Black Hat Ethical Hacking
Nvidia Warns: Severe Security Bugs in GPU Driver, vGPU Software

https://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Nvidia Warns: Severe Security Bugs in GPU Driver, vGPU SoftwarePost Views: 82
Reading Time: 1 Minute
Nvidia has disclosed a group of security vulnerabilities in the Nvidia graphics processing unit (GPU) display driver, which could subject gamers and others to privilege-escalation attacks, arbitrary code execution, denial of service (DoS) and information disclosure.
Meanwhile, the Nvidia virtual GPU (vGPU) software also has a group of bugs that could lead to a range of similar attacks. 5 GPU Display Driver Security BugsThe most severe of the five bugs in the GPU display driver is tracked as CVE-2021-1074, which rates 7.5 out of 10 on the CVSS vulnerability scale, making it high-severity. It exists in the display driver’s installer, and allows an attacker with local system access to replace an application resource with malicious files. Such an attack may lead to code execution, escalation of privileges, denial of service, or information disclosure.

Another high-severity bug, CVE-2021-1075, rates 7.3 on the CVSS scale. NVIDIA Windows GPU Display Driver for Windows, all versions, contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where the program dereferences a pointer that contains a location for memory that is no longer valid, which may lead to code execution, denial of service, or escalation of privileges.
See Also: Telegram Platform Abused in ‘ToxicEye’ Malware Campaigns
Two medium-severity flaws, CVE-2021-1076 and CVE-2021-1077, both rate 6.6 on the CVSS scale. The former NVIDIA GPU Display Driver for Windows and Linux, all versions, contains a vulnerability in the kernel mode layer (nvlddmkm.sys or nvidia.ko) where improper access control may lead to denial of service, information disclosure, or data corruption. The latter NVIDIA GPU Display Driver for Windows and Linux, R450 and R460 driver branch, contains a vulnerability where the software uses a reference count to manage a resource that is incorrectly updated, which may lead to denial of service.

And finally, the medium-severity CVE-2021-1078 rates 5.5 on the CVSS scale and NVIDIA Windows GPU Display Driver for Windows, all versions, contains a vulnerability in the kernel driver (nvlddmkm.sys) where a NULL pointer dereference may lead to system crash. 8 Nvidia vGPU Software VulnerabilitiesMeanwhile, Nvidia’s vGPU software has eight different security holes. The virtualized GPU allows computing acceleration tailored for resource-intensive workloads like graphics-rich virtual workstations, data science and artificial intelligence.
See Also: Offensive Security Tool: ADFSBrute
The first four bugs are high-severity input-validation bugs that can lead to information disclosure, data tampering or DoS.

These are:

* CVE‑2021‑1080 (7.8 on the CVSS scale): A vulnerability in the vGPU Manager (vGPU plugin), in which certain input data is not validated;
* CVE‑2021‑1081 (7.8): A vulnerability in the guest kernel mode driver and vGPU manager (vGPU plugin), in which an input length is not validated;
* CVE‑2021‑1082 (7.8): A vulnerability in the vGPU Manager (vGPU plugin), stemming from an input length not being validated;
* CVE‑2021‑1083 (7.8): A vulnerability in the guest kernel-mode driver and vGPU Manager (vGPU plugin), also arising from an input length not being validated.
The other four could lead to a variety of outcomes if exploited:

* CVE‑2021‑1084 (7.8): A vulnerability in the guest kernel-mode driver and vGPU Manager (vGPU plugin), in which an input length is[...]

___________________________
@hacking_Attack
@Hacking_Video

not validated, which may lead to data tampering or DoS;
* CVE‑2021‑1085 (7.3): A vulnerability in the vGPU Manager (vGPU plugin) could allow an attacker to write to a shared-memory location and manipulate the data after the data has been validated, which may lead to denial of service and escalation of privileges;
* CVE‑2021‑1086 (7.1): A vulnerability in the vGPU Manager (vGPU plugin) allows guests to control unauthorized resources, which may lead to integrity and confidentiality loss, or information disclosure;
* CVE‑2021‑1087 (5.5): A vulnerability in the vGPU Manager (vGPU plugin), could allow an attacker to retrieve information that could lead to an address space layout randomization (ASLR) bypass, which in turn could crack open the door to memory-corruption bug exploitation. See Also: Hacking Stories: Xbox UndergroundNvidia has released patches to mitigate all of the bugs, which uses can download at through the Nvidia Driver Downloads page or, for the vGPU software update, through the Nvidia Licensing Portal. Affected version tables are available in Nvidia’s advisory, released Friday.

