Hackercool Magazine February 2024

Edition 7 Issue 2 Hello readers, This is Kalyan Chinta with the latest Issue of Hackercool Magazine. Let’s give you a quick summary of what this Issue contains. The first article of this Issue is how to exploit a vulnerability in Windows Defender SmartScreen (CVE-2023-36025) that is already popular with Black Hat Hackers around the world. This vulnerability describes how to gain initial access by bypassing Windows Defender Smart Screen. Next article brings you one of the infection chains of Ursniff banking trojan. This infection chain starts with a zip archive containing a single HTA file. When victims click on this HTA file, it downloads and executes a PowerShell script which then downloads and executes a DLL file which finally downloads the payload and executes it on the target system.…

Threat Actors exploited the Windows Defender Smart screen security bypass vulnerability to deploy an open-source stealer called Phemodrone stealer on the target systems on January 2024. The same vulnerability was exploited by another hacker group behind Mispadu banking trojan in the first week of February 2024. Recently a hacker group named Water Hydra (aka Dark Casino) exploited this vulnerability to deploy Darkme malware. But what exactly is this Windows Defender Smart screen security bypass vulnerability? To know this, first you have to learn what is Windows Smart screen and what it does. Before, I explain about this vulnerability, let’s see it in action first. For this, I am using Kali Linux as attacker machine and Windows 10 20H2 as target system. Simply put, I create a meterpreter payload using msfvenom.…

Hello, Hackercoolians. Welcome to the second instance of our Infection Chain feature. In the first instance ofinfection chain in our previous Issue. you have learnt what is an infection chain and why hackers use it in real world hacking attacks. You have also seen a sample of infection chain and how to create it. In this Issue, you will learn how to create the infection chain of ursniff malware that was seen recently. Ursniff malware is one of the most widely spread bunking trojans. Also known as Gozi, it has been around for 10 years now. Its features include stealing data, gathering information about the version of operating system (OS), name of the computer, all the processes running on the target sy stem. user credentials, finances & banking information etc.…

In this month’s “Tool of the month” feature, readers will learn about the tool called Hydra. This article is a complete guide to Hydra password cracker. Hydra password cracker runs on Linux, Windows, Solaris, FreeBSD/openBSD, QNX and macOS. Using Hydra, we can crack passwords of various protocols like Asterisk, AFP, Cisco AAA, Cisco auth, Cisco enable, CVS, Firebird, FTP, HTTP-FORM-GET, HTTP-FORM-POST, HTTP-GET, HTTP-HEAD, HTTP-POST, HTTP-PR-OXY, HTTPS-FORM-GET, HTTPS-FORM-POST, HTTPS-GET, HTTPS-HEAD, HTTPS-POST, HTTP-Proxy, ICQ, IMAP, IRC, LDAP, MEMCACHED, MONGODB, MS-SQL, MYSQL, NCP, NNTP, Oracle Listener, Oracle SID, Oracle, PC-Anywhere, PCNFS, POP3, POSTGRES, Radmin, RDP, Rexec, Rlogin, Rsh, RTSP, SAP/R3, SIP, SMB, SMTP, SMTP Enum, SNMP v1+v2+v3, SOCKS5, SSH(v1 and v2), SSHKEY, Subversion, Teamspeak (TS2), Telnet, VMware-Auth, VNC and XMPP. The download information of Hydra is given in our Downloads section. ThisguideusesHydra installed…

Sylvester Kaczmarek Chief Technology Officer, Imperial College London In today’s interconnected world, space technology forms the backbone of our global communication, navigation and security systems. Satellites orbiting Earth are pivotal for everything from GPS navigation to international banking transactions, making them indispensable assets in our daily lives and in global infrastructure. However, as our dependency on these celestial guardians escalates, so too does their allure to adversaries who may seek to compromise their functionality through cyber means. A satellite’s service could be interrupted, or at worst the spacecraft could be disabled. The expansion of the digital realm into space has opened new frontiers for cyber threats, posing unprecedented challenges. This emerging battleground highlights the urgent need for robust cybersecurity measures to protect our space assets from sophisticated attacks that threaten…

In our previous Issue, you learnt how a Black Hat Hacker group used secret gists feature of Github to fetch their commands and subsequently hide their malicious activity. You have also learnt why hackers did it. In the present Issue, you will learn how that hacker group utilized git commit feature to hide their malicious activity. So, without delay, let’s start. What is git commit? In our previous Issue, you learnt what is Github and what it is used for. It is used to store projects and code repositories. What if we make changes to these repositories in the future or add updates to the already added software. These changes can be saved by using the “git commit” feature. To remember the changes you made, Git also includes a feature…