Hacking on Medium
Vulnhub: Escalate My Privileges 1

https://cdn-images-1.medium.com/max/940/1*pg-t10q4SW11zKNuOpT92w.png
Hi! this is Roshan aka 1mper1us. Here i am going to solve/crack a machine called “Escalate My Privileges 1”. Hope you guys will find it…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Tryhackme: Wonderland writeup

https://cdn-images-1.medium.com/max/1962/1*b5daOFm9rHuSrIzmwvSP7w.jpeg
This is my first write-up, I will be going over https://tryhackme.com‘s Wonderland room. This box has a heavy emphasis on Linux privilege…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Reverse Engineering Discord’s Party Mode

Continue reading on Medium »
Read more...

Black Hat Ethical Hacking
New Windows Search zero-day added to Microsoft protocol nightmare

New Windows Search zero-day added to Microsoft protocol nightmarePost Views: 6
Premium Content https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/Patreon-3.png Subscribe to Patreon to watch this episode.
Reading Time: 3 Minutes
A new Windows Search zero-day vulnerability can be used to automatically open a search window containing remotely-hosted malware executables simply by launching a Word document.
The security issue can be leveraged because Windows supports a URI protocol handler called ‘search-ms’ that allows applications and HTML links to launch customized searches on a device.

While most Windows searches will look on the local device’s index, it is also possible to force Windows Search to query file shares on remote hosts and use a custom title for the search window.

For example, the popular Sysinternals toolset allows you to remotely mount live.sysinternals.com as a network share to launch their utilities. To search this remote share and list only files matching a particular name, you could use the following ‘search-ms’ URI: search-ms:query=proc&crumb=location:%5C%5Clive.sysinternals.com&displayname=Searching%20SysinternalsAs you can see from the command above, the search-ms ‘crumb’ variable specifies the location to search, and the ‘displayname’ variable specifies the search title.

A customized search window will appear when this command is executed from a Run dialog or web browser address bar on Windows 7, Windows 10, and Windows 11, as shown below.
https://www.bleepstatic.com/images/news/Microsoft/vulnerabilities/search-ms-protocol-handler/search-ms-sysinternals.jpg
Microsoft Office takes it to the next levelThis week, researchers discovered that threat actors were utilizing a new Windows zero-day vulnerability in Microsoft Windows Support Diagnostic Tool (MSDT). To exploit it, threat actors created malicious Word documents that launched the ‘ms-msdt’ URI protocol handler to execute PowerShell commands simply by opening the document.

Identified as CVE-2022-30190, the flaw makes it possible to modify Microsoft Office documents to bypass Protected View and launch URI protocol handlers without interaction by users, which will only lead to further abuse of protocol handlers.

This was seen yesterday when Hickey converted existing Microsoft Word MSDT exploits to use the search-ms protocol handler we described earlier[...]

___________________________
@hacking_Attack
@Hacking_Video

Black Hat Ethical Hacking
New Windows Search zero-day added to Microsoft protocol nightmare

___________________________
@hacking_Attack
@Hacking_Video

Reverse Engineering Discord’s Party Mode
https://medium.com/@not-matthias/reverse-engineering-discords-party-mode-d9c9dcaf0be4?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Continue reading on Medium » (https://medium.com/@not-matthias/reverse-engineering-discords-party-mode-d9c9dcaf0be4?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

How I Mass hunt for Admin Panel Access…
https://medium.com/@ratnadip1998/how-i-mass-hunt-for-admin-panel-access-8c2ad145054?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hello All,🙂Continue reading on Medium » (https://medium.com/@ratnadip1998/how-i-mass-hunt-for-admin-panel-access-8c2ad145054?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
What is Clickjacking?

https://cdn-images-1.medium.com/max/2600/1*ojUOoQkfcsxDs4rz9kaaRA.jpeg
The malicious technique of clickjacking (or user interface redress attack) involves tricking users into clicking on something other than…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
What is a Data Spillage?

https://cdn-images-1.medium.com/max/2600/1*HeFz5z3SSpO-Pa7QVZVrSg.jpeg
There is a risk of data leakage when sensitive, confidential, or harmful information is moved into an environment where it is not…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How I Mass hunt for Admin Panel Access…

https://cdn-images-1.medium.com/max/1562/1*NA2e8jOkzbaFMUazaicHTA.png
Hello All,🙂

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
#WHOAMI

My name is Ibrahim and I am a Cyber Security Analyst in The Netherlands. A large part of my blog will be about Cyber Security and I will…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video