Last year ransomware scammed more than 10 billion dollar from various organizations and users. We decide in this document research methods from seller to end client. This report was made by the Hadess and data comes from various sources such as: Dark Web , Deep Web Forums, Sellers and Websites. Summary of Finding Abbrev. Wallet…
Week in Overview(19 Mar-26 Mar) – 2024 it is crucial for organizations and individuals to prioritize remediation and patching efforts to safeguard their systems and data. The following key findings highlight the importance of proactive measures to mitigate risks associated with various vulnerabilities and threats:
The analysis of permissions within a Windows domain revealed critical security risks. Misconfigurations such as granting GenericAll or GenericWrite permissions on group and user objects can lead to unauthorized access. Additionally, the exploitation of ForceChangePassword misconfiguration allows attackers to reset user passwords without proper authentication. Proper permission management and regular audits are essential to prevent…
DACL abuse is about taking advantage of the DACL that is assigned to us on any object that we can abuse. Some mischief that can be done may be changing a user’s password, adding yourself to a group like Domain Admins, granting yourself full control over an object and many more. DACL abuse can be…
Week in Overview(12 Mar-19 Mar) – 2024 it is crucial for organizations and individuals to prioritize remediation and patching efforts to safeguard their systems and data. The following key findings highlight the importance of proactive measures to mitigate risks associated with various vulnerabilities and threats:
In the realm of network security, vulnerabilities can present significant risks to the integrity and confidentiality of data. CVE-2024-2371, a vulnerability identified within Korenix JetIO, is a prime example of such a threat. Korenix JetIO is a popular industrial Ethernet switch series widely used in critical infrastructure and industrial control systems (ICS). This vulnerability, designated…
CVE-2024-2371 exposes a vulnerability in Korenix JetIO switches, affecting the Simple Network Management Protocol (SNMP) implementation. SNMP, a commonly used protocol for network management, is leveraged by Korenix JetIO switches for administrative tasks. However, the flaw allows unauthorized users to exploit SNMP to access sensitive data within the system. The vulnerability arises due to insufficient…
Week in Overview(5 Mar-12 Mar) – 2024 it is crucial for organizations and individuals to prioritize remediation and patching efforts to safeguard their systems and data. The following key findings highlight the importance of proactive measures to mitigate risks associated with various vulnerabilities and threats:
Kerberos Delegation, a fundamental component of modern network security, facilitates the delegation of authentication rights within networked environments. This article provides an in-depth exploration of Kerberos Delegation, covering its various forms and extensions. We delve into the distinctions between Unconstrained and Constrained delegation, highlighting the security implications of each. Additionally, we examine the role of…
Pwning the Domain: Kerberos Delegation In this article we’ll talk about Kerberos Delegation and how to abuse it in various ways and escalate our privileges. What is Kerberos delegation? Kerberos delegation is a type of credential delegation that is used for securely delegating a user’s credential form a client application to a target server application….
Week in Overview(27 Feb-5 Mar) – 2024 it is crucial for organizations and individuals to prioritize remediation and patching efforts to safeguard their systems and data. The following key findings highlight the importance of proactive measures to mitigate risks associated with various vulnerabilities and threats: