Talk and help about bugbounty
Hi ,can someone help i have some doubts in bug bounty?
Читать полностью…🍎💀MacOS Malware Alert: Python-Based Infostealer Bundled via PyInstaller
Hi everyone that reads HackingBlogs!
In this article, we’re looking into a recent research macOS malware by Jamf Threat Labs, which discloses how attackers use PyInstaller to spread malware on macOS devices. We’ll examine the technical aspects, analyze the methods employed, and describe how these malicious campaigns are being carried out. So let’s go right in without further ado.
Highlights from article
Checking the Signature
First, the file’s code signature is verified using the <codesign> command. A legitimate code signature indicates that a reliable developer has signed the file. The term “adhoc” indicates that it was not signed by a recognized authority, which raises suspicions about files.
Codesign -dv stl indicates that the file is ad-hoc signed, which means that a reliable authority did not sign it. Additionally, it indicates that the file is not from a verified developer because it lacks a “Team Identifier” and “Sealed Resources.”
Confirming the Architecture (Which Computers the File Can Run On)
macOS malware
The file command checks what kind of computer the file can run on. It shows that the stl file is a Mach-O FAT binary, meaning it can work on both Intel (x86_64) and Apple Silicon (arm64) Macs.
Both x86_64 (Intel-based Macs) and arm64 (more recent, Apple Silicon-based Macs) are supported by the file, according to the file stl command.
Read this detailed article 👉🏻 https://hackingblogs.com/macos-malware-python-based-infostealer/
Join telegram channel to always remain updated 👉🏻 /channel/HackingBlogsGroup
Anyone looking for cybersecurity tutorials like
Soc Analyst
Vapt
Splunk Admin
Qradar Admin
Pentesting
Oscp
Chfi
Bug bounty
Can ping for complete resources like videos docs and interview questions
Develop your own tools if you have programming experience
Читать полностью…Even unique bugs might be dupe which is very annoying
Читать полностью…But don't expect earning lots of money with bug bounties
Читать полностью…I found lots of crits using this method in real world testing
Читать полностью…I made that on Hackingblogs free 10 days bootcamp have a look
Читать полностью…Guys, where can I get detailed video tutorial for Bug Bounty ?
Читать полностью…Custom and unique tools might help you find bugs rapidly
Читать полностью…All you need to have an idea about what kind of tool could exist then
Читать полностью…