LayerZero Security Update — April 2022
https://medium.com/layerzero-official/layerzero-security-update-april-2022-4c27a22380b4?source=rss------bug_bounty-5
https://medium.com/layerzero-official/layerzero-security-update-april-2022-4c27a22380b4?source=rss------bug_bounty-5
If this past week has shown us anything, it’s that there is nothing more critical in this space than an absolute commitment to…Continue reading on LayerZero Official » (https://medium.com/layerzero-official/layerzero-security-update-april-2022-4c27a22380b4?source=rss------bug_bounty-5)
Hacking on Medium
Python Security “logging.config” code execution
Python’s Security Considerations document lists following about the logging module
Continue reading on Medium »
Python Security “logging.config” code execution
Python’s Security Considerations document lists following about the logging module
Continue reading on Medium »
Medium
Python Security “logging.config” code execution
Python’s Security Considerations document lists following about the logging module
Hacking on Medium
What a $600 million hack reveals about the status of crypto, as per Ronin Network
https://cdn-images-1.medium.com/max/640/1*6CrpZM9SW7IdwaNvFz6kEA.jpeg
Thousands, if not millions, of people, could have lost funds as a result of the world’s second-largest crypto breach.
Continue reading on Medium »
What a $600 million hack reveals about the status of crypto, as per Ronin Network
https://cdn-images-1.medium.com/max/640/1*6CrpZM9SW7IdwaNvFz6kEA.jpeg
Thousands, if not millions, of people, could have lost funds as a result of the world’s second-largest crypto breach.
Continue reading on Medium »
Medium
What a $600 million hack reveals about the status of crypto, as per Ronin Network
Thousands, if not millions, of people, could have lost funds as a result of the world’s second-largest crypto breach.
Hacking on Medium
Student data breaches and expanded guidelines for health information
https://cdn-images-1.medium.com/max/1000/1*INXO_DGsI92QX97W0rstTw.jpeg
Any company engaging in the sharing of personal health information (PHI) for advertising purposes may soon find itself subject to new…
Continue reading on Medium »
Student data breaches and expanded guidelines for health information
https://cdn-images-1.medium.com/max/1000/1*INXO_DGsI92QX97W0rstTw.jpeg
Any company engaging in the sharing of personal health information (PHI) for advertising purposes may soon find itself subject to new…
Continue reading on Medium »
Medium
Student data breaches and expanded guidelines for health information
Any company engaging in the sharing of personal health information (PHI) for advertising purposes may soon find itself subject to new…
Hacking Articles Tips Tricks Videos Tutorials
Photo
KitPloit - PenTest Tools!
Auto-Elevate - Escalate From A Low-Integrity Administrator Account To NT AUTHORITY\SYSTEM Without An LPE Exploit By Combining A COM UAC Bypass And Token Impersonation
https://blogger.googleusercontent.com/img/a/AVvXsEj-83DDmJ8gh9yTnK2ftTn_bOp9fWqC0K1Y5kI9I1fDOGhVcwXOobi5lukWMuTxbwuxwyBpeOTSF7viXBz98mt8cFYesYVLpb1TUbCqe2RuZ1iDST9kKnBnufJUgDsw7mfKhEhM5C1QI7e7bRRx524VMseUrRVXYae4ntEj96h-syj5-cgxTt8Pioga=w640-h412 This tool demonstrates the power of UAC bypasses and built-in features of Windows. This utility auto-locates
The following image demonstrates using UACME combined with Auto-Elevate to go from a low-privileged Administrator account to NT AUTHORITY\SYSTEM on Windows 10 21H1. https://blogger.googleusercontent.com/img/a/AVvXsEj-83DDmJ8gh9yTnK2ftTn_bOp9fWqC0K1Y5kI9I1fDOGhVcwXOobi5lukWMuTxbwuxwyBpeOTSF7viXBz98mt8cFYesYVLpb1TUbCqe2RuZ1iDST9kKnBnufJUgDsw7mfKhEhM5C1QI7e7bRRx524VMseUrRVXYae4ntEj96h-syj5-cgxTt8Pioga=w640-h412 The following image demonstrates escalation from a high-privileged Administrator account to SYSTEM without a UAC bypass https://blogger.googleusercontent.com/img/a/AVvXsEj7B-KpvW3KhKMSpK_mPcnlkmeWQ3mDffHD6HmHLGAuImncwn65DezWICUIo9QOck3uUn5Zcpf0WMy36egEXGu0opvhfbLbvs0LPWhw9kpmOcKVNTAh00Tjc7efGFWtFMgLXflwRvjguCenxYGasfmFy9wTlvUCh63fYTuLPItkWYssqN26lRfKbzXI=w640-h344 Technical ExplanationThe following steps are performed by Auto-Elevate to escalate from a low-privileged Administrator to SYSTEM: https://blogger.googleusercontent.com/img/a/AVvXsEhInt79o7jIuufDBTX6rZ6GqjqRF-u0qy0HokgQzhnsnJETvNHOEWpbIvAAgWpkTgKPbjdkLqyjTnhUhKDi8Pexjm_2Y3_kEiA-4_jn-Gha1NLTUOgYJPAMPAFfWa7HGdNqDuS4ZASRW_iP3kBbfA3BY8IpChJWV81te9f5A2s-puKEd5FEzT1_6yzu=w640-h264 Auto-Elevate1. The winlogon.exe process is located by enumerating the systems running processes with CreateToolhelp32Snapshot, Process32First, and Process32Next
