Dark Reading: Attacks/Breaches
Lazarus Targets Chemical Sector With 'Dream Jobs,' Then Trojans

Chemical companies are the latest to be targeted by the well-known North Korean group, which has targeted financial firms, security researchers, and technology companies in the past.

Dark Reading: Attacks/Breaches
Cloud Cost, Reliability Raise IT Concerns

IT professionals worry most about cloud security, but other questions arise about training, functionality, and performance.

Hacking on Medium
#PwnItFridays hackthebox #StartingPoint Appointment

https://cdn-images-1.medium.com/max/1200/1*rVBAZsCYXDfUkYtSwKKqog.png
Another day, another challenge.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Stored XSS, SQL, IDOR and Hall Of Fames

https://cdn-images-1.medium.com/max/2560/0*UuollZsRfPO6ebKU.jpg
Hello, today I am going to be writing about how I found stored XSS, reflected XSS, SQL and IDOR all within a software that was in scope…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
TryHackMe Tech_Supp0rt: 1 Writeup

https://cdn-images-1.medium.com/max/1400/0*8RnAb4kpeGiMkf9G
Hey my friends i’m Medhat Fathy and This my write-up for ech_Supp0rt: 1 Room

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
Shhhloader - SysWhispers Shellcode Loader

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiEpj6zC2rbdNRk-JxzZxduLs5BbTONEgrCYiEIZzAc7mg36QarcpvapSoZASoSWy4ZXGpTfgZx-NCEkxv9ISf3lueje58N4RYAXG3kXysVZufzInJmfKGCoZFZzAvIeKIhWoiyQosbCmnoTKAJoEMTkyfGG78CxS-8l88Zvs4mD8eSlUpnPYQHy9OT/w640-h278/Shhhloader.png Shhhloader is a SysWhispers Shellcode Loader that is currently a Work in Progress. It takes raw shellcode as input and compiles a C++ stub that has been integrated with SysWhispers in order to bypass AV/EDR. The included python builder will work on any Linux system that has Mingw-w64 installed.

The tool has been confirmed to successfully load Meterpreter and a Cobalt Strike beacon on fully updated systems with Windows Defender enabled. The project itself is still in a PoC/WIP state, as it currently doesn't work with all payloads.
2/9/22 EDIT: Shhhloader now includes 5 different ways to execute your shellcode! See below for updated usage. Big thanks to @Snovvcrash and their DInjector project for inspiration! I highly recommend taking a look at it for more information regarding the shellcode injection techniques and code that this tool is now based on. ┳┻|
┻┳|
┳┻|
┻┳|
┳┻| _
┻┳| •.•) - Shhhhh, AV might hear us!
┳┻|⊂ﾉ
┻┳|
usage: Shhhloader.py [-h] [-p explorer.exe] [-m QueueUserAPC] [-nr] [-v] [-d] [-o a.exe] file

ICYGUIDER'S CUSTOM SYSWHISPERS SHELLCODE LOADER

positional arguments:
file File containing raw shellcode

optional arguments:
-h, --help show this help message and exit
-p explorer.exe, --process explorer.exe
Process to inject into (Default: explorer.exe)
-m QueueUserAPC, --method QueueUserAPC
Method for shellcode execution (Options: ProcessHollow, QueueUserAPC,
RemoteThreadContext, RemoteThreadSuspended, CurrentThread) (Default: QueueUserAPC)
-nr , --no-randomize Disable syscall name randomization
-v, --verbose Enable debugging messages upon execution
-d, --dll-sandbox Use DLL based sandbox checks instead of the standard ones
-o a.exe, --outfile a.exe
Name of compiled file Video Demo: https://www.youtube.com/watch?v=-KLGV_aGYbw

Features:

* 5 Different Shellcode Execution Methods (ProcessHollow, QueueUserAPC, RemoteThreadContext, RemoteThreadSuspended, CurrentThread)
* PPID Spoofing
* Block 3rd Party DLLs
* Syscall Name Randomization
* XOR Encryption with Dynamic Key Generation
* Sandbox Evasion via Loaded DLL Enumeration
* Sandbox Evasion via Checking Processors, Memory, and Time

Tested and Confirmed Working on:

* Windows 10 21H1 (10.0.19043)
* Windows 10 20H2 (10.0.19042)
* Windows Server 2019 (10.0.17763)

Scan Results as of 2/9/22 (x64 Meterpreter QueueUserAPC): https://antiscan.me/scan/new/result?id=tntuLnCkTCwz https://blogger.googleusercontent.com/img/a/AVvXsEhCC49ErjliViuWInQtkLv66kJr9uVaiJ-fmvX_u9oaihzJNrL8_m9jRAHhpYiRrXZqOYXcPov0xeO_OVzIGwKWBdPweDP30glzSnq1xtKBeXD_ZSV4kMQCHYW1jcoi3HEYX_oehA01WxMsbpRs3I5NslBxlnSikJKbDWsuNT0vD-U5tLoMByP7XIPB=w470-h640 Greetz & Credit:

