Hacking on Medium
Hackthebox : Pandora

https://cdn-images-1.medium.com/max/1593/1*opwPYa3MLP5xnHRGq6mCJQ.png
Hello everyone, today i’ll be walking you through the amazing hackthebox machine “Pandora”.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
SIGNS YOU’VE BEEN HACKED

https://cdn-images-1.medium.com/max/750/1*nXHqDH2KLSKG24gTSApcLg.png
Most computer users dread being hacked. Many feel odd behavior or mistakes on their PC are signs of hacker control. But are hackers truly…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
10 Elemental Cybersecurity Insights That Can Help Your Business Make Better Decisions

https://cdn-images-1.medium.com/max/1584/1*E7s532Fx-SUO0W5_8KzlJQ.gif
Telecommunication suppliers around the world hold a treasure of cybersecurity data from their vast networks and customer bases. Members of…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Rules Of Engagement
https://www.reddit.com/r/redteamsec/comments/u40hpp/rules_of_engagement/

submitted by /u/divyaguptaa (https://www.reddit.com/user/divyaguptaa)
[link] (https://www.komodosec.com/rules-of-engagement-redteam) [comments] (https://www.reddit.com/r/redteamsec/comments/u40hpp/rules_of_engagement/)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
The threat of a global cyber warfare

https://external-preview.redd.it/ODQ-lNaqyr0_F9vSrK2pNWqQviwPCG5W6No3va4L7L0.jpg?width=320&crop=smart&auto=webp&s=825d7906ea0ecfbf3cf53fbb2cbc33f894120180 submitted by /u/OkFaithlessness2414
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Demystifying iOS Code Signature
https://www.reddit.com/r/redteamsec/comments/u41v6n/demystifying_ios_code_signature/

submitted by /u/dmchell (https://www.reddit.com/user/dmchell)
[link] (https://medium.com/csit-tech-blog/demystifying-ios-code-signature-309d52c2ff1d) [comments] (https://www.reddit.com/r/redteamsec/comments/u41v6n/demystifying_ios_code_signature/)

___________________________
@hacking_Attack
@Hacking_Video

United Nations bug bounty[writeup]

Let’s get to the point, how can you hack the UN and get your name featured in the prestigious hall of fame? Lemme show you a guaranteed…Continue reading on Medium »
Read more...

United Nations bug bounty[writeup]
https://debprasadbanerjee502.medium.com/united-nations-bug-bounty-writeup-4bcfdefbb8d3?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Let’s get to the point, how can you hack the UN and get your name featured in the prestigious hall of fame? Lemme show you a guaranteed…Continue reading on Medium » (https://debprasadbanerjee502.medium.com/united-nations-bug-bounty-writeup-4bcfdefbb8d3?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

[3/3] Cache Poisoning & Lateral Movement @ GitLab
https://medium.com/@_ip_/3-3-cache-poisoning-lateral-movement-gitlab-9c6288708576?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Around 6 months ago I spent a few weeks reviewing Gitlab — I was particularly interested in how their Continuous Integration/Continuous…Continue reading on Medium » (https://medium.com/@_ip_/3-3-cache-poisoning-lateral-movement-gitlab-9c6288708576?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
[3/3] Cache Poisoning & Lateral Movement @ GitLab

https://cdn-images-1.medium.com/max/600/1*GbQsSrKngYgMmQOG44coJg.png
Around 6 months ago I spent a few weeks reviewing Gitlab — I was particularly interested in how their Continuous Integration/Continuous…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
United Nations bug bounty[writeup]

https://cdn-images-1.medium.com/max/1649/1*gfGBA0cZxi_odaZwXz7NfQ.png
Let’s get to the point, how can you hack the UN and get your name featured in the prestigious hall of fame? Lemme show you a guaranteed…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

[3/3] Cache Poisoning & Lateral Movement @ GitLab

Around 6 months ago I spent a few weeks reviewing Gitlab — I was particularly interested in how their Continuous Integration/Continuous…Continue reading on Medium »
Read more...

Black Hat Ethical Hacking
Microsoft Zero-Days, Wormable Bugs Spark Concern

Microsoft Zero-Days, Wormable Bugs Spark ConcernPost Views: 31
https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/patreon-300x61.png https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/Patreon-2.png Subscribe to Patreon to watch this episode.
Reading Time: 2 Minutes
Microsoft has released patches for 128 security vulnerabilities for its April 2022 monthly scheduled update – ten of them rated critical (including three wormable code-execution bugs that require no user interaction to exploit).
There are also two important-rated zero-days that allow privilege escalation, including one listed as under active exploit.

The bugs in the update are found across the portfolio, including in Microsoft Windows and Windows Components, Microsoft Defender and Defender for Endpoint, Microsoft Dynamics, Microsoft Edge (Chromium-based), Exchange Server, Office and Office Components, SharePoint Server, Windows Hyper-V, DNS Server, Skype for Business, .NET and Visual Studio, Windows App Store and Windows Print Spooler Components.

