Welcome to our

Cyber Security News Aggregator

.

Cyber Tzar

provide a

cyber security risk management

platform; including automated penetration tests and risk assesments culminating in a "cyber risk score" out of 1,000, just like a credit score.
Navigation
Return to Planet "Home"
Ordered/grouped:
Filter applied:
Current page:
Go to "Navigation Help" (page end)
Articles in this collection: 15,971

Topic: Hacking

Articles recieved 06/06/2021
Article: Black Hat Asia 2019: CQTools: The New Ultimate Hacking Toolkit
Content:
http://www.securitytube.net/video/17810 
🔥🔥
 
Published: :
Received: 2021 06 06 09:05:32
Feed: SecurityTube.Net
Source: SecurityTube.Net
Category: News
Topic: Hacking
Article: Black Hat Asia 2019: Investigating Malware Using Memory Forensics - A Practical Approach
Content:
http://www.securitytube.net/video/17811 
🔥🔥
 
Published: :
Received: 2021 06 06 09:05:32
Feed: SecurityTube.Net
Source: SecurityTube.Net
Category: News
Topic: Hacking
Article: Black Hat Asia 2019: Zombie POODLE, GOLDENDOODLE, and How TLSv1.3 Can Save Us All
Content:
http://www.securitytube.net/video/17812 
🔥🔥
 
Published: :
Received: 2021 06 06 09:05:32
Feed: SecurityTube.Net
Source: SecurityTube.Net
Category: News
Topic: Hacking
Article: Black Hat Asia 2019: Return of the Insecure Brazilian Voting Machines
Content:
http://www.securitytube.net/video/17813 
🔥🔥
 
Published: :
Received: 2021 06 06 09:05:32
Feed: SecurityTube.Net
Source: SecurityTube.Net
Category: News
Topic: Hacking
Article: DNSAdmin To DC Compromise
Content:
http://www.securitytube.net/video/17814 
🔥🔥
 
Published: :
Received: 2021 06 06 09:05:32
Feed: SecurityTube.Net
Source: SecurityTube.Net
Category: News
Topic: Hacking
Article: Analysis of memory from a system infected with Zeus bot
Content:
http://www.securitytube.net/video/17815 
🔥🔥
 
Published: :
Received: 2021 06 06 09:05:32
Feed: SecurityTube.Net
Source: SecurityTube.Net
Category: News
Topic: Hacking
Article: XOR ECX, 0x00 - What The ShellCode (Part 1) - Billy Meyers
Content:
http://www.securitytube.net/video/17816 
🔥🔥
 
Published: :
Received: 2021 06 06 09:05:32
Feed: SecurityTube.Net
Source: SecurityTube.Net
Category: News
Topic: Hacking
Article: XOR ECX 0x00 What The ShellCode (Part 2) - James Haughom Jr.
Content:
http://www.securitytube.net/video/17817 
🔥🔥
 
Published: :
Received: 2021 06 06 09:05:32
Feed: SecurityTube.Net
Source: SecurityTube.Net
Category: News
Topic: Hacking
Article: [Wi-Fi Attack-Defense] Preferred Network List (Basics)
Content:
http://www.securitytube.net/video/17831 
🔥🔥
 
Published: :
Received: 2021 06 06 09:05:32
Feed: SecurityTube.Net
Source: SecurityTube.Net
Category: News
Topic: Hacking
Article: [Wi-Fi Attack-Defense] Wi-Fi Network Reconnaissance
Content:
http://www.securitytube.net/video/17832 
🔥🔥
 
Published: :
Received: 2021 06 06 09:05:32
Feed: SecurityTube.Net
Source: SecurityTube.Net
Category: News
Topic: Hacking
Article: [Wi-Fi Attack-Defense] Wi-Fi Network Reconnaissance II
Content:
http://www.securitytube.net/video/17833 
🔥🔥
 
Published: :
Received: 2021 06 06 09:05:32
Feed: SecurityTube.Net
Source: SecurityTube.Net
Category: News
Topic: Hacking
09:05 Black Hat Asia 2019: CQTools: The New Ultimate Hacking Toolkit
🔥🔥
09:05 Black Hat Asia 2019: Investigating Malware Using Memory Forensics - A Practical Approach
🔥🔥
09:05 Black Hat Asia 2019: Zombie POODLE, GOLDENDOODLE, and How TLSv1.3 Can Save Us All
🔥🔥
09:05 Black Hat Asia 2019: Return of the Insecure Brazilian Voting Machines
🔥🔥
09:05 DNSAdmin To DC Compromise
🔥🔥
09:05 Analysis of memory from a system infected with Zeus bot
🔥🔥
09:05 XOR ECX, 0x00 - What The ShellCode (Part 1) - Billy Meyers
🔥🔥
09:05 XOR ECX 0x00 What The ShellCode (Part 2) - James Haughom Jr.
🔥🔥
09:05 [Wi-Fi Attack-Defense] Preferred Network List (Basics)
🔥🔥
09:05 [Wi-Fi Attack-Defense] Wi-Fi Network Reconnaissance
🔥🔥
09:05 [Wi-Fi Attack-Defense] Wi-Fi Network Reconnaissance II
🔥🔥

Topic: Hacking

Articles recieved 06/06/2021
Article: Backdooring an AWS account - published over 8 years ago.
Content:
https://danielgrzelak.com/backdooring-an-aws-account-da007d36f8f9?source=rss----a08c5a243c01---4 
🔥🔥
 
