Hacking on Medium
Genesis Block Ventures invests in disBalancer

https://cdn-images-1.medium.com/max/1200/1*NzX4QhaB9rcIYyQYlzZ4kA.png
disBalancer keeps sharing great news with you! Genesis Block Ventures (GBV) has invested in our project! It is a great step towards our…

Continue reading on Medium »

HOW I GOT MY NAME IN BBC’S HALL OF FAME
https://faiyazhacks.medium.com/how-i-got-my-name-in-bbcs-hall-of-fame-54f7898521ad?source=rss------bug_bounty-5

Hi Everyone, Hope you all are doing well and hunting bugs ;)Continue reading on Medium » (https://faiyazhacks.medium.com/how-i-got-my-name-in-bbcs-hall-of-fame-54f7898521ad?source=rss------bug_bounty-5)

KitPloit - PenTest Tools!
NtHiM - Super Fast Sub-domain Takeover Detection

https://1.bp.blogspot.com/-Bv04vr0Tezg/YGvZrp6IXTI/AAAAAAAAVyQ/-QOm4suW2_4fVMUGL_sAfQpAOvyTT1GYwCNcBGAsYHQ/w640-h228/header.png NtHiM - Super Fast Sub-domain Takeover Detection InstallationMethod 1: Using Pre-compiled BinariesThe pre-compiled binaries for different systems are available in the Releases page. You can download the one suitable for your system, unzip the file and start using NtHiM. Method 2: Using Crates.ioNtHiM is available on Crates.io. So, if you have Rust installed on your system, you can simply install NtHiM with the following command: cargo install NtHiMMethod 3: Manual BuildYou will need Cargo to perform the manual build for NtHiM. If you have Cargo installed, you can simply follow the steps below:

1. Clone this repository, git clone https://github.com/TheBinitGhimire/NtHiM;
2. Go inside the folder, cd NtHiM;
3. Use the cargo buildcommand,
4. Go inside the newly-created target folder, and open the debug folder inside it, cd target/debug;
5. You will find NtHiM.exe (on Microsoft Windows) or NtHiM binary (on Linux).

The installation walkthrough for NtHiM has been uploaded to YouTube, covering all of these three methods, and you can watch the video here: How to Install and Use NtHiM (Now, the Host is Mine!)? Super Fast Sub-domain Takeover Detection! UsageFlag Description Example -h Display help related to usage! NtHiM -h -t Scan a single target! NtHiM -t https://example.example.com -f Scan a list of targets from a file! NtHiM -f hostnames.txt -c Number of Concurrent Threads! NtHiM -c 100 -f hostnames.txt -V Display the version information! NtHiM -V Use Case 1 (Single Target):NtHiM -t https://example.example.comUse Case 2 (Multiple Targets):NtHiM -f hostnames.txtUsage Demonstration:https://1.bp.blogspot.com/-JD0wAIHSiNg/YGvZ0d96cPI/AAAAAAAAVyU/40kqQv8ss9sTcz4i5aIV5z-3cgqyQO2vwCNcBGAsYHQ/w640-h360/NtHiM_9_demonstration.gif ExamplesSingle Targethttps://1.bp.blogspot.com/-iHiSdyAQtxM/YGvZ4qPQ-zI/AAAAAAAAVyY/EY-q4fZGMs8Ae8So7HFeR83oZMOz8T5xwCNcBGAsYHQ/w640-h120/NtHiM_10_example1.png Multiple Targets using Concurrent Threadshttps://1.bp.blogspot.com/-fffvPUdMId8/YGvZ8iBr38I/AAAAAAAAVyg/Qq0BiFSgLecOarV_IfSFkcBAoGMi1wvpgCNcBGAsYHQ/w640-h272/NtHiM_11_example2.png WorkflowPlatform IdentificationNtHiM uses the data provided in EdOverflow/can-i-take-over-xyz for the platform identification. Frequently Asked Questions (FAQs)If you have any questions regarding NtHiM, please raise an issue by going to the Issues page.

Some of your queries might have been answered in one of the existing issues, so please make sure to check the Issues with the FAQ label before raising an issue on your own. Contributions and Feature RequestsIf you are interested in contributing in the development of NtHiM, you can feel free to create a Pull Request with modifications in the original code, or you shall open up a new issue, and I will try to include the feature as requested.

There is no restriction on anyone for contributing to the development of NtHiM. If you would like to contribute, you can feel free to do so. Download NtHiM

Playing The Chain Game
https://un1b1c.medium.com/playing-the-chain-game-c894018ddd1d?source=rss------bug_bounty-5

HeyContinue reading on Medium » (https://un1b1c.medium.com/playing-the-chain-game-c894018ddd1d?source=rss------bug_bounty-5)

🔥🔥 A new post-exploitation framework for Kubernetes: Kubesploit 🔥🔥
https://www.reddit.com/r/Pentesting/comments/mmukme/a_new_postexploitation_framework_for_kubernetes/

submitted by /u/kubiscan (https://www.reddit.com/user/kubiscan)
[link] (https://github.com/cyberark/kubesploit) [comments] (https://www.reddit.com/r/Pentesting/comments/mmukme/a_new_postexploitation_framework_for_kubernetes/)

Deep Web
Where are the mods?