“This large volume of patches hasn’t been seen since the fall of 2020. However, this level is similar to what we saw in the first quarter of last year,” Dustin Childs, researcher at Trend Micro’s Zero Day Initiative, said in a blog breaking down the fixes.
See Also: Complete Offensive Security and Ethical Hacking Course
https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Solutions-1.png Zero-Day PatchesThe vulnerability that’s been exploited in the wild ahead of patching allows privilege escalation, and is tracked as CVE-2022-24521. It rates 7.8 out of 10 on the CVSS vulnerability-severity scale. It’s listed as a “Windows Common Log File System Driver Execution Vulnerability,” and was reported to Microsoft by the National Security Agency.

“It’s not stated how widely the exploit is being used in the wild, but it’s likely still targeted at this point and not broadly available,” Childs noted. “Go patch your systems before that situation changes.”

Researchers noted that attackers are likely pairing it with a separate code-execution bug in their campaigns. For that reason, Immersive Labs’ Kevin Breen, director of cyber-threat research, places the actively exploited bug at the top of the priority list for patching.

“Being the type of vulnerability for escalating privileges, this would indicate a threat actor is currently using it to aid lateral movement to capitalize on a pre-existing foothold,” he explained.

The second zero-day is found in the Windows User Profile Service, and is tracked as CVE-2022-26904.

It also allows privilege escalation, and rates a CVSS score of 7. Even though it’s listed as exploitation more likely, it has a high attack complexity, Microsoft noted in its advisory, because “successful exploitation of this vulnerability requires an attacker to win a race condition.”

Even so, researchers at Tripwire noted that exploit code is available for the bug, including in the Metasploit framework.
See Also: Kali Linux 2022.1 Release with Visual Updates, New Tools, Legacy SSH See Also: Offensive Security Tool: Scapy Critical Concerns for AprilOut of the critical flaws, all of which allow remote code-execution (RCE), researchers flagged a bug that could allow for self-propagating exploits (CVE-2022-26809) as being of the most concern.

It exists in the Remote Procedure Call (RPC) Runtime Library, and rates 9.8 out of 10 on the CVSS scale, with exploitation noted as more likely. If exploited, a remote attacker could execute code with high privileges.

Danny Kim, principal architect at Virsec, noted that the vulnerability is specifically found in Microsoft’s Server Message Block (SMB) fu[...]

___________________________
@hacking_Attack
@Hacking_Video

Black Hat Ethical Hacking
Recon Tool: Smap

Recon Tool: SmapPost Views: 12
https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/patreon-300x61.png https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/Patreon-2.png Subscribe to Patreon to watch this episode.
Reading Time: 3 Minutes

Recon Tool: Smap GitHub Link SmapSmap by s0md3v, is a drop-in replacement for Nmap powered by shodan.io. It is a replica of Nmap which uses shodan.io’s free API for port scanning. It takes same command line arguments as Nmap and produces the same output which makes it a drop-in replacement for Nmap.

Passive and active scanning when it comes to recon while performing Bug Bounty or Penetration testing is crucial. They both have different techniques but difference results – and are measured by the time needed to complete each. Sometimes you need to control how to do both, and with the addition of getting info from Shodan, this makes it the best, fastest way to gathering info on a host or sets of hosts as part of your initial stages of recon. Features* Scans 200 hosts per second
* Doesn’t require any account/api key
* Vulnerability detection
* Supports all nmap’s output formats
* Service and version fingerprinting
* Makes no contact to the targets
See Also: Recon Tool: PSRecon InstallationBinariesYou can download a pre-built binary from here and use it right away. Manualgo install -v github.com/s0md3v/smap/cmd/smap@latestConfused or something not working? For more detailed instructions, click here AUR pacakgeSmap is available on AUR as smap-git (builds from source) and smap-bin (pre-built binary).
See Also: Offensive Security Tool: Proxmark3 UsageSmap takes the same arguments as Nmap but options other than -p, -h, -o*, -iL are ignored. If you are unfamiliar with Nmap, here’s how to use Smap. Specifying targetssmap 127.0.0.1 127.0.0.2You can also use a list of targets, separated by newlines. smap -iL targets.txtSupported formats1.1.1.1 // IPv4 addressexample.com // hostname178.23.56.0/8 // CIDROutputSmap supports 6 output formats which can be used with the -o* as follows smap example.com -oX output.xmlIf you want to print the output to terminal, use hyphen (–) as filename. Supported formatsoX // nmap's xml formatoG // nmap's greppable formatoN // nmap's default formatoA // output in all 3 formats above at onceoP // IP:PORT pairs seperated by newlinesoS // custom smap formatoJ // jsonNote: Since Nmap doesn’t scan/display vulnerabilities and tags, that data is not available in nmap’s formats. Use -oS to view that info. Specifying portsSmap scans these 1237 ports by default. If you want to display results for certain ports, use the -p option. smap -p21-30,80,443 -iL targets.txtSee Also: Write up: Hacking is an art, and so is subdomain enumeration. ConsiderationsSince Smap simply fetches existent port data from shodan.io, it is super fast but there’s more to it. You should use Smap if: You want* vulnerability detection
* a super fast port scanner
* results for most common ports (top 1237)
* no connections to be made to the targets You are okay with* not being able to scan IPv6 addresses
* results being up to 7 days old
* a few false negatives https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Merch.png Recent Tools* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/Proxmark3-90x90.png Offensive Security Tool: Proxmark37 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/boomerang-90x90.png Offensive Security Tool: Boomerang2 weeks ago
* https://www.blackhatethic[...]

___________________________
@hacking_Attack
@Hacking_Video