Table of contents for July 2021 in Hackercool Magazine

Edition 4 Issue 7 This Issue is a new milestone for Hackercool Magazine in two ways. First, this Issue brings the first Real World Hacking Scenario of attacking a Windows Domain and second this Issue also brings first Wireless hacking scenario. As I already announced to our readers, we almost covered all the hacking secnarios involving Windows workgroup networks. With most of the companies having Windows Domain networks, it only becomes logical that our Magazine has to include scenarios based on Domain networks. The first and foremost scenario has been intentionally made simple so that our readers can understand how a Windows Domain works and how hacking works in in a Windows domain compared to to a Windows workgroup. It also almost simulates the first internal pen test I performed…

Paul Haskell Dowland Asociate Dean (Computing & Security) Edith Cowan University Roberto Musotto Research Fellow, Edith Cowan University A major journalistic investigation has found evidence of malicious software being used by governments around the world, including allegations of spying on prominent individuals. From a list of more 50,000 phone numbers, journalists identified more than 1,000 people in 50 countries reportedly under surveillance using the Pegasus spyware. The software was developed by the Israeli company NSO Group and sold to government clients. Among the reported targets of the spyware are journalists, politicians, government officials, chief executives and human rights activists. "The Pegasus spyware can infect the phones of victims through a variety of mechanisms. Some approaches may involve an SMS or iMessage that provides a link to a website." Reports thus…

PrintNightmare is a critical vulnerability affecting the Microsoft Windows operating systems. The recently disclosed vulnerability is present in the print spooler service of Microsoft Windows. The printer spooler service is used for printing services and is turned on by default. The versions of Windows vulnerable to PrintNightmare include Windows 7 to Windows 10 and windows Server 2008 to the latest version of Windows Servers. The PrintNightmare vulnerability has two variants: one is enabling remote code execution (CVE-2021-34527) and the other privilege escalation (CVE-2021-1675). In this article, readers will see a demonstration of exploiting the privilege escalation vulnerability in PrintNightmare. For this demonstration, we will use Windows 10 version 1809. The download information of the powershell script we used in this demo is given in our Downloads section. In this scenario,…

Q: What is a zero click attack? A: A: Zero click attack is an hacking attack which does not require any user interaction for the device to get hacked. For example, take Pegasus spyware, the spyware created by NSO Group, an Israeli Cybersecurity firm. This spyware infects your phone through Whatsapp without you needing to perform any action like clicking a link or or visiting a website. This is considered a dangerous attack because normal cyber security practices you use for safeguarding yourself will not protect you at all. Q: How do I use Kali Linux Metasploit to exploit Kali Linux? A: Just like your use kali Linux metasploit to exploit other devices. Just find any vulnerability in Kali Linux, check out if it has any metasploit module and use…

Haserl File Download Module TARGET: Alpine Linux with Haserl installed TYPE: Remote MODULE: POST ANTI-MALWARE: NA Haserl is a tool that uses LUA script to create CGI for web servers. Normally when SETUID bit is set to root, haserl will drop the UID to the owner of the CGI script. This module exploits the fact that calling haserl on a file will make it not only change the effective UID but also display the content of that file. Although most Linux distributions don't use haserl, Alpine Linux still uses it. This is a POST exploit module and we tested this on the latest release of Alpine linux with the latest release of haserl setup on it. Let's see how this exploit module works. Since this is a POST module we…