Accessing Apple’s internal UAT Slackbot for fun and non-profit

In December 2020, Ashish Kunwar and I went on a hunting spree against multiple Apple targets. To begin with, as usual, we started by…Continue reading on Medium »
Read more...

Facebook Scum

Facebook's bug bounty program I thought would be an excellent investment of my time. Right? Wrong, as I was misled into thinking I could…Continue reading on Medium »
Read more...

Dark Reading: Attacks/Breaches
What the CEO Saw: Colonial Pipeline, Accellion Execs Share Cyberattack War Stories

CEOs of the two breached companies said their priorities instantly shifted to joining the response efforts when they first learned of attacks on their systems.

Dark Reading: Attacks/Breaches
Space ISAC and NY Metro InfraGard Members Alliance Announce Collaboration to Advance the Mission of Cybersecurity in Space

The collaboration is designed to promote broad-based participation by members of both organizations through enhanced educational initiatives, user-and operator-training, and intelligence-sharing activities in the space domain.

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Who came up with the idea of shadow banning? And why

If someone is banned then fine Ban him period.

Dont shadow ban his account and let person figure out why none of his posts are getting views xD

submitted by /u/DuskInHD
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
why won't lucky patcher work with hungry shark

When I try to do the in app purchases thing with hungry shark it gives me an error but on the lucky patcher website is says hungry shark us compatible

submitted by /u/ImAGoofyGooberYeah69
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
You have my wifi password. Which method do you use to hack me?

My devices are an iPhone 11 and Windows 10 Laptop

submitted by /u/zemiiii
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Advice on what laptop to buy

Im looking to buy a new laptop that I can play around with virtual machines and start playing with kali Linux but also have a decent graphics card to edit 4K video. Trying to stay under 1k. What would you go with?

submitted by /u/LemonGreat6877
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Downloaded an App about crypto from appstore, how bad is it?

I downloaded some app which mines cryptos in mobile but when I looked at the app permission, it had full network, view nw/wifi conn, prevent phone from sleeping, recive data from internet, control vibration, run at startup, device info, contacts etc. I uninstalled it then and there. Now my question is how fucked I am? Does

submitted by /u/neekyboi
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Feeling cute might delete later. And I'm happy Twitch got pwned, -

- skinned alive, and had their carcass of source code driven through the streets...

​you can claim credit at Bugcrowd which will contribute toward your position on Bugcrowd’s global leaderboard.

^ is the 'disclosure policy'(?) for what is presumed to be a 15 billion company. What a joke. Even though this looked ideological - if you offer zero motivation for disclosure by refusing to reward (proportional to the company revenue/severity of the vulnerability) individuals, I will cheer as you have to eat where you shit. If you are a company that rakes in billions a year, people don't want a 'pat on the back' for dumping your data.

Kindly eat a dick Twitch.

​

src: https://qz.com/1966986/twitch-owned-by-amazon-is-the-dominant-force-in-live-streaming/

submitted by /u/heap-spray-n-pray
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Ways to get even with targets number & address?

Hypothetically speaking, how could someone get even if they know their targets address, phone number, and e-mail?

submitted by /u/CherryBerry2021
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
what is spoofing attack

What is Spoofing?

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Black Hat Ethical Hacking
Twitch source code and creator payouts part of massive leak

https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Twitch source code and creator payouts part of massive leakPost Views: 103
Reading Time: 1 Minute
Twitch appears to have been hacked, leaking source code for the company’s streaming service, an unreleased Steam competitor from Amazon Game Studios, and details of creator payouts.
An anonymous poster on the 4chan messaging board has released a 125GB torrent, which they claim includes the entirety of Twitch and its commit history.

The poster claims the leak is designed to “foster more disruption and competition in the online video streaming space.” The Verge is able to confirm that the leak is legitimate, and includes code that is as recent as this week. Video Games Chronicle first reported details on the leak earlier today. Twitch has confirmed it has suffered a data breach, and the company says it’s “working with urgency to understand the extent of this.”
See Also: Complete Offensive Security and Ethical Hacking Course The leak includes the following:

* 3 years worth of details regarding creator payouts on Twitch.
* The entirety of twitch.tv, “with commit history going back to its early beginnings.”
* Source code for the mobile, desktop, and video game console Twitch clients.
* Code related to proprietary SDKs and internal AWS services used by Twitch.
* An unreleased Steam competitor from Amazon Game Studios.
* Data on other Twitch properties like IGDB and CurseForge.
* Twitch’s internal security tools.