Published: 2016 07 10 03:05:49
Received: 2021 06 06 09:05:30
Feed: from:mubix #SharedLinks - Twitter Search
Source: from:mubix #SharedLinks - Twitter Search
Category: News
Topic: Hacking
Article: Exploring an AWS account post-compromise - published over 8 years ago.
Content:
https://danielgrzelak.com/exploring-an-aws-account-after-pwning-it-ff629c2aae39?source=rss----a08c5a243c01---4 
🔥🔥
 
Published: 2016 07 10 03:06:02
Received: 2021 06 06 09:05:30
Feed: from:mubix #SharedLinks - Twitter Search
Source: from:mubix #SharedLinks - Twitter Search
Category: News
Topic: Hacking
Article: Disrupting AWS logging - published over 8 years ago.
Content:
https://danielgrzelak.com/disrupting-aws-logging-a42e437d6594?source=rss----a08c5a243c01---4 
🔥🔥
 
Published: 2016 07 10 03:06:19
Received: 2021 06 06 09:05:30
Feed: from:mubix #SharedLinks - Twitter Search
Source: from:mubix #SharedLinks - Twitter Search
Category: News
Topic: Hacking
Article: SLIDES: From zero to SYSTEM of full disk encrypted Windows system (Hack In Paris 2016) - published over 8 years ago.
Content:
http://blog.ahmednabeel.com/slides-hip16-from-zero-to-system-of-full-disk-encrypted-windows/ 
🔥🔥
 
Published: 2016 07 10 03:27:22
Received: 2021 06 06 09:05:30
Feed: from:mubix #SharedLinks - Twitter Search
Source: from:mubix #SharedLinks - Twitter Search
Category: News
Topic: Hacking
Article: How I Could Steal Money from Instagram, Google and Microsoft - published over 8 years ago.
Content:
https://www.arneswinnen.net/2016/07/how-i-could-steal-money-from-instagram-google-and-microsoft/ 
🔥🔥
 
Published: 2016 07 17 05:09:03
Received: 2021 06 06 09:05:30
Feed: from:mubix #SharedLinks - Twitter Search
Source: from:mubix #SharedLinks - Twitter Search
Category: News
Topic: Hacking
Article: How to Build Your Own Penetration Testing Drop Box - published about 8 years ago.
Content:
http://www.blackhillsinfosec.com/?p=5156 
🔥🔥
 
Published: 2016 08 21 04:55:12
Received: 2021 06 06 09:05:30
Feed: from:mubix #SharedLinks - Twitter Search
Source: from:mubix #SharedLinks - Twitter Search
Category: News
Topic: Hacking
Article: Forensics Quickie: PowerShell Versions and the Registry - published about 8 years ago.
Content:
http://www.4n6k.com/2016/08/forensics-quickie-powershell-versions.html 
🔥🔥
 
Published: 2016 08 21 05:00:10
Received: 2021 06 06 09:05:30
Feed: from:mubix #SharedLinks - Twitter Search
Source: from:mubix #SharedLinks - Twitter Search
Category: News
Topic: Hacking
Article: Creating Real Looking User Accounts in AD Lab - published about 8 years ago.
Content:
http://www.darkoperator.com/blog/2016/7/30/creating-real-looking-user-accounts-in-ad-lab 
🔥🔥
 
Published: 2016 08 26 23:20:29
Received: 2021 06 06 09:05:30
Feed: from:mubix #SharedLinks - Twitter Search
Source: from:mubix #SharedLinks - Twitter Search
Category: News
Topic: Hacking
Article: ServiceNow workflow, Powershell and JSON - published about 8 years ago.
Content:
https://www.shellandco.net/servicenow-workflow-powershell-json/ 
🔥🔥
 
Published: 2016 09 02 14:07:16
Received: 2021 06 06 09:05:30
Feed: from:mubix #SharedLinks - Twitter Search
Source: from:mubix #SharedLinks - Twitter Search
Category: News
Topic: Hacking
Article: Google Docs becomes Google SOCKS: C2 Over Google Drive - published about 8 years ago.
Content:
http://www.blackhillsinfosec.com/?p=5230 
🔥🔥
 
Published: 2016 09 05 15:25:01
Received: 2021 06 06 09:05:30
Feed: from:mubix #SharedLinks - Twitter Search
Source: from:mubix #SharedLinks - Twitter Search
Category: News
Topic: Hacking
Article: Using NetShell to execute evil DLLs and persist on a host - published about 8 years ago.
Content:
http://www.adaptforward.com/2016/09/using-netshell-to-execute-evil-dlls-and-persist-on-a-host/ 
🔥🔥
 
Published: 2016 10 03 01:55:25
Received: 2021 06 06 09:05:30
Feed: from:mubix #SharedLinks - Twitter Search
Source: from:mubix #SharedLinks - Twitter Search
Category: News
Topic: Hacking
Article: Maltego 4 CE / Kali Linux release is ready for download! - published about 8 years ago.
Content:
http://maltego.blogspot.com/2016/09/maltego-4-ce-kali-linux-release-is.html 
🔥🔥
 
Published: 2016 10 03 03:29:13
Received: 2021 06 06 09:05:30
Feed: from:mubix #SharedLinks - Twitter Search
Source: from:mubix #SharedLinks - Twitter Search
Category: News
Topic: Hacking
Article: Call for Papers Open - published about 8 years ago.
Content:
http://shmoocon.org/2016/09/20/call-for-papers-open/ 
🔥🔥
 
Published: 2016 10 03 03:29:51
Received: 2021 06 06 09:05:30
Feed: from:mubix #SharedLinks - Twitter Search
Source: from:mubix #SharedLinks - Twitter Search
Category: News
Topic: Hacking
Article: Slack Notifications for Cobalt Strike - published almost 8 years ago.
Content:
http://threatexpress.com/2016/12/slack-notifications-for-cobalt-strike/ 
🔥🔥
 
