Hacking Articles Tips Tricks Videos Tutorials
467 subscribers
65.7K photos
15 videos
157 files
132K links
Exploit
Pentesting
Hacking
Red Team
Blue Team
Kali Linux
Bug Bounty
Black Hat
Cyber security etc

@Hacking_Video
@Hacking_attack
Download Telegram
Bug Bounty For TOP Cross-Chain Bridge Open Test Is Launched

The TOP cross-chain bridge testnet version is now LIVE! Test and find bugs from TOP bridge and get up to 15,000,000 per issue! Happy…Continue reading on TOP Network »
Read more...
Hacking Articles Tips Tricks Videos Tutorials
Photo
Black Hat Ethical Hacking
New Linux malware called RapperBot brute-forces Linux SSH servers to breach networks

New Linux malware called RapperBot brute-forces Linux SSH servers to breach networksPost Views: 19 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/07/Patreon.png Subscribe to Patreon to watch this episode.
Reading Time: 3 Minutes A new botnet called ‘RapperBot’ is being used in attacks since mid-June 2022, focusing on brute-forcing its way into Linux SSH servers to establish a foothold on the device.The researchers show that RapperBot is based on the Mirai trojan but deviates from the the original malware’s normal behavior, which is uncontrolled propagation to as many devices as possible.

Instead, RapperBot is more tightly controlled, has limited DDoS capabilities, and its operation appears geared towards initial server access, likely to be used as stepping stones for lateral movement within a network.

Over the past 1.5 months since its discovery, the new botnet used over 3,500 unique IPs worldwide to scan and attempt brute-forcing Linux SSH servers.
See Also: So you want to be a hacker? Complete Offensive Security and Ethical Hacking Course Mirai-based, but differentThe new botnet was discovered in the wild by threat hunters at Fortinet, who noticed the IoT malware featured some unusual SSH-related strings and decided to investigate further.

RapperBot proved to be a Mirai fork, but with its own command and control (C2) protocol, unique features, and atypical (for a botnet) post-compromise activity.

“Unlike the majority of Mirai variants, which natively brute force Telnet servers using default or weak passwords, RapperBot exclusively scans and attempts to brute force SSH servers configured to accept password authentication,” explains the Fortinet report.

“The bulk of the malware code contains an implementation of an SSH 2.0 client that can connect and brute force any SSH server that supports Diffie-Hellmann key exchange with 768-bit or 2048-bit keys and data encryption using AES128-CTR.”

The SSH brute-forcing relies on a list of credentials downloaded from the C2 via host-unique TCP requests, while the malware reports back to the C2 when it succeeded.

Fortinet researchers followed the bot and continued to sample new variants, noticing that RapperBot used a self-propagation mechanism via a remote binary downloader, which was removed by the threat actors in mid-July.

The newer variants circulating at that time featured a shell command that replaced the victim’s SSH keys with the actor’s, essentially establishing persistence that’s maintained even after SSH password changes.

Moreover, RapperBot added a system to append the actor’s SSH key to the host’s “~/.ssh/authorized_keys,” which helps maintain access on the server between reboots or even if the malware is found and deleted.

In the most recent samples analyzed by the researchers, the bot adds the root user “suhelper” on the compromised endpoints and creates a Cron job that re-adds the user every hour in case an admin discovers the account and deletes it.
https://www.bleepstatic.com/images/news/u/1220909/Diagrams/attack-diagram(2).png
RapperBot’s goalMost botnets either pe[...]

___________________________
@hacking_Attack
@Hacking_Video
Hacking Articles Tips Tricks Videos Tutorials
Photo
Black Hat Ethical Hacking
Offensive Security Tool: Offensive-Azure

Offensive Security Tool: Offensive-AzurePost Views: 5 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/08/Patreon.png Subscribe to Patreon to watch this episode.
Reading Time: 2 Minutes Offensive-AzureOffensive-Azure by blacklanternsecurity is a collection of offensive tools targeting Microsoft Azure written in Python to be platform agnostic. It offers various scripts that can be used against Microsoft Azure in different attack vectors ranging from token manipulation, domain enumeration getting info in regards to the tenant without requiring authentication and much more. Aimed at the red team and pentesters, to evaluate the setup of Azure in various environments.
See Also: So you want to be a hacker? Complete Offensive Security and Ethical Hacking Course
The current list of tools can be found below with a brief description of their functionality.

