hacking: security in practice
How to find certain websites in the TOR domain?

A good example of this is the website for lock bit Ransome group

submitted by /u/Gasp3r_
[link] [comments]

Hacking on Medium
Top 10 Firewall / IDS Evasion Techniques

https://cdn-images-1.medium.com/max/600/0*yDR5jxAVEyWrV4A3
This article covers the techniques and tools used by hackers to bypass Firewalls / Intrusion Detection Systems.

Continue reading on The Startup »

___________________________
@hacking_Attack
@Hacking_Video

Deep Web
Is there any way or tool to find out lost or stolen android mobile phone?

submitted by /u/pape_rchaser777
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Deep Web
Are there any shops that arent exit scams?

submitted by /u/expectohh
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Black Hat Ethical Hacking
Crypto Hack Earned Crooks $600 Million

https://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Crypto Hack Earned Crooks $600 MillionPost Views: 41
Reading Time: 1 Minute
Attackers reportedly stole $600 million from the cryptocurrency platform Poly Network, in what experts say is one of the largest crypto heists to date.
Poly Network, a decentralized finance (DeFi) platform based in China, publicly acknowledged that an attacker “exploited a vulnerability” that allowed them to assign themselves the ownership of money processed through the platform.

According to a statement made on Wednesday by the company, attackers abused the function “_executeCrossChainTx”. The company said that this specific function dictates the “between contract calls” and is tied to interoperability needed to communicate between independent blockchains.

A blockchain is a specific type of database. When used in the context of cryptocurrency, it serves as a ledger for irreversible transactions.
See Also: Auth Bypass Bug Exploited, Affecting Millions of Routers What Poly Network Is Disclosing“The attacker use this function to pass in carefully constructed data to modify the keeper of the EthCrossChainData contract,” Poly Network stated.

Attackers snatched up a reported $611 million in digital tokens. Tokens (or crypto tokens) represent an asset that resides on a blockchain. Unlike a crypto coin, a token is associated with a specific blockchain (or ledger). In this case, it was Poly Network’s platform that was used to steal Ethereum (ETH) and BowsCoin (BSC) tokens.

In an “important notice” posted to Twitter, Poly Network stated: “We are sorry to announce that #PolyNetwork was attacked on @BinanceChain @ethereum and @0xPolygon Assets had been transferred to hacker’s following addresses: ETH: 0xC8a65Fadf0e0dDAf421F28FEAb69Bf6E2E589963 BSC: 0x0D6e286A7cfD25E0c01fEe9756765D8033B32C71.”

In a string of follow-up tweets the company urged crypto-miners “of affected blockchain and crypto exchanges to blacklist tokens coming from the above addresses. @Tether_to @circlepay.”
See Also: Offensive Security Tool: Mimikatz Attackers Return Funds?Poly tweeted that it planned to take legal action and demanded that the attackers return the funds.

In a follow-up tweet posted at 7:47 a.m. ET, Poly Network said some assets ($4.7 million) were returned by the attackers.

“So far, we have received a total value of $4,772,297.675 assets returned by the hacker,” Poly Network tweeted.

In a message by hackers, associated with the illicit transaction, an attacker wrote; “I need a secured multisig wallet from you.” This, experts say, was an effort to return some of the stolen tokens.

A blockchain analysis by BleepingComputer revealed some of the loot stolen was also redirected to the non-profits Binance Charity and Archive.org. Additional funds were sent to blockchain search engine Etherscan and Ethereum blockchain developer infura.io.

Changpeng Zhao, CEO of Binance, one of three platforms from which stolen assets were taken, wrote on Twitter: “We are aware of the poly.network exploit that occurred today. While no one controls BSC (or ETH), we are coordinating with all our security partners to proactively help. There are no guarantees. We will do as much as we can.” See Also: Hacking Stories: Andrian Lamo – The ‘homeless’ HackerIs Poly Network’s Loss the Largest Crypto Attack?Based on recent publicly disclosed losses due to attacks, Poly Network’s losses are the largest to date to be associated with cyrptocurrency firms.