Published: 2017 01 17 17:26:46
Received: 2021 06 06 09:05:30
Feed: from:mubix #SharedLinks - Twitter Search
Source: from:mubix #SharedLinks - Twitter Search
Category: News
Topic: Hacking
Article: Arbitrary Code Execution at Ring 0 using CVE-2018-8897 - published over 6 years ago.
Content:
https://blog.can.ac/2018/05/11/arbitrary-code-execution-at-ring-0-using-cve-2018-8897/ 
🔥🔥
 
Published: 2018 05 14 05:21:39
Received: 2021 06 06 09:05:30
Feed: from:mubix #SharedLinks - Twitter Search
Source: from:mubix #SharedLinks - Twitter Search
Category: News
Topic: Hacking
Article: Crack me if you can 2018 write-up - published about 6 years ago.
Content:
https://blog.cynosureprime.com/2018/08/crack-me-if-you-can-2018-write-up.html 
🔥🔥
 
Published: 2018 08 23 14:48:18
Received: 2021 06 06 09:05:30
Feed: from:mubix #SharedLinks - Twitter Search
Source: from:mubix #SharedLinks - Twitter Search
Category: News
Topic: Hacking
Article: The Dangers of Client Probing on Palo Alto Firewalls - published about 6 years ago.
Content:
https://www.n00py.io/2018/08/the-dangers-of-client-probing-on-palo-alto-firewalls/ 
🔥🔥
 
Published: 2018 08 23 14:49:17
Received: 2021 06 06 09:05:30
Feed: from:mubix #SharedLinks - Twitter Search
Source: from:mubix #SharedLinks - Twitter Search
Category: News
Topic: Hacking
Article: High Performance Web Brute-Forcing 🕸🐏 - published about 6 years ago.
Content:
http://hiburn8.org/index.php/2018/09/13/high-performance-web-brute-forcing/ 
🔥🔥
 
Published: 2018 10 11 17:43:06
Received: 2021 06 06 09:05:30
Feed: from:mubix #SharedLinks - Twitter Search
Source: from:mubix #SharedLinks - Twitter Search
Category: News
Topic: Hacking
Article: Searching Instagram – part 2 - published almost 5 years ago.
Content:
https://osintcurio.us/2019/10/01/searching-instagram-part-2/ 
🔥🔥
 
Published: 2019 12 18 21:05:18
Received: 2021 06 06 09:05:30
Feed: from:mubix #SharedLinks - Twitter Search
Source: from:mubix #SharedLinks - Twitter Search
Category: News
Topic: Hacking
Article: Managing Active Directory groups from Linux - published almost 5 years ago.
Content:
https://www.n00py.io/2020/01/managing-active-directory-groups-from-linux/ 
🔥🔥
 
Published: 2020 01 17 17:27:39
Received: 2021 06 06 09:05:30
Feed: from:mubix #SharedLinks - Twitter Search
Source: from:mubix #SharedLinks - Twitter Search
Category: News
Topic: Hacking
09:05 Backdooring an AWS account
🔥🔥
09:05 Exploring an AWS account post-compromise
🔥🔥
09:05 Disrupting AWS logging
🔥🔥
09:05 SLIDES: From zero to SYSTEM of full disk encrypted Windows system (Hack In Paris 2016)
🔥🔥
09:05 How I Could Steal Money from Instagram, Google and Microsoft
🔥🔥
09:05 How to Build Your Own Penetration Testing Drop Box
🔥🔥
09:05 Forensics Quickie: PowerShell Versions and the Registry
🔥🔥
09:05 Creating Real Looking User Accounts in AD Lab
🔥🔥
09:05 ServiceNow workflow, Powershell and JSON
🔥🔥
09:05 Google Docs becomes Google SOCKS: C2 Over Google Drive
🔥🔥
09:05 Using NetShell to execute evil DLLs and persist on a host
🔥🔥
09:05 Maltego 4 CE / Kali Linux release is ready for download!
🔥🔥
09:05 Call for Papers Open
🔥🔥
09:05 Slack Notifications for Cobalt Strike
🔥🔥
09:05 Arbitrary Code Execution at Ring 0 using CVE-2018-8897
🔥🔥
09:05 Crack me if you can 2018 write-up
🔥🔥
09:05 The Dangers of Client Probing on Palo Alto Firewalls
🔥🔥
09:05 High Performance Web Brute-Forcing 🕸🐏
🔥🔥
09:05 Searching Instagram – part 2
🔥🔥
09:05 Managing Active Directory groups from Linux
🔥🔥

Topic: Hacking

Articles recieved 06/06/2021
Article: Kubernetes: open etcd - published almost 6 years ago.
Content: Quick post on Kubernetes and open etcd (port 2379)"etcd is a distributed key-value store. In fact, etcd is the primary datastore of Kubernetes; storing and replicating all Kubernetes cluster state. As a critical component of a Kubernetes cluster having a reliable automated approach to its configuration and management is imperative."-from: https://coreos.com/...
https://blog.carnal0wnage.com/2019/01/kubernetes-open-etcd.html 
🔥🔥
 
Published: 2019 01 06 14:00:00
Received: 2021 06 06 09:05:30
Feed: Carnal0wnage and Attack Research Blog
Source: Carnal0wnage and Attack Research Blog
Category: News
Topic: Hacking
Article: Kubernetes: cAdvisor - published almost 6 years ago.
Content: "cAdvisor (Container Advisor) provides container users an understanding of the resource usage and performance characteristics of their running containers. It is a running daemon that collects, aggregates, processes, and exports information about running containers."runs on port 4194Links:https://kubernetes.io/docs/tasks/debug-application-cluster/resource-usa...
https://blog.carnal0wnage.com/2019/01/kubernetes-cadvisor.html 
🔥🔥
 
