Summary :Continue reading on Medium » (https://medium.com/@ranjanarajshree/information-leakage-in-exif-data-of-images-exif-data-exposure-fcd19eec9ce6?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Black Hat Ethical Hacking
Security bug in VMWare Workspace ONE could allow access to internal, cloud networks

Security bug in VMWare Workspace ONE could allow access to internal, cloud networksPost Views: 32
Premium Content

https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/patreon-300x61.png https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/Patreon-2.png Subscribe to Patreon to watch this episode.
Reading Time: 2 Minutes
A security vulnerability in a mobile device management software could allow attackers access to organizations’ internal and cloud networks, researchers warn.
Discovered by Assetnote, the server-side request forgery (SSRF) bug was found in VMWare Workspace One UEM.

Tracked as CVE-2021-22054, the vulnerability could risk credentials and other sensitive data falling into the hands of malicious attackers.

“We discovered a pre-authentication vulnerability that allowed us to make arbitrary HTTP requests, including requests with any HTTP method and request body,” the researchers wrote in a blog post.

“In order to exploit this SSRF, we had to reverse engineer the encryption algorithm used by VMWare Workspace One UEM.”

The team were able to breach “a number of” organizations using the software, accessing both their internal network and cloud services.

Speaking to The Daily Swig, Assetnote’s Subham Shah said: “While I cannot share exact details about what companies were effected, there were a large number of enterprises that were vulnerable to this.

“In some cases, it was possible to use this vulnerability to breach the AWS accounts of the companies.”
See Also: Complete Offensive Security and Ethical Hacking Course https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Solutions-1.png Shah added: “The impact of this vulnerability is rather on the organization running the software, instead of the individual users that are using the products.
“Using the SSRF vulnerability, it is possible to reach arbitrary hosts on the internal network. On cloud networks such as AWS, it is possible to reach the metadata IP address and potentially steal security credentials.

“Using these security credentials, it is possible to escalate the vulnerability to gain access to other infrastructure belonging to a company.”
See Also: New Nimbuspwn Linux vulnerability gives hackers root privileges RemediationsThe issue, which was first discovered in November 2021, has since been patched by the vendor.

Shah said that while VMware dealt with the issues “in a timely manner”, researchers agreed to the vendor’s request for more time to release more patches and allow customers to patch their instances before disclosure.

An advisory from VMWare contains details of fixes for the software.

Shah advised users of mobile management device software “if possible, do not expose the MDM solution to the external internet”. See Also: OSINT Tool: MOSINT Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?

If you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com
See Also: Darkside hacker group, the group that provides ransomware as a service
Source: portswigger.net Source Linkhttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Merch-1024x1024.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/05/ezgif.com-gif-maker-2-90x90.jpg New PyScript project lets you run Python programs in the browser1 day ago
* https://www.blackhatethicalhacking.com/wp-conten[...]

___________________________
@hacking_Attack
@Hacking_Video

t/uploads/2022/05/1614322146_pexels-kevin-ku-577585-scaled-90x90.jpg Open source ‘Package Analysis’ tool finds malicious npm, PyPI packages2 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/supply-chain-attack-90x90.jpg Socket: New tool uses a new, proactive defense against OSS supply chain attacks5 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/github-90x90.jpg GitHub: How stolen OAuth tokens helped breach dozens of orgs6 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/Figure-6-Our-exploit-implemented-and-winning-the-TOCTOU-race-90x90.png New Nimbuspwn Linux vulnerability gives hackers root privileges1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/ezgif.com-gif-maker-6-90x90.jpg Lapsus$ Hackers Target T-Mobile1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/ezgif.com-gif-maker-5-90x90.jpg Log4Shell vulnerability in AWS allows full host takeover1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/New-Java-Framework-Vulnerability-and-Mitigations-90x90.jpg Java encryption implementation error made it trivial to forge credentials2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/ezgif.com-gif-maker-3-90x90.jpg CISA warns of attackers now exploiting Windows Print Spooler bug2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/ezgif.com-gif-maker-2-3-90x90.jpg Newly found zero-click iPhone exploit used in NSO spyware attacks2 weeks ago
The post Security bug in VMWare Workspace ONE could allow access to internal, cloud networks first appeared on Black Hat Ethical Hacking.

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
REvil.Ransom Code Execution

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Ransom.Conti Code Execution

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Conti.Ransom Code Execution

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Ransom.WannaCry Code Execution

___________________________
@hacking_Attack
@Hacking_Video

Information leakage in EXIF data of images(EXIF Data Exposure)

Summary :Continue reading on Medium »
Read more...

hacking: security in practice
MITM to change website-content on own virtual machine

Hey hacker-buddies,

i´ have recently watched some "hackers trolling scammers" videos on youtube and found this one: https://www.youtube.com/watch?v=daHVD9a_rJU

The Youtuber says he spend a weekend coding some MITM stuff and now every time he logs into the american-bank demo from his own virtual machine, he has the values and parameters he wants to.

I think this is an awesome way on spending the scammers time because they think you are a perfect target without you giving out some private information or real banking details.

What i am curious about is how he made this. I know there are possibilities with mitmproxy or burpsuite but i only found some explanations on how to srape a site, change something and load it. In the video it looks way more automated (when site is called, load this and that), he even jumps from page to page and it shows the "injected" information.

Does any of you awesome people have some tipps/links for me to understand this procedure a bit better?

Stay safe and happy hacking

submitted by /u/B4st1n3um4nn
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Do you know about some free (best be open-source) and portable alternative to Hash Suite for Windows?

I want to have a portable hash brute-force matcher for Windows I could just have on my USB drive.

The hash suite is pretty good, however it's expensive. It also supports NTLM which I need the most and it supports resuming attacks later.

However, the free version is limited to 6 characters.

submitted by /u/lukmly013
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Vpn

Do you guys know a good vpn for android ?

submitted by /u/Mohriarty
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

CVE-2022–25262
https://medium.com/@reconshell.com/cve-2022-25262-d98af4ba38e0?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

CVE-2022–25262Continue reading on Medium » (https://medium.com/@reconshell.com/cve-2022-25262-d98af4ba38e0?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Business Logic Errors - Art of Testing Cards
https://shahjerry33.medium.com/business-logic-errors-art-of-testing-cards-4907cfb46a57?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video