Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Seven Tips for Recovering a Hacked WhatsApp Account
https://cdn-images-1.medium.com/max/600/1*LWyeJFltqn2bHssRlASQFw.jpeg
WhatsApp is one of the most widely used messaging apps in the world, with over two billion active users. Unfortunately, with such a large…
Continue reading on Medium »
Seven Tips for Recovering a Hacked WhatsApp Account
https://cdn-images-1.medium.com/max/600/1*LWyeJFltqn2bHssRlASQFw.jpeg
WhatsApp is one of the most widely used messaging apps in the world, with over two billion active users. Unfortunately, with such a large…
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
How to use Burp Suite Like a PRO?
https://cdn-images-1.medium.com/max/917/1*l2PQ2BbjXrgB2E5xsSocDQ.png
Burp Suite is a powerful tool for web application security testing and one of the most popular tools in the industry.
Continue reading on Medium »
How to use Burp Suite Like a PRO?
https://cdn-images-1.medium.com/max/917/1*l2PQ2BbjXrgB2E5xsSocDQ.png
Burp Suite is a powerful tool for web application security testing and one of the most popular tools in the industry.
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
SushiSwap hacked for over $3.3m
https://cdn-images-1.medium.com/max/1600/0*9B7-hLiEyVaOw-nK.png
On the 8th of April, 2023, SushiSwap, a decentralized cryptocurrency exchange built on the Ethereum blockchain, was hacked for over $3.3m…
Continue reading on Medium »
SushiSwap hacked for over $3.3m
https://cdn-images-1.medium.com/max/1600/0*9B7-hLiEyVaOw-nK.png
On the 8th of April, 2023, SushiSwap, a decentralized cryptocurrency exchange built on the Ethereum blockchain, was hacked for over $3.3m…
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
5 Simple Steps For Securing Your Email
https://cdn-images-1.medium.com/max/1240/0*1LvAZ-6T_KFnNRq3
The email has become an indispensable part of daily communication in today’s digital age.
Continue reading on Medium »
5 Simple Steps For Securing Your Email
https://cdn-images-1.medium.com/max/1240/0*1LvAZ-6T_KFnNRq3
The email has become an indispensable part of daily communication in today’s digital age.
Continue reading on Medium »
How to use Burp Suite Like a PRO?
Burp Suite is a powerful tool for web application security testing and one of the most popular tools in the industry.Continue reading on Medium »
Read more...
Burp Suite is a powerful tool for web application security testing and one of the most popular tools in the industry.Continue reading on Medium »
Read more...
TryHackMe — File Inclusion (Using python)
Link: https://tryhackme.com/room/fileincContinue reading on Medium »
Read more...
Link: https://tryhackme.com/room/fileincContinue reading on Medium »
Read more...
Hacking Articles Tips Tricks Videos Tutorials
Photo
Black Hat Ethical Hacking
Apple releases emergency security updates to address zero-day vulnerabilities on iPhones, Macs, and iPads
Apple releases emergency security updates to address zero-day vulnerabilities on iPhones, Macs, and iPadsPost Views: 2 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/12/Patreon.png Subscribe to Patreon to watch this episode.
Reading Time: 3 Minutes Apple Releases Emergency Security Updates to Address Two Zero-Day VulnerabilitiesApple has released emergency security updates to address two new zero-day vulnerabilities that have been exploited to compromise iPhones, Macs, and iPads. In security advisories published on Friday, the company warned of a report that these issues may have been actively exploited.
The first vulnerability, tracked as CVE-2023-28206, is an IOSurfaceAccelerator out-of-bounds write that can lead to data corruption, a crash, or code execution. Attackers can use a maliciously crafted app to execute arbitrary code with kernel privileges on targeted devices, once they have successfully exploited the flaw.
The second zero-day vulnerability (CVE-2023-28205) is a WebKit use-after-free weakness, which can result in data corruption or arbitrary code execution when reusing freed memory. Attackers can trick targets into loading malicious web pages under their control, leading to code execution on compromised systems.
See Also: So you want to be a hacker? Offensive Security, Bug Bounty Courses Apple responds to in-the-wild exploitation reports with critical security updatesTo address these vulnerabilities, Apple has released iOS 16.4.1, iPadOS 16.4.1, macOS Ventura 13.3.1, and Safari 16.4.1, which include improved input validation and memory management. The list of affected devices is quite extensive, including iPhone 8 and later, iPad Pro (all models), iPad Air 3rd generation and later, iPad 5th generation and later, iPad mini 5th generation and later, and Macs running macOS Ventura.
Although Apple has acknowledged reports of exploitation in the wild, it has not published any information regarding these attacks. However, Apple revealed that Clément Lecigne of Google’s Threat Analysis Group and Donncha Ó Cearbhaill of Amnesty International’s Security Lab discovered the two flaws exploited in the wild as part of an exploit chain. Both organizations regularly disclose campaigns exploiting zero-day bugs abused by government-sponsored threat actors to deploy commercial spyware on the smartphones and computers of politicians, journalists, dissidents, and other high-risk individuals worldwide.
