Indholdsfortegnelse for October 2024 i Hackercool Magazine

Parrot Security OS, popularly called as Parrot OS, is a penetration testing operating system that differs from other hacking operating systems by focusing more on privacy apart from pen testing. The makers of Parrot OS have released the latest version of their operating system, Parrots Security OS 6.2. Let’s see what new features they have added to it. One of the most common ways cyber criminals get access to your data is through your employees. They’ll send fraudulent emails impersonating someone in your organisation and will either ask for personal details or for access to certain files. Links often seem legitimate to an untrained eye and it’s easy to fall into the trap. This is why employee awareness is vital. Updated tools As I always say, what is a new…

Trend Micro Cloud Edge is a Unified Threat Management (UTM) device or appliance that is used to protect a network against threats by combining the physical appliance with a cloud scanning function. A vulnerability has been detected in some versions of the appliance. Trend Micro, a global cybersecurity company safeguards over 5,00,000 organizations and 250 million individuals around the world. About the vulnerability The vulnerability being tracked as CVE-2024-48904 is a command injection vulnerability that can lead to remote code execution. This command injection vulnerability is due to improper neutralization of special elements within commands. No doubt, it has been assigned score of 9.8 by CVSS 3.1 rating making it a critical vulnerability. The versions affected by this vulnerability are 5.65p2 and 7.0. “Without great security, all this great work…

Dogo jee (name changed) was viewing a website. He was living in Australia and just like a number of Tibetan Buddhists around the world, he was excited about the Kagyu Monlam festival to be held form December 15 to 21, 2023. The festival is held every year at Bodh Gaya, India and it attracts thousands of Buddhists who gather to pray for peace, listen to teachings and perform other activities. The festival is led by the Holy Lamas of Tibetan Buddhism. Dogo jee wanted to know more about the Kagyu Monlam as he wanted to visit it that year. So, he opened the website of Kagyu Monlam International Trust, an organization based in India that promotes Tibetan Buddhism internationally. As he was browsing through the website, he got an error…

Mozilla Firefox is one of the widely used browsers around the world. It is used by over 178 million people around the world. An RCE vulnerability in browsers is being exploited in the wild. The vulnerability, being tracked as CVE-2024-9680, has a severity of 9.8 out of 10 in CVSS rating. It also doesn’t require much complex action to exploit this vulnerability. The vulnerability is a use after free vulnerability in the animation timeline component of the browser. Animation timelines are a mechanism of Firefox web animation API and are used to control and synchronize animations on web pages. The credit for discovering this vulnerability goes to security researcher Damien Schaffer from Slovakian cybersecurity company ESET. The use-after-free vulnerability occurs when a memory that has been freed is still used…

One of the readers of our Magazine has recently asked me a question. The question comes something like this. It’s all good creating exploit scripts and payloads (or something like that) with python but what about sharing these scripts or payloads to target users to be executed by them. The meaning of his question he wanted to ask is something like this. If we write an exploit or payload and want our target users to execute it on their systems, how should we do this. It is a very good question indeed. If we want our target user to execute our payloads or scripts written in Python, he should have Python installed on this system. Although this could be a good beginning of an execution chain, it would be good…