Hacking on Medium
Red Team Part 3 — Red Team Threat Intel | TryHackMe

https://cdn-images-1.medium.com/max/1964/0*kkVojXNl2ecKHvRw.png
Hello world and welcome to HaXeZ, in this post we’re going to be walking through the 3rd Red Team challenge in the Red Team Fundamentals…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Any known case studies on a beacon’s logic executing from within a GPU compute shader?
https://www.reddit.com/r/redteamsec/comments/xdlssd/any_known_case_studies_on_a_beacons_logic/

I’ve been tinkering with writing a chess engine as this fun security engineering project write-up where the vulnerable chess web app uses peer-to-peer and the attacker exploits the victim peer, the pieces start breaking the rules, we use memory forensics to try to analyze and detect the exploitation heuristically via dynamic run-time analysis with baselining… Anyway, I digress. As part of this project I’m thinking a lot about chess engines and wonder: Hmm, I could probably write a chess sim inside a GPU compute shader to calculate a large number of variations in parallel. Then it struck me: If I can do that, couldn’t we write beacons which mostly execute their malicious code within a GPU shader, then pass the I/O in and out of a more benign process? You’d still need to do some stuff on the CPU (any effects on target), but with popular C2 frameworks you have this significant, sort of robust beacon agent code injected in a process to be detected. Sleep masking hides it from memory scanning kinda sorta, but not really against good defensive techniques. Seems like you could hide most of that memory signature inside a GPU compute shader and have much less “robust” code (essentially attack surface for defenders to use for detection) in RAM. Doubt any EDRs out there are scanning VRAM… Even if you did zero processing in a shader, even just hiding data in VRAM when not in-use (example: sleep masking) seems interesting on its own. Maybe someone’s heard of such a thing? Google is terrible with results when “GPU” and “red team” point to non-cyber branding slang. Google Scholar also turned up nothing. submitted by /u/Jonathan-Todd (https://www.reddit.com/user/Jonathan-Todd)
[link] (https://www.reddit.com/r/redteamsec/comments/xdlssd/any_known_case_studies_on_a_beacons_logic/) [comments] (https://www.reddit.com/r/redteamsec/comments/xdlssd/any_known_case_studies_on_a_beacons_logic/)

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Bishop Fox Releases Cloud Enumeration Tool CloudFox

CloudFox is a command-line tool to help penetration testers understand unknown cloud environments.

Dark Reading: Attacks/Breaches
Microsoft Quashes Actively Exploited Zero-Day, Wormable Critical Bugs

In Microsoft's lightest Patch Tuesday update of the year so far, several security vulnerabilities stand out as must-patch, researchers warn.

Dark Reading: Attacks/Breaches
ShadowPad Threat Actors Return With Fresh Government Strikes, Updated Tools

Cyber spies are using legitimate apps for DLL sideloading, deploying an updated range of malware, including the new "Logdatter" info-stealer.

Dark Reading: Attacks/Breaches
Cyberattackers Abuse Facebook Ad Manager in Savvy Credential-Harvesting Campaign

Facebook lead-generation forms are being repurposed to collect passwords and credit card information from unsuspecting Facebook advertisers.

Dark Reading: Attacks/Breaches
U-Haul Customer Contract Search Tool Compromised

Password compromise led to unauthorized access to a customer contract search tool over a five-month window, according to the company.

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Accidentally logged into Capital One using gym’s wifi.

Since it’s not recommended to login to public wifis, should I take action to protect myself?

submitted by /u/IsaPixza
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

how do you bypass carbon black appcontrol?
https://www.reddit.com/r/Pentesting/comments/xdnqh2/how_do_you_bypass_carbon_black_appcontrol/

Title states my question.. just looking for your seasoned wisdom. Thanks in advance! submitted by /u/AccomplishedRush4869 (https://www.reddit.com/user/AccomplishedRush4869)
[link] (https://www.reddit.com/r/Pentesting/comments/xdnqh2/how_do_you_bypass_carbon_black_appcontrol/) [comments] (https://www.reddit.com/r/Pentesting/comments/xdnqh2/how_do_you_bypass_carbon_black_appcontrol/)

___________________________
@hacking_Attack
@Hacking_Video

Hydra
https://www.reddit.com/r/redteamsec/comments/xdogjb/hydra/

<!-- SC_OFF -->So I'm trying to use hydra to brute force a password check. It's for a class on VMs. How can I pull just logins from Active Directory? I've been able to pull users, but it's their legal names and not their logins. Then in Hydra, how do I know what protocol to use? <!-- SC_ON --> submitted by /u/w_sohl (https://www.reddit.com/user/w_sohl)
[link] (https://www.reddit.com/r/redteamsec/comments/xdogjb/hydra/) [comments] (https://www.reddit.com/r/redteamsec/comments/xdogjb/hydra/)

Hacking on Medium
WiFi Hacking

https://cdn-images-1.medium.com/max/797/1*j0QcGWI2yisfxL83SuN-7Q.png
WiFi

Continue reading on Medium »

Dark Reading: Attacks/Breaches
Key Takeaways From the Twitter Whistleblower's Testimony

Twitter did not know what data it had nor who had access to it, Peiter "Mudge" Zatko told Congressional lawmakers during a Senate panel hearing.

hacking: security in practice
How did discord crash gifs work?

There used to exist gifs that, if viewed, crashed the discord client. It seems the bug that allowed this has been patched since then, but I have had trouble finding information on how exactly it worked online.

How exactly did these gifs work?

Thank you!

submitted by /u/Binbasher-03
[link] [comments]

hacking: security in practice
Is learning Burpsuite worth it?

I've been reading articles on Burpsuite and it seems like a pretty good and comprehensive tool.

Is it worth it to take the time and kind of learn it in detail? What kind of actions can you perform with it? Does it exploit vulnerabilities, brute force, or anything like that?

submitted by /u/z0mbiechris
[link] [comments]

hacking: security in practice
Zero-day in WPGateway Wordpress plugin actively exploited in attacks

https://external-preview.redd.it/Tx5GLnB0IiD3yF3EHzK8ENkdTT_puUFnMi8wa2QCujw.jpg?width=640&crop=smart&auto=webp&s=e33d734ca582201613e62b48eecb62dbb83b3011 submitted by /u/Glad_Living3908
[link] [comments]

hacking: security in practice
Twitter whistleblower to Congress: A bad actor can take over any one of your accounts

https://external-preview.redd.it/o6eve-ZWE15Kw5OdWtdf-QIZ-4gLGzVOtVZ41ZR_Zxs.jpg?width=640&crop=smart&auto=webp&s=6f14e88bd779d3dab88c6b6cd85d1ec33b51d95b submitted by /u/lemon_bottle
[link] [comments]

hacking: security in practice
Use SSH tunnel with VNC for VPS inside VM ?

Hey guys,

is it recommended to use VNC as SSH tunnel inside a VM ?

Or is it unlikely to get hacked connecting within my Host Os? ( I mean technically.)

It's a kali linux working machine.

Personally, I feel better If I use SSH/VNC within a VM. But it's uncomfortably slower.

submitted by /u/Giomio27
[link] [comments]