Hackercool Magazine November 2022

Welcome to Metasploit This Month. Let us learn about the latest exploit modules of Metasploit and how they fare in our tests. Redis Desktop Manager Password gathering Module TARGET: Redis Desktop Manager TYPE: Local MODULE: POST ANTI-MALWARE: N/A Redis Desktop Manager is an open-source GUI management tool to manage Redis. Redis Desktop Manager stores Redis credentials in a JSON file in plaintext. So, any attacker who compromises a machine on which Redis Desktop Manager is installed, he can extract Redis credentials stored by this app using this module. We have tested this module on Redis Desktop Manager installed on Windows 10. The download information is given in Downloads section. This installation procedure is given in our Installations section. We have set up a Redis instance on a machine and connected…

Dominic Lees Associate Professor in Filmmaking, University of Reading In the second season of BBC mystery thriller The Capture, deepfakes threaten the future of democracy and UK national security. In a dystopia set in present day London, hackers use AI to insert these highly realistic false images and videos of people into live news broadcasts to des troy the careers of politicians. But my team’s research has shown how difficult it is to create convincing deepfakes in reality. In fact, technology and creative professionals have started collaborating on solutions to help people spot bogus videos of politicians and celebrities. We stand a decent chance of staying one step ahead of fraudsters. In my research project, Virtual Maggie, I attempted to use deepfakes to digitally resurrect former UK prime minister Margaret…

APT28 is back in our Magazine again. The Russian threat actor also known as Fancy Bear or TSAR Team has been spotted deploying its infamous Graphite malware using a new technique known as PowerPoint Mouse Over Hover technique. What is this PowerPoint Mouse Over Event technique? Who doesn’t know Microsoft PowerPoint? OK, for those who are novice than me it is a software that is used for presentations. Microsoft PowerPoint comes bundled with Microsoft Office or Office 365. PowerPoint is my favourite program in Microsoft Office and the task time I used it was when I was in my engineering third year for presenting my mini-project to my classmates. You can say I am a big fan of its effects and transitions. Who would have thought hackers would use the…

Mamoun Alazab Associate Professor, College Of Engineering, IT and Environment, Charles Darwin University The Australian government is launching an offensive against cybercriminals, following a data breach that has exposed millions of people’s personal information. On November 12, Minister for Cyber Security Clare O'Neil announced a taskforce to “hack the hackers” behind the recent Medibank data breach. The taskforce will be a first-of-its-kind permanent, joint collaboration between Australian Federal Police and the Australian Signals Directorate Its 100 or so operatives will use the same cyber weapons and tactics as cybercriminals use, to hunt them down and eliminate them as a threat. Details on how the taskforce will operate remain murky, partly because it needs to keep t-his information away from criminals. But the fact remains that taking an offensive stance, while…

In this month’s AV Evasion, readers will learn about two reverse shell generators that are presently evading all Antivirus. 1. Gofrette The first one is Gofrette. Gofrette is a reverse shell payload developed in golang that bypasses Windows Defender. In our tests conducted on December 16 2022, the tool was still successful in evading Antivirus. We have tested this on Windows 10 target with updated Windows Defender signatures. All we have to do is download the binary of Gofrette from the download link given in Downloads section of this Issue and execute it on the target system as shown below. I have started a listener to receive the incoming reverse shell on the Kali Linux system which will act as our attacker system. "One thing that sets this ransomware apart…

1. Configure Redis Desktop Manager Make sure a Redis server is running. We have seen how to do this in one of our previous Issues. Download Redis Desktop Manager (information given in our Downloads section) and install it on a Windows 1 0 machine as you would install any executable. Once the installation is finished, open it and connect to the Redis server we mentioned initially. Security Researchers have recently detected a new Darknet Service that allows Hackers to trojanize legitimate Android Apps. That’s it. The target is ready to the exploited. 2. Install SuiteCRM Docker container Create a new docker.compose.yml file with the text given below and use docker-compose to start it. version: '2' services: mariadb: image: docker.io/bitnami/mariadb:10.6 environment: # ALLOW_EMPTY_PASSWORD is recommended only for development. - ALLOW_EMPTY_PASSWORD=yes -…