Super proud of our team at @AmnestyTech and everyone who helped in this investigation.
Today, Apple published an emergency update for all iPhones to patch an exploit chain which we, together with @_clem1 (Google TAG) discovered in the wild. pic.twitter.com/KLMYjqi3lK
— Donncha Ó Cearbhaill (@DonnchaC) April 7, 2023
Trending: The Rise and Fall of Sabu: From Hacker Hero to FBI Informant Trending: Offensive Security Tool: Mythic In February, Apple addressed another WebKit zero-day (CVE-2023-23529), which had been exploited in attacks to trigger OS crashes and gain code execution on vulnerable iPhones, iPads, and Macs. While the zero-days patched recently were most likely used in highly targeted attacks, it is highly recommended to install these emergency updates as soon as possible to block potential attack attempts.
Trending: 10-Year-Old Windows vulnerability still being exploited in the 3CX attacks
Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that[...]
Apple releases emergency security updates to address zero-day vulnerabilities on iPhones, Macs, and iPads
Apple releases emergency security updates to address zero-day vulnerabilities on iPhones, Macs, and iPadsPost Views: 2 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/12/Patreon.png Subscribe to Patreon to watch this episode.
Reading Time: 3 Minutes Apple Releases Emergency Security Updates to Address Two Zero-Day VulnerabilitiesApple has released emergency security updates to address two new zero-day vulnerabilities that have been exploited to compromise iPhones, Macs, and iPads. In security advisories published on Friday, the company warned of a report that these issues may have been actively exploited.
The first vulnerability, tracked as CVE-2023-28206, is an IOSurfaceAccelerator out-of-bounds write that can lead to data corruption, a crash, or code execution. Attackers can use a maliciously crafted app to execute arbitrary code with kernel privileges on targeted devices, once they have successfully exploited the flaw.
The second zero-day vulnerability (CVE-2023-28205) is a WebKit use-after-free weakness, which can result in data corruption or arbitrary code execution when reusing freed memory. Attackers can trick targets into loading malicious web pages under their control, leading to code execution on compromised systems.
See Also: So you want to be a hacker? Offensive Security, Bug Bounty Courses Apple responds to in-the-wild exploitation reports with critical security updatesTo address these vulnerabilities, Apple has released iOS 16.4.1, iPadOS 16.4.1, macOS Ventura 13.3.1, and Safari 16.4.1, which include improved input validation and memory management. The list of affected devices is quite extensive, including iPhone 8 and later, iPad Pro (all models), iPad Air 3rd generation and later, iPad 5th generation and later, iPad mini 5th generation and later, and Macs running macOS Ventura.
Although Apple has acknowledged reports of exploitation in the wild, it has not published any information regarding these attacks. However, Apple revealed that Clément Lecigne of Google’s Threat Analysis Group and Donncha Ó Cearbhaill of Amnesty International’s Security Lab discovered the two flaws exploited in the wild as part of an exploit chain. Both organizations regularly disclose campaigns exploiting zero-day bugs abused by government-sponsored threat actors to deploy commercial spyware on the smartphones and computers of politicians, journalists, dissidents, and other high-risk individuals worldwide.
Super proud of our team at @AmnestyTech and everyone who helped in this investigation.
Today, Apple published an emergency update for all iPhones to patch an exploit chain which we, together with @_clem1 (Google TAG) discovered in the wild. pic.twitter.com/KLMYjqi3lK
— Donncha Ó Cearbhaill (@DonnchaC) April 7, 2023
Trending: The Rise and Fall of Sabu: From Hacker Hero to FBI Informant Trending: Offensive Security Tool: Mythic In February, Apple addressed another WebKit zero-day (CVE-2023-23529), which had been exploited in attacks to trigger OS crashes and gain code execution on vulnerable iPhones, iPads, and Macs. While the zero-days patched recently were most likely used in highly targeted attacks, it is highly recommended to install these emergency updates as soon as possible to block potential attack attempts.
Trending: 10-Year-Old Windows vulnerability still being exploited in the 3CX attacks
Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that[...]
Hacking Articles Tips Tricks Videos Tutorials
Black Hat Ethical Hacking Apple releases emergency security updates to address zero-day vulnerabilities on iPhones, Macs, and iPads Apple releases emergency security updates to address zero-day vulnerabilities on iPhones, Macs, and iPadsPost Views: 2 Premium…
match with our specific audience and is worth sharing?
If you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com
Source: thehackernews.com Source Link https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Store.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/04/Images-for-the-News-posts-11-300x150.png Rilide: The Malicious Extension that Steals Cryptocurrency and Bypasses 2FAApril 7, 2023
* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/04/Images-for-the-News-posts-10-300x150.png CryptoClippy: New Malware Targeting Users for Cryptocurrency TheftApril 6, 2023
* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/04/Images-for-the-News-posts-8-300x150.png Meet Rorschach: The Fastest Ransomware Strain Yet DiscoveredApril 5, 2023
* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/04/Images-for-the-News-posts-7-300x150.png Malicious WinRAR SFX Files Slipping Past Traditional AV SolutionsApril 4, 2023 https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/OffSec-Course.png Offensive Security & Ethical Hacking CourseBegin the learning curve of hacking now! https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Solutions.png Information Security SolutionsFind out how Pentesting Services can help you.