Nvidia continues to address security bugs on a regular basis. In January, it released fixes tied to 16 CVEs across its graphics drivers and vGPU software, in its first security update of 2021. And soon after, it issued patches for its Tesla-based GPUs and its Shield TV lineup.
Source: threatpost.com (Click Link)Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/Telegram_Messagees-90x90.jpg Telegram Platform Abused in ‘ToxicEye’ Malware Campaigns1 day ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/Untitled-design-1-4-90x90.png Mount Locker Ransomware Aggressively Changes Up Tactics4 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/Untitled-design-11-90x90.png Pulse Secure Critical Zero-Day Security Bug Under Active Exploit5 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/firefox_patch-90x90.jpg Mozilla Fixes Firefox Flaw That Allowed Spoofing of HTTPS Browser Padlock6 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/Discord-Nitro-e1618858537976-90x90.png NitroRansomware Asks for Discord Gift Codes, Steals Access Tokens1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/Untitled-design-10-90x90.png WordPress could treat Google FloC as a security issue1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/Crypto_Mining_Bitcoin-90x90.jpg Attackers Target ProxyLogon Exploit to Install Cryptojacker2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/patchtues1-90x90.jpg Microsoft to Patch multiple Zero-Days, 110 vulnerabilities in total2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/Google-Chrome-Browser-90x90.jpg Chrome Zero-Day Exploit Posted on Twitter2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/Clubhouse2-e1618258606781-90x90.png 1.3M Clubhouse Users’ Data Dumped in Hacker Forum for Free2 weeks ago
The post Nvidia Warns: Severe Security Bugs in GPU Driver, vGPU Software first appeared on Black Hat Ethical Hacking.

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
The Babuk Group

https://external-preview.redd.it/Pq4ze0Zi22XQpa3SmBwy1neIcvCaUxpUqGv7PLE_KIk.jpg?width=216&crop=smart&auto=webp&s=acaf114540f8b7ada43ff2068bec48b4b546e373 submitted by /u/lex_talionis01
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How to know if your phone has been tapped by hackers or other parties.

https://cdn-images-1.medium.com/max/2600/1*Zz0ztGgICt0z192EqInOWg.jpeg
How can you tell if your phone is hacked? And can you also know who hacked it? Let’s look at the warning signs and what you can do.

Continue reading on Track Media »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Phishing with a malicious macro file

https://cdn-images-1.medium.com/max/1920/1*jjKgQ0aDz-BNe7dF5RaEHw.jpeg
The most difficult aspect of avoiding macro malware infections is correctly detecting phishing emails.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How To Hack A University Database

https://cdn-images-1.medium.com/max/1170/0*6kZaK_CzjPX4rt2e.jpg
AUTOMICHACKERSCREW@GMAIL.COM — -Best Way To Change Your Grades Online.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Keeping ‘Atlanta strong’ in extraordinary times

https://cdn-images-1.medium.com/max/2600/1*KK9pNg791h-gHqk-EB0IBA.png
Since Gary Brantley took on the role of CIO of the City of Atlanta in late 2018, he has battled against the fall-out of one of America’s…

Continue reading on Tech For Good magazine »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
HEROCTF WALKTHROUGH

https://cdn-images-1.medium.com/max/1413/1*Uk2zHVSip4F2lnxUb1fing.png
It’s a write-up of some of the challenges I solved in the heroctf. It’s a good beginner-friendly CTF challenge. It’s helping me to learn…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
Ldsview - Offline search tool for LDAP directory dumps in LDIF format

https://1.bp.blogspot.com/-KsblZpficuY/YIeqPDTSqII/AAAAAAAAV-0/6umMakPVSdgVrYUu_HffpXu4Rk7qQm1QwCNcBGAsYHQ/w640-h338/lsdsisfs.png
Offline search tool for LDAP directory dumps in LDIF format.

