Acknowledgements Big thanks to all the shoulders that I was able to stand on in order to write this. https://outflank.nl/blog/2018/10/06/old-school-evil-excel-4-0-macros-xlm/ - The Outflank team created this attack, I'm just automating some of the tedious parts. The folks at InQuest for their excellent write-ups on what malware authors are doing to evade detection right now. https://inquest.net/blog/2019/01/29/Carving-Sneaky-XLM-Files https://inquest.net/blog/2020/03/18/Getting-Sneakier-Hidden-Sheets-Data-Connections-and-XLM-Macros https://inquest.net/blog/2020/05/06/ZLoader-4.0-Macrosheets- @DissectMalware (https://twitter.com/DissectMalware/) for their killer XLMMacroDeobfuscator (https://github.com/DissectMalware/XLMMacroDeobfuscator) tool which has been awesome to test against and is just a really great piece of tech if you're on the defense/analyst side. @JoeLeonJr (https://twitter.com/joeleonjr) for their awesome EXCELntDonut (https://github.com/FortyNorthSecurity/EXCELntDonut) tool whose multi-architecture Excel Macros (https://www.kitploit.com/search/label/Excel%20Macros) I stole adapted to add x64 architecture support to Macrome. The original authors of the b2xtranslator library as well as the folks at EvolutionJobs who updated it and ported it to dotnet. The code used here was initially sourced from https://github.com/EvolutionJobs/b2xtranslator. Imagery taken from KC Green's comic at https://gunshowcomic.com/648

Download Macrome (https://github.com/michaelweber/Macrome)

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
DoD Awards Attivo Networks Contract for Ransomware Mitigation

Contract extends Attivo’s strategic support to the three major branches of the DoD – Air Force, Army, and Navy.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Pixelating Text Leads to Information Leakage, Warns Firm

Blurring text isn't enough to obscure sensitive information. An offensive-security firm releases a tool showing how information can still be exposed.

Dark Reading: Attacks/Breaches
How to Fight the Novel Software Supply Chain Attacks of Tomorrow

In the past year, attackers have focused on the lucrative supply chain. Organizations need to defend against such attacks, even inside their perimeters.

Dark Reading: Attacks/Breaches
Laminar Announces General Availability of Cloud Data Security Platform

Solution monitors and protects public cloud data.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
SANS Institute Launches Cybersecurity Education Scholarship for HBCU Students and Alumni

Applications will be open throughout all Black History Month and accepted until March 1, 2022.

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Career wise where could I go with hacking

Honestly It's been something I've been interested and more or less kept my eye on for like four years now. Now that I'm finally about to finish school I want to take that leap. But my question is with career wise, I know there's obviously jobs in the field and high paying ones at that, but what exactly is the content of ethical hacking careers like? Is it a career field. that genuinely feels fulfilling and one I'd be happy in.

Edit: I don't know if this will make any difference or not but from what I've been looking into, I'm most interested in pentesting and actual hands on "hacking" type stuff like CFT's.

submitted by /u/MoonMeta
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Raven 1 VM Walkthrough

https://cdn-images-1.medium.com/max/769/0*AF_eDPJ_ClEKRWAQ
Makineyi indirebilirsiniz.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Article of the Day: Cyber Crime trends between Russia and Ukraine

https://cdn-images-1.medium.com/max/644/1*VlsOXVd6gnXQM_au457vVA.jpeg
How the Russia-Ukraine conflict is impacting cybercrime — Intel471, 2/15/2022

Continue reading on Hybrid Analyst »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Honeypot Using Cowrie and Adbhoney

https://cdn-images-1.medium.com/max/759/0*ptVJaD7nGXlBQYjd
OVERVIEW

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
5 Amazing Reasons on why you should learn Bash Programming (MUST READ)

https://cdn-images-1.medium.com/max/1600/1*D5AZ5BDffGeaVM6-_J46kg.jpeg
Why should you learn Bash Programming? To answer this question, I will be discussing with you 5 reasons on why you should learn bash…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Kryptowire Receives Funding from USVP and Crosslink Capital

New funding will be used to accelerate the adoption of intrusion-free mobile security into targeted verticals.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Cybercriminals Have Changed Tactics

Truesec's annual Threat Intelligence Report for 2022 shows a sharp increase in the number of cyber attacks against organizations in Scandinavia and worldwide.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
MITRE Engenuity Center for Threat-Informed Defense Unveils New Affiliate Program

Program showcases industry adoption of the center's R&D resources to increase community awareness and advance threat-informed defense.

___________________________
@hacking_Attack
@Hacking_Video