Hacking Articles Tips Tricks Videos Tutorials
Photo
hacking: security in practice
Ransomware on the rise; How to protect yourself?
submitted by /u/No_Arachnid6406
[link] [comments]
Ransomware on the rise; How to protect yourself?
submitted by /u/No_Arachnid6406
[link] [comments]
Hacking Articles Tips Tricks Videos Tutorials
Photo
hacking: security in practice
how to hack and see other people's comments on tiktok?
i'm trying to see my boyfriends comments on tiktok without just coming across a video that he commented on my for you page. i searched his username on tiktok to see if anyone responded to his comment with a video, but there were none. im just trying to view his comments or find someone who can so i can see what he's commenting on others posts. maybe this is a huge red flag on my end, im just very insecure and want to find his comments and see what he's saying on other videos that i'm not seeing myself on tiktok. or even seeing his likes somehow while he has them set private yk? ik this is probably difficult and would have to pay someone maybe, but i just want to see his comments and likes for free without being scammed. it probably also seems selfish that i dont want to pay someone to do this dirty work, but i'm a broke 18 year old who can barely afford rent rn. any help is appreciative and i would rather not read hate comments telling me stuff i already know. thanks
submitted by /u/aktrin03
[link] [comments]
how to hack and see other people's comments on tiktok?
i'm trying to see my boyfriends comments on tiktok without just coming across a video that he commented on my for you page. i searched his username on tiktok to see if anyone responded to his comment with a video, but there were none. im just trying to view his comments or find someone who can so i can see what he's commenting on others posts. maybe this is a huge red flag on my end, im just very insecure and want to find his comments and see what he's saying on other videos that i'm not seeing myself on tiktok. or even seeing his likes somehow while he has them set private yk? ik this is probably difficult and would have to pay someone maybe, but i just want to see his comments and likes for free without being scammed. it probably also seems selfish that i dont want to pay someone to do this dirty work, but i'm a broke 18 year old who can barely afford rent rn. any help is appreciative and i would rather not read hate comments telling me stuff i already know. thanks
submitted by /u/aktrin03
[link] [comments]
Hacking Articles Tips Tricks Videos Tutorials
Photo
hacking: security in practice
vulnerability compensation
After reading a post with someone having found a vulnerability and not getting a reply from the business it got me thinking.
Im currently building software with the aim to bootstrap the business rather than go venture cap. This means an incredibly tight budget at the start. While im quite a way off launching i do wonder what I'd do if someone found a vuln id missed. As much as I'd love to think im mr robot, I'll disclose im not and likely will slip up at some point.
My question is if cash isnt an option, what would YOU see as a suitable reward for highlighting a bug? Is recognition and a bug reporters page enough for your cv? It sounds piss poor, maybe someone with creativity can help.
It's business saas so unless the bug hunter happens to also own a business and care about the environment its unlikely a free subscription would be useful.
Im also assuming here that it would be entirely out of budget. If someone asked for under 50/maybe 100 it would be fine given some time.
submitted by /u/dev_life
[link] [comments]
vulnerability compensation
After reading a post with someone having found a vulnerability and not getting a reply from the business it got me thinking.
Im currently building software with the aim to bootstrap the business rather than go venture cap. This means an incredibly tight budget at the start. While im quite a way off launching i do wonder what I'd do if someone found a vuln id missed. As much as I'd love to think im mr robot, I'll disclose im not and likely will slip up at some point.
My question is if cash isnt an option, what would YOU see as a suitable reward for highlighting a bug? Is recognition and a bug reporters page enough for your cv? It sounds piss poor, maybe someone with creativity can help.
It's business saas so unless the bug hunter happens to also own a business and care about the environment its unlikely a free subscription would be useful.
