1. Infosec Institute  — Cybersecurity awareness.
2. Black Hat — Technical cybersecurity conferences.
3. Bugcrowd  — Bug bounty methodology…Continue reading on Medium » (https://medium.com/@rajeevranjancom/best-26-cybersecurity-youtube-channels-8a1d643ac484?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

WinAPI and P/Invoke in C#
https://www.reddit.com/r/redteamsec/comments/x27gmy/winapi_and_pinvoke_in_c/

Covers how you can use WinAPI in C# for red team tooling. https://crypt0ace.github.io/posts/WinAPI-and-PInvoke-in-CSharp/ submitted by /u/Potential_Waltz7400 (https://www.reddit.com/user/Potential_Waltz7400)
[link] (https://www.reddit.com/r/redteamsec/comments/x27gmy/winapi_and_pinvoke_in_c/) [comments] (https://www.reddit.com/r/redteamsec/comments/x27gmy/winapi_and_pinvoke_in_c/)

___________________________
@hacking_Attack
@Hacking_Video

Google Launches New Open Source Bug Bounty to Tackle Supply Chain Attacks
https://www.reddit.com/r/redteamsec/comments/x284av/google_launches_new_open_source_bug_bounty_to/

submitted by /u/anusec (https://www.reddit.com/user/anusec)
[link] (https://thehackernews.com/2022/08/google-launches-new-open-source-bug.html) [comments] (https://www.reddit.com/r/redteamsec/comments/x284av/google_launches_new_open_source_bug_bounty_to/)

___________________________
@hacking_Attack
@Hacking_Video

Black Hat Ethical Hacking
Malware campaign relies on spaces images from James Webb telescope

Malware campaign relies on spaces images from James Webb telescopePost Views: 2 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/08/Patreon-1.png Subscribe to Patreon to watch this episode.
Reading Time: 3 Minutes Threat analysts have spotted a new malware campaign dubbed ‘GO#WEBBFUSCATOR’ that relies on phishing emails, malicious documents, and space images from the James Webb telescope to spread malware.The malware is written in Golang, a programming language that is gaining popularity among cybercriminals because it is cross-platform (Windows, Linux, Mac) and offers increased resistance to reverse engineering and analysis.

In the recent campaign discovered by researchers at Securonix, the threat actor drops payloads that are currently not marked as malicious by antivirus engines on the VirusTotal scanning platform.
See Also: So you want to be a hacker? Complete Offensive Security and Ethical Hacking Course Infection chainThe infection starts with a phishing email with an attached malicious document, “Geos-Rates.docx”, which downloads a template file.

That file contains an obfuscated VBS macro that auto-executes if macros are enabled in the Office suite. The code then downloads a JPG image (“OxB36F8GEEC634.jpg”) from a remote resource (“xmlschemeformat[.]com”), decodes it into an executable (“msdllupdate.exe”) using certutil.exe, and launches it.
https://www.bleepstatic.com/images/news/u/1220909/Code%20and%20Details/vbs.jpg
Malware functionsBased on what could be deduced via dynamic malware analysis, the executable achieves persistence by copying itself to ‘%%localappdata%%\microsoft\vault\’ and adding a new registry key.

Upon execution, the malware establishes a DNS connection to the command and control (C2) server and sends encrypted queries.

“The encrypted messages are read in and unencrypted on the C2 server, thus revealing its original contents,” explains Securonix in the report.
In the case with GO#WEBBFUSCATOR, communication with the C2 server is implemented using `TXT-DNS` requests using `nslookup` requests to the attacker-controlled name server. All information is encoded using Base64.
The C2 may respond to the malware by setting time intervals between connection requests, changing the nslookup timeout, or sending out commands to execute through the Windows cmd.exe tool.

During testing, Securonix observed the threat actors running arbitrary enumeration commands on its test systems, a standard first reconnaissance step.

The researchers note that the domains used for the campaign were registered recently, the oldest one on May 29, 2022.

Securonix has provided a set of indicators of compromise (IoCs) that includes both network and host-based indicat[...]

___________________________
@hacking_Attack
@Hacking_Video

ors.
Trending: WordPress sites hacked with fake Cloudflare DDoS alerts pushing malware
Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?

If you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com
Source: bleepingcomputer.com Source Link https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Merch.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/08/Images-for-the-News-posts-5-1-300x150.png Windows malware delays coinminer install by a month to evade detectionAugust 30, 2022
Reading Time: 4 minutes

* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/08/Images-for-the-News-posts-2-2-300x150.png Critical command injection vulnerability discovered in Bitbucket Server and Data CenterAugust 29, 2022
Reading Time: 2 minutes

* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/08/Images-for-the-News-posts-1-4-300x150.png Twilio hackers hit over 130 orgs in massive Okta phishing attackAugust 26, 2022
Reading Time: 5 minutes

* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/08/Images-for-the-News-posts-8-300x150.png Hackers use AiTM attack to monitor Microsoft 365 accounts for BEC scamsAugust 25, 2022
Reading Time: 4 minutes
https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/OffSec-Course.png Offensive Security & Ethical Hacking CourseBegin the learning curve of hacking now!
The post Malware campaign relies on spaces images from James Webb telescope first appeared on Black Hat Ethical Hacking.

