Dark Reading: Attacks/Breaches
CISA Launches New Website to Aid Ransomware Defenders

StopRansomware.gov provides information to help organizations protect against, and respond to, ransomware attacks.

Dark Reading: Attacks/Breaches
State Dept. to Pay Up to $10M for Information on Foreign Cyberattacks

The Rewards for Justice program, a counterterrorism tool, is now aimed at collecting information on nation-states that use hackers to disrupt critical infrastructure.

Dark Reading: Attacks/Breaches
Attackers Exploited 4 Zero-Day Flaws in Chrome, Safari & IE

At least two government-backed actors -- including one Russian group -- used the now-patched flaws in separate campaigns, Google says.

KitPloit - PenTest Tools!
Ventoy - A New Bootable USB Solution

http://2.bp.blogspot.com/-4q9cnLWCoK4/YORuXKuHi7I/AAAAAAAAhK4/RVdVA09_UmItHQ8beec0SAfM_KcvmVNWACK4BGAYYCw/w640-h472/Ventoy_5-791144.png Ventoy is an open source tool to create bootable USB drive for ISO/WIM/IMG/VHD(x)/EFI files.
With ventoy, you don't need to format the disk over and over, you just need to copy the image files to the USB drive and boot it. You can copy many image files at a time and ventoy will give you a boot menu to select them.
x86 Legacy BIOS, IA32 UEFI, x86_64 UEFI, ARM64 UEFI and MIPS64EL UEFI are supported in the same way.
Both MBR and GPT partition style are supported in the same way.
Most type of OS supported(Windows/WinPE/Linux/Unix/Vmware/Xen...)
700+ ISO files are tested. 90%+ distros in distrowatch.com supported.Features* 100% open source
* Simple to use
* Fast (limited only by the speed of copying iso file)
* Can be installed in USB/Local Disk/SSD/NVMe/SD Card
* Directly boot from ISO/WIM/IMG/VHD(x)/EFI files, no extraction needed
* No need to be continuous in disk for ISO/IMG files
* MBR and GPT partition style supported (1.0.15+)
* x86 Legacy BIOS, IA32 UEFI, x86_64 UEFI, ARM64 UEFI, MIPS64EL UEFI supported
* IA32/x86_64 UEFI Secure Boot supported (1.0.07+)
* Persistence supported (1.0.11+)
* Windows auto installation supported (1.0.09+)
* RHEL7/8/CentOS/7/8/SUSE/Ubuntu Server/Debian ... auto installation supported (1.0.09+)
* FAT32/exFAT/NTFS/UDF/XFS/Ext2(3)(4) supported for main partition
* ISO files larger than 4GB supported
* Native boot menu style for Legacy & UEFI
* Most type of OS supported, 700+ iso files tested
* Linux vDisk boot supported
* Not only boot but also complete installation process
* Menu dynamically switchable between List/TreeView mode
* "Ventoy Compatible" concept
* Plugin Framework
* Injection files to runtime environment
* Boot configuration file dynamically replacement
* Highly customizable theme and menu
* USB drive write-protected support
* USB normal use unaffected
* Data nondestructive during version upgrade
* No need to update Ventoy when a new distro is released Installation InstructionsSee https://www.ventoy.net/en/doc_start.html for detail Compile InstructionsPlease refer to BuildVentoyFromSource.txt DocumentTitle Link Install & Update https://www.ventoy.net/en/doc_start.html Secure Boot https://www.ventoy.net/en/doc_secure.html Customize Theme https://www.ventoy.net/en/plugin_theme.html Global Control https://www.ventoy.net/en/plugin_control.html Image List https://www.ventoy.net/en/plugin_imagelist.html Auto Installation https://www.ventoy.net/en/plugin_autoinstall.html Injection Plugin https://www.ventoy.net/en/plugin_injection.html Persistence Support https://www.ventoy.net/en/plugin_persistence.html Boot WIM file https://www.ventoy.net/en/plugin_wimboot.html Windows VHD Boot https://www.ventoy.net/en/plugin_vhdboot.html Linux vDisk Boot https://www.ventoy.net/en/plugin_vtoyboot.html DUD Plugin https://www.ventoy.net/en/plugin_dud.html Password Plugin https://www.ventoy.net/en/plugin_password.html Conf Replace Plugin https://www.ventoy.net/en/plugin_bootconf_replace.html Menu Class https://www.ventoy.net/en/plugin_menuclass.html Menu Alias https://www.ventoy.net/en/plugin_menualias.html Menu Extension https://www.ventoy.net/en/plugin_grubmenu.html Memdisk Mode https://www.ventoy.net/en/doc_memdisk.html TreeView Mode https://www.ventoy.net/en/doc_treeview.html Disk Layout MBR https://www.ventoy.net/en/doc_disk_layout.html Disk Layout GPT https://www.ventoy.net/en/doc_disk_layout_gpt.html Search Configuration https://www.ventoy.net/en/doc_search_path.html FAQSee https://www.ventoy.net/en/faq.html for detail Forumhttps://forums.ventoy.net Download Ventoy

