Dark Reading: Attacks/Breaches
3 Ways Anti-Vaxxers Will Undercut Security With Misinformation

Misinformation campaigns thrive on inequality of knowledge, which bad actors use to drive a wedge between communities.

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
what happened to hack forums?

Does someone know why I'm getting error 503 or something like that?

submitted by /u/TomerGamerTV
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Chromebook shell user info?

Can I user crosh to get the information of users profile on our chromebook? Such as password info?

submitted by /u/WhiteWolf0908
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
The Full Story of the Stunning RSA Hack Can Finally Be Told

https://external-preview.redd.it/fVRv6uFURBYZFYhaXWT_8Fnwyp0lcyt3MgX98Ik9Upw.jpg?width=640&crop=smart&auto=webp&s=72402ffa7db16dd37485e707ce860d3a029bd4a0 submitted by /u/CodePerfect
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
I reset my iphone bought a new iphone but it always act weird

So it start when i woke up at night and seeing my iphone (xs max) turned on when i clearly remebered it was turned off so i dfu restart my iphone but then strange thing happened again after a few days. My iphone safari is searching something i didnt search so i thought okay this is weird. So i bought a new iphone 12 pro max and for few weeks its been going great. But then its started acting strange too. Taking pictures of something i didnt took. and searched safari for something i didnt search as well. And recently i was notified all my email which i safely used was breach in a data leak recently. I didnt use any icloud whatsoever. I only have essential app on my new iphone and i make sure i dont click any weird links. What is the cause of this. How do i get rid of this And how do i make sure my phone will be safe in the future.

submitted by /u/yoloyolo40
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Acer Backup Manager Module 3.0.0.99 Unquoted Service Path

https://2.bp.blogspot.com/-x_QP5QrO-tY/WWlvkxoh72I/AAAAAAAAIQ4/t-2dHNJyeE0-qZNxsCg7sgdho_ipgPgbgCLcBGAs/s1600/h98.png
Acer Backup Manager Module version 3.0.0.99 suffers an unquoted service path vulnerability.

MD5 | 4c3a4c14d7a02e8f62c463c6ab22446d

Download
# Exploit Title: Acer Backup Manager Module 3.0.0.99 - 'IScheduleSvc.exe' Unquoted Service Path
# Discovery by: Emmanuel Lujan
# Discovery Date: 2021-05-19
# Vendor Homepage: https://www.acer.com/ac/en/US/content/home
# Tested Version: 3.0.0.99
# Vulnerability Type: Unquoted Service Path
# Tested on OS: Windows 7 Home Premium x64

# Step to discover Unquoted Service Path:

C:\>wmic service get name, pathname, displayname, startmode | findstr /i "Auto" | findstr /i /v "C:\Windows\\" | findstr /i /v """

NTI IScheduleSvc NTI ISch
eduleSvc C:\Program Files (x86)\NTI\Acer Backup Man
ager\IScheduleSvc.exe Auto
# Service info:

C:\>sc qc "NTI IScheduleSvc"
[SC] QueryServiceConfig SUCCESS

SERVICE_NAME: NTI IScheduleSvc
TYPE : 110 WIN32_OWN_PROCESS
Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Acer Updater Service 1.2.3500.0 Unquoted Service Path

https://1.bp.blogspot.com/-LuDwp3Oo6oc/WWlvICvnykI/AAAAAAAAILo/OetpmDNBdyImnh7DlH6SrwI0NyzSCKSJACLcBGAs/s1600/h142.png
Acer Updater Service version 1.2.3500.0 suffers from an unquoted service path vulnerability.

MD5 | 876ca1fe372e508309168e7bb73a71da

Download
# Exploit Title: Acer Updater Service 1.2.3500.0 - 'UpdaterService.exe' Unquoted Service Path
# Discovery by: Emmanuel Lujan
# Discovery Date: 2020-11-26
# Vendor Homepage: https://www.acer.com/ac/en/US/content/home
# Tested Version: 1.2.3500.0
# Vulnerability Type: Unquoted Service Path
# Tested on OS: Windows 7 Home Premium x64

# Step to discover Unquoted Service Path:

C:\>wmic service get name, pathname, displayname, startmode | findstr /i "Auto" | findstr /i /v "C:\Windows\\" | findstr /i /v """

