Hacking Articles Tips Tricks Videos Tutorials
Photo
hacking: security in practice
Setting up Kali Linux M1 ARM
Just looking for advice from people that maybe a little further down the road than I am. Currently I am setting up Kali on my M1 Macbook air and I do not know if I should set it up to emulate which might be able to handle more applications or if I should just go a head and virtualize so Kali can run a little bit fast. I have zero expreience in Linux so any advice would be great, thanks!
submitted by /u/Jrshaw_1
[link] [comments]
Setting up Kali Linux M1 ARM
Just looking for advice from people that maybe a little further down the road than I am. Currently I am setting up Kali on my M1 Macbook air and I do not know if I should set it up to emulate which might be able to handle more applications or if I should just go a head and virtualize so Kali can run a little bit fast. I have zero expreience in Linux so any advice would be great, thanks!
submitted by /u/Jrshaw_1
[link] [comments]
Hacking Articles Tips Tricks Videos Tutorials
Photo
hacking: security in practice
How do I bypass browser fingerprinting and fraud detection systems online in 2023?
Okay, so I’ve been trying to run Google Ads via the Gologin software. It’s supposed to help mask your browser identity and prevent you from getting blocked and banned on whatever sites you use ‘em on. My problem is that it’s not working for me. All accounts were banned after about 30 minutes and now Google straight up won’t even run the ads. I’ve had the same issue with Multilogin as well. With and without clean proxies that pass tests on Whoer. Any suggestions?
I’ve been using the following with no luck: • Gologin & Multibrowser • Rotating Residential Proxies • made sure browser profile matches my native operating system’s • verified proxy isn’t blacklisted and has low fraud score • verified no DNS leaks
submitted by /u/ThrowAwayAussie6383
[link] [comments]
How do I bypass browser fingerprinting and fraud detection systems online in 2023?
Okay, so I’ve been trying to run Google Ads via the Gologin software. It’s supposed to help mask your browser identity and prevent you from getting blocked and banned on whatever sites you use ‘em on. My problem is that it’s not working for me. All accounts were banned after about 30 minutes and now Google straight up won’t even run the ads. I’ve had the same issue with Multilogin as well. With and without clean proxies that pass tests on Whoer. Any suggestions?
I’ve been using the following with no luck: • Gologin & Multibrowser • Rotating Residential Proxies • made sure browser profile matches my native operating system’s • verified proxy isn’t blacklisted and has low fraud score • verified no DNS leaks
submitted by /u/ThrowAwayAussie6383
[link] [comments]
Hacking Articles Tips Tricks Videos Tutorials
Photo
Black Hat Ethical Hacking
Microsoft: Cuba ransomware hacking Exchange servers via OWASSRF flaw
Microsoft: Cuba ransomware hacking Exchange servers via OWASSRF flawPost Views: 48 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/12/Patreon.png Subscribe to Patreon to watch this episode.
Reading Time: 3 Minutes Microsoft says Cuba ransomware threat actors are hacking Microsoft Exchange servers unpatched against a critical server-side request forgery (SSRF) vulnerability also exploited in Play ransomware attacks.Cloud computing provider Rackspace recently confirmed that Play ransomware used a zero-day exploit dubbed OWASSRF targeting this bug (CVE-2022-41080) to compromise unpatched Microsoft Exchange servers on its network after bypassing ProxyNotShell URL rewrite mitigations.
According to Microsoft, the Play ransomware gang has abused this security flaw since late November 2022. The company advises customers to prioritize CVE-2022-41080 patching to block potential attacks.
Redmond says that this SSRF vulnerability has also been exploited since at least November 17th by another threat group it tracks as DEV-0671 to hack Exchange servers and deploy Cuba ransomware payloads.
Microsoft shared this info in a January update to a private threat analytics report seen by BleepingComputer and available to customers with Microsoft 365 Defender, Microsoft Defender for Endpoint Plan 2, or Microsoft Defender for Business subscriptions.
