Let us learn about Open Redirection & Broken Link HijackingContinue reading on Medium » (https://medium.com/@sathvika03/open-redirection-broken-link-hijacking-7f5c36798be6?source=rss------bug_bounty-5)

Hack Wi-Fi Using Aircrack-ng

Hello Everyone! In this article I tell you how to hack and crack wifi password using aircrack-ng which is a terminal based tool.Continue reading on Medium »
Read more...

Hacking on Medium
WiFi Hacking Week Pt. 4 — Evil Twin Attacks

https://cdn-images-1.medium.com/max/2600/1*tHe5MkPtT5Pk8zg_Qh7RuA.png
If you are reading this that means you’ve either made it to the fourth post in this series on WiFi security, you accidentally clicked this…

Continue reading on Medium »

Hacking on Medium
스마트 컨트랙트와 DAO의 취약점

https://cdn-images-1.medium.com/max/640/0*rdSPQG4oq7OK1m7f.png
DeFi의 가장 큰 장점은 중간 사람의 개입 없이 프로그램 기반의 프로토콜로만 커뮤니케이션하면서 서로의 신뢰 없이 프로토콜을 신뢰하고 거래를 할 수 있다는데 있습니다. 하지만 막상 해당 프로토콜에 취약점이 있을 경우 해당 프로토콜을 이용하고 투자를…

Continue reading on Dogok Research »

Hacking on Medium
Hack Wi-Fi Using Aircrack-ng

https://cdn-images-1.medium.com/max/768/1*RBHcjqm-YxnKtZFjOMK0Ug.png
Hello Everyone! In this article I tell you how to hack and crack wifi password using aircrack-ng which is a terminal based tool.

Continue reading on Medium »

Hacking the University in a Few Steps
https://fh4ntke.medium.com/hacking-the-university-in-a-few-steps-84e43e3c01a8?source=rss------bug_bounty-5

Escalating a Wrong Date to Get Code ExecutionContinue reading on Medium » (https://fh4ntke.medium.com/hacking-the-university-in-a-few-steps-84e43e3c01a8?source=rss------bug_bounty-5)

Hacking the University in a Few Steps

Escalating a Wrong Date to Get Code ExecutionContinue reading on Medium »
Read more...

Black Hat Ethical Hacking
Cisco vulnerability lets hackers craft their own login credentials

Cisco vulnerability lets hackers craft their own login credentialsPost Views: 110
https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/patreon-300x61.png https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/Patreon-2.png Subscribe to Patreon to watch this episode.
Reading Time: 2 Minutes
The Cisco security flaw allows remote attackers to log in to target devices through the management interface without using a valid password.
Cisco has released a security advisory to warn about a critical vulnerability (CVSS v3 score: 10.0), tracked as CVE-2022-20695, impacting the Wireless LAN Controller (WLC) software.

The bug involves the improper implementation of the password validation algorithm, making it possible to bypass the standard authentication procedure on non-default device configurations.

If this prerequisite is present, the attacker may use crafted credentials to gain varying levels of privilege, potentially going all the way up to an administrative user.
See Also: Complete Offensive Security and Ethical Hacking Course
https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Solutions-1.png Impact and remediationAccording to Cisco’s advisory, the products affected by this flaw are those that run Cisco WLC Software 8.10.151.0 or Release 8.10.162.0 and have “macfilter radius compatibility” configured as “Other.”

The affected products are:

* 3504 Wireless Controller
* 5520 Wireless Controller
* 8540 Wireless Controller
* Mobility Express
* Virtual Wireless Controller (vWLC)

In addition to the above, some customers using the following builds not available through the Software Center should also consider themselves vulnerable: 8.10.151.4 to 8.10.151.10 and 8.10.162.1 to 8.10.162.14.

