hacking: security in practice
certifications for first job at pt

from your own perspective what is better

cpts+crtp and maybe another cert vs oscp alone

i know that doing just one cert is more convenient but i just dont feel i can pass oscp right now

i think from logic perspective if i have 2-3 certs on my cv i will get interviews but what you all think?

thanks

submitted by /u/General_Roof9555
[link] [comments]

hacking: security in practice
Is there such thing as rubber ducky USB or even LAN2USB device for Routers?

Something that executes automatically commands/payloads once it is plugged in, just like it works for PCs and phones.

submitted by /u/Sascha_Wohler
[link] [comments]

Hacking on Medium
CVE 2022–33082 Practical Exploitation

https://cdn-images-1.medium.com/max/640/1*CX4iXfhXJtv3C-yiiApriA.jpeg
I have developed the first known practical exploit for CVE 2022–33082, “an issue in the AST parser (ast/compile.go) of Open Policy Agent…

Continue reading on Medium »

Hacking on Medium
Cracking PicoCTF: ‘Hurry Up! Wait!’ With Ghidra — StackZero

https://cdn-images-1.medium.com/max/1200/1*tDMQ8fdVndQw7spo2yKdKw.jpeg
Discover how to solve the PicoCTF Hurry up! Wait! challenge using Ghidra’s scripting capabilities. Step-by-step walkthrough.

Continue reading on InfoSec Write-ups »

Hacking on Medium
HackTheBox Writeup — PC

https://cdn-images-1.medium.com/max/1400/1*D0waX_O2gjWUVQ6UI8asIQ.png
This box was presented at the Hack The Box in May 2023 by sau123.

Continue reading on Medium »

Hacking on Medium
Mr. Robot — Hidden Easter Egg Found — Presented by AI eve — Eels — LAST STOP: THIS TOWN!

https://cdn-images-1.medium.com/max/2560/0*3o5oJ3gk-nvp6Ief.jpg
LAST STOP! THIS TOWN! EASTER EGG FOUND! The Hidden AI Metaphors in Mr. Robot: An Insightful Look from an AI POV.

Continue reading on Medium »

Hacking on Medium
Unique Exploit: CVE-2022–22733 Privilege Escalation & RCE

https://cdn-images-1.medium.com/max/1817/0*OKxbnbj6SESzO5-3.png
Introduction

Continue reading on Medium »

Hacking on Medium
CVE-2022–41544 — Unauthenticated RCE in Get-Simple

https://cdn-images-1.medium.com/max/1080/0*wZpiorGrnoWCgih6.png
Introduction

Continue reading on Medium »

Hacking on Medium
Protecting Wi-Fi: Defending Against Evil Twin Attacks and Password Theft

https://cdn-images-1.medium.com/max/2600/0*rkLNfjMqmMKHfZaB
With the increasing reliance on Wi-Fi networks for internet connectivity, securing our wireless connections has become more critical than…

Continue reading on Medium »

CVE 2022–33082 Practical Exploitation
https://cyberqueenmeg.medium.com/cve-2022-33082-practical-exploitation-c78b0cec69aa?source=rss------bug_bounty-5

I have developed the first known practical exploit for CVE 2022–33082, “an issue in the AST parser (ast/compile.go) of Open Policy Agent…Continue reading on Medium » (https://cyberqueenmeg.medium.com/cve-2022-33082-practical-exploitation-c78b0cec69aa?source=rss------bug_bounty-5)

From Enumeration to Domain Admin in One Repository
https://www.reddit.com/r/redteamsec/comments/14gl55p/from_enumeration_to_domain_admin_in_one_repository/


[link] (https://github.com/RoseSecurity/Red-Teaming-TTPs) [comments] (https://www.reddit.com/r/redteamsec/comments/14gl55p/from_enumeration_to_domain_admin_in_one_repository/)

Dark Reading: Attacks/Breaches
Job Seekers, Look Out for Job Scams

Scammers are setting out lures for people looking for work. If a position sounds too good to be true, it probably is.

Dark Reading: Attacks/Breaches
LockBit Developing Ransomware for Apple M1 Chips, Embedded Systems

Under construction: The world's leading ransomware gang is workshopping ransomware for less obvious systems beyond Windows environments. Experts weigh in on how worried we should be.