Exploit Collector
AppleAVD deallocateKernelMemoryInternal Missing Surface Lock

https://3.bp.blogspot.com/-BKQJl1oXbqE/WWlvQjSZMJI/AAAAAAAAINE/UWb7sXt4uvssyXVrWpwrINbeIcIr93_vACLcBGAs/s1600/h33.png
In AppleAVD.kext, pixel buffers are mapped by calling AppleAVDUserClient::_mapPixelBuffer, which eventually calls AppleAVD::allocateKernelMemoryInternal. If the buffer is an IOSurface, the function calls IOSurface::deviceLockSurface before allocating memory by calling prepare. But when a pixel buffer is unmapped by calling AppleAVDUserClient::_unmapPixelBuffer, which calls AppleAVD::deallocateKernelMemoryInternal, the IOSurface is not locked before calling complete. This means that mapping and unmapping can occur at the same time, leading to kernel memory corruption. This bug could allow escalation to kernel privileges from a local app.

SHA-256 | fa06dd34c9fcfaf9f03c6a70c7fd7fc078ff6872d40e76e3295731e58256ce8a

Download
Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
AppleAVD AppleAVDUserClient::decodeFrameFig Memory Corruption

https://1.bp.blogspot.com/-93ZP4TpCwBw/WWlu7wGG0SI/AAAAAAAAIJg/yDCONAkAMz8MX1TtbGL6KFo1njFu_UyvACLcBGAs/s1600/h111.png
In the function AppleAVDUserClient::decodeFrameFig, a location in the decoder's IOSurface input buffer is calculated, and then bzero is called on it. The size of this IOSurface's allocation is controllable by the userspace caller, so the calculated pointer can go out of bounds, leading to memory corruption. This issue could potentially allow an unprivileged local application to escalate its privileges to the kernel.

SHA-256 | a9f971c8dcec3381b92b6bafb61fc99c1b1da326eec460ede2682c51580f3f3e

Download
Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Unblob : Extract Files From Any Kind Of Container Formats

Unblob is an accurate, fast, and easy-to-use extraction suite. It parses unknown binary blobs for more than 30 different archive, compression, and file-system formats, extracts their content recursively, and carves out unknown chunks that have not been accounted for.

Unblob is free to use, licensed with the MIT license. It has a Command Line Interface and can be used as a Python library.
This turns unblob into the perfect companion for extracting, analyzing, and reverse engineering firmware images.

Demo
https://raw.githubusercontent.com/onekey-sec/unblob/main/docs/demo.svg

Click Here To Download

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How do I test the BlueKeep exploit?

I want to do the BlueKeep exploit, but I want to do it legally. I know how to do the exploit, I am just trying to figure out how to set up something that is vulnerable to BlueKeep. How can I accomplish this? The only thing I can think of that might work is setting up a VM, but I am not sure how I could make a VM that is vulnerable to BlueKeep. All I can find online is that it needs to be some sort of Windows 7/Windows Server 2008 R2, but I am not sure how to configure it so that it is actually vulnerable.

submitted by /u/TheRealTengri
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
What is Information Securit

Information Security is a huge domain. It contains a lot of aspects in finance, business, human resource protection, health department…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Tryhackme -Alfred (CTF)

https://cdn-images-1.medium.com/max/1315/1*O8IkuqQBfQ1Qnq7qRjKueA.png
Exploit Jenkins to gain an initial shell, then escalate your privileges by exploiting Windows authentication tokens.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Crypto Tricksters are Purchasing Counterfeit Personalities on the Underground market for just $8 —…

https://cdn-images-1.medium.com/max/600/0*ISuRjmhufUQOMkU_.png
https://cryptolatestnewsallovertheworld.blogspot.com/2022/11/crypto-tricksters-are-purchasing.html

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Caza de amenazas con MITRE ATT&CK y Wazuh

https://cdn-images-1.medium.com/max/1757/0*ytHDpbQCOahCgKZa
La caza de amenazas es el proceso de buscar actividad maliciosa y sus artefactos en un sistema informático o red. La búsqueda de amenazas…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
BEST CYBER SECURITY PROGRAMS FOR BEGINNERS

https://cdn-images-1.medium.com/max/2600/1*eL5piVd8ax7CzcBTFx8YjQ.jpeg
This article was first published on LearnHub Blog

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How to Hide Your Website’s Front-End For Increased Security

https://cdn-images-1.medium.com/max/2600/0*fxf3GeUx4YX5SeJF
TL;DR- If you’re creating any website to showcase to others, you’ll want to make your site as secure as possible, while staying optimized.

Continue reading on The Gray Area »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
A selection of the latest DeFi hacks

https://cdn-images-1.medium.com/max/2600/1*V0XSbUK1fmTIcIvzP5n3Uw.png
Who will be next?

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
The Next Generation of Supply Chain Attacks Is Here to Stay

With the proliferation of interconnected third-party applications, new strategies are needed to close the security gap.

Dark Reading: Attacks/Breaches
Palo Alto Networks Focuses on Secure Coding with $195M Cider Deal

PAN plans to add Cider's CI/CD security platform to its Prisma Cloud suite of AppSec tools.

Dark Reading: Attacks/Breaches
Secure Offboarding in the Spotlight as Tech Layoffs Mount

A secure-by-design culture is needed to develop a comprehensive offboarding and identity management strategy that limits potential for broader compromise in case of unauthorized access.

What encrypted HD solution can I use for Linux so that a $40k GPU cannot bruteforce it if it with a cloned image?
https://www.reddit.com/r/Pentesting/comments/yyrjrb/what_encrypted_hd_solution_can_i_use_for_linux_so/

I was considering LUKS2, but iam not sure how strong a password should be for such a massive GPU power. submitted by /u/AdhesivenessSad2399 (https://www.reddit.com/user/AdhesivenessSad2399)
[link] (https://www.reddit.com/r/Pentesting/comments/yyrjrb/what_encrypted_hd_solution_can_i_use_for_linux_so/) [comments] (https://www.reddit.com/r/Pentesting/comments/yyrjrb/what_encrypted_hd_solution_can_i_use_for_linux_so/)

___________________________
@hacking_Attack
@Hacking_Video

How i found 8 vulnerabilities in 24h?

Hello Awesome Hackers, I hope you all doing well! My name is Mohamed Anani Or 0xM5awy.Continue reading on Medium »
Read more...