Dark Reading: Attacks/Breaches
Do Cybercriminals Fear Arrest?

Researchers explore how cybercriminals weigh the possibility of arrest and whether it deters criminal activity.

All in one Kali scambait tool-set
https://www.reddit.com/r/Pentesting/comments/mbpur2/all_in_one_kali_scambait_toolset/

<!-- SC_OFF -->Is there a list of software (voice changer, voIP-client recorder, fake bank, wireshark etc) we need, so more could be proaktive against the lowest-Betha scammers of the world. A Kali All in one VM or a docker of some kind would be awesome. Is anyone interested in helping me make this happen and i could open a github-page for my anti-kolkata machine. Feel free to make a pull request for new scambait tool! I want an automated copy and deletion of the c: drive and many scambait tools included. An randomized dextop-background and "cooking-recipes" file would be awesome. Does anyone know how to implement this? <!-- SC_ON --> submitted by /u/domib97 (https://www.reddit.com/user/domib97)
[link] (https://www.reddit.com/r/Pentesting/comments/mbpur2/all_in_one_kali_scambait_toolset/) [comments] (https://www.reddit.com/r/Pentesting/comments/mbpur2/all_in_one_kali_scambait_toolset/)

Hacking on Medium
Инструмент разведки urlhunter

https://cdn-images-1.medium.com/max/604/1*A0lrv65TfbaJChD-aU7s6A.jpeg
urlhunter это инструмент разведки, который позволяет выполнять поиск по URL-адресам, которые доступны через службы сокращения

Continue reading on Medium »

Landed a PenTesting job with no real experience - help
https://www.reddit.com/r/Pentesting/comments/mbqcoc/landed_a_pentesting_job_with_no_real_experience/

<!-- SC_OFF -->Hello everyone, I'm hoping I can get some feedback here but please let me know if there's a subreddit better suited for PenTesting career questions. Some Background: I graduated last year with a CS degree and have spent the last year looking for software engineering jobs with no luck. I had one InfoSec internship as a student but I didnt think it would be enough to land me a job so I stuck with SE in the meantime while I figured out how to get my foot in the cyber world. I'm familiar with some security tools and the cyber field but have zero hands on experience working with things like metasploit or ctf's. Played around with some cyber websites likes tryhackme. Current Situation: I just recently started branching off into cyberSec job applications and interviewed for a junior embedded systems penetration tester position and some how landed the job. The recruiting manager said they don't expect me to know everything (its a very niche field) but as you can expect, I'm quite nervous. The job description sounds incredible but Im scared I might not be prepared for whats to come. Fortunately, I have one month until my official start date and I'm hoping I can use this time to familiarize myself with the field before I start.
My new manager said they would teach me the ropes but I can honestly say I've never done anything with embedded systems and PenTesting them is not turning up anything on google. Thoughts? Appreciate any help in the matter <!-- SC_ON --> submitted by /u/sloan0101 (https://www.reddit.com/user/sloan0101)
[link] (https://www.reddit.com/r/Pentesting/comments/mbqcoc/landed_a_pentesting_job_with_no_real_experience/) [comments] (https://www.reddit.com/r/Pentesting/comments/mbqcoc/landed_a_pentesting_job_with_no_real_experience/)

CTF-Party - A Ruby Library To Enhance And Speed Up Script/Exploit Writing For CTF Players

A library to enhance and speed up script/exploit writing for CTF players (or security researchers, bug bounty hunters, pentesters but mostly focused on CTF) by patching the String class to add a short syntax of usual code patterns. The philosophy is also to keep the library to be pure ruby (no dependencies) and not to re-implement what another library is already doing well (eg. xorcist for xor). For example instead of writing: require 'base64'myvar = 'string'myvar = Base64.strict_encode64(myvar) Just write (shorter and easier to remember): require 'ctf_party'myvar = 'string'myvar.to_b64! Features base64: to_b64, to_b64!, from_b64, from_b64!, b64? digest: md5, md5!, sha1, sha1!, etc. flag: flag, flag!, flag? (apply/check a flag format) rot: rot, rot!, rot13, rot13! hex: hex2dec, dec2hex, to_hex, from_hex, hex2bin, bin2hex and bang versions References Homepage / Documentation: https://noraj.github.io/ctf-party Author Made by Alexandre ZANNI (@noraj), pentester from Orange Cyberdefense. Download Ctf-Party
Read more...

KitPloit - PenTest Tools!
CTF-Party - A Ruby Library To Enhance And Speed Up Script/Exploit Writing For CTF Players

https://1.bp.blogspot.com/-UDClO79plco/YFegS0yAm0I/AAAAAAAAVpQ/I_F8U8tJa-IARnnT0gmFY9x2ZHY3mt2aACNcBGAsYHQ/s16000/logo.png
A library to enhance and speed up script/exploit writing for CTF players (or security researchers, bug bounty hunters, pentesters but mostly focused on CTF) by patching the String class to add a short syntax of usual code patterns. The philosophy is also to keep the library to be pure ruby (no dependencies) and not to re-implement what another library is already doing well (eg. xorcist for xor).
For example instead of writing:

require 'base64'

myvar = 'string'
myvar = Base64.strict_encode64(myvar)

Just write (shorter and easier to remember):

require 'ctf_party'

myvar = 'string'
myvar.to_b64!

Features

* base64: to_b64, to_b64!, from_b64, from_b64!, b64?
* digest: md5, md5!, sha1, sha1!, etc.
* flag: flag, flag!, flag?(apply/check a flag format)
* rot: rot, rot!, rot13, rot13!
* hex: hex2dec, dec2hex, to_hex, from_hex, hex2bin, bin2hexand bang versions

References

Homepage / Documentation: https://noraj.github.io/ctf-party

Author

Made by Alexandre ZANNI (@noraj), pentester from Orange Cyberdefense.
Download Ctf-Party

Deep Web
Revenge😈

So some mf on Twitter scammed for the ps5 and a guy on Reddit helped me find his IP address I wanna kno if any of you guys know how to get his real address out of the IP I’ll pay 5 dollars And if someone helps me get his address what are some fucked up ways of getting revenge on him😈

submitted by /u/nicodagoatt
[link] [comments]
➖ Sent by @TheFeedReaderBot ➖

Dark Reading: Attacks/Breaches
Disgruntled IT Contractor Sentenced in Retaliatory Office 365 Attack

Former contractor deleted 1,200 user accounts in revenge.

Dark Reading: Attacks/Breaches
Inside the Web Shell Used in the Microsoft Exchange Server Attacks

The history and details of China Chopper - a Web shell commonly seen in the widespread Microsoft Exchange Server attacks.

Hacking on Medium
DFACE HACKER

We Hack every thing

Continue reading on Medium »

Hacking on Medium
El malware Purple Fox se abre camino en los sistemas Windows expuestos.

https://cdn-images-1.medium.com/max/1600/0*kvCV388PO3TJo3PF
Purple Fox, un malware que anteriormente se distribuía a través de kits de explotación y correos electrónicos de phishing, ahora ha…

Continue reading on Medium »

Hacking on Medium
How To Recover Your Social Media Account

SKILL HACKER

Continue reading on Medium »