2. SeDebugPrivilege is enabled for the current process via a call to AdjustTokenPrivileges, as it's required to open a HANDLE to winlogon.exe
3. A handle to the winlogon.exe process is opened by calling OpenProcess, for this call PROCESS_ALL_ACCESS is used (however, it's overkill)
4. A handle to winlogon's process token is retrieved by calling OpenProcessToken combined with the previously obtained process handle
5. The user (SYSTEM) of winlogon is impersonated by calling ImpersonateLoggedOnUser
6. The impersonated token handle is duplicated by calling DuplicateTokenEx with SecurityImpersonation, this creates a duplicated token we can use
7. Using the duplicated, and impersonated token a new CMD instance is spawned by calling CreateProcessWithTokenW To-Do* Implement a standalone version of method 41 from UACME (or similar) to automate the process further MITRE ATT&CK Mapping* Token Manipulation: T1134
* Access Token Manipulation: Token Impersonation/Theft: T1134.001
* Access Token Manipulation: Create Process with Token: T1134.002
* Access Token Manipulation: Make and Impersonate Token: T1134.003 Download Auto-Elevate
Auto-Elevate - Escalate From A Low-Integrity Administrator Account To NT AUTHORITY\SYSTEM Without An LPE Exploit By Combining A COM UAC Bypass And Token Impersonation
https://blogger.googleusercontent.com/img/a/AVvXsEj-83DDmJ8gh9yTnK2ftTn_bOp9fWqC0K1Y5kI9I1fDOGhVcwXOobi5lukWMuTxbwuxwyBpeOTSF7viXBz98mt8cFYesYVLpb1TUbCqe2RuZ1iDST9kKnBnufJUgDsw7mfKhEhM5C1QI7e7bRRx524VMseUrRVXYae4ntEj96h-syj5-cgxTt8Pioga=w640-h412 This tool demonstrates the power of UAC bypasses and built-in features of Windows. This utility auto-locates
winlogon.exe, steals and impersonates it's process TOKEN, and spawns a new SYSTEM-level process with the stolen token. Combined with UAC bypass method #41 (ICMLuaUtil UAC bypass) from hfiref0x's UACME utility, this utility can auto-elevate a low privileged Administrative account to NT AUTHORITY\SYSTEM.The following image demonstrates using UACME combined with Auto-Elevate to go from a low-privileged Administrator account to NT AUTHORITY\SYSTEM on Windows 10 21H1. https://blogger.googleusercontent.com/img/a/AVvXsEj-83DDmJ8gh9yTnK2ftTn_bOp9fWqC0K1Y5kI9I1fDOGhVcwXOobi5lukWMuTxbwuxwyBpeOTSF7viXBz98mt8cFYesYVLpb1TUbCqe2RuZ1iDST9kKnBnufJUgDsw7mfKhEhM5C1QI7e7bRRx524VMseUrRVXYae4ntEj96h-syj5-cgxTt8Pioga=w640-h412 The following image demonstrates escalation from a high-privileged Administrator account to SYSTEM without a UAC bypass https://blogger.googleusercontent.com/img/a/AVvXsEj7B-KpvW3KhKMSpK_mPcnlkmeWQ3mDffHD6HmHLGAuImncwn65DezWICUIo9QOck3uUn5Zcpf0WMy36egEXGu0opvhfbLbvs0LPWhw9kpmOcKVNTAh00Tjc7efGFWtFMgLXflwRvjguCenxYGasfmFy9wTlvUCh63fYTuLPItkWYssqN26lRfKbzXI=w640-h344 Technical ExplanationThe following steps are performed by Auto-Elevate to escalate from a low-privileged Administrator to SYSTEM: https://blogger.googleusercontent.com/img/a/AVvXsEhInt79o7jIuufDBTX6rZ6GqjqRF-u0qy0HokgQzhnsnJETvNHOEWpbIvAAgWpkTgKPbjdkLqyjTnhUhKDi8Pexjm_2Y3_kEiA-4_jn-Gha1NLTUOgYJPAMPAFfWa7HGdNqDuS4ZASRW_iP3kBbfA3BY8IpChJWV81te9f5A2s-puKEd5FEzT1_6yzu=w640-h264 Auto-Elevate1. The winlogon.exe process is located by enumerating the systems running processes with CreateToolhelp32Snapshot, Process32First, and Process32Next
2. SeDebugPrivilege is enabled for the current process via a call to AdjustTokenPrivileges, as it's required to open a HANDLE to winlogon.exe