Live Updater Service Live Upd
ater Service C:\Program Files\Acer\Acer Updater\Updater
Service.exe Auto

# Service info:

C:\>sc qc "Live Updater Service"
[SC] QueryServiceConfig SUCCESS

SERVICE_NAME: Live updater Service
TYPE : 10 WIN32_OWN_PROCESS
START_TYPE : 2 AUTO_START
ERROR_CONTROL : 1 NORMAL
BINARY_PATH_NAME : C:\Program Files\Acer\Acer Updater\UpdaterService.exe
LOAD_ORDER_GROUP :
TAG : 0
DISPLAY_NAME : Live Updater Service
DEPENDENCIES :
SERVICE_START_NAME : LocalSystem

#Exploit:

A successful attempt would require the local user to be able to insert their code in the system root path undetected by the OS or other
security applications where it could potentially be executed during application startup or reboot. If successful, the local user's
code would execute with the elevated privileges of the application.

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
ASUS HID Access Service 1.0.94.0 Unquoted Service Path

https://4.bp.blogspot.com/-khon6dqGLkI/WWlvkVAr7qI/AAAAAAAAIQw/JwPgE9u6PkcV9AqklLFI3rOjfEX9YXC4QCLcBGAs/s1600/h96.png
ASUS HID Access Service version 1.0.94.0 suffers an unquoted service path vulnerability.

MD5 | ced9fbc60886991e95e55e7318b0aea8

Download
# Exploit Title: ASUS HID Access Service 1.0.94.0 - 'AsHidSrv.exe' Unquoted Service Path
# Date: 2020-05-19
# Exploit Author: Alejandra Sánchez
# Vendor Homepage: www.asus.com
# Version: 1.0.94.0
# Tested on: Windows 10 Pro x64 es

# Description:
ATK Hotkey 1.0.94.0 suffers from an unquoted search path issue impacting the service 'AsHidService'. This could potentially allow an
authorized but non-privileged local user to execute arbitrary code with elevated privileges on the system. A successful attempt would require
the local user to be able to insert their code in the system root path undetected by the OS or other security applications where it could
potentially be executed during application startup or reboot. If successful, the local user’s code would execute with the elevated privileges
of the application.

# Prerequisites
Local, Non-privileged Local User with restart capabilities

# Details

C:\>wmic service get name, pathname, displayname, startmode | findstr /i auto | findstr /i /v "C:\Windows\\" | findstr /i /v """
ASUS HID Access Service AsHidService C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsHidSrv.exe Auto

C:\>sc qc "AsHidService"
[SC] QueryServiceConfig CORRECTO

NOMBRE_SERVICIO: AsHidService
TIPO : 10 WIN32_OWN_PROCESS
TIPO_INICIO : 2 AUTO_START
CONTROL_ERROR : 1 NORMAL
NOMBRE_RUTA_BINARIO: C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsHidSrv.exe
GRUPO_ORDEN_CARGA :
ETIQUETA : 0
NOMBRE_MOSTRAR : ASUS HID Access Service
DEPENDENCIAS :
NOMBRE_INICIO_SERVICIO: LocalSystem


Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Microsoft HTTP Protocol Stack Remote Code Execution

https://2.bp.blogspot.com/-466o0SY5wbQ/WWlvXOxbxYI/AAAAAAAAIOQ/eHwtwujRsQI9h-mxYQXglBmw7d5gufaKwCLcBGAs/s1600/h51.png
Proof of concept exploit for the HTTP protocol stack remote code execution vulnerability related to a use-after-free dereference in http.sys.

MD5 | 231a2e9926b68408725ba7d1ab0d8acd

Download
Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
XSS Armazenado Via Upload de Foto

https://cdn-images-1.medium.com/max/787/0*kNB7Hf9pfVYE9WGV.jpg
Nessa ultima semana (15/05) eu estava estudando por artigos e reports da hackerone, até que me deparei com uma falha de XSS armazenado por…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
The Scene, The Pirates, and The Empress

https://cdn-images-1.medium.com/max/1200/1*39HpvjiYAfq1fDD1_iMESQ.png
How an increasingly radicalized society has shaped the world of video game cracking

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video