Tool: malicious-pdf Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?

If you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com
See Also: Write up: Find hidden and encrypted secrets from any website Source: threatpost.com Source Linkhttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Merch-1024x1024.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/05/backdoor-90x90.jpg BPFdoor: Stealthy Linux malware bypasses firewalls for remote access3 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/05/microsoft-exploit-90x90.jpg Actively Exploited Zero-Day Bug Patched by Microsoft4 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/05/maxresdefault-90x90.jpg UK government blocked four times as many cyber-scams in 20215 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/05/microsoft-azure-cloud-90x90.jpg Microsoft releases fixes for Azure flaw allowing RCE attacks6 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/05/f5-big-ip-hacking-90x90.jpg Exploits created for critical F5 BIG-IP flaw, install patch immediately7 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/05/Fileless-Malware-660x400-1-90x90.jpg Attackers Use Event Logs to Hide Fileless Malware1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/05/poison-1481596_1920-90x90.jpg Zero-day bug in uClibc library could leave IoT devices vulnerable to DNS poisoning attacks2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/05/1ed10a11bb45c273cebc7b8cb492979249bcdcec-90x90.png Security bug in VMWare Workspace ONE could allow access to internal, cloud networks2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/05/ezgif.com-gif-maker-2-90x90.jpg New PyScript project lets you run Python programs in the browser2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/05/1614322146_pexels-kevin-ku-577585-scaled-90x90.jpg Open source ‘Package Analysis’ tool finds malicious npm, PyPI packages2 weeks ago
The post Malware Builder Leverages Discord Webhooks first appeared on Black Hat Ethical Hacking.

___________________________
@hacking_Attack
@Hacking_Video

Bounty Hacker Walkthrough — Try Hack Me
https://medium.com/@kor3s/bounty-hacker-walkthrough-try-hack-me-4188bed9cae4?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

You were boasting on and on about your elite hacker skills in the bar and a few Bounty Hunters decided they'd take you up on claims! Prove…Continue reading on Medium » (https://medium.com/@kor3s/bounty-hacker-walkthrough-try-hack-me-4188bed9cae4?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Bounty Hacker Walkthrough — Try Hack Me

You were boasting on and on about your elite hacker skills in the bar and a few Bounty Hunters decided they'd take you up on claims! Prove…Continue reading on Medium »
Read more...

Module-2 | Introduction -Pentesting & Bypassing AWS/Azure/GCP Cloud WAF Fun & Profit
https://justm0rph3u5.medium.com/module-2-introduction-pentesting-bypassing-aws-azure-gcp-cloud-waf-fun-profit-cfcfd55454f6?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Q. What is Core Rule Set & why it is utilized by all the cloud WAFs?
A. We will try to understand more about the core rule set along with…Continue reading on Medium » (https://justm0rph3u5.medium.com/module-2-introduction-pentesting-bypassing-aws-azure-gcp-cloud-waf-fun-profit-cfcfd55454f6?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Bounty Hacker Walkthrough — Try Hack Me

https://cdn-images-1.medium.com/max/1200/1*1mtQwkgfzGNK8xB5RxWY5A.jpeg
You were boasting on and on about your elite hacker skills in the bar and a few Bounty Hunters decided they'd take you up on claims! Prove…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Module-1 | Introduction -Pentesting & Bypassing AWS/Azure/GCP Cloud WAF Fun & Profit

https://cdn-images-1.medium.com/max/1290/1*-rZYQ4hufBSXDednAQ3XqQ.png
Why you should not trust the cloud WAF?

Continue reading on InfoSec Write-ups »

___________________________
@hacking_Attack
@Hacking_Video

Module-2 | Introduction -Pentesting & Bypassing AWS/Azure/GCP Cloud WAF Fun & Profit

Q. What is Core Rule Set & why it is utilized by all the cloud WAFs? A. We will try to understand more about the core rule set along with…Continue reading on InfoSec Write-ups »
Read more...

hacking: security in practice
Can someone set up a private mod server or mod the game "Immortal Taoists"? Like the clash of clans private servers

Game Link : https://play.google.com/store/apps/details?id=com.immortaltaoists.en&hl=en_IN&gl=US

It's fun but major P2W or time consumer,

I just wanna progress fast so if anyone's got time + knows how to do it can they make it pls?

