4EVERLAND chính thức khởi động “First Leap Program” với giải thưởng lên đến 15 triệu 4EVER

Kính chào toàn thể người dùng,Continue reading on Medium »
Read more...

hacking: security in practice
Anyone know what exploits armitage can use to take down Windows Server 2019?

This is only for experimental purposes only. I have a VM environment setup with a domain controller and 3 client PCs Server is Windows 2019 Domain clients are Win7 Win 8.1 and Win10

I am using Kali Linux obviously. I remember doing a Nmap scan for open ports on the server and I found a bunch of open ports. What Exploits can you use on their server because I remember going through exploit after exploit and nothing was happening. Once again this is for experimental purposes.

submitted by /u/geegol
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Is it possible to Hack social media such as TikTok.

I mean company wide. Could a Hacker destroy TikTok?

submitted by /u/ThaDigitalMarketer
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Possible to sniff analog audio (3.5mm AUX / RCA) "wirelessly"?

II was joking with a mate who's bluetooth speaker got paired to with someone else's device - "one more reason to stick to wired", but that actually got me thinking.

Although connecting to another device obviously isn't a problem, can the audio signal itself be "sniffed" without intercepting the cable physically? For instance, HDMI signals can be sniffed using a software-defined radio, due to unintentional RF. Here is an article about it -> https://www.rtl-sdr.com/tempestsdr-a-sdr-tool-for-eavesdropping-on-computer-screens-via-unintentionally-radiated-rf/

I tried searching for "3.5mm sniffing wireless", but I kept getting devices for just wireless audio or similar, so thought I'd ask if it's even possible here

submitted by /u/arch-choot
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
AppSec Tales IV | Email Change

https://cdn-images-1.medium.com/max/875/0*fIIRYfqTM9cu5sOL.jpeg
Application Security Testing of the Email Change form guidelines.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

RPC null sessions
https://www.reddit.com/r/Pentesting/comments/ucytod/rpc_null_sessions/

___________________________
@hacking_Attack
@Hacking_Video

Hey folks. Quick question, sorry if this is the wrong space. I'm building a small CTF challenge based on a domain controller Windows box (Server 2022). The challengers will need to make use of the enumdomusers remote procedure call to grab a list of valid users and progress further. I'm having trouble configuring the Windows box to accept null sessions. I've seen RPC null sessions so many times from the other side of the CTF, I didn't realise how frustrating it would be to configure it myself. I've made every conceivable change to the group policy applied to the Windows box to allow anonymous access including the below changes. At the moment I just get "NT_STATUS_LOGON_FAILURE" when attempting a null session. https://preview.redd.it/bi4i0xp391w81.png?width=653&format=png&auto=webp&s=8b3f134d1780def11eba5b324208f082ce5547c5 Authenticated RPC sessions are working fine, so I'm thinking it's not a firewall/network issue. Any help much appreciated! As an aside, quite how server owners manage to configure RPC to accept null sessions where it's not default on the OS is beyond me after how long I've spent digging around on this. submitted by /u/NobodyTellsMe (https://www.reddit.com/user/NobodyTellsMe)
[link] (https://www.reddit.com/r/Pentesting/comments/ucytod/rpc_null_sessions/) [comments] (https://www.reddit.com/r/Pentesting/comments/ucytod/rpc_null_sessions/)

___________________________
@hacking_Attack
@Hacking_Video

Black Hat Ethical Hacking
New Nimbuspwn Linux vulnerability gives hackers root privileges

New Nimbuspwn Linux vulnerability gives hackers root privilegesPost Views: 52
Premium Content

https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/patreon-300x61.png https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/Patreon-2.png Subscribe to Patreon to watch this episode.
Reading Time: 2 Minutes
A new set of vulnerabilities collectively tracked as Nimbuspwn could let local attackers escalate privileges on Linux systems to deploy malware ranging from backdoors to ransomware.
Security researchers at Microsoft disclosed the issues in a report today noting that they can be chained together to achieve root privileges on a vulnerable system.

Tracked as CVE-2022-29799 and CVE-2022-29800, the Nimbuspwn security issues were discovered in networkd-dispatcher, a component that sends connection status changes on Linux machines.

Discovering the vulnerabilities started with “listening to messages on the System Bus,” which prompted the researchers to review the code flow for networkd-dispatcher.

The Nimbuspwn security flaws refer to directory traversal, symlink race, and time-of-check-time-of-use (TOCTOU) race condition issues, explains Microsoft researcher Jonathan Bar Or says in the report.

