Hacking on Medium
Data Privacy: A Big Modern Day Concern

https://cdn-images-1.medium.com/max/1140/0*M-sL7VnYGG8kH83G.jpeg
In this era of digitalisation, growth in technology has overwritten many of the standard and historical ways to manage data.

Continue reading on CSI Decrypt »

___________________________
@hacking_Attack
@Hacking_Video

Black Hat Ethical Hacking
Apple Patches Zero-Day MacOS Bug That Can Bypass Anti-Malware Defenses

https://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Apple Patches Zero-Day MacOS Bug That Can Bypass Anti-Malware DefensesPost Views: 22
Reading Time: 1 Minute

Apple patched a zero-day vulnerability in its MacOS that can bypass critical anti-malware capabilities and which a variant of the notorious Mac threat Shlayer adware dropper already has been exploiting for several months.
Security researcher Cedric Owens first discovered the vulnerability, tracked as CVE-2021–30657 and patched in macOS 11.3, an update dropped by Apple on Monday. The vulnerability is particularly perilous to macOS users because it allows an attacker to very easily craft a macOS payload that goes unchecked by the strict security features built into the OS specifically to keep malware out.

“This bug trivially bypasses many core Apple security mechanisms, leaving Mac users at grave risk,” warned Patrick Wardle, an Apple security expert who runs the Objective-See Mac security tool site, in a blog post Monday. Owens asked Wardle to do a deeper technical dive of the bug after his initial analysis and report on it.

Owens said he tested his exploit for the bug successfully on macOS Catalina 10.15–specifically on 10.15.7–and on versions of macOS Big Sur before Big Sur 11.3, submitting a report to Apple about the vulnerability on March 25.

“This payload can be used in phishing and all the victim has to do is double-click to open the .dmg and double-click the fake app inside of the .dmg–no pop ups or warnings from macOS are generated,” Owens wrote in a post on his Medium blog Monday.
See Also: Nvidia Warns: Severe Security Bugs in GPU Driver, vGPU Software Vulnerability Deep DiveWardle’s report takes an extensive technical look at the bug, finding that CVE-2021–30657 could bypass three key anti-malware detections present in macOS—File Quarantine, Gatekeeper and Notarization, he wrote in his post.

Apple has always considered itself a stickler for security with a focus on locking down its proprietary hardware products against malware–which makes the existence of this particular zero-day bug somewhat ironic. The three features that the flaw could bypass actually show a steady progression of macOS security, with the company reinforcing each feature to make the OS inherently less penetrable, Wardle explained.

File Quarantine, was introduced in OSX Leopard (10.5) in 2007, provides the first warning to the user that requires explicit confirmation before allowing a newly downloaded file to execute, he wrote. However, since users kept ignoring the warning and letting malware pass through, Apple introduced Gatekeeper in OSX Lion (10.7) as a feature built atop File Quarantine. Gatekeeper checks the code-signing information of downloaded items, blocking those that do not adhere to system policies, Wardle said.

Notarization is the newest security feature of the three, introduced in macOS Catalina (10.15) and aimed at once again preventing users from sabotaging themselves. The feature introduced Application Notarization to ensure that Apple has scanned and approved all software before it is allowed to run, according to the post.

By being able to bypass all of them, the zero-day bug, then, provides a triple threat that basically gives malware a free pass into the system. How the bug does this is by setting into motion a logic bug in macOS’ underlying code so that it mischaracterizes certain application bundles and skipps the usual security checks, Wardle explained.

The key to how the bug works lies in the way macOS apps iden[...]

___________________________
@hacking_Attack
@Hacking_Video

tify files, which is not as single entities but instead as bundles of different files. These bundles include a list of properties that tell the app where specific files it needs to use are located.
See Also: Offensive Security Tool: ADFSBrute
By taking out the property file and creating a bundle in a certain way, threat actors can exploit the flaw to be misrecognized by the OS and thus pass through the security checks, Wardle said in his post.