The post Apple releases emergency security updates to address zero-day vulnerabilities on iPhones, Macs, and iPads first appeared on Black Hat Ethical Hacking.
If you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com
Source: thehackernews.com Source Link https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Store.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/04/Images-for-the-News-posts-11-300x150.png Rilide: The Malicious Extension that Steals Cryptocurrency and Bypasses 2FAApril 7, 2023
* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/04/Images-for-the-News-posts-10-300x150.png CryptoClippy: New Malware Targeting Users for Cryptocurrency TheftApril 6, 2023
* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/04/Images-for-the-News-posts-8-300x150.png Meet Rorschach: The Fastest Ransomware Strain Yet DiscoveredApril 5, 2023
* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/04/Images-for-the-News-posts-7-300x150.png Malicious WinRAR SFX Files Slipping Past Traditional AV SolutionsApril 4, 2023 https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/OffSec-Course.png Offensive Security & Ethical Hacking CourseBegin the learning curve of hacking now! https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Solutions.png Information Security SolutionsFind out how Pentesting Services can help you.
The post Apple releases emergency security updates to address zero-day vulnerabilities on iPhones, Macs, and iPads first appeared on Black Hat Ethical Hacking.
Fast One-Shot Passive Recon Script with Netlas.io
Simple passive recon script. Have you already chosen an organization that will pay you for the vulnerabilities found?Continue reading on Medium »
Read more...
Simple passive recon script. Have you already chosen an organization that will pay you for the vulnerabilities found?Continue reading on Medium »
Read more...
https://b.thumbs.redditmedia.com/v0uKZHlWmmmQjbtdJHJgroPdAr96Ko52pJucVl0CN3s.jpg I'm wanting to read the data on a presumably LF RFID tag for a garage door of an unknown manufacturer. For which I bought a reasonably simple reader/writer that is able to read 125KHz, 250Khz, 375KHz. 500KHz, 625KHz, 750KHz, 875KHz, 1000KHz and 'HID' 125KHz. Thing is, it cant read any data of this tag, though it does work with other key fobs.
https://preview.redd.it/kn1chb1ku0ta1.jpg?width=291&format=pjpg&auto=webp&s=3dc42766d9a009aae0d836ba385994245af36b9d
Can I make the conclusion this would be a HF RFID tag, or is it possible it is encrypted to the point a 'standard' LF RFID reader isn't even able to read any (encrypted) data? For the reader used by the garage door to be able to read it, it needs to be quite close, like at max 1 cm apart.
submitted by /u/Fit_chicken_pizza
[link] [comments]
https://preview.redd.it/kn1chb1ku0ta1.jpg?width=291&format=pjpg&auto=webp&s=3dc42766d9a009aae0d836ba385994245af36b9d
Can I make the conclusion this would be a HF RFID tag, or is it possible it is encrypted to the point a 'standard' LF RFID reader isn't even able to read any (encrypted) data? For the reader used by the garage door to be able to read it, it needs to be quite close, like at max 1 cm apart.
submitted by /u/Fit_chicken_pizza
[link] [comments]
Hacking Articles Tips Tricks Videos Tutorials
Photo
Exploit Privilege Escalation Like a Pro
Here is my Privilege Escalation vulnerability on a private program that let attackers takeover whole company…Continue reading on InfoSec Write-ups »
Read more...
Here is my Privilege Escalation vulnerability on a private program that let attackers takeover whole company…Continue reading on InfoSec Write-ups »
Read more...
Advanced Web Application Security: Exploiting SSTI Vulnerabilities
Server-Side Template Injection (SSTI) vulnerabilities are often overlooked, but they can have severe consequences if exploited by an…Continue reading on InfoSec Write-ups »
Read more...
Server-Side Template Injection (SSTI) vulnerabilities are often overlooked, but they can have severe consequences if exploited by an…Continue reading on InfoSec Write-ups »
Read more...
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
O QUE É ESCALONAMENTO DE PRIVILÉGIOS? PARTE 1
https://cdn-images-1.medium.com/max/1080/1*s7sPLAporxpH1ODYorpC_A.jpeg
A escalação de privilégios é o processo de exploração de vulnerabilidades ou configurações incorretas em sistemas para elevar privilégios…
Continue reading on Medium »
O QUE É ESCALONAMENTO DE PRIVILÉGIOS? PARTE 1
https://cdn-images-1.medium.com/max/1080/1*s7sPLAporxpH1ODYorpC_A.jpeg
A escalação de privilégios é o processo de exploração de vulnerabilidades ou configurações incorretas em sistemas para elevar privilégios…
Continue reading on Medium »