Pentesting OT/ICS Environment
https://www.reddit.com/r/redteamsec/comments/18tj4wf/pentesting_otics_environment/
<!-- SC_OFF -->I am quite new to OT/ICS area, Looking for advice on conducting a thorough pentest on OT/ICS networks following the Purdue model. What methodologies should I consider when approaching this? Should I perform the tests from the same level or opt for a different approach? Seeking guidance on the best practices and strategies for a comprehensive assessment. If someone has resources related to this, would be highly helpful. <!-- SC_ON --> submitted by /u/Self-financed-hacker (https://www.reddit.com/user/Self-financed-hacker)
[link] (https://www.reddit.com/r/redteamsec/comments/18tj4wf/pentesting_otics_environment/) [comments] (https://www.reddit.com/r/redteamsec/comments/18tj4wf/pentesting_otics_environment/)
https://www.reddit.com/r/redteamsec/comments/18tj4wf/pentesting_otics_environment/
<!-- SC_OFF -->I am quite new to OT/ICS area, Looking for advice on conducting a thorough pentest on OT/ICS networks following the Purdue model. What methodologies should I consider when approaching this? Should I perform the tests from the same level or opt for a different approach? Seeking guidance on the best practices and strategies for a comprehensive assessment. If someone has resources related to this, would be highly helpful. <!-- SC_ON --> submitted by /u/Self-financed-hacker (https://www.reddit.com/user/Self-financed-hacker)
[link] (https://www.reddit.com/r/redteamsec/comments/18tj4wf/pentesting_otics_environment/) [comments] (https://www.reddit.com/r/redteamsec/comments/18tj4wf/pentesting_otics_environment/)
1.15 Lab: SQL injection attack, querying the database type and version on Oracle | 2023
This lab contains a SQL injection vulnerability in the product category filter. You can use a UNION attack to retrieve the results from an…Continue reading on Medium »
Read more...
This lab contains a SQL injection vulnerability in the product category filter. You can use a UNION attack to retrieve the results from an…Continue reading on Medium »
Read more...
Medium
1.15 Lab: SQL injection attack, querying the database type and version on Oracle | 2023
This lab contains a SQL injection vulnerability in the product category filter. You can use a UNION attack to retrieve the results from an…
1.15 Lab: SQL injection attack, querying the database type and version on Oracle | 2023
https://cyberw1ng.medium.com/1-15-lab-sql-injection-attack-querying-the-database-type-and-version-on-oracle-2023-cd4118eb604d?source=rss------bug_bounty-5
https://cyberw1ng.medium.com/1-15-lab-sql-injection-attack-querying-the-database-type-and-version-on-oracle-2023-cd4118eb604d?source=rss------bug_bounty-5
This lab contains a SQL injection vulnerability in the product category filter. You can use a UNION attack to retrieve the results from an…Continue reading on Medium » (https://cyberw1ng.medium.com/1-15-lab-sql-injection-attack-querying-the-database-type-and-version-on-oracle-2023-cd4118eb604d?source=rss------bug_bounty-5)
Vulnerability Scanning Options
https://www.reddit.com/r/Pentesting/comments/18tt6de/vulnerability_scanning_options/
<!-- SC_OFF -->Im looking for my best option to vulnerability scan multiple client networks regularly. We were first looking at tenable MSSP for some of their solutions which are priced per asset at each client. I’m wondering if one of the Nessus licenses with unlimited assets could be a more economical solution for my company. Like we could install Nessus on a laptop, VPN in or physically go to the network location and run a scan? This way we could charge clients less and also profit more ourselves. I know there are other solutions such as OpenVAS but I’m not familiar with them. I’d love to learn more or get any information on my options here. <!-- SC_ON --> submitted by /u/LevitatingGuru (https://www.reddit.com/user/LevitatingGuru)
[link] (https://www.reddit.com/r/Pentesting/comments/18tt6de/vulnerability_scanning_options/) [comments] (https://www.reddit.com/r/Pentesting/comments/18tt6de/vulnerability_scanning_options/)
https://www.reddit.com/r/Pentesting/comments/18tt6de/vulnerability_scanning_options/
<!-- SC_OFF -->Im looking for my best option to vulnerability scan multiple client networks regularly. We were first looking at tenable MSSP for some of their solutions which are priced per asset at each client. I’m wondering if one of the Nessus licenses with unlimited assets could be a more economical solution for my company. Like we could install Nessus on a laptop, VPN in or physically go to the network location and run a scan? This way we could charge clients less and also profit more ourselves. I know there are other solutions such as OpenVAS but I’m not familiar with them. I’d love to learn more or get any information on my options here. <!-- SC_ON --> submitted by /u/LevitatingGuru (https://www.reddit.com/user/LevitatingGuru)
[link] (https://www.reddit.com/r/Pentesting/comments/18tt6de/vulnerability_scanning_options/) [comments] (https://www.reddit.com/r/Pentesting/comments/18tt6de/vulnerability_scanning_options/)
200 Materials of CyberSecurity in PDFs
https://medium.com/@dineshpathro593/200-materials-of-cybersecurity-in-pdfs-e7a942123be5?source=rss------bug_bounty-5
https://medium.com/@dineshpathro593/200-materials-of-cybersecurity-in-pdfs-e7a942123be5?source=rss------bug_bounty-5
CLICK HEREContinue reading on Medium » (https://medium.com/@dineshpathro593/200-materials-of-cybersecurity-in-pdfs-e7a942123be5?source=rss------bug_bounty-5)
Recon Tools For Web Application
https://medium.com/@dineshpathro593/recon-tools-for-web-application-714af64e7d07?source=rss------bug_bounty-5
https://medium.com/@dineshpathro593/recon-tools-for-web-application-714af64e7d07?source=rss------bug_bounty-5
Continue reading on Medium » (https://medium.com/@dineshpathro593/otp-bot-tool-click-here-7f3ee559ca21?source=rss------bug_bounty-5)
READ MOREContinue reading on Medium » (https://medium.com/@dineshpathro593/recon-tools-for-web-application-714af64e7d07?source=rss------bug_bounty-5)
KisMAC is a free, open source wireless stumbling and security tool for Mac OS X
https://medium.com/@dineshpathro593/kismac-is-a-free-open-source-wireless-stumbling-and-security-tool-for-mac-os-x-03746fdea831?source=rss------bug_bounty-5
https://medium.com/@dineshpathro593/kismac-is-a-free-open-source-wireless-stumbling-and-security-tool-for-mac-os-x-03746fdea831?source=rss------bug_bounty-5