Indholdsfortegnelse for December 2021 i Hackercool Magazine

RTF Template Injection is very easy and simple. Apart from this, the inability of public antivirus engines failing to detect this injection is the reason for hackers increasingly using this injection technique. In this month's issue of Real World Hacking, we bring our readers how to perform this injection. For this tutorial we will be using a Ubuntu system as our Landing system or attacker system. On our attacker system, we create a new directory named RTF_T_I (in fact you can name it whatever you like) to save all the files. The reason we chose Ubuntu as our base system is it has a word processor installed by default. So I open LibreOffice and create a new word file as shown below (In Real world, the text here contains the…

When you enter your personal information or credit card number into a website, do you have a moment of hesitation? A nagging sense of vulnerability prompted by the parade of headlines about data breaches and hacks? If so, you probably push those feelings aside and hit the submit button, because, well, you need to shop, apply for that job, file that insurance claim, apply for that loan, or do any of the other sensitive activities that take place online these days. First, the bad news. If you regularly enter sensitive information online, chances are you’ve had some data stolen somewhere at some point. By one estimate, the average American had data stolen at least four times in 2019. And the hits keep coming. For instance, a data breach at the…

Facebook’s approach to users’ data has just been dealt a major blow from the European court of justice (ECJ). In an answer to a question from Germany’s highest court, the ECJ’s advocate general – whose opinion is not binding but is generally followed by the court – has made an essential clarification to Europe’s data protection law to confirm that consumer associations can bring actions on behalf of individuals. If followed by the ECJ, this will make it much easier for people to defend their rights against tech giants in future. Coming on the back of a decision by the European general court against Google several weeks ago for using its platform power to restrict competitors, it is the latest example of European regulators making the business climate increasingly chilly…

1. Apache Log4shell JNDI Exploit: https://github.com/black9/Log4shell_JNDIExploit 2. Kali Linux 2021.4: https://www.kali.org/get-kali/ 3. Git 2.28.0 for Windows: https://github.com/git-for-windows/git/releases/download/v2.28.0.windows.1/Git-2.28.0-64-bit.exe 4. Git 2.30.1 for Windows: https://github.com/git-for-windows/git/releases/download/v2.30.1.windows.1/Git-2.30.1-64-bit.exe 5. Linux elFinder: https://github.com/Studio-42/elFinder/archive/2.1.58.zip 6. CVE-2021-22555 exploit: https://github.com/bcoles/kernel-exploits/blob/master/CVE-2021-22555/exploit.c…