Hacking Articles Tips Tricks Videos Tutorials
Photo
Black Hat Ethical Hacking
GoBruteforcer: New Golang-based Botnet Malware Scans for and Infects Web Servers
GoBruteforcer: New Golang-based Botnet Malware Scans for and Infects Web ServersPost Views: 47 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/12/Patreon.png Subscribe to Patreon to watch this episode.
Reading Time: 3 Minutes How GoBruteforcer works and what devices it targetsCybersecurity researchers have uncovered a new Golang-based botnet malware called GoBruteforcer that targets web servers running phpMyAdmin, MySQL, FTP, and Postgres services. The malware has been identified by Palo Alto Networks’ Unit 42, and it is compatible with x86, x64, and ARM architectures. GoBruteforcer uses brute force tactics to gain access to vulnerable *nix devices by exploiting weak or default passwords.
The malware scans for phpMyAdmin, MySQL, FTP, and Postgres services on each targeted IP address. Once it detects an open port accepting connections, it attempts to log in using hard-coded credentials. GoBruteforcer deploys an IRC bot on compromised phpMyAdmin systems or a PHP web shell on servers running other targeted services, enabling it to reach out to its command-and-control server for further instructions.
See Also: So you want to be a hacker? Offensive Security, Bug Bounty Courses GoBruteforcer’s ongoing development and potential for future attacksGoBruteforcer uses a multiscan module to find potential victims within a Classless Inter-Domain Routing (CIDR), giving it a broad range of targets to infiltrate networks. Rather than targeting a single IP, the malware uses CIDR block scanning to access a diverse range of hosts on various IP addresses, increasing the reach of the attack.
Unit42 warns that GoBruteforcer is likely under active development, with its operators expected to adapt their tactics and the malware’s capabilities for targeting web servers and staying ahead of security defenses. The malware has already been seen deploying various types of malware as payloads, including coinminers.
Trending: Major Cyber Attacks of 2022
Trending: Offensive Security Tool: CrackQL The need to be up-to-date with the latest security measuresThe discovery of GoBruteforcer highlights the importance of strong passwords and regular security audits to prevent malicious attacks on web servers. It also underscores the need for organizations to remain vigilant and up-to-date with the latest security measures to protect against evolving threats.
Trending: Proof-of-concept for critical Microsoft Word vulnerability published
Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?
If you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com
Source: bleepingcomputer.com Source Link https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Merch.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Images-for-the-News-posts-2-1-300x150.png AT&T Data Breach: 9 Million Customers Affected by Marketing Vendor HackMarch 10, 2023
* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Images-for-the-News-posts-1-1-300x150.png Bitwarden Autofill Feature Can Expose Passwords to Malicious AttackersMarch 9, 2023
* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Images-for-the-News-posts-300x150.png Sharp Panda Strikes Again: Advanced Tactics in Latest Espionage CampaignMarch 8, 2023
* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Images-for-[...]
GoBruteforcer: New Golang-based Botnet Malware Scans for and Infects Web Servers
GoBruteforcer: New Golang-based Botnet Malware Scans for and Infects Web ServersPost Views: 47 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/12/Patreon.png Subscribe to Patreon to watch this episode.
Reading Time: 3 Minutes How GoBruteforcer works and what devices it targetsCybersecurity researchers have uncovered a new Golang-based botnet malware called GoBruteforcer that targets web servers running phpMyAdmin, MySQL, FTP, and Postgres services. The malware has been identified by Palo Alto Networks’ Unit 42, and it is compatible with x86, x64, and ARM architectures. GoBruteforcer uses brute force tactics to gain access to vulnerable *nix devices by exploiting weak or default passwords.
The malware scans for phpMyAdmin, MySQL, FTP, and Postgres services on each targeted IP address. Once it detects an open port accepting connections, it attempts to log in using hard-coded credentials. GoBruteforcer deploys an IRC bot on compromised phpMyAdmin systems or a PHP web shell on servers running other targeted services, enabling it to reach out to its command-and-control server for further instructions.
See Also: So you want to be a hacker? Offensive Security, Bug Bounty Courses GoBruteforcer’s ongoing development and potential for future attacksGoBruteforcer uses a multiscan module to find potential victims within a Classless Inter-Domain Routing (CIDR), giving it a broad range of targets to infiltrate networks. Rather than targeting a single IP, the malware uses CIDR block scanning to access a diverse range of hosts on various IP addresses, increasing the reach of the attack.
Unit42 warns that GoBruteforcer is likely under active development, with its operators expected to adapt their tactics and the malware’s capabilities for targeting web servers and staying ahead of security defenses. The malware has already been seen deploying various types of malware as payloads, including coinminers.
Trending: Major Cyber Attacks of 2022
Trending: Offensive Security Tool: CrackQL The need to be up-to-date with the latest security measuresThe discovery of GoBruteforcer highlights the importance of strong passwords and regular security audits to prevent malicious attacks on web servers. It also underscores the need for organizations to remain vigilant and up-to-date with the latest security measures to protect against evolving threats.
Trending: Proof-of-concept for critical Microsoft Word vulnerability published
Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?
If you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com
Source: bleepingcomputer.com Source Link https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Merch.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Images-for-the-News-posts-2-1-300x150.png AT&T Data Breach: 9 Million Customers Affected by Marketing Vendor HackMarch 10, 2023
* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Images-for-the-News-posts-1-1-300x150.png Bitwarden Autofill Feature Can Expose Passwords to Malicious AttackersMarch 9, 2023
* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Images-for-the-News-posts-300x150.png Sharp Panda Strikes Again: Advanced Tactics in Latest Espionage CampaignMarch 8, 2023
* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Images-for-[...]