Finally, Cisco has confirmed the following as not vulnerable to CVE-2022-20695:

* Catalyst 9800 Embedded Wireless Controller for Catalyst 9300, 9400, and 9500 Series Switches
* Catalyst 9800 Series Wireless Controllers
* Catalyst 9800 Wireless Controller for Cloud
* Embedded Wireless Controller on Catalyst Access Points
* Wireless LAN Controller (WLC) AireOS products not listed in the Vulnerable Products section

To determine if your configuration is vulnerable, issue the “show macfilter summary” command. If the RADIUS compatibility mode returns “Other,” you’re vulnerable to attacks.
https://www.bleepstatic.com/images/news/u/1220909/Code%20and%20Details/check.jpg
<figcaptionCommand to determine configuration vulnerability
(Cisco)
Applying the latest available security updates (8.10.171.0 or later) released by Cisco addresses this vulnerability no matter what configuration you’re using.
See Also: Kali Linux 2022.1 Release with Visual Updates, New Tools, Legacy SSH Possible workaroundsCisco has provided two possible workarounds for those who can’t update the Wireless LAN Controller.

The first option is to reset the “macfilter radius compatibility” mode to the default value by issuing the following command: “config macfilter radius-compat cisco”.

The second option would be to change the configuration to other safe modes, such as “free”, using this command: “config macfilter radius-compat free”.

At the time of writing this, Cisco is not aware of the vulnerability being under active exploitation, and Bleeping Computer has seen no reports about scanning attempts either.
See Also: Recon Tool: Smap Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?

If you want to express your id[...]

ea in an article contact us here for a quote: info@blackhatethicalhacking.com
See Also: Write up: Hacking is an art, and so is subdomain enumeration. Source: bleepingcomputer.com Source Linkhttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Merch-1024x1024.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/windows-patch-update-90x90.jpg Microsoft Zero-Days, Wormable Bugs Spark Concern3 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/ezgif.com-gif-maker-2-2-90x90.jpg Git security vulnerabilities prompt updates4 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/Amazon-EC2-90x90.jpg Internal AWS credentials swiped by researcher via SQL payload5 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/spring4shell-90x90.jpg Attackers are abusing Spring4Shell vulnerability to spread Mirai botnet malware6 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/ezgif.com-gif-maker-2-1-90x90.jpg Attackers Spoof WhatsApp Voice-Message Alerts to Steal Info1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/f956-article-211015-apple-body-text-90x90.jpg Apple paid out $36,000 bug bounty for HTTP request smuggling flaws1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/3e41-article-210226-vmware-body-text-90x90.jpg VMware warns of critical vulnerabilities in multiple products2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/A-New-Borat-RAT-Capable-Of-Conducting-Ransomware-DDOS-Activities-90x90.png No-Joke Borat RAT Propagates Ransomware, DDoS2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/php-pear-hacked-packages-malware-90x90.png Supply chain flaws in PHP package manager PEAR lay undiscovered for 15 years2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/php-hack-90x90.jpg PHP bug allows attackers to bypass domain filters, stage DoS attacks against servers2 weeks ago
The post Cisco vulnerability lets hackers craft their own login credentials first appeared on Black Hat Ethical Hacking.

hacking: security in practice
Anyone know how to unblock a Samsung J7 refine??

I had this phone for like 2 years, and I recently switched. Turns out I forgot the 6 point pattern for the phone. So if anyone knows how I can possibly unblock it. LMK!!!

submitted by /u/Duck-Dock
[link] [comments]

hacking: security in practice
stalkerware

So I bought this car from a shady Latino car dealership and it turns out they are affiliated with a gang here in town. They have put some sort of stalkerware on my phone. I have been told that it is through an app either called digits or through an app called mirrorme. Can anyone confirm this? I know who is doing it I just do not know how and would like to know for the police and fbi report.

submitted by /u/rhoeteppin
[link] [comments]

Hacking on Medium
Hack the Box: ScriptKiddie

https://cdn-images-1.medium.com/max/948/1*zib9G7Lj2P-qTFOUr_MHLw.png
ScriptKiddie

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Hacking the University in a Few Steps

https://cdn-images-1.medium.com/max/1000/0*dqfCMdVGUGVbiQTy
Escalating a Wrong Date to Get Code Execution

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

How I got My first Disclosed XSS

Intro :Continue reading on Medium »
Read more...

