keep moving

This is an amazingly detailed account of the actions taken to take down HT. One of the key moments in the article was how he went after the people with keys to the kingdom – the sysadmins.

One of my favourite passtimes is stalk the sysadmins. By spying on Christian Pozzi (Hacking Team’s sysadmin), I gained access to the Nagios server, which gave me access to the ‘rete sviluppo’ (the development network with the RCS source code). With a simple combination of PowerSploit’s Get-Keystrokes and Get-TimedScreenshot [13], nishang’s Do-Exfiltration, and GPO, I could spy on any employee I wanted, or even the entire domain.

                                 ,-._,-._             
                              _,-\  o O_/;            
                             / ,  `     `|            
                             | \-.,___,  /   `        
                              \ `-.__/  /    ,.\      
                             / `-.__.-\`   ./   \'
                            / /|    ___\ ,/      `\
                           ( ( |.-"`   '/\         \  `
                            \ \/      ,,  |          \ _
                             \|     o/o   /           \.
                              \        , /             /
                              ( __`;-;'__`)            \\
                              `//'`   `||`              `\
                             _//       ||           __   _   _ _____   __
                     .-"-._,(__)     .(__).-""-.      | | | | |_   _| |
                    /          \    /           \     | | |_| | | |   |
                    \          /    \           /     | |  _  | | |   |
                     `'-------`      `--------'`    __| |_| |_| |_|   |__
                               #antisec

Via Ghostbin

The Panama papers leak has been affecting a lot of high-profile individuals. How did it actually happen? Here’s one plausible theory.

The Mossack Fonseca (MF) data breach, aka Panama Papers, is the largest data breach to journalists in history and includes over 4.8 million emails. Yesterday we broke the story that MF was running WordPress with a vulnerable version of Revolution Slider and the WordPress server was on the same network as their email servers when […]

Source: Panama Papers: Email Hackable via WordPress, Docs Hackable via Drupal – Wordfence

The so-called side-channel attacks – in which attackers steal information from a machine they don’t have direct access to – are getting more popular these days. This is another innovative example of a side-channel attack. The target laptop was not connected to any network (either through LAN or Wifi) and yet the attackers managed to obtain the encryption keys from it.

“The attacks are completely non-intrusive: we did not modify the targets or open their chassis.”

Source: How White Hat Hackers Stole Crypto Keys from an Offline Laptop in Another Room | Motherboard

Barcode scanners can be hacked via a specially crafted barcode sequence. They can be instructed to execute arbitrary commands including downloading external scripts via FTP.

via Barcode attack technique (Badbarcode)