(I can't provide finance for it but there will probably be a lotta people playing cause it's popular)

submitted by /u/Victor_710
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Someone is playing Christmas music on a bluetooth speaker at work.

I need to make it stop.

submitted by /u/the_yin_to_the_yang
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Microsoft says the Sysrv botnet is now exploiting vulnerabilities in the Spring Framework and WordPress to ensnare and deploy cryptomining malware on vulnerable Windows and Linux servers.

https://external-preview.redd.it/dMkAdT-xXD0K2WbWjxW2q6ZTOQuwP2lZIo7G4pGYL_k.jpg?width=640&crop=smart&auto=webp&s=c35e394b5e87ed00ed7a31be38fff592275b7606 submitted by /u/Late_Ice_9288
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Chlonium - Chromium Cookie Import / Export Tool
http://www.kitploit.com/2022/05/chlonium-chromium-cookie-import-export.html

___________________________
@hacking_Attack
@Hacking_Video

Chlonium is an application designed for cloning Chromium Cookies. From Chromium 80 and upwards, cookies are encrypted using AES-256 GCM, with a state key which is stored in the Local State file. This state key is encrypted using DPAPI. This is a change from older versions, which used DPAPI to encrypt each cookie item in the cookie database. What this means is that if you have the state key, you will always be able to decrypt the cookie database offline, without needing continual access to DPAPI keys.This essentially makes cookie databases "portable", meaning they can be moved from machine to machine, provided you have dumped the state key. The cookies themselves need to be re-encrypted when they are imported, because the state keys will differ on each user profile & machine. This can be done using the same process as decryption, by first decrypting the state key from the "target" browser, and then re-encrypting each item with the new key. The project is written in C# and has two separate components to it. The first component, chlonium.exe is the collector binary. It simply decrypts the state key and prints it. Keep a note of this key and you can decrypt cookies in the future by downloading the Cookies database file whenever you need updated cookies. By default it will attempt to decrypt the Chrome state key. If you want to dump the state key for another browser (e.g. Edge), you can specify a path to the key. For example: Chlonium.exe "c:\users\user\AppData\Local\Microsoft\Edge\User Data\Local State" [+] Statekey = 3Cms3YxFXVyJRUbulYCnxqY2dO/jubDkYBQBoYIvqfc='>> Chlonium.exe "c:\users\user\AppData\Local\Microsoft\Edge\User Data\Local State" [+] Statekey = 3Cms3YxFXVyJRUbulYCnxqY2dO/jubDkYBQBoYIvqfc= The second component, ChloniumUI.exe is the "importer" tool. This takes care of decrypting a given Cookies database file with a given state key, re-encrypting the values with the current users state key, and importing the cookies into your chosen browser. You run this on the machine you want to import the cookies into. To use it, run the ChloniumUI.exe executable. Enter the previously extracted state key, choose the Cookies file you wish to import, and select the browser you wish the import the cookies into. Now click "Import Cookies" and the cookies will be imported. ChloniumUI currently supports three Chromium based browsers: Edge, Chrome and Vivaldi. Additional browsers can be added in Browsers.cs. This adds the unintended benefit of being able to import an Edge cookie file into Chrome, or vice versa (for example), though it's probably not a good idea given that the user-agent will mismatch. Important Note: When importing the cookie file into your browser, all old cookies are cleared! A backup is copied to the current directory (https://www.kitploit.com/search/label/Directory) (with relevant time stamp). If you need to restore the previous cookies, simply copy the backup file over the Cookies file. Why Tools such as Mimikatz (https://github.com/gentilkiwi/mimikatz/wiki/module-~-dpapi) and SharpChromium (https://github.com/djhohnstein/SharpChromium) already have the capability to dump Chrome 80 cookies, why another tool? This tool is specifically aimed at making it easier to import cookies into another browser. Whilst these tools do a great job of dumping Chromium cookies (and more!), I wanted to have something that let me easily import into another browser. Third-party cookie manager (https://www.kitploit.com/search/label/Cookie%20Manager) plugins exist, but I've always found these fiddly and prone to failure. CloniumUI is designed to make this process easier by importing the cookies directly into your browser's sqlite database. Whilst this project comes with the chlonium.exe collector, which aids in dumping the state key, this is really only an example. Other tools such as Mimikatz will also dump the state key for you, in a potentially stealthier way (depending on your operating environment, execution method

___________________________
@hacking_Attack
@Hacking_Video