Hey Guys , How are you all ? . I hope so your doing good and healthy . So, Lets get started . So , I started searching for bugbounty…Continue reading on Medium » (https://medium.com/@nithissh/a-tale-of-weird-xss-into-100-4cd451fe79d4?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Beginner Bug Bounty Resources
https://spoilyzer.medium.com/beginner-bug-bounty-resources-4e0f8dc822b4?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hello everyone! 👋🏼Continue reading on Medium » (https://spoilyzer.medium.com/beginner-bug-bounty-resources-4e0f8dc822b4?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
The 5 Phases of Zero-Trust Adoption

Zero trust aims to replace implicit trust with explicit, continuously adaptive trust across users, devices, networks, applications, and data.

Dark Reading: Attacks/Breaches
IDrive Remote Desktop Offers Protection from RDP Cyberattacks and Vulnerabilities

Remote Desktop aims to solve vulnerability issues with RDP by implementing robust access and security controls.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Forcepoint to Acquire Bitglass

Deal will merge Bitglass's security service edge technology with Forcepoint’s SASE architecture.

___________________________
@hacking_Attack
@Hacking_Video

Why is android smali code reversible and JADX one not
https://www.reddit.com/r/redteamsec/comments/q60fxr/why_is_android_smali_code_reversible_and_jadx_one/

Hi, why an android apk file decompiled by smali to dalvik bytecode is reversible and the java decompiled one using JADX is not ? submitted by /u/Spare_Prize1148 (https://www.reddit.com/user/Spare_Prize1148)
[link] (https://www.reddit.com/r/redteamsec/comments/q60fxr/why_is_android_smali_code_reversible_and_jadx_one/) [comments] (https://www.reddit.com/r/redteamsec/comments/q60fxr/why_is_android_smali_code_reversible_and_jadx_one/)

___________________________
@hacking_Attack
@Hacking_Video

Beginner Bug Bounty Resources

Hello everyone! 👋🏼Continue reading on Medium »
Read more...

hacking: security in practice
Bypassing linux server authentication by exploiting osvdb-3092?

So I was given a .ova file containing a linux webserver running apache. We were supposed to retrieve a key from the server but no password was given except to use guest as user. I ran a nikto search to find vulnerabilities in the server and came across OSVDB-3092. A quick google search showed me that CVE-2006-3092 can be exploited to "bypass authentication and modify data via direct requests with modified parameters to 1) /tva/ajouter_tva.php, (2) /remises/ajouter_remise.php, (3) /pays/ajouter_pays.php, (4) /pays/modifier_pays.php, (5) /produits/ajouter_cat.php, (6) /produits/ajouter_produit.php, (7) /clients/ajouter_client.php, (8) /clients/modifier_client.php."

I'm stuck on the last part and wasn't able to find anything on google. Still pretty new to hacking so less technical replies are appreciated. Also what is a good way to document my findings?

submitted by /u/Razeratorr
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Using Brim to analyse some malicious traffic, can be useful for cyber forensics/blue teamers

https://external-preview.redd.it/6FjQgnRQVwQrBT0fGD-I2KtFbvcENV3GElr4AzsDdaI.jpg?width=320&crop=smart&auto=webp&s=6cafe59693e84d1610ef656806b5c32831daf8f8 submitted by /u/the_simp_lust_man
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Attacchi ransomware nel settore sanitario: il rapporto Mandiant ul gruppo FIN12

https://cdn-images-1.medium.com/max/1280/1*GHG7XwnvQwkqrv8NV_n9fQ.jpeg
Aumentano gli attacchi ransomware al settore sanitario mentresocietà di sicurezza informatica americana Mandiant — in un nuovo rapporto —…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Beginner Bug Bounty Resources

https://cdn-images-1.medium.com/max/600/0*BCDkovAKViYaS8rC.gif
Hello everyone! 👋🏼

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Hackers’ use of Swift network means banks worldwide need deeper layers of security defense

A NUMBER OF HIGH-PROFILE — AND HIGH COST — CYBER HEISTS THAT LEVERAGED THE INTERNATIONAL SWIFT NETWORK TO EXECUTE LARGE-SCALE FRAUDULENT…

Continue reading on InfoSec Write-ups »

___________________________
@hacking_Attack
@Hacking_Video

How cyberattacks are changing according to new Microsoft Digital Defense Report
https://www.reddit.com/r/redteamsec/comments/q651o2/how_cyberattacks_are_changing_according_to_new/

submitted by /u/SCI_Rusher (https://www.reddit.com/user/SCI_Rusher)
[link] (https://aka.ms/CyberattacksMicrosoftDigitalDefenseReport) [comments] (https://www.reddit.com/r/redteamsec/comments/q651o2/how_cyberattacks_are_changing_according_to_new/)

___________________________
@hacking_Attack
@Hacking_Video

Azur3Alph4 - A PowerShell Module That Automates Red-Team Tasks For Ops On Objective

Azur3Alph4 is a PowerShell module that automates red-team tasks for ops on objective. This module situates in a post-breach (RCE achieved) position. Token extraction and many other tools will not execute successfully without starting in this position. This module should be used for further enumeration and movement in a compromised app that is part of a managed identity. Azur3Alph4 is currently in development. Modules are being worked on and updated. Most of this is still untested. Scripts are in repo for individual use and easy identification, but the .psm1 file is what will be consistently updated.Installation & Usage Import-Module Azur3Alph4 Point the $envendpoint to cmd execution passing "env" to the Azure backend. Updates - 8/10/2021 Added Get-ResourceActions.ps1 and updated Azur3Alph4.psm1 Updates - 8/5/2021 Made Azur3Alph4 modular Added Get-SubscriptionId function Why This Was Built I built this because I wanted to learn more about both PowerShell and Azure, two things I'd definitely like to get better at. To help automate and eliminate a lot of repetitive PS commands. To build off my current knowledge of Azure red teaming Function List Get-Endpoint Enumerates an Azure endpoint to verify whether or not it belongs to a managed identity Get-ManagedIdentityToken Grabs the Managed Identity Token from the endpoint using the extracted secret. Stores the value in a given variable Connect-AzAccount Takes a username and password variable and automates SecureString conversion and connects to an Azure account Get-SubscriptionId Gets the subscription ID using the REST API for Azure Get-ManagedIdentityResources Uses the subscription ID to enumerate all resources that are accessible Get-ResourceActions.ps1 Enumerates all resources available using Azure token and lists permissions of each resource directly below it Credits Big shout out to @nikhil_mitt for the CARTP course that got me started in Azure Download Azur3Alph4
Read more...

___________________________
@hacking_Attack
@Hacking_Video