter 1 — GoodRx

I decided to start a series about the experiences I’ve had with bug bounty programs. I wanted to first start off with the written story so…

11 viewsedited 04:28

11 views04:28

I decided to start a series about the experiences I’ve had with bug bounty programs. I wanted to first start off with the written story so…Continue reading on Medium » (https://jonathandata1.medium.com/true-life-recovering-bug-bounty-hacker-chapter-1-goodrx-3707f517a3fa?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

True Life: Recovering Bug Bounty Hacker: Chapter 1 — GoodRx

I decided to start a series about the experiences I’ve had with bug bounty programs. I wanted to first start off with the written story so…

14 viewsedited 04:28

13 views07:01

[CROSSPOST] - Being one of the first "outsiders" to legally hack...

hacking: security in practice
[CROSSPOST] - Being one of the first "outsiders" to legally hack the US Military

https://external-preview.redd.it/muNeEnVe4tzn09YiP3h4mOj3DP7Kan3LFMuH4XztBNk.jpg?width=640&crop=smart&auto=webp&s=7a63077f905a600d55bad2881f3f744bbf271612 submitted by /u/0x0MLT
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Posted in r/hacking by u/0x0MLT • 1 point and 0 comments

13 viewsedited 07:01

First Move on a Hacked Home Network as the Attacker?

hacking: security in practice
First Move on a Hacked Home Network as the Attacker?

A few months ago, I wrote a piece on doing a dissociation attack to capture a three-way handshake between a device and router. Once obtained, I brute-force the hash. Simple stuff. It was a final project for my security boot camp. Well, I'd like to follow it up with part 2, and I want to write it on what a hacker does once they are on your home network. What type of damage they can do.

My thoughts were that if I'm able to be on the home network I'm checking the default gateway for default credentials. If I can log into that then I can truly own it, right? Am I off base, what would you do?

submitted by /u/strider-no9
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

A few months ago, I wrote a piece on doing a dissociation attack to capture a three-way handshake between a device and router. Once obtained, I...

8 viewsedited 07:01

6 views07:03

Hacking on Medium
True Life: Recovering Bug Bounty Hacker: Chapter 1 — GoodRx

https://cdn-images-1.medium.com/max/1200/1*yzZO8lNIqof4B-iQK70K3A.jpeg
I decided to start a series about the experiences I’ve had with bug bounty programs. I wanted to first start off with the written story so…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

True Life: Recovering Bug Bounty Hacker: Chapter 1 — GoodRx

I decided to start a series about the experiences I’ve had with bug bounty programs. I wanted to first start off with the written story so…

7 viewsedited 07:03

8 views07:03

Hacking on Medium
HTB: SolidState Writeup w/o Metasploit

https://cdn-images-1.medium.com/max/600/0*Ab2cGgFivF6pyHIG.png
Solidstate was another cool box to learn from. It introduced me to a new service and its vulnerabilities. Let’s get into how I popped it.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

HTB: SolidState Writeup w/o Metasploit

Solidstate was another cool box to learn from. It introduced me to a new service and its vulnerabilities. Let’s get into how I popped it.

12 viewsedited 07:03

13 views07:03

Hacking on Medium
“We recently had an Admin quit without notice; can you see if they did anything malicious?”

https://cdn-images-1.medium.com/max/600/1*snMs8Ht3gLUIRdkW9Xf5UQ.jpeg
1/13/2022

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

“We recently had an Admin quit without notice; can you see if they did anything malicious?”

1/13/2022

14 viewsedited 07:03

Exploit Kits vs. Google Chrome - Avast Threat Labs

Exploit Kits vs. Google Chrome - Avast Threat Labs
https://www.reddit.com/r/redteamsec/comments/s3o120/exploit_kits_vs_google_chrome_avast_threat_labs/

submitted by /u/dmchell (https://www.reddit.com/user/dmchell)
[link] (https://decoded.avast.io/janvojtesek/exploit-kits-vs-google-chrome/) [comments] (https://www.reddit.com/r/redteamsec/comments/s3o120/exploit_kits_vs_google_chrome_avast_threat_labs/)

___________________________
@hacking_Attack
@Hacking_Video

Posted in r/redteamsec by u/dmchell • 1 point and 0 comments

15 viewsedited 09:31

14 views10:21

Black Hat Ethical Hacking

Black Hat Ethical Hacking
AWS fixes security flaws that exposed AWS customer data

https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png AWS fixes security flaws that exposed AWS customer dataPost Views: 112 https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/BECOME-A-PATRON-AND-UNLOCK-EXCLUSIVE-VIDEOS-1.png Reading Time: 1 Minute
Amazon Web Services (AWS) has addressed an AWS Glue security issue that allowed attackers to access and alter data linked to other AWS customer accounts. AWS Glue is a serverless cloud data integration service that helps discover, prepare, and combine data for app development, machine learning, and analytics.

The flaw stemmed from an exploitable AWS Glue feature and an internal service API misconfiguration that allowed Orca Security security researchers to escalate privileges to gain access to all service resources in the region.

“During our research, we were able to identify a feature in AWS Glue that could be exploited to obtain credentials to a role within the AWS service’s own account, which provided us full access to the internal service API,” explained Yanir Tsarimi, a Cloud Security Researcher at Orca Security.

“In combination with an internal misconfiguration in the Glue internal service API, we were able to further escalate privileges within the account to the point where we had unrestricted access to all resources for the service in the region, including full administrative privileges.”
See Also: Complete Offensive Security and Ethical Hacking Course
The researchers added that their findings were uncovered using only Orca Security-owned AWS accounts and that they didn’t access information or data belonging to other AWS customers during their research.
https://www.bleepstatic.com/images/news/security/attack-flow.gif
While investigating the vulnerability, the researchers assumed roles trusted by the Glue service in other AWS customers’ accounts (every account with Glue access has at least one such role).

They were also able to query and alter AWS Glue service-related resources in an AWS region, including but not limited to metadata for Glue jobs, dev endpoints, workflows, crawlers, and triggers.

The AWS Glue service team reproduced and confirmed the flaw within hours after receiving Orca Security’s report and partially mitigated the issue globally by the following morning.
Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?

If you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com
See Also: Microsoft: New critical Windows HTTP vulnerability is wormable They deployed full mitigation for the Superglue vulnerability in just a few days, preventing potential attackers from accessing AWS Glue customers’ data.

Analysis of logs going back to the launch of the service have been conducted and we have conclusively determined that the only activity associated with this issue was between accounts owned by the researcher. No other customer’s accounts were impacted. All actions taken by AWS Glue in a customer’s account are logged in CloudTrail records controlled and viewable by customers. — AWS

AWS’ Security Team has also patched a second vulnerability found by Orca Security in the AWS CloudFormation service (dubbed BreakingFormation).

According to the researchers, this XXE (XML External Entity) flaw led to file and credential disclosure of internal AWS infrastructure services.

“Our research team believes, given the data found on the host (including credentials and dat[...]

___________________________
@hacking_Attack
@Hacking_Video

AWS fixes security flaws that exposed AWS customer data | Black Hat Ethical Hacking

Amazon Web Services (AWS) has addressed an AWS Glue security issue that allowed attackers to access and alter data linked to other AWS customer accounts.

15 viewsedited 10:21