Hacking on Medium
Paxos: A majority to lead us all

https://cdn-images-1.medium.com/max/2000/0*vQt74ivUHaL1-hlb.jpg
The ubiquitous Paxos algorithm is one of the earliest and most widely cited consensus algorithms for designing a replicated state machine…

Continue reading on Medium »

Hacking on Medium
Porque não deixar senhas salvas na nuvem (mais um caso de Google Dork, agora com o Trello)

https://cdn-images-1.medium.com/max/1440/1*M9WZlugVzCl1ywqOrO70hQ.png
Por estes dias estava acessando o LinkedIn e fui justamente nesta semana em que eu estava pesquisando mais sobre Dork, que vi um post de…

Continue reading on Medium »

Deep Web
Looking for ivermectin

Hello all,
I'm from a country where ivermectin is incredibly hard to source. I won't find a doctor who will prescribe it since it's a prescription drug and the docotrs have all been scared into submission by the WHO. Now this can turn out a lifesaving drug and is essential for me to have to protect me and my family.
Where would one go if you needed certain pharmaceutical prescription drugs or generica without being ripped off and no questions asked?
Thanks for pointing me in the right direction.

submitted by /u/rix55
[link] [comments]

hacking: security in practice
is wpa and wpa2 possible to crack nowadays?

i used to do wep stuff a while back and they used to say that wpa and wpa2 was impossible to crack, but im just curious, is that stuff as easy as wep used to be? or is it still 'impossible', sorry ive been out of the loop on stuff like this but just curious

submitted by /u/balbasor456
[link] [comments]

How the simple flaw leads to leakage of all questions on the school examination website.
https://blog.usejournal.com/how-i-hacked-school-examination-website-8e5827b31968?source=rss------bug_bounty-5

After the Covid blew up, everything has moved online. School started to teach online to its student and even decided to take exams online…Continue reading on Noteworthy - The Journal Blog » (https://blog.usejournal.com/how-i-hacked-school-examination-website-8e5827b31968?source=rss------bug_bounty-5)

hacking: security in practice
Capture hashes in wire shark.

I’m working on an assignment for school and cannot figure this out for the life of me. The instructions are “find the hash for r2d2 in the capture file and crack the password”. I cannot find the password or username “r2d2” anywhere. I am confident in cracking the password I just can’t seem to find it anywhere. Is there any way to search the capture to find it? I’ve tried filtering by different protocols and the only one that comes up with anything is when I filter by SMB but there is no username and I thought SMB sent out un and pw in clear text. Any help in finding hashes in wireshark captures would be awesome.

submitted by /u/Traditional-Fondant1
[link] [comments]

hacking: security in practice
Where can I sell an idea for a captcha solving bot that works with most websites?

I finally perfected the skill 😎

submitted by /u/coweggs9
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

How I found Blind SQL Injection just by browsing and getting a unique URL

Hello Guys! I am a part-time bug hunter at Bugcrowd and I will share how I found a Blind SQL INJECTION manually just by browsing and…Continue reading on Medium »
Read more...

How I found Blind SQL Injection just by browsing and getting a unique URL
https://medium.com/@jawadmahdi/how-i-found-blind-sql-injection-just-by-browsing-and-getting-a-unique-url-ed87fa1f35ed?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hello Guys! I am a part-time bug hunter at Bugcrowd and I will share how I found a Blind SQL INJECTION manually just by browsing and…Continue reading on Medium » (https://medium.com/@jawadmahdi/how-i-found-blind-sql-injection-just-by-browsing-and-getting-a-unique-url-ed87fa1f35ed?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

How i was able to bypass Cloudflare for XSS!
https://infosecwriteups.com/how-i-was-able-to-bypass-cloudflare-for-xss-e94cd827a5d6?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video