Published: 2019 01 06 14:00:00
Received: 2021 06 06 09:05:30
Feed: Carnal0wnage and Attack Research Blog
Source: Carnal0wnage and Attack Research Blog
Category: News
Topic: Hacking
Article: Kubernetes: Master Post - published almost 6 years ago.
Content: I have a few Kubernetes posts queued up and will make this the master post to index and give references for the topic. If i'm missing blog posts or useful resources ping me here or twitter.Talks you should watch if you are interested in Kubernetes:Hacking and Hardening Kubernetes Clusters by Example [I] - Brad Geesamanhttps://www.youtube.com/watch?v=vTgQLzeB...
https://blog.carnal0wnage.com/2019/01/kubernetes-master-post.html 
🔥🔥
 
Published: 2019 01 07 14:00:00
Received: 2021 06 06 09:05:30
Feed: Carnal0wnage and Attack Research Blog
Source: Carnal0wnage and Attack Research Blog
Category: News
Topic: Hacking
Article: Kubernetes: Kubelet API containerLogs endpoint - published almost 6 years ago.
Content: How to get the info that kube-hunter reports for open /containerLogs endpointVulnerabilities+---------------+-------------+------------------+----------------------+----------------+| LOCATION       CATEGORY     | VULNERABILITY    | DESCRIPTION          | EVIDENCE       |+---------------+-------------+------------------+----------------------+---------------...
https://blog.carnal0wnage.com/2019/01/kubernetes-kubelet-api-containerlogs.html 
🔥🔥
 
Published: 2019 01 11 14:00:00
Received: 2021 06 06 09:05:30
Feed: Carnal0wnage and Attack Research Blog
Source: Carnal0wnage and Attack Research Blog
Category: News
Topic: Hacking
Article: Kubernetes: Kubernetes Dashboard - published almost 6 years ago.
Content: Tesla was famously hacked for leaving this open and it's pretty rare to find it exposed externally now but useful to know what it is and what you can do with it.Usually found on port 30000kube-hunter finding for it:Vulnerabilities+-----------------------+---------------+----------------------+----------------------+------------------+| LOCATION              ...
https://blog.carnal0wnage.com/2019/01/kubernetes-kubernetes-dashboard.html 
🔥🔥
 
Published: 2019 01 11 14:00:00
Received: 2021 06 06 09:05:30
Feed: Carnal0wnage and Attack Research Blog
Source: Carnal0wnage and Attack Research Blog
Category: News
Topic: Hacking
Article: Kubernetes: List of ports - published almost 6 years ago.
Content: Other Kubernetes portsWhat are some of the visible ports used in Kubernetes?44134/tcp - Helmtiller, weave, calico10250/tcp - kubelet (kublet exploit)No authN, completely open/pods/runningpods/containerLogs10255/tcp - kublet port (read-only)/stats/metrics/pods4194/tcp - cAdvisor2379/tcp - etcd (see it on other ports though)Etcd holds all the configsConfig sto...
https://blog.carnal0wnage.com/2019/01/kubernetes-list-of-ports.html 
🔥🔥
 
Published: 2019 01 14 21:31:00
Received: 2021 06 06 09:05:30
Feed: Carnal0wnage and Attack Research Blog
Source: Carnal0wnage and Attack Research Blog
Category: News
Topic: Hacking
Article: Kubernetes: unauth kublet API 10250 basic code exec - published almost 6 years ago.
Content: Unauth API access (10250)Most Kubernetes deployments provide authentication for this port. But it’s still possible to expose it inadvertently and it's still pretty common to find it exposed via the "insecure API service" option.Everybody who has access to the service kubelet port (10250), even without a certificate, can execute any command inside the contain...
https://blog.carnal0wnage.com/2019/01/kubernetes-unauth-kublet-api-10250.html 
🔥🔥
 
Published: 2019 01 16 14:00:00
Received: 2021 06 06 09:05:30
Feed: Carnal0wnage and Attack Research Blog
Source: Carnal0wnage and Attack Research Blog
Category: News
Topic: Hacking
Article: Kubernetes: unauth kublet API 10250 token theft & kubectl - published almost 6 years ago.
Content: Kubernetes: unauthenticated kublet API (10250) token theft & kubectl access & execkube-hunter output to get us started: do a curl -s https://k8-node:10250/runningpods/ to get a list of running podsWith that data, you can craft your post request to exec within a pod so we can poke around. Example request:curl -k -XPOST "https://k8-node:10250/run/kube-...
https://blog.carnal0wnage.com/2019/01/kubernetes-unauth-kublet-api-10250_16.html 
🔥🔥
 
Published: 2019 01 16 14:00:00
Received: 2021 06 06 09:05:30
Feed: Carnal0wnage and Attack Research Blog
Source: Carnal0wnage and Attack Research Blog
Category: News
Topic: Hacking
Article: Kubernetes: Kube-Hunter 10255 - published almost 6 years ago.
Content: Below is some sample output that mainly is here to see what open 10255 will give you and look like.  What probably of most interest is the /pods endpointor the /metrics endpointor the /stats endpoint $ ./kube-hunter.pyChoose one of the options below:1. Remote scanning      (scans one or more specific IPs or DNS names)2. Subnet scanning      (scans subnets ...
https://blog.carnal0wnage.com/2019/01/kubernetes-kube-hunter-10255.html 
🔥🔥
 
