Dark Reading: Attacks/Breaches
How Universities Can Bridge Cybersecurity's Gender Gap

It's time to invest in initiatives that engage young women in cybersecurity early and often.

Dark Reading: Attacks/Breaches
Israeli Shipping, Logistics Companies Targeted in Watering Hole Attacks

Researchers say the Iranian nation-state actor known as Tortoiseshell could be behind the attacks.

Dark Reading: Attacks/Breaches
How AI Can Help Organizations Adapt and Recover From Cyberattacks

Incident response playbooks and frameworks are leaving defenders ill-equipped to recover from the increasing number of successful cyberattacks. Developments in AI offer a new way for stretched teams to manage security incidents and heal swiftly.

Volt Typhoon targets US critical infrastructure with living-off-the-land techniques
https://www.reddit.com/r/redteamsec/comments/13quict/volt_typhoon_targets_us_critical_infrastructure/

submitted by /u/SCI_Rusher (https://www.reddit.com/user/SCI_Rusher)
[link] (https://aka.ms/VoltTyphoon) [comments] (https://www.reddit.com/r/redteamsec/comments/13quict/volt_typhoon_targets_us_critical_infrastructure/)

Hacking on Medium
Disclaimer: This blog post is for educational purposes only and is not intended to be used for any…

If you’re an enthusiast of DIY gadgets, cybersecurity, and everything in between, you’ve probably heard about the Flipper Zero, a…

Continue reading on Medium »

Hacking on Medium
Hack The Location of Phone Number with this Python lib.

https://cdn-images-1.medium.com/max/1280/1*2wnDlf1n7nh4m6NGtXx7OA.jpeg
The phonenumbers library is a popular Python library for parsing, formatting, and validating phone numbers. The library provides various…

Continue reading on Medium »

Hacking on Medium
Featured Article: Cybercrime (May 24th, 2023)

Congressional Communities is featuring one Congressional Research Service (CRS) article per day in effort to share with our readers the…

Continue reading on Medium »

윈도우 IIS 웹 서버를 노리는 Lazarus 그룹 - ASEC BLOG
https://www.reddit.com/r/redteamsec/comments/13qxo4q/%EC%9C%88%EB%8F%84%EC%9A%B0_iis_%EC%9B%B9_%EC%84%9C%EB%B2%84%EB%A5%BC_%EB%85%B8%EB%A6%AC%EB%8A%94_lazarus_%EA%B7%B8%EB%A3%B9_asec_blog/

submitted by /u/dmchell (https://www.reddit.com/user/dmchell)
[link] (https://asec.ahnlab.com/ko/52829/) [comments] (https://www.reddit.com/r/redteamsec/comments/13qxo4q/%EC%9C%88%EB%8F%84%EC%9A%B0_iis_%EC%9B%B9_%EC%84%9C%EB%B2%84%EB%A5%BC_%EB%85%B8%EB%A6%AC%EB%8A%94_lazarus_%EA%B7%B8%EB%A3%B9_asec_blog/)

hacking: security in practice
What's some good gifts to give to a my hacking bf?

*typo in title

​

Hello everyone and apologize in advance as I don't know much about this world except for what my boyfriend talks me about.

He's extremely passionate about hacking and I would love to gift him something related to this field, these are all the information that I currently have:

- He would love to start bug hunting

- He is really interested in GOlang and Malware Dev using specifically GOlang (Already has some nostarch books (bug bounty bootcamp and go for blackhat))

- Also interested in how to develop game hacking

- He already knows Flipper Zero but he's a bit reticent about buying it becaue he's not sure how much of an use he could do

- Already has a raspberry pi

I was looking at this thinghy here: https://shop.hak5.org/products/usb-rubber-ducky since I know he likes mr robot too, but would really love some more advice!

submitted by /u/notsalem
[link] [comments]

hacking: security in practice
Which SIP Trunk service allows using all callerIDs?

I am computer engineering student. It was fun to troll my friends with spoofing. But now i want to dive more into SIP Trunk. I want to test, how it works etc. I do need a SIP Trunk service which allows to use all callerIDs. I tried voip.ms, it didn’t worked as expected. I would be glad if you provide me names of these providers.

I would appreciate if you do not talk about the laws like a lawyer

submitted by /u/Fanuxiko
[link] [comments]

hacking: security in practice
Anarcho-Syndicalist Hackers 1995 Movie - Hijacking TV Stations Meme

https://b.thumbs.redditmedia.com/Vxf-bRg37ydGt_tbzNDYgvPiMSBBB9FRn5HWlhbM24g.jpg submitted by /u/holdoffhunger
[link] [comments]

hacking: security in practice
Chinese hacker, Volt Typhoon, breach US critical infrastructure in stealthy attacks

https://external-preview.redd.it/b64Hxer6ZqeRMV5NnKo7juIQNS6FoDBYTtUpEcGjL_4.jpg?width=640&crop=smart&auto=webp&s=ad508a4f44b0103b748cb994497769af8f539816 submitted by /u/DrinkMoreCodeMore
[link] [comments]

https://b.thumbs.redditmedia.com/kxzpT_lLMJuNrcLn_3hHp3NEThg_Xo4xeN7Qk_nGzJY.jpg Introducing MaccaroniC2 ( https://github.com/CalfCrusher/MaccaroniC2 ), a proof-of-concept Command and Control framework that combines the power of the AsyncSSH Python library (https://asyncssh.readthedocs.io) with the integration of PyNgrok (https://pypi.org/project/pyngrok/) wrapper for ngrok.

​

https://github.com/CalfCrusher/MaccaroniC2

This tool is designed to address a specific scenario where the victim operates an AsyncSSH server and establishes an external tunnel, eagerly awaiting commands from the attacker.

With the powerful capabilities of the AsyncSSH library, which provides an exceptional implementation of the SSHv2 protocol, this tool ensures efficient and secure communication between the attacker and the victim.

Furthermore, the integration with PyNgrok enables automatic retrieval of the tunnel’s hostname and port using the official Ngrok API, establishing a secure connection. The victim will establish an outgoing connection to Ngrok servers, eagerly awaiting the attacker’s commands.

The idea was born thinking about the comprehensive features of AsyncSSH, including integrated support for SFTP and SCP, enabling secure and efficient data exfiltration, among other functionalities.

The tool can send and execute system commands also through a SOCKS proxy: taking advantage of this capability, the attacker can further enhance the anonymity by leveraging TOR and its benefits.

For further information and usage:

https://github.com/CalfCrusher/MaccaroniC2

submitted by /u/calfcrusher_
[link] [comments]