ashita wrote.
Source: https://threatpost.com (Click Link)style="display:block"
data-ad-client="ca-pub-6620833063853657"
data-ad-slot="8337846400"
data-ad-format="auto"
data-full-width-responsive="true"> Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/03/thrive-themes-1030x391-1-90x90.png Active Exploits Hit WordPress Sites Vulnerable to Thrive Themes Flaws1 day ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/03/HL-color-90x90.jpg Hobby Lobby Exposes Customer Data in Cloud Misconfiguration2 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/03/adobe_coldfusion-700x412-e1542041238507-90x90.jpg Adobe Fixes Critical ColdFusion Flaw in Emergency Update3 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/03/Clubhouse-e1614022265127-90x90.jpg Bogus Android Clubhouse App Drops Credential-Swiping Malware4 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/03/apple-security-90x90.jpg Trojanized Xcode Project Slips MacOS Malware to Apple Developers1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/03/Cisco_Systems_Sign-90x90.jpg Cisco Plugs Security Hole in Small Business Routers1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/03/JPG-Malicious-Two-90x90.jpg Magecart Attackers Save Stolen Credit-Card Data in JPG Files1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/03/Google-Chrome-Browser-1-90x90.jpg Google Warns Mac, Windows Users of Chrome Zero-Day Flaw1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/03/internet-of-things-90x90.jpg Critical Security Hole Can Knock Smart Meters Offline2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/03/Linux-kernel-vulnerability-90x90.png Linux Systems Under Attack By New RedXOR Malware2 weeks ago
The post Microsoft Offers Up To $30K For Teams Bugs first appeared on Black Hat Ethical Hacking.

docker run -p 9999:9999 -p 9998:9998 -it honeypot --mode normal --servers "ssh:9999 http:9998"
If you don’t see Chameleon dashboard, click on the search icon in the left bar and add it

https://www.blackhatethicalhacking.com/wp-content/uploads/2021/03/find.png
Raspberry Pi 3B+ (setup zram first to avoid lockups) Requirements (Servers only)apt-get update -y && apt-get install -y iptables-persistent tcpdump nmap iputils-ping python python-pip python-psycopg2 lsof psmisc dnsutils
pip install scapy==2.4.4 netifaces==0.10.9 pyftpdlib==1.5.6 sqlalchemy==1.3.23 pyyaml==5.4.1 paramiko==2.7.1 impacket==0.9.22 twisted==20.3.0 psutil==5.8.0 requests==2.25.1 redis==3.5.3 mysql-connector-python==8.0.23 pygments==2.5.2
pip install -U requests[socks]
pip install -Iv rsa==4.0
pip install rdpy==1.3.2 Current Servers/Emulators⦿ DNS (Server using Twisted)
⦿ HTTP Proxy (Server using Twisted)
⦿ HTTP (Server using Twisted)
⦿ HTTPS (Server using Twisted)
⦿ SSH (Server using socket)
⦿ POP3 (Server using Twisted)
⦿ IMAP (Server using Twisted)
⦿ STMP (Server using smtpd)
⦿ RDP (Server using Twisted)
⦿ SMB (Server using impacket)
⦿ SOCK5 (Server using socketserver)
⦿ TELNET (Server using Twisted)
⦿ VNC (Emulator using Twisted)
⦿ Postgres (Emulator using Twisted)
⦿ Redis (Emulator using Twisted)
⦿ Mysql (Emulator using Twisted)
⦿ Elasticsearch (Coming..)
⦿ Oracle (Coming..)
⦿ ldap (maybe) Changes⦿ 2020.V.01.05 added mysql
⦿ 2020.V.01.04 added redis
⦿ 2020.V.01.03 switched ftp servers to twisted
⦿ 2020.V.01.02 switched http and https servers to twisted
⦿ 2020.V.01.02 Fixed changing ip in grafana interface Roadmap⦿ Refactoring logging
⦿ Fixing logger
⦿ Code Cleanup
⦿ Switching some servers to twisted
⦿ Adding graceful connection close (error response)
⦿ Implementing the rest of servers
⦿ Adding some detection logic to the sinffer
⦿ Adding a control panel ResourcesTwisted, documentation, Impacket, documentation, Grafana, documentation, Expert, Twisted, robertheaton. Other LicensesBy using this framework, you are accepting the license terms of all these packages: grafana, tcpdump, nmap, psycopg, dnsutils, scapy, netifaces, pyftpdlib, sqlalchemy, pyyaml, paramiko, impacket, rdpy, psutil, requests, FreeRDP, SMBClient, tigervnc. Articleskitploit redteaming.net my-infosec-awesome https://www.blackhatethicalhacking.com/wp-content/uploads/2020/11/BECOME-A-PATRON-AND-UNLOCK-EXCLUSIVE-VIDEOS-8-1-300x120.png Recent Tools* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/03/skipfish_screenshot-90x90.png Offensive Security Tool: Skipfish2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/03/sparta2-90x90.png Offensive Security Tool: Sparta3 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/02/ScareCrow2-90x90.png Offensive Security Tool: ScareCrow1 month ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/01/john_the_ripper_bg-90x90.jpg Offensive Security Tool: JTR – John the Ripper2 months ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/01/shad0w_msf_shad0w-2-90x90.png Offensive Security Tool: Shad0w3 months ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2020/12/hack-like-pro-snort-ids-for-aspiring-hacker-part-2-setting-up-basic-configuration-90x90.png Offensive Security Tools: FireEye Red Team Tool Countermeasures4 months ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2020/12/image-90x90.png Offensive Security Tool: CrackMapExec4 months ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2020/11/3-90x90.png Offensive Security Tool: PRET – Printer Exploitation Toolkit5 months ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2020/10/xsstrike-90x90.png Offensive Security Tool: XSStrike5 months ago
* https://www.blackhat[...]

ethicalhacking.com/wp-content/uploads/2020/10/68747470733a2f2f7062732e7477696d672e636f6d2f6d656469612f44576649697a4d56774145326230672e6a70673a6c61726765-90x90.jpg Offensive Security Tool: Payloads All The Things5 months ago
The post Information Security Tool: Chameleon first appeared on Black Hat Ethical Hacking.