Published: 2019 01 16 14:00:00
Received: 2021 06 06 09:05:30
Feed: Carnal0wnage and Attack Research Blog
Source: Carnal0wnage and Attack Research Blog
Category: News
Topic: Hacking
Article: Abusing Docker API | Socket - published almost 6 years ago.
Content: Notes on abusing open Docker socketsThis wont cover breaking out of docker containersPorts: usually 2375 & 2376 but can be anythingRefs:https://blog.sourcerer.io/a-crash-course-on-docker-learn-to-swim-with-the-big-fish-6ff25e8958b0https://www.slideshare.net/BorgHan/hacking-docker-the-easy-wayhttps://blog.secureideas.com/2018/05/escaping-the-whale-things-...
https://blog.carnal0wnage.com/2019/02/abusing-docker-api-socket.html 
🔥🔥
 
Published: 2019 02 01 13:32:00
Received: 2021 06 06 09:05:30
Feed: Carnal0wnage and Attack Research Blog
Source: Carnal0wnage and Attack Research Blog
Category: News
Topic: Hacking
Article: Jenkins - messing with new exploits pt1 - published over 5 years ago.
Content: Jenkins notes for:https://blog.orange.tw/2019/01/hacking-jenkins-part-1-play-with-dynamic-routing.htmlhttp://blog.orange.tw/2019/02/abusing-meta-programming-for-unauthenticated-rce.htmlto download old jenkins WAR fileshttp://updates.jenkins-ci.org/download/war/1st bug in the blog is a username enumeration bug inJenkins weekly up to and including 2.145Jenkins...
https://blog.carnal0wnage.com/2019/02/jenkins-messing-with-new-exploits-pt1.html 
🔥🔥
 
Published: 2019 02 26 18:46:00
Received: 2021 06 06 09:05:30
Feed: Carnal0wnage and Attack Research Blog
Source: Carnal0wnage and Attack Research Blog
Category: News
Topic: Hacking
Article: Jenkins - messing with exploits pt2 - CVE-2019-1003000 - published over 5 years ago.
Content: After the release of Orange Tsai's exploit for Jenkins. I've been doing some poking. PreAuth RCE against Jenkins is something everyone wants.While not totally related to the blog post and tweet the following exploit came up while searching.What I have figured out that is important is the plug versions as it relates to these latest round of Jenkins exploits. ...
https://blog.carnal0wnage.com/2019/02/jenkins-messing-with-exploits-pt2-cve.html 
🔥🔥
 
Published: 2019 02 27 20:23:00
Received: 2021 06 06 09:05:30
Feed: Carnal0wnage and Attack Research Blog
Source: Carnal0wnage and Attack Research Blog
Category: News
Topic: Hacking
Article: Jenkins Master Post - published over 5 years ago.
Content: A collection of posts on attacking Jenkinshttp://www.labofapenetrationtester.com/2014/08/script-execution-and-privilege-esc-jenkins.htmlManipulating build steps to get RCEhttps://medium.com/@uranium238/shodan-jenkins-to-get-rces-on-servers-6b6ec7c960e2Using the terminal plugin to get RCEhttps://sharadchhetri.com/2018/12/02/managing-jenkins-plugins/Getting st...
https://blog.carnal0wnage.com/2019/02/jenkins-master-post.html 
🔥🔥
 
Published: 2019 02 27 21:46:00
Received: 2021 06 06 09:05:30
Feed: Carnal0wnage and Attack Research Blog
Source: Carnal0wnage and Attack Research Blog
Category: News
Topic: Hacking
Article: Jenkins - SECURITY-200 / CVE-2015-5323 PoC - published over 5 years ago.
Content: API tokens of other users available to adminsSECURITY-200 / CVE-2015-5323API tokens of other users were exposed to admins by default. On instances that don’t implicitly grant RunScripts permission to admins, this allowed admins to run scripts with another user’s credentials.Affected versionsAll Jenkins main line releases up to and including 1.637All Jenkins ...
https://blog.carnal0wnage.com/2019/02/jenkins-security-200-cve-2015-5323-poc.html 
🔥🔥
 
Published: 2019 02 28 00:14:00
Received: 2021 06 06 09:05:30
Feed: Carnal0wnage and Attack Research Blog
Source: Carnal0wnage and Attack Research Blog
Category: News
Topic: Hacking
Article: Jenkins - SECURITY-180/CVE-2015-1814 PoC - published over 5 years ago.
Content: Forced API token changeSECURITY-180/CVE-2015-1814https://jenkins.io/security/advisory/2015-03-23/#security-180cve-2015-1814-forced-api-token-changeAffected VersionsAll Jenkins releases <= 1.605All LTS releases <= 1.596.1PoCTested against Jenkins 1.605Burp outputValidate new token works...
https://blog.carnal0wnage.com/2019/02/jenkins-security-180cve-2015-1814-poc.html 
🔥🔥
 
Published: 2019 02 28 00:51:00
Received: 2021 06 06 09:05:30
Feed: Carnal0wnage and Attack Research Blog
Source: Carnal0wnage and Attack Research Blog
Category: News
Topic: Hacking
Article: Jenkins - decrypting credentials.xml - published over 5 years ago.
Content: If you find yourself on a Jenkins box with script console access you can decrypt the saved passwords in credentials.xml in the following way:hashed_pw='$PASSWORDHASH'passwd = hudson.util.Secret.decrypt(hashed_pw)println(passwd)You need to perform this on the the Jenkins system itself as it's using the local master.key and hudson.util.SecretScreenshot belowCo...
https://blog.carnal0wnage.com/2019/02/jenkins-decrypting-credentialsxml.html 
🔥🔥
 
