Indholdsfortegnelse for July 2024 i Hackercool Magazine

All rights reserved. No part of this publication may be reproduced, distributed, or transmitted in any form or by any means, including photocopying, recording, or other electronic or mechanical methods, without the prior written permission of the publisher, except in the case of brief quotations embodied in critical reviews and certain other noncommercial uses permitted by copyright law. For permission requests, write to the publisher, addressed “Attention: Permissions Coordinator,” at the address below. Any references to historical events, real people, or real places are used fictitiously. Names, characters, and places are products of the author’s imagination. Hackercool Cybersecurity (OPC) Pvt Ltd. Banjara Hills, Hyderabad 500034 Telangana, India. Website: www.hackercoolmagazine.com Email Address: admin@hackercoolmagazine.com Information provided in this Magazine is strictly for educational purpose only. Please don't misuse this knowledge to hack…

Have you ever seen the programme, Man vs Wild. One of my favorite programmes, this real-life survival program involves the protagonist (Bear Grylls) being dropped in some of the wildest and far from civilization places around the world where he needs to survive depending only on the resources available in that environment and protect himself from the dangers involved in that environment until he meets civilization again. Why am I telling you about this programme now? Because, the attack technique you are going to learn now, Living of the Land (LoTL) attack is similar to this programme, although the intention is different. What is Living of the Land (LOTL) attack? Living of the Land (LoTL) attack is a type of cyber-attack in which hackers use the legitimate software and functions…

Introduction to Tails OS Tails, which means "The Amnesic Incognito Live System," is a very special Debian-based OS specifically tailored to protect privacy and anonymity when working on a computer. Unlike other operating systems, such as Windows or macOS, Tails doesn't need installation on your hard drive. Tails boots directly from a USB stick or DVD, ensuring no traces of your activities remain after you leave. Tails OS works on the Tor network, which anonymizes your internet traffic through a network of servers all around the world. Hence, this makes it next to impossible to trace or follow up on activities conducted over the Internet. In this respect, Tails becomes an indispensable tool for journalists, activists, or people who need to protect confidential information. At the same time, Tails is…

Exim is an open source mail Transfer Agent (MTA), a software application that transfers emails between computers using protocol like Simple Mail Transfer Protocol (SMTP). Mail transfer agents are used to ensure that emails reach their intended recipients. Where is the software used? Exim Mail Transfer Agent is located inside the network of the organizations and there are millions of users that use Exim Mail Servers. What is the vulnerability? This vulnerability tracked as CVE-2024-39929 has a CVSS score of 9.1 out of 10 allows hackers to deliver malicious attachments directly to target user’s inboxes. Yes, this vulnerability allows any remote hackers to bypass file name extension blocking protection measure of Exim mail server and deliver executable and blocked attachments directly to end users mail boxes. This is possible due…

In July 2024 Issue’s vulnerability this month feature, we will learn about a vulnerability that was detached in one of the most popular SSH servers. This vulnerability affects OpenSSH Server, one of the most popular open-source SSH server software. Where is this Software used? OpenSSH is an Open-Source Secure Shell (SSH) Server that is used for performing remote administration and remote operations on a system. It is a suite of network utilities based on the secure shell (SSH) protocol. It is used to for remote server management, remote login and administration, SCP and SFTP. Millions of people around the world use OpenSSH for secure communications. What is the vulnerability? The vulnerability, codenamed regreSSHion, is a critical vulnerability that could result in unauthenticated remote code execution with root privileges on glibc-based…

In “Exploit Writing” feature of our previous Issue, you learnt how to write an exploit code to exploit remote file inclusion or file upload vulnerability. In this month’s Issue, you will learn how to write an write code an exploit program to exploit Local File Inclusion (LFI) or directory traversal vulnerability. What is Local File Inclusion (LFI) vulnerability? Local File Inclusion or Directory traversal vulnerability is a vulnerability that allows attackers to view the files or content on the target web server that are usually not allowed for viewing. According to OWASP, “Local File Inclusion (also known as LFI) is the process of including files, that are locally present on the server, through the exploiting of vulnerable inclusion procedures implemented in the application. This vulnerability occurs, for example, when a…