Hackercool Magazine October 2023

Edition 6 Issue 10 Then you will know the truth and the truth will set you free. John 8:32 On completing 7 years of Hackercool Magazine, we thought it would be good to do some homecoming. So in this Issue and our next Issue, we will be publishing articles about the foundatioms of Black Hat Hacking. "THIS FEATURE CAN BE ABUSED BY ATTACKERS TO AUTOMATICALLY LEAK THE WINDOWS USER’S NTLM TOKENS TO ANY ATTACKER-CONTROLLED SERVER, VIA ANY TCP PORT, SUCH AS PORT 80." - CHECKPOINT SECURITY RESEARCHER HAIFEI LI ON HACKERS USING FORCED AUTHENTICATION TO STEAL WINDOWS NTLM TOKENS.…

FTP service was one of the easiest and vulnerable target for hackers to hack in 80’s and 90’s. Not only hacking this service was simple but it also provided them THAT which is most valuable even now, DATA. But is hacking FTP still relevant today after almost five decades of its beginning? Well, it is estimated that there are still around 20-30 million FTP servers active worldwide. The number of increasing FTP client and server software is a testimony to this. With so many FTP servers around the world we can still say FTP hacking is still relevant. In March of this year, hackers gained access to thousands of websites using compromised FTP credentials. As I am writing this article, there is a news report of a hacking group gaining…

Kayleen Manwaring Senior Research Fellow, UNSW Allens Hub for Technology, Law & Innovation and Senior Lecturer, School of Private & Commercial Law, UNSW Law & Justice, UNSW Sydneye Spam might not have brought an end to the internet or email, as some dire predictions in the early 2000s claimed it could – but it’s still a massive pain. Despite all the spam being removed by spamfiltering technologies, most people still receive spam every day. How do these messages end up flooding our inboxes? And are there any legal consequences for the senders? What is spam? The Organisation for Economic Co-operation and Development (OE-CD) noted in 2004 “there does not appear to be a widely agreed and workable definition for spam” across jurisdictions and this remains true today. That said, “spam”…

Before I start this scenario, let me make clear to you what is Black Hat Hacking so that your expectations and this article are on the same page. This is very important in order you don’t get disappointed in the end. What is Black Hat Hacking? Black Hat Hacking or Real-world Hacking is the way of hacking performed by Black Hat Hackers in Real World. Black Hat Hackers are the really bad guys of hacking which include Advanced Persistent Threats (APTs, mostly state sponsored), cybercriminal groups and individual Blackhat hackers like Phineas Fisher (the guy who Hacking teams) etc. Since I am now clear what this article is about, let’s move to some practical tutorial. Here, I will be showing you about exploitation of ms08_067 vulnerability. Why ms08_067? Because most…

A new vulnerability has been detected by Qualys Threat Research unit (TRG) in Linux systems that gives attackers root access on the target system. This vulnerability is tested on Ubuntu 23.04, Ubuntu 22.04, Fedora 37,38 and Debian 11/12/13. It’s likely that many other operating systems are vulnerable to this. To understand what this vulnerability is and how it works. you first need to understand some basic concepts in Linux. They are, 1) Library 2) Locker 3) Environment variable. Library A library is a collection of pre-compiled piece of code. Normally this piece of code is used by multiple programs. So instead of writing this code again and again in multiple programs, it is set as a library. Whenever, a program needs the code inside the library, it just loads it…

Vasileios Karagiannopoulos Associate Professor in Cybercrime and Cybersecurity and Co-Director of the Centre for Cybercrime and Economic Crime, University of Portsmouth Ukraine’s recently formed “IT army” is playing a crucial role in the war with Russia, launching disruptive cyber-attacks and data thefts against the Russian government and other high-profile targets such as energy giant Gazprom. The IT army has thousands of volunteer members around the world, who use Twitter and Telegram channels to communicate, coordinate and report on actions. Its members have already taken part in a wide variety of attacks. These range from stealing and exposing important information to successfully disrupting Russian communications and other critical networks in order to hinder the Russian war efforts. The formation of the IT army was a Ukrainian government response to concerns about…