_____ ____ ____ _
/ ___// __ \____ ____ ___ / __ \(_)_____________ _ _____ _____
\__ \/ / / / __ \/ __ `__ \/ / / / / ___/ ___/ __ \ | / / _ \/ ___/
___/ / /_/ / /_/ / / / / / / /_/ / (__ ) /__/ /_/ / |/ / __/ /
/____/_____/\____/_/ /_/ /_/_____/_/____/\___/\____/|___/\___/_/

A easy-to-use python tool to perform dns recon (https://www.kitploit.com/search/label/Recon) with multiple optionsInstallation:It can be installed in any OS with python3Manual installationgit clone https://github.com/D3Ext/SDomDiscover
cd SDomDiscover
pip3 install -r requirements.txtOne-linergit clone https://github.com/D3Ext/SDomDiscover && cd SDomDiscover && pip3 install -r requirements.txt && python3 SDomDiscover.pyUsage:Common usagesTo see the help panel and other parameterspython3 SDomDiscover.py -hMain usage of the tool to dump the valid (https://www.kitploit.com/search/label/Valid) domains in the SSL certificatepython3 SDomDiscover.py -d example.comUsed to perform all the queries and recognizementpython3 SDomDiscover.py -d domain.com --all

Download SDomDiscover (https://github.com/D3Ext/SDomDiscover)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
What Is Hacking

INTRODUCTION

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
CTF新手村（一）PWN基礎知識

https://cdn-images-1.medium.com/max/1608/1*r3mYVeEQH10qulyXewxboA.png
開始之前

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
What Is the Raspberry Pi

https://cdn-images-1.medium.com/max/720/1*f2K_PxmNZogU151vMuLa5Q.jpeg
The Raspberry Pi is a computer. A very small computer. It is roughly the size of a credit card. Don’t be fooled by its size; as we know…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Learning Cybersecurity

https://cdn-images-1.medium.com/max/600/0*Hkmi3n8UpXm9F4lj.png
I found an article written by PenguinScratcher on their plan to learn cybersecurity that I wanted to do a deep dive on.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
SDomDiscover : A Easy-To-Use Python Tool To Perform DNS Recon

SDomDiscover a easy-to-use python tool to perform dns recon, subdomain enumeration and much more

The purpouse of this tool is helping bug haunters and pentesters during reconnaissance

If you want to know more about the tool you can read my own post in my blog (written in spanish)

Installation

It can be used in any system with python3

You can easily install AORT using pip:

pip3 install aort

If you want to install it from source:

git clone https://github.com/D3Ext/AORT
cd AORT
pip3 install -r requirements.txt

One-liner

git clone https://github.com/D3Ext/AORT && cd AORT && pip3 install -r requirements.txt && python3 AORT.py

Usage

Common usages

If installed with pip3:

aort

To see the help panel and other parameters

python3 AORT.py -h

Main usage of the tool to dump the valid domains in the SSL certificate

python3 AORT.py -d example.com

Used to perform all the queries and recognizement

python3 AORT.py -d domain.com –all

Features

* Enumerate subdomains using passive techniques

* A lot of extra queries to enumerate the DNS

* Domain Zone trasnfer attack

* WAF type detection

* Subdomain Takeover checker

* Wayback machine support to enumerate endpoints

* Email harvesting

Third part

The tool uses different services to get subdomains in different ways

The WAF detector was modified and addapted from CRLFSuite concept

All DNS queries are scripted in python at 100%

Email harvesting using Proxycrawl API with personal token (you can register a free account with 100 uses)
Download

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Cyberattacks Are Now Increasingly Hands-On, Break Out More Quickly

Interactive intrusion campaigns jumped nearly 50%, while the breakout time between initial access and lateral movement shrank to less than 90 minutes, putting pressure on defenders to react quickly.

Dark Reading: Attacks/Breaches
To Ease the Cybersecurity Worker Shortage, Broaden the Candidate Pipeline

With enough passion, intelligence, and effort, anyone can be a successful cybersecurity professional, regardless of education or background.

Dark Reading: Attacks/Breaches
TeamTNT Hits 150K Docker Containers via Malicious Cloud Images

Honeypot activity exposed two credentials that the threat actor is using to host and distribute malicious container images, security vendor says.

hacking: security in practice
Hacktivist Group GhostSec Compromises 55 Berghof PLCs Across Israel

https://external-preview.redd.it/nms4jySs42blGIaeBZEIyocXO-sqjK5KxM88MlPhChU.jpg?width=640&crop=smart&auto=webp&s=968c0cc4e94ab5b373c232095dc6e5887f54e069 submitted by /u/p3tr00v
[link] [comments]
➖ Sent by @TheFeedReaderBot ➖

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
TIL that Pentera has developed an alternative to PsExec that instead uses a fileless implementation over DCE/RPC (port 135), completely dodging surveilance that companies commonly enforce on SMB (port 445).

