Innehållsförteckning för June 2021 från Hackercool Magazine

Social Engineering is very gravely underestimated. When I learnt about Social Engineering as part of my CEH certification, I Kalyan Chinta, personally thought it as one chapter which could not be any use to me. The reason for this was because it involved convincing users to allow their systems to be hacked. I thought who would allow themselves to be hacked. Why would anyone install malware or click on a suspicious link intentionally. That would be simply foolish of him or her. However, my opinion would change after some years when I took up the role of a cyber security trainer. As part of my training a new batch for CEH certification, one of the students wanted to try the phishing tutorial in Social Engineering Attack practically. He created a…

Rust is a programming language that began as a personal project in year 2006 by Gradon Hoare, an employee of Mozilla. Named after a family of fungi (we find it odd too), Rust is becoming increasingly popular nowadays. It is termed as an efficient and easy to use language which is considered safe too. It has been Stack Overflow’s most loved language from 2016 to 2020. However, it doesn’t seem these are the features that are making hackers interested in Rust. Its for a different reason altogether. Buer downloader was coded in C since 2019. However, this time it is written in Rust. Rewriting the malware in a new language like Rust enables hackers to better evade Buer detection mechanism. Since Buer was written in C since it began, Anti…

Hi All. I am Mala and today I am gonna show you what’s new in newly released Kali Linux 2021.2. First thing I noticed after booting up Kali Linux 2021.2 is its new Login Background. I logged in (credentials kali:kali) and also see a new Desktop background. Of course you will not see so many Desktop Icons of Windows executables. These are part of our Hacking Labs. These are the default desktop backgrounds. These can be changed by Right Clicking on the Desktop and selecting Desktop Settings option. Normally, the makers of Kali would change the default login and desktop as well as other art work every six months. From this release, they are going to change the defaults at every 20xx.1 release that is at the beginning fof the…

Cactus torch is a shellcode launcher tool that can be used to launch 32 bit shellcode in various attacks. This shellcode can then be injected into any Windows binaries. Windows binaries are those binaries that are already present on a Windows system. Just imagine your pen testing aWindows machine and you want to gain access to it without bringing any third party Malware to the target system. How about using the files already present on the target system to execute your payload. This is also known as file less malware. Windows by default has some binaries for its own genuine functions. However these can be utilized by malicious actors to execute their own payload which is not benign. Examples of these binaries are regsrvr32.exe, notepad.exe, calc.exe and rundll32.exe etc. Rundll32.exe…

Nagios XI Scanner Module TARGET: Nagios XI (almost all versions) TYPE: Remote Module: Auxiliary ANTI-Malware: NA This Auxiliary module detects the version of the Nagios XI web applications and suggest matching exploit modules (if any) for the detected version. We have tested this exploit module on Nagios XI 5.6.5 running on Centos 7. We updated Metasploit and loaded the auxiliary/scanner/http/nagios_xi_scanner module. Note that this is a Authenticated module. So I set all the options including credentials as shown below. After all the options are set, I execute the module. As readers can see, the module not only detected the version of Nagios XI but also suggested some exploits for this version. Since our readers have already seen the nagios_xi_mibs_authenticated_rce and nagios_xi_ plugins_check_plugin_authenticated_rce modules in our previous Issues, let’s see some…

Just last week, I had time to read some article about Pricing Strategies for products and after lot of pondering over slashed the price of our Magazine by almost half. Our Readers should have already noticed it. We thought this fair in keeping with the current collapse of global economy due to Covid 19. However, we think there is some GOD’s plan in action here. This price cut takes our price to almost the Beginning days of Hackercool Magazine when it was sold only on Gumroad. Our Yearly Subscription cost 25$ back then while it is 24.99$ now. Those were tough days for me while I was a novice in not only ethical hacking but also creating the entire Magazine alone. Back then I was passionate about Ethical Hacking and…