All the latest news on Cybersecurity

NTLM Relay Gat is a powerful tool designed to automate the exploitation of NTLM relays using ntlmrelayx.py from the Impacket tool suite. By leveraging the capabilities of ntlmrelayx.py, NTLM Relay Gat streamlines the process of exploiting NTLM relay vulnerabilities, offering a range of functionalities from listing SMB shares to executing commands on MSSQL databases. Features Multi-threading Support: Utilize multiple threads to perform actions concurrently. SMB Shares Enumeration: List available SMB shares. SMB Shell Execution: Execute a shell via SMB. Secrets Dumping: Dump secrets from the target. MSSQL Database Enumeration: List available MSSQL databases. MSSQL Command Execution: Execute operating system commands via xp_cmdshell or start SQL Server Agent jobs. Prerequisites Before you begin, ensure you have met the following requirements: proxychains properly configured with ntlmrelayx SOCKS relay port Python 3.6+ Installation To install NTLM Relay Gat, follow these steps: Ensure that Python 3.6 or higher is installed on your system. Clone NTLM Relay Gat repository: git clone https://github.com/ad0nis/ntlm_relay_gat.gitcd ntlm_relay_gat Install dependencies, if you don't have them installed already: pip install -r requirements.txt NTLM Relay Gat is now installed and ready to use. Usage To use NTLM Relay Gat, make sure you've got relayed sessions in ntlmrelayx.py's socks command output and that you have proxychains configured to use ntlmrelayx.py's proxy, and then execute the script with the desired options. Here are some examples of how to run NTLM Relay Gat: # List available SMB shares using 10 threadspython ntlm_relay_gat.py --smb-shares -t 10# Execute a shell via SMBpython ntlm_relay_gat.py --smb-shell --shell-path /path/to/shell# Dump secrets from the targetpython ntlm_relay_gat.py --dump-secrets# List available MSSQL databasespython ntlm_relay_gat.py --mssql-dbs# Execute an operating system command via xp_cmdshellpython ntlm_relay_gat.py --mssql-exec --mssql-method 1 --mssql-command 'whoami' Disclaimer NTLM Relay Gat is intended for educational and ethical penetration testing purposes only. Usage of NTLM Relay Gat for attacking targets without prior mutual consent is illegal. The developers of NTLM Relay Gat assume no liability and are not responsible for any misuse or damage caused by this tool. License This project is licensed under the MIT License - see the LICENSE file for details.Download Ntlm_Relay_Gat

Gat Relay Gat

Akamai Technologies, Inc. is set to acquire Noname Security, a top API security vendor, for 0 million, signaling a major move to boost its API security capabilities. This acquisition marks a pivotal moment in the cybersecurity landscape, as Akamai aims to extend its protection across all API traffic locations, addressing the growing demand for comprehensive […] The post Akamai to Acquire API Security Startup Noname for 0 Million appeared first on Cyber Security News.

Acquire API Startup Noname

Founded in 2017 to support startups in their IT strategy, in France and abroad, SysWings has extended its activities to the cloud and managed services. The team is made up of heterogeneous profiles, mixing employees and consultants, scaled according to your projects.

AhnLab SEcurity intelligence Center (ASEC) has recently discovered circumstances of a CHM malware strain that steals user information being distributed to Korean users. The distributed CHM is a type that has been constantly distributed in various formats such as LNK, DOC, and OneNote from the past. A slight change to the operation process was observed in the recent samples. The overall execution flow is shown in Figure 1. The malware is a type that uses multiple scripts to ultimately send... The post CHM Malware Stealing User Information Being Distributed in Korea appeared first on ASEC BLOG.

Korean users Stealing User

AhnLab SEcurity intelligence Center (ASEC) has discovered evidence of a malware strain being distributed to web servers in South Korea, leading users to an illegal gambling site. After initially infiltrating a poorly managed Windows Internet Information Services (IIS) web server in Korea, the threat actor installed the Meterpreter backdoor, a port forwarding tool, and an IIS module malware tool. They then used ProcDump to exfiltrate account credentials from the server. IIS modules support expansion features of web servers such as... The post Case of Malware Distribution Linking to Illegal Gambling Website Targeting Korean Web Server appeared first on ASEC BLOG.

Distribution Linking Illegal Gambling

AhnLab SEcurity intelligence Center (ASEC) has recently identified RemcosRAT being distributed using the steganography technique. Attacks begin with a Word document using the template injection technique, after which an RTF that exploits a vulnerability in the equation editor (EQNEDT32.EXE) is downloaded and executed. The RTF file downloads a VBScript with the “.jpg” file extension from the C2 and another VBScript from “paste.ee”, a service similar to “Pastebin” where one can upload text for free. The downloaded VBScript is obfuscated with... The post RemcosRAT Distributed Using Steganography appeared first on ASEC BLOG.

RemcosRAT Distributed

Mobile medical care firm DocGo confirmed it suffered a cyberattack after threat actors breached its systems and stole patient health data. [...]

data Mobile medical care Mobile medical patient health

The great challenge of our century is learning to consume less. Who has never killed an hour? Not casually or without thought, but carefully: a premeditated murder of minutes.

Amusing Stimuli Supernormal Supernormal Stimuli

By Deeba Ahmed Over 1.2 million records were exposed in a major data breach at UK security firm Amberstone. Learn the potential impact, what to do if affected, and how to stay secure. This is a post from HackRead.com Read the original post: Major UK Security Provider Leaks Trove of Guard and Suspect Data

Leaks Trove Provider Leaks Suspect Data

Hackers have been targeting WordPress sites with an outdated version of the LiteSpeed Cache plugin to create administrator users and gain control of the websites. [...]

Cache flaw outdated version

We're all excited and fascinated by Virtual Reality (VR) but the technology clearly isn't quite there yet .

Our new product update is here! Get ready for the latest mobile app update, dive into crafting your pixelated avatar, explore the sleek new theme, experience revamped story pages, check out the fresh top writers ranking page, and more!🚀

Pixelated Avatars Revamped Story