Zircolite - A Standalone SIGMA-based Detection Tool For EVTX, Auditd And Sysmon For Linux Logs
http://www.kitploit.com/2022/04/zircolite-standalone-sigma-based.html

___________________________
@hacking_Attack
@Hacking_Video

Standalone SIGMA-based detection tool for EVTX, Auditd, Sysmon for linux or JSONL/NDJSON Logs

___________________________
@hacking_Attack
@Hacking_Video

Zircolite is a standalone tool written in Python 3. It allows to use SIGMA rules on MS Windows EVTX (EVTX and JSONL format), Auditd logs and Sysmon for Linux logs Zircolite can be used directly on the investigated endpoint (use releases (https://github.com/wagga40/Zircolite/releases)) or in your forensic/detection lab Zircolite is fast and can parse large datasets in just seconds (check benchmarks (https://github.com/wagga40/Zircolite/blob/master/docs/Internals.md#benchmarks)) Zircolite can be used directly in Python or you can use the binaries provided in releases (https://github.com/wagga40/Zircolite/releases) (Microsoft Windows and Linux only). Documentation is here (https://github.com/wagga40/Zircolite/blob/master/docs).
Requirements / Installation You can install dependencies with : pip3 install -r requirements.txt The use of evtx_dump (https://github.com/omerbenamram/evtx) is optional but required by default (because it is for now much faster), If you do not want to use it you have to use the --noexternal option. The tool is provided if you clone the Zircolite repository (the official repository is here (https://github.com/omerbenamram/evtx)). Quick start EVTX files : Help is available with zircolite.py -h. If your EVTX files have the extension ".evtx" : --ruleset python3 zircolite.py --evtx sysmon.evtx --ruleset rules/rules_windows_sysmon.json">python3 zircolite.py --evtx --ruleset
python3 zircolite.py --evtx sysmon.evtx --ruleset rules/rules_windows_sysmon.json The SYSMON ruleset (https://www.kitploit.com/search/label/Ruleset) used here is a default one and it is for logs coming from endpoints (https://www.kitploit.com/search/label/Endpoints) where SYSMON installed. A generic ruleset is available too. Auditd logs : --ruleset --auditd python3 zircolite.py --evtx auditd.log --ruleset rules/rules_linux.json --auditd">python3 zircolite.py --evtx --ruleset --auditd
python3 zircolite.py --evtx auditd.log --ruleset rules/rules_linux.json --auditd Sysmon for Linux logs : --ruleset --sysmon4linux python3 zircolite.py --evtx auditd.log --ruleset rules/rules_linux.json --sysmon4linux">python3 zircolite.py --evtx --ruleset --sysmon4linux
python3 zircolite.py --evtx auditd.log --ruleset rules/rules_linux.json --sysmon4linux JSONL/NDJSON files : python3 zircolite.py --evtx --ruleset rules/rules_windows_sysmon.json --jsononly ℹ️ If you want to try the tool you can test with these samples : EVTX-ATTACK-SAMPLES (https://github.com/sbousseaden/EVTX-ATTACK-SAMPLES) (EVTX Files) MORDOR - APT29 (https://github.com/OTRF/Security-Datasets/tree/master/datasets/compound/apt29) (JSONL Files) MORDOR - APT3 (https://github.com/OTRF/Security-Datasets/tree/master/datasets/compound/windows/apt3) (JSONL Files) Docs Everything is here (https://github.com/wagga40/Zircolite/blob/master/docs). Tutorials, references and related projects Tutorials Russ McRee (https://holisticinfosec.io/) has published a pretty good tutorial (https://holisticinfosec.io/post/2021-09-28-zircolite/) on SIGMA and Zircolite in his blog (https://holisticinfosec.io/post/2021-09-28-zircolite/) César Marín has published a tutorial in spanish here (https://derechodelared.com/zircolite-ejecucion-de-reglas-sigma-en-ficheros-evtx/) EU ATT&CK Workshop October 2021 Florian Roth (https://github.com/Neo23x0/) cited Zircolite in his SIGMA Hall of fame in its talk dugin the October 2021 EU ATT&CK Workshop. Related projects Michel de CREVOISIER (https://github.com/mdecrevoisier) is doing an amazing work with SIGMA, MITRE Att&ck (c) and other projects. Check his work on mapping EVTX on the MITRE Att&ck (c) framework (https://github.com/mdecrevoisier/EVTX-to-MITRE-Attack). Mini-Gui

___________________________
@hacking_Attack
@Hacking_Video