Im also assuming here that it would be entirely out of budget. If someone asked for under 50/maybe 100 it would be fine given some time.
submitted by /u/dev_life
[link] [comments]
Subdomain enumeration is the process of identifying all subdomains for a
given domain. This can be useful for a variety of purposes, such…Continue reading on Medium » (https://medium.com/@rajeevranjancom/subdomain-enumeration-2d5c80a14d32?source=rss------bug_bounty-5)
given domain. This can be useful for a variety of purposes, such…Continue reading on Medium » (https://medium.com/@rajeevranjancom/subdomain-enumeration-2d5c80a14d32?source=rss------bug_bounty-5)
Pass The eWPT Exam on Your First Attempt Using Free Resources!
https://www.reddit.com/r/Pentesting/comments/zkqws7/pass_the_ewpt_exam_on_your_first_attempt_using/
<!-- SC_OFF -->Hey Everyone! I wanted to share another article I wrote, sharing the resources that I used to help me pass my eWPT exam on my first attempt. All the resources are free, including the labs. I hope that this can provide value to some of you looking for a centralized/narrow repo of resources to help you prepare! https://grumpz.net/pass-the-ewpt-exam-in-2023-using-free-resources-on-your-first-attempt <!-- SC_ON --> submitted by /u/grumpzsux (https://www.reddit.com/user/grumpzsux)
[link] (https://www.reddit.com/r/Pentesting/comments/zkqws7/pass_the_ewpt_exam_on_your_first_attempt_using/) [comments] (https://www.reddit.com/r/Pentesting/comments/zkqws7/pass_the_ewpt_exam_on_your_first_attempt_using/)
https://www.reddit.com/r/Pentesting/comments/zkqws7/pass_the_ewpt_exam_on_your_first_attempt_using/
<!-- SC_OFF -->Hey Everyone! I wanted to share another article I wrote, sharing the resources that I used to help me pass my eWPT exam on my first attempt. All the resources are free, including the labs. I hope that this can provide value to some of you looking for a centralized/narrow repo of resources to help you prepare! https://grumpz.net/pass-the-ewpt-exam-in-2023-using-free-resources-on-your-first-attempt <!-- SC_ON --> submitted by /u/grumpzsux (https://www.reddit.com/user/grumpzsux)
[link] (https://www.reddit.com/r/Pentesting/comments/zkqws7/pass_the_ewpt_exam_on_your_first_attempt_using/) [comments] (https://www.reddit.com/r/Pentesting/comments/zkqws7/pass_the_ewpt_exam_on_your_first_attempt_using/)
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Cybersecurity Prologue- III
https://cdn-images-1.medium.com/max/2600/0*Vihc8WMR9sysTNyP
Chapter one- “Core Security Principles’’ “cryptography” and “Cyber Attacks” in cybersecurity will amaze you
Continue reading on Bootcamp »
Cybersecurity Prologue- III
https://cdn-images-1.medium.com/max/2600/0*Vihc8WMR9sysTNyP
Chapter one- “Core Security Principles’’ “cryptography” and “Cyber Attacks” in cybersecurity will amaze you
Continue reading on Bootcamp »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Black Hat Ethical Hacking
New Python malware backdoors VMware ESXi servers for remote access
New Python malware backdoors VMware ESXi servers for remote accessPost Views: 78 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/12/Patreon.png Subscribe to Patreon to watch this episode.
Reading Time: 3 Minutes A previously undocumented Python backdoor targeting VMware ESXi servers has been spotted, enabling hackers to execute commands remotely on a compromised system.VMware ESXi is a virtualization platform commonly used in the enterprise to host numerous servers on one device while using CPU and memory resources more effectively.
The new backdoor was discovered by Juniper Networks researchers, who found the backdoor on a VMware ESXi server. However, they could not determine how the server was compromised due to limited log retention.
They believe the server may have been compromised using the CVE-2019-5544 and CVE-2020-3992 vulnerabilities in ESXi’s OpenSLP service.
While the malware is technically capable of targeting Linux and Unix systems, too, Juniper’s analysts found multiple indications it was designed for attacks against ESXi.
See Also: So you want to be a hacker? Complete Offensive Security and Ethical Hacking Course Backdoor operationThe new python backdoor adds seven lines inside “/etc/rc.local.d/local.sh,” one of the few ESXi files that survive between reboots and is executed at startup.
Usually, that file is empty, apart from some advisory comments and an exit statement.
https://www.bleepstatic.com/images/news/u/1220909/Code%20and%20Details/lines.png
<figcaptionAdditional lines added on ESXi file (Juniper Networks)
One of those lines launches a Python script saved as “/store/packages/vmtools.py,” in a directory that stores VM disk images, logs, and more.
The script’s name and location make Juniper Networks believe that the malware operators intend to target VMware ESXi servers specifically.
