Hacking on Medium
Malware Analysis

https://cdn-images-1.medium.com/max/2542/1*MJqcRnXCtZ9h78YiL84f9w.png
For a project I was asked to set up a honey pot to see what malware I would get on the system. I used the AWS T-POT for this project and…

Continue reading on Medium »

Hacking on Medium
Visit Websites Without Opening The Browser

https://cdn-images-1.medium.com/max/2600/0*B0SswuDMCh7ObeV-
Learn how to interact with a website using headless Chrome, simple JavaScript, and Docker containers.

Continue reading on JavaScript in Plain English »

Hacking on Medium
Ensure that you treat all systems, devices, data sources, etc. as protected resources

Today over 30% of data attacks and compromises come from inside the organization. And, most external attacks come from compromised user…

Continue reading on Medium »

Hacking on Medium
¡Winamp Media Player regresó con la versión 5.8!

https://cdn-images-1.medium.com/max/1438/0*5njKGltUCyt3VVts
PUBLICADO EN 25 OCTUBRE, 2021 POR EHACKING

Continue reading on Medium »

Hacking on Medium
Subnetting with docker

https://cdn-images-1.medium.com/max/2600/0*pWie1xc5j_SQi8Bj
Hi, Dhanesh Sivasamy here. Today we are going to take advantage of docker’s subnet functionality and use it to spin up our docker instance…

Continue reading on Medium »

Analysis for CVE-2021–23981 (Mozilla Firefox Texture Upload Buffer Overflow OOBR)

Out Of Bounds Read vulnerability exists in texture upload through texImage2D method in WebGL APIContinue reading on Medium »
Read more...

Analysis for CVE-2021–21233 (Google Chrome Heap Buffer Overflow)

Out Of Bounds Write vulnerability existed in BlitFramebuffer method of WebGL API in Chromium based browsers.Continue reading on Medium »
Read more...

Dark Reading: Attacks/Breaches
Pulling Back the Curtain on Bug Bounties

It's critical that infosec professionals and consumers understand threats and vulnerabilities, but they are being kept in the dark.

Easy SSRF from Wayback Machine

We will talk about the SSRF and what is it and how I was able to find a Non-Blind SSRF with wayback machine. — By xelkomyContinue reading on Medium »
Read more...

hacking: security in practice
How are hackers scanning the whole Internet in just a few minutes?

https://external-preview.redd.it/FFPb6bdWVNzA1UR2xMplKQKvWzecFSBiWfzklW7yCVk.jpg?width=640&crop=smart&auto=webp&s=0a1b88b2a3cfcda5fe8c89666b3cbaa84cc2c2c5 submitted by /u/CrankyBear
[link] [comments]

hacking: security in practice
Do Nmap scans live any traces if the target isn't capturing network traffic?

For example if I scan all the ports of the external IP of my home network, will that scan leave any traces behind?

Assume that I'm using a common commercial router

submitted by /u/Rolmar
[link] [comments]

hacking: security in practice
Issue With Metasploit (HTB)

Hey everyone,

Just started working on some retired machines with HTB to start learning on Kali Linux. I was working on Optimum, did some recon, found the rejetto_hfs after doing a quick google search on exploits for the service on the open port, booted up Metasploit and found it on there.

Here is where things get iffy. When I open the exploit right away I get the "no payload configured defaulting to windows/meterpreter/reverse_tcp" error. For some reason this keeps happening when I use Metasploit and then the options always seem to ask for LHOST and LPORT, which I don't think is usually needed or asked for. I set LHOST to my IP and port 4444 which I heard is fine and set RHOST to the HTB machine IP.

So when I set up the options and run it, it seems to work but then I get :
Server stopped.

This exploit may require manual cleanup of '%TEMP%\sriJzbNrXoXfP.vbs' on the target

Exploit completed, but no session was created.

Any idea why this is happening? I feel as if its an issue with the payload not being configured when I boot up the exploit. This same issue keeps happening with other HTB machines I've done and when I look up tutorials it doesn't mention these issues. I know I can use the "show payloads" command and select one from the list, which I'm not sure I have the knowledge for yet, and set that option but why is this only happening randomly? The first time I used Metasploit I had no issues.

Also whats that manual cleanup issue? I tried looking around on the web and couldn't find much on it.

Any help would be greatly appreciated!

submitted by /u/SUDO_KERSED
[link] [comments]

hacking: security in practice
Why don't RaaS affiliates target Chinese companies?

With the Canadian national recently arrested for his role in Netwalker and the Lockbit list of affiliates released (i.e. usernames such as 'malibudad'), I think it's safe to say many affiliates are not purely of Russian or Soviet-bloc origin. Meaning... they are living in Western countries and obviously very good because most of the public investigation/coverage has been directed towards the authors of the ransomware and not the individuals deploying it domestically.

It might seem stupid, but (especially for affiliates of American origin), why not target cash-rich Chinese firms (or firms not in the American/EU sphere on influence)? Similar to how the authors of malware prevent its use if Cyrillic is detected - without invoking some larger moral thing - it seems like a natural option for affiliates not to shit where they eat?

submitted by /u/heap-spray-n-pray
[link] [comments]

Microsoft Digital Defense Report shares new insights on nation-state attacks
https://www.reddit.com/r/redteamsec/comments/qgcv1m/microsoft_digital_defense_report_shares_new/

submitted by /u/SCI_Rusher (https://www.reddit.com/user/SCI_Rusher)
[link] (https://aka.ms/MDDRInsightOnAttacks) [comments] (https://www.reddit.com/r/redteamsec/comments/qgcv1m/microsoft_digital_defense_report_shares_new/)

Easy SSRF from Wayback Machine
https://xelkomy.medium.com/easy-ssrf-from-wayback-machine-edf946486120?source=rss------bug_bounty-5