Digging up information on a business or individual is an extremely important part of information gathering. There are many programs and tools that can provide you with detailed reports on desired networks/businesses. The one discussed in this article is a program called Maltego. By digging up data from all visibly available sectors of the internet, […]
Performing Reconnaissance with Maltego Read More »
SambaCry is using a vulnerability in Samba installations to compromise Linux machines and use them as victims in a large cryptocurrency (Bitcoin or Monero or any other currency) mining process, also enables a remote attacker to hack into affected Linux systems. Samba said in a security advisory: “All versions of Samba from 3.5.0 onwards are
Hackers now exploiting SambaCry vulnerability to attack Linux! Read More »
Compromising the credentials of users in an Active Directory environment can assist in providing new possibilities for pivoting around the network. It allows for additional access to various network resources like shares, email and other systems. In this week’s episode of Tradecraft Security Weekly Beau Bullock (@dafthack) discusses how to perform password spraying attacks using
Password Spraying Windows Active Directory Accounts – Tradecraft Security Weekly #5 Read More »
A unique and perhaps a very practical way of injecting malware into an entire network has been discovered in which the hacking group uses Intel’s Active Management Technology (AMT) to bypass Windows’ built-in firewall and as such go undetected. Read more
A Malware That can Bypass Windows Firewall Using Intel’s Management Tech Read More »
Password cracking tools are useful for an assortment of different things. Normally, a person’s first thought when hearing “password cracking tool” is malicious intent. What they don’t know is that password cracking tools are also used for recovering passwords, reviewing password security, bench-marking, and/or identifying data in a hash. Read more
Cracking and Recovering Passwords via the Hashcat Tool Read More »
VMware has released this week three security updates for a number of its products, including VMware Horizon, vSphere Products. Vmware has published an advisory to notify users that VDP versions (5.5.x, 5.8.x, 6.0.x and 6.1.x) are affected by two critical Java deserialization and credentials management flaws. Read more
VMware Patches security issues in Horizon, vSphere Products Read More »
That was just about the core of Pirate Bay’s co-founder, Peter Sunde‘s speak at tech pageant Brain Bar Budapest. Forget about the long run, the matter is now. In Sunde’s opinion, folks focus an excessive amount of on what would possibly happen, rather than what is happening. He usually gets questions on however a digitally
Out of all security scanners, w3af easily offers the best user-friendly interface with maximum amount of powerful execution. w3af’s official website explains their tool as: “[w3af] is a Web Application Attack and Audit Framework. The project’s goal is to create a framework to help you secure your web applications by finding and exploiting all web
How to Secure Web Applications with w3af Read More »
Security researchers discovered a new clever method (Doubleswitch) currently being used by attackers to take over verified Twitter accounts and rename them to famous people to spread false news. Read more
A new social media attack called “Doubleswitch” Read More »