Hackercool Magazine February 2022

All rights reserved. No part of this publication may be reproduced, distributed, or transmitted in any form or by any means, including photocopying, recording, or other electronic or mechanical methods, without the prior written permission of the publisher, except in the case of brief quotations embodied in critical reviews and certain other noncommercial uses permitted by copyright law. For permission requests, write to the publisher, addressed “Attention: Permissions Coordinator,” at the address below. Any references to historical events, real people, or real places are used fictitiously. Names, characters, and places are products of the author’s imagination. Hackercool Cybersecurity (OPC) Pvt Ltd. Banjara Hills, Hyderabad 500034 Telangana, India. Website: www.hackercoolmagazine.com Email Address: admin@hackercoolmagazine.com Information provided in this Magazine is strictly for educational purpose only. Please don't misuse this knowledge to hack…

Polkit is a component that controls system-wide privileges in Unix-like operating systems. Put simply, it provides an organized way for non-privileged processes in Linux to communicate with privileged processes. Known earlier as PolicyKit, it’s name was changed to polkit since version 0. 1 05 which was released in April 201 2 to emphasize the rewritten component and changed API. In Linux, you use SUDO to usually execute commands with privileges of a root user. However, it can also be done with polkit by using command pkexec. But the fact is SUDO is more preferred as it is more easily configurable. So how is this polkit exploited to elevate privileges on a Linux system. A memory corruption vulnerability PwnKit (CVE-2021 -4034) was discovered in the pkexec command (which is installed on…

Maggie Smith Assistant Professor of Public Policy United States Military Academy West Point The build up of Russian forces along Belarus’ 665-mile border with Ukraine is a physical manifestation of Russia’s intense interest in the region. Russia annexed Crimea in 2014, and now Russian President Valdimir Putin appears intent on pulling Ukraine under Russia’s influence and denying it a close relationship with the West. But even as Russia engages in brinksmanship from snow-covered fields in Belarus to meeting rooms in Geneva, Moscow is already at war with Kyiv – cyberwar. Russia has been waging this fight since at least 2014. In cyberspace, Russia has interfered in Ukrainian elections, targeted its power grid, defaced its government websites and spread disinformation. Strategically, Russian cyber operations are designed to undermine the Ukrainian government…

The Makers of Kali Linux have released the first release of this New Year, Kali Linux 2022.1. In this month's What's New we will bring our readers about all the changes made to the latest release of Kali. So let's start right away. 1. New Themes and WallPapers As soon as I booted the newest release of Kali, the first thing I noticed is new visual updates. This update includes new wallpapers for Desktop, Login and boot displays in addition to a refreshed installer theme. This has been done keeping in line with their announcement they made earlier about their making changes on yearly lifecycle. This is how the themes looked in the previous release. "The exploited vulnerabilities included a zero-day vulnerability in the USAHERDS application (CVE-2021 -44207) as well…

CVE-2022-21907 vulnerability or HTTP Protocol Stack RCE vulnerability is a name given to a remote code execution vulnerability in Windows Internet Information Services (IIS) component. It affects the kernel module inside http.sys specifically since it handles most of the IIS core operations. Mostly, this vulnerability can lead to denial of service (DOS) of the victim’s machine by crashing (Blue Screen Of Death) the target system. It can also be possible to achieve remote code execution by combining this vulnerability with another vulnerability. The Operating Systems affected by this CVE-2022-21907 vulnerability are Windows 10 Version 1809 for 32-bit / x64 / ARM64 Windows 10 Version 21H1 for 32-bit / x64 / ARM64 Windows 10 Version 20H2 for 32-bit / x64 / ARM64 Windows 10 Version 21H2 for 32-bit / x64 /…

Welcome to Metasploit This Month. Let us learn about the latest exploit modules of Metasploit and how they fare in our tests. Wordpress Plugin Pie-Register Auth Bypass RCE Module TARGET: WP Pie - Register Plugin <= 3.7.1.4 TYPE: Remote MODULE: Exploit ANTI-MALWARE: NA Wordpress Pie-register is a Wordpress plugin used for creating registration forms with a simple drag and drop. The above mentioned versions of the plugin have a authorization bypass vulnerability in 1 POST request. This module generates a valid cookie by exploiting this vulnerability. By using this cookie, hopefully of the admin, it will generate a plugin that is uploaded to the target and executed to gain remote code execution. We have tested this exploit module on Pie register plugin version 3.7.1 .4. The download information for the…