Hacking on Medium
Gcash Vulnerability Walkthrough

https://cdn-images-1.medium.com/max/2600/1*3gKQAU3fbVlR0R7uE8r9lA.jpeg
Advisory: Update your Gcash App now to the latest version.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
HOW TO PERFORM A RCE HACKING ATTACK ON A SYSTEM

https://cdn-images-1.medium.com/max/1920/1*x-n27S5qCWuRN6XLFPlBEw.jpeg
Originally published on Learnhub

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Bayanay – Python Wardriving Tool

Bayanay is a Python Wardriving tool. WarDriving is the act of navigating, on foot or by car, to discover wireless networks in the surrounding area.

Features

Wardriving is done by combining the SSID information obtained with scapy using the HTML5 geolocation feature.

Usage

I cannot be held responsible for the malicious use of the vehicle.

ssidBul.py has been tested via TP-LINK TL WN722N.

Selenium 3.11.0 and Firefox 59.0.2 are used for location.py. Firefox geckodriver is located in the directory where the codes are.

SSID and MAC names and location information were created and changed in the test environment.

ssidBul.py and location.py must be run concurrently.

ssidBul.py result:

20 March 2018 11:48PM|9c:b2:b2:11:12:13|ECFJ3M

20 March 2018 11:48PM|c0:25:e9:11:12:13|T7068

Here is a screenshot of allowing location information while running location.py:
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhyfQRUaQcll3jnmkrlrhyjCVvYOgWhAI8Iq3oUSzHSgzcJ9vBr2JfkDzQ4dFBZFPL3XY5h9hotZowHY8apCgLC6LdsJIdauSHnCYYU_lpl-9hZT_n36brWdhwQqTlIr6wd8CI4sTv8QRVHTWSe6l28r50PYeHXsZweRLi2MsRr9QRWa_3h-DSJYsWy/s728/Bayanay.png
The screenshot of the location information is as follows:
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhAuozKnMvnvkQYv-GSskR6SUZcx5wCz5ckMUl-xM6rSKGkGlGaZSX8L5MQopJ4GEcokZoewnNuWtkNhXc7o6qyxm-UlntWgWnv2iryprKz9F422wwjRGvR8XTLlOzw9WjiQPOGN8zSDfkFkpqZs5Tz8L6EDZgtXtJMg16rj_D3cFCETbSuMN72A8Fl/s1310/Bayanay-1.png
konum.py result:

lat=38.8333635|lon=34.759741899|20 March 2018 11:47PM

lat=38.8333635|lon=34.759741899|20 March 2018 11:48PM

lat=38.8333635|lon=34.759741899|20 March 2018 11:48PM

lat=38.8333635|lon=34.759741899|20 March 2018 11:48PM

lat=38.8333635|lon=34.759741899|20 March 2018 11:48PM

lat=38.8333635|lon=34.759741899|20 March 2018 11:49PM

lat=38.8333635|lon=34.759741899|20 March 2018 11:49PM

After the data collection processes, the following output is obtained as a result of running wardriving.py:

lat=38.8333635|lon=34.759741899|20 March 2018 11:48PM|9c:b2:b2:11:12:13|ECFJ3M

lat=38.8333635|lon=34.759741899|20 March 2018 11:48PM|c0:25:e9:11:12:13|T7068
Click Here To Download

___________________________
@hacking_Attack
@Hacking_Video

Gcash Vulnerability Walkthrough
https://nmochea.medium.com/gcash-vulnerability-walkthrough-c7c938163dfb?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Advisory: Update your Gcash App now to the latest version.Continue reading on Medium » (https://nmochea.medium.com/gcash-vulnerability-walkthrough-c7c938163dfb?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Tryhackme Lian_Yu Makine Çözümü
https://medium.com/@barisures/tryhackme-lian-yu-makine-%C3%A7%C3%B6z%C3%BCm%C3%BC-6fd1e3689e89?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Açıklama: Selam arkadaşlar, Tryhackme platformunda bulunan ‘Lian_Yu’ isimli makinenin çözümünü sizinle paylaşıyor olacağım. Bu makinede…Continue reading on Medium » (https://medium.com/@barisures/tryhackme-lian-yu-makine-%C3%A7%C3%B6z%C3%BCm%C3%BC-6fd1e3689e89?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Different Types of Hackers to be Aware
https://blog.bugzero.io/different-types-of-hackers-to-be-aware-656e68c37bdd?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

A Definitive GuideContinue reading on Bug Zero » (https://blog.bugzero.io/different-types-of-hackers-to-be-aware-656e68c37bdd?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Front-Run a Smart Contract
https://blog.bugzero.io/front-run-a-smart-contract-499d3534eece?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Blockchain data are theoretically immutable. It is offered as an inherent feature to safeguard data integrity from attackers.Continue reading on Bug Zero » (https://blog.bugzero.io/front-run-a-smart-contract-499d3534eece?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Black Hat Ethical Hacking
Intel confirms leaked Alder Lake BIOS Source Code is authentic

Intel confirms leaked Alder Lake BIOS Source Code is authenticPost Views: 30 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/09/Patreon.png Subscribe to Patreon to watch this episode.
Reading Time: 3 Minutes Intel has confirmed that a source code leak for the UEFI BIOS of Alder Lake CPUs is authentic, raising cybersecurity concerns with researchers.Alder Lake is the name of Intel’s 12th generation Intel Core processors, released in November 2021.

On Friday, a Twitter user named ‘freak’ posted links to what was said to be the source code for Intel Alder Lake’s UEFI firmware, which they claim was released by 4chan.

The link led to a GitHub repository named ‘ICE_TEA_BIOS’ that was uploaded by a user named ‘LCFCASD.’ This repository contained what was described as the ‘BIOS Code from project C970.’
https://www.bleepstatic.com/images/news/security/i/intel/alder-lake-source-code-leak/github-project.jpg
Security researchers concernedWhile Intel has downplayed the security risks of the source code leak, security researchers warn that the contents could make it easier to find vulnerabilities in the code.

“The attacker/bug hunter can hugely benefit from the leaks even if leaked OEM implementation is only partially used in the production,” explains hardware security firm Hardened Vault.

“The Insyde’s solution can help the security researchers, bug hunters (and the attackers) find the vulnerablity and understand the result of reverse engineering easily, which adds up to the long-term high risk to the users.”

Positive Technologies hardware researcher Mark Ermolov also warned that the leak included a KeyManifest private encryption key, a private key used to secure Intel’s Boot Guard platform.
A very bad thing happened: now, the Intel Boot Guard on the vendor's platforms can no longer be trusted… ☹️ pic.twitter.com/K5mXcp5ipW

— Mark Ermolov (@_markel___) October 8, 2022
While it is not clear if the leaked private key is used in production, if it is, hackers could potentially use it to modify the boot policy in Intel firmware and byp[...]

___________________________
@hacking_Attack
@Hacking_Video

ass hardware security.

BleepingComputer has contacted Intel, Insyde, and Lenovo with questions about the leak and whether the private keys were used in production.

We will update this article with any responses as we learn more.
Trending: Microsoft SQL servers hacked with FARGO ransomware attacks Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?

If you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com
Source: bleepingcomputer.com Source Link https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Merch.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/10/Images-for-the-News-posts-1-1-300x150.png Linux Kernel 5.19.12 bug could damage Intel laptop displaysOctober 7, 2022
Reading Time: 3 minutes

* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/10/Images-for-the-News-posts-2-300x150.png Microsoft SQL servers backdoored with new malwareOctober 6, 2022
Reading Time: 4 minutes

* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/10/Images-for-the-News-posts-1-300x150.png Researchers get $46k in bounties for Akamai misconfiguration vulnerabilityOctober 5, 2022
Reading Time: 3 minutes

* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/10/Images-for-the-News-posts-300x150.png Microsoft confirms zero-day exploits against Exchange Server in ‘limited’ attacksOctober 4, 2022
Reading Time: 3 minutes
https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/OffSec-Course.png Offensive Security & Ethical Hacking CourseBegin the learning curve of hacking now!
The post Intel confirms leaked Alder Lake BIOS Source Code is authentic first appeared on Black Hat Ethical Hacking.

___________________________
@hacking_Attack
@Hacking_Video