Hackercool Magazine March 2023

TheHackernews reported that multiple hacking attacks are active in wild that are exploiting the recently discovered (and hopefully patched by many) vulnerability in Zoho ManageEngine products. Most notable among them is an alleged cyber espionage operation which according to BitDefender used built in utilities in Windows to download malicious payloads to gain access and establish persistence on the exploited target. Other threat actors are exploiting the vulnerability to install payloads like netcat, CobaltStrike beacon and even AnyDesk software which is used for remote access. A few cases have even seen installing a Windows version of Buhti ransomware. But what is this vulnerability in Zoho that is being used so vividly? Intro Zoho corporation is an Indian MNC, that makes complex software and web based business tools. One of its popular…

Australia has joined a raft of other countries in banning the popular video sharing app TikTok from government devices, as several outlets have today reported. The move comes after a seven month-long review instigated by Home Affairs Minister Clare O’Neil into security risks posed by social medi a platforms. Last week, TikTok CEO Shou Zi Chew was grilled by US politicians in a more than five hour-long Congress hearing. Questions mainly focused on TikTok’s handling of user data and whether it could be accessed by the Chinese Communist Party, as well as how harmful content (such as content on self-harm and eating disorder s) spreads on the app. TikTok has maintained user data are stored securely and held privately, with CEO Shou Zi Chew telling Congress: "Let me state this…

Welcome to Metasploit This Month. Let us learn about the latest exploit modules of Metasploit and how they fare in our tests. DBeaver Password Gather Module TARGET: DBeaver MODULE: POST TYPE: Local ANTI-MALWARE: OFF DBeaver is a universal database administration tool that can be used to manage all kinds of relational & NOSQL databases that can be installed on Windows, Linux, MacOSX. This module will determine if the target system has DBeaver installed and then it will dump all the saved session information from the target system. It will then decrypt passwords for these saved sessions. We have tested this module on the latest version of DBeaver installed on Windows 10. We will connect to a MariaDB database using DBeaver to have some sessions. The download information of both DBeaver…

Check whether your email is a part of any data breach https://haveibeenpwned.com Set the LHOST and session ID and use check command to see if the target is vulnerable. The target is indeed vulnerable. After all the options are set, execute the module. Since 2022, Trojanized installers of TOR anonymity browser are being used to spread clipper malware. As readers can see, we have a new Meterpreter session but with “root” privileges. For this module to work, we need an external exploit the source of which can be downloaded from the link given in our Downloads section (CVE_2022_22242_dc.c). Download this script and place it in/usr/share/Metasploit/namework/external/source/exploit/CVE_2022_22942/directory. CVE_2022_1043 Linux Priv Esc Module. TARGET: Linuxkernel 5.12-rc3 to 5.14-rc7 MODULE: PE TYPE: Local ANTI-MALWARE: NA This privilege escalation module exploits a vulnerability in io_uring…

Recent revelations about the close partnership between the Kremlin and NTC Vulkan, a Russian cybersecurity consultancy with links to the military, provide some rare insights into how the Putin regime weaponises cyberspace. More than 5,000 documents have been leaked by an anonymous whistleblower, angry at Russia’s conduct in the war in Ukraine. They purport to reveal details about hacking tools to seize control of vulnerable servers; domestic and international disinformation campaigns; and ways to digitally monitor potential threats to the regime. Although caution is always necessary before accepting claims about cyber capabilities, it’s noteworthy several Western intelligence agencies have confirmed the documents appear genuine. The leak also corroborates the view of many strategists: that the Russian government regards offensive cyber capabilities as part of a holistic effort to degrade its…

The first of release of Kali Linux this year, the Kali Linux 2023 has been released this month. The release date marks the 10th anniversary of Kali and the makers have definitely added some special things to this release. Let’s see what are they. New Themes & Wallpapers The first thing you will notice as you install and boot up this release of Kali is their new themes and wallpapers. Although makers of Kali have been releasing new themes in their first release of the year, this special update includes new wallpapers for boot, login and Desktop displays. Considering that it is their 10-year anniversary, the new themes are a nod to where Kali Linux started its journey from. It means the makers have designed their backgrounds as a direct…