Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Incident Response(Olay Müdahalesi) Nedir ?
https://cdn-images-1.medium.com/max/600/1*cMrOWmcl7dIsp5-PVLzGpg.png
Olay müdahalesi, bir kurum veya kuruluşun siber saldırı veya güvenlik ihlali ile karşılaştığında bu olayları ele alma sürecini tanımlayan…
Continue reading on Medium »
Incident Response(Olay Müdahalesi) Nedir ?
https://cdn-images-1.medium.com/max/600/1*cMrOWmcl7dIsp5-PVLzGpg.png
Olay müdahalesi, bir kurum veya kuruluşun siber saldırı veya güvenlik ihlali ile karşılaştığında bu olayları ele alma sürecini tanımlayan…
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Hacakable Book Review
https://cdn-images-1.medium.com/max/600/0*l-8F5m7uuE89aCC1.jpg
This is a review of the book Hackable by Ted Harrington. This book takes application security and makes it easy to understand how and why…
Continue reading on Medium »
Hacakable Book Review
https://cdn-images-1.medium.com/max/600/0*l-8F5m7uuE89aCC1.jpg
This is a review of the book Hackable by Ted Harrington. This book takes application security and makes it easy to understand how and why…
Continue reading on Medium »
Retoolkit - Reverse Engineer's Toolkit
This is a collection of tools you may like if you are interested on reverse engineering and/or malware analysis on x86 and x64 Windows systems. After installing this toolkit you'll have a folder in your desktop with shortcuts to RE tools like these:Why do I need it? You don't. Obviously, you can download such tools from their own website and install them by yourself in a new VM. But if you download retoolkit, it can probably save you some time. Additionally, the tools come pre-configured so you'll find things like x64dbg with a few plugins, command-line tools working from any directory, etc. You may like it if you're setting up a new analysis VM. Download The *.iss files you see here are the source code for our setup program built with Inno Setup. To download the real thing, you have to go to the Releases section and download the setup program. Included tools Check the wiki. Is it safe to install it in my environment? I don't know. Some included tools are not open source and come from shady places. You should use it exclusively in virtual machines and under your own responsibility. Can you add tool X? It depends. The idea is to keep it simple. We won't add a tool just because it's not here yet. But if you think there's a good reason to do so, and the license allows us to redistribuite the software, please file a request here. Download Retoolkit
Read more...
This is a collection of tools you may like if you are interested on reverse engineering and/or malware analysis on x86 and x64 Windows systems. After installing this toolkit you'll have a folder in your desktop with shortcuts to RE tools like these:Why do I need it? You don't. Obviously, you can download such tools from their own website and install them by yourself in a new VM. But if you download retoolkit, it can probably save you some time. Additionally, the tools come pre-configured so you'll find things like x64dbg with a few plugins, command-line tools working from any directory, etc. You may like it if you're setting up a new analysis VM. Download The *.iss files you see here are the source code for our setup program built with Inno Setup. To download the real thing, you have to go to the Releases section and download the setup program. Included tools Check the wiki. Is it safe to install it in my environment? I don't know. Some included tools are not open source and come from shady places. You should use it exclusively in virtual machines and under your own responsibility. Can you add tool X? It depends. The idea is to keep it simple. We won't add a tool just because it's not here yet. But if you think there's a good reason to do so, and the license allows us to redistribuite the software, please file a request here. Download Retoolkit
Read more...
Hacking Articles Tips Tricks Videos Tutorials
Photo
hacking: security in practice
are passwords in website databases usually hashed?
are passwords in website databases usually hashed or do they hash them when they compare the password with user input?
submitted by /u/Crockie28
[link] [comments]
are passwords in website databases usually hashed?
are passwords in website databases usually hashed or do they hash them when they compare the password with user input?
submitted by /u/Crockie28
[link] [comments]
reddit
are passwords in website databases usually hashed?
are passwords in website databases usually hashed or do they hash them when they compare the password with user input?
hacking: security in practice
Employer hacked for a second time
I work for a UK based SME. We have now been hacked for a second time in 3 years.
The first time around, they got in via poorly set up firewall. All they did was to encrypt the server which the firewall rule allowed access to. Server was rebuilt, never heard from any hackers. I believe the firewall rule was amended to be more secure
Last week, hackers got in and locked down a few servers from what I can tell. I haven't been told much this time around. I know the hackers sent a message asking to go to a website to make payment. I don't know if any payment was made. I also don't know how many servers were affected, or how they got in
Both times the employer has not publicised the breaches to anyone. Is it normal/legal for employers to try to hide this?
submitted by /u/bigweeduk
[link] [comments]
Employer hacked for a second time
I work for a UK based SME. We have now been hacked for a second time in 3 years.
