Índice para February 2022 em Hackercool Magazine

All rights reserved. No part of this publication may be reproduced, distributed, or transmitted in any form or by any means, including photocopying, recording, or other electronic or mechanical methods, without the prior written permission of the publisher, except in the case of brief quotations embodied in critical reviews and certain other noncommercial uses permitted by copyright law. For permission requests, write to the publisher, addressed “Attention: Permissions Coordinator,” at the address below. Any references to historical events, real people, or real places are used fictitiously. Names, characters, and places are products of the author’s imagination. Hackercool Cybersecurity (OPC) Pvt Ltd. Banjara Hills, Hyderabad 500034 Telangana, India. Website: www.hackercoolmagazine.com Email Address: admin@hackercoolmagazine.com Information provided in this Magazine is strictly for educational purpose only. Please don't misuse this knowledge to hack…

The Makers of Kali Linux have released the first release of this New Year, Kali Linux 2022.1. In this month's What's New we will bring our readers about all the changes made to the latest release of Kali. So let's start right away. 1. New Themes and WallPapers As soon as I booted the newest release of Kali, the first thing I noticed is new visual updates. This update includes new wallpapers for Desktop, Login and boot displays in addition to a refreshed installer theme. This has been done keeping in line with their announcement they made earlier about their making changes on yearly lifecycle. This is how the themes looked in the previous release. "The exploited vulnerabilities included a zero-day vulnerability in the USAHERDS application (CVE-2021 -44207) as well…

Steven Furnell Professor of Cyber Security University Of Nottingham Year after year, passwords like “123456”, “qwerty” and even “password” are found to be the most popular choices and 2021 was no exception. These reports generally come with the same advice to users: create better passwords to protect your security online. Although this is may well be true, it’s also time to realise that years of promoting this message has had little or no effect. To improve things, I believe we need to stop blaming people and instead put the onus on websites and services to encourage and enforce better “cyber hygiene”. Of course, it’s easy to point the finger at the users – they’re ultimately the ones making the poor password choices. But at the same time, it’s now well…

Polkit is a component that controls system-wide privileges in Unix-like operating systems. Put simply, it provides an organized way for non-privileged processes in Linux to communicate with privileged processes. Known earlier as PolicyKit, it’s name was changed to polkit since version 0. 1 05 which was released in April 201 2 to emphasize the rewritten component and changed API. In Linux, you use SUDO to usually execute commands with privileges of a root user. However, it can also be done with polkit by using command pkexec. But the fact is SUDO is more preferred as it is more easily configurable. So how is this polkit exploited to elevate privileges on a Linux system. A memory corruption vulnerability PwnKit (CVE-2021 -4034) was discovered in the pkexec command (which is installed on…

Welcome to Metasploit This Month. Let us learn about the latest exploit modules of Metasploit and how they fare in our tests. Wordpress Plugin Pie-Register Auth Bypass RCE Module TARGET: WP Pie - Register Plugin <= 3.7.1.4 TYPE: Remote MODULE: Exploit ANTI-MALWARE: NA Wordpress Pie-register is a Wordpress plugin used for creating registration forms with a simple drag and drop. The above mentioned versions of the plugin have a authorization bypass vulnerability in 1 POST request. This module generates a valid cookie by exploiting this vulnerability. By using this cookie, hopefully of the admin, it will generate a plugin that is uploaded to the target and executed to gain remote code execution. We have tested this exploit module on Pie register plugin version 3.7.1 .4. The download information for the…