As per Hardening Network Devices National Security Agency Cybersecurity Information, below points are covers in this Course.Continue reading on Medium » (https://cyberbruharmy.medium.com/palo-alto-and-panorama-hardening-the-configuration-4c98967cf096?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Palo Alto and Panorama — Hardening the Configuration

As per Hardening Network Devices National Security Agency Cybersecurity Information, below points are covers in this Course.Continue reading on Medium »
Read more...

hacking: security in practice
change router wifi settings

how can you change the wifi settings of the router using node js or go, or rather the settings of the virtual server or dmz. I have access to the router, I just want to change the settings of the router at server startup to the ones I need, and then change them back. It is desirable to have a universal method for most types of routers. And yeah, it is necessary with the help of programming languages.

submitted by /u/Thrackerzood
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Migrate PowerShell process to another process via process injection?

Hi everybody I hope you’re all doing well.

Recently I was up late at night reading about process injection when I came across an excerpt from this site which says “ an adversary might inject their PowerShell process into a browser.”. I searched tirelessly and could not find any resources on anything similar to this.

That being said, might any of you fine individuals help me figure out how to “inject powershell process” into another process?

I am still pretty new to process injection and so far I only know how to do basic shellcode injection and reflective-dll injection so sorry if this is a noob question lol. From what I can tell this is just process migration but the first few steps confuse me.

Thanks I’m advanced for all the answers and any help including just links to resources is appreciated.

submitted by /u/Aleks_Leeks
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Old RCE worth $3362.

Have you ever read the article “RCE via Symfony Secret Fragments” ? If you haven’t read it, there are so many articles on Medium. Shodan…Continue reading on DevOps.dev »
Read more...

___________________________
@hacking_Attack
@Hacking_Video

Old RCE worth $3362.
https://blog.devops.dev/old-rce-worth-3362-1af0cd70c459?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Have you ever read the article “RCE via Symfony Secret Fragments” ? If you haven’t read it, there are so many articles on Medium. Shodan…Continue reading on DevOps.dev » (https://blog.devops.dev/old-rce-worth-3362-1af0cd70c459?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Can someone steal my GDrive files if I ran an unknown code in Google Colab?

Hey everyone, maybe this could be a dump question but I gotta ask to be more relaxed. I wanted to transfer a file from my mega storage to my google drive account without having to download it and uploading it next, I found a yt video where the solution was a google colab script, I ran it and everything went ok, it worked. However, I started to worry about it bc of all the permissions i gave to the platform without checking the code of the colab correctly, I have little to no knowledge about coding so I just skimmed it. Can someone help me to check if the script was malicious or if I have nothing to worry about?):

The colab is this: https://colab.research.google.com/drive/1SI-ztZId0bTKGPV-RJxebewzOAuPoNEE

A lot of thanks in advance, I know this can be a hassle but I promise to be more careful.

submitted by /u/PaperPlane47
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Registrations Open for IWCON2022 Version 2.0 — the Online International Cybersecurity Conference
https://infosecwriteups.com/registrations-open-for-iwcon2022-version-2-0-the-online-international-cybersecurity-conference-ff4c4d1cddf3?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Book your seats today!Continue reading on InfoSec Write-ups » (https://infosecwriteups.com/registrations-open-for-iwcon2022-version-2-0-the-online-international-cybersecurity-conference-ff4c4d1cddf3?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Registrations Open for IWCON2022 Version 2.0 — the Online International Cybersecurity Conference

Book your seats today!Continue reading on InfoSec Write-ups »
Read more...

Android Pentesting 101 — Part 3
https://infosecwriteups.com/android-pentesting-101-part-3-2bf846b05594?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Welcome to Part 3 of Android Pentesting. This series is about how you can hack into Android and find vulnerabilities in it using various…Continue reading on InfoSec Write-ups » (https://infosecwriteups.com/android-pentesting-101-part-3-2bf846b05594?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Ermir - An Evil Java RMI Registry
http://www.kitploit.com/2022/10/ermir-evil-java-rmi-registry.html

