Results for cyber security

E-learning | All Python Courses,AWS,App Development,CSS,Ethical Hacking, iOS,Linux,SEO,Visual studio | Infosecwithme

11:45 AM


E-learning | All Python Courses,AWS,App Development,CSS,Ethical Hacking, iOS,Linux,SEO,Visual studio | Infosecwithme



75 GB Course's Collection

 https://mega.nz/#F!FLQUyb5J!_EXxEI7zjaM1cUirMQFnAQ

Learn Android Studio 2018 From Scratch To Playstore

 https://mega.nz/#F!wXQXiAbR!cPQWPo5tC9SoPbXLbBIzCw

Pentester Academy 

 https://mega.nz/#F!BtZAjJIR!nek_MMo14Z_3_D_OLT5hsw

Computer Security  

 https://mega.nz/#F!9O4iTLqL!pRdKNvaWwxbMmTtMfHsyOQ

Pluralsight CompTIA Project Plus

 https://mega.nz/#F!luQUUSRb!oa3xQzbuYQCIUB3shf-0ag

Forensics

 https://mega.nz/#F!FXoghYoa!rqj8RSOyR5NStTZwbu7GJg

Computer Books

 https://mega.nz/#F!xSRxBAKJ!lx0DsesNYtujp7MnBDMNcQ

Networking   

 https://mega.nz/#F!oawFzJiI!nYW_l4i1a61QtyuS18GnnA

Informatic Security

 https://mega.nz/#F!ZSwxyJTT!y4i3XaKsB1heR1w9QVFVdg

Voice Distorters

 https://mega.nz/#F!xXgRjBIQ!YDxHktNZ8zDVtw5mHUXOBg

Anonymous    

 https://mega.nz/#F!oKJygAbZ!SOX_W5Wb71BtG7WvIGQcug

Linux 3 Courses

 https://mega.nz/#F!lLoUwQRC!9CF7VcWrDo57sKEe2RZhIA

Udemy - The Complete Financial Analyst Training & Investing Course

 https://mega.nz/#F!WnplkLTJ!F6F6kaowYuss_zrHUSzyTQ

Udemy - Tableau Expert Top Visualization Techniques in Tableau 10

 https://mega.nz/#F!ir5BiTJJ!KzU08UOnbK3YYLLmpq8gCA

Udemy - Essential Poker Math for No Limit HoldEm

 https://mega.nz/#F!OrgDGJTC!TDHKhBI4no8KxWv0SRACQQ

Udemy - MATLAB for the Absolute Beginner

 https://mega.nz/#F!qrBVhKgT!fYMkbHrQt9LaHqr7q4ZsbQ

Udemy - Python for Financial Analysis and Algorithmic Trading

 https://mega.nz/#F!SaZXCQIQ!XcYh_mJXVhhyIrCSpKi5Aw

Udemy - Learn to Design Your Own Boards

 https://mega.nz/#F!fHgwHIiY!lwe_hj950wFH7Wz4S_NkYA

Udemy - The Complete Ethical Hacking Course 

 https://mega.nz/#!WYVGGLoR!phC4VLCR_qe8oRcb3Ul79dtPUYn9nxDjneczOZycAJs

Udemy - Vue JS 2 - The Complete Guide  

 (incl. Vue Router & Vuex)

 https://mega.nz/#F!woBRlZhJ!i6-_onYlxAhdzeAg_aFdfg

Udemy - Angular 5 (formerly Angular 2) 

 The Complete Guide 

 https://mega.nz/#F!1lZFDJqL!rSycqdlbMPXFW1x1g7vTaA

Udemy - Mastering Microcontroller with Embedded Driver Development

 https://mega.nz/#F!aKQGBYKY!VpBpOs-LqvWGi4DlmtAiBA

Udemy - Build Responsive Real World Websites with HTML5 and CSS3 2.0 

 https://mega.nz/#F!SehUSYJD!gKp0Vs0AEt5PXJXcqfXK0A

Udemy - Creating Whiteboard Animation Videos Using Videoscribe 2017

 https://mega.nz/#F!bHwgyahL!s51YvsWWW1y-L39Z-Gtcwg

Udemy - Linux Command Line Basics 

 https://mega.nz/#F!qW4EXKrT!ZkcgM0Ih1qN8elu-Z0ITpg

Udemy - Microsoft Office 2016 Essential Training 9 Course Bundle

 https://mega.nz/#F!fTwWSAob!As419KYWUubhX19Yfdu8eg

Udemy - The Complete Android Developer Course Beginner To Advanced

 https://mega.nz/#F!nH5gRYaL!rmzReTedRh_wEc6jzcLt8Q

Udemy - The Complete Facebook Ads & Marketing Course 2017 

 https://mega.nz/#F!uOwGiYjL!2nXCUDuu-OErvUjrqieLSw

Udemy - How To Hack Website 
https://mega.nz/#!lCQxVIjL!VNQsdvtE24m2mqlDc_0xERWUtSzkUcM0wMR9M41ACgo


