Hacking Articles Tips Tricks Videos Tutorials

Dark Reading: Attacks/Breaches
Government Shutdown Poised to Stress Nation's Cybersecurity Supply Chain

CISA announces it will furlough more than 80% of staff indefinitely if Congress can't reach an agreement to fund the federal government.

5 views00:58

Source

Dark Reading: Attacks/Breaches
Chrome Flags Third Zero-Day This Month That's Tied to Spying Exploits

So far this year, Google has disclosed six vulnerabilities that attackers were actively exploiting before the company had a patch for them.

4 views00:58

Source

Hacking Articles Tips Tricks Videos Tutorials

Dark Reading: Attacks/Breaches
New Cisco IOS Zero-Day Delivers a Double Punch

The networking giant discloses new vulnerabilities the same day as warnings get issued that Cisco gear has been targeted in a Chinese APT attack.

4 views00:58

Source

Hacking Articles Tips Tricks Videos Tutorials

Hacking with Havoc C2 - Basic setup, installation, usage, and Windows Defender Bypass
https://www.reddit.com/r/redteamsec/comments/16uwwbn/hacking_with_havoc_c2_basic_setup_installation/

Check out this video posted on Gemini Cyber Security Youtube channel (https://www.youtube.com/watch?v=DXJNWiZJGko), whereby the setup and installation step-by-step guide is demonstrated in the video. The video also showcases basic usage of the Havoc C2 tool, such as setting up a listener and generating payload for it. As a bonus, it was also demonstrated how you can bypass the latest Windows Defender by utilising the shellcode format of the Havoc C2 payload (Demon agent) and executing the shellcode using AES encryption with a .DLL loader. https://www.youtube.com/watch?v=DXJNWiZJGko  submitted by /u/cybermepls (https://www.reddit.com/user/cybermepls)
[link] (https://www.reddit.com/r/redteamsec/comments/16uwwbn/hacking_with_havoc_c2_basic_setup_installation/) [comments] (https://www.reddit.com/r/redteamsec/comments/16uwwbn/hacking_with_havoc_c2_basic_setup_installation/)

4 views01:21

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
ATTiny85 as a BadUSB (Rubber Ducky) - still relevant?

I'm interested in making a BadUSB, similar to the Rubber Ducky.

After considering several options, I narrowed it down to the Attiny85 as the best option for me.

But when I dove into it deeper, amongst the many positive comments, I started noticing some users pointing out that it's drivers were no longer natively supported by some modern OS, which would pretty much defeat it's purpose.

So, does the ATTiny85 still work as a BadUSB?

Grateful for your feedback and experience.

submitted by /u/ffoott
[link] [comments]

From the hacking community on Reddit

Explore this post and more from the hacking community

4 views02:01

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
Someone want to look into iOS calandar exploits?

So I’m going to put this out there. I’m laying in bed and I get a calendar notification I should’ve screen shotted it. It said “M O B I L E” in a weird font. So I clicked the notification. Looked sketch. So I clicked on the sender which said “official t-mobile” and it has just a weird string of characters. Had 2 links to click on I’m not that dumb. Just be aware that it looks like people are using the calendar app to try and hack iPhones. Possibly a new iOS 17 exploit. Not sure if someone wants to try and pen test the calandar app and turn it into Apple.

submitted by /u/katahg
[link] [comments]

From the hacking community on Reddit

Explore this post and more from the hacking community

5 views02:01

Hacking Articles Tips Tricks Videos Tutorials

Hacking on Medium
개발자가 알아야하는 10가지 JavaScript 꼼수

이 글은 올룰로 Confluence에 작성했던 글을 보관용으로 재포스팅 하는 것이다.

Continue reading on Medium »

Medium

개발자가 알아야하는 10가지 JavaScript 꼼수

이 글은 올룰로 Confluence에 작성했던 글을 보관용으로 재포스팅 하는 것이다.

9 views02:37

About

Blog

Apps

Platform