Motivation to learn Cybersecurity
Hi,i am Tejas 14 year old moreover cybersec enthusiast.If you need a mentor or guidence feel free to contact me on twitter.Continue reading on Medium »
Read more...
Hi,i am Tejas 14 year old moreover cybersec enthusiast.If you need a mentor or guidence feel free to contact me on twitter.Continue reading on Medium »
Read more...
Deep Web
can discord report crimes to the police?
if an account gets banned for breaking discords TOS can they take this to the police if it was also a crime ?
submitted by /u/M4TT-20
[link] [comments]
can discord report crimes to the police?
if an account gets banned for breaking discords TOS can they take this to the police if it was also a crime ?
submitted by /u/M4TT-20
[link] [comments]
reddit
can discord report crimes to the police?
if an account gets banned for breaking discords TOS can they take this to the police if it was also a crime ?
hacking: security in practice
App Isolation
Is it possible to take an app like Tik Tok and isolate it so that it cannot collect any user or device information, while still being able to functionally use the app?
I know using it on a separate device would achieve the same result but I wondered if this way were possible.
submitted by /u/DemonNecron
[link] [comments]
App Isolation
Is it possible to take an app like Tik Tok and isolate it so that it cannot collect any user or device information, while still being able to functionally use the app?
I know using it on a separate device would achieve the same result but I wondered if this way were possible.
submitted by /u/DemonNecron
[link] [comments]
reddit
App Isolation
Is it possible to take an app like Tik Tok and isolate it so that it cannot collect any user or device information, while still being able to...
Alternatives to wmiexec and dealing with EDR?
https://www.reddit.com/r/Pentesting/comments/obinrr/alternatives_to_wmiexec_and_dealing_with_edr/
<!-- SC_OFF -->Sounds like a dumb question, yes, but for context I'm on an internal pen test where an EDR solution (not naming that) is deployed. I've already got around it and managed to get hold of local admins and domain cached credentials, latter I'm leaving to hashcat as they can't be passed around. I know 100% that anything over RDP, and from previous engagements wmiexec, trigger EDR. Targets also do not have any shares available so smbclient can't really be used to poke around underneath it or copy a binary over (though I should be able to with local admin to a main drive). I have a funny feeling that although xfreerdp can be used for pth that it will trigger once I start a session with a legit user. I've probably got enough dirt for the report in terms of configuration improvements but for more of a POC I want to show a command shell, where I can place a payload to talk back to a C2 framework. So, main question is, has anybody been in a similar situation? Were you able to find an alternative to wmiexec? <!-- SC_ON --> submitted by /u/SpaceLionBlues (https://www.reddit.com/user/SpaceLionBlues)
[link] (https://www.reddit.com/r/Pentesting/comments/obinrr/alternatives_to_wmiexec_and_dealing_with_edr/) [comments] (https://www.reddit.com/r/Pentesting/comments/obinrr/alternatives_to_wmiexec_and_dealing_with_edr/)
https://www.reddit.com/r/Pentesting/comments/obinrr/alternatives_to_wmiexec_and_dealing_with_edr/
<!-- SC_OFF -->Sounds like a dumb question, yes, but for context I'm on an internal pen test where an EDR solution (not naming that) is deployed. I've already got around it and managed to get hold of local admins and domain cached credentials, latter I'm leaving to hashcat as they can't be passed around. I know 100% that anything over RDP, and from previous engagements wmiexec, trigger EDR. Targets also do not have any shares available so smbclient can't really be used to poke around underneath it or copy a binary over (though I should be able to with local admin to a main drive). I have a funny feeling that although xfreerdp can be used for pth that it will trigger once I start a session with a legit user. I've probably got enough dirt for the report in terms of configuration improvements but for more of a POC I want to show a command shell, where I can place a payload to talk back to a C2 framework. So, main question is, has anybody been in a similar situation? Were you able to find an alternative to wmiexec? <!-- SC_ON --> submitted by /u/SpaceLionBlues (https://www.reddit.com/user/SpaceLionBlues)
[link] (https://www.reddit.com/r/Pentesting/comments/obinrr/alternatives_to_wmiexec_and_dealing_with_edr/) [comments] (https://www.reddit.com/r/Pentesting/comments/obinrr/alternatives_to_wmiexec_and_dealing_with_edr/)
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Hub Weekly Digest: Denmark’s Central Bank, NIST Guidelines, Western Digital Hack, and Germany’s…
https://cdn-images-1.medium.com/max/2600/1*VyiQ-H8tkOXiBDk681iChQ.jpeg
Hub Security’s weekly digest covers top stories happening around the world related to fintech, critical infrastructure, cloud, and…
Continue reading on HUB Security »
Hub Weekly Digest: Denmark’s Central Bank, NIST Guidelines, Western Digital Hack, and Germany’s…
https://cdn-images-1.medium.com/max/2600/1*VyiQ-H8tkOXiBDk681iChQ.jpeg
Hub Security’s weekly digest covers top stories happening around the world related to fintech, critical infrastructure, cloud, and…
Continue reading on HUB Security »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Cyber criminali nordcoreani attaccano l’istituto nucleare della Corea del Sud
https://cdn-images-1.medium.com/max/2048/1*Q7YAiT6Pcspkb8FauBdB8Q.png
Ci sarebbe un gruppo di hacker nordcoreani dietro la violazione dei server del Korea Atomic Energy Research Institute (KAERI).