“Any script-based application that does not contain an Info.plist file will be misclassified as ‘not a bundle’ and thus will be allowed to execute with no alerts nor prompts,” he wrote. Exploitation in the WildOnce he identified how the bug works, Wardle asked researchers from Mac security company Jamf to see if anyone had already exploited it in the wild. Turns out, a variant of malware already quite familiar to Mac users has been abusing the vulnerability since at least Jan. 9., according to a post Monday on the Jamf Blog.

“The Jamf Protect detections team observed this exploit being used in the wild by a variant of the Shlayer adware dropper,” according to the post by Jamf detections lead Jaron Bradley, who added that it is nearly identical to a malware sample previously identified by Intego Security.

The major difference, however, is that the variant has been repackaged to use a format necessary for carrying out the MacOS Gatekeeper bypass vulnerability, he explained, going into detail about how the attacker abused the flaw. See Also: Hacking Stories: Xbox UndergroundShlayer and the macOS already have quite a history, as the stealthy adware is known as the No. 1 threat to Macs. Indeed, Shlayer was found slipping through the Notarization feature as recently last August disguised as Adobe Flash Player updates, something Wardle co-discovered with researcher Peter Dantini at the time.

Understandably, Apple and all the security researchers who took a look at the zero-day vulnerability are advising that macOS users update their systems immediately to avoid falling victim to any existing exploits for it.
Source: threatpost.com (Click Link)Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/nvidia-90x90.jpg Nvidia Warns: Severe Security Bugs in GPU Driver, vGPU Software24 hours ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/Telegram_Messagees-90x90.jpg Telegram Platform Abused in ‘ToxicEye’ Malware Campaigns2 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/Untitled-design-1-4-90x90.png Mount Locker Ransomware Aggressively Changes Up Tactics5 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/Untitled-design-11-90x90.png Pulse Secure Critical Zero-Day Security Bug Under Active Exploit6 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/firefox_patch-90x90.jpg Mozilla Fixes Firefox Flaw That Allowed Spoofing of HTTPS Browser Padlock7 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/Discord-Nitro-e1618858537976-90x90.png NitroRansomware Asks for Discord Gift Codes, Steals Access Tokens1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/Untitled-design-10-90x90.png WordPress could treat Google FloC as a security issue1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/Crypto_Mining_Bitcoin-90x90.jpg Attackers Target ProxyLogon Exploit to Install Cryptojacker2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/patchtues1-90x90.jpg Microsoft to Patch multiple Zero-Days, 110 vulnerabilities in total2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/Google-Chrome-Browser-90x90.jpg Chrome Zero-Day Exploit Posted on Twitter2 weeks ago
The post Apple Patches Zero-Day MacOS Bug That Can Bypass Anti-Malware [...]

___________________________
@hacking_Attack
@Hacking_Video

Defenses first appeared on Black Hat Ethical Hacking.

___________________________
@hacking_Attack
@Hacking_Video

A tale of Html to Pdf converter ssrf and various bypasses

Hey hackers,Continue reading on Medium »
Read more...

How did I earn €€€€ by breaking the back-end logic of the server

Hello bug hunters! I am back with another blog. I found these cool bugs in one of the private programs at intigriti. So will not disclose…Continue reading on Medium »
Read more...

Course Club
[O’REILLY] Cloud Computing with Python Video Course

https://courseclub.me/wp-content/uploads/2021/04/784515412.jpg

https://courseclub.me/wp-content/uploads/2021/04/784515412.jpg
Get started with Cloud Computing in Python. Topics include: Multi-Cloud, Cloud Computing Service Models, Distributed Computing in the Cloud, Cloud Computing ETL Pipelines, Serverless Soutions with the Cloud, Containers in the Cloud, and Continuous Delivery for ML Engineers
Table of contents

1. “Multi Cloud Onboarding With Cloud Computing”
2. “Cloud Computing Service Models”
3. “Distributed Computing In The Cloud”
4. “Cloud Computing Build Etl Pipelines”
5. “Build Serverless Solutions With Cloud Computing”
6. “Containers In The Cloud”
7. “Continuous Delivery For Ml Engineering”
8.