___________________________
@hacking_Attack
@Hacking_Video

Ermir is an Evil/Rogue RMI Registry, it exploits (https://www.kitploit.com/search/label/Exploits) unsecure deserialization (https://www.kitploit.com/search/label/Deserialization) on any Java code calling standard RMI methods on it (list()/lookup()/bind()/rebind()/unbind()).
Requirements Ruby v3 or newer. Installation Install Ermir from rubygems.org: $ gem install ermir
or clone the repo and build the gem: $ git clone https://github.com/hakivvi/ermir.git
$ rake install
Usage Ermir is a cli gem, it comes with 2 cli files ermir and gadgetmarshal, ermir is the actual gem and the latter is just a pretty interface to GadgetMarshaller.java (https://github.com/hakivvi/ermir/blob/main/helpers/gadgetmarshaller/GadgetMarshaller.java) file which rewrites the gadgets (https://www.kitploit.com/search/label/Gadgets) of Ysoserial (https://github.com/frohoff/ysoserial) to match MarshalInputStream requirements, the output should be then piped into ermir or a file, in case of custom gadgets use MarshalOutputStream instead of ObjectOutputStream to write your serialized object to the output stream. ermir usage: RMI Registry which exploits unsecure Java deserialization on any Java code calling standard RMI methods on it. Usage: ermir [options] -l, --listen bind the RMI Registry (https://www.kitploit.com/search/label/Registry) to this ip and port (default: 0.0.0.0:1099). -f, --file path to file containing the gadget to be deserialized. -p, --pipe read the serialized gadget from the standard input stream. -v, --version print Ermir version. -h, --help print options help. Example: $ gadgetmarshal /path/to/ysoserial.jar Groovy1 calc.exe | ermir --listen 127.0.0.1:1099 --pipe" dir="auto">➜ ~ ermir
Ermir by @hakivvi * https://github.com/hakivvi/ermir.
Info:
Ermir is a Rogue/Evil RMI Registry which exploits unsecure Java deserialization on any Java code calling standard RMI methods on it.
Usage: ermir [options]
-l, --listen bind the RMI Registry to this ip and port (default: 0.0.0.0:1099).
-f, --file path to file containing the gadget to be deserialized.
-p, --pipe read the serialized gadget from the standard input stream.
-v, --version print Ermir version.
-h, --help print options help.
Example:
$ gadgetmarshal /path/to/ysoserial.jar Groovy1 calc.exe | ermir --listen 127.0.0.1:1099 --pipe gadgetmarshal usage: ➜ ~ gadgetmarshal
Usage: gadgetmarshal /path/to/ysoserial.jar Gadget1 cmd (optional)/path/to/output/file How does it work? java.rmi.registry.Registry offers 5 methods: list(), lookup(), bind(), rebind(), unbind(): public Remote lookup(String name): lookup() searches for a bound object in the registry by its name, the registry returns a Remote object which references the remote object that was looked up, the returned object is read using MarshalInputStream.readObject() which is just another layer on top of ObjectInputStream, basically it excpects after each class/proxy descriptor (TC_CLASSDESC/TC_PROXYCLASSDESC) an URL that will be used to load this class or proxy class. this is the same wild bug that was fixed in jdk7u21 (https://docs.oracle.com/javase/7/docs/technotes/guides/rmi/enhancements-7.html). (Ermir does not specify this URL as only old Java version are vulnerable, instead it just write null (https://github.com/hakivvi/ermir/blob/240880237eb3a565daf1f5d79be19ac1d21cb4c8/helpers/gadgetmarshaller/GadgetMarshaller.java#L54)). as Ysoserial (https://github.com/frohoff/ysoserial) gadgets are being serialized using ObjectOutputStream, Ermir uses gadgetmarshal -a wrapper around GadgetMarshaller.java (https://github.com/hakivvi/ermir/blob/main/helpers/gadgetmarshaller/GadgetMarshaller.java)- to serialize the specified gagdet to match MarshalInputStream requirements.

___________________________
@hacking_Attack
@Hacking_Video

public String[] list(): list() asks the registry for all the bound objects names, while String type cannot be subsitued with a malicious gadget as it is not like any ordinary object and it is not read using readObject() but rather readUTF(), however as list() returns String[] which is an actual object and it is read using readObject(), Ermir sends the gadget instead of this String[] type.

___________________________
@hacking_Attack
@Hacking_Video