Hacking Articles Tips Tricks Videos Tutorials

Free Course Site
Embedded Linux Step by Step using Beaglebone Black

https://freecoursesite.com/wp-content/uploads/2021/04/545455445.jpg
Learn ARM Linux systems, Embedded Linux building blocks ,Busybox, Beaglebone interfacing Projects and much more What you’ll learn Understanding ROM –Uboot-Kernel boot process on Linux-ARM systems and Testing Kernel, Bootloaders compilations Step-by-Step and testing on Beaglebone Hardware U-Boot, MLO, SPL, explanation and Testing Understanding various sub systems of AM335x SOC such as GPIOs, I2C, MMC, […]

The post Embedded Linux Step by Step using Beaglebone Black appeared first on Free Course Site.

23 views03:33

hacking: security in practice
What do I read to start learning ethical hacking? "I have some programming experience".

hello fellas so, so basically the title, I want to study ethical hacking, I have gathered a lot of books but I have no idea what to read first, for example, I have some programming experience with python, I even developed a simple space invasion game with it before, and some HTML, SQL, CSS experience as well, I'm a bookworm and I can read as many books as u advise me too, so if u have any idea what should I start reading just point me out and thanks in advance

submitted by /u/Skeptical_Karim
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

What do I read to start learning ethical hacking? "I have some...

hello fellas so, so basically the title, I want to study ethical hacking, I have gathered a lot of books but I have no idea what to read first,...

17 viewsedited 05:33

Hacking Articles Tips Tricks Videos Tutorials

14 views05:33

Hacking Articles Tips Tricks Videos Tutorials

Photo

hacking: security in practice
Rsocks proxies are available for Only 5$ a Month!

https://rsocks.net/?ref=U9f55DFIE-asn4pX_DTBu4TRoIHzE0bnj-uzba

Any use case and guaranteed high speed proxy servers for your needs.

submitted by /u/liftedup_nsfw
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Rsocks proxies are available for Only 5$ a Month!

[https://rsocks.net/?ref=U9f55DFIE-asn4pX\_DTBu4TRoIHzE0bnj-uzba](https://rsocks.net/?ref=U9f55DFIE-asn4pX_DTBu4TRoIHzE0bnj-uzba) Any use case...

13 viewsedited 05:33

Hacking Articles Tips Tricks Videos Tutorials

14 views06:21

Hacking Articles Tips Tricks Videos Tutorials

Photo

Hacking on Medium
Data Privacy: A Big Modern Day Concern

https://cdn-images-1.medium.com/max/1140/0*M-sL7VnYGG8kH83G.jpeg
In this era of digitalisation, growth in technology has overwritten many of the standard and historical ways to manage data.

Continue reading on CSI Decrypt »

___________________________
@hacking_Attack
@Hacking_Video

Medium

Data Privacy: A Big Modern Day Concern

In this era of digitalisation, growth in technology has overwritten many of the standard and historical ways to manage data.

16 viewsedited 06:21

Hacking Articles Tips Tricks Videos Tutorials

13 views06:53

Hacking Articles Tips Tricks Videos Tutorials

Photo

Black Hat Ethical Hacking
Apple Patches Zero-Day MacOS Bug That Can Bypass Anti-Malware Defenses

https://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Apple Patches Zero-Day MacOS Bug That Can Bypass Anti-Malware DefensesPost Views: 22
Reading Time: 1 Minute

Apple patched a zero-day vulnerability in its MacOS that can bypass critical anti-malware capabilities and which a variant of the notorious Mac threat Shlayer adware dropper already has been exploiting for several months.
Security researcher Cedric Owens first discovered the vulnerability, tracked as CVE-2021–30657 and patched in macOS 11.3, an update dropped by Apple on Monday. The vulnerability is particularly perilous to macOS users because it allows an attacker to very easily craft a macOS payload that goes unchecked by the strict security features built into the OS specifically to keep malware out.

“This bug trivially bypasses many core Apple security mechanisms, leaving Mac users at grave risk,” warned Patrick Wardle, an Apple security expert who runs the Objective-See Mac security tool site, in a blog post Monday. Owens asked Wardle to do a deeper technical dive of the bug after his initial analysis and report on it.

Owens said he tested his exploit for the bug successfully on macOS Catalina 10.15–specifically on 10.15.7–and on versions of macOS Big Sur before Big Sur 11.3, submitting a report to Apple about the vulnerability on March 25.

“This payload can be used in phishing and all the victim has to do is double-click to open the .dmg and double-click the fake app inside of the .dmg–no pop ups or warnings from macOS are generated,” Owens wrote in a post on his Medium blog Monday.
See Also: Nvidia Warns: Severe Security Bugs in GPU Driver, vGPU Software Vulnerability Deep DiveWardle’s report takes an extensive technical look at the bug, finding that CVE-2021–30657 could bypass three key anti-malware detections present in macOS—File Quarantine, Gatekeeper and Notarization, he wrote in his post.

Apple has always considered itself a stickler for security with a focus on locking down its proprietary hardware products against malware–which makes the existence of this particular zero-day bug somewhat ironic. The three features that the flaw could bypass actually show a steady progression of macOS security, with the company reinforcing each feature to make the OS inherently less penetrable, Wardle explained.

