Black Hat Ethical Hacking
Apple emergency update fixes zero-day used to hack Macs, Watches

Apple emergency update fixes zero-day used to hack Macs, WatchesPost Views: 3
Premium Content https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/Patreon-3.png Subscribe to Patreon to watch this episode.
Reading Time: 2 Minutes
Apple has released security updates to address a zero-day vulnerability that threat actors can exploit in attacks targeting Macs and Apple Watch devices.
Zero-days are security flaws that the software vendor is unaware of and hasn’t yet patched. In some cases, this type of vulnerability may also have publicly available proof-of-concept exploits before a patch arrives or may be actively exploited in the wild.

In security advisories issued on Monday, Apple revealed that they’re aware of reports this security bug “may have been actively exploited.”

The flaw is an out-of-bounds write issue (CVE-2022-22675) in the AppleAVD (a kernel extension for audio and video decoding) that allows apps to execute arbitrary code with kernel privileges.

The bug was reported by anonymous researchers and fixed by Apple in macOS Big Sur 11.6., watchOS 8.6, and tvOS 15.5 with improved bounds checking.

The list of impacted devices includes Apple Watch Series 3 or late, Macs running macOS Big Sur, Apple TV 4K, Apple TV 4K (2nd generation), and Apple TV HD.

While Apple disclosed reports of active exploitation in the wild, it did not release any extra info regarding these attacks.
See Also: Complete Offensive Security and Ethical Hacking Course https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Solutions-1.png By withholding information, the company is likely aiming to allow the security updates to reach as many Apple Watches and Macs as possible before attackers pick up on the zero-day’s details and start deploying exploits in other attacks.

Although this zero-day was most probably only used in targeted attacks, it’s still strongly advised to install today’s macOS and watchOS security updates as soon as possible to block attack attempts. Five zero-days patched in 2022In January, Apple patched two other zero-days exploited in the wild to let attackers gain arbitrary code execution with kernel privileges (CVE-2022-22587) and track web browsing activity and user identities in real-time (CVE-2022-22594).

One month later, Apple released security updates to patch a new zero-day bug (CVE-2022-22620) exploited to hack iPhones, iPads, and Macs, which leads to OS crashes and remote code execution on compromised Apple devices.
See Also: Attackers Use Event Logs to Hide Fileless Malware See Also: Offensive Security Tool: malicious-pdf In March, two more actively exploited zero-days in the Intel Graphics Driver (CVE-2022-22674) and the AppleAVD media decoder (CVE-2022-22675), the latter also backported today in older versions of macOS, in watchOS 8.6, and in tvOS 15.5.

These five zero-days impact iPhones (iPhone 6s and up), Macs running macOS Monterey, and multiple iPad models.

Throughout last year, the company also patched a long list of zero-days exploited in the wild to target iOS, iPadOS, and macOS devices. Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?

If you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com
See Also: Write up: Find hidden and encrypted secrets from any website Source: bleepingcomputer.com Source Linkhttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Merch-1024x1024.png Recent News* https://www.blackha[...]

___________________________
@hacking_Attack
@Hacking_Video

tethicalhacking.com/wp-content/uploads/2022/05/banner-2022.2-release-90x90.jpg Kali Linux 2022.2 released with new tools, terminal tweaks and more12 hours ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/05/Discord-hack-90x90.png Malware Builder Leverages Discord Webhooks23 hours ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/05/backdoor-90x90.jpg BPFdoor: Stealthy Linux malware bypasses firewalls for remote access4 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/05/microsoft-exploit-90x90.jpg Actively Exploited Zero-Day Bug Patched by Microsoft5 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/05/maxresdefault-90x90.jpg UK government blocked four times as many cyber-scams in 20216 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/05/microsoft-azure-cloud-90x90.jpg Microsoft releases fixes for Azure flaw allowing RCE attacks7 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/05/f5-big-ip-hacking-90x90.jpg Exploits created for critical F5 BIG-IP flaw, install patch immediately1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/05/Fileless-Malware-660x400-1-90x90.jpg Attackers Use Event Logs to Hide Fileless Malware2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/05/poison-1481596_1920-90x90.jpg Zero-day bug in uClibc library could leave IoT devices vulnerable to DNS poisoning attacks2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/05/1ed10a11bb45c273cebc7b8cb492979249bcdcec-90x90.png Security bug in VMWare Workspace ONE could allow access to internal, cloud networks2 weeks ago
The post Apple emergency update fixes zero-day used to hack Macs, Watches first appeared on Black Hat Ethical Hacking.

___________________________
@hacking_Attack
@Hacking_Video

What hacking is and why it matters!
https://medium.com/@coyemerald/what-hacking-is-and-why-it-matters-b44c3ea1628?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

When people hear about hacking, there are different connotations to it! But the common interpretations of the term “hacking” in many…Continue reading on Medium » (https://medium.com/@coyemerald/what-hacking-is-and-why-it-matters-b44c3ea1628?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Windows Privilege Escalation

https://cdn-images-1.medium.com/max/800/1*IrMNg3L2zCubFd5FrL-x6g.jpeg
This blog discusses on how to enumerate Windows systems manually and with tools

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Bluetooth-based Cyberattacks

https://cdn-images-1.medium.com/max/750/1*5w2aC5fnOUruBygEhtzRxg.jpeg
Almost certainly, you’ve come across it, but what exactly is it?