Published: 2019 02 28 15:22:00
Received: 2021 06 06 09:05:30
Feed: Carnal0wnage and Attack Research Blog
Source: Carnal0wnage and Attack Research Blog
Category: News
Topic: Hacking
Article: Jenkins - Identify IP Addresses of nodes - published over 5 years ago.
Content: While doing some research I found several posts on stackoverflow asking how to identify the IP address of nodes.  You might want to know this if you read the decrypting credentials post and managed to get yourself some ssh keys for nodes but you cant actually see the node's IP in the Jenkins UI.Stackoverflow link: https://stackoverflow.com/questions/14930329...
https://blog.carnal0wnage.com/2019/03/jenkins-identify-ip-addresses-of-nodes.html 
🔥🔥
 
Published: 2019 03 05 02:16:00
Received: 2021 06 06 09:05:30
Feed: Carnal0wnage and Attack Research Blog
Source: Carnal0wnage and Attack Research Blog
Category: News
Topic: Hacking
Article: Jenkins - messing with exploits pt3 - CVE-2019-1003000 - published over 5 years ago.
Content: References:https://www.exploit-db.com/exploits/46453http://blog.orange.tw/2019/02/abusing-meta-programming-for-unauthenticated-rce.htmlThis post covers the Orange Tsai Jenkins pre-auth exploitVuln versions: Jenkins < 2.137 (preauth)Pipeline: Declarative Plugin up to and including 1.3.4Pipeline: Groovy Plugin up to and including 2.61Script Security Plugin ...
https://blog.carnal0wnage.com/2019/03/jenkins-messing-with-exploits-pt3-cve.html 
🔥🔥
 
Published: 2019 03 05 03:26:00
Received: 2021 06 06 09:05:30
Feed: Carnal0wnage and Attack Research Blog
Source: Carnal0wnage and Attack Research Blog
Category: News
Topic: Hacking
Article: Jenkins - CVE-2018-1000600 PoC - published over 5 years ago.
Content: second exploit from the blog posthttps://blog.orange.tw/2019/01/hacking-jenkins-part-1-play-with-dynamic-routing.htmlChained with CVE-2018-1000600 to a Pre-auth Fully-responded SSRFhttps://jenkins.io/security/advisory/2018-06-25/#SECURITY-915This affects the GitHub plugin that is installed by default. However, I learned that when you spin up a new jenkins in...
https://blog.carnal0wnage.com/2019/03/jenkins-cve-2018-1000600-poc.html 
🔥🔥
 
Published: 2019 03 05 19:01:00
Received: 2021 06 06 09:05:30
Feed: Carnal0wnage and Attack Research Blog
Source: Carnal0wnage and Attack Research Blog
Category: News
Topic: Hacking
Article: Minecraft Mod, Mother's Day, and A Hacker Dad - published over 5 years ago.
Content: Over the weekend my wife was feeling under the weather. This meant we were stuck indoors and since she is sick and it's Mother's day weekend - less than ideal situation - I needed to keep my son as occupied as possible so she could rest and recuperate.When I asked my son what he wanted to do, he responded with a new Minecraft mod he'd seen on one of these Yo...
https://blog.carnal0wnage.com/2019/05/minecraft-mod-mothers-day-and-hacker-dad.html 
🔥🔥
 
Published: 2019 05 13 15:59:00
Received: 2021 06 06 09:05:30
Feed: Carnal0wnage and Attack Research Blog
Source: Carnal0wnage and Attack Research Blog
Category: News
Topic: Hacking
Article: Minecraft Mod, Follow up, and Java Reflection - published over 5 years ago.
Content: After yesterday's post, I received a ton of interesting and creative responses regarding how to get around the mod's restrictions which is what I love about our community. Mubix was the first person to reach out and suggest hijacking calls to Pastebin using /etc/hosts (which I did try but was having some wonky behavior with OSX) and there were other suggesti...
https://blog.carnal0wnage.com/2019/05/minecraft-mod-follow-up-and-java.html 
🔥🔥
 
Published: 2019 05 14 19:17:00
Received: 2021 06 06 09:05:30
Feed: Carnal0wnage and Attack Research Blog
Source: Carnal0wnage and Attack Research Blog
Category: News
Topic: Hacking
Article: Devoops: Nomad with raw_exec enabled - published almost 5 years ago.
Content: "Nomad is a flexible container orchestration tool that enables an organization to easily deploy and manage any containerized or legacy application using a single, unified workflow. Nomad can run a diverse workload of Docker, non-containerized, microservice, and batch applications, and generally offers the following benefits to developers and operators......
https://blog.carnal0wnage.com/2019/12/devoops-nomad-with-rawexec-enabled.html 
🔥🔥
 
Published: 2019 12 16 16:43:00
Received: 2021 06 06 09:05:30
Feed: Carnal0wnage and Attack Research Blog
Source: Carnal0wnage and Attack Research Blog
Category: News
Topic: Hacking
Article: What is your GCP infra worth?...about ~$700 [Bugbounty] - published over 4 years ago.
Content: BugBounty story #bugbountytipsA fixed but they didn't pay the bugbounty story...Timeline:reported 21 Oct 2019validated at Critical  23 Oct 2019validated as fixed 30 Oct 2019Bounty amount stated (IDR 10.000.000 = ~700 USD) 12 Nov 2019Information provided for payment 16 Nov 201913 March 2020 - Never paid - blog post posted19 March 2020  - received bounty of $5...
https://blog.carnal0wnage.com/2020/03/what-is-your-gcp-infra-worthabout-700.html 
🔥🔥
 
