Indholdsfortegnelse for April 2023 i Hackercool Magazine

All rights reserved. No part of this publication may be reproduced, distributed, or transmitted in any form or by any means, including photocopying, recording, or other electronic or mechanical methods, without the prior written permission of the publisher, except in the case of brief quotations embodied in critical reviews and certain other noncommercial uses permitted by copyright law. For permission requests, write to the publisher, addressed “Attention: Permissions Coordinator,” at the address below. Any references to historical events, real people, or real places are used fictitiously. Names, characters, and places are products of the author’s imagination. Hackercool Cybersecurity (OPC) Pvt Ltd. Banjara Hills, Hyderabad 500034 Telangana, India. Website: www.hackercoolmagazine.com Email Address: admin@hackercoolmagazine.com Information provided in this Magazine is strictly for educational purpose only. Please don't misuse this knowledge to hack…

Eden Kamar Postdoctoral research fellow, Hebrew University of Jerusalem Christian Jordan Howell Assistant Professor in Cybercrime, University of South Florida There has been a tenfold increase in sexual abuse imagery created with webcams and other recording devices worldwide since 2019, according to the the Internet Watch Foundation. Social media sites and chatrooms are the most common methods used to facilitate contact with kids, and abuse occurs both online and offline. Increasingly, predators are using advances in technology to engage in technology-facilitated sexual abuse. Once having gained access to a child’s webcam, a predator can use it to record, produce an-d distribute child pornography. We are criminologists who study cybercrime and cybersecurity. Our current research examines the methods online predators use to compromise children’s webcams. To do this, we posed online…

In this month’s Issue, I would like to take you through a walkthrough of making a scenario at Hackercool labs. I have been thinking to reboot ‘Metasploit’ for a long time now. This month for a short time now and I think the time has come. As an addition, I wanted to show our readers what it takes to create a Hacking scenario at Hackercool labs so that they can understand the troubles, challenges it takes to make a scenario at our labs while getting a deep understanding of the hacking involved. I am also sure this the first failed Hacking scenario that made it to the Hackercool Magazine. As I walk through the making of the scenario, I wear two hats: one of a hacker and the other of…

What Is an SVG Image? Scalable Vector Graphics (SVG) images are a type of images just like JPG, GIF and PNG but unlike them which are raster based, SVG images are defined in a vector graphics format and are stored in XML text files. SVG images can be scaled in size without loss of quality unlike JPG, GIF or PNG. As SVG images can be stored as XML text files, they can be edited with text editors or vector graphics editor and are rendered by almost all web browsers. Let's create a SVG image manually. But how does this delivery of malware through SVG images work. On a Windows system, let's create a new folder to carry out this tutorial forward. Open Source Media Player Software provider Kodi suffered a…

On the occasion of 10th anniversary of the beginning of Kali Linux (with predecessor Backtrack Linux), the makers of Kali Linux introduced a new operating system that took a completely different turn altogether. The new operating system is kali Purple. This article gives our readers an introduction to Kali Purple. To better understand Kali Purple, readers need to first understand about different types of pen testing teams in cyber security. For the purpose of this article, let’s say there are two teams in pen testing. Red Team and Blue Team. What is a Red Team? In a cybersecurity simulation, a red team acts as a hacker (adversary). Just like a hacker does, the Red Team tries to find out and exploit potential vulnerabilities in a company or organization. Normally this…

Introduction In the ever-evolving landscape of cybersecurity, vulnerabilities pose significant risks to computer systems, potentially allowing malicious actors to exploit weaknesses and gain unauthorized access. On 14th March 2023, Microsoft released a security patch to address an elevation-of-privilege vulnerability identified in Microsoft Outlook. Tracked as CVE-2023-23397, this vulnerability can be automatically triggered through a specially crafted email, leading to the theft of new technology LAN manager (NTLM) credential hashes. The Computer Emergency Response Team for Ukrai ne (CERT-UA) reported the vulnerability to Microsoft, prompting their response and subsequent patch release. According to Microsoft Threat Intelligence, a threat actor based in Russia has actively exploited this vulnerability in targeted attacks against a limited number of organizations operating in Europe's government, transportation, energy, and military sectors. These attacks demonstrate the real-world impact…