Table of contents for February 2023 in Hackercool Magazine

All rights reserved. No part of this publication may be reproduced, distributed, or transmitted in any form or by any means, including photocopying, recording, or other electronic or mechanical methods, without the prior written permission of the publisher, except in the case of brief quotations embodied in critical reviews and certain other noncommercial uses permitted by copyright law. For permission requests, write to the publisher, addressed “Attention: Permissions Coordinator,” at the address below. Any references to historical events, real people, or real places are used fictitiously. Names, characters, and places are products of the author’s imagination. Hackercool Cybersecurity (OPC) Pvt Ltd. Banjara Hills, Hyderabad 500034 Telangana, India. Website: www.hackercoolmagazine.com Email Address: admin@hackercoolmagazine.com Information provided in this Magazine is strictly for educational purpose only. Please don't misuse this knowledge to hack…

Microsoft’s official ban of Macros by default has made hackers to think of innovative methods to deliver malware. The recently seen method is to deliver malware using Microsoft OneNote attachments. Proof point, the cybersecurity firm catering to Enterprise security detected over 50 hacking campaigns using this method in January 2023 alone. The malware families being delivered using this method include Agent Tesla, Quasar RAT, Redline Stealer, AsyncRAT, XWorm, DoubleBack, Qakbot, BATLoader and Formbook. What Is Microsoft OneNote? I will tell you the truth frankly. even though you think I am the dumbest person on this earth. I had no idea what is Microsoft OneNote and what is it used for until this hacking method came to light. Well, what is it then? Microsoft OneNote is a note-taking software developed by…

Athena OS is an Arch Linux based operating system built for penetration testing just like Kali and Parrot OS. Unlike Kali or Parrot OS, Athena OS has access to Black Arch repository which is the biggest pen testing tool warehouse available. Although based on Arch, Athena OS has been designed to simplify complexity and user oriented. Athena OS is also lightweight and flexible. Recently, Athena OS has seen its latest release: code named Parthenos. Standing with its Ancient Greek tone, Parthenos means “virgin” in Greek. Let’s see what’s new in this latest release. While installing the latest release of Athena OS, “Parthenos OS”, users will find many options while installing like choosing a shell you like and choosing your favorite notetaking application to be installed on the OS. No Time…

Cacti CMD Injection Module TARGET: Cacti > 1.2.22 MODULE: Exploit TYPE: Remote ANTI-MALWARE: NA Cacti is an open source, web-based network monitoring, performance, fault and configuration management framework written in PHP any MYSQL. The above-mentioned versions of Cacti have an unauthenticated command injection vulnerability which can be exploited to get a shell with “www-data” user privileges. We have tested this module on Cacti 1 .2.22. The installation and configuration of the vulnerable target is given in our Installations section. Let’s see how this module works. After the target is set, load the cacti_unauthenticated cmd_injection module. A new malware campaign was detected which takes control of users Facebook and YouTube accounts and rent out access to raise view counts and likes for videos and posts shared on the platforms. Set all…

1. Installing and Configuring Cacti Go to the Downloads section at the end of this Issue and click on the link for downloading vulnerable Cacti code. Download two files from there: “docker-compose.yml” and “endpoint.sh”. If downloading these two files is not possible, copy the contents of these two files into files with same names. Use docker-compose up -d command to run this docker container. Once the container is running up and ready, find out its IP address using docker inspect <container id> command. Open a browser and login into the Cacti using default credentials (admin:admin). Click “Next”, “Next” and “Next” until you see this. Then “Confirm Installation” and click on “Install”. Click on Create Graphs. Select the option “Device-uptime” and click on “Create”. Click on “OK”. The target is set…