Published: 2020 03 14 02:10:00
Received: 2021 06 06 09:05:30
Feed: Carnal0wnage and Attack Research Blog
Source: Carnal0wnage and Attack Research Blog
Category: News
Topic: Hacking
Article: The Duality of Attackers - Or Why Bad Guys are a Good Thing™ - published over 4 years ago.
Content: The Duality of Attackers - Or Why Bad Guys are a Good Thing™It’s no secret I've been on a spiritual journey the last few years. I tell most people it’s fundamentally changed my life and how I look at the world. I’m also a hacker and I’m constantly thinking about how to apply metaphysical or spiritual concepts into my daily life. Because if they are true they...
https://blog.carnal0wnage.com/2020/04/the-duality-of-attackers-or-why-bad.html 
🔥🔥
 
Published: 2020 04 27 16:36:00
Received: 2021 06 06 09:05:30
Feed: Carnal0wnage and Attack Research Blog
Source: Carnal0wnage and Attack Research Blog
Category: News
Topic: Hacking
Article: WeirdAAL update - get EC2 snapshots - published over 4 years ago.
Content: I watched a good DEF CON video on abusing public AWS Snapshotshttps://www.youtube.com/watch?v=-LGR63yCTtsI, of course, wanted to check this out. There are tens of thousands of public snapshots in the various regions.  The talk outlines what you can do with these and Bishop Fox released a tool to do it https://github.com/BishopFox/dufflebag. I wanted to scrip...
https://blog.carnal0wnage.com/2020/05/weirdaal-update-get-ec2-snapshots.html 
🔥🔥
 
Published: 2020 05 18 00:01:00
Received: 2021 06 06 09:05:30
Feed: Carnal0wnage and Attack Research Blog
Source: Carnal0wnage and Attack Research Blog
Category: News
Topic: Hacking
09:05 Kubernetes: open etcd
🔥🔥
09:05 Kubernetes: cAdvisor
🔥🔥
09:05 Kubernetes: Master Post
🔥🔥
09:05 Kubernetes: Kubelet API containerLogs endpoint
🔥🔥
09:05 Kubernetes: Kubernetes Dashboard
🔥🔥
09:05 Kubernetes: List of ports
🔥🔥
09:05 Kubernetes: unauth kublet API 10250 basic code exec
🔥🔥
09:05 Kubernetes: unauth kublet API 10250 token theft & kubectl
🔥🔥
09:05 Kubernetes: Kube-Hunter 10255
🔥🔥
09:05 Abusing Docker API | Socket
🔥🔥
09:05 Jenkins - messing with new exploits pt1
🔥🔥
09:05 Jenkins - messing with exploits pt2 - CVE-2019-1003000
🔥🔥
09:05 Jenkins Master Post
🔥🔥
09:05 Jenkins - SECURITY-200 / CVE-2015-5323 PoC
🔥🔥
09:05 Jenkins - SECURITY-180/CVE-2015-1814 PoC
🔥🔥
09:05 Jenkins - decrypting credentials.xml
🔥🔥
09:05 Jenkins - Identify IP Addresses of nodes
🔥🔥
09:05 Jenkins - messing with exploits pt3 - CVE-2019-1003000
🔥🔥
09:05 Jenkins - CVE-2018-1000600 PoC
🔥🔥
09:05 Minecraft Mod, Mother's Day, and A Hacker Dad
🔥🔥
09:05 Minecraft Mod, Follow up, and Java Reflection
🔥🔥
09:05 Devoops: Nomad with raw_exec enabled
🔥🔥
09:05 What is your GCP infra worth?...about ~$700 [Bugbounty]
🔥🔥
09:05 The Duality of Attackers - Or Why Bad Guys are a Good Thing™
🔥🔥
09:05 WeirdAAL update - get EC2 snapshots
🔥🔥

Topic: Hacking

Articles recieved 06/06/2021
Article: 2019 DerbyCon Hiring List - published about 5 years ago.
Content:
https://malicious.link/post/2019/2019-derbycon-hiring-list/ 
🔥🔥
 
Published: 2019 08 18 14:30:44
Received: 2021 06 06 09:05:32
Feed: Room362.com RSS Feed
Source: Room362.com RSS Feed
Category: News
Topic: Hacking
Article: Tribe of Hackers: Red Team Edition - published about 5 years ago.
Content:
https://malicious.link/post/2019/tribe-of-hackers-redteam/ 
🔥🔥
 
Published: 2019 08 19 14:30:44
Received: 2021 06 06 09:05:32
Feed: Room362.com RSS Feed
Source: Room362.com RSS Feed
Category: News
Topic: Hacking
Article: 2020 ShmooCon Hiring List - published almost 5 years ago.
Content:
https://malicious.link/post/2020/2020-shmoocon-hiring-list/ 
🔥🔥
 
Published: 2020 01 07 14:30:44
Received: 2021 06 06 09:05:32
Feed: Room362.com RSS Feed
Source: Room362.com RSS Feed
Category: News
Topic: Hacking
Article: 2020 ShmooCon Ticket - published almost 5 years ago.
Content:
https://malicious.link/post/2020/2020-shmoocon-ticket/ 
🔥🔥
 
Published: 2020 01 08 14:30:44
Received: 2021 06 06 09:05:32
Feed: Room362.com RSS Feed
Source: Room362.com RSS Feed
Category: News
Topic: Hacking
Article: Get Process List with Command Line Arguments - published almost 5 years ago.
Content:
https://malicious.link/post/2020/get-process-list/ 
🔥🔥
 
Published: 2020 01 17 14:30:44
Received: 2021 06 06 09:05:32
Feed: Room362.com RSS Feed
Source: Room362.com RSS Feed
Category: News
Topic: Hacking
Article: Compiling a DLL using MingGW - published almost 5 years ago.
Content:
https://malicious.link/post/2020/compiling-a-dll-using-mingw/ 
🔥🔥
 
