Trending

Researchers Hacked EV Car Chargers To Execute Arbitrary Code

By CyberMrfu3k -
EVs face significant cyber risks due to their reliance on interconnected systems and the increasing number of public charging stations, which often lack robust security measures.  Vulnerabilities in EV software and charging infrastructure can expose vehicles to malware, unauthorized access, and potential control by hackers. During Pwn2Own Automotive 2024 in Tokyo, cybersecurity researchers hacked  EV car chargers  to execute arbitrary code. Researchers Hacked EV Car Chargers At the Pwn2Own Automotive 2024 event, researchers exploited three EV chargers:-  Autel MaxiCharger (MAXI US AC W12-L-4G) ChargePoint Home Flex JuiceBox 40 Smart EV Charging Station  They executed arbitrary code via Bluetooth while focusing on the Autel MaxiCharger, and this uncovered the “CVE-2024-23958,” “CVE-2024-23959,” and “CVE-2024-23967”  vulnerabilities . The features of the charger include WiFi, Ethernet, Bluetooth, 4G LTE, RFID, LCD touchscreen, RS485, and a USB-C port. Its har...
Post a Comment

Ninjutsu OS- Windows based pentesting distribution

By -

Ninjutsu Project



Hey everyone. Hope you all are doing good.
Today I came across a post in Linkedin by Hasan, a Red team Penetration tester. It's as follows




I started exploring and came to know about this distribution. A Windows based pentesting distribution!!  Sound exciting right? Within few minutes i ended up downloading the OS (17gb -_- )

Don't forget to visit their official blog and support the developer if you like his work.


I tried the OS myself in VMWare and its really satisfying (apart from 3 hours installation :P). Took a while to completely install all the tools. Here are some screenshots                  




Made my friend to install the OS in dual boot and he also loved it. The OS includes various tools for information gathering, post-exploitation, and the list goes on as it contains almost 800 tools. No wonder why the OS is so large in size.                                                              

You know the best part is that its Windows based containing Red team collection too, removed unnecessary apps like onedrive which may interfere with users anonymity. The developer has crafted the distribution perfect for an Ethical hacker.                                                                          
As per the official blog, the features are:
  • Global variables
  • Prefills the command line
  • A complete arsenal of security tools
  • Pre-configured and installed Android Pentesting Integrated Environment
  • Terminal Features Copy Paste terminal

Download Links:

Installation Steps:

  •  VMWare

    1. Grab the iso from download link.
    2. Add a new virtual machine.
    3. Select CD/DVD(sata) and browse to the iso directory.
    4. Choose required amount of storage space (16gb is recommended).
    5. Boot the machine and let the installation to progress (It takes a while).
    6. (Optional) You may need a windows activation key during installation, but you can activate later.
    7. After installation, during first boot, some script will autorun to download the required tools, and libraries. (Takes longer)

  • Main Machine

    1. Grab the iso from download link.
    2. Use rufus to create a bootable USB drive.( Make sure the USB space is large enough, and empty)
    3. Now restart your PC and enter BIOS, choose boot priority to your Bootable USB.
    4. The PC will be booted with USB, and the installation is very similar to Windows 10.
    5. (Optional) You may need a windows activation key during installation, but you can activate later.
    6. After installation, during first boot, some script will autorun to download the required tools, and libraries. (Takes longer) 

    Username : Administrator
    Password : toor 

    The OS is really worth to give a try. Hope they would make more changes and keeps the distribution updated.

    Comment your thoughts about the new OS below. Keep Exploiting :)

Comments

  1. The Lone WolfSeptember 3, 2020 at 10:49 AM

    Hello James,
    Thanks. Will update more cool stuff soon :)
    Feel free to contact me.

    ReplyDelete
  2. francis "mangod" cinelliSeptember 14, 2020 at 9:41 PM

    So this post was recent, did you use ninjutsu v2 or 1? I have version 2 and it's 20gb. And my God, the install as a virtual machine was so slow...then it gave me an error, might have been lack of an internet connection...
    Anywhosie, I plan to dual boot it, or I would prefer to create a bootable on the go installation on an SdCard. I did it with windows 10 but I forget if I used wintousb, rufus, or wintoflash, or rmprep...I did the same with Kali years ago. The 20gb size though makes my guess and check style a little more frustrating and it recommends something like 60gb for the installation. I had my virtual machine set to use 50gb maybe that's what the error was... Anyway, cool blog, ninjutsu is going to be fun I think. Especially if I can run it as an on the go portable installation.

    ReplyDelete
  3. The Lone WolfSeptember 28, 2020 at 12:32 PM

    Hey Francis,
    Yep its fun to use Ninjutsu. Actually i made this post with v1. I haven't tried v2 but will post an update in the blog after checking that.
    Stay safe and stay tuned ;)

    ReplyDelete
  4. Hijabi GirlApril 26, 2021 at 8:38 AM

    Very informative post! There is a lot of information here that can help any business get started with a successful social networking campaign. Penetration Testing Services

    ReplyDelete
  5. Mrfu3kJuly 9, 2023 at 10:32 AM

    No, I'ts old One

    ReplyDelete

Post a Comment

Popular posts from this blog

Fog Ransomware

By CyberMrfu3k -
Image
‛Fog’ Ransomware Rolls in to Target many Sectors. A new group of hackers is encrypting data in virtual machines, leaving ransom notes, and calling it a day. A new ransomware operation has been performing old-fashioned ransomware attacks, locking up data in virtual environments to earn quick payouts. Attack Vectors • Fog attacks typically begin with stolen virtual private network (VPN) credentials, an increasingly popular means of initial access into sizable organizations. The group has exploited two different VPN gateway vendors thus far, which Arctic Wolf has declined to name. • In one case, for example, Fog passed the hash to compromise administrator accounts in its target’s network. It then used the accounts to establish a remote desktop protocol (RDP) connection with Windows servers running the Hyper-V hypervisor and Veeam data protection software. • Other common Fog tactics, techniques, and procedures (TTPs) include credential stuffing, using native Windows and open-source tools l...
Read more

New PIXHELL Attack Exploits Screen Noise to Exfiltrates Data from Air-Gapped Computers

By CyberMrfu3k -
Image
Security researchers have unveiled new techniques that allow attackers to exfiltrate sensitive data from air-gapped computers, which are systems physically isolated from unsecured networks. Despite air gaps being a strong security measure, these attacks demonstrate that determined adversaries can still find ways to breach such systems. Dr. Mordechai Guri and his team at Ben-Gurion University in Israel have published multiple papers detailing various  covert channels  that can be used to leak data from air-gapped systems. Their latest  research focuses  on exploiting computer components’ electromagnetic, acoustic, thermal, and optical emanations to transmit data to nearby receivers. One attack, dubbed  RAMBO  (Radiation of Air-gapped Memory Bus for Offense), exploits electromagnetic emissions from a computer’s RAM to leak data. Malware can generate controlled radio signals that encode stolen information by manipulating memory access patterns. Using a softwar...
Read more