hacking: security in practice
Malware Detection in Internet of Things Using Opcodes and Machine Learning

https://external-preview.redd.it/eDMMmMMrUy8gv3ovbx_qxrh4Lk77dqwloybe-xTtnY0.jpg?width=108&crop=smart&auto=webp&s=5c8ba1f4fb716191cc626ce389e163a3ae44cfdb submitted by /u/StcStasi
[link] [comments]

hacking: security in practice
Windows privesc with psexec -s cmd

https://b.thumbs.redditmedia.com/QbLvpL4q2PGL_RYeweqphjm7H0Tvm3y8Rr-jNrG5F7E.jpg Does this still work nowadays?
psexec -s cmd -s Run the remote process in the System account.
https://i.redd.it/a7u4ppq2v5q71.gif

I tried it with psexec v2.34 but didn't work anymore
C:\>whoami pc\user C:\>PsExec.exe -s cmd PsExec v2.34 - Execute processes remotely Copyright (C) 2001-2021 Mark Russinovich Sysinternals - www.sysinternals.com Error creating key file on pc: The network name cannot be found. C:\>whoami pc\user C:\>
.
C:\>whoami pc\user C:\>PsExec-v2.11.exe -s cmd PsExec v2.11 - Execute processes remotely Copyright (C) 2001-2014 Mark Russinovich Sysinternals - www.sysinternals.com Error establishing communication with PsExec service on pc: The network name cannot be found. C:\>whoami pc\user C:\>
.

submitted by /u/w0lfcat
[link] [comments]

hacking: security in practice
Twitter

I'm in no way looking to hack someone, but just scare them ig. I recently got followed by a gimmick Twitter account called "I follow people who should die" and I wanted to make a "this you?" Spongebob meme with their ip address. (IP addresses are relatively useless anyway tho). So is there any way I can do this without a phishing link? Thanks!

submitted by /u/Tri-Soul_Games69
[link] [comments]

2 months into my Bug Bounty learning journey..
https://medium.com/@_tas/2-months-into-my-bug-bounty-learning-journey-cd45f7fc425a?source=rss------bug_bounty-5

And I’m starting this blog as a way to document my learning and to *hopefully* help solidify some fundamentals. So in this particular…Continue reading on Medium » (https://medium.com/@_tas/2-months-into-my-bug-bounty-learning-journey-cd45f7fc425a?source=rss------bug_bounty-5)

Hacking on Medium
2 months into my Bug Bounty learning journey..

https://cdn-images-1.medium.com/max/805/1*-WUdkyIt1fZYuVD_N0kFaA.png
And I’m starting this blog as a way to document my learning and to *hopefully* help solidify some fundamentals. So in this particular…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Can’t Contain Poop — Container Security CTF

https://cdn-images-1.medium.com/max/1838/1*ET0nuIRHDMppsNkuSYl0BA.png
We first encountered this CTF during Defcon NYE party 2020. Team pooppoopganggang is prone to missing these sorts of things from not…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Keyloggers

Please help with some advice. I’m in process of buying a second hand laptop. How can I check for hardware keylogger installed? Not so much bothered about software keylogger as I will wipe the whole system out.

submitted by /u/trempe-lempe
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Study Links Remote Work and Cyberattacks

https://external-preview.redd.it/lIbMrspwXTGZxD_YF-io3qcEYpZ_FDG_lvtw_KtXX6k.jpg?width=640&crop=smart&auto=webp&s=54ae5f0e2d25b862e94c845362e113055bdf9083 submitted by /u/george-alexander2k
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Is there some way to trip a motion detector from a distance ?

Like a motion detector alarm. If I wanted to trip the alarm without actually motioning in front of the detector, can you like trick the detector into thinking it sees motion by sending some kind of signal

submitted by /u/Illustrious-Web9850
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Bug Bounty Hunting — A Beginners Perspective
https://medium.com/@_tas/bug-bounty-hunting-a-beginners-perspective-4a113a5aab2f?source=rss------bug_bounty-5

To anyone reading this, welcome! I’m writing this blog as a way for me to express my experiences in learning to be a bug bounty hunter and…Continue reading on Medium » (https://medium.com/@_tas/bug-bounty-hunting-a-beginners-perspective-4a113a5aab2f?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Bug Bounty Hunting — A Beginners Perspective

To anyone reading this, welcome! I’m writing this blog as a way for me to express my experiences in learning to be a bug bounty hunter and…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Black Hat Ethical Hacking
New malware steals Steam, Epic Games Store, and EA Origin accounts

https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png New malware steals Steam, Epic Games Store, and EA Origin accountsPost Views: 146
Reading Time: 1 Minute
A new malware sold on dark web forums is being used by threat actors to steal accounts for multiple gaming platforms, including Steam, Epic Games Store, and EA Origin.
Kaspersky security researchers who spotted the new trojan in March dubbed it BloodyStealer and found that it’s capable of collecting and stealing a wide range of sensitive information, including cookies, passwords, bank cards, as well as sessions from various applications.

This malware explicitly targets gaming platforms, like Steam, Epic Games, EA Origin, GOG Galaxy, and more, as it can harvest accounts for its operators, which later sell them in underground markets.

“While BloodyStealer is not made exclusively for stealing game-related information, the platforms it can target clearly point to the demand for this type of data among cybercriminals,” Kaspersky said.

“Logs, accounts and in-game goods are some of the game-related products sold on the darknet in bulk or individually for an attractive price.”
See Also: Complete Offensive Security and Ethical Hacking Course
The information stealer is sold through private channels to VIP members of underground forums under a subscription model for roughly $10 per month or $40 for a lifetime “license.”
https://www.bleepstatic.com/images/news/u/1109292/2021/BloodyStealer%20dark%20web%20ad.png
Used to attack gamers worldwideSince its discovery, Kaspersky has detected BloodyStealer being used in attacks targeting victims from Europe, Latin America, and the Asia-Pacific region.

“BloodyStealer is a prime example of an advanced tool used by cybercriminals to penetrate the gaming market. With its efficient anti-detection techniques and attractive pricing, it is sure to be seen in combination with other malware families soon,” Kaspersky researchers added.

“Furthermore, with its interesting capabilities, such as extraction of browser passwords, cookies, and environment information as well as grabbing information related to online gaming platforms, BloodyStealer provides value in terms of data that can be stolen from gamers and later sold on the darknet.”

You can find further info on BloodyStealer’s anti-analysis and data exfiltration capabilities in Kaspersky’s report.
See Also: Offensive Security Tool: Discover
While Kaspersky did not share info on the attack vectors used to deliver this malware, gamers are usually targeted by threat actors with malware-laced modding-related and game cheat tools if they are willing to cheat their way to victory or want to further mod their games.

Game cheats are a well-documented source of malware infections and have been used to infect unethical gamers with cryptocurrency [...]

___________________________
@hacking_Attack
@Hacking_Video