Published: 2020 02 09 14:30:44
Received: 2021 06 06 09:05:32
Feed: Room362.com RSS Feed
Source: Room362.com RSS Feed
Category: News
Topic: Hacking
Article: Run All Rules for Hashcat - published over 4 years ago.
Content:
https://malicious.link/post/2020/run-all-rules-hashcat/ 
🔥🔥
 
Published: 2020 02 20 14:30:44
Received: 2021 06 06 09:05:32
Feed: Room362.com RSS Feed
Source: Room362.com RSS Feed
Category: News
Topic: Hacking
Article: 2020 Pandemic SIP Hiring List - published over 4 years ago.
Content:
https://malicious.link/post/2020/2020-pandemic-hiring-list/ 
🔥🔥
 
Published: 2020 03 27 14:30:44
Received: 2021 06 06 09:05:32
Feed: Room362.com RSS Feed
Source: Room362.com RSS Feed
Category: News
Topic: Hacking
Article: Let Me Out of Your Net - Egress Testing - published over 4 years ago.
Content:
https://malicious.link/post/2020/lmo-egress-testing/ 
🔥🔥
 
Published: 2020 07 04 13:14:33
Received: 2021 06 06 09:05:32
Feed: Room362.com RSS Feed
Source: Room362.com RSS Feed
Category: News
Topic: Hacking
Article: The Four Phases of Offensive Security Teams - published over 4 years ago.
Content:
https://malicious.link/post/2020/four-phases-of-offsec/ 
🔥🔥
 
Published: 2020 07 05 14:30:44
Received: 2021 06 06 09:05:32
Feed: Room362.com RSS Feed
Source: Room362.com RSS Feed
Category: News
Topic: Hacking
Article: Run as SYSTEM using Evil-WinRM - published about 4 years ago.
Content:
https://malicious.link/post/2020/run-as-system-using-evil-winrm/ 
🔥🔥
 
Published: 2020 09 13 14:30:44
Received: 2021 06 06 09:05:32
Feed: Room362.com RSS Feed
Source: Room362.com RSS Feed
Category: News
Topic: Hacking
Article: Family Mission Statement - published about 4 years ago.
Content:
https://malicious.link/post/2020/family-mission-statement/ 
🔥🔥
 
Published: 2020 09 30 14:30:44
Received: 2021 06 06 09:05:32
Feed: Room362.com RSS Feed
Source: Room362.com RSS Feed
Category: News
Topic: Hacking
Article: 2020 OSCP Contest - published almost 4 years ago.
Content:
https://malicious.link/post/2020/2020-oscp-contest/ 
🔥🔥
 
Published: 2020 11 26 14:30:44
Received: 2021 06 06 09:05:32
Feed: Room362.com RSS Feed
Source: Room362.com RSS Feed
Category: News
Topic: Hacking
Article: SolarFlare Release: Password Dumper for SolarWinds Orion - published almost 4 years ago.
Content:
https://malicious.link/post/2020/solarflare-release-password-dumper-for-solarwinds-orion/ 
🔥🔥
 
Published: 2020 12 15 05:30:44
Received: 2021 06 06 09:05:32
Feed: Room362.com RSS Feed
Source: Room362.com RSS Feed
Category: News
Topic: Hacking
Article: User Empowerment: Password Security - published over 3 years ago.
Content:
https://malicious.link/post/2021/user-empowerment-password-security/ 
🔥🔥
 
Published: 2021 04 27 14:30:44
Received: 2021 06 06 09:05:31
Feed: Room362.com RSS Feed
Source: Room362.com RSS Feed
Category: News
Topic: Hacking
09:05 2019 DerbyCon Hiring List
🔥🔥
09:05 Tribe of Hackers: Red Team Edition
🔥🔥
09:05 2020 ShmooCon Hiring List
🔥🔥
09:05 2020 ShmooCon Ticket
🔥🔥
09:05 Get Process List with Command Line Arguments
🔥🔥
09:05 Compiling a DLL using MingGW
🔥🔥
09:05 Run All Rules for Hashcat
🔥🔥
09:05 2020 Pandemic SIP Hiring List
🔥🔥
09:05 Let Me Out of Your Net - Egress Testing
🔥🔥
09:05 The Four Phases of Offensive Security Teams
🔥🔥
09:05 Run as SYSTEM using Evil-WinRM
🔥🔥
09:05 Family Mission Statement
🔥🔥
09:05 2020 OSCP Contest
🔥🔥
09:05 SolarFlare Release: Password Dumper for SolarWinds Orion
🔥🔥
09:05 User Empowerment: Password Security
🔥🔥
Cyber Tzar Free Score Certificate
Cyber Tzar Free Score Certificate
Cyber Tzar Your Score Explained
Cyber Tzar Your Score Explained
Cyber Tzar Gold Score Certificate
Cyber Tzar Gold Score Certificate
Cyber Tzar Score Analysis
Cyber Tzar Score Analysis
Navigation
Return to Planet "Home"
Ordered/grouped:
Filter applied:
Current page:
Go to "Navigation Help" (page end)
Articles in this collection: 15,971
  • "Home" links back to the front page, effectivly the Planet "Home Page"; shows all articles, with no selections, or groupings.
  • Default date ordering is by "Received Date" (due to not all RSS feeds having a "Published Date").
  • Authors is the most poorly serviced field in the articles we see from cyber security news providers.
  • Only Published Date selections use the articles Published Date (for ordering and grouping).
  • The first page always shows fifty items plus from zero to up to a remaining forty-nine items, before they are commited permently to the next page.
  • All subsequent pages show fifty items.
  • Pagination is in reverse ordering (so that pages are permamenent links, aka "permalinks", to their content).
  • Return to the top of this page "Go Now"

Custom HTML Block

Click to Open Code Editor