Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
topmostp: A simple CLI tool to retrieve the N top most used ports

topmostp(Topmost Ports) is a tool that allows you to quickly retrieve the most used ports. The source of the ranking is the nmap-servicesin the nmap repo.

I know that the top ports can be retrieved with a single bash oneliner, but this tool gives you also different features such as stats about a specific port and also allows you to find the port by service. It is particularly useful when chained with other tools like naabu:

naabu -p $(topmostp all 15 --silent) -host example.com In this snippet the output of topmostpis used to retrieve the list of the top 10 ports and it is chained with the naabuport scanning tool.

Finally there is also a little demo made with asciinemaeven though in this demo some features (like statsand search) are missing.

This is the link of the GitHub repo: https://github.com/cybersecsi/topmostp

submitted by /u/deleee
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

topmostp: A simple CLI tool to retrieve the N top most used ports

``topmostp`` (**Topmost P**orts) is a tool that allows you to quickly retrieve the **most used ports**. The source of the ranking is the...

10 viewsedited 07:53

11 views09:33

Hacking Articles Tips Tricks Videos Tutorials

Photo

Black Hat Ethical Hacking
Cisco warns admins to patch AnyConnect flaw exploited in attacks

Cisco warns admins to patch AnyConnect flaw exploited in attacksPost Views: 62 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/09/Patreon.png Subscribe to Patreon to watch this episode.
Reading Time: 3 Minutes Cisco warned customers today that two security vulnerabilities in the Cisco AnyConnect Secure Mobility Client for Windows are being exploited in the wild.The AnyConnect Secure Mobility Client simplifies secure enterprise endpoint access and enables employees to work from anywhere while connected to a secure Virtual Private Network (VPN) through Secure Sockets Layer (SSL) and IPsec IKEv2.

The two security flaws (tracked as CVE-2020-3433 and CVE-2020-3153) enable local attackers to perform DLL hijacking attacks and copy files to system directories with system-level privileges.

Following successful exploitation, the attackers could execute arbitrary code on the targeted Windows devices with SYSTEM privileges.

Luckily, both vulnerabilities require authentication, with the attackers being required to have valid credentials on the system. However, they could be chained with Windows privilege escalation flaws, especially since proof-of-concept exploits are already available online for both CVEs [1, 2].

Today, two years after patching them in 2020, Cisco updated the security advisories to ask admins to update the vulnerable software and block ongoing attacks.

“In October 2022, the Cisco PSIRT became aware of additional attempted exploitation of this vulnerability in the wild,” the company warned.

“Cisco continues to strongly recommend that customers upgrade to a fixed software release to remediate this vulnerability.”
See Also: So you want to be a hacker? Complete Offensive Security and Ethical Hacking Course Added to CISA’s list of bugs exploited in attacksThis warning confirms an announcement from Cybersecurity and Infrastructure Security Agency (CISA) on Monday that both security flaws have been added to its Known Exploited Vulnerabilities catalog.

Once added to CISA’s list of bugs exploited in attacks, all Federal Civilian Executive Branch Agencies (FCEB) agencies are required by a binding operational directive (BOD 22-01) from November 2021 to apply patches or mitigation measures.

The federal agencies were given three weeks, until November 11th, to ensure that any ongoing exploitation attempts would be blocked.
Trending: Common and Uncommon types of SQL Injection Trending: Offensive Security Tool: Monkey365 As CISA added yesterday, “these types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.”

The U.S. cybersecurity agency also strongly urged all organizations worldwide to prioritize patching these security bugs, even though BOD 22-01 only applies to U.S. FCEB agencies. Trending: Microsoft data breach exposes over 65K customers’ contact info, emails
Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?

If you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com
Source: bleepingcomputer.com Source Link https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Merch.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/10/Images-for-the-News-posts-12-300x150.png Apple fixes new zero-day used in attacks against iPhones, iPadsOctober 25, 2022
Reading Time: 3 minutes

* https://www.blackhatethicalhacking.com/wp[...]

___________________________
@hacking_Attack
@Hacking_Video

Black Hat Ethical Hacking

Cisco warns admins to patch AnyConnect flaw exploited in attacks | Black Hat Ethical Hacking

Cisco warned customers today that two security vulnerabilities in the Cisco AnyConnect Secure Mobility Client for Windows are being exploited in the wild.

11 viewsedited 09:34

Hacking Articles Tips Tricks Videos Tutorials

Black Hat Ethical Hacking Cisco warns admins to patch AnyConnect flaw exploited in attacks Cisco warns admins to patch AnyConnect flaw exploited in attacksPost Views: 62 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/09/Patreon.png…

-content/uploads/2022/10/Images-for-the-News-posts-11-300x150.png Exploited Windows zero-day lets JavaScript files bypass security warningsOctober 24, 2022
Reading Time: 6 minutes

* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/10/Images-for-the-News-posts-1-2-300x150.png Microsoft Office Online Server open to SSRF-to-RCE exploitOctober 21, 2022
Reading Time: 3 minutes

* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/10/Images-for-the-News-posts-10-300x150.png Microsoft data breach exposes over 65K customers’ contact info, emailsOctober 20, 2022
Reading Time: 4 minutes
https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/OffSec-Course.png Offensive Security & Ethical Hacking CourseBegin the learning curve of hacking now!
The post Cisco warns admins to patch AnyConnect flaw exploited in attacks first appeared on Black Hat Ethical Hacking.

___________________________
@hacking_Attack
@Hacking_Video

12 viewsedited 09:34

Hacking Articles Tips Tricks Videos Tutorials

Report a Security Vulnerability Like a pro in less than 15 min!
https://joshuaarulsamy.medium.com/report-a-security-vulnerability-like-a-pro-in-less-than-15-min-881ae4f00455?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Medium

Report a Security Vulnerability Like a pro in less than 15 min!

Bug bounty programs have become a major part of the security industry. They offer corporations, government agencies, and even individuals…

9 viewsedited 11:27

Hacking Articles Tips Tricks Videos Tutorials

9 views11:27

Hacking Articles Tips Tricks Videos Tutorials

Bug bounty programs have become a major part of the security industry. They offer corporations, government agencies, and even individuals…Continue reading on Medium » (https://joshuaarulsamy.medium.com/report-a-security-vulnerability-like-a-pro-in-less-than-15-min-881ae4f00455?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Medium

Report a Security Vulnerability Like a pro in less than 15 min!

Bug bounty programs have become a major part of the security industry. They offer corporations, government agencies, and even individuals…

9 viewsedited 11:27

Hacking Articles Tips Tricks Videos Tutorials

Hacking on Medium
Awesome CTF Resources

Hello guys Caleb (Dateneard) here welcome back today lets talk about ctfs (capture the flags)

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Medium

Awesome CTF Resources

Hello guys Caleb (Dateneard) here welcome back today lets talk about ctfs (capture the flags)

9 viewsedited 11:35

Hacking Articles Tips Tricks Videos Tutorials

8 views11:36

Hacking Articles Tips Tricks Videos Tutorials

Photo

Hacking on Medium
HackTheBox(HTB): Lame Walkthrough

https://cdn-images-1.medium.com/max/706/1*1zJQAKNoeoDoALLDxqGiwg.png
Hello Hackers! This is a walkthrough of “Lame” machine from HackTheBox. The HTB is an online platform which challenges your skills in…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Medium

HackTheBox(HTB): Lame Walkthrough

Hello Hackers! This is a walkthrough of “Lame” machine from HackTheBox. The HTB is an online platform which challenges your skills in…