“While the Python script used in this attack is cross-platform and can be used with little or no modification on Linux or other UNIX-like systems, there are several indications that this attack was designed specifically to target ESXi,” explains Juniper Networks’ report.
“The name of the file and its location, /store/packages/vmtools.py, was chosen to raise little suspicion on a virtualization host.”
“The file begins with a VMware copyright consistent with publicly available examples and is taken character-for-character from an existing Python file provided by VMware.”
This script launches a web server that accepts password-protected POST requests from the remote threat actors. These requests can carry a base-64 encoded command payload or launch a reverse shell on the host.
The reverse shell makes the compromised server initiate the connection with the threat actor, a technique that often helps bypass firewall restrictions or works around limited network connectivity.
One of the threat actors’ actions observed by Juniper’s analysts was to change the ESXi reverse HTTP proxy configuration to allow remote access to communicate with the planted webserver.
Because the file used for setting this new configuration, “/etc/vmware/rhttpproxy/endpoints.conf,” is also backed up and restored after reboot, any modifications on it are persistent.
Trending: Exploit XSS Injections in a one-line powerful Technique Trending: Offensive Security Tool: Pycrypt MitigatingTo determine if this backdoor has impacted your ESXi servers, check for the existence of the files mentioned above and the additional lines in the “local.sh” file.
All configuration files that persist reboots should be scrutinized for suspicious changes and reversed to the correct [...]
New Python malware backdoors VMware ESXi servers for remote access
New Python malware backdoors VMware ESXi servers for remote accessPost Views: 78 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/12/Patreon.png Subscribe to Patreon to watch this episode.
Reading Time: 3 Minutes A previously undocumented Python backdoor targeting VMware ESXi servers has been spotted, enabling hackers to execute commands remotely on a compromised system.VMware ESXi is a virtualization platform commonly used in the enterprise to host numerous servers on one device while using CPU and memory resources more effectively.
The new backdoor was discovered by Juniper Networks researchers, who found the backdoor on a VMware ESXi server. However, they could not determine how the server was compromised due to limited log retention.
They believe the server may have been compromised using the CVE-2019-5544 and CVE-2020-3992 vulnerabilities in ESXi’s OpenSLP service.
While the malware is technically capable of targeting Linux and Unix systems, too, Juniper’s analysts found multiple indications it was designed for attacks against ESXi.
See Also: So you want to be a hacker? Complete Offensive Security and Ethical Hacking Course Backdoor operationThe new python backdoor adds seven lines inside “/etc/rc.local.d/local.sh,” one of the few ESXi files that survive between reboots and is executed at startup.
Usually, that file is empty, apart from some advisory comments and an exit statement.
https://www.bleepstatic.com/images/news/u/1220909/Code%20and%20Details/lines.png
<figcaptionAdditional lines added on ESXi file (Juniper Networks)
One of those lines launches a Python script saved as “/store/packages/vmtools.py,” in a directory that stores VM disk images, logs, and more.
The script’s name and location make Juniper Networks believe that the malware operators intend to target VMware ESXi servers specifically.
“While the Python script used in this attack is cross-platform and can be used with little or no modification on Linux or other UNIX-like systems, there are several indications that this attack was designed specifically to target ESXi,” explains Juniper Networks’ report.
“The name of the file and its location, /store/packages/vmtools.py, was chosen to raise little suspicion on a virtualization host.”
“The file begins with a VMware copyright consistent with publicly available examples and is taken character-for-character from an existing Python file provided by VMware.”
This script launches a web server that accepts password-protected POST requests from the remote threat actors. These requests can carry a base-64 encoded command payload or launch a reverse shell on the host.
The reverse shell makes the compromised server initiate the connection with the threat actor, a technique that often helps bypass firewall restrictions or works around limited network connectivity.
One of the threat actors’ actions observed by Juniper’s analysts was to change the ESXi reverse HTTP proxy configuration to allow remote access to communicate with the planted webserver.
Because the file used for setting this new configuration, “/etc/vmware/rhttpproxy/endpoints.conf,” is also backed up and restored after reboot, any modifications on it are persistent.
Trending: Exploit XSS Injections in a one-line powerful Technique Trending: Offensive Security Tool: Pycrypt MitigatingTo determine if this backdoor has impacted your ESXi servers, check for the existence of the files mentioned above and the additional lines in the “local.sh” file.
