Hacking on Medium
SparklingGoblin APT Hackers Using ?

https://cdn-images-1.medium.com/max/728/0*AFsphIGC1gVuCUxE.jpg
A Linux variant of a backdoor known as SideWalk was used to target a Hong Kong university in February 2021, underscoring the…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
OSI MODEL

What is the OSI model?

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Types of Ethical Hacking

In this information you will learn about “Types Of Ethical Hacking”

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
CyberTalents #Who is admin

https://cdn-images-1.medium.com/max/1180/1*U9y2WZz-eobGruwh8xaWrw.png
~ In this article, we will cover:

Continue reading on System Weakness »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How I Hacked My School

https://cdn-images-1.medium.com/max/1440/1*Edkc5rDYXB6Re5EzxxLQXw.jpeg
My school has a website, which the students can access using their credentials(their admission number, and a password) to view their…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
A Lot Of Money Is Coming To Me

https://cdn-images-1.medium.com/max/2600/0*ozSyJkVEt0Iju6hc
I love reading these

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
CVE-2022-40137: High-Severity BIOS Security Flaw in Lenovo devices

Four additional BIOS-related vulnerabilities have recently been discovered, according to a new security advisory from Lenovo. Attackers can use these flaws to allow information exposure, denial of service, or privilege escalation. The first of the bugs, identified as CVE-2022-40137, affects the WMI SMI Handler function and affects the Lenovo Desktop, Desktop AIO, Smart Edge, Smart Office, ThinkStation, and ThinkSystem models. It could be exploited by an attacker with local access and elevated privileges to execute arbitrary code.

The three problems, identified as CVE-2022-40134, CVE-2022-40135, and CVE-2022-40136, are all related to information leak vulnerabilities that, according to Lenovo, might allow users on vulnerable computers to gain access to read SMM memory.

SMI Set BIOS Password SMI Handler and Smart USB Protection both contain vulnerabilities. In some Lenovo models, SMI Handler and SMI Handler are used to configure platform parameters via WMI. This time, Lenovo addressed four vulnerabilities, with CVE-2022-40137 having the highest priority. Threats to the UEFI (BIOS) system can be very hazardous and covert. Because they are run early in the boot process, before the operating system takes over, they are able to get around practically all security precautions and mitigations higher in the stack that may prevent their OS payloads from being executed. To reduce potential dangers, users of vulnerable devices are strongly advised to upgrade their firmware.
Download

___________________________
@hacking_Attack
@Hacking_Video

SharpImpersonation - A User Impersonation Tool - Via Token Or Shellcode Injection
http://www.kitploit.com/2022/09/sharpimpersonation-user-impersonation.html

___________________________
@hacking_Attack
@Hacking_Video

This was a learning by doing project from my side. Well known techniques are used to built just another impersonation (https://www.kitploit.com/search/label/Impersonation) tool with some improvements in comparison to other public tools. The code base was taken (https://www.kitploit.com/search/label/Taken) from:https://github.com/0xbadjuju/TokenvatorA blog post for the intruduction can be found here:https://s3cur3th1ssh1t.github.io/SharpImpersonation-Introduction/
List user processesPS > PS C:\temp> SharpImpersonation.exe list

___________________________
@hacking_Attack
@Hacking_Video

List only elevated processesPS > PS C:\temp> SharpImpersonation.exe list elevated
Impersonate the first process of the target user to start a new binaryPS > PS C:\temp> SharpImpersonation.exe user: binary:

___________________________
@hacking_Attack
@Hacking_Video

Inject base64 encoded shellcode into the first process of the target userPS > PS C:\temp> SharpImpersonation.exe user: shellcode:

___________________________
@hacking_Attack
@Hacking_Video