The leak is labelled as “part one,” suggesting there could be more to come. Video Games Chronicle reports that Twitch is aware of the breach, but the company has not yet informed its userbase.
See Also: Apple Pay with VISA lets hackers force payments on locked iPhones The leak doesn’t appear to include password or address information on Twitch users, but that doesn’t mean this information hasn’t been obtained as part of this breach. In fact, the leaker seems to have focused on sharing Twitch’s own company tools and information, rather than code that would include personal accounts.

While Twitch has confirmed a data breach, it’s still unclear exactly how much data has been stolen. We’d recommend changing your Twitch password and enabling two-factor authentication on your account if you haven’t done so already.
See Also: Offensive Security Tool: URL Hunter Twitch has been struggling to contain ongoing hate and harassment recently. After weeks of hate raids, some Twitch streamers took a day off in August to protest against the company’s lack of action. Twitch has responded to the #DoBetterTwitch movement, and it’s a hashtag that the anonymous poster has used today to promote this leak.

Update, 7:35AM ET: The Verge can confirm leak is legitimate, and we have included more details on the data within the leak.

Update, 11:25AM ET: Twitch has now confirmed it has suffered a data breach.
See Also: Hacking stories – Operation Aurora: When China hacked Google Source: www.theverge.com (Click Link)Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/10/Apache-web-server-90x90.png Apache fixes actively exploited zero-day vulnerability, patch now1 day ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/10/security-breach-freepik-90x90.jpg Encrypted & Fileless Malware Sees Big Growth2 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/10/Digital-Wallet-90x90.jpg MFA Glitch Leads to 6K+ Coinbase Customers Getting Robbed3 days ago
* https://www.blackhatethicalhacking.com/wp-content/u[...]

___________________________
@hacking_Attack
@Hacking_Video

ploads/2021/10/shutterstock_1156765921-900x506-1-90x90.jpg Google pushes emergency Chrome update to fix two zero-days6 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/ezgif.com-gif-maker-2-90x90.jpg Apple Pay with VISA lets hackers force payments on locked iPhones1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/gamma-finfisher-hacked-tool-90x90.jpg FinFisher malware hijacks Windows Boot Manager with UEFI bootkit1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/computer-3923644_1920_1627303851339_1632808464296-90x90.jpg New malware steals Steam, Epic Games Store, and EA Origin accounts1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/VMware-90x90.jpg Hackers exploiting critical VMware vCenter CVE-2021-22005 bug1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/malware-800x449-1-90x90.jpg Malware devs trick Windows validation with malformed certs2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/ezgif.com-gif-maker-1-1-90x90.jpg Unpatched Apple Zero-Day in macOS Finder Allows Code Execution2 weeks ago
The post Twitch source code and creator payouts part of massive leak first appeared on Black Hat Ethical Hacking.

___________________________
@hacking_Attack
@Hacking_Video

Bugédex: My first step into cybersecurity!
https://medium.com/@ritwikgoel14/bug%C3%A9dex-my-first-step-into-cybersecurity-1307f74e6648?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

If something had been ‘bugging’ you this weekend you couldn’t ‘catch’ a hold of, then you should have been at Bugédex! This fantastic…Continue reading on Medium » (https://medium.com/@ritwikgoel14/bug%C3%A9dex-my-first-step-into-cybersecurity-1307f74e6648?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Swimlane Releases Low-Code Security Automation Platform

Swimlane Cloud is a low-code software-as-a-service that allows anyone in the organization to create security automation tasks and automation.

Bugédex: My first step into cybersecurity!

If something had been ‘bugging’ you this weekend you couldn’t ‘catch’ a hold of, then you should have been at Bugédex! This fantastic…Continue reading on Medium »
Read more...