hacking: security in practice
What's some good gifts to give to a my hacking bf?

*typo in title

​

Hello everyone and apologize in advance as I don't know much about this world except for what my boyfriend talks me about.

He's extremely passionate about hacking and I would love to gift him something related to this field, these are all the information that I currently have:

- He would love to start bug hunting

- He is really interested in GOlang and Malware Dev using specifically GOlang (Already has some nostarch books (bug bounty bootcamp and go for blackhat))

- Also interested in how to develop game hacking

- He already knows Flipper Zero but he's a bit reticent about buying it becaue he's not sure how much of an use he could do

- Already has a raspberry pi

I was looking at this thinghy here: https://shop.hak5.org/products/usb-rubber-ducky since I know he likes mr robot too, but would really love some more advice!

submitted by /u/notsalem
[link] [comments]

hacking: security in practice
Which SIP Trunk service allows using all callerIDs?

I am computer engineering student. It was fun to troll my friends with spoofing. But now i want to dive more into SIP Trunk. I want to test, how it works etc. I do need a SIP Trunk service which allows to use all callerIDs. I tried voip.ms, it didn’t worked as expected. I would be glad if you provide me names of these providers.

I would appreciate if you do not talk about the laws like a lawyer

submitted by /u/Fanuxiko
[link] [comments]

hacking: security in practice
Anarcho-Syndicalist Hackers 1995 Movie - Hijacking TV Stations Meme

https://b.thumbs.redditmedia.com/Vxf-bRg37ydGt_tbzNDYgvPiMSBBB9FRn5HWlhbM24g.jpg submitted by /u/holdoffhunger
[link] [comments]

hacking: security in practice
Chinese hacker, Volt Typhoon, breach US critical infrastructure in stealthy attacks

https://external-preview.redd.it/b64Hxer6ZqeRMV5NnKo7juIQNS6FoDBYTtUpEcGjL_4.jpg?width=640&crop=smart&auto=webp&s=ad508a4f44b0103b748cb994497769af8f539816 submitted by /u/DrinkMoreCodeMore
[link] [comments]

https://b.thumbs.redditmedia.com/kxzpT_lLMJuNrcLn_3hHp3NEThg_Xo4xeN7Qk_nGzJY.jpg Introducing MaccaroniC2 ( https://github.com/CalfCrusher/MaccaroniC2 ), a proof-of-concept Command and Control framework that combines the power of the AsyncSSH Python library (https://asyncssh.readthedocs.io) with the integration of PyNgrok (https://pypi.org/project/pyngrok/) wrapper for ngrok.

​

https://github.com/CalfCrusher/MaccaroniC2

This tool is designed to address a specific scenario where the victim operates an AsyncSSH server and establishes an external tunnel, eagerly awaiting commands from the attacker.

With the powerful capabilities of the AsyncSSH library, which provides an exceptional implementation of the SSHv2 protocol, this tool ensures efficient and secure communication between the attacker and the victim.

Furthermore, the integration with PyNgrok enables automatic retrieval of the tunnel’s hostname and port using the official Ngrok API, establishing a secure connection. The victim will establish an outgoing connection to Ngrok servers, eagerly awaiting the attacker’s commands.

The idea was born thinking about the comprehensive features of AsyncSSH, including integrated support for SFTP and SCP, enabling secure and efficient data exfiltration, among other functionalities.

The tool can send and execute system commands also through a SOCKS proxy: taking advantage of this capability, the attacker can further enhance the anonymity by leveraging TOR and its benefits.

For further information and usage:

https://github.com/CalfCrusher/MaccaroniC2

submitted by /u/calfcrusher_
[link] [comments]

Dark Reading: Attacks/Breaches
'Volt Typhoon' China-Backed APT Infiltrates US Critical Infrastructure Orgs

According to Microsoft and researchers, the state-sponsored threat actor could very well be setting up a contingency plan for disruptive attacks on the US in the wake of an armed conflict in the South China Sea.

Dark Reading: Attacks/Breaches
Honeywell Releases Cyber Insights to Better Identify Cybersecurity Threats and Vulnerabilities

The new software-led solution enables organizations to defend against cybersecurity threats in their operational technology (OT) environments.

Dark Reading: Attacks/Breaches
Technology Veterans James Wickett and Ken Johnson Launch DryRun Security to Bring Security to Developers

DryRun security seeks to bridge the gap between developers and security professionals by automating security analysis in code reviews before deployment.

Dark Reading: Attacks/Breaches
Appdome Launches Build-to-Test, Automated Testing Option for Protected Mobile Apps

New capability streamlines automated testing of cybersecurity and anti-fraud features in android and iOS apps in virtual and cloud testing suites.

Dark Reading: Attacks/Breaches
Netwrix Report: Enterprises Suffer More Ransomware and Other Malware Attacks Than Smaller Organizations

Attackers primarily target on-premises IT infrastructures.

Dark Reading: Attacks/Breaches
Threat Actors Compromise Barracuda Email Security Appliances

The company's ESG appliances were breached, but their other services remain unaffected by the compromise.