3. A handle to the winlogon.exe process is opened by calling OpenProcess, for this call PROCESS_ALL_ACCESS is used (however, it's overkill)
4. A handle to winlogon's process token is retrieved by calling OpenProcessToken combined with the previously obtained process handle
5. The user (SYSTEM) of winlogon is impersonated by calling ImpersonateLoggedOnUser
6. The impersonated token handle is duplicated by calling DuplicateTokenEx with SecurityImpersonation, this creates a duplicated token we can use
7. Using the duplicated, and impersonated token a new CMD instance is spawned by calling CreateProcessWithTokenW To-Do* Implement a standalone version of method 41 from UACME (or similar) to automate the process further MITRE ATT&CK Mapping* Token Manipulation: T1134
* Access Token Manipulation: Token Impersonation/Theft: T1134.001
* Access Token Manipulation: Create Process with Token: T1134.002
* Access Token Manipulation: Make and Impersonate Token: T1134.003 Download Auto-Elevate
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking Articles Tips Tricks Videos Tutorials
Photo
hacking: security in practice
P2P anonymous file sharing with Speek! messenger utilizing TOR hidden services
https://external-preview.redd.it/idsMbbTyITdwWDZAz9asCjt8mV4jZSSOevDVYOs0HSw.jpg?width=640&crop=smart&auto=webp&s=c1d7848acd340d9f34801528b94087e455be148a submitted by /u/JungleJuggler
[link] [comments]
P2P anonymous file sharing with Speek! messenger utilizing TOR hidden services
https://external-preview.redd.it/idsMbbTyITdwWDZAz9asCjt8mV4jZSSOevDVYOs0HSw.jpg?width=640&crop=smart&auto=webp&s=c1d7848acd340d9f34801528b94087e455be148a submitted by /u/JungleJuggler
[link] [comments]
Hacking Articles Tips Tricks Videos Tutorials
Photo
hacking: security in practice
Repository of AV Evading Payloads, Threat Actor TTPs, How to Hack Roku TVs, and Much More
https://external-preview.redd.it/AP5-QX6ClsABl7AuDvMnhZo2aMPPnD9WTpgrqyFZsLI.jpg?width=320&crop=smart&auto=webp&s=3599287ce55bca3952bc643708c03206ab32bb21 submitted by /u/entropydaemon5
[link] [comments]
Repository of AV Evading Payloads, Threat Actor TTPs, How to Hack Roku TVs, and Much More
https://external-preview.redd.it/AP5-QX6ClsABl7AuDvMnhZo2aMPPnD9WTpgrqyFZsLI.jpg?width=320&crop=smart&auto=webp&s=3599287ce55bca3952bc643708c03206ab32bb21 submitted by /u/entropydaemon5
[link] [comments]
hacking: security in practice
How do you search for stuff when hacking?
Coming from a beginning coder I have to look on google a lot for my code. And as this is a hacking sub wouldn't it be weird to post on forums and stuff looking for information only to see that people think you are a bad guy hacker?
submitted by /u/GP-NC
[link] [comments]
How do you search for stuff when hacking?
Coming from a beginning coder I have to look on google a lot for my code. And as this is a hacking sub wouldn't it be weird to post on forums and stuff looking for information only to see that people think you are a bad guy hacker?
submitted by /u/GP-NC
[link] [comments]
reddit
How do you search for stuff when hacking?
Coming from a beginning coder I have to look on google a lot for my code. And as this is a hacking sub wouldn't it be weird to post on forums and...
Hacking Articles Tips Tricks Videos Tutorials
Photo
hacking: security in practice
I received a mysterious PDF in my mailbox.
Hi everyone, today I received an email with a very mysterious pdf attached, is it a compression problem or is it hiding something strange?
https://drive.google.com/file/d/1qFVzv9Qb46dHsX5a5GjvpEeKht7gETDr/view
PS: I have absolutely no relation with this PDF, it was sent to me by mistake.
submitted by /u/4lv1n3
[link] [comments]
I received a mysterious PDF in my mailbox.
Hi everyone, today I received an email with a very mysterious pdf attached, is it a compression problem or is it hiding something strange?
https://drive.google.com/file/d/1qFVzv9Qb46dHsX5a5GjvpEeKht7gETDr/view
PS: I have absolutely no relation with this PDF, it was sent to me by mistake.
submitted by /u/4lv1n3
[link] [comments]