Hackercool Magazineの December 2022 の目次

Mimipenguin Module TARGET: Linux MODULE: POST TYPE: Local ANTI-MALWARE: N/A Mimipenguin is actually a tool to dump the login password from the current Linux Desktop user. It is a tool that works akin to mimikatz for Windows. Mimipenguin tool takes advantage of clear text credentials in memory. This module is an implementation of the Mimipenguin tool. This model works by using mem_search() and mem_read() to search the memory region of various processes for needles that are found near passwords in clear text. This module tries to retrieve passwords in gnome_keyring_daemon, vsftpd, SSH etc. The only requirement is that we need to have a meterpreter session with root privileges on the target system. We have tested this module on Ubuntu 21.04 system with a user logged in through GUI. Background the…

1. Installing ChurchInfo The download information of Church Info is also given in our Downloads section. Download ChurchInfo. Researchers have identified a Rust variant of a ransomware strain known as Agenda. This makes it the latest malware to adopt the cross-platform prog language. Extract the contents of the archive. Navigate into the extracted ChurchInfo directory, run the docker container. Interact with the churchInfo docker container and run command highlighted below. When its promoting for password, hit ENTER. Navigate into the SQL directory. Run command mysql-u root -p churchInfo<Install.sql. When it prompts for password, just hit ENTER. Next, install the nano text editor and open the "config.php" file as shown below. Google has formally introduced client-side encryption for Gmail as part of its efforts to secure emails sent using the web…

A North Korean Threat Actor being tracked as UNC4034 has been observed distributing trojanized versions ofthe PUTTYSSH and Telnet client in their spear phishing methodology. The UNC4034 initially establishes communication with its victims over WhatsApp and then lures them to download a malicious ISO package about a fake job. This ISO archive contained two files: one a simple text file with information ofIP address and login credentials. The second file is a trojanized or altered version of PUTTY SSH client. The plan seems to convince the victims to launch a PUTTY session using the credentials given in the text file. Launching PUTTY, however deployed a variant of AIRDRY backdoor on the victim’s systems. It was when I was in 4th standard, that I read about the story of how a…

We think it is now time for us to take our first steps into the cyber security domain of Mobile Hacking. Just like our usual style, we will do it practically first and come to theory part later (if it is really deemed necessary). So what is the better way to start with Mobile Hacking other than hacking an Android with a malicious payload than doing it with the apk payload of msfvenom. But before that, let us give you some awareness on the network being used for this tutorial. We are going to hack an Android device which is placed on the same network as that of Attacker Machine (Kali Linux). Simply put, both my phone (Android) and Attacker machine are placed in the same wireless network. The msfvenom…