Indholdsfortegnelse for May 2022 i Hackercool Magazine

All rights reserved. No part of this publication may be reproduced, distributed, or transmitted in any form or by any means, including photocopying, recording, or other electronic or mechanical methods, without the prior written permission of the publisher, except in the case of brief quotations embodied in critical reviews and certain other noncommercial uses permitted by copyright law. For permission requests, write to the publisher, addressed “Attention: Permissions Coordinator,” at the address below. Any references to historical events, real people, or real places are used fictitiously. Na-mes, characters, and places are products of the author’s imagination. Hackercool Cybersecurity (OPC) Pvt Ltd. Banjara Hills, Hyderabad 500034 Telangana, India. Website: www.hackercoolmagazine.com Email Address: admin@hackercoolmagazine.com Information provided in this Magazine is strictly for educational purpose only. Please don't misuse this knowledge to hack…

Readers have learnt about multiple, latest methods used by Advanced Persistent Threats (APTs) and BlackHat hackers to bypass Anti Malware. These methods involved creation of undetectable non meterpreter payloads. For a long time now, some of our readers have been asking us to write about methods to make the meterpreter payload undetectable. Meterpreter is an attack payload of Metasploit whose versatility has been seen by readers in our Magazine multiple times. It’s ease of use and features made it popular in hacking circles. There are many reasons for its popularity. Some of them are, 1. Meterpreter provides an interactive shell on the target right away. 2. Meterpreter gets deployed using in-memory DLL injection and nothing is written to disk. 3. Also no new processes are created while deploying thus making…

Back in April 2022, a file was uploaded to the Virus Total website with theme “invitation for an interview” targeting a user in Russia. When this file was reported to Microsoft, they came to the conclusion that it wasn’t a security issue at all. Recently at the end of the month of May 2022, nao_sec, a Japan based cybersecurity company detected another malicious Word document uploaded to VirusTotal. They found that this file was exploiting a zeroday remote code execution vulnerability in Microsoft Office. This zeroday vulnerability has been assigned the identifier CVE-2022-301 90, has a CVSS severity rating of 7.8 out of 1 0 and has been named by Microsoft as "Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability". The file that was detected earlier in April…

Welcome to Metasploit This Month. Let us learn about the latest exploit modules of Metasploit and how they fare in our tests. PWNKIT Linux Privilege Escalation Module TARGET: Red Hat 8, Fedora 21, Debian Testing ‘Bullseye” and Ubuntu 20.04 and more TYPE: Local MODULE: PE ANTI-MALWARE: NA A memory corruption vulnerability PWNKIT (CVE-2021 -4034) was discovered in the pkexec command (which is installed by default on all major Linux distributions). The vulnerability is present in polkit since the original release of 2009. The PWNKIT vulnerability and its Real-World exploitation has been explained in our January 2022 Issue. This module exploits that PWNKIT vulnerability. We have tested this exploit module on Debian 1 1 .2. To use this module we need to have a initial shell with LOW privileges on the…