While Microsoft released security updates to address this SSRF Exchange vulnerability on November 8th and has provided some of its customers with info that ransomware gangs are using the flaw, the advisory is yet to be updated to warn that it’s being exploited in the wild.
See Also: So you want to be a hacker? Complete Offensive Security and Ethical Hacking Course Patch your Exchange servers against OWASSRF attacksThe OWASSRF exploit spotted by CrowdStrike security researchers on Rackspaces’s network was also shared online together with some of Play ransomware’s other malicious tools.
This will make it easier for other cybercriminals to adapt Play ransomware’s tooling for their own purposes or create their own custom CVE-2022-41080 exploits, adding to the urgency of patching the vulnerability as soon as possible.
On Tuesday, Cybersecurity and Infrastructure Security Agency (CISA) also ordered Federal Civilian Executive Branch Agencies (FCEB) agencies to patch their systems against this bug by January 31st and strongly urged all organizations to secure their Exchange servers to thwart exploitation attempts.
Organizations with on-premises Microsoft Exchange servers on their networks should deploy the latest Exchange security updates immediately (with November 2022 as the minimum patch level) or disable Outlook Web Access (OWA) until they can apply CVE-2022-41080 patches.
Trending: Operation OpRussia – Anonymous attacks on Russia
Trending: Digital Forensics Tool: Dangerzone Cuba ransomware behind more than 100 attacks worldwideThe FBI and CISA revealed in a joint security advisory issued last month that the Cuba ransomware gang has raked in more than $60 million in ransoms as of August 2022 after breaching over 100 victims worldwide.
Although this paints a bleak picture, samples submitted by victims to the ID-Ransomware platform analysis show that the gang is not very active, proving that even a somewhat inactive ransomware operation can have a huge impact.
https://www.bleepstatic.com/images/news/u/1109292/2023/Cuba%20ransomware%20ID-Ransomware%20sample%20submissions.png
<figcaptionCuba ransomware sample submissions (ID-Ransomware)
Another FBI advisory from December 2021 warned that the ransomware group had compromised a[...]
Microsoft: Cuba ransomware hacking Exchange servers via OWASSRF flaw
Microsoft: Cuba ransomware hacking Exchange servers via OWASSRF flawPost Views: 48 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/12/Patreon.png Subscribe to Patreon to watch this episode.
Reading Time: 3 Minutes Microsoft says Cuba ransomware threat actors are hacking Microsoft Exchange servers unpatched against a critical server-side request forgery (SSRF) vulnerability also exploited in Play ransomware attacks.Cloud computing provider Rackspace recently confirmed that Play ransomware used a zero-day exploit dubbed OWASSRF targeting this bug (CVE-2022-41080) to compromise unpatched Microsoft Exchange servers on its network after bypassing ProxyNotShell URL rewrite mitigations.
According to Microsoft, the Play ransomware gang has abused this security flaw since late November 2022. The company advises customers to prioritize CVE-2022-41080 patching to block potential attacks.
Redmond says that this SSRF vulnerability has also been exploited since at least November 17th by another threat group it tracks as DEV-0671 to hack Exchange servers and deploy Cuba ransomware payloads.
Microsoft shared this info in a January update to a private threat analytics report seen by BleepingComputer and available to customers with Microsoft 365 Defender, Microsoft Defender for Endpoint Plan 2, or Microsoft Defender for Business subscriptions.
While Microsoft released security updates to address this SSRF Exchange vulnerability on November 8th and has provided some of its customers with info that ransomware gangs are using the flaw, the advisory is yet to be updated to warn that it’s being exploited in the wild.
See Also: So you want to be a hacker? Complete Offensive Security and Ethical Hacking Course Patch your Exchange servers against OWASSRF attacksThe OWASSRF exploit spotted by CrowdStrike security researchers on Rackspaces’s network was also shared online together with some of Play ransomware’s other malicious tools.
This will make it easier for other cybercriminals to adapt Play ransomware’s tooling for their own purposes or create their own custom CVE-2022-41080 exploits, adding to the urgency of patching the vulnerability as soon as possible.