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Hackers hide malware in James Webb telescope images

https://external-preview.redd.it/ji2YQnl89r1zuCkg91AobfCSvSBuwOUdGoT4wZGlV-E.jpg?width=640&crop=smart&auto=webp&s=4b32ee9e4f8f50974064580973f1fb3dfa57ff34 submitted by /u/Seytonic
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How to check if I have monitor mode and packet injection enabled on my pc? (windows)

I have a windows btw (I'm sorry if this is a stupid question. I tried searching it on Google but couldn't find anything I can understand).

submitted by /u/_-psyduck-_
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Crypto Scams Declined But Hacking Attacks Are Growing In 2022

https://cdn-images-1.medium.com/max/1200/1*Y1YIJdQ8Y1N0NeSv94T8KA.jpeg
Disclaimer: No part of this blog should be considered financial advice. The blog aims at educating people on the topic. You should conduct…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How To Become a Hacker?

https://cdn-images-1.medium.com/max/2600/1*KrTYs02xluKTJsr-4tqAZQ.jpeg
Hacking refers to activities that seek to compromise digital devices, such as computers, smartphones, tablets and networks.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
What does a MALWARE ANALYST do?

https://cdn-images-1.medium.com/max/1080/1*BBx8PY5qB747rVQzSAypfQ.png
Are you interested in Ransomware, Trojans and Bots? Do you want to know how Malware operates? Then you should become a Malware Analyst!

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
RPCMon : RPC Monitor Tool Based On Event Tracing For Windows

RPCMon can help researchers to get a high level view over an RPC communication between processes. It was built like Procmon for easy usage, and uses James Forshaw .NET library for RPC. RPCMon can show you the RPC functions being called, the process who called them, and other relevant information.
RPCMon uses a hardcoded RPC dictionary for fast RPC information processing which contains information about RPC modules. It also has an option to build an RPC database so it will be updated from your computer in case some details are missing in the hardcoded RPC dictionary.

Usage

Double click the EXE binary and you will get the GUI Windows.
RPCMon needs a DB to be able to get the details on the RPC functions, without a DB you will have missing information.
To load the DB, press on DB -> Load DB...and choose your DB. You can a DB we added to this project: /DB/RPC_UUID_Map_Windows10_1909_18363.1977.rpcdb.json.

Features

* A detailed overview of RPC functions activity.
* Build an RPC database to parse RPC modules or use hardcoded database.
* Filter\highlight rows based on cells.
* Bold specific rows.
Download

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Concealed_Code_Execution : Tools And Technical Write-Ups Describing Attacking Techniques

Concealed_Code_Execution is a set of tools and technical write-ups describing attacking techniques that rely on concealing code execution on Windows. Here you will find explanations of how these techniques work, receive advice on detection, and get sample source code for testing your detection coverage.

Content

This repository covers two classes of attacking techniques that extensively use internal Windows mechanisms plus provides suggestions and tools for detecting them:

* Process Tampering – a set of techniques that conceal the code on the scale of an entire process.
* Code Injection – a collection of tricks that allow executing code as part of other processes without interfering with their functionality.
* Detection – a compilation of recommendations for defending against various techniques for concealing code execution.

The core values of the project:

* The systematic approach. This repository includes more than just a collection of tools or links to external resources. Each subject receives a detailed explanation of the underlying concepts; each specific case gets classified into generic categories.
* Proof-of-concept tooling. The write-ups are accompanied by example projects in C that demonstrate the use of the described facilities in practice.
* Beginner to professional. You don’t need to be a cybersecurity expert to understand the concepts we describe. Yet, even professionals in the corresponding domain should find the content valuable and educational because of the attention to detail and pitfalls.

Implementation

One final distinctive feature of this project is the extensive use of Native API throughout the samples. Here is the motivation for this choice:

* Functionality. Some operations required for the most advanced techniques (such as Process Tampering) are not exposed via other APIs.
* Control. Being the lowest level of interaction with the operating system, it provides the most control over its behavior. The Win32 API is implemented on top of Native API, so whatever is possible to achieve with the former is also possible with the latter.
* Availability. Being exposed by ntdll.dll, Native API is available in all processes, including the system ones.
* Consistency. The interfaces exposed by this API are remarkably consistent. After learning the fundamental design choices, it becomes possible to correctly predict the majority of function prototypes just from the API’s name.
* Resistance to hooking. It is substantially easier to remove or bypass user-mode hooks when using Native API, partially blinding security software. There are no lower-level libraries that might be patched, so unhooking becomes as simple as loading a second instance of ntdll.dll and redirecting the calls there.

Compiling Remarks

The sample code uses the Native API headers provided by the PHNT project. Make sure to clone the repository using the git clone --recurse-submodulescommand to fetch this dependency. Alternatively, you can use git submodule update --initafter cloning the repository.

To build the projects included with the repository, you will need a recent version of Windows SDK. If you use Visual Studio, please refer to the built-in SDK installation. Alternatively, you can also use the standalone build environment of EWDK. To compile all tools at once, use MSBuild AllTools.sln /t:build /p:configuration=Release /p:platform=x64.
Download

___________________________
@hacking_Attack
@Hacking_Video

Awesome-Password-Cracking - A Curated List Of Awesome Tools, Research, Papers And Other Projects Related To Password Cracking And Password Security
http://www.kitploit.com/2022/08/awesome-password-cracking-curated-list.html

___________________________
@hacking_Attack
@Hacking_Video