One observation that piqued interest was that the networkd-dispatcher daemon was running at boot time with root privileges on the system.
https://www.bleepstatic.com/images/news/u/1100723/2022/networkd-dispatcher-root.png
___________________________
@hacking_Attack
@Hacking_Video

attempts.
https://www.bleepstatic.com/images/news/u/1100723/2022/Exploit_winning-the-TOCTOU-race.png
Source Linkhttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Merch-1024x1024.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/ezgif.com-gif-maker-6-90x90.jpg Lapsus$ Hackers Target T-Mobile1 day ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/ezgif.com-gif-maker-5-90x90.jpg Log4Shell vulnerability in AWS allows full host takeover2 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/New-Java-Framework-Vulnerability-and-Mitigations-90x90.jpg Java encryption implementation error made it trivial to forge credentials6 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/ezgif.com-gif-maker-3-90x90.jpg CISA warns of attackers now exploiting Windows Print Spooler bug1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/ezgif.com-gif-maker-2-3-90x90.jpg Newly found zero-click iPhone exploit used in NSO spyware attacks1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/2b93-article-220121-cisco-90x90.jpg Cisco vulnerability lets hackers craft their own login credentials1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/windows-patch-update-90x90.jpg Microsoft Zero-Days, Wormable Bugs Spark Concern2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/ezgif.com-gif-maker-2-2-90x90.jpg Git security vulnerabilities prompt updates2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/Amazon-EC2-90x90.jpg Internal AWS credentials swiped by researcher via SQL payload2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/spring4shell-90x90.jpg Attackers are abusing Spring4Shell vulnerability to spread Mirai botnet malware2 weeks ago
The post New Nimbuspwn Linux vulnerability gives hackers root privileges first appeared on Black Hat Ethical Hacking.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
The XDR Revolution: Threat Detection and Response for All!

In this webinar replay, Omdia outlines the ways in which XDR facilitates faster and easier threat detection and response, and key points organizations should consider when evaluating XDR technology.

hacking: security in practice
Cloud Hacking

People always say how IT is dying and the cloud is taking its place. My question is: how different is hacking systems on the cloud from systems on conventional networks? Are techniques like port forwarding possible or do all the machines on the cloud have public IPs unrelated to each other?

submitted by /u/Garlic-George-420
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Changing a Lenovo laptop serial number? Or untraceable?

I will preface this by knowing it’s a stupid question and that you probably want to use an airgapped pc. But if I have my old employers laptop, I wiped it and I’m wondering if there’s any other way I can be tracked or what to do.

Edited to be more specific:

Say I left my laptop at a coffee shop. How do I cut the line between me and this laptop

submitted by /u/squeezeseason
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

AD Pentesting Notes
https://medium.com/@reconshell.com/ad-pentesting-notes-1f502814b3de?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

If you just have access to an AD environment but you don’t have any credentials/sessions you could: Pentest the network: Scan the network…Continue reading on Medium » (https://medium.com/@reconshell.com/ad-pentesting-notes-1f502814b3de?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
S1EM : This Project Is A SIEM With SIRP And Threat Intel, All In One

S1EM solution is based on the principle of bringing together the best products in their field, free of charge, and making them quickly interoperable.

S1EM is a SIEM with SIRP and Threat Intel, a full packet capture, all in one.

Inside the solution:

* Cluster Elasticsearch
* Kibana
* Filebeat
* Logstash
* Metricbeat
* Heartbeat
* Auditbeat
* N8n
* Spiderfoot
* Syslog-ng
* Elastalert
* TheHive
* Cortex
* MISP
* OpenCTI
* Arkime
* Suricata
* Zeek
* StoQ
* Mwdb
* Traefik
* Clamav
* Codimd
* Watchtower
* Homer

Note: Cortex v3.1 use ELK connector and the OpenCTI v4 connector

Installation Guide

Prerequisites

Solution works with Linux, docker, and docker-compose.
For auditbeat, you must have Kernel in the version 5.

On Linux, you must have in the “/etc/sysctl.conf” the line:

vm.max_map_count=262144

Physical

You must have:

* 64 Go Ram
* More than 100 Go of HDD in SSD ( Very Important for SSD )
* 8 cpu
* 1 network for management
* 1 network for monitoring

Installation

log in to your system as « root »

git clone https://github.com/V1D1AN/S1EM.git
cd S1EM

After, run the command:

bash 01_deploy.sh

On Linux, add this entry in your /etc/hosts file to access to this solution ( change s1em.cyber.local with the hostname entered during installation ).

vi /etc/hosts
XXX.XXX.XXX.XXX s1em.cyber.local

On Windows, add this entry in your hosts file to access to this solution ( change s1em.cyber.local with the hostname entered during installation ).

notepad C:\Windows\System32\drivers\etc\hosts
XXX.XXX.XXX.XXX s1em.cyber.local
Download

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Epagneul : Graph Visualization For Windows Event Logs

Epagneul is a tool to visualize and investigate windows event logs.

Deployment

Requires docker and docker-compose to be installed.

Installing

make

Offline deployment

On a machine connected to internet, build an offline release:

make release

This will create a releasefolder containing ready to go docker images. Copy the project to your air gapped machine then run:

make load
make

This will install:

* epagneul web UI (port 8080)
* epagneul backend (port 8000)
* neo4j (port 7474)
Download

___________________________
@hacking_Attack
@Hacking_Video