Table of contents for April 2022 in Hackercool Magazine

A Phishing is one of the most popular hacking attacks which is used by almost all hackers around the world. According to a Cybersecurity Threat Trends Report for year 2021 by CISCO, more than 80% of security incidents were due to phishing attacks. Phishing attacks are responsible for more than 80% of reported security incidents and over 90% of data breaches. Among phishing, Spear phishing was the most common type of phishing attack with over 65% of all phishing attacks being spear phishing. According to The 2021 Tessian research, employees on average receive 14 malicious emails every year. These report findings tell how dangerous phishing is. However, phishing is going to become more dangerous. This is because a security researcher showed a new technique of phishing known as Browser In…

Welcome to Metasploit This Month. Let us learn about the latest exploit modules of Metasploit and how they fare in our tests. Log4shell HTTP Header Injection Module TARGET: Log4shell Vulnerable Targets TYPE: Remote MODULE : Exploit ANTI-MALWARE : NA In our previous Issue, readers have seen two modules related to Log4shell. One is the LDAP server module and another is a scanner module. This is another module related to Log4shell. This Header Injection module allows pen testers to exploit a HTTP target vulnerable to Log4shell by injecting a format message that will trigger an LDAP connection to Metasploit and load a Java payload. For this module to work, Metasploit needs to run a HTTP server in addition to the LDAP server that the target can connect to. Let’s see how…

A new zero-day vuDetailed lnerability has been discovered, this time in Spring Framework. Spring Framework is an open-source application framework for Java and is normally deployed with Apache Tomcat servers. Vulnerability & Impact There are two vulnerabilities affecting Spring Framework, one is in Spring Core and second is in Spring Cloud. The Spring Core RCE vulnerability impacts Java class objects. The vulnerability in Spring Core has been given name Spring4shell in the lines of Log4shell as both vulnerabilities affect a library. Although, it took its name from Log4shell, it is not as dangerous as its namesake. This vulnerability affects all versions of Spring Core Framework running on JDK versions 9 and after. This vulnerability is tracked as CVE-2022-22965. There is another RCE in Spring Cloud Function versions <=3.1.6 and <=3.2.2.…

You should have seen files with. bat extension in your Windows Systems. These files are known as Batch files or Batch scripts. These files consist of a series of commands to be executed by the command-line interpreter, stored in a plain text file and are similar to shell scripts in Unix systems. Whenever a batch file is run, command shell (cmd.exe) reads the file and executes its commands line by line. Batch files have. BAT file extension and they can be used for malicious purposes also. For example, more recently there is a variant of AvosLocker ransomware, that has been using a batch script as part of its operation. This batch script can disable Windows Update, Windows Defender, Windows Error Recovery, prevent safe boot execution of system security products, creating…