Innehållsförteckning för February 2024 från Hackercool Magazine

Edition 7 Issue 2 Hello readers, This is Kalyan Chinta with the latest Issue of Hackercool Magazine. Let’s give you a quick summary of what this Issue contains. The first article of this Issue is how to exploit a vulnerability in Windows Defender SmartScreen (CVE-2023-36025) that is already popular with Black Hat Hackers around the world. This vulnerability describes how to gain initial access by bypassing Windows Defender Smart Screen. Next article brings you one of the infection chains of Ursniff banking trojan. This infection chain starts with a zip archive containing a single HTA file. When victims click on this HTA file, it downloads and executes a PowerShell script which then downloads and executes a DLL file which finally downloads the payload and executes it on the target system.…

In this month’s “Tool of the month” feature, readers will learn about the tool called Hydra. This article is a complete guide to Hydra password cracker. Hydra password cracker runs on Linux, Windows, Solaris, FreeBSD/openBSD, QNX and macOS. Using Hydra, we can crack passwords of various protocols like Asterisk, AFP, Cisco AAA, Cisco auth, Cisco enable, CVS, Firebird, FTP, HTTP-FORM-GET, HTTP-FORM-POST, HTTP-GET, HTTP-HEAD, HTTP-POST, HTTP-PR-OXY, HTTPS-FORM-GET, HTTPS-FORM-POST, HTTPS-GET, HTTPS-HEAD, HTTPS-POST, HTTP-Proxy, ICQ, IMAP, IRC, LDAP, MEMCACHED, MONGODB, MS-SQL, MYSQL, NCP, NNTP, Oracle Listener, Oracle SID, Oracle, PC-Anywhere, PCNFS, POP3, POSTGRES, Radmin, RDP, Rexec, Rlogin, Rsh, RTSP, SAP/R3, SIP, SMB, SMTP, SMTP Enum, SNMP v1+v2+v3, SOCKS5, SSH(v1 and v2), SSHKEY, Subversion, Teamspeak (TS2), Telnet, VMware-Auth, VNC and XMPP. The download information of Hydra is given in our Downloads section. ThisguideusesHydra installed…

In this month’s vulnerability for beginners, we bring our readers multiple vulnerabilities in Ivanti Virtual Private Network (VPN) appliances. The compromising of VPNs and other gateway services has increased steadily in year 2023. I think this trend will continue in 2024 too. The exploitation of the vulnerabilities in Ivanti VPN services appears to be a part of this. What are lvanti Connect Secure (ICS) and lvanti Policy Secure (IPS) appliances? Ivanti Policy Secure (IPS) and Ivanti Connect Secure (ICS) are Network Access Control (NAC) solutions. A Shodan search by us revealed over 801 and 2151 gateways respectively. What are the vulnerabilities? As told earlier, multiple vulnerabilities have been detected in the above appliances. In total there are total 5 vulnerabilities that were disclosed. CVE-2023-46805 On January 10 2023, Ivanti disclosed…

Threat Actors exploited the Windows Defender Smart screen security bypass vulnerability to deploy an open-source stealer called Phemodrone stealer on the target systems on January 2024. The same vulnerability was exploited by another hacker group behind Mispadu banking trojan in the first week of February 2024. Recently a hacker group named Water Hydra (aka Dark Casino) exploited this vulnerability to deploy Darkme malware. But what exactly is this Windows Defender Smart screen security bypass vulnerability? To know this, first you have to learn what is Windows Smart screen and what it does. Before, I explain about this vulnerability, let’s see it in action first. For this, I am using Kali Linux as attacker machine and Windows 10 20H2 as target system. Simply put, I create a meterpreter payload using msfvenom.…

Sylvester Kaczmarek Chief Technology Officer, Imperial College London In today’s interconnected world, space technology forms the backbone of our global communication, navigation and security systems. Satellites orbiting Earth are pivotal for everything from GPS navigation to international banking transactions, making them indispensable assets in our daily lives and in global infrastructure. However, as our dependency on these celestial guardians escalates, so too does their allure to adversaries who may seek to compromise their functionality through cyber means. A satellite’s service could be interrupted, or at worst the spacecraft could be disabled. The expansion of the digital realm into space has opened new frontiers for cyber threats, posing unprecedented challenges. This emerging battleground highlights the urgent need for robust cybersecurity measures to protect our space assets from sophisticated attacks that threaten…