Size: 2.94 GB

Download Now

https://www.oreilly.com/library/view/cloud-computing-with/60650VIDEOPAIML/.

The post [O’REILLY] Cloud Computing with Python Video Course appeared first on Course Club.

Hacking Articles
Wireshark for Pentester: Password Sniffing

Many people wonder if Wireshark can capture passwords. The answer is undoubtedly yes! Wireshark can capture not only passwords, but any type of data passing through a network – usernames, email addresses, personal information, pictures, videos, or anything else. Wireshark can sniff the passwords passing through as long as we

The post Wireshark for Pentester: Password Sniffing appeared first on Hacking Articles.

___________________________
@hacking_Attack
@Hacking_Video

Hacking Articles|Raj Chandel's Blog
Wireshark for Pentester: Password Sniffing

Many people wonder if Wireshark can capture passwords. The answer is undoubtedly yes! Wireshark can capture not only passwords, but any type of data passing through a network – usernames, email addresses, personal information, pictures, videos, or anything else. Wireshark can sniff the passwords passing through as long as we can capture network traffic. But the question is, what kind of passwords are they? Or, more precisely, which network protocols' passwords can we obtain? That is the subject of this article.

Table of contents

· Plain text network protocols Disclaimer: To protect client data, all screenshots have been censored and/or modified.Dissect HTTPS Packet Captures___________________________
@hacking_Attack
@Hacking_Video

7.png Don’t worry we have already provided the key along with the PCAP file.Edit > Preference > Protocol > TLSIP address: 127.0.0.1Hurray!!! As you can see, we have Successfully decrypted the Data over the TLS.___________________________
@hacking_Attack
@Hacking_Video

4. SMTP uses Base 64 encoding for the transaction to encode the username and password.___________________________
@hacking_Attack
@Hacking_Video

but it can also be set to allow it. In such cases, a well-positioned attacker could intercept network traffic and obtain the username and password.___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
What goes into the effectiveness of a brute force password crack (not sure if I said it right. Might be called a dictionary crack or something)?

We all know how insane the list gets if literally put in every common symbol, number, abc and ABC. And the fact that you can't really just ignore one of these because sites force you to use them makes these kinds of hacks hard.

So I'm curious, is there any way to make this effective in 2021? What goes into it? Does internet speed matter? Is it the CPU that matters? Stuff like that

submitted by /u/CreatureWarrior
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Change mac address

Hi guys

I think I am soft banned by uber eats. I cannot use promotions anymore. I tried vpn on my phone etc but it does not work.

Then someone told me it is because of my “mac adress” of my phone. So if I change that, will the “soft ban” of uber eats be over? If so, does someone know how to change / spoof / fake my mac adress on my iphone? Or maybe on my Macbook (as I can use ubereats via chrome or download an android emulator and run ubereats on mac).

Thanks a lot guys, help a poor student 💀

submitted by /u/a_boy_456
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Modded-Ubuntu : Run Ubuntu GUI On Your Termux With Much Features

Modded-Ubuntu is a tool used to run ubuntu GUI on your termux with much features. Features Fixed Audio Output Lightweight {Requires at least 4GB Storage} Katoolin3 tool for installing kali tools 2 Browsers (Chromium & Mozilla Firefox) Supports Bangla Fonts VLC Media Player Visual Studio Code Easy for Beginners Installation First Clone the Repository & […]

The post Modded-Ubuntu : Run Ubuntu GUI On Your Termux With Much Features appeared first on Kali Linux Tutorials.

___________________________
@hacking_Attack
@Hacking_Video

Write Up critical Vulnerability Kominfo

Halo Hunters udah lama nih ga update tulisan lagi yah karena ada beberapa pekerjaan dan ujian sekolah jadi ga sempet nih buat tulisan lagi…Continue reading on Medium »
Read more...