On Tuesday, Cybersecurity and Infrastructure Security Agency (CISA) also ordered Federal Civilian Executive Branch Agencies (FCEB) agencies to patch their systems against this bug by January 31st and strongly urged all organizations to secure their Exchange servers to thwart exploitation attempts.
Organizations with on-premises Microsoft Exchange servers on their networks should deploy the latest Exchange security updates immediately (with November 2022 as the minimum patch level) or disable Outlook Web Access (OWA) until they can apply CVE-2022-41080 patches.
Trending: Operation OpRussia – Anonymous attacks on Russia
Trending: Digital Forensics Tool: Dangerzone Cuba ransomware behind more than 100 attacks worldwideThe FBI and CISA revealed in a joint security advisory issued last month that the Cuba ransomware gang has raked in more than $60 million in ransoms as of August 2022 after breaching over 100 victims worldwide.
Although this paints a bleak picture, samples submitted by victims to the ID-Ransomware platform analysis show that the gang is not very active, proving that even a somewhat inactive ransomware operation can have a huge impact.
https://www.bleepstatic.com/images/news/u/1109292/2023/Cuba%20ransomware%20ID-Ransomware%20sample%20submissions.png
<figcaptionCuba ransomware sample submissions (ID-Ransomware)
Another FBI advisory from December 2021 warned that the ransomware group had compromised a[...]
Hacking Articles Tips Tricks Videos Tutorials
Black Hat Ethical Hacking Microsoft: Cuba ransomware hacking Exchange servers via OWASSRF flaw Microsoft: Cuba ransomware hacking Exchange servers via OWASSRF flawPost Views: 48 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/202…
t least 49 organizations from U.S. critical infrastructure sectors.
In both advisories, the FBI strongly urged reporting Cuba ransomware attacks to local FBI field offices and asked victims to share related information with their local FBI Cyber Squad to help identify the ransomware gang’s members and the cybercriminals they’re working with.
While not as prolific as Cuba ransomware and although first spotted a lot more recently, in June 2022, Play ransomware has been quite active and has already hit dozens of victims worldwide, including Rackspace, the German H-Hotels hotel chain, the Belgium city of Antwerp, and Argentina’s Judiciary of Córdoba.
Trending: Over 60,000 Exchange servers vulnerable to ProxyNotShell attacks Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?
If you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com
Source: bleepingcomputer.com Source Link https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Merch.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/01/Images-for-the-News-posts-7-300x150.png Cisco warns of auth bypass bug with public exploit in EoL routersJanuary 12, 2023
* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/01/Images-for-the-News-posts-6-1-300x150.png Trojan Puzzle attack trains AI assistants into suggesting malicious codeJanuary 11, 2023
* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/01/Images-for-the-News-posts-5-1-300x150.png GitHub makes it easier to scan your code for vulnerabilitiesJanuary 10, 2023
* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/01/Images-for-the-News-posts-4-1-300x150.png Malicious PyPi packages create CloudFlare Tunnels to bypass firewallsJanuary 9, 2023
https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/OffSec-Course.png Offensive Security & Ethical Hacking CourseBegin the learning curve of hacking now!
The post Microsoft: Cuba ransomware hacking Exchange servers via OWASSRF flaw first appeared on Black Hat Ethical Hacking.
In both advisories, the FBI strongly urged reporting Cuba ransomware attacks to local FBI field offices and asked victims to share related information with their local FBI Cyber Squad to help identify the ransomware gang’s members and the cybercriminals they’re working with.
While not as prolific as Cuba ransomware and although first spotted a lot more recently, in June 2022, Play ransomware has been quite active and has already hit dozens of victims worldwide, including Rackspace, the German H-Hotels hotel chain, the Belgium city of Antwerp, and Argentina’s Judiciary of Córdoba.
Trending: Over 60,000 Exchange servers vulnerable to ProxyNotShell attacks Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?
