PIRATESSHIELD

The hacking group is reportedly targeting vulnerable installations of Cisco Smart Install Client, a legacy plug-and-play utility designed to help administrators configure and deploy Cisco equipment remotely, which is enabled by default on Cisco IOS and IOS XE switches and runs over TCP port 4786. Cisco is aware of a significant increase in Internet scans attempting to detect devices where, after completing setup, the Smart Install feature remains enabled and without proper security controls. This could leave the involved devices susceptible to misuse of the feature. Customers who have not done so are encouraged to follow the guidance in the Recommendations section of this notice to assess and ensure their network switches are properly protected against abuse of the Smart Install featur e. Several researchers have reported on the use of Smart Install (SMI) protocol messages toward Smart Install clients, also known as integrated branch clients (IBC), allowing an unauthenticated, remote a...

INSTALLATION GUIDE FOR KALI LINUX  (For all linux Distro same installation procedure) Before the Installation Enable Windows Sub-system for Linux feature Change OS mode to Developer . Press (Windows Key) + S and try to search below mentioned option (Turn Windows ...)and click . Now you will see the menu window. Scroll down and check-in the  Windows Sub-system for Linux  and click OK. Then go to Settings > Update & Security > For Developers and chose Developer mode in right side window. Once you have done the mentioned procedures, restart your PC. INSTALLATION - Open the Microsoft Store application (Pre-Installed application of Windows) - Search ' Kali Linux ' - Click ' Get ' - Now click the three dots in the right side and chose Download Now     - Once download completed click ' Launch ' to initiate Kali Linux installation process.   -  Now you will see a terminal like below image. During the installation...

IDS Basics If you aren’t already running network IDS, you should be. There are two types of Network IDS:  Signature Detection & Anomaly Detection In a signature-based IDS, there are rules or patterns of known malicious traffic that it is looking for. Once a match to a signature is found it generates an alert. T hese alerts can turn up issues such as malware, scanning activity, attacks against servers and much more. With anomaly-based IDS, the payload of the traffic is far less important than the activity that generated it. An anomaly-based IDS tool relies on baselines rather than signatures. It will look for unusual activity that deviates from statistical averages of previous activities or activity that has been previously unseen. Perhaps a server is sending out more HTTP activity than usual or a new host has been seen inside your DMZ. Both are typically deployed in the same manner, though one could make the case you could easily (and people have) create an anomaly-based IDS on...

PHISHING ATTACK     Phishing is a type of social engineering attack often used to steal user data, including login credentials and credit card numbers. It occurs when an attacker, masquerading as a trusted entity, dupes a victim into opening an email, instant message, or text message. The recipient is then tricked into clicking a malicious link, which can lead to the installation of malware, the freezing of the system as part of a ransomware attack or the revealing of sensitive informatio n . An attack can have devastating results. For individuals, this includes unauthorized purchases, the stealing of funds, or identify theft. UMBRELLA DROPPER Umbrella Dropper, which is dedicated to most pen-testing, it downloads files on the target system and executes them without a double execution of .exe, only of embed. Features Download executable on target system. Silent execution. Download and execute executable once time. If the exe already had downloaded and running, open only pd...

A critical vulnerability affecting the VPN feature of Cisco's Adaptive Security Appliance software could allow an attacker to cause a reload, execute arbitrary code, or take full control of an affected system. "The vulnerability is due to an attempt to double free a region of memory when the webvpn feature is enabled on the Cisco ASA device," Cisco wrote in its alert. "An attacker could exploit this vulnerability by sending multiple, crafted XML packets to a webvpn-configured interface on the affected system." Cisco has now released software patches that address this major vulnerability affecting all Cisco devices running Adaptive Security Appliance (ASA) Software. The C isco ASA Software is the core operating system for the Cisco ASA Family that offers firewall, antivirus, intrusion prevention, and VPN capabilities. Following devices are vulnerable to this security hole (if they have “webvpn” feature enabled): Affected version 3000 Series Industrial Security Ap...

As per our previous article, we learned what is Tcl language and uses of it.In this article, we going to explore syntax and basics of Tcl. Local Environment Setup If you are willing to set up your environment for Tcl, you need the following two software applications available on your computer − Text Editor  ( Notepad++  or Notepad or any other Text editor) Tcl Interpreter ( Download TCL Package:  Linux/Mac/Unix ,  Windows ) I am just continuing this tutorial with Windows Operating system for user convenience. Windows Setup 1)Download IronTcl  package. 2)Extract to C partition (c:/) 3) Now go to       Control Panel>System and Security>System>Advanced System Seting>Advance>Environmnt Variables Click "New"  in Variable name type "PATH" in variable value type "C:\IronTcl\bin" then OK > OK > OK. Now you can access the Tcl application over the cmd.Open cmd and type tclsh86t and hit enter you will get response fromTcl app...

The Wi-Fi Alliance has announced WPA3, a new standard of Wi-Fi security features for users and service providers. This is welcome news, given that a Wi-Fi exploit was uncovered late last year which affected all modern Wi-Fi networks using WPA or WPA2 security encryption, letting attackers eavesdrop on traffic between computers and wireless access points. The new WPA3 features will include “robust protection” when passwords are weak, and will also simplify security configurations for devices that have limited or no display interface. “Wi-Fi security technologies may live for decades, so it’s important they are continually updated to ensure they meet the needs of the Wi-Fi industry,” said Joe Hoffman from consulting firm SAR Insight & Consulting in a statement. The Wi-Fi Alliance is made up of companies including Apple , Intel, and Microsoft. For those who work in coffee shops and often use public Wi-Fi, WPA3 will also have individualized data encryption that will strengthen privac...