In 2018, Coincheck, a Tokyo-based exchange, lost $530 million in digital coins. In 2013, Mt. Gox, another Tokyo[...]

___________________________
@hacking_Attack
@Hacking_Video

-based exchange, collapsed after a massive distributed-denial-of-service attack triggered the loss of an estimated $500 million dollars in bitcoin. In 2019, Italian exchange BitGrail was hacked, with losses totaling an estimated $195 million.
Source: threatpost.com (Click Link)Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/msft-microsoft-logo-2-3-90x90.webp Actively Exploited Windows Zero-Day Gets a Patch1 day ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/botnet-90x90.jpg Auth Bypass Bug Exploited, Affecting Millions of Routers2 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/cisco-patch-90x90.png Critical Cisco Bug in VPN Routers Allows Remote Takeover3 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/delete-telegram-message-e1628177080885-90x90.jpg MacOS Flaw in Telegram Retrieves Deleted Messages6 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/spam-call-90x90.jpg Black Hat: ‘I’m Calling About Your Car Warranty’, aka PII Hijinx1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Google-Chrome-Browser-Management-90x90.png Bugs in Chrome’s JavaScript engine can lead to powerful exploits. This project aims to stop them1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/chinese-flag-keyboard-internet-istock-90x90.jpg DeadRinger: Chinese APTs strike major telecommunications companies1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/public-wifi-90x90.jpg NSA Warns Public Networks are Hacker Hotbeds1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/07/iran-thumb-90x90.jpg Hackers used never-before-seen wiper in recent attack on Iranian train system2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/07/PunkSpider-90x90.png Reboot of PunkSpider Tool at DEF CON Stirs Debate2 weeks ago
style="display:block; text-align:center;"
data-ad-layout="in-article"
data-ad-format="fluid"
data-ad-client="ca-pub-6620833063853657"
data-ad-slot="4517761481">
The post Crypto Hack Earned Crooks $600 Million first appeared on Black Hat Ethical Hacking.

___________________________
@hacking_Attack
@Hacking_Video

Hunting for Mass Assignment

How to develop an intuition for Mass Assignment and exploit it like a pro!Continue reading on Pentester Academy Blog »
Read more...

Account Takeover using Update Password functionality + Weak Password Policy

Hey!Continue reading on Medium »
Read more...

Hunting for Mass Assignment
https://blog.pentesteracademy.com/hunting-for-mass-assignment-56ed73095eda?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

How to develop an intuition for Mass Assignment and exploit it like a pro!Continue reading on Pentester Academy Blog » (https://blog.pentesteracademy.com/hunting-for-mass-assignment-56ed73095eda?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Account Takeover using Update Password functionality + Weak Password Policy
https://spoofing.medium.com/account-takeover-using-update-password-functionality-weak-password-policy-ab5190bc3827?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hey!Continue reading on Medium » (https://spoofing.medium.com/account-takeover-using-update-password-functionality-weak-password-policy-ab5190bc3827?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Setup Guide for Nahamsec’s Intro To Bug Bounty Labs
https://medium.com/@hackitdamn/setup-guide-for-nahamsecs-intro-to-bug-bounty-labs-f398ab26dae9?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hello everyone, This is setup guide for Nahamsec’s intro to bug bounty labs who don’t know how to install on local machine in Kali Linux.Continue reading on Medium » (https://medium.com/@hackitdamn/setup-guide-for-nahamsecs-intro-to-bug-bounty-labs-f398ab26dae9?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Setup Guide for Nahamsec’s Intro To Bug Bounty Labs

Hello everyone, This is setup guide for Nahamsec’s intro to bug bounty labs who don’t know how to install on local machine in Kali Linux.Continue reading on Medium »
Read more...

hacking: security in practice
Anyone want to do some CTF's with me?

Doing CTF's pretty much everyday :) 22 yr old Cyber Sec student. I'm not completely trash but still have A LOT to learn.

Edit: If interested drop me a message on discord Bolgz#9439

submitted by /u/bolgz
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video