If you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com
Source: bleepingcomputer.com Source Link https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Merch.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/01/Images-for-the-News-posts-7-300x150.png Cisco warns of auth bypass bug with public exploit in EoL routersJanuary 12, 2023
* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/01/Images-for-the-News-posts-6-1-300x150.png Trojan Puzzle attack trains AI assistants into suggesting malicious codeJanuary 11, 2023
* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/01/Images-for-the-News-posts-5-1-300x150.png GitHub makes it easier to scan your code for vulnerabilitiesJanuary 10, 2023
* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/01/Images-for-the-News-posts-4-1-300x150.png Malicious PyPi packages create CloudFlare Tunnels to bypass firewallsJanuary 9, 2023
https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/OffSec-Course.png Offensive Security & Ethical Hacking CourseBegin the learning curve of hacking now!
The post Microsoft: Cuba ransomware hacking Exchange servers via OWASSRF flaw first appeared on Black Hat Ethical Hacking.
Clear communication is crucial: why writing effective vulnerability reports matters
First, let’s address the question of why it is necessary to write a clear report. A clear report is essential for effective communication…Continue reading on InfoSec Write-ups »
Read more...
First, let’s address the question of why it is necessary to write a clear report. A clear report is essential for effective communication…Continue reading on InfoSec Write-ups »
Read more...
Strange 2FA Misconfiguration
Hey guys I am back again with another interesting bug bounty writeup.Continue reading on InfoSec Write-ups »
Read more...
Hey guys I am back again with another interesting bug bounty writeup.Continue reading on InfoSec Write-ups »
Read more...
my mobile is hacked
https://www.reddit.com/r/Pentesting/comments/10aqtz4/my_mobile_is_hacked/
<!-- SC_OFF -->Hi i think my mobile is hacked .. My friends are knowing my search history and everything...like location too.. They are including these search terms in conversations subtly so I cant question directly... Can't find a legit proof... I don't know if this is for fun or serious...could anyone help...😓 <!-- SC_ON --> submitted by /u/Rough-Delivery8549 (https://www.reddit.com/user/Rough-Delivery8549)
[link] (https://www.reddit.com/r/Pentesting/comments/10aqtz4/my_mobile_is_hacked/) [comments] (https://www.reddit.com/r/Pentesting/comments/10aqtz4/my_mobile_is_hacked/)
https://www.reddit.com/r/Pentesting/comments/10aqtz4/my_mobile_is_hacked/
<!-- SC_OFF -->Hi i think my mobile is hacked .. My friends are knowing my search history and everything...like location too.. They are including these search terms in conversations subtly so I cant question directly... Can't find a legit proof... I don't know if this is for fun or serious...could anyone help...😓 <!-- SC_ON --> submitted by /u/Rough-Delivery8549 (https://www.reddit.com/user/Rough-Delivery8549)
[link] (https://www.reddit.com/r/Pentesting/comments/10aqtz4/my_mobile_is_hacked/) [comments] (https://www.reddit.com/r/Pentesting/comments/10aqtz4/my_mobile_is_hacked/)
Clear communication is crucial: why writing effective vulnerability reports matters
https://infosecwriteups.com/clear-communication-is-crucial-why-writing-effective-vulnerability-reports-matters-5f989ee2e401?source=rss------bug_bounty-5
https://infosecwriteups.com/clear-communication-is-crucial-why-writing-effective-vulnerability-reports-matters-5f989ee2e401?source=rss------bug_bounty-5
First, let’s address the question of why it is necessary to write a clear report. A clear report is essential for effective communication…Continue reading on InfoSec Write-ups » (https://infosecwriteups.com/clear-communication-is-crucial-why-writing-effective-vulnerability-reports-matters-5f989ee2e401?source=rss------bug_bounty-5)
Strange 2FA Misconfiguration
https://infosecwriteups.com/strange-2fa-misconfiguration-ff1d375c447e?source=rss------bug_bounty-5
https://infosecwriteups.com/strange-2fa-misconfiguration-ff1d375c447e?source=rss------bug_bounty-5
Hey guys I am back again with another interesting bug bounty writeup.Continue reading on InfoSec Write-ups » (https://infosecwriteups.com/strange-2fa-misconfiguration-ff1d375c447e?source=rss------bug_bounty-5)