Hacking Articles Tips Tricks Videos Tutorials
468 subscribers
65.9K photos
15 videos
157 files
132K links
Exploit
Pentesting
Hacking
Red Team
Blue Team
Kali Linux
Bug Bounty
Black Hat
Cyber security etc

@Hacking_Video
@Hacking_attack
Download Telegram
My First HOF(Hall of Fame)

Hello everyone, I am Rishabh Singh, today I want to tell you how I started and how I got my first HOF.Continue reading on Medium »
Read more...
hacking: security in practice
How to report a potential cybercriminal?

Some guy PMd me on Discord offering a "mentorship on defrauding Amazon" through stolen credit cards bought from darknet markets (he names a few), also has an introduction video linked in the message, Telegram page, lots of marketing talk, claims of high reputation on Empire/DNM, etc. Lots of effort put into this, more than is normally put into a simple scam.

Matters not to me whether he's legit fraudster seeking to profit from teaching and selling stolen credit card information or is it indeed a scam, I find it obnoxious and I want to throw sticks into his spokes to spare others of it. Any way to forward this information to proper authorities?

Just reporting this to local authorities would be a wasted effort. Reporting the user on Discord would likewise do very little.

submitted by /u/UnsightlyWalrus
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video
Career change to cyber security?
https://www.reddit.com/r/Pentesting/comments/nn82mn/career_change_to_cyber_security/

I’ve been programming professionally for over 20 years now and it’s like 32 years or so since I first started writing batch scripts and basic. Since my professional career I always had an interest for securing Web applications. Side last year I also started to do some ctf’s. I’m playing a bit with the idea to take a couple of months off from my contracting job (I develop mobile apps and backend services at the moment, including the hosting, database and maintenance) and to do some cyber security studies and certifications. Pure out of interest and to do something “new”. And who knows, a career change one day. I’m wondering if there are web developers here that followed a similar path and are currently in cyber security / pentesting. How do you experience this field? How do you compare this to software development work? Is it really so much in demand or do you experience senior software developer more in demand? Are there people here from Sweden? Is it easy to find remote work? Would be nice to find some people to have a chat with. Have a great weekend! submitted by /u/jtorvald (https://www.reddit.com/user/jtorvald)
[link] (https://www.reddit.com/r/Pentesting/comments/nn82mn/career_change_to_cyber_security/) [comments] (https://www.reddit.com/r/Pentesting/comments/nn82mn/career_change_to_cyber_security/)

___________________________
@hacking_Attack
@Hacking_Video
HookDump - Security Product Hook Detection

EDR function hook dumping Please refer to the Zeroperil blog post for more information https://zeroperil.co.uk/hookdump/Building source In order to build this you will need Visual Studio 2019 (community edition is fine) and CMake. The batch file Configure.bat will create two build directories with Visual Studio solutions. The project may build with MinGW with the correct CMake command line, this is untested YMMV. There is a dependency on zydis disassembler, so be sure to update the sub-modules in git before configuring the project. There is a 32bit and 64bit project, you may find that EDR's hook different functions in 32/64 bit so building and running both executables may provide more complete results Notes Some EDRs replace the WOW stub in the TEB structure (specifically Wow32Reserved) in order to hook system calls for 32 bit binaries. In this case you may see zero hooks since no jump instructions are present in NTDLL. Most likley you will see hooks in the x64 version as the syscall instruction is used for system calls instead of a WOW stub We have noted that Windows Defender does not use any user mode hooks This tool is designed to be run as a standard user, elevation is not required Hook Types Detected JMP A jump instruction has been patched into the function to redirect execution flow WOW Detection of the WOW64 syscall stub being hooked, which allows filtering of all system calls EAT The address in the export address table does not match the address in the export address table in the copy on disc GPA GetProcAddress hook, an experimental feature, this is only output in verbose mode, when the result of GetProcAddress does not match the manually resolved function address. YYMV with this and some care should be taken to verify the results. Verification The only way to truly verify the correct working of the program is to check in a debugger if hooks are present. If you are getting a zero hooks result and are expecting to see something different, then first verify this in a debugger and please get in touch. Download HookDump
Read more...

___________________________
@hacking_Attack
@Hacking_Video