https://external-preview.redd.it/vmntqCjNxK8eFMX2aoCDewpaesSJF2Rmt4z1Rw46DXI.jpg?width=640&crop=smart&auto=webp&s=9854eade07a16c26575f353ace60c7bc8793cc4d submitted by /u/SpacePilot8888
[link] [comments]
➖ Sent by @TheFeedReaderBot ➖

___________________________
@hacking_Attack
@Hacking_Video

Showcasing Sliver C2, Bypassing Win Defender and Establishing Persistence
https://www.reddit.com/r/redteamsec/comments/xe6u60/showcasing_sliver_c2_bypassing_win_defender_and/

To be honest, sliver is the big deal. It's a brand new C2 Framework (still in development) and really have a lot of potential. We showcased how to work with it and perform various TTPs, like persistence with exe hijacking or registry tweaking. The very default beacon was able to bypass Windows 10 Defender. I learned a lot (and was learning in real time while streaming, so I put timestamps for you to navigate it easier) and hope you will learn something new from the video too. It is available on my Youtube: https://youtu.be/QO_1UMaiWHk submitted by /u/lsecqt (https://www.reddit.com/user/lsecqt)
[link] (https://www.reddit.com/r/redteamsec/comments/xe6u60/showcasing_sliver_c2_bypassing_win_defender_and/) [comments] (https://www.reddit.com/r/redteamsec/comments/xe6u60/showcasing_sliver_c2_bypassing_win_defender_and/)

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
WordPress WPGateway 3.5 Privilege Escalation

https://4.bp.blogspot.com/-5kb4UTwsKkE/WWlvjussFoI/AAAAAAAAIQs/uqojaqb90NcMo4ROOoH-c5uvdKeDdbGswCLcBGAs/s1600/h94.png WordPress WPGateway plugin versions 3.5 and below suffer from an unauthenticated privilege escalation vulnerability.

SHA-256 | 715990b9ee833ca498f918bbbc57126f80aebb00320ec587bbd2652d95d95513Download Description: Unauthenticated Privilege Escalation

Affected Plugin: WPGateway

Plugin Slug: wpgateway

Plugin Developer: Jack Hopman/WPGateway

Affected Versions: <=

CVE ID: CVE-2022-3180

CVSS Score: 9.8 (Critical)

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Fully Patched Version: N/A

The WPGateway plugin is a premium plugin tied to the WPGateway cloud service, which offers its users a way to setup and manage WordPress sites from a single dashboard. Part of the plugin functionality exposes a vulnerability that allows unauthenticated attackers to insert a malicious administrator.

We obtained a current copy of the plugin on September 9, 2022, and determined that it is vulnerable, at which time we contacted the plugin vendor with our initial disclosure. We have reserved vulnerability identifier CVE-2022-3180 for this issue.

As this is an actively exploited zero-day vulnerability, and attackers are already aware of the mechanism required to exploit it, we are releasing this public service announcement (PSA) to all of our users. We are intentionally withholding certain details to prevent further exploitation. As a reminder, an attacker with administrator privileges has effectively achieved a complete site takeover.

Indicators of compromise

If you are working to determine whether a site has been compromised using this vulnerability, the most common indicator of compromise is a malicious administrator with the username of rangex.

If you see this user added to your dashboard, it means that your site has been compromised.

Additionally, you can check your site’s access logs for requests to //wp-content/plugins/wpgateway/wpgateway-webservice-new.php?wp_new_credentials=1

If these requests are present in your logs, they indicate that your site has been attacked using an exploit targeting this vulnerability, but do not necessarily indicate that it has been successfully compromised.

Conclusion

In today’s post, we detailed a zero-day vulnerability being actively exploited in the WPGateway plugin.

Wordfence Premium, Wordfence Care, and Wordfence Response customers received a firewall rule on September 8, 2022, protecting against this vulnerability, while sites still using the free version of Wordfence will receive the same protection 30 days later, on October 8, 2022.

If you have the WPGateway plugin installed, we urge you to remove it immediately until a patch is made available and to check for malicious administrator users in your WordPress dashboard.

If you know a friend or colleague who is using this plugin on their site, we highly recommend forwarding this advisory to them to help keep their sites protected, as this is a serious vulnerability that is actively being exploited in the wild. Please help make the WordPress community aware of this issue.

If you believe your site has been compromised as a result of this vulnerability or any other vulnerability, we offer Incident Response services via Wordfence Care. If you need your site cleaned immediately, Wordfence Response offers the same service with 24/7/365 availability and a 1-hour response time. Both these products include hands-on support in case you need further assistance.

Our investigation is ongoing, and we will provide more information in an additional blog post when it becomes available.

Special thanks to Threat Intelligence Lead Chloe Chamberland for spotting this exploit in the wild. Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video