Features

* Fast and memory efficient parsing of LDIF files
* Build ldapsearchcommands to extract an LDIF from a directory
* Show directory structure
* UAC and directory time format translation
Config

Config options can be passed as CLI flags, environment variables, or via a config file courtsey of viper. Reference the project's documentation for all of the different ways you can supply configuration.

* By default, ldsviewwill look for a file called .ldsview.{json,toml,yaml}in the user's home directory
* Environment variables with a prefix of LDSVIEWwill be read in by the application

Usage

Detailed usage information is available via the --helpflag or the helpcommand for ldsviewand all subcommands.

Search Syntax

ldsview's search mechanism is based on the entityfilter project. Detailed information about search filter syntax can be found in that project's README.

Examples

* Build ldapsearchcommand to extract LDIF files from a directory: ldsview cmdbuilder
* The command will prompt you for any information needed
* Have the following ready:
* Directory host FQDN or IP
* Domain DN
* User to run as
* User's password
* Quickly find a specific entity in an LDIF file: ldsview -f myfile.ldif entity myuser
* Parse UAC flag from AD: ldsview uac 532480
* Search LDIF file: ldsview -f myfile.ldif search "adminCount:=1,sAMAccountName:!=krbtgt"
* This command will return all entities with an adminCountof 1 that are not krbtgt
* -ican be used to limit which attributes are returned from matching entities
* --tdcwill translate directory timestamps into a human readable format
Tools Directory

Additional tools and utilities for managing LDIFs:

Makefile: Place the Makefile in the same directory as your exported LDIF and run make.

>> make -j9 LDIF=./my.domain.ldif

This will split and create the following default LDIFs:

* users.ldif
* computers.ldif
* groups.ldif
* domain_admin.ldif
* poss_svc_accnts.ldif
* pass_not_reqd.ldif
* pass_cant_change.ldif
* users_dont_expire.ldif
* trusted_4_delegation.ldif
* preauth_not_reqd.ldif
* password_expired.ldif
* trust2auth4delegation.ldif
Download Ldsview

Ldsview - Offline search tool for LDAP directory dumps in LDIF format

Offline search tool for LDAP directory dumps in LDIF format. Features Fast and memory efficient parsing of LDIF files Build ldapsearch commands to extract an LDIF from a directory Show directory structure UAC and directory time format translationConfig Config options can be passed as CLI flags, environment variables, or via a config file courtsey of viper. Reference the project's documentation for all of the different ways you can supply configuration. By default, ldsview will look for a file called .ldsview.{json,toml,yaml} in the user's home directory Environment variables with a prefix of LDSVIEW will be read in by the application Usage Detailed usage information is available via the --help flag or the help command for ldsview and all subcommands. Search Syntax ldsview's search mechanism is based on the entityfilter project. Detailed information about search filter syntax can be found in that project's README. Examples Build ldapsearch command to extract LDIF files from a directory: ldsview cmdbuilder The command will prompt you for any information needed Have the following ready: Directory host FQDN or IP Domain DN User to run as User's password Quickly find a specific entity in an LDIF file: ldsview -f myfile.ldif entity myuser Parse UAC flag from AD: ldsview uac 532480 Search LDIF file: ldsview -f myfile.ldif search "adminCount:=1,sAMAccountName:!=krbtgt" This command will return all entities with an adminCount of 1 that are not krbtgt -i can be used to limit which attributes are returned from matching entities --tdc will translate directory timestamps into a human readable format Tools Directory Additional tools and utilities for managing LDIFs: Makefile: Place the Makefile in the same directory as your exported LDIF and run make. >> make -j9 LDIF=./my.domain.ldif This will split and create the following default LDIFs: users.ldif computers.ldif groups.ldif domain_admin.ldif poss_svc_accnts.ldif pass_not_reqd.ldif pass_cant_change.ldif users_dont_expire.ldif trusted_4_delegation.ldif preauth_not_reqd.ldif password_expired.ldif trust2auth4delegation.ldif Download Ldsview
Read more...