Hacking on Medium
Parche no oficial lanzado para la nueva vulnerabilidad MotW de Windows explotada activamente

https://cdn-images-1.medium.com/max/1694/0*FUahTwCnnWwoCT7p
Se ha puesto a disposición un parche no oficial para una falla de seguridad explotada activamente en Microsoft Windows que hace posible…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
SickOs 1.2

https://cdn-images-1.medium.com/max/616/1*v3HqdxAthRPxUx7F3VwpmA.png
Herkese Merhaba,

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

PowerShell Empire StarKiller - Standard Account - KeePass Master Password Extraction (Version 2.52)
https://www.reddit.com/r/redteamsec/comments/yixl91/powershell_empire_starkiller_standard_account/

KeePass Password Managers are highly recommended and used in global companies, but also targeted by threat actors. Therefore, attackers having a foothold with limited privileges (Standard User) to the machine can identify if KeePass is running by listing the processes and unauthorized download the .KDBX KeePass Database file. While the KeePass Database file is opened, the password is stored in Plain Text in Memory which allows intruders to load scripts such as "KeeThief" to extract the Master Password and gain access to the compromised user credentials. KeePass Version: 2.52 (Latest Version, dated 01/11/2022) https://www.youtube.com/watch?v=I3-ixb9wnWg submitted by /u/EpicOfAllEpics (https://www.reddit.com/user/EpicOfAllEpics)
[link] (https://www.reddit.com/r/redteamsec/comments/yixl91/powershell_empire_starkiller_standard_account/) [comments] (https://www.reddit.com/r/redteamsec/comments/yixl91/powershell_empire_starkiller_standard_account/)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
I ended up leaving a trail after accessing sensitive documents at work. I think I'm gonna be fired, I'm shaking.

I found a very simple backdoor into some VERY sensitive work documents at work. Everything from direct deposits/banking. I only wanted to see my co-workers reprimand files. I'm deleting the google drive I accessed them with and making a new one. Only downside would be losing my YouTube history and all the comments I've made. Let's hope my regional manager is blind or I'm dead. I'm scared guys, I'm shaking.

Also if I do get caught, what would you recommend to properly secure such sensitive information on google drive, that I a lowly retail worker could access such files. I shared a training manual to my google drive, poked around the links inside the documents to external google drives and found a way into the management files.

​

Any idea how to save myself? What could happen to me? Is my accidental access illegal?

submitted by /u/bioshockbitch
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Chinese Hacking group "Cicada" exploits anti-virus in new attack

https://external-preview.redd.it/AZUWoUI_JZQEtz1HhIizL5OglM8RxggqXbfxt2B5X7k.jpg?width=640&crop=smart&auto=webp&s=f5fbfd5c050556cbf47a00ff1647b86105e42c56 submitted by /u/zenmondo
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
assuming no faults, how can a router be attacked for it to lose its internet connection?

Would some form of DOS disconnect a router from the network requiring a restart or if not what would?

submitted by /u/tiddlywinks2661
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
PowerShell Empire StarKiller - Standard Account - KeePass Master Password Extraction (Version 2.52)

KeePass Password Managers are highly recommended and used in global companies, but also targeted by threat actors.

Therefore, attackers having a foothold with limited privileges (Standard User) to the machine can identify if KeePass is running by listing the processes and unauthorized download the .KDBX KeePass Database file.

While the KeePass Database file is opened, the password is stored in Plain Text in Memory which allows intruders to load scripts such as "KeeThief" to extract the Master Password and gain access to the compromised user credentials.

KeePass Version: 2.52 (Latest Version, dated 01/11/2022)

https://www.youtube.com/watch?v=I3-ixb9wnWg

submitted by /u/EpicOfAllEpics
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
You Must Know These Nmap Scans

https://cdn-images-1.medium.com/max/832/1*wfIIJzzYUDNAuggI34EgOA.png
Do you know them all? Test your knowledge.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Niural’s Hackathon: Aurora ’22

https://cdn-images-1.medium.com/max/1600/1*XZqib9Fd6Eg_CSL3jLtzpw.png
The hottest payments x financial identity hackathon in web3

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How to brute force into old emails?

How would I go about accessing an old email I forgot the password to? I was quite young when I made it and I’ve used several passwords through the years. This password is connected to an older Xbox 360 Gamertag as well that I’m dying to have back. I haven’t had access to the email since about 2015 I suppose, those were the last times I received emails from that account to my current email regarding school projects

submitted by /u/biggestboy96
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Red Teaming TTPs
https://medium.com/@reconshell.com/red-teaming-ttps-1e89f4fee33e?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Useful Techniques, Tactics, and Procedures for red teamers and defenders, alike!Continue reading on Medium » (https://medium.com/@reconshell.com/red-teaming-ttps-1e89f4fee33e?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Black Hat Ethical Hacking
SQLite patches 22-year-old code execution, a DoS vulnerability

SQLite patches 22-year-old code execution, a DoS vulnerabilityPost Views: 1 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/09/Patreon.png Subscribe to Patreon to watch this episode.
Reading Time: 3 Minutes The maintainers of the SQLite database engine have patched a high severity vulnerability (DoS) that attackers could exploit to crash or control programs that rely on the software.Developers of the software have offered The Daily Swig a convincing argument that the flaw would be difficult to exploit in practice. Even so, they have revised the software with a patch to defend against the flaw – rather than dismissing the issue as something that can be safely ignored. SQLite is a popular open source C-language library that underpins many enterprise apps and services. Notable users of SQLite include Apple, Adobe, Google, Facebook, and Microsoft. There are billions of copies of SQLite deployed worldwide.