Continue reading on BV TECH Group »
Cyber criminali nordcoreani attaccano l’istituto nucleare della Corea del Sud
https://cdn-images-1.medium.com/max/2048/1*Q7YAiT6Pcspkb8FauBdB8Q.png
Ci sarebbe un gruppo di hacker nordcoreani dietro la violazione dei server del Korea Atomic Energy Research Institute (KAERI).
Continue reading on BV TECH Group »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
How your typo can get you hacked ?
https://cdn-images-1.medium.com/max/2560/1*HdIwiTM_jB7IdZp3wORwsg.jpeg
Have you ever wondered that your simple typing error can get you in trouble If “No” then start wondering because it can and after going…
Continue reading on Bobble Engineering »
How your typo can get you hacked ?
https://cdn-images-1.medium.com/max/2560/1*HdIwiTM_jB7IdZp3wORwsg.jpeg
Have you ever wondered that your simple typing error can get you in trouble If “No” then start wondering because it can and after going…
Continue reading on Bobble Engineering »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
What is Ethical Hacking? Types Of Ethical Hacking
https://cdn-images-1.medium.com/max/1580/1*aiDV89xwNbBNVB4epbeFhQ.jpeg
Hacking refers to one of the largest shortcomings with computer technology regards. We are living in the digital age currently where…
Continue reading on Medium »
What is Ethical Hacking? Types Of Ethical Hacking
https://cdn-images-1.medium.com/max/1580/1*aiDV89xwNbBNVB4epbeFhQ.jpeg
Hacking refers to one of the largest shortcomings with computer technology regards. We are living in the digital age currently where…
Continue reading on Medium »
OpenAttack - An Open-Source Package For Textual Adversarial Attack
http://www.kitploit.com/2021/07/openattack-open-source-package-for.html
http://www.kitploit.com/2021/07/openattack-open-source-package-for.html
OpenAttack is an open-source Python-based textual adversarial attack toolkit, which handles the whole process of textual adversarial attacking, including preprocessing text, accessing the victim model, generating adversarial examples and evaluation.
Features & Uses
OpenAttack has following features: High usability. OpenAttack provides easy-to-use APIs that can support the whole process of textual adversarial attacks; Full coverage of attack model types. OpenAttack supports sentence-/word-/character-level perturbations and gradient-/score-/decision-based/blind attack models; Great flexibility and extensibility. You can easily attack a customized victim model or develop and evaluate a customized attack model; Comprehensive Evaluation. OpenAttack can thoroughly evaluate an attack model from attack effectiveness, adversarial example quality and attack efficiency. OpenAttack has a wide range of uses, including: Providing various handy baselines for attack models; Comprehensively evaluating attack models using its thorough evaluation metrics; Assisting in quick development of new attack models with the help of its common attack components; Evaluating the robustness of a machine learning (https://www.kitploit.com/search/label/Machine%20Learning) model against various adversarial attacks; Conducting adversarial training to improve robustness of a machine learning model by enriching the training data with generated adversarial examples.
Installation
You can either use pip or clone this repo to install OpenAttack.
1. Using pip (recommended)
pip install OpenAttack
2. Cloning this repo
git clone https://github.com/thunlp/OpenAttack.git
cd OpenAttack
python setup.py install After installation, you can try running demo.py to check if OpenAttack works well: python demo.py
Features & Uses
OpenAttack has following features: High usability. OpenAttack provides easy-to-use APIs that can support the whole process of textual adversarial attacks; Full coverage of attack model types. OpenAttack supports sentence-/word-/character-level perturbations and gradient-/score-/decision-based/blind attack models; Great flexibility and extensibility. You can easily attack a customized victim model or develop and evaluate a customized attack model; Comprehensive Evaluation. OpenAttack can thoroughly evaluate an attack model from attack effectiveness, adversarial example quality and attack efficiency. OpenAttack has a wide range of uses, including: Providing various handy baselines for attack models; Comprehensively evaluating attack models using its thorough evaluation metrics; Assisting in quick development of new attack models with the help of its common attack components; Evaluating the robustness of a machine learning (https://www.kitploit.com/search/label/Machine%20Learning) model against various adversarial attacks; Conducting adversarial training to improve robustness of a machine learning model by enriching the training data with generated adversarial examples.
Installation
You can either use pip or clone this repo to install OpenAttack.
1. Using pip (recommended)
pip install OpenAttack
2. Cloning this repo
git clone https://github.com/thunlp/OpenAttack.git
cd OpenAttack
python setup.py install After installation, you can try running demo.py to check if OpenAttack works well: python demo.py