File Quarantine, was introduced in OSX Leopard (10.5) in 2007, provides the first warning to the user that requires explicit confirmation before allowing a newly downloaded file to execute, he wrote. However, since users kept ignoring the warning and letting malware pass through, Apple introduced Gatekeeper in OSX Lion (10.7) as a feature built atop File Quarantine. Gatekeeper checks the code-signing information of downloaded items, blocking those that do not adhere to system policies, Wardle said.

Notarization is the newest security feature of the three, introduced in macOS Catalina (10.15) and aimed at once again preventing users from sabotaging themselves. The feature introduced Application Notarization to ensure that Apple has scanned and approved all software before it is allowed to run, according to the post.

By being able to bypass all of them, the zero-day bug, then, provides a triple threat that basically gives malware a free pass into the system. How the bug does this is by setting into motion a logic bug in macOS’ underlying code so that it mischaracterizes certain application bundles and skipps the usual security checks, Wardle explained.

The key to how the bug works lies in the way macOS apps iden[...]

___________________________
@hacking_Attack
@Hacking_Video

15 viewsedited 06:53

Hacking Articles Tips Tricks Videos Tutorials

Black Hat Ethical Hacking Apple Patches Zero-Day MacOS Bug That Can Bypass Anti-Malware Defenses https://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Apple Patches Zero-Day MacOS Bug That Can Bypass Anti-Malware…

tify files, which is not as single entities but instead as bundles of different files. These bundles include a list of properties that tell the app where specific files it needs to use are located.
See Also: Offensive Security Tool: ADFSBrute
By taking out the property file and creating a bundle in a certain way, threat actors can exploit the flaw to be misrecognized by the OS and thus pass through the security checks, Wardle said in his post.

“Any script-based application that does not contain an Info.plist file will be misclassified as ‘not a bundle’ and thus will be allowed to execute with no alerts nor prompts,” he wrote. Exploitation in the WildOnce he identified how the bug works, Wardle asked researchers from Mac security company Jamf to see if anyone had already exploited it in the wild. Turns out, a variant of malware already quite familiar to Mac users has been abusing the vulnerability since at least Jan. 9., according to a post Monday on the Jamf Blog.

“The Jamf Protect detections team observed this exploit being used in the wild by a variant of the Shlayer adware dropper,” according to the post by Jamf detections lead Jaron Bradley, who added that it is nearly identical to a malware sample previously identified by Intego Security.

The major difference, however, is that the variant has been repackaged to use a format necessary for carrying out the MacOS Gatekeeper bypass vulnerability, he explained, going into detail about how the attacker abused the flaw. See Also: Hacking Stories: Xbox UndergroundShlayer and the macOS already have quite a history, as the stealthy adware is known as the No. 1 threat to Macs. Indeed, Shlayer was found slipping through the Notarization feature as recently last August disguised as Adobe Flash Player updates, something Wardle co-discovered with researcher Peter Dantini at the time.

Understandably, Apple and all the security researchers who took a look at the zero-day vulnerability are advising that macOS users update their systems immediately to avoid falling victim to any existing exploits for it.
Source: threatpost.com (Click Link)Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/nvidia-90x90.jpg Nvidia Warns: Severe Security Bugs in GPU Driver, vGPU Software24 hours ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/Telegram_Messagees-90x90.jpg Telegram Platform Abused in ‘ToxicEye’ Malware Campaigns2 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/Untitled-design-1-4-90x90.png Mount Locker Ransomware Aggressively Changes Up Tactics5 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/Untitled-design-11-90x90.png Pulse Secure Critical Zero-Day Security Bug Under Active Exploit6 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/firefox_patch-90x90.jpg Mozilla Fixes Firefox Flaw That Allowed Spoofing of HTTPS Browser Padlock7 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/Discord-Nitro-e1618858537976-90x90.png NitroRansomware Asks for Discord Gift Codes, Steals Access Tokens1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/Untitled-design-10-90x90.png WordPress could treat Google FloC as a security issue1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/Crypto_Mining_Bitcoin-90x90.jpg Attackers Target ProxyLogon Exploit to Install Cryptojacker2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/patchtues1-90x90.jpg Microsoft to Patch multiple Zero-Days, 110 vulnerabilities in total2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/Google-Chrome-Browser-90x90.jpg Chrome Zero-Day Exploit Posted on Twitter2 weeks ago
The post Apple Patches Zero-Day MacOS Bug That Can Bypass Anti-Malware [...]

___________________________
@hacking_Attack
@Hacking_Video

13 viewsedited 06:53

Hacking Articles Tips Tricks Videos Tutorials

Defenses first appeared on Black Hat Ethical Hacking.

___________________________
@hacking_Attack
@Hacking_Video

13 viewsedited 06:53

Hacking Articles Tips Tricks Videos Tutorials

A tale of Html to Pdf converter ssrf and various bypasses

Hey hackers,Continue reading on Medium »
Read more...

15 views07:14

About

Blog

Apps

Platform