Dark Reading: Attacks/Breaches
Cloud Attack Analysis Unearths Lessons for Security Pros

Researchers detail their investigation of a cryptomining campaign stealing AWS credentials and how attackers have evolved their techniques.

Dark Reading: Attacks/Breaches
What Happens If Time Gets Hacked

Renowned hardware security expert raises alarm on the risk and dangers of cyberattackers targeting the current time-synchronization infrastructure.

Boofuzz - Network Protocol Fuzzing for Humans
http://www.kitploit.com/2021/11/boofuzz-network-protocol-fuzzing-for.html

___________________________
@hacking_Attack
@Hacking_Video

Boofuzz is a fork of and the successor to the venerable Sulley (https://github.com/OpenRCE/sulley) fuzzing framework. Besides numerous bug fixes, boofuzz aims for extensibility. The goal: fuzz (https://www.kitploit.com/search/label/Fuzz) everything.
Why?
Sulley has been the preeminent open source fuzzer (https://www.kitploit.com/search/label/Fuzzer) for some time, but has fallen out of maintenance.
Features
Like Sulley, boofuzz incorporates all the critical elements of a fuzzer:Easy and quick data generation.Instrumentation – AKA failure detection.Target reset after failure.Recording of test data.Unlike Sulley, boofuzz also features:Online documentation (https://boofuzz.readthedocs.io/).Support for arbitrary communications mediums.Built-in support for serial fuzzing, ethernet- and IP-layer, UDP broadcast.Better recording of test data -- consistent, thorough, clear.Test result CSV export.Extensible instrumentation/failure detection.Much easier install experience!Far fewer bugs.Sulley is affectionately named after the giant teal and purple creature from Monsters Inc. due to his fuzziness. Boofuzz is likewise named after the only creature known to have scared Sulley himself: Boo!

___________________________
@hacking_Attack
@Hacking_Video

Boo from Monsters Inc
Installation
pip install boofuzz
Boofuzz installs as a Python library (https://www.kitploit.com/search/label/Library) used to build fuzzer scripts. See INSTALL.rst (https://github.com/jtpereyda/boofuzz/blob/master/INSTALL.rst) for advanced and detailed instructions.
Documentation
Documentation is available at https://boofuzz.readthedocs.io/, including nifty quickstart guides.
Contributions
Pull requests are welcome, as boofuzz is actively maintained (at the time of this writing ;)). See CONTRIBUTING.rst (https://github.com/jtpereyda/boofuzz/blob/master/CONTRIBUTING.rst).
Community
For questions that take the form of “How do I… with boofuzz?” or “I got this error with boofuzz, why?”, consider posting your question on Stack Overflow. Make sure to use the fuzzing tag.If you’ve found a bug, or have an idea/suggestion/request, file an issue here on GitHub.For other questions, check out boofuzz on gitter (https://gitter.im/jtpereyda/boofuzz) or Google Groups (https://groups.google.com/d/forum/boofuzz).For updates, follow @b00fuzz (https://twitter.com/b00fuzz) on Twitter.

Download Boofuzz (https://github.com/jtpereyda/boofuzz)

___________________________
@hacking_Attack
@Hacking_Video

Earn $AMPT while Discovering Decentralised Governance
https://blog.ampt.finance/earn-ampt-while-discovering-decentralised-governance-4e32ef9907fd?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Guaranteed to WIN! $70K+ In Total Rewards!!Continue reading on Amplify Protocol » (https://blog.ampt.finance/earn-ampt-while-discovering-decentralised-governance-4e32ef9907fd?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
The malware called PhoneSpy invades the privacy of Android users.

https://cdn-images-1.medium.com/max/1024/1*qxFZ7fu-IYdm-st5cZMwaA.jpeg
Android users should be aware of some new viruses. PhoneSpy is the name of the malware, and Zimperium claims that its zLabs research team…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Quaoar VM Walkthrough

https://cdn-images-1.medium.com/max/939/0*_eXcSESvgV4rDJYy.png
Makineyi indirebilirsiniz.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Android Debug Bridge (ADB) exploitation (privilege escalation)

https://cdn-images-1.medium.com/max/1200/1*PpwBL08CnMk3wi06UgX6kQ.png
The Android Debug Bridge (ADB) is a powerful command-line tool for communicating with Android devices. The ADB command allows you to do a…

Continue reading on Purple TEAM »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
MSSQL for Pentester: Command Execution with xp_cmdshell

the present article is the third article in the series of MSSQL Server and its entrance Testing. In this article, we will find and taking…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
What Happened to CREAM Finance? The long-lasting effect of security vulnerabilities in DeFi

https://cdn-images-1.medium.com/max/933/0*wXk0Sq9Nrz7y3nhL.png
‍

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How My Crypto Cold Wallet Was Hacked

https://cdn-images-1.medium.com/max/1920/1*BLiYCEaJ77JJw9rