🎩BLACK HAT🎩

2021-11-21 21:11:06 Open / Comment

2021-11-17 20:00:31 Automatic scanning for SSL vulnerability

HeartBleed, CCS Injection, SSLv3 POODLE, FREAK ... etc

Support vulnerability:
- CVE-2007-1858] Anonymous Cipher
- CVE-2012-4929] CRIME (SPDY)
- CVE-2014-0160] CCS Injection
- CVE-2014-0224] HeartBleed
- CVE-2014-3566] SSLv3 POODLE
- CVE-2015-0204] FREAK Attack
- CVE-2015-4000] LOGJAM Attack
- CVE-2016-0800] SSLv2 DROWN

Installation:
apt-get install openssl
git clone https://github.com/hahwul/a2sv.git
cd a2sv
pip2 install argparse
pip2 install netaddr

Usage:
python2 a2sv.py -h

@data_brokers Open / Comment

2021-11-13 08:06:13 Open / Comment

2021-11-05 07:14:45 Background information:

The files we have received were used scripts by group TeamTNT in their Chimaera campaign. This campaign has been discussed multiple times by various security vendors and researchers.

1. TrendMicro discussed it here: https://www.trendmicro.com/en_us/research/21/c/teamtnt-continues-attack-on-the-cloud--targets-aws-credentials.html

2. PaloAlto Unit42 discussed it here: https://unit42.paloaltonetworks.com/hildegard-malware-teamtnt/

The password: infected Open / Comment

2021-10-16 19:37:03 OSEP Exam Leak

Electrician (Scada), ACBank, Betapharma, Labs Open / Comment

2021-10-15 21:42:39 Active Directory Attacks.



• It has been 22 years since the creation of the Active Directory directory service. During this time, the service has acquired functionality, protocols, and various clients. But the need to maintain compatibility with a number of legacy clients forces you to have compatibility-oriented default settings. Administrators often do not change them, and this creates a big risk.

* Today I am sharing with you an excellent repository, which contains a huge amount of information, ranging from audit tools, ending with methods and examples for obtaining information, attacks and fixing in #AD.

https://github.com/swisskyrepo/PayloadsAllTheThings Open / Comment

2021-10-14 05:40:53 Hacking Kubernetes: Threat-Driven Analysis and Defense. Open / Comment

2021-10-14 05:37:16 Open / Comment