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Vásároljon jogosítványt, útlevelet, vízumot, EITLS vizsgát, hamis bankjegyet whatsapp: +27 67 252…

https://cdn-images-1.medium.com/max/704/1*kDlsoD5kiFqKxC-_VG0QHA.jpeg
Vásároljon jogosítványt, útlevelet, vízumot, EITLS vizsgát, hamis bankjegyet whatsapp: +27 67 252 9928

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

What hacking is and why it matters!

When people hear about hacking, there are different connotations to it! But the common interpretations of the term “hacking” in many…Continue reading on Medium »
Read more...

hacking: security in practice
Is there a tool or modified version of teamviewer that I can use to Reverse teamviewer connections?

I think you can guess why I want to do that.
I've got everything else that I need. I just need a way inside.

submitted by /u/Draygoes
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Gitcolombo : Extract And Analyze Contributors Info From Git Repos

Git colombo is an OSINT tool to extract info about persons from git repositories: common names, emails, matches between different (as it may seems) accounts.

Using

* Install git
* Run:

from any git url
./gitcolombo.py -u https://github.com/Kalanchyovskaia16/newlps
from directory, recursively
./gitcolombo.py -d ./newlps -r
from all GitHub personal/org repos by nickname
./gitcolombo.py –nickname LubyRuffy

For batch cloning from Gitlab and Bitbucket group repos you can use ghorg.

Output:

* verbose persons info
* name
* email
* number of appearences as author/committer
* other persons that person can be

* emails used for the same name
* different names for the same person
* general statistics

What’s the difference between git author and committer?

TL;DR

* author wrote the code (make the patch)
* commiter commit it to the repo (rewrite history, make pull/merge requests…)

Nice explanation: https://stackoverflow.com/questions/18750808/difference-between-author-and-committer-in-git

Very often developers make inaccurate commits with the one name/email (e.g. work account), then change to the right (e.g. personal account) and make git commit --amend, but forget to change the author of the commit. This way we can use it for OSINT as match of names/emails from git history.
Download

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Socid-Extractor : Extract Accounts Info From Personal Pages On Various Sites For OSINT Purpose

Socid-Extractor Extracts information about a user from profile webpages / API responses and save it in machine-readable format.

Usage

As a command-line tool:

$ socid_extractor –url https://www.deviantart.com/muse1908
country: France
created_at: 2005-06-16 18:17:41
gender: female
username: Muse1908
website: www.patreon.com/musemercier
links: [‘https://www.facebook.com/musemercier’, ‘https://www.instagram.com/muse.mercier/’, ‘https://www.patreon.com/musemercier’]
tagline: Nothing worth having is easy…

Without installing:

$ ./run.py –url https://www.deviantart.com/muse1908

As a Python library:

import socid_extractor, requests
r = requests.get(‘https://www.patreon.com/annetlovart’)
socid_extractor.extract(r.text)
{‘patreon_id’: ‘33913189’, ‘patreon_username’: ‘annetlovart’, ‘fullname’: ‘Annet Lovart’, ‘links’: “[‘https://www.facebook.com/322598031832479’, ‘https://www.instagram.com/annet_lovart’, ‘https://twitter.com/annet_lovart’, ‘https://youtube.com/channel/UClDg4ntlOW_1j73zqSJxHHQ’]”}

Installation

$ pip3 install socid-extractor

The latest development version can be installed directly from GitHub:

$ pip3 install -U git+https://github.com/soxoj/socid_extractor.git

Sites and Methods

More than 100 methods for different sites and platforms are supported!

* Google (all documents pages, maps contributions), cookies required
* Yandex (disk, albums, znatoki, music, realty, collections), cookies required to prevent captcha blocks
* Mail.ru (my.mail.ru user mainpage, photo, video, games, communities)
* Facebook (user & group pages)
* VK.com (user page)
* OK.ru (user page)
* Instagram
* Reddit
* Medium
* Flickr
* Tumblr
* TikTok
* GitHub

…and many others.

You can also check tests file for data examples, schemes file to expore all the methods.

When it may be useful

* Getting all available info by the username or/and account UID. Examples: Week in OSINT, OSINTCurious
* Users tracking, checking that the account was previously known (by ID) even if all public info has changed. Examples: Aware Online
* Searching by commonly used cross-service UIDs (GAIA ID, Facebook UID, Yandex Public ID, etc.)
* DB leaks of forums and platforms in SQL format
* Indexed links that contain target profile ID

* Searching for tracking data by comparison with other IDs – how it works, how can it be used.
* Law enforcement online requests

Testing

python3 -m pytest tests/test_e2e.py -n 10 -k ‘not cookies’ -m ‘not github_failed and not rate_limited’
Download

___________________________
@hacking_Attack
@Hacking_Video

CLV Wallet Bug Bounty Campaign

Reward Pool of 100,000 CLV!Continue reading on Medium »
Read more...

Vaas - Verdict-as-a-Service SDKs: Analyze Files For Malicious Content
http://www.kitploit.com/2022/05/vaas-verdict-as-service-sdks-analyze.html

___________________________
@hacking_Attack
@Hacking_Video