Hackercool Magazine September 2021

All rights reserved. No part of this publication may be reproduced, distributed, or transmitted in any form or by any means, including photocopying, recording, or other electronic or mechanical methods, without the prior written permission of the publisher, except in the case of brief quotations embodied in critical reviews and certain other noncommercial uses permitted by copyright law. For permission requests, write to the publisher, addressed “Attention: Permissions Coordinator,” at the address below. Any references to historical events, real people, or real places are used fictitiously. Names, characters, and places are products of the author’s imagination. Hackercool Cybersecurity (OPC) Pvt Ltd. Banjara Hills, Hyderabad 500034 Telangana, India. Website: www.hackercoolmagazine.com Email Address: admin@hackercoolmagazine.com Information provided in this Magazine is strictly for educational purpose only. Please don't misuse this knowledge to hack…

A Domain Controller has two type of user accounts: Domain Admins and Domain Users. Domain Users: Domain Users are the users who have rights to login into the Domain Controller but have no privileged access to make changes on the Domain Controller. Domain Admins: Domain Administrators or Domain Admins are high privileged users of a Windows domain and have the power to make changes to the Domain Controller. They are like local administrators of the Domain Controllers. As already explained in another section of this same Issue, both of these user's password hashes are stored in NTDS.dit file which is present on the Domain Controller. Both of these users can login into the Domain from a Client system which is part of the Windows Domain. If we can dump the…

Welcome to Metasploit This Month. Let us learn about the latest exploit modules of Metasploit and how they fare in our tests. Hashicorp Nomad RCE Module TARGET: Nomad TYPE: Remote ANTI-MALWARE: OFF MODULE: Exploit Nomad is a flexible workload orchestrator that enables an organization to easily deploy and manage any containerized or legacy applications using a single, unified workflow. Using Nomad Client, users can create jobs that can run in a Nomad cluster. Nomad provides a variety of drivers to allow for tasks to be run under. The 'raw_exec' and 'exec' drivers allow for OS commands to be run on a Nomad client. The 'raw_exec' option runs with higher privileges, while 'exec' is typically limited to lower privileges. The API operates similarly to HashiCorp's Consul service, by allowing optional ACL…

Our Readers have seen the functioning of "hashdump" command of meterpreter in our Magazine. The latest case being in Real World Hacking Scenario of June 2021 Issue. In the same Issue, readers have also seen the usage of Mimikatz (kiwi extension) to dump credential hashes in the Windows system. Here are the images from June 2021 Issue to refresh your memory. The cachedump module of Metasploit was also used in the same scenario. “Be very careful. We suggest getting a book on HTML to avoid becoming a real legend in the hacker world. Putting up a web page before you know how to put up a web page is generally a very bad idea. The. gov sites are an exception.”Emmanuel Goldstein, Dear Hacker: Letters to the Editor of 2600 This…

Responding to the serious weaknesses in WEP encryption security, the Wi-Fi Alliance introduced Wi - Fi Protected Access (WPA) to secure wireless networks. However, the Wi-Fi Alliance intended WPA as an interim measure to take the place of WEP before they bring in Wi - Fi Protected Access 2 (WPA 2). Wi - Fi Protected Access (WPA) Also known as Temporal Key Integrity Protocol (TKIP) standard, WPA implements the TKIP encryption method and was introduced in 2003. TKIP introduced three new methods to overcome weaknesses in Wired Equivalent Privacy (WEP) standard. 1. TKIP implements a key mixing function that combines the secret root key with the initialization vector before passing it to the RC4 cipher initialization. WEP on the other hand merely concatenated the initialization vectors to the root key,…

Syed Wajid Ali Shah Research Fellow, Centre For Cybersecurity Research and Innovation, Deakin University Jongkil Jay Jeong CyberCRC Research Fellow, Centre For Cybersecurity Research and Innovation, Deakin University Robin Doss Research Director, Centre For Cybersecurity Research and Innovation, Deakin University It’s now well known that usernames and passwords aren’t enough to securely access online services. A recent study highlighted more than 80% of all hacking-related breaches happen due to compromised and weak credentials, with three billion username/password combinations stolen in 2016 alone. As such, the implementation of two-factor authentication (2FA) has become a necessity. Generally, 2FA aims to provide an additional layer of security to the relatively vulnerable username/password system. It works too. Figures suggest users who enabled 2FA ended up blocking about 99.9% of automated attacks. But as with…