Hacking on Medium
Incident Response(Olay Müdahalesi) Nedir ?

https://cdn-images-1.medium.com/max/600/1*cMrOWmcl7dIsp5-PVLzGpg.png
Olay müdahalesi, bir kurum veya kuruluşun siber saldırı veya güvenlik ihlali ile karşılaştığında bu olayları ele alma sürecini tanımlayan…

Continue reading on Medium »

Hacking on Medium
Hacakable Book Review

https://cdn-images-1.medium.com/max/600/0*l-8F5m7uuE89aCC1.jpg
This is a review of the book Hackable by Ted Harrington. This book takes application security and makes it easy to understand how and why…

Continue reading on Medium »

Retoolkit - Reverse Engineer's Toolkit

This is a collection of tools you may like if you are interested on reverse engineering and/or malware analysis on x86 and x64 Windows systems. After installing this toolkit you'll have a folder in your desktop with shortcuts to RE tools like these:Why do I need it? You don't. Obviously, you can download such tools from their own website and install them by yourself in a new VM. But if you download retoolkit, it can probably save you some time. Additionally, the tools come pre-configured so you'll find things like x64dbg with a few plugins, command-line tools working from any directory, etc. You may like it if you're setting up a new analysis VM. Download The *.iss files you see here are the source code for our setup program built with Inno Setup. To download the real thing, you have to go to the Releases section and download the setup program. Included tools Check the wiki. Is it safe to install it in my environment? I don't know. Some included tools are not open source and come from shady places. You should use it exclusively in virtual machines and under your own responsibility. Can you add tool X? It depends. The idea is to keep it simple. We won't add a tool just because it's not here yet. But if you think there's a good reason to do so, and the license allows us to redistribuite the software, please file a request here. Download Retoolkit
Read more...

hacking: security in practice
Google's unusual move to shut down an active counterterrorism operation being conducted by a Western democracy

https://a.thumbs.redditmedia.com/TxerMyVjj3fyox-ZnjuWxT_A7_4X66eWb8aLYk9r9W0.jpg submitted by /u/bartturner
[link] [comments]

hacking: security in practice
Beginners guide to Reflective DLL Injection

https://b.thumbs.redditmedia.com/woi_BoJmNNCI40GM6Wh8VxjK4RMpQbl0GRRPTqtY5cw.jpg submitted by /u/lynxmk
[link] [comments]

hacking: security in practice
are passwords in website databases usually hashed?

are passwords in website databases usually hashed or do they hash them when they compare the password with user input?

submitted by /u/Crockie28
[link] [comments]

hacking: security in practice
Employer hacked for a second time

I work for a UK based SME. We have now been hacked for a second time in 3 years.

The first time around, they got in via poorly set up firewall. All they did was to encrypt the server which the firewall rule allowed access to. Server was rebuilt, never heard from any hackers. I believe the firewall rule was amended to be more secure

Last week, hackers got in and locked down a few servers from what I can tell. I haven't been told much this time around. I know the hackers sent a message asking to go to a website to make payment. I don't know if any payment was made. I also don't know how many servers were affected, or how they got in

Both times the employer has not publicised the breaches to anyone. Is it normal/legal for employers to try to hide this?

submitted by /u/bigweeduk
[link] [comments]

hacking: security in practice
So... about a Linux system.

As per the title, where would hackers normally attack or gain entry to a Linux box?

Also, what sort of things will they change once inside the system: create users, install kits, drop a shell?

Not new to Linux but always good to know what things to look for in an intrusion and/or be vigilant about certain odd system behaviors/processes.

submitted by /u/Xu_Lin
[link] [comments]

hacking: security in practice
Audit Node Module folder with YARA rules

Audit Node Module folder with YARA rules

(New rules, PRs, feedbacks are highly appreciated)

GitHub Repo: https://github.com/rpgeeganage/audit-node-modules-with-yara

Purpose:

* The purpose of this tool is to run a given set of YARA rules against the given node_module
folder.
* Help to detect supplier chain attacks
* With this approach, We can define YARA rules to identify suspicious scripts which are injected into node packages.
* This package can be added to the CI/CD
pipeline

submitted by /u/geeganage
[link] [comments]

hacking: security in practice
crashing school pcs (video for details)

https://b.thumbs.redditmedia.com/qiIZnDUJyyNEbilPgR1dcRioGseVVDiiRmQft_W6wGU.jpg submitted by /u/Crockie28
[link] [comments]

issue in a pentesting report
https://www.reddit.com/r/Pentesting/comments/mds22r/issue_in_a_pentesting_report/

<!-- SC_OFF -->Hi, Hi Martin, I have a lot of high vulnerable components (js, jar, lib, etc.) is it correct to place these in the same table with other high vulnerabilities such as weak token implementation, XSS, weak password policy for example? <!-- SC_ON --> submitted by /u/micheal6584 (https://www.reddit.com/user/micheal6584)
[link] (https://www.reddit.com/r/Pentesting/comments/mds22r/issue_in_a_pentesting_report/) [comments] (https://www.reddit.com/r/Pentesting/comments/mds22r/issue_in_a_pentesting_report/)