Hacking on Medium
Inferno vulnhub write-up

https://cdn-images-1.medium.com/max/934/1*UsvcKrn-kqKCs4qEpFhzWA.png
Nmap Scan

Continue reading on Medium »

I need help proxying an IoT device through a rogue wifi AP and Burp Suite
https://www.reddit.com/r/Pentesting/comments/m8i33f/i_need_help_proxying_an_iot_device_through_a/

<!-- SC_OFF -->Can anyone help with their setup to create a wifi AP on Kali and proxy all http/https traffic through Burp Suite? I have an AP running using hostapd and dnsmasq, and have two iptables rules that push all http/s traffic through Burp Suite, but it's not passing traffic. It's not DNS. I tried putting in the IP address for neverssl.com (http://neverssl.com/) but it still doesn't work. I also tried putting Burp proxy in invisible mode. No joy. I just need to connect an IoT device to the WiFi AP and proxy the traffic through Burp, but the IoT device doesn't have proxy settings in the interface. <!-- SC_ON --> submitted by /u/subsonic68 (https://www.reddit.com/user/subsonic68)
[link] (https://www.reddit.com/r/Pentesting/comments/m8i33f/i_need_help_proxying_an_iot_device_through_a/) [comments] (https://www.reddit.com/r/Pentesting/comments/m8i33f/i_need_help_proxying_an_iot_device_through_a/)

Red Team Sr Manager Position @ Cigna (US Based Work From Home)
https://www.reddit.com/r/redteamsec/comments/m8jroe/red_team_sr_manager_position_cigna_us_based_work/

<!-- SC_OFF -->Good Morning! Apologies in advance if this isn't allowed. I am the Sr Cyber Security recruiter at Cigna (www.cigna.com (https://www.cigna.com/)) and we are looking for a Sr Manager for our Red Team who doesn't mind rolling up their sleeves as well as managing a team. The right individual can be located anywhere in the continental US as this will be a full-time remote position. I've pasted the link to the job description below - feel free to send me a message here if you have any questions. https://jobs.cigna.com/us/en/job/21000373/Red-Team-Senior-Manager <!-- SC_ON --> submitted by /u/SlashTheCat23 (https://www.reddit.com/user/SlashTheCat23)
[link] (https://www.reddit.com/r/redteamsec/comments/m8jroe/red_team_sr_manager_position_cigna_us_based_work/) [comments] (https://www.reddit.com/r/redteamsec/comments/m8jroe/red_team_sr_manager_position_cigna_us_based_work/)

hacking: security in practice
Russian pleads guilty to Tesla hacking and extortion attempt

https://b.thumbs.redditmedia.com/VLH22oPG8AFRWKWTjN5dUcjR-8EmXkaxI8ESDye3_iI.jpg submitted by /u/s_kaw
[link] [comments]

hacking: security in practice
A new face to cybersecurity competitions

A good friend of mine has been working on a UI for cybersecurity competitions and today at 6 pm EST they are going live. If you could come out and support him I would be super grateful. If this all goes well this may be the new face of cybersecurity competitions. https://www.twitch.tv/ritgci

submitted by /u/t109j
[link] [comments]

Dark Reading: Attacks/Breaches
How Us Shady Geeks Put Others Off Security

Early adopters of security and privacy tools may be perceived by others as paranoid, which, in turn, may repel non-experts from protecting themselves online.

Dark Reading: Attacks/Breaches
Russian Man Pleads Guilty in Thwarted Tesla Hack

Egor Kriuchkov will be sentenced in May on conspiracy charge

Dark Reading: Attacks/Breaches
SolarWinds-Linked Attackers Target Microsoft 365 Mailboxes

Researchers observe attackers altering mailbox folders to assign read-only permissions to any authenticated user on a target machine.

Cross-Site Request Forgery test case
https://surajdubey915.medium.com/cross-site-request-forgery-test-case-ed30c0471677?source=rss------bug_bounty-5

Cross-site request forgery(csrf) also known as one-click attack or session riding is type of attack where application server accept the…Continue reading on Medium » (https://surajdubey915.medium.com/cross-site-request-forgery-test-case-ed30c0471677?source=rss------bug_bounty-5)

Top Basic Kali Linux Commands — 2021
https://surajdubey915.medium.com/top-basic-kali-linux-commands-2021-6b7d9b0583e3?source=rss------bug_bounty-5

Kali Linux is a Debian-derived Linux distribution designed for digital forensics and penetration testing, It is maintained and funded by…Continue reading on Medium » (https://surajdubey915.medium.com/top-basic-kali-linux-commands-2021-6b7d9b0583e3?source=rss------bug_bounty-5)