Table of contents for November 2024 in Hackercool Magazine

Check whether you email is a part of any data breach https://haveibeenpwned.com Vulnera https: //github.com/hackercoolmagz/vulnera “There are only two types of companies in the world: those that have been breached and know it and those that have been breached and don’t know it.”—Ted Schlein Although patches have been applied to fix this vulnerability, the cybersecurity company Huntress, reported that these patches don’t mitigate the vulnerability totally. The vulnerability affects Cleo Harmony (upto version 5.8.0.23), Cleo VLTrader (upto version 5.8.0.23) and Cleo Lexicon (upto Version 5.8.0.23). How this vulnerability can be exploied? The device with vulnerable software needs to be exposed to internet for threat actors to exploit this vulnerability. Usually, MFT’s need to be exposed to internet to fulfill their purpose of file transfer between organizations on internet. To exploit…

In the AV Evasion feature of this month, you will learn about a tool that is currently being used by Black Hat Hackers around the world to evade Antivirus and Endpoint Detection and Response (EDR). The name of this tool is EDRSilencer. EDR Silencer is an open-source tool written in C language and available on GitHub. As the name of the tool implies, it silences EDRs from detecting malicious payloads or files. How does this tool do it? It does this by using Windows Filtering Platform (WFP) to block Endpoint detection and Response (EDR) agents from reporting security events to the server. This tool was inspired from another tool called FireBlock from md5sec’s Night task. Before you understand how this tool works, you need to understand some basics. Let’s start.…

Jongkil Jay Jeong Senior Research Fellow in the School of Computing and Information System, The University of Melbourne Despite huge advances in cyber security, one weakness continues to overshadow all others: human error. Research has consistently shown human error is responsible for an overwhelming majority of successful cyber attacks. A recent report puts the figure at 68%. No matter how advanced our technological defences become, the human element is likely to remain the weakest link in the cyber security chain. This weakness affects everyone using digital devices, yet traditional cyber education and awareness programs – and even new, forward-looking laws – fail to adequately address it. So, how can we deal with human-centric cyber security related challenges? Understanding human error There are two types of human error in the context…

Well, welcome to Hacking Active Directory-Rebirth again. In our previous Issue, you learnt about all the basics that are needed to understand about Active Directory hacking. As promised, in this Issue, we are back with a hacking attack that is very common in Windows Active Directory environment. The name of the attack is Pass-the-Hash attack. No matter what attack real-world hackers perform in Active directory environment their end goal is to take control of the domain controller system. As you read in our previous Issues, Domain Controller is the most important part of Active Directory. Before we go into the detailed explanation of Pass-the-Hash attack, let me explain you about the environment or Hacking lab we are using for this article. Let’s explain about each system in the lab now.…

Cybersecurity company Huntress discovered evidence of Black Hat Hacker groups in real-world exploiting a vulnerability in Cleo File Transfer Software. Cleo MFT (Managed File Transfer) is a file transfer software made by Cleo, an Illinois based company that has over 4200 customers worldwide. The customers of Cleo-MFT included, Sadea, Ryder etc. A managed File Transfer (MFT) system is a secure solution used by organizations for reliable inbound and outbound file transfer. About the vulnerability The vulnerability being tracked as CVE-2024-50623 is an unrestricted file upload that could result in unauthenticated remote code execution.…