Hacking Articles Tips Tricks Videos Tutorials

What is Artemis Ransomware?

Maybe your antivirus launched an alarm saying that it found Artemis, but what is it?

9 viewsedited 02:54

Dark Reading: Attacks/Breaches
New Startup OpsHelm Tackles Cloud Misconfigurations

The company emerges from stealth with an automated security remediation product identifies and remediates cloud misconfigurations.

11 views03:29

Source

8 views05:42

Dismember : Scan Memory For Secrets And More 2022

Kali Linux Tutorials
Dismember : Scan Memory For Secrets And More

Dismember is a command-line toolkit for Linux that can be used to scan the memory of all processes (or particular ones) for common secrets and custom regular expressions, among other things.

It will eventually become a full /proctoolkit.
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiIt3XUHmPvC1JI47DZz5Q-RZOlehIeLAFxptwg8kYelD1VNPT0cUC3Gf0s9yGzAyKdzdgh1EeDKiiWO-HM1LIOoIuEwcRSPeQoBEML7un4TKoT_JgFfDrxawJf52LVxw9Av-VwjueccZbXtfvRUbC5DHs-wPyaIuZK9yBtgi-8JkreAcq3XhZL76mQ/s1573/demo.gif
Using the grepcommand, it can match a regular expression across all memory for all (accessible) processes. This could be used to find sensitive data in memory, identify a process by something included in its memory, or to interrogate a processes’ memory for interesting information.

There are many built-in patterns included via the scancommand, which effectively works as a secret scanner against the memory on your machine.

Dismember can be used to search memory of all processes it has access to, so running it as root is the most effective method.

Commands are also included to list processes, explore process status and related information, draw process trees, and more…

Main Commands
CommandDescriptiongrepSearch process memory for a given string or regexscanSearch process memory for a set of predefined secret patterns
Utility Commands
CommandDescriptionfilesShow a list of files being accessed by a processfindFind a PID given a process name. If multiple processes match, the first one is returned.infoShow information about a processkernelShow information about the kernelkillKill a process (or processes) using SIGKILLlistList all processes currently available on the systemresumeResume a suspended process using SIGCONTsuspendSuspend a process using SIGSTOP (use ‘dismember resume’ to leave suspension)treeShow a tree diagram of a process and all children (defaults to PID 1).
Installation

Grab a binary from the latest release and add it to your path.

Usage Examples

Search for a pattern in a process by PID
# search memory owned by process 1234
dismember grep -p 1234 'the password is .*'
Search for a pattern in a process by name
# search memory owned by processes named "nginx" for a login form submission
dismember grep -n nginx 'username=liamg&password=.*'
Search for a pattern across all processes
# find a github api token across all processes
dismember grep 'gh[pousr]_[0-9a-zA-Z]{36}'
Search for secrets in memory across all processes
# search all accessible memory for common secrets
dismember scan

Click Here To Download

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials

Dismember is a command-line toolkit for Linux that can be used to scan the memory of all processes (or particular ones) for common secrets

8 viewsedited 05:43

Root detection analysis and bypass — Rootbeer Library |Beginner | Part 1
https://medium.com/@0xashish/root-detection-analysis-and-bypass-rootbeer-library-beginner-part-1-b642a41e38f2?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Root detection analysis and bypass — Rootbeer Library |Beginner | Part 1

For those who don’t know, I am Ashish (co-founder of Bluefire redteam), We engage with many real-world cybersecurity challenges, and this…

8 viewsedited 06:04

8 views06:04

For those who don’t know, I am Ashish (co-founder of Bluefire redteam), We engage with many real-world cybersecurity challenges, and this…Continue reading on Medium » (https://medium.com/@0xashish/root-detection-analysis-and-bypass-rootbeer-library-beginner-part-1-b642a41e38f2?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Root detection analysis and bypass — Rootbeer Library |Beginner | Part 1

For those who don’t know, I am Ashish (co-founder of Bluefire redteam), We engage with many real-world cybersecurity challenges, and this…

8 viewsedited 06:04

Root detection analysis and bypass — Rootbeer Library |Beginner | Part 1

For those who don’t know, I am Ashish (co-founder of Bluefire redteam), We engage with many real-world cybersecurity challenges, and this…Continue reading on Medium »
Read more...

7 views06:28

Check out my walk through for Hacktoria's Lost at Sea CTF

hacking: security in practice
Check out my walk through for Hacktoria's Lost at Sea CTF

submitted by /u/s1l1c0np1r4t3
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Posted in r/hacking by u/s1l1c0np1r4t3 • 47 points and 0 comments

6 viewsedited 06:49

6 views07:01

6 views07:01

Hacking on Medium
A new cyber taskforce will supposedly ‘hack the hackers’ behind the Medibank breach.

https://cdn-images-1.medium.com/max/2560/0*8-3CI_nqnTdNSA_I.jpg
The Australian government is launching an offensive against cybercriminals, following a data breach that has exposed millions of people’s…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

A new cyber taskforce will supposedly ‘hack the hackers’ behind the Medibank breach. It could put a target on Australia’s back

The Australian government is launching an offensive against cybercriminals, following a data breach that has exposed millions of people’s…

6 viewsedited 07:01

Hacking on Medium
Root detection analysis and bypass — Rootbeer Library |Beginner | Part 1

https://cdn-images-1.medium.com/max/1280/1*r8YfCjvm_uAXtqM8ydq2Vg.png
For those who don’t know, I am Ashish (co-founder of Bluefire redteam), We engage with many real-world cybersecurity challenges, and this…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Root detection analysis and bypass — Rootbeer Library |Beginner | Part 1

For those who don’t know, I am Ashish (co-founder of Bluefire redteam), We engage with many real-world cybersecurity challenges, and this…

7 viewsedited 07:01

Defining scopes for bug bounty programs
https://bugbaseindia.medium.com/defining-scopes-for-bug-bounty-programs-7c4c46de7710?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Defining scopes for bug bounty programs

Setting the programme scope is the first stage in developing your programme brief, which you should do if you’ve decided that you and your…

6 viewsedited 07:57

6 views07:57

Setting the programme scope is the first stage in developing your programme brief, which you should do if you’ve decided that you and your…Continue reading on Medium » (https://bugbaseindia.medium.com/defining-scopes-for-bug-bounty-programs-7c4c46de7710?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Defining scopes for bug bounty programs

Setting the programme scope is the first stage in developing your programme brief, which you should do if you’ve decided that you and your…

7 viewsedited 07:57

Defining scopes for bug bounty programs

Setting the programme scope is the first stage in developing your programme brief, which you should do if you’ve decided that you and your…Continue reading on Medium »
Read more...

7 views07:58

7 views08:13

Black Hat Ethical Hacking

Black Hat Ethical Hacking
AXLocker – a new ransomware that encrypts yours files, and then steals your Discord account

AXLocker – a new ransomware that encrypts yours files, and then steals your Discord accountPost Views: 2 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/09/Patreon.png Subscribe to Patreon to watch this episode.
Reading Time: 3 Minutes The new ‘AXLocker’ ransomware family is not only encrypting victims’ files and demanding a ransom payment but also stealing the Discord accounts of infected users.When a user logs into Discord with their credentials, the platform sends back a user authentication token saved on the computer. This token can then be used to log in as the user or to issue API requests that retrieve information about the associated account.

Threat actors commonly attempt to steal these tokens because they enable them to take over accounts or, even worse, abuse them for further malicious attacks.

As Discord has become the community of choice for NFT platforms and cryptocurrency groups, stealing a moderator token or other verified community member could allow threat actors to conduct scams and steal funds.
See Also: So you want to be a hacker? Complete Offensive Security and Ethical Hacking Course AxLocker is a two-in-one threatResearchers at Cyble recently analyzed a sample of the new AXLocker ransomware and discovered that it not only encrypts files but also steals a victim’s Discord tokens.

As ransomware, there is nothing particularly sophisticated about the malware or the threat actors who use it.

When executed, the ransomware will target certain file extensions and exclude specific folders, as shown in the image below.
https://www.bleepstatic.com/images/news/u/1220909/ransomware/files-types.png
___________________________
@hacking_Attack
@Hacking_Video

AXLocker – a new ransomware that encrypts yours files, and then steals your Discord account | Black Hat Ethical Hacking

The new 'AXLocker' ransomware family is not only encrypting victims' files and demanding a ransom payment but also stealing the Discord accounts of infected users.

6 viewsedited 08:13