Attacking Windows Platform with EternalBlue Exploit via Android Phones | MS17-010

Image
Introduction On 14 April 2017, a hacker group know by the name of Shadow Brokers leaked exploitation toolkit used by the National Security Agency (NSA). The leak was also used as part of a worldwide WannaCry ransomware attack. EternalBlue is also an exploit developed and used by the NSA according to former NSA employees. Lab Environment Target Machine: Windows 7 Ultimate x64 bit Attacker Machine: Android 5.1  What is EternalBlue EternalBlue actually exploits a vulnerability found in Server Message Block (SMB) protocol of Microsoft Windows various platforms. This vulnerability can be found under CVE-2017-0144 in the CVE catalog.The most severe of the vulnerabilities could allow remote code execution if an attacker sends specially crafted messages to a Microsoft Server Message Block 1.0 (SMBv1) server. Windows 7 Operating with Release Effected by EternalBlue Installing Metasploit Framework on Android Step 1: Download Termux from play store....
Post a Comment

India, Japan reaffirm commitment to secure cyberspace

India, Japan reaffirm commitment to secure cyberspace


India and Japan have reaffirmed their commitment to a secure and accessible cyberspace during the Second India-Japan Cyber Dialogue held here on Thursday, the External Affairs Ministry said in a statement on Friday.


"Japan and India reaffirmed their commitment to an open, free, secure, stable, peaceful and accessible cyberspace, enabling economic growth and innovation," the statement said.



"In particular, both sides reaffirmed that existing international law is generally applicable in cyberspace and that no country should conduct or support ICT-enabled theft of intellectual property, including trade secrets or other confidential business information, with the intent of providing competitive advantages to its companies or commercial sector," it stated.


According to the statement, the areas of discussion included domestic cyber policy landscape, cyber threats and mitigation, mechanism on bilateral cooperation and possible cooperation at various international and regional fora.

The Indian delegation also made a presentation on the 5th Global Conference on Cyber Space to be held in New Delhi on November 23-24 this year.

"Both sides shared the view that they will deepen the dialogues at various levels including through the Japan-India Cyber Dialogue," the statement said.


The Indian side comprised representatives from the Ministry of Electronics and Information Technology, Ministry of Home Affairs, National Security Council Secretariat, Central Bureau of Investigation, Department of Telecommunication, National Critical Information Infrastructure Protection Centre and the National Investigation Agency and was led by Sanjay kumar Verma, Joint Secretary in the Ministry of External Affairs.


The Japanese delegation was led Masato Otaka, Ambassador in-charge of Cyber Policy and Deputy Director General of Foreign Policy Bureau in Japanese Ministry of Foreign Affairs and included representatives from National Center of Incident Readiness and Strategy for Cybersecurity, Cabinet Intelligence and Research Office and the National Police Agency.



Comments

Post a Comment

Popular posts from this blog

Attacking Windows Platform with EternalBlue Exploit via Android Phones | MS17-010

Image
Introduction On 14 April 2017, a hacker group know by the name of Shadow Brokers leaked exploitation toolkit used by the National Security Agency (NSA). The leak was also used as part of a worldwide WannaCry ransomware attack. EternalBlue is also an exploit developed and used by the NSA according to former NSA employees. Lab Environment Target Machine: Windows 7 Ultimate x64 bit Attacker Machine: Android 5.1  What is EternalBlue EternalBlue actually exploits a vulnerability found in Server Message Block (SMB) protocol of Microsoft Windows various platforms. This vulnerability can be found under CVE-2017-0144 in the CVE catalog.The most severe of the vulnerabilities could allow remote code execution if an attacker sends specially crafted messages to a Microsoft Server Message Block 1.0 (SMBv1) server. Windows 7 Operating with Release Effected by EternalBlue Installing Metasploit Framework on Android Step 1: Download Termux from play store....
Read more

Self-driving Cars Can be hacked by just putting stickers on street signs

Self-driving Cars Can be hacked by just putting stickers on street signs :-- Car Hacking is a hot topic, though it's not new for researchers to hack cars. Previously they had demonstrated how to hijack a car remotely, how to  disables cars   crucial functions like airbags, and even how to steal cars. But the latest car hacking trick doesn't require any extra ordinary skills to accomplished. All it takes is a simple sticker onto a sign board to confuse any self-driving car and cause accident. Isn't this so dangerous? A team of researchers from the University of Washington demonstrated how anyone could print stickers off at home and put them on a few road signs to convince "most" autonomous cars into misidentifying road signs and cause accidents. According to the researchers, image recognition system used by most autonomous cars fails to read road sign boards if they are altered by placing stickers or posters over part or the whole road sign b...
Read more