hacking: security in practice
System / Software Hardening Best Practices Website

Hello everyone,

I was looking earlier at the best current practices for hardening my Firefox browser and wondering is there any website or forum that keeps a running account of what the best running configuration is security-wise for various hardware/software?

submitted by /u/leviathanjester
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Any advice to start malware analysis?

I'd like to be a malware analyst when I grow up, but at the moment I still have to start university. I though decided to start getting into malwares since I got a decent experience into CTFs (especially in pwns and reverse). I found a book online (learning malware analysis, by Monnappa K A) and I was thinking on buying it, it is well recommended for beginners too. Now my questions are, has anyone read it already? Would you recommend it? Or even better, what would you recommend to get into malwares analysis as a beginner in the field?

Thanks in advance for your attention

submitted by /u/mattiaricciard
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Is my Wifi Extender hacked?

Is it possible that my wifi extender is hacked? And if yes, what can I do about it? I didn’t have issues with it before, but now whenever I use I get a security warning from chrome, my computer ram and cpu is gets high for no reason, my computer uses energy even when asleep, websites won’t load even though there is a connection, and I constantly get disconnected from the wifi.

submitted by /u/wasta19
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Jump start your cybersec journey

https://cdn-images-1.medium.com/max/680/1*ukRknxySPC1hsX5hZgeFvw.jpeg
With TryHackMe’s Pre-security path!

Continue reading on Tris Maguire »

___________________________
@hacking_Attack
@Hacking_Video

Deep Web
Legit Deepweb Hacking Service?

Is it possible for a hacker to find out who is using my {stolen} phone? I know that the darn imei is still active but it’s considered low priority to the local PD (not to me I’m livid and stuck on petty at the moment). Anyone know of a legit hacking service (and have a link)? I’ve already tried http://ziagmjbpt47drkrk.onion/ and those guys never “reached out between 12-24 hours” as promised after I paid. Feel free to send in DMs thanks!

submitted by /u/T_Nic_Marie
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Countering a university phishing attempt

https://external-preview.redd.it/Vt9f1vk-MjNcvqXbMFQ5es1n_87L9YXQbvE7M7Rgv1U.jpg?width=640&crop=smart&auto=webp&s=59799c7e778dcdc8219f5c450d3db1f6cb3e9659 submitted by /u/Illustrious_Seesaw17
[link] [comments]

hacking: security in practice
Advice?

I was raised in a toxic household and I’m pretty sure they hacked my laptop before I moved out and have access to all of my accounts, I’m trying to keep my personal life my personal life but any time I have to visit them for any reason they quote things I’ve posted on social media/things I’ve typed into my notes app on my iPhone despite blocking them and having never told them my usernames or personal email addresses, like they refer to things I’ve posted here on reddit and on twitter and facebook and comments I’ve made on youtube, the only contact they could have possibly had would be from hacking my chromebook, it almost seems they know my business more than I do, what do I do? Would buying a new chromebook and making all new accounts help? What about long-term accounts like facebook? I’ve got neumerous login notifications from locations I didnt log into no matter how many times I reset my password. This feels as tedious as recovering from identity theft, it’s so annoying

submitted by /u/NerdieBirdie93
[link] [comments]

hacking: security in practice
Connect to security camera server to view remote camera feeds

My parents are going on vacation and installed security cameras around the house, solely for the purpose of making sure i don't have my girlfriend over (I'm 20 going to school, working full time, am straight edge as can be, wtf?). I'm basically trying to see what the camera feeds are looking at, to make sure i don't have one chilling in my room or somewhere inside the house.

* The server is connected to our router via ethernet and has a single IP address, and the cameras are all connected to that server. Normally, it seems like I'd be able to log in to the server using the server's local IP (expected) but since I don't have the login I'm a bit restricted. Is there a way I can ssh into this server or something (i've tried using ssh to the local IP but it refuses connection)?
* I don't think any kind of brute force attack is possible because the login ip-blocks after 6 attempts (unless I spoof a new address every 6 attempts). Additionally, the server has the option to reset the password using a 'GUID' file, which I'm guessing is a file containing some string that is unique to the server, but this is risking leaving a trail.
* Is there a backdoor on the login page? It looks like there's an angular JS file making several references to userID and password from a scope, and if I can somehow access $scope I can return the values of the username and password which are accessible through the scope.

I'm not terribly versed in this stuff but I am versed in Python and know a bit of linux. I don't want to leave a trail by cutting wires or something. Correct me if I'm wrong, but this is 100% ethical. I'm dealing with abusive parents who I cannot simply talk to about this stuff. Help is greatly appreciated.

submitted by /u/seekingstars
[link] [comments]

Reflected XSS Through Insecure Dynamic Loading

Finding A Unique and Complex Payload To Load Remote ScriptsContinue reading on InfoSec Write-ups »
Read more...

Kali Linux Tutorials
MacHound : An extension to audit Bloodhound collecting and ingesting of Active Directory relationships on MacOS hosts

MacHound is an extension to the Bloodhound audting tool allowing collecting and ingesting of Active Directory relationships on MacOS hosts. MacHound collects information about logged-in users, and administrative group members on Mac machines and ingest the information into the Bloodhound database. In addition to using the HasSession and AdminTo edges, MacHound adds three new edges […]

The post MacHound : An extension to audit Bloodhound collecting and ingesting of Active Directory relationships on MacOS hosts appeared first on Kali Linux Tutorials.

___________________________
@hacking_Attack
@Hacking_Video

Reflected XSS Through Insecure Dynamic Loading
https://infosecwriteups.com/reflected-xss-through-insecure-dynamic-loading-dbf4d33611e0?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Finding A Unique and Complex Payload To Load Remote ScriptsContinue reading on InfoSec Write-ups » (https://infosecwriteups.com/reflected-xss-through-insecure-dynamic-loading-dbf4d33611e0?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Reflected XSS Through Insecure Dynamic Loading

Finding A Unique and Complex Payload To Load Remote ScriptsContinue reading on InfoSec Write-ups »
Read more...

Hacking on Medium
Reflected XSS Through Insecure Dynamic Loading

https://cdn-images-1.medium.com/max/921/1*SZxEvYsp2L1OyT9yx_pJqQ.png
Finding A Unique and Complex Payload To Load Remote Scripts

Continue reading on InfoSec Write-ups »