Hacking on Medium
Guía de uso de MITRE ATT&CK para analistas de amenazas.

https://cdn-images-1.medium.com/max/1110/0*HEDY1pcyX70ulxui
PUBLICADO EN 4 JUNIO, 2021 POR EHACKING

Continue reading on Medium »

Hacking on Medium
The Day Meat Stood Still

https://cdn-images-1.medium.com/max/2600/0*grb12gHxpYnOP0-k
A Ransomware Attack

Continue reading on Medium »

Deep Web
Amazing Animation Website Using HTML And CSS || Make Animated Website Design Using HTML & CSS

https://external-preview.redd.it/FucZ3CUlkeK1zKB7RhFsw9WOT9_piucgB-foybtE8hc.jpg?width=320&crop=smart&auto=webp&s=13059c7356a1ed95a5041c5cf28f8a414e4f56d5 submitted by /u/TaylorM_Clark
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Parrot Vs Kali in 2021?

I have seen a lot of post discussing Parrot vs Kali but everything has been from a few years ago. I currently have Kali on a live usb but I recently came across Parrot and am contemplating if I should switch over or not. Why or why not regarding Parrot vs Kali?

submitted by /u/zukocodes
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Why are there lazy attackers?

I started an internship as a SOC analyst this summer and the company I work for sees a daily amount of lazy attacks ranging from using Team Viewer to just lazy phishing attempts riddled with spelling errors. I've been here about a month and working on tickets and every single one of them involve attack attempts that are so lazy, anyone would notice.

I'm having a difficult time understanding why an attacker would bother if they're just gonna be lazy about it. But the thing is, it's more than lazy, it's complete negligence and ignorance, like a 12 yr old that is learning and just "practicing" to see what works without the hope of even accomplishing anything.

If I were an attacker, I would treat an attack like a project I'm really invested into and would not even move forward with unless I was 110% certain my attack would work. And this means attention to detail and covering all grounds.

Just to write it off as "lazy attacker" doesn't make any sense. I feel like there's more to it than that. Can anyone shed light on this?

submitted by /u/jet_set_default
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Disk Analysis and Autopsy usage

https://external-preview.redd.it/yn0xKzTHGEU7jIpdk8aJmm_-igg15jOyXNno0Srjhl0.jpg?width=320&crop=smart&auto=webp&s=33276a3786113f919a32247bcfa04b93e3472fcd submitted by /u/the_simp_lust_man
[link] [comments]

hacking: security in practice
Is there any way to know if anyone has any other social media?

I know posting this to the sub with the name "hacking" seems very childish, but I don't know where else to put this.

My Twitter mutual is a very nice person, very cheerful and positive, but they were very active, like 10 to 15 tweets per day, but since may 27th they haven't posted anything, they were always talking about stuff, but something that stuck to me is that they were in college with classes almost all day almost every day, and that their family was often rude to them.

Me and many others in our mutuals circle have started getting worried

​

this is their account if its of any help, if not, can you please direct me to a more proper sub? thanks!

submitted by /u/SpicyFox951
[link] [comments]

hacking: security in practice
What are your thoughts on any hidden exposure through Reddit chat?

We all get the scammers who try to connect via Reddit chat I am sure. Aside from human engineering is there any potential for skilled hackers to exploit Reddit chat? Is there any inherent danger to simply accepting someone who wants to chat and engaging? Thanks!

submitted by /u/MiyamotoKnows
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
TeamTNT Operations Actively Enumerating Cloud Environments

https://external-preview.redd.it/vSmIBesXFNw_mqjtanLBFTtnU0psphmSiThD_nNYRfY.jpg?width=320&crop=smart&auto=webp&s=00503cf2ff1ce622933312725e276120da6d9a6d submitted by /u/cenotaphx
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

I need ideas of some tools to write myself to train my python coding. Any ideas ?
https://www.reddit.com/r/Pentesting/comments/nscdnk/i_need_ideas_of_some_tools_to_write_myself_to/

submitted by /u/h420n (https://www.reddit.com/user/h420n)
[link] (https://www.reddit.com/r/Pentesting/comments/nscdnk/i_need_ideas_of_some_tools_to_write_myself_to/) [comments] (https://www.reddit.com/r/Pentesting/comments/nscdnk/i_need_ideas_of_some_tools_to_write_myself_to/)

___________________________
@hacking_Attack
@Hacking_Video

Shopify Multipass Misconfiguration
https://batee5a.medium.com/shopify-multipass-misconfiguration-2bc85e92ad1d?source=rss------bug_bounty-5

Medium to Critical vulnerability gone unnoticed for many years.Continue reading on Medium » (https://batee5a.medium.com/shopify-multipass-misconfiguration-2bc85e92ad1d?source=rss------bug_bounty-5)

Executing CSRF With Phone Validation
https://infosecwriteups.com/executing-csrf-with-phone-validation-103c525dd310?source=rss------bug_bounty-5

How to Programmatically Harvest the OTPContinue reading on InfoSec Write-ups » (https://infosecwriteups.com/executing-csrf-with-phone-validation-103c525dd310?source=rss------bug_bounty-5)

XSS to Account Takeover — Gambling Sites
https://whoistaha.medium.com/xss-to-account-takeover-gambling-sites-bafa5ef88fa?source=rss------bug_bounty-5