All configuration files that persist reboots should be scrutinized for suspicious changes and reversed to the correct [...]
Hacking Articles Tips Tricks Videos Tutorials
Black Hat Ethical Hacking New Python malware backdoors VMware ESXi servers for remote access New Python malware backdoors VMware ESXi servers for remote accessPost Views: 78 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/12/Patreon.png…
settings.
Finally, admins should restrict all incoming network connections to trusted hosts, and available security updates that address exploits used for initial compromise should be applied as soon as possible.
Trending: Kali Linux 2022.4 – New Release adds 6 new tools, Kali NetHunter Update, Azure Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?
If you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com
Source: bleepingcomputer.com Source Link https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Merch.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/12/1-300x150.png JSON syntax hack allowed SQL injection payloads to be smuggled past WAFsDecember 12, 2022
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/12/Images-for-the-News-posts-21-300x150.png Cisco discloses high-severity IP phone bug with exploit codeDecember 9, 2022
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/12/Images-for-the-News-posts-20-300x150.png New Zerobot malware has 21 exploits for BIG-IP, Zyxel, D-Link devicesDecember 8, 2022
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/12/Images-for-the-News-posts-19-300x150.png Samsung Galaxy S22 hacked twice on first day of Pwn2Own TorontoDecember 7, 2022
https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/OffSec-Course.png Offensive Security & Ethical Hacking CourseBegin the learning curve of hacking now!
The post New Python malware backdoors VMware ESXi servers for remote access first appeared on Black Hat Ethical Hacking.
Finally, admins should restrict all incoming network connections to trusted hosts, and available security updates that address exploits used for initial compromise should be applied as soon as possible.
Trending: Kali Linux 2022.4 – New Release adds 6 new tools, Kali NetHunter Update, Azure Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?
If you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com
Source: bleepingcomputer.com Source Link https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Merch.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/12/1-300x150.png JSON syntax hack allowed SQL injection payloads to be smuggled past WAFsDecember 12, 2022
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/12/Images-for-the-News-posts-21-300x150.png Cisco discloses high-severity IP phone bug with exploit codeDecember 9, 2022
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/12/Images-for-the-News-posts-20-300x150.png New Zerobot malware has 21 exploits for BIG-IP, Zyxel, D-Link devicesDecember 8, 2022
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/12/Images-for-the-News-posts-19-300x150.png Samsung Galaxy S22 hacked twice on first day of Pwn2Own TorontoDecember 7, 2022
https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/OffSec-Course.png Offensive Security & Ethical Hacking CourseBegin the learning curve of hacking now!
The post New Python malware backdoors VMware ESXi servers for remote access first appeared on Black Hat Ethical Hacking.
Hacking Articles Tips Tricks Videos Tutorials
Photo
hacking: security in practice
View Private Tiktoks
Does anybody know an exploit to view the TikTok’s of private users? Thanks for any help!
[link] [comments]
View Private Tiktoks
Does anybody know an exploit to view the TikTok’s of private users? Thanks for any help!
[link] [comments]
certs and skills for pentester?
https://www.reddit.com/r/Pentesting/comments/zks7km/certs_and_skills_for_pentester/
<!-- SC_OFF -->I have sec+ and ceh, anything else I should learn and obtain ? <!-- SC_ON --> submitted by /u/Entire-Flight-8938 (https://www.reddit.com/user/Entire-Flight-8938)
[link] (https://www.reddit.com/r/Pentesting/comments/zks7km/certs_and_skills_for_pentester/) [comments] (https://www.reddit.com/r/Pentesting/comments/zks7km/certs_and_skills_for_pentester/)
https://www.reddit.com/r/Pentesting/comments/zks7km/certs_and_skills_for_pentester/
<!-- SC_OFF -->I have sec+ and ceh, anything else I should learn and obtain ? <!-- SC_ON --> submitted by /u/Entire-Flight-8938 (https://www.reddit.com/user/Entire-Flight-8938)
[link] (https://www.reddit.com/r/Pentesting/comments/zks7km/certs_and_skills_for_pentester/) [comments] (https://www.reddit.com/r/Pentesting/comments/zks7km/certs_and_skills_for_pentester/)