Follow us:

Telegram: 

          https://t.me/blackhattrick

         https://t.me/blackhattrick2

Facebook Page : Blackhattrickblog

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

Visit Online Best Affiliate store : Sastiprice.com


Subscribe to get Best Deals, Offers, Coupons & Product Comparison with Best Price Suggestion
E-learning | All Python Courses,AWS,App Development,CSS,Ethical Hacking, iOS,Linux,SEO,Visual studio | Infosecwithme E-learning | All Python Courses,AWS,App Development,CSS,Ethical Hacking, iOS,Linux,SEO,Visual studio | Infosecwithme Reviewed by BlackHat on 11:45 AM Rating: 5

Learn Cyber Security | Bug Hunting | Pentest and CTF Labs | Infosecwithme

12:00 AM

Learn Cyber Security | Bug Hunting | Pentest and CTF Labs | Infosecwithme

Sharpen your skills with List of Pentest & CTF Labs

HackTheBox
https://www.hackthebox.eu

Vulnhub
https://www.vulnhub.com

Practical Pentest Labs
https://practicalpentestlabs.com

Labs Wizard Security
https://labs.wizard-security.net

Pentestlab
https://pentesterlab.com/

Hackthis
https://www.hackthis.co.uk

Shellter
https://shellterlabs.com/pt/

Root-Me
https://www.root-me.org/

Zenk-Security
https://www.zenk-security.com/epreuves.php

W3Challs
https://w3challs.com/

NewbieContest
https://www.newbiecontest.org/

The Cryptopals Crypto Challenges
https://cryptopals.com/

Penetration Testing Practice Labs
http://www.amanhardikar.com/mindmaps/Practice.html

alert(1) to win
https://alf.nu/alert1

Hacksplaining
https://www.hacksplaining.com/exercises

Hacker101
https://ctf.hacker101.com

Academy Hackaflag
https://academy.hackaflag.com.br/

PentestIT LAB
https://lab.pentestit.ru

Hacker Security
https://capturetheflag.com.br/

PicoCTF
https://picoctf.com

Explotation Education
https://exploit.education/

Root in Jail
http://ctf.rootinjail.com

CMD Challenge
https://cmdchallenge.com

Try Hack Me
https://tryhackme.com/

Hacking-Lab
https://www.hacking-lab.com/index.html

PWNABLE
https://pwnable.kr/play.php

WHO4REYOU
https://34.73.111.210

Google CTF
https://capturetheflag.withgoogle.com/

ImmersiveLabs
https://immersivelabs.com/

Attack-Defense
https://attackdefense.com/

OverTheWire
http://overthewire.org

SANS Challenger
https://www.holidayhackchallenge.com/

SmashTheStack
http://smashthestack.org/wargames.html
Learn Cyber Security | Bug Hunting | Pentest and CTF Labs | Infosecwithme Learn Cyber Security | Bug Hunting | Pentest and CTF Labs | Infosecwithme Reviewed by BlackHat on 12:00 AM Rating: 5

Basic Security Testing with Kali Linux - PDF | Infosecwithme

12:00 AM

Basic Security Testing with Kali Linux - PDF | Infosecwithme

Hello all,
         we bring awesome collection of topic mentioned in the index. this all study materials based on kali linux OS.

