Innholdsfortegnelse for March 2024 i Hackercool Magazine

Edition 7 Issue 3 Hello readers, Welcome to the third issue of year 2024. The temperature is getting hot and so does Black Hat Hacking. Lame poetry aside, let’s see what you will learn in our latest Issue. We start this Issue with a Black Hat Hacking scenario named “Hacki ng MSSQL servers”. MSSQL servers are one of the most widely used database software around the world. Black Hat Hackers have been compromising MSSQL servers since long time may be since 2016. However, it is not vulnerabilities they are exploiting. Why are hackers making MSSQL their targets? MSSQL is installed on a Windows machine and compromising it can give them access to the underlying Windows system. The second reason being that it is easy to hack them. Next, you will…

Hi readers. This month in the “Tool of The Month” feature, we bring you a complete guide to Medusa password cracker. Medusa (named after a Greek gorgon with living snakes as hair and a power to turn anyone who looks up to her to stone) is a speedy, parallel and modular brute forcing tool. Medusa was built to support brute forcing of many services as possible. The features of Medusa password cracker include, 1) Thread based parallel testing which allows us to perform brute forcing against multiple hosts, users or passwords concurrently. 2) Flexible user input. 3) Modular design. 4) Support to multiple protocols. The protocols supported by Medusa include CVS, FTP, HTTP, IMAP, MSSQL, MySQL, NNTP, pcanywhere, POP3, postgres, rexec rlogin, rsh, smbnt, SMTP, SMTP-VERIFY, SNMP, SSH, SVN, telnet,…

Hello, Welcome to vulnerability for beginners. In this Issue, we will explain you about the recentlly discovered GhostRace vulnerability.GhostRace vulnerability is a data leakage vulnerability that affects all the modern processors in use today like Intel, AMD, ARM etc. It doesn’t matter what the operating system is. It can be Windows, Linux, macOS. Ghost Race vulnerability is a result of mixing of exploitation of speculative execution and race conditions. What is a race condition? A race condition is a condition in which two threads or processes try to access the same resource. This resource can be memory, data, files at the same time. This can lead to vulnerabilities like data leak, illegal access etc. What are speculative primitives? To prevent race condition from occurring, makers of operating systems have implemented…

Check whether your email is a part of any data breach https://haveibeenpwned.com Vulnera https://github.com/hackercoolmagz/vulnera Follow Hackercool Magazine For Latest Updates https://www.facebook.com/hackercoolmagazine/ https://twitter.com/Hackercool_mag?lang=en https://www.linkedin.com/company/73209020/admin/ https://www.instagram.com/hackercool_magazine/ “It is common knowledge in the programmer’s circle that almost every smartphone in the world is infected with some form of trojan.”…

In this article of Beginner basics, you will learn about Encryption. Encryption plays a very important role in the world of hackers and ethical hackers. It’s used in password encryption, encrypting communication between devices, data encryption, Hard disk encryption, making payloads FUD etc. What is encryption? The transformation of plain text into scrambled text or any other format which is not understandable is known as encryption. It is often used in conjunction with cryptography in cybersecurity. What is cryptography? The word cryptography came from a Greek word kryptos which means “hidden secret”. Cryptography is the study of secure communication techniques. It is closely associated with encryption which is an act of taking an ordinary text and scrambling it to transform it in to cipher text. The aim of this encryption…

Robin Chataut Assistant Professor of Cybersecurity and Computer Science, Quinnipiac University Imagine opening your front door wide and inviting the world to listen in on your most private conversations. Unthinkable, right? Yet, in the digital realm, people inadvertently leave doors ajar, potentially allowing hackers, tech companie =s, service providers and security agencies to peek into their private communications. Much depends on the applications you use and the encryption standards the apps uphold. End-to-end encryption is a digital safeguard for online interactions. It’s used by many of the more popular messaging apps. Understanding end-to-end encryption is crucial for maintaining privacy in people’s increasingly digital lives. While end-to-end encryption effectively secures messages, it is not foolproof against all cyberthreats and requires users to actively manage their privacy settings. As a cybersecurity researcher,…