Allowing all this spamming!?

submitted by /u/ColaManiac1
[link] [comments]

🔥🔥 A new post-exploitation framework for Kubernetes: Kubesploit 🔥🔥
https://www.reddit.com/r/redteamsec/comments/mmujvr/a_new_postexploitation_framework_for_kubernetes/

submitted by /u/kubiscan (https://www.reddit.com/user/kubiscan)
[link] (https://github.com/cyberark/kubesploit) [comments] (https://www.reddit.com/r/redteamsec/comments/mmujvr/a_new_postexploitation_framework_for_kubernetes/)

hacking: security in practice
Is there a way of getting a wifi password with an IP Address. Just with an android device?

Im not into hacking that much but i would like to know if its possible and how it works.

submitted by /u/Fanco14
[link] [comments]

hacking: security in practice
Where are the news of US hacking other countries?

I have been reading daily CyberSec (Dark Reading and SANS) news for about 4 months now (a little before the SolarWinds attack). I have seen coverage of different threat agency's and names of different hacker groups. Majority seem to be from Russia or China. However, I have not seen a single news piece in regards to US hacking something. What is the reason for this?

submitted by /u/swtbstrd
[link] [comments]

hacking: security in practice
Where are the news of US hacking other countries?

I have been reading daily CyberSec (Dark Reading and SANS) news for about 4 months now (a little before the SolarWinds attack). I have seen coverage of different threat agency's and names of different hacker groups. Majority seem to be from Russia or China. However, I have not seen a single news piece in regards to US hacking something. What is the reason for this?

submitted by /u/swtbstrd
[link] [comments]

hacking: security in practice
This squirrel.exe buisness

So I recently saw this squirrel.exe updater for ms teams and wondered what was up with it. I know it's an updater but I saw that there was a vulnerability with it as well, how would I utilize this vulnerability?

submitted by /u/jesus-da-wizard
[link] [comments]

Exploit Collector
Trojan.Win32.Hosts2.yqf Insecure Permissions

https://4.bp.blogspot.com/-AtnQ_7I3m3U/WWlvZV4J0qI/AAAAAAAAIOs/cujNKaH5r44v1_gHRqEIroH6JJl6WzjUACLcBGAs/s1600/h58.png
Trojan.Win32.Hosts2.yqf malware suffers from an insecure permissions vulnerability.

MD5 | 6677ad9aed6d61f51559c907ef77ad19

Download
Discovery / credits: Malvuln - malvuln.com (c) 2021
Original source: https://malvuln.com/advisory/274a6e846c5a4a2b3281198556e5568b.txt
Contact: malvuln13@gmail.com
Media: twitter.com/malvuln

Threat: Trojan.Win32.Hosts2.yqf
Vulnerability: Insecure Permissions
Description: Hosts2.yqf creates an insecure dir named "mlekaocYUmaae" under c:\ drive and grants change (C) permissions to the authenticated user group. Standard users can rename the executables dropped by the malware to disable it or replace it with their own executable. Then wait for a privileged user to logon to the infected machine to potentially escalate privileges.
Type: PE32
MD5: 274a6e846c5a4a2b3281198556e5568b
Vuln ID: MVID-2021-0162
Dropped files: HielDjixmHUfdeewc.exe
Disclosure: 04/07/2021

Exploit/PoC:
C:\>cacls \mlekaocYUmaae
C:\mlekaocYUmaae BUILTIN\Administrators:(OI)(CI)(ID)F
NT AUTHORITY\SYSTEM:(OI)(CI)(ID)F
BUILTIN\Users:(OI)(CI)(ID)R
NT AUTHORITY\Authenticated Users:(ID)C
NT AUTHORITY\Authenticated Users:(OI)(CI)(IO)(ID)C

Disclaimer: The information contained within this advisory is supplied "as-is" with no warranties or guarantees of fitness of use or otherwise. Permission is hereby granted for the redistribution of this advisory, provided that it is not altered except by reformatting it, and that due credit is given. Permission is explicitly given for insertion in vulnerability databases and similar, provided that due credit is given to the author. The author is not responsible for any misuse of the information contained herein and accepts no responsibility for any damage caused by the use or misuse of this information. The author prohibits any malicious use of security related information or exploits by the author or elsewhere. Do not attempt to download Malware samples. The author of this website takes no responsibility for any kind of damages occurring from improper Malware handling or the downloading of ANY Malware mentioned on this website or elsewhere. All content Copyright (c) Malvuln.com (TM).

Source:packetstormsecurity.com