The SQLite team is quick to fix emerging vulnerabilities in the software due to their potentially wide-reaching impact. However, a vulnerability disclosed this month by Trail of Bits was introduced 22 years ago and highlighted how initially secure functionality could have unintended consequences much further down the line.

In a blog post dated October 25, Trail of Bits researcher Andreas Kellas said the vulnerability was introduced in SQLite version 1.0.12, a 2000 release that landed when the software was primarily based on 32-bit architectures. According to Kellas, the bug “may not have seemed like an error” at the time.

The high severity vulnerability is tracked as CVE-2022-35737, scoring a CVSS severity score of 7.5.

Trail of Bits said the bug impacts any app that relies on the SQLite library API.

The vulnerability is exploitable on 64-bit systems when large string inputs contain %Q, %q, or %w format substitution types that – in this scenario – might cause programs to crash or worse.

In the most severe cases – when the ! special character exists in the format string – it may be “possible to achieve arbitrary code execution, in the worst case, or to cause the program to hang and loop (nearly) indefinitely,” according to the researchers.
See Also: So you want to be a hacker? Complete Offensive Security and Ethical Hacking Course Root cause analysisSpeaking to The Daily Swig, the creator of SQLite, D. Richard Hipp, said the root cause of the problem was the use of signed 32-bit integers as a byte index into the input string and to compute the size of the output string. When an input string was large enough, the integer would overflow, and “all kinds of problems” ensued.

However, the potential impact of the flaw appears to be limited.

Hipp told us that it is not possible to reach the vulnerability for malicious purposes via SQL inputs or by passing SQLite a malformed database file. Instead, an attacker would have to abuse the use the sqlite3_mprintf() function – or “similar C-level interfaces with a format string that includes one of the non-standard [;…] conversion symbols, and then pass in a string that is over 2GB in size”.

The software developer added:

“Lots of applications use SQLite, but only a small percentage of those use the sqlite3_mprintf() API, and an even smaller percentage make use of %Q, %q, or %w. Of those that do, most do not provide a way for an attacker to arrange for a 2GB+ string to be passed into the argument to %Q, %q, or %w.”
Trending: Exploit XSS Injections in a one-line powerful Technique
Trending: Recon Tool: Hakrawler Unearthing FossilIn addition, while the project uses the Fossil control system and this software uses printf, the team [...]

___________________________
@hacking_Attack
@Hacking_Video

couldn’t find a way to inject a 2GB string.

CVE-2022-35737 was reported to the Computer Emergency Response Team (CERT) Coordination Center by Trail of Bits on July 14. CERT confirmed the issue, reached out to SQLite maintainers, and the team fixed the bug in the software’s source code only three days later – a task accomplished by converting to the use of 64-bit integers.

The patched SQLite version, v3.39.2, was released on July 21.

“We are grateful for the responsible disclosure from the researchers who found it,” Hipp said. “It doesn’t hurt to upgrade to a newer release of SQLite. But very few if any real-world applications should be affected by this.”

​
Trending: Exploited Windows zero-day lets JavaScript files bypass security warnings Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?

If you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com
Source: portswigger.net Source Link https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Merch.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/10/Images-for-the-News-posts-5-1-300x150.png OpenSSL Gives Heads Up to Critical Vulnerability DisclosureOctober 31, 2022
Reading Time: 4 minutes

* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/10/Images-for-the-News-posts-4-1-300x150.png GitHub patches bug called repojacking that could allow access to another user’s repoOctober 28, 2022
Reading Time: 3 minutes

* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/10/Images-for-the-News-posts-3-1-300x150.png Windows vulnerable driver blocklist sync issue patchedOctober 27, 2022
Reading Time: 4 minutes

* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/10/Images-for-the-News-posts-2-2-300x150.png Cisco warns admins to patch AnyConnect flaw exploited in attacksOctober 26, 2022
Reading Time: 3 minutes
https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/OffSec-Course.png Offensive Security & Ethical Hacking CourseBegin the learning curve of hacking now!
The post SQLite patches 22-year-old code execution, a DoS vulnerability first appeared on Black Hat Ethical Hacking.

___________________________
@hacking_Attack
@Hacking_Video

Red Teaming TTPs

Useful Techniques, Tactics, and Procedures for red teamers and defenders, alike!Continue reading on Medium »
Read more...