Hackercool Magazine October 2021의 목차

Till now in our Magazine readers have learnt about various methods of hacking different wireless networks with various encryption methods like WEP, WPS/WPA2, WPS etc. Almost all of these hacking methods involved brute forcing and password cracking. What if there was another easier way to hack wireless networks without the need of brute forcing. Evil Twin Attack is a Rogue Access Point attack in which a second access point is created with the same SSID (WiFi network name) of the target network. Since it has the same name, it's called twin and as it is malicious it's can be termed Evil Twin. The aim is to confuse users trying to connect to the target wifi network and make them connect to the Evil Twin and thus capture sensitive data. Let'…

Welcome to Metasploit This Month. Let us learn about the latest exploit modules of Metasploit and how they fare in our tests. WP Modern Events Calendar Plugin RCE Module TARGET: Modern Events Calendar <= 5.16.5 MODULE: Exploit TYPE: Remote ANTI-MALWARE: NA Modern Events calendar plugin is a Wordpress plugin used for managing events on wordpress websites. The plugin has over 1,00,000 active installations. The above mentioned versions of the plugin has a file upload vulnerability that allows attackers to gain a reverse shell. The vulnerability exists due to an incorrect check of the extension of the file being uploaded, thus allowing attackers to upload a php file. The uploaded php payload can then be triggered by a call to `/wp-content/uploads/<uploaded_payload_name>.php` However, this module requires credentials of a wordpress account to…

Hi Readers. In this Installit feature, we will learn how to install BloodHound in Windows. BloodHound is a tool used to enumerate and reveal often unintended and hidden relationships within an Active Directory Environment. It is a single page Javascript web application, built on top of Linkurious, compiled with Electron and with a Neo4j database fed by a C# data collector. Bloodhound is used by both Red Team and Blue Team professionals during pen testing. Bloodhound is also used by attackers to easily identify highly complex attack paths to gain high privileged access in the Windows Domain network that would otherwise be impossible to quickly identify. White Hats use BloodHound to identify and eliminate those attack paths. The tool BloodHound is developed by @_wald0, @CptJesus, and @harmj0y. To install BloodHound…