Hacking Articles Tips Tricks Videos Tutorials
Black Hat Ethical Hacking GoBruteforcer: New Golang-based Botnet Malware Scans for and Infects Web Servers GoBruteforcer: New Golang-based Botnet Malware Scans for and Infects Web ServersPost Views: 47 Premium Contenthttps://www.blackhatethicalhacking.com/wp…
the-News-posts-5-300x150.png Proof-of-concept for critical Microsoft Word vulnerability publishedMarch 7, 2023 https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/OffSec-Course.png Offensive Security & Ethical Hacking CourseBegin the learning curve of hacking now! https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Solutions.png Information Security SolutionsFind out how Pentesting Services can help you.
The post GoBruteforcer: New Golang-based Botnet Malware Scans for and Infects Web Servers first appeared on Black Hat Ethical Hacking.
The post GoBruteforcer: New Golang-based Botnet Malware Scans for and Infects Web Servers first appeared on Black Hat Ethical Hacking.
How I Earned $150 for Reporting a Security Flaw
Hey everyone!Continue reading on Medium »
Read more...
Hey everyone!Continue reading on Medium »
Read more...
Hacking Articles Tips Tricks Videos Tutorials
Photo
Kali Linux Tutorials
Reverseip_Py : Domain Parser For IPAddress.com Reverse IP Lookup
Reverseip_py is a Domain parser for IPAddress.com Reverse IP Lookup.
Written in Python 3.
What is Reverse IP?
Reverse IP refers to the process of looking up all the domain names that are hosted on a particular IP address. This can be useful for a variety of reasons, such as identifying all the websites that are hosted on a shared hosting server or finding out which websites are hosted on the same IP address as a particular website.
Requirements
* beautifulsoup4
* requests
* urllib3
Tested on Debian with Python 3.10.8
Install Requirements
How to Use
Help Menu
Reverse IP
Disclaimer
Any actions and or activities related to the material contained within this tool is solely your responsibility.The misuse of the information in this tool can result in criminal charges brought against the persons in question.
Note: modifications, changes, or changes to this code can be accepted, however, every public release that uses this code must be approved by author of this tool (yuyudhn).
Click Here To Download
Reverseip_Py : Domain Parser For IPAddress.com Reverse IP Lookup
Reverseip_py is a Domain parser for IPAddress.com Reverse IP Lookup.
Written in Python 3.
What is Reverse IP?
Reverse IP refers to the process of looking up all the domain names that are hosted on a particular IP address. This can be useful for a variety of reasons, such as identifying all the websites that are hosted on a shared hosting server or finding out which websites are hosted on the same IP address as a particular website.
Requirements
* beautifulsoup4
* requests
* urllib3
Tested on Debian with Python 3.10.8
Install Requirements
pip3 install -r requirements.txt How to Use
Help Menu
python3 reverseip.py -h
usage: reverseip.py [-h] [-t target.com]
options:
-h, --help show this help message and exit
-t target.com, --target target.com
Target domain or IP Reverse IP
python3 reverseip.py -t google.com Disclaimer
Any actions and or activities related to the material contained within this tool is solely your responsibility.The misuse of the information in this tool can result in criminal charges brought against the persons in question.
Note: modifications, changes, or changes to this code can be accepted, however, every public release that uses this code must be approved by author of this tool (yuyudhn).
Click Here To Download
Exploiting Paypal Payment Gateway Results In Free Shopping
Hello everyone, I’m Aswin ,Security Researcher from Kerala,India.Continue reading on Medium »
Read more...
Hello everyone, I’m Aswin ,Security Researcher from Kerala,India.Continue reading on Medium »
Read more...
Mastering Google Dorks: Top Search Queries Every Hacker Should Know
As the world becomes more reliant on technology, it’s no surprise that cyber attacks are on the rise. Hackers are constantly finding new…Continue reading on Medium »
Read more...
As the world becomes more reliant on technology, it’s no surprise that cyber attacks are on the rise. Hackers are constantly finding new…Continue reading on Medium »
Read more...
How to Choose Your Pentest Partner
Starting this Article from the linesContinue reading on Medium »
Read more...
Starting this Article from the linesContinue reading on Medium »
Read more...
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
OneNote — Malware Delivery
TLDR — OneNote has recently been abused significantly to deliver malware onto unsuspecting victims as it begins to gain popularity in…
Continue reading on Medium »
OneNote — Malware Delivery
TLDR — OneNote has recently been abused significantly to deliver malware onto unsuspecting victims as it begins to gain popularity in…
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
The Dangers of Windows Shortcut LNK File
TLDR — Shortcut LNK files are often abused by malicious threat actor to deliver malware onto unsuspecting victims.
Continue reading on Medium »
The Dangers of Windows Shortcut LNK File
TLDR — Shortcut LNK files are often abused by malicious threat actor to deliver malware onto unsuspecting victims.
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
How to Choose Your Pentest Partner
https://cdn-images-1.medium.com/max/619/1*Uoxz2q5vUeQIi-kHmlx1tw.png
Starting this Article from the lines
Continue reading on Medium »
How to Choose Your Pentest Partner
https://cdn-images-1.medium.com/max/619/1*Uoxz2q5vUeQIi-kHmlx1tw.png
Starting this Article from the lines
Continue reading on Medium »