* Jthuraisamy for his amazing project SysWhispers: https://github.com/jthuraisamy/SysWhispers
* OutFlank for creating InlineWhispers (Mingw-w64 Compatible SysWhispers): https://github.com/outflanknl/InlineWhispers
* FalconForceTeam for their syscall generation tool that supports SysWhispers2: https://github.com/FalconForceTeam/SysWhispers2BOF
* Snovvcrash for their NimHollow project, which I used as a template for process hollowing: https://github.com/snovvcrash/NimHollow
* Snovvcrash again for their DInjector project, which I used as a template for many of the included injection techniques: https://github.com/snovvcrash/DInjector
* Cerbersec for their Ares project, whose code I used for PPID Spoofing, Blocking 3rd Party DLLs and Sandbox Evasion: https://github.com/Cerbersec/Ares Download Shhhloader

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Why are some games so easy to make hacks for and others so hard?

For example, League of Legends is not known for their hacks, but games like COD and Battlefield and Apex Legends are. What is it about the way they are programmed that makes them so easy/hard to develop hacks for?

submitted by /u/Acrobatic-Compote-29
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
As a software engineer, what steps can I take to reduce software or program being ‘hacked’, DDoS, XSS etc?

Bit of a noob when it comes to network security, but really want to better understand how as a software engineer, I can set up my architecture to better secure it. What processes/concepts do I need to understand and how can I also ‘test’ my program locally to ensure validation is secure etc.

Resources/videos etc would be super helpful.

submitted by /u/ProfessorProdigy
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Request

This guy online is sending people videos of him setting cats on fire. Like dousing them in gasoline and lighting them. His Instagram is public and I can show you the video if you really need to see this. I know this subreddit isn't really for this and I don't know how this all works but if someone could scare the fuck out of this asshole it'd really be amazing. DM me for the details of his account and the post.

submitted by /u/EnvironmentForsaken
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Is it possible to track a deleted eBay post? My dad got scammed £3000 and I’m trying to see if there’s anything I can do

This may be breaking a rule, my apologies its just upsetting to see him like this.

submitted by /u/elmaginto69
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How to further exploit this SQLi?

Hey, anyone know if/how I could further exploit this SQLi?

I found a blind SQLi on a project I was testing and I already confirmed I have a blind SQLi, but the problem is it's on the ORDER BY field. Query that's being executed (some names changed for anonymity sake):

SELECT table.* FROM db_table table WHERE 1 AND type = 'S' ORDER BY timestamp DESC LIMIT 100

My injection point is the "DESC", I can control that. I was trying to escalate it to RCE by writing to the server, but I'm not sure if it's possible within this point in the query.

What do you guys think, have any ideas?

submitted by /u/real900
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Can I get any sort of malware from simply opening an email?

Clarification: I don't mean clicking on any URLs once I'm inside the email. I am curious if the simple act of clicking on an email to read its contents can somehow install malware of any form.

submitted by /u/MeesterMoo74
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Google Emergency Update Fixes Chrome Zero-Day

Google patches a critical flaw in its Chrome browser, bringing its count of zero-day vulnerabilities fixed in 2022 to four.

Hacking on Medium
Revolax F

Accurate filler supply is the only online shop where you can buy quality dermal filler and botox at cheap prices online, with express…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Pickle Rick

https://cdn-images-1.medium.com/max/1920/1*COTutaq6FqKqr1HWpuSvcg.jpeg
“This Risk and Morty themed challenge requires you to exploit a Webserver to find 3 ingredients that will help Risk make his option to…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Kenobi

https://cdn-images-1.medium.com/max/936/1*JF-PE86ER_4dYfnM-yVKqw.png
“Walkthrough on exploiting a Linux machine. Enumerate Samba for shares, manipulate a vulnerable version of proftpd and escalate your…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
What is the best way to research a digital picture from a potential scammer?

In brief, I believe my mother is being scammed by some dude that claims to be on an oil rig in the Gulf of Mexico. He has never met her or spoken to her, only chats via Google Hangouts. He is offering to pay for her to move in with him in Florida, and has sent a photo. Would love some advice on how to verify this person whether authentic or not.

submitted by /u/IGPANS
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Nmap scanning nearly all ports as open

I've downloaded a box from a random Twitter post. I got it running in virtualbox and when i Nmapped it, it's showing almost all ports as open. Thinking that it might be a joke, I assumed that I could connect to any service. So I tried ftp,telnet,ssh,etc. and on all of the services.

But everytime, no matter what service you try to connect to, it says "Connection reset". Even the goddamn http service.

I further considered this to be an error and I reset the machine and booted it again but still the same problem.

I looked it up and found that this was either Portspoofing or I'm hitting a well configured IDS/Firewall.

How do I get around this problem? More specifically, how do I automate the process of verification of the services and see if it's really up?

Thanks in advance.

submitted by /u/h4cks1n
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Upgrades for Spring Framework Have Stalled

Upgrading and fixing the vulnerability in the Spring Framework doesn't seem to have the same level of urgency or energy as patching the Log4j library did back in December

Creating Your Own Telegram Bot For Recon Bug Bounty

Hello Friends this is my fourth blog regarding bug huntingContinue reading on Medium »
Read more...