hacking: security in practice
Anyone know of a person with a academic approach to hacking?

I love this community, and all things that are hacking it's literally all I think about it. I know I maybe a NPC because even on my holidays and weekends I research something concerning with hacking.

That being said I'd love to work for a Uni as a D Prof of hacking. Is that even real? I haven't found anyone with a doctorate degree in hacking.

CyberSec, which was my field of study is fine I suspect BUT i really mean Malware, Spyware, computer Exploits and the like I don't really mean Firewalls and that lot.

Does anyone even know anyone like that? It would be my absolute dream! Thanks for any help!

submitted by /u/comrade-linux
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Is this networking book good for a beginner in cyber security?

I am 16 years old, male, and I am a beginner in cyber security. I have found out that networking is highly salient in this field, so after asking many for recommendations and tips, I got a book. (Not sure if it’s a textbook or a normal book).

The name is:- Networking: A Top-Down Approach 7th edition

Amazon link: https://www.amazon.com/Computer-Networking-Top-Down-Approach-7th/dp/0133594149

PDF link: https://www.pdfdrive.com/computer-networking-a-top-down-approach-e189338227.html

I want you guys to let me know what you think about it. Is it too much? Too bad? Too little? Not important for “hacking”? Too extra? And if there are better books for beginners let me know :)

submitted by /u/Original_Pea_6201
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
OSCP — Meu caminho até a terra prometida.

https://cdn-images-1.medium.com/max/1200/1*9GJR-_hpQYcYXI-HrGlceg.jpeg
Numa das brilhantes palestras dadas pelo incrível Clóvis de Barros Filho, ele nos passa um ensinamento — para mim essencial — de…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Hungry programmers took $3k worth of snacks from CIA candy machines

https://cdn-images-1.medium.com/max/640/1*MvejH8fCp9dcLZtzNBkotA.jpeg
Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
AArch 64 Bytes: Part 1 (Reversing Exit)

https://cdn-images-1.medium.com/max/1280/1*Fvq5caqqhQunJGD_TEMBEA.png
For a complete table of contents of all the lessons please click below as it will give you a brief of each lesson in addition to the…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Days 5&6 of #100DaysOfSmartContractHacking (Dravee’s journal)

https://cdn-images-1.medium.com/max/2600/0*ZI7kS6lf97272N1F
23–24/10/2021

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Vulnerabilities in Blockchain Always Exists

https://cdn-images-1.medium.com/max/2600/0*NW1mNWOV8MbYzfhJ
Blockchain is a distributed and decentralized technology, It has a relatively fair, anonymous, and free world through a consensus…

Continue reading on Crypto Pundit »

___________________________
@hacking_Attack
@Hacking_Video

SQL Injection JR. Pentester -TryHackMe

Hi, amazing hackers in this story you are gonna how to what is SQL injections and how to find them in different types.Continue reading on Medium »
Read more...

ThreadStackSpoofer - PoC For An Advanced In-Memory Evasion Technique Allowing To Better Hide Injected Shellcode'S Memory Allocation From Scanners And Analysts
http://www.kitploit.com/2021/10/threadstackspoofer-poc-for-advanced-in.html

___________________________
@hacking_Attack
@Hacking_Video

A PoC implementation for an advanced in-memory evasion technique that spoofs Thread Call Stack. This technique allows to bypass thread-based memory examination rules and better hide shellcodes (https://www.kitploit.com/search/label/Shellcodes) while in-process memory.
Intro
This is an example implementation for Thread Stack Spoofing technique aiming to evade Malware Analysts, AVs and EDRs looking for references to shellcode's frames in an examined thread's call stack. The idea is to hide references to the shellcode on thread's call stack thus masquerading allocations containing malware's code.Implementation along with my ShellcodeFluctuation (https://github.com/mgeeky/ShellcodeFluctuation) brings Offensive Security community sample implementations to catch up on the offering made by commercial C2 products, so that we can do no worse in our Red Team toolings.
Implementation has changed
Current implementation differs heavily to what was originally published. This is because I realised there is a way simpler approach to terminate thread's call stack processal and hide shellcode's related frames by simply writing 0 to the return address of the first frame we control:
void WINAPI MySleep(DWORD _dwMilliseconds)
{
[...]
auto overwrite = (PULONG_PTR)_AddressOfReturnAddress();
const auto origReturnAddress = *overwrite;
*overwrite = 0;

[...]
*overwrite = origReturnAddress;
}
The previous implementation, utilising StackWalk64 can be accessed in this commit c250724 (https://github.com/mgeeky/ThreadStackSpoofer/tree/c2507248723d167fb2feddf50d35435a17fd61a2).This implementation is much more stable and works nicely on both Debug and Release under two architectures - x64 and x86.
Demo
This is how a call stack may look like when it is NOT spoofed:

___________________________
@hacking_Attack
@Hacking_Video

This in turn, when thread stack spoofing is enabled:

___________________________
@hacking_Attack
@Hacking_Video

Above we can see that the last frame on our call stack is our MySleep callback. One can wonder does it immediately brings opportunities new IOCs? Hunting rules can look for threads having call stacks not unwinding into following expected thread entry points located within system libraries:kernel32!BaseThreadInitThunk+0x14
ntdll!RtlUserThreadStart+0x21
However the call stack of the spoofed thread may look rather odd at first, a brief examination of my system shown, that there are other threads not unwinding to the above entry points as well:

___________________________
@hacking_Attack
@Hacking_Video