Innehållsförteckning för August 2023 från Hackercool Magazine

All rights reserved. No part of this publication may be reproduced, distributed, or transmitted in any form or by any means, including photocopying, recording, or other electronic or mechanical methods, without the prior written permission of the publisher, except in the case of brief quotations embodied in critical reviews and certain other noncommercial uses permitted by copyright law. For permission requests, write to the publisher, addressed “Attention: Permissions Coordinator,” at the address below. Any references to historical events, real people, or real places are used fictitiously. Names, characters, and places are products of the author’s imagination. Hackercool Cybersecurity (OPC) Pvt Ltd. Banjara Hills, Hyderabad 500034 Telangana, India. Website: www.hackercoolmagazine.com Email Address: admin@hackercoolmagazine.com Information provided in this Magazine is strictly for educational purpose only. Please don't misuse this knowledge to hack…

A security researcher named Ron Ben Yizhak revealed a new method of Windows privilege escalation attack at the 2023 Defcon security conference. Named NoFilter, this attack method exploits the Windows Filtering Platform (WFP). This article is a detailed explanation about how this attack works. Before you try to understand how this new Windows privilege escalation attack works, you need to understand some basic and not so basic concepts in Windows. So, let’s begin. What is a Program? First things first, what is a program? A program is a code or software on your computer that can complete a specific task. You use lot of programs while running Windows OS like Firefox browser, calculator and WinRAR software etc. You should have already realized by now that every program you use to…

Recently Threat actors have been observed exploiting a Zero-day vulnerability (CVE-2023-3887) affecting WinRAR (versions upto 6.22). This vulnerability which was being exploited since April 2023 and still under active exploitation is being used to distribute various malware families like DarkMe, GuLoader and Remcos RAT etc. What is WinRAR? WinRAR is a file archiving (similar to 7Zip) utility for Windows. It runs only on Windows and can create archives of RAR and Zip formats. It can also be used to unpack ARJ, BZIP2, CAB, GZ, ISO, JAR, RAR, LHA, TAR, UUE, XZ, 7, ZIP, ZIPX, Z8T and 7Z archives. WinRAR is used by over 500 million users worldwide. What is CVE-2023-38871 vulnerability? The recently tracked Zero-day vulnerability allows threat actors to create malicious Zip and RAR archives. But these archives display…

It's already that time of the year when the owners of Kali release their third version of the OS of the year. Yes, Kali 2023.3 is ready and let’s see what’s all new is this release. Kali Autopilot Kali Autopilot is an automated attack framework. It was introduced along with Kali Purple in Kali 2023.1. In this release, the GUI of the Kali Autopilot has been redesigned and a lot of new features have also been added. The tool king-phisher has been dropped from the latest release of kali as it is no longer being maintained by its author. New Tools Just like every release, this release too got many new tools added. Here is the list of all the new tools added in the latest release. 1) Calico: It…

A new AV Evasion technique has been revealed by security researcher Daniel Avinoam at the DEFCON security conference held in August 2023. He found that hackers can bypass endpoint security solutions by using Windows Container Isolation Framework (WCIF). This article is a detailed explanation of how this technique works. But first things first. Let’s cover basics first. What are containers? Containers are technology used for packaging and running applications with their whole dependencies, supporting files, tools and configuration settings into a single package. A container runs isolated from the host operating system and even other containers. There are lot of containerization software available. Some of them are, 1) Docker 2) AWS Fargate 3) Amazon ES 4) Google Kubernetes 5) LXC 6) Microsoft Azure 7) Google cloud platform. Unlike a virtual…