* ./Device_Code/device_code_easy_mode.py

⦿ Generates a code to be entered by the target user
⦿ Can be used for general token generation or during a phishing/social engineering campaign.

* ./Access_Tokens/token_juggle.py

⦿ Takes in a refresh token in various ways and retrieves a new refresh token and an access token for the resource specified

* ./Access_Tokens/read_token.py

⦿ Takes in an access token and parses the included claims information, checks for expiration, attempts to validate signature

* ./Outsider_Recon/outsider_recon.py

⦿ Takes in a domain and enumerates as much information as possible about the tenant without requiring authentication

* ./User_Enum/user_enum.py

⦿ Takes in a username or list of usernames and attempts to enumerate valid accounts using one of three methods
⦿ Can also be used to perform a password spray

* ./Azure_AD/get_tenant.py

⦿ Takes in an access token or refresh token, outputs tenant ID and tenant Name
⦿ Creates text output file as well as BloodHound compatible aztenant file

* ./Azure_AD/get_users.py

⦿ Takes in an access token or refresh token, outputs all users in Azure AD and all available user properties in Microsoft Graph
⦿ Creates three data files, a condensed json file, a raw json file, and a BloodHound compatible azusers file

* ./Azure_AD/get_groups.py

⦿ Takes in an access token or refresh token, outputs all groups in Azure AD and all available group properties in Microsoft Graph
⦿ Creates three data files, a condensed json file, a raw json file, and a BloodHound compatible azgroups file

* ./Azure_AD/get_group_members.py

⦿ Takes in an access token or refresh token, outputs all group memberships in Azure AD and all available group member properties in Microsoft Graph
⦿ Creates three data files, a condensed json file, a raw json file, and a BloodHound compatible azgroups file

* ./Azure_AD/get_subscriptions.py

⦿ Takes in an ARM token or refresh token, outputs all subscriptions in Azure and all available subscription properties in Azure Resource Manager
⦿ Creates three data files, a condensed json file, a raw json file, and a BloodHound compatible azgroups file

* ./Azure_AD/get_resource_groups.py

⦿ Takes in an ARM token or refresh token, outputs all resource groups in Azure and all available resource group properties in Azure Resource Manager
⦿ Creates two data files, a raw json file, and a BloodHound compatible azgroups file

* ./Azure_AD/get_vms.py

⦿ Takes in an ARM token or refresh token, outputs all virtual machines in Azure and all available VM properties in Azure Resource Manager
⦿ Creates two data files, a raw json file, and a BloodHound compatible azgroups file
Trending: Offensive Security Tool: DDoS-Layer7-bheh InstallationOffensive Azure can be installed in a number of ways or not at all.

You are welcome to clone the repository and execute t[...]

___________________________
@hacking_Attack
@Hacking_Video
Hacking Articles Tips Tricks Videos Tutorials
Black Hat Ethical Hacking New Linux malware called RapperBot brute-forces Linux SSH servers to breach networks New Linux malware called RapperBot brute-forces Linux SSH servers to breach networksPost Views: 19 Premium Contenthttps://www.blackhatethicalhacking.com/wp…
rform DDoS attacks or engage in coin-mining by hijacking the host’s available computational resources, and some do both.

The goal of RapperBot, however, isn’t evident, as the authors have kept its DDoS functions limited and even removed and re-introduced them at some point.

Also, the removal of self-propagation and the addition of persistence and detection-avoidance mechanisms indicate that the botnet’s operators may be interested in initial access sales to ransomware actors.

Fortinet reports that its analysts saw no additional payloads delivered post-compromise during the monitoring period, so the malware just nests on the infected Linux hosts and sits dormant.
Trending: GitHub introduces 2FA and quality of life improvements for npm Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?