Special Thanks to Author : Daniel W. Dieterle 



Click on Download Button | Infosecwithme

Table of Contents

Chapter 1 - IntroductionWhat is Kali?
Chapter 2 - Installing Kali with VMWare
Chapter 3 – Introduction to Metasploit
Chapter 4 – Meterpreter Shell
Chapter 5 – Recon ToolsRecon-NGUsing Recon-NGDmitryNetdiscoverZenmap
Chapter 6 - Shodan
Chapter 7 – Metasploitable
Chapter 8 – Metasploitable - Part Two
Chapter 9 – Windows AV Bypass with Veil
Chapter 10 – Windows Privilege Escalation by Bypassing UAC
Chapter 11 - Packet Captures and Man-in-the-Middle Attacks
Chapter 12 – Using the Browser Exploitation FrameworkBeEF in Action
Chapter 13 – Social Engineering
Chapter 14 – The Social Engineering Toolkit
Chapter 15 - SubterfugeAutomatic Browser Attack with Subterfuge
Chapter 16 – Cracking Simple LM Hashes
Chapter 17 – Pass the Hash
Chapter 18 – Mimikatz Plain Text PasswordsLoading the Module
Chapter 19 – Mimikatz and UtilmanUtilman Login Bypass
Chapter 20 - Keyscan and Lockout KeyloggerKey logging with Meterpreter
Chapter 21 - HashCatCracking NTLM passwords
Chapter 22 - WordlistsWordlists Included with KaliWordlist Generator
Chapter 23 – Cracking Linux Passwords
Chapter 24 – Router Attacks
Chapter 25 – Wireless Network Attacks
Chapter 26 – Fern WIFI CrackerUsing Fern
Chapter 27 – Wi-Fi Testing with WiFite
Chapter 28 – KismetScanning with Kismet
Chapter 29 – Easy Creds
Chapter 30 – Installing Kali on a Raspberry Pi
Chapter 31 – WiFi Pentesting on a Raspberry Pi
Chapter 32 – Network Defense and Conclusion


Click on Button | Infosecwithme
Click on Download Button | Infosecwithme

Basic Security Testing with Kali Linux - PDF | Infosecwithme Basic Security Testing with Kali Linux - PDF | Infosecwithme Reviewed by BlackHat on 12:00 AM Rating: 5

Investigation and Solution | Vtiger Vulnerability (Elastix) | Infosecwithme Blog

8:38 PM

Investigation and Solution | Vtiger Vulnerability (Elastix) | Blackhattrick


As a part of SOC team, we observed attacker (someone) from outside tried to exploit Vtiger vulnerability by exploiting one of the vulnerability invented in mid of 2012.

Actually he is trying to access one file i.e. Amportal.conf, this file consist of all passwords information and probably be used to view most any file on the system        
Here is brief explanation:
About Vtiger:-

I. BACKGROUND

Vtiger CRM is a free, full-featured, 100% Open Source CRM software ideal
for small and medium businesses, with low-cost product support available
to production users that need reliable support.

II. DESCRIPTION
Multiple Vulnerabilities exist in Vtiger CRM software.

III. ANALYSIS
Summary:
 A) Remote Code Execution (RCE) Vulnerability
 B) Local File Inclusion (LFI) Vulnerability (pre-auth)
 C) Cross Site Scripting (XSS) Vulnerabilities (pre-auth, reflected)
 D) Cross Site Scripting (XSS) Vulnerabilities (post-auth, reflected)

 Code we observed:

https://myipadddress/vtigercrm/modules/com_vtiger_workflow/sortfieldsjson.php?module_name=../../../../../../../..//etc/amportal.conf

When user browses this URL the amportal.conf was displayed, including all passwords therein.
Obviously the sortfieldsjson.php file is being used to access amportal.conf and can probably be used to view most any file on the system        
Disclosure Date : 2012-03-21
Exploit Publish Date : 2012-03-21

Description:
Vtiger CRM contains a flaw that allows a remote attacker to traverse outside of a restricted path. The issue is due to the sortfieldsjson.php script not properly sanitizing user input, specifically directory traversal style attacks (e.g. /../) supplied via the 'module_name' parameter. This directory traversal attack would allow the attacker to read arbitrary files.

Recommendation:
Ø  Kindly check the version of Vtiger they are using and update or patch it.
Ø  I strongly recommend that if you run Elastix (which includes Vtiger even if you don’t use it) that you either -

Limit access to the web interface of your server to only specific IP addresses.
If you don’t use Vtiger then disable access to the interface by running.
Upgrading Elastix? Read this FAQ Now!!
elx.ec/upgfaq

Elastix Docs : 
elx.ec/elastixtutorials
www.elastixconnection.com

Elastix Fault Finding Guide
elx.ec/faultfind


Root Cause Analysis :
After proper investigation we observed that attacker exploited the vulnerability as shown above in Linux Platform and we are using Windows based OS  then we got confirmation that we are not using Vtiger on our environment. Also I personally did investigation of that particular server.

Share Your Knowledge................................by comment

Investigation and Solution | Vtiger Vulnerability (Elastix) | Infosecwithme Blog Investigation and Solution | Vtiger Vulnerability (Elastix) | Infosecwithme Blog Reviewed by BlackHat on 8:38 PM Rating: 5
Subscribe to: Posts ( Atom )


SastiPrice.com Store | India's One of Best Affiliate Store



-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

Cyber Security Learning E-Books



Powered by Blogger.