FirstHackers News’ Post

Security researchers have published a Proof-of-Concept (PoC) exploit for a critical vulnerability in the widely used PuTTY SSH and Telnet client. The flaw, CVE-2024-31497, permits attackers to recover private keys generated with the NIST P-521 elliptic curve in PuTTY versions 0.68 through 0.80. This vulnerability arises from PuTTY’s biased generation of ECDSA nonces when using the P-521 curve. Researchers discovered that the first 9 bits of each nonce are consistently zero, allowing for full private key recovery from approximately 60 signatures using lattice cryptanalysis techniques. Security researcher Hugo Bond demonstrated the attack’s feasibility by publishing a PoC exploit on GitHub. Leveraging the nonce bias, the PoC recovers the private key from a set of signatures generated by a vulnerable PuTTY version. ~First Hackers News To Continue reading this article, click on this link >>> https://lnkd.in/eByKXvrE #securityresearchers #PoC #vulnerability #telnet #attackers #privatekey #cryptanalysis #PuTTY #cyberattack #cybersecurity #fhn #firsthackersnews #informationsecurity #latestnews

Security researchers have published a Proof-of-Concept (PoC) exploit for a critical vulnerability in the widely used PuTTY SSH and Telnet client. The flaw, CVE-2024-31497, permits attackers to recover private keys generated with the NIST P-521 elliptic curve in PuTTY versions 0.68 through 0.80. This vulnerability arises from PuTTY’s biased generation of ECDSA nonces when using the P-521 curve. Researchers discovered that the first 9 bits of each nonce are consistently zero, allowing for full private key recovery from approximately 60 signatures using lattice cryptanalysis techniques. Security researcher Hugo Bond demonstrated the attack’s feasibility by publishing a PoC exploit on GitHub. Leveraging the nonce bias, the PoC recovers the private key from a set of signatures generated by a vulnerable PuTTY version. ~First Hackers News To Continue reading this article, click on this link >>> https://lnkd.in/eByKXvrE #securityresearchers #PoC #vulnerability #telnet #attackers #privatekey #cryptanalysis #PuTTY #cyberattack #cybersecurity #fhn #firsthackersnews #informationsecurity #latestnews

🚨 PuTTY SSH client vulnerability reveals cryptographic private keys 🚨 A flaw that affects PuTTY versions 0.68 to 0.80 allows attackers to potentially recover private keys from cryptographic signatures. ℹ️ PuTTY is a widely used open-source software for remote server management via SSH, Telnet, SCP, and SFTP. The vulnerability stems from a biased method of generating ECDSA nonces for the NIST P-521 curve, leading to predictable top bits in the nonce. 👉 Compromised private keys could lead to unauthorized server access or impersonation in Git commit signing. #cybersecurity #news #threatintelligence #vulnerability #cti #opensource

PuTTY ECDSA nonce generation bug allows key recovery for 521 bit ECDSA keys. Update to fix, but consider that existing keys could be compromised. https://lnkd.in/e6kakMuC (Why only 521 bit keys? Announcement explains because it starts with 512 bits of nonce for historical reasons, and other keys use less than that, but 512 mod 521 is 512, so top 9 bits are always zero.)

I have published another blog in continuation of the authorization series (part 4). In this blog I have explained about Insecure direct object reference (IDOR) vulnerability and difference between BOLA and IDOR. Further there is step-by-step solution for the Web Security Academy lab "Lab: Insecure direct object references". https://lnkd.in/gkE3S9uc #Portswigger #WebSecurityAcademy #CyberSecurity #InfoSec #WebSecurity #MediumBlogging

🎉We've released OWASP #7 Server Side Request Forgery (SSRF) and OWASP #8 Security Misconfiguration in our OWASP Top 10 and Beyond course! OWASP #7 Server Side Request Forgery (SSRF): A web application security vulnerability that allows an attacker to make arbitrary requests from the vulnerable server to other internal or external resources. The attacker can manipulate the server into fetching data or performing actions on its behalf. SSRF typically occurs when the web application processes user-supplied input and doesn't properly validate or sanitize it before using it to make requests. OWASP #8 Security Misconfiguration: a prevalent web application security risk that arises when a system or software component is deployed with default or insecure configurations, leaving it vulnerable to exploitation. It occurs when developers, administrators, or system maintainers overlook or neglect security settings, leaving sensitive data and functionalities exposed to potential attackers. Don't miss this opportunity to upskill and strengthen your cybersecurity arsenal. Enroll now and take charge of your professional development! 🔗 https://ow.ly/kIT850Pmp44 #OWASP #CybersecurityTraining #InfoSec

A PoC has been published for a critical RCE vulnerability found in Fortra’s FileCatalyst software. RCE Vulnerability in Fortra FileCatalyst Tracked as CVE-2024-25153, this vulnerability poses a severe threat to organizations using the FileCatalyst Workflow Web Portal, potentially allowing attackers to execute arbitrary code on affected systems. CVE-2024-25153 The vulnerability resides in a directory traversal flaw within the ‘ftpservlet’ component of the FileCatalyst Workflow Web Portal. By exploiting this flaw, attackers can circumvent intended security measures by using a specially crafted POST request to upload files outside the designated ‘uploadtemp’ directory. ~First Hackers News To Continue reading this article, click on this link >>> https://lnkd.in/gxtEQ2pd #poc #rce #vulnerability #filecatalyst #attackers #arbitrarycode #post #cyberattack #cybersecurity #fhn #firsthackersnews #informationsecurity #latestupdates

🔐 Just completed a challenging lab at the Web Security Academy: "JWT Authentication Bypass via Algorithm Confusion"! 🔓 🌐 In today's digital landscape, web security is paramount. Understanding and mitigating vulnerabilities is crucial to safeguarding user data and system integrity. 🚀 This lab was an incredible learning experience! It delved into the intricate world of JSON Web Tokens (JWT) and demonstrated how an algorithm confusion vulnerability can be exploited to bypass authentication. The lab covered various aspects, including: ✅ Identifying the vulnerability in the JWT implementation ✅ Manipulating token data to achieve unauthorized access ✅ Understanding the importance of proper algorithm selection ✅ Implementing countermeasures to prevent such exploits 💡 The knowledge gained from this lab has broad applications in real-world scenarios. It's about more than just passing a test; it's about developing skills that can make a real difference in the security of web applications. 🌟 I want to extend my gratitude to the Web Security Academy for providing such a valuable resource for learning and improving web security skills. Continuous learning is the key to staying ahead in the ever-evolving field of cybersecurity. 🤝 If you're passionate about web security like I am, let's connect! I'm always eager to collaborate and share insights on how we can make the digital world safer for everyone. PortSwigger https://lnkd.in/eEAVKWv3 #websecurity #jwt #cybersecurity #continuouslearning #portswigger #cyberaware

🚀 Just completed the OWASP TOP 10 2021 module on Web Fundamentals, and it's been an eye-opener! 💡 Here's a sneak peek into what I've learned: 🔍 Introduction to OWASP TOP 10 🛠️ Accessing Machines 🔒 Broken Access Control - including an IDOR Challenge 🔐 Cryptographic Failures, with supporting materials and a challenge 💉 Injection, with a focus on Command Injection 🔄 Insecure Design 🔐 Security Misconfiguration 🔄 Vulnerable and Outdated Components - Exploit and Lab 🚫 Identification and Authentication Failures, with a practical exercise 🔐 Software and Data Integrity Failures 🧩 Software Integrity Failures 🔍 Data Integrity Failures 📉 Security Logging and Monitoring Failures 🎭 Server-Side Request Forgery (SSRF) Excited to delve deeper into web security! 💻🛡️ #WebSecurity #OWASPTop10 #Cybersecurity #LearningJourney #WebFundamentals #InfoSec

PuTTY vulnerability can be exploited to recover private keys (CVE-2024-31497): A vulnerability (CVE-2024-31497) in PuTTY, a popular SSH and Telnet client, could allow attackers to recover NIST P-521 client keys due to the “heavily biased” ECDSA nonces (random values used once), researchers have discovered. “To be more precise, the first 9 bits of each ECDSA nonce are zero. This allows for full secret key recovery in roughly 60 signatures by using state-of-the-art techniques,” Fabian Bäumer shared on the oss-sec mailing list. According to PuTTY maintainers, … More → The post PuTTY vulnerability can be exploited to recover private keys (CVE-2024-31497) appeared first on Help Net Security.