If you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com
Source: bleepingcomputer.com Source Link https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Merch.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/08/Images-for-the-News-posts-1-300x150.png Jenkins security: Unpatched XSS, CSRF bugs included in latest plugin advisoryAugust 4, 2022
Reading Time: 3 minutes

* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/08/Images-for-the-News-posts-300x150.png VMware urges admins to patch critical auth bypass bug immediatelyAugust 3, 2022
Reading Time: 3 minutes

* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/08/Images-for-the-News-posts-4-300x150.png Thousand apps leak Twitter API keys, some allowing account hijacksAugust 2, 2022
Reading Time: 3 minutes

* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/08/Images-for-the-News-posts-3-300x150.png XSS vulnerabilities in Google Cloud, Google Play could lead to account hijacksAugust 1, 2022
Reading Time: 2 minutes
https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/OffSec-Course.png Offensive Security & Ethical Hacking CourseBegin the learning curve of hacking now!
The post New Linux malware called RapperBot brute-forces Linux SSH servers to breach networks first appeared on Black Hat Ethical Hacking.

___________________________
@hacking_Attack
@Hacking_Video
Hacking Articles Tips Tricks Videos Tutorials
Black Hat Ethical Hacking Offensive Security Tool: Offensive-Azure Offensive Security Tool: Offensive-AzurePost Views: 5 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/08/Patreon.png Subscribe to Patreon to watch this episode.…
he specific scripts you want. A requirements.txt file is included for each module to make this as easy as possible. PoetryThe project is built to work with poetry. To use, follow the next few steps:

https://www.blackhatethicalhacking.com/wp-content/uploads/2022/08/Poetry-1024x347.png PipThe packaged version of the repo is also kept on pypi so you can use pip to install as well. They recommend to use pipenv to keep your environment as clean as possible.

https://www.blackhatethicalhacking.com/wp-content/uploads/2022/08/Pip.png UsageIt is up to you for how you wish to use this toolkit. Each module can be ran independently, or you can install it as a package and use it in that way. Each module is exported to a script named the same as the module file. For example: Poetryhttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/08/Poetry_usage.png Piphttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/08/Pip_usage.png
Clone the repo from here: GitHub Link
Trending: Write up: Find Hidden Info using Google Dorking manually, and Automated using Pagodo https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Merch.png Recent Tools* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/07/Pretender-300x150.png Offensive Security Tool: PretenderJuly 29, 2022
Reading Time: 4 minutes

* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/07/DDoS-Layer7-bheh-300x150.png Offensive Security Tool: DDoS-Layer7-bhehJuly 28, 2022
Reading Time: 3 minutes

* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/07/GitHacker-300x150.png Offensive Security Tool: GitHackerJuly 22, 2022
Reading Time: 3 minutes

* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/07/Sarenka-300x150.png OSINT Tool: SARENKAJuly 21, 2022
Reading Time: 3 minutes https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/OffSec-Course.png Offensive Security & Ethical Hacking CourseBegin the learning curve of hacking now!
The post Offensive Security Tool: Offensive-Azure first appeared on Black Hat Ethical Hacking.

___________________________
@hacking_Attack
@Hacking_Video
Forked protocols are not battle-tested: Agave Uninitialized Proxy Vulnerability

Having a similar name, Agave.finance is a forked from Aave V2 on the Gnosis chain. One would think that a fork of a battle-tested protocol…Continue reading on Medium »
Read more...
Dark Reading: Attacks/Breaches
Amazon, IBM Move Swiftly on Post-Quantum Cryptographic Algorithms Selected by NIST

A month after the algorithms were revealed, some companies have already begun incorporating the future standards into their products and services.
Dark Reading: Attacks/Breaches
Cyberattackers Increasingly Target Cloud IAM as a Weak Link

At Black Hat USA, Igal Gofman plans to address how machine identities in the cloud and the explosion of SaaS apps are creating risks for IAM, amid escalating attention from attackers.