Dark Reading: Attacks/Breaches
New Startup OpsHelm Tackles Cloud Misconfigurations

The company emerges from stealth with an automated security remediation product identifies and remediates cloud misconfigurations.

Kali Linux Tutorials
Dismember : Scan Memory For Secrets And More

Dismember is a command-line toolkit for Linux that can be used to scan the memory of all processes (or particular ones) for common secrets and custom regular expressions, among other things.

It will eventually become a full /proctoolkit.
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiIt3XUHmPvC1JI47DZz5Q-RZOlehIeLAFxptwg8kYelD1VNPT0cUC3Gf0s9yGzAyKdzdgh1EeDKiiWO-HM1LIOoIuEwcRSPeQoBEML7un4TKoT_JgFfDrxawJf52LVxw9Av-VwjueccZbXtfvRUbC5DHs-wPyaIuZK9yBtgi-8JkreAcq3XhZL76mQ/s1573/demo.gif
Using the grepcommand, it can match a regular expression across all memory for all (accessible) processes. This could be used to find sensitive data in memory, identify a process by something included in its memory, or to interrogate a processes’ memory for interesting information.

There are many built-in patterns included via the scancommand, which effectively works as a secret scanner against the memory on your machine.

Dismember can be used to search memory of all processes it has access to, so running it as root is the most effective method.

Commands are also included to list processes, explore process status and related information, draw process trees, and more…

Main Commands
CommandDescriptiongrepSearch process memory for a given string or regexscanSearch process memory for a set of predefined secret patterns
Utility Commands
CommandDescriptionfilesShow a list of files being accessed by a processfindFind a PID given a process name. If multiple processes match, the first one is returned.infoShow information about a processkernelShow information about the kernelkillKill a process (or processes) using SIGKILLlistList all processes currently available on the systemresumeResume a suspended process using SIGCONTsuspendSuspend a process using SIGSTOP (use ‘dismember resume’ to leave suspension)treeShow a tree diagram of a process and all children (defaults to PID 1).
Installation

Grab a binary from the latest release and add it to your path.

Usage Examples

Search for a pattern in a process by PID
# search memory owned by process 1234
dismember grep -p 1234 'the password is .*'
Search for a pattern in a process by name
# search memory owned by processes named "nginx" for a login form submission
dismember grep -n nginx 'username=liamg&password=.*'
Search for a pattern across all processes
# find a github api token across all processes
dismember grep 'gh[pousr]_[0-9a-zA-Z]{36}'
Search for secrets in memory across all processes
# search all accessible memory for common secrets
dismember scan

Click Here To Download

___________________________
@hacking_Attack
@Hacking_Video

Root detection analysis and bypass — Rootbeer Library |Beginner | Part 1
https://medium.com/@0xashish/root-detection-analysis-and-bypass-rootbeer-library-beginner-part-1-b642a41e38f2?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

For those who don’t know, I am Ashish (co-founder of Bluefire redteam), We engage with many real-world cybersecurity challenges, and this…Continue reading on Medium » (https://medium.com/@0xashish/root-detection-analysis-and-bypass-rootbeer-library-beginner-part-1-b642a41e38f2?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Root detection analysis and bypass — Rootbeer Library |Beginner | Part 1

For those who don’t know, I am Ashish (co-founder of Bluefire redteam), We engage with many real-world cybersecurity challenges, and this…Continue reading on Medium »
Read more...

hacking: security in practice
Check out my walk through for Hacktoria's Lost at Sea CTF

submitted by /u/s1l1c0np1r4t3
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
A new cyber taskforce will supposedly ‘hack the hackers’ behind the Medibank breach.

