Hacking on Medium
Ransomware bunches shift strategies and targets.

https://cdn-images-1.medium.com/max/1600/1*Ac34bXms4TJ0yVy40JOx8A.jpeg
Malware can play a major or nonexistent role in ransomware attacks. Threat actors are often only in it for the money.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
HackThisSite Extended Basic Mission 11

https://cdn-images-1.medium.com/max/700/0*DdyFphYep_JLp5MV.jpg
No matter how much hacking I do some child in another country is already better than me

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

JavaMelody for Server Monitoring QA and production environments Endpoint leads to Unauthorized…
https://medium.com/@Dhamuharker/javamelody-for-server-monitoring-qa-and-production-environments-endpoint-leads-to-unauthorized-dc6a2b0789bd?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Description:Continue reading on Medium » (https://medium.com/@Dhamuharker/javamelody-for-server-monitoring-qa-and-production-environments-endpoint-leads-to-unauthorized-dc6a2b0789bd?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Russian govt hackers hit Ukraine with Cobalt Strike, CredoMap malware. The sent emails supposedly come from the State Tax Service of Ukraine, with the subject: "Notice of non-payment of tax."

https://external-preview.redd.it/yaw4rxN0qvYas0KFGbbEVdHdN7MzoHUvYomFMtWID3Q.jpg?width=640&crop=smart&auto=webp&s=ee68d6001932cbd35a9e69f60c9e5c68540b68e1 submitted by /u/Late_Ice_9288
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
What does this community think o ITProTV?

With the goal of getting some kind of job training.
Is this one the go to or do you like another?
No shills, pls.

submitted by /u/Guano-Loco
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
DORK Tools

Did not want this to get lost in my verbal diarrhea post.

* https://github.com/MTT768 = dork maker in Turkish
* Mine https://github.com/michaelnotadev/Dork-Maker-in-EN = Coded to English and tweaked a tiny bit by me.
* The GIP tool, very cool. A dork tool like no other. This thing is a gold mine.
* https://twitter.com/0x21SAFE
* https://github.com/SeifElsallamy/gip
* https://0iq.me/gip/
submitted by /u/mikeis075
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
DorkSearch - Speed up your Dorking

submitted by /u/mikeis075
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Easily remove PDF redactions

* https://hackaday.com/2008/08/01/exposing-poorly-redacted-pdfs/
* https://vimeo.com/1451028

submitted by /u/mikeis075
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Hacking

Hello, I need to hack a whatsapp, what program can I use or who could help me? It is not for any malicious purpose, it is the least I want

submitted by /u/Efficient-Nobody-842
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

JavaMelody for Server Monitoring QA and production environments Endpoint leads to Unauthorized…

Description:Continue reading on Medium »
Read more...

Hacking on Medium
(THM) — How I Met (and destroyed) Your Paywall; Walking an Application

https://cdn-images-1.medium.com/max/1000/1*JUiOOsQ1F9T0mnAgK3K3Lg.png
I’m switching it up today from the OWASP material, but keeping up with the theme of webapp security (my current obsession) let’s check out…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Black Hat Ethical Hacking
Elusive ToddyCat APT Targets Microsoft Exchange Servers

Elusive ToddyCat APT Targets Microsoft Exchange ServersPost Views: 13
Premium Content https://www.blackhatethicalhacking.com/wp-content/uploads/2022/05/Patreon.png Subscribe to Patreon to watch this episode.
Reading Time: 2 Minutes
An advanced persistent threat (APT) group, dubbed ToddyCat, is believed behind a series of attacks targeting Microsoft Exchange servers of high-profile government and military installations in Asia and Europe.
The threat actor targets institutions and companies in Europe and Asia.
An advanced persistent threat (APT) group, dubbed ToddyCat, is believed behind a series of attacks targeting Microsoft Exchange servers of high-profile government and military installations in Asia and Europe. The campaigns, according to researchers, began in December 2020, and have been largely poorly understood in their complexity until now.

“The first wave of attacks exclusively targeted Microsoft Exchange Servers, which were compromised with Samurai, a sophisticated passive backdoor that usually works on ports 80 and 443,” wrote Giampaolo Dedola security researcher at Kaspersky, in a report outlining the APT.

Researchers said ToddyCat a is relatively new APT and there is “little information about this actor.”

The APT leverages two passive backdoors within the Exchange Server environment with malware called Samurai and Ninja, which researchers say are used by the adversaries to take complete control of the victim’s hardware and network.

The Samurai malware was a part of a multi-stage infection chain initiated by the infamous China Chopper and relies on web shells to drop exploits on the selected exchange server in Taiwan and Vietnam from December 2020, reports Kaspersky.

The researchers stated that the malware “arbitrary C# code execution and is used with multiple modules that allow the attacker to administrate the remote system and move laterally inside the targeted network.” In some cases, they said, the Samurai backdoor lays the path to launch another malicious program called Ninja.
Aspects of ToddyCat’s threat activities were also tracked by cybersecurity firm ESET, which dubbed the “cluster of activities” seen in the wild as Websiic. Meanwhile, researchers at GTSC identified another part of the group’s infection vectors and techniques in a report outlining the delivery of the malware’s dropper code.

“That said, as far as we know, none of the public accounts described sightings of the full infection chain or later stages of the malware deployed as part of this group’s operation,” Kaspersky wrote.
See Also: So you want to be a hacker? Complete Offensive Security and Ethical Hacking Course https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Solutions-1.png Multiple Strings of Attacks on Exchange Server Over the YearsDuring the period between December 2020 and February 2021, the first wave of attacks were carried out against the limited number of servers in Taiwan and Vietnam.

In the next period, between February 2021 and May 2021, researchers observed a sudden surge in attacks. That’s when, they said, the threat actor began abusing the ProxyLogon vulnerability to target organizations in multiple countries including Iran, India, Malaysia, Slovakia, Russia and the United Kingdom.

After May 2021, the researchers observed the attributes linked to the same group which targets the previously mentioned countries as well as the military and government organizations based in Indonesia, Uzbekistan and Kyrgyzstan. The attack surface in the third wave is expanded to desktop systems while previously the scope was limited to Microsoft Exchange Servers only. Attack SequenceThe attack sequence is initiated after the[...]

___________________________
@hacking_Attack
@Hacking_Video