The first time around, they got in via poorly set up firewall. All they did was to encrypt the server which the firewall rule allowed access to. Server was rebuilt, never heard from any hackers. I believe the firewall rule was amended to be more secure
Last week, hackers got in and locked down a few servers from what I can tell. I haven't been told much this time around. I know the hackers sent a message asking to go to a website to make payment. I don't know if any payment was made. I also don't know how many servers were affected, or how they got in
Both times the employer has not publicised the breaches to anyone. Is it normal/legal for employers to try to hide this?
submitted by /u/bigweeduk
[link] [comments]
reddit
Employer hacked for a second time
A subreddit dedicated to hacking and hackers. Constructive collaboration and learning about exploits, industry standards, grey and white hat...
hacking: security in practice
So... about a Linux system.
As per the title, where would hackers normally attack or gain entry to a Linux box?
Also, what sort of things will they change once inside the system: create users, install kits, drop a shell?
Not new to Linux but always good to know what things to look for in an intrusion and/or be vigilant about certain odd system behaviors/processes.
submitted by /u/Xu_Lin
[link] [comments]
So... about a Linux system.
As per the title, where would hackers normally attack or gain entry to a Linux box?
Also, what sort of things will they change once inside the system: create users, install kits, drop a shell?
Not new to Linux but always good to know what things to look for in an intrusion and/or be vigilant about certain odd system behaviors/processes.
submitted by /u/Xu_Lin
[link] [comments]
reddit
So... about a Linux system.
A subreddit dedicated to hacking and hackers. Constructive collaboration and learning about exploits, industry standards, grey and white hat...
Hacking Articles Tips Tricks Videos Tutorials
Photo
hacking: security in practice
Audit Node Module folder with YARA rules
Audit Node Module folder with YARA rules
(New rules, PRs, feedbacks are highly appreciated)
GitHub Repo: https://github.com/rpgeeganage/audit-node-modules-with-yara
Purpose:
* The purpose of this tool is to run a given set of YARA rules against the given node_module
folder.
* Help to detect supplier chain attacks
* With this approach, We can define YARA rules to identify suspicious scripts which are injected into node packages.
* This package can be added to the CI/CD
pipeline
submitted by /u/geeganage
[link] [comments]
Audit Node Module folder with YARA rules
Audit Node Module folder with YARA rules
(New rules, PRs, feedbacks are highly appreciated)
GitHub Repo: https://github.com/rpgeeganage/audit-node-modules-with-yara
Purpose:
* The purpose of this tool is to run a given set of YARA rules against the given node_module
folder.
* Help to detect supplier chain attacks
* With this approach, We can define YARA rules to identify suspicious scripts which are injected into node packages.
* This package can be added to the CI/CD
pipeline
submitted by /u/geeganage
[link] [comments]
issue in a pentesting report
https://www.reddit.com/r/Pentesting/comments/mds22r/issue_in_a_pentesting_report/
<!-- SC_OFF -->Hi, Hi Martin, I have a lot of high vulnerable components (js, jar, lib, etc.) is it correct to place these in the same table with other high vulnerabilities such as weak token implementation, XSS, weak password policy for example? <!-- SC_ON --> submitted by /u/micheal6584 (https://www.reddit.com/user/micheal6584)
[link] (https://www.reddit.com/r/Pentesting/comments/mds22r/issue_in_a_pentesting_report/) [comments] (https://www.reddit.com/r/Pentesting/comments/mds22r/issue_in_a_pentesting_report/)
https://www.reddit.com/r/Pentesting/comments/mds22r/issue_in_a_pentesting_report/
<!-- SC_OFF -->Hi, Hi Martin, I have a lot of high vulnerable components (js, jar, lib, etc.) is it correct to place these in the same table with other high vulnerabilities such as weak token implementation, XSS, weak password policy for example? <!-- SC_ON --> submitted by /u/micheal6584 (https://www.reddit.com/user/micheal6584)
[link] (https://www.reddit.com/r/Pentesting/comments/mds22r/issue_in_a_pentesting_report/) [comments] (https://www.reddit.com/r/Pentesting/comments/mds22r/issue_in_a_pentesting_report/)
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Netdiscover
https://cdn-images-1.medium.com/max/2600/1*jBFdm_g0FTQ_oyhyZfjMbA.jpeg
As you most likely are aware, ARP is utilized to map MAC addresses to IP addresses on an internal system. The router and switches send out…
Continue reading on Dev Genius »
Netdiscover
https://cdn-images-1.medium.com/max/2600/1*jBFdm_g0FTQ_oyhyZfjMbA.jpeg
As you most likely are aware, ARP is utilized to map MAC addresses to IP addresses on an internal system. The router and switches send out…
Continue reading on Dev Genius »