Hacking Articles Tips Tricks Videos Tutorials
468 subscribers
65.8K photos
15 videos
157 files
132K links
Exploit
Pentesting
Hacking
Red Team
Blue Team
Kali Linux
Bug Bounty
Black Hat
Cyber security etc

@Hacking_Video
@Hacking_attack
Download Telegram
Forwarded from Torrent Leaks
Free Course Site
Embedded Linux Step by Step using Beaglebone Black

https://freecoursesite.com/wp-content/uploads/2021/04/545455445.jpg
Learn ARM Linux systems, Embedded Linux building blocks ,Busybox, Beaglebone interfacing Projects and much more What you’ll learn Understanding ROM –Uboot-Kernel boot process on Linux-ARM systems and Testing Kernel, Bootloaders compilations Step-by-Step and testing on Beaglebone Hardware U-Boot, MLO, SPL, explanation and Testing Understanding various sub systems of AM335x SOC such as GPIOs, I2C, MMC, […]

The post Embedded Linux Step by Step using Beaglebone Black appeared first on Free Course Site.
hacking: security in practice
What do I read to start learning ethical hacking? "I have some programming experience".

hello fellas so, so basically the title, I want to study ethical hacking, I have gathered a lot of books but I have no idea what to read first, for example, I have some programming experience with python, I even developed a simple space invasion game with it before, and some HTML, SQL, CSS experience as well, I'm a bookworm and I can read as many books as u advise me too, so if u have any idea what should I start reading just point me out and thanks in advance

submitted by /u/Skeptical_Karim
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video
Hacking Articles Tips Tricks Videos Tutorials
Photo
Black Hat Ethical Hacking
Apple Patches Zero-Day MacOS Bug That Can Bypass Anti-Malware Defenses

https://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Apple Patches Zero-Day MacOS Bug That Can Bypass Anti-Malware DefensesPost Views: 22
Reading Time: 1 Minute

Apple patched a zero-day vulnerability in its MacOS that can bypass critical anti-malware capabilities and which a variant of the notorious Mac threat Shlayer adware dropper already has been exploiting for several months.
Security researcher Cedric Owens first discovered the vulnerability, tracked as CVE-2021–30657 and patched in macOS 11.3, an update dropped by Apple on Monday. The vulnerability is particularly perilous to macOS users because it allows an attacker to very easily craft a macOS payload that goes unchecked by the strict security features built into the OS specifically to keep malware out.

“This bug trivially bypasses many core Apple security mechanisms, leaving Mac users at grave risk,” warned Patrick Wardle, an Apple security expert who runs the Objective-See Mac security tool site, in a blog post Monday. Owens asked Wardle to do a deeper technical dive of the bug after his initial analysis and report on it.

Owens said he tested his exploit for the bug successfully on macOS Catalina 10.15–specifically on 10.15.7–and on versions of macOS Big Sur before Big Sur 11.3, submitting a report to Apple about the vulnerability on March 25.

“This payload can be used in phishing and all the victim has to do is double-click to open the .dmg and double-click the fake app inside of the .dmg–no pop ups or warnings from macOS are generated,” Owens wrote in a post on his Medium blog Monday.
See Also: Nvidia Warns: Severe Security Bugs in GPU Driver, vGPU Software Vulnerability Deep DiveWardle’s report takes an extensive technical look at the bug, finding that CVE-2021–30657 could bypass three key anti-malware detections present in macOS—File Quarantine, Gatekeeper and Notarization, he wrote in his post.

Apple has always considered itself a stickler for security with a focus on locking down its proprietary hardware products against malware–which makes the existence of this particular zero-day bug somewhat ironic. The three features that the flaw could bypass actually show a steady progression of macOS security, with the company reinforcing each feature to make the OS inherently less penetrable, Wardle explained.

File Quarantine, was introduced in OSX Leopard (10.5) in 2007, provides the first warning to the user that requires explicit confirmation before allowing a newly downloaded file to execute, he wrote. However, since users kept ignoring the warning and letting malware pass through, Apple introduced Gatekeeper in OSX Lion (10.7) as a feature built atop File Quarantine. Gatekeeper checks the code-signing information of downloaded items, blocking those that do not adhere to system policies, Wardle said.

Notarization is the newest security feature of the three, introduced in macOS Catalina (10.15) and aimed at once again preventing users from sabotaging themselves. The feature introduced Application Notarization to ensure that Apple has scanned and approved all software before it is allowed to run, according to the post.

By being able to bypass all of them, the zero-day bug, then, provides a triple threat that basically gives malware a free pass into the system. How the bug does this is by setting into motion a logic bug in macOS’ underlying code so that it mischaracterizes certain application bundles and skipps the usual security checks, Wardle explained.

The key to how the bug works lies in the way macOS apps iden[...]

___________________________
@hacking_Attack
@Hacking_Video