Hackercool Magazine October 2021

Till now in our Magazine readers have learnt about various methods of hacking different wireless networks with various encryption methods like WEP, WPS/WPA2, WPS etc. Almost all of these hacking methods involved brute forcing and password cracking. What if there was another easier way to hack wireless networks without the need of brute forcing. Evil Twin Attack is a Rogue Access Point attack in which a second access point is created with the same SSID (WiFi network name) of the target network. Since it has the same name, it's called twin and as it is malicious it's can be termed Evil Twin. The aim is to confuse users trying to connect to the target wifi network and make them connect to the Evil Twin and thus capture sensitive data. Let'…

Q: Should I download Kali Linux directly on my PC or VirtualBox? A: Provided you want to install Kali Linux on Oracle Virtualbox or any other Virtualization software, you need to download Kali Linux directly on your PC. The download can be either ISO file or images specifically made for Virtualbox. My suggestion for you is to go with Virtualbox images which can be downloaded from here You can follow our detailed guide on how to install Kali in virtualbox from here. Q: Which is a budget WiFi adapter that supports Kali Linux, monitor mode etc? A: Leaving affordability out, the wireless adapters that support monitor mode and packet injection are Alfa AWUS036NH, Alfa AWUS036NHa, Alfa AWUS036NEH, Panda PAU09 N600, Alfa AWUS036ACH etc. These are a bit expsensive but do…

Hi Readers. In this Installit feature, we will learn how to install BloodHound in Windows. BloodHound is a tool used to enumerate and reveal often unintended and hidden relationships within an Active Directory Environment. It is a single page Javascript web application, built on top of Linkurious, compiled with Electron and with a Neo4j database fed by a C# data collector. Bloodhound is used by both Red Team and Blue Team professionals during pen testing. Bloodhound is also used by attackers to easily identify highly complex attack paths to gain high privileged access in the Windows Domain network that would otherwise be impossible to quickly identify. White Hats use BloodHound to identify and eliminate those attack paths. The tool BloodHound is developed by @_wald0, @CptJesus, and @harmj0y. To install BloodHound…

Welcome to Metasploit This Month. Let us learn about the latest exploit modules of Metasploit and how they fare in our tests. WP Modern Events Calendar Plugin RCE Module TARGET: Modern Events Calendar <= 5.16.5 MODULE: Exploit TYPE: Remote ANTI-MALWARE: NA Modern Events calendar plugin is a Wordpress plugin used for managing events on wordpress websites. The plugin has over 1,00,000 active installations. The above mentioned versions of the plugin has a file upload vulnerability that allows attackers to gain a reverse shell. The vulnerability exists due to an incorrect check of the extension of the file being uploaded, thus allowing attackers to upload a php file. The uploaded php payload can then be triggered by a call to `/wp-content/uploads/<uploaded_payload_name>.php` However, this module requires credentials of a wordpress account to…

Wendy H. Wong Professor Of Political Science & Canada Research Chair in Global Governance and Civil Society, University Of Toronto Facebook — its new corporate name is Meta — has always wanted to get to know you. Its public goal has ostensibly been to connect people. It’s been wildly successful in doing so by building out what can only be called everyday infrastructure around the world. There are 3.5 billion people worldwide using Facebook’s suite of products, which includes Messenger, Instagram and WhatsApp. As the infrastructure provider, Facebook knows a lot about who its users are, and what they do. Recently, the company has announced a US$10 billion investment in the “metaverse” — an immersive version of the internet that can only increase Facebook’s hold on citizens via the data…

Erica Mealy Lecturer In Computer Science University Of The Sunshine Coast Twenty years on from the public release of Windows XP, the popular operating system is still regarded one of Microsoft’s greatest achievements. As of August this year, Windows XP still maintained a greater market share than its successor, Windows Vista. When mainstream support for XP ended in April 2009, it was running on a huge 75% of Windows computers and about 19% of people were still using XP when extended security support finished in 2014. Microsoft provided security support in a few special cases, such as for military use, until 2019 — an incredible 18 years after the initial release. But what made XP excel? And what has Microsoft learned in the two decades since its release? The Rise…