https://cdn-images-1.medium.com/max/2560/0*8-3CI_nqnTdNSA_I.jpg
The Australian government is launching an offensive against cybercriminals, following a data breach that has exposed millions of people’s…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Root detection analysis and bypass — Rootbeer Library |Beginner | Part 1

https://cdn-images-1.medium.com/max/1280/1*r8YfCjvm_uAXtqM8ydq2Vg.png
For those who don’t know, I am Ashish (co-founder of Bluefire redteam), We engage with many real-world cybersecurity challenges, and this…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Defining scopes for bug bounty programs
https://bugbaseindia.medium.com/defining-scopes-for-bug-bounty-programs-7c4c46de7710?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Setting the programme scope is the first stage in developing your programme brief, which you should do if you’ve decided that you and your…Continue reading on Medium » (https://bugbaseindia.medium.com/defining-scopes-for-bug-bounty-programs-7c4c46de7710?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Defining scopes for bug bounty programs

Setting the programme scope is the first stage in developing your programme brief, which you should do if you’ve decided that you and your…Continue reading on Medium »
Read more...

Black Hat Ethical Hacking
AXLocker – a new ransomware that encrypts yours files, and then steals your Discord account

AXLocker – a new ransomware that encrypts yours files, and then steals your Discord accountPost Views: 2 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/09/Patreon.png Subscribe to Patreon to watch this episode.
Reading Time: 3 Minutes The new ‘AXLocker’ ransomware family is not only encrypting victims’ files and demanding a ransom payment but also stealing the Discord accounts of infected users.When a user logs into Discord with their credentials, the platform sends back a user authentication token saved on the computer. This token can then be used to log in as the user or to issue API requests that retrieve information about the associated account.

Threat actors commonly attempt to steal these tokens because they enable them to take over accounts or, even worse, abuse them for further malicious attacks.

As Discord has become the community of choice for NFT platforms and cryptocurrency groups, stealing a moderator token or other verified community member could allow threat actors to conduct scams and steal funds.
See Also: So you want to be a hacker? Complete Offensive Security and Ethical Hacking Course AxLocker is a two-in-one threatResearchers at Cyble recently analyzed a sample of the new AXLocker ransomware and discovered that it not only encrypts files but also steals a victim’s Discord tokens.

As ransomware, there is nothing particularly sophisticated about the malware or the threat actors who use it.

When executed, the ransomware will target certain file extensions and exclude specific folders, as shown in the image below.
https://www.bleepstatic.com/images/news/u/1220909/ransomware/files-types.png
___________________________
@hacking_Attack
@Hacking_Video

romise of your accounts, data, and the communities you are involved in.
Trending: Windows Kerberos authentication breaks after November updates
Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?

If you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com
Source: bleepingcomputer.com Source Link https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Merch.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/11/Images-for-the-News-posts-4-1-300x150.png Google Roulette: Developer console trick can trigger XSS in Chromium browsersNovember 18, 2022
Reading Time: 4 minutes

* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/11/Images-for-the-News-posts-8-1-300x150.png Updated RapperBot malware targets game servers in DDoS attacksNovember 17, 2022
Reading Time: 4 minutes

* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/11/Images-for-the-News-posts-6-1-300x150.png Mastodon users vulnerable to password-stealing attacksNovember 16, 2022
Reading Time: 3 minutes

* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/11/Images-for-the-News-posts-5-300x150.png Windows Kerberos authentication breaks after November updatesNovember 15, 2022
Reading Time: 3 minutes
https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/OffSec-Course.png Offensive Security & Ethical Hacking CourseBegin the learning curve of hacking now!
The post AXLocker – a new ransomware that encrypts yours files, and then steals your Discord account first appeared on Black Hat Ethical Hacking.

___________________________
@hacking_Attack
@Hacking_Video

Email Verification Bypass
https://medium.com/@mr_ayyan/email-verification-bypass-27a6e1fe6593?source=rss------bug_bounty-5

Introduction:Continue reading on Medium » (https://medium.com/@mr_ayyan/email-verification-bypass-27a6e1fe6593?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Email Verification Bypass

Introduction:Continue reading on Medium »
Read more...