hacking: security in practice
What do you guys think, how the attacker would've carried the attack, plus overriding the commands by remote controller.

https://external-preview.redd.it/kH6V2gDZuxdxrEGtBl1Wv400kY8nbGinBfBG1EJQVVA.png?width=320&crop=smart&auto=webp&s=30ef8ad9ad27b08bd2a0c054d5bcba12650f7d8a submitted by /u/geeknintrovert
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Looking to download a protected pdf webpage as a pdf file with highlightable text.

This is the webpage: https://beta.sbc.gov.sa/ar/BC/SBC_AR/GW.aspx

I just need to convert it into a downloadable pdf file.

Any help would be much appreciated.

submitted by /u/Blezius
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Finding IDORs, the conceptual way
https://tusharbhatia43.medium.com/finding-idors-the-conceptual-way-d091e59a755b?source=rss------bug_bounty-5

This is my take on IDORs and how to understand them when you are just starting in the Web Application Penetration Testing.Continue reading on Medium » (https://tusharbhatia43.medium.com/finding-idors-the-conceptual-way-d091e59a755b?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
The InsecureNet-of-Things: The State of IoT Privacy, Security and Safety

https://cdn-images-1.medium.com/max/1200/1*R7URGwXG-xyMsGqP8Vny4Q.png
Digital technology and Moore’s Law have moved us along from the Computer Age to the Information Age. Now we are living in an IoT…

Continue reading on The InfoSec Journal »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How Ransomware as a service is growing in popularity

https://cdn-images-1.medium.com/max/2600/1*d90_F2rTL5vq-Fre0rmdSA.jpeg
Ransomware attacks are on the rise and are targeting both governments as well as businesses. While ransomware has been around for decades…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Exotic Programming Languages: Why Hackers Use Them

https://cdn-images-1.medium.com/max/2600/0*jOkUoNybS33Akvn9
The world keeps evolving and so do cybercriminals. It’s important to keep up with the change so as to not fall victim to it.

Continue reading on JavaScript in Plain English »

___________________________
@hacking_Attack
@Hacking_Video

Finding IDORs, the conceptual way

This is my take on IDORs and how to understand them when you are just starting in the Web Application Penetration Testing.Continue reading on Medium »
Read more...

Rdesktop - Open Source Client for Microsoft's RDP protocol

rdesktop is an open source client for Microsoft's RDP protocol. It is known to work with Windows versions ranging from NT 4 Terminal Server to Windows 2012 R2 RDS. rdesktop currently has implemented the RDP version 4 and 5 protocols. Installation rdesktop uses a GNU-style build procedure. Typically all that is necessary to install rdesktop is the following: % ./configure% make% make install The default is to install under /usr/local. This can be changed by adding --prefix= to the configure line. The smart-card support module uses PCSC-lite. You should use PCSC-lite 1.2.9 or later. To enable smart-card support in the rdesktop add --enable-smartcard to the configure line. Note for users building from source If you have retrieved a snapshot of the rdesktop source, you will first need to run ./bootstrap in order to generate the build infrastructure. This is not necessary for release versions of rdesktop. Usage Connect to an RDP server with: % rdesktop server where server is the name of the Terminal Services machine. If you receive "Connection refused", this probably means that the server does not have Terminal Services enabled, or there is a firewall blocking access. You can also specify a number of options on the command line. These are listed in the rdesktop manual page (run man rdesktop). Download Rdesktop
Read more...

___________________________
@hacking_Attack
@Hacking_Video

Rdesktop - Open Source Client for Microsoft's RDP protocol
http://www.kitploit.com/2021/10/rdesktop-open-source-client-for.html

___________________________
@hacking_Attack
@Hacking_Video

rdesktop is an open source client for Microsoft's RDP protocol. It is known to work with Windows (https://www.kitploit.com/search/label/Windows) versions ranging from NT 4 Terminal Server to Windows 2012 R2 RDS. rdesktop currently has implemented the RDP version 4 and 5 protocols.
Installation
rdesktop uses a GNU-style build procedure. Typically all that is necessary to install rdesktop is the following: % ./configure
% make
% make install
The default is to install under /usr/local. This can be changed by adding --prefix= to the configure line. The smart-card support module uses PCSC-lite. You should use PCSC-lite 1.2.9 or later. To enable smart-card support in the rdesktop add --enable-smartcard to the configure line.
Note for users building from source
If you have retrieved a snapshot of the rdesktop source, you will first need to run ./bootstrap in order to generate the build infrastructure. This is not necessary for release versions of rdesktop.
Usage
Connect to an RDP server with: % rdesktop server
where server is the name of the Terminal Services machine. If you receive "Connection refused", this probably means that the server does not have Terminal Services enabled, or there is a firewall (https://www.kitploit.com/search/label/Firewall) blocking access. You can also specify a number of options on the command line. These are listed in the rdesktop manual page (run man rdesktop).

Download Rdesktop (https://github.com/rdesktop/rdesktop)

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
Rdesktop - Open Source Client for Microsoft's RDP protocol

https://blogger.googleusercontent.com/img/a/AVvXsEjI9_dtJMGFIo2ekUTFnK-BYMm-b9mDbEawVBsdN3vwWYN07iaWgbErPWsrqVbYJLmUHajMGJiegtxAC-nuy4WhR_2YYeLON4EF-FuX5J8dBpu8c3E3hgNSpehEPhjQLTh37lzaVSK6VtCP2esnZcO09zo4ZMLtOEyTBefOHtkG1Yhpq96sjhL15MNCOQ=w640-h360
rdesktop is an open source client for Microsoft's RDP protocol. It is known to work with Windows versions ranging from NT 4 Terminal Server to Windows 2012 R2 RDS. rdesktop currently has implemented the RDP version 4 and 5 protocols.
Installation

rdesktop uses a GNU-style build procedure. Typically all that is necessary to install rdesktop is the following:

% ./configure
% make
% make install


The default is to install under /usr/local. This can be changed by adding --prefix=to the configure line.

The smart-card support module uses PCSC-lite. You should use PCSC-lite 1.2.9 or later. To enable smart-card support in the rdesktop add --enable-smartcardto the configure line.

Note for users building from source

If you have retrieved a snapshot of the rdesktop source, you will first need to run ./bootstrapin order to generate the build infrastructure. This is not necessary for release versions of rdesktop.

Usage

Connect to an RDP server with:

% rdesktop server


where serveris the name of the Terminal Services machine. If you receive "Connection refused", this probably means that the server does not have Terminal Services enabled, or there is a firewall blocking access.

You can also specify a number of options on the command line. These are listed in the rdesktop manual page (run man rdesktop).
Download Rdesktop

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
New CrowdXDR Alliance Defines Data Exchange Standard for XDR

Google Cloud, Okta, ServiceNow, Zscaler, Netskope, Proofpoint, Extrahop, Mimecast, Claroty, and Corelight have joined the coalition.

Dark Reading: Attacks/Breaches
New Vaultree Encryption-as-a-Service Keeps Cloud Data Fully Encrypted

Encryption startup Vaultree aims to give companies the ability to work with fully encrypted data in the cloud.

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
JSPanda : Client-Side Prototype Pollution Vulnerability Scanner

JSpanda is client-side prototype pollution vulnerability scanner. It has two key features, scanning vulnerability the supplied URLs and analyzing the JavaScript libraries’ source code.

However, JSpanda cannot detect advanced prototype pollution vulnerabilities.

How JSPanda works?

* Uses multiple payloads for prototype pollution vulnerability.
* Gathers all the links in the targets for scanning and add payloads to JSpanda-obtained URLs, navigates to each URL with headless Chromedriver.
* Scans all words in the source code of potentially vulnerable JavaScript library and it creates a simple JS PoC by finding the script gadget, helping you analyze the code manually.

Requirements

* Download latest version of Google Chrome and Chromedriver
* Selenium

Usage

Scan: python3.7 jspanda.py

* Add URLs to url.txt file, for instance : example.com

Basic Source Code Analysis : python3.7 analyze.py

* Add a JavaScript library’s source code to analyze.js
* Generate PoC code using analyze.py
* Execute PoC code on Chrome’s console. It pollutes all the words collected from the source code and show it on the screen. So it may generate false positive results. These outputs provide additional information to researchers, do not automate everything.

Source code analysis – Screenshot
https://1.bp.blogspot.com/-SZInObVpv48/YU17N8P7hSI/AAAAAAAAK8Y/xUFjEoj_Cp8JRCSUKHZ4Qv7geTFLYbBAQCLcBGAsYHQ/s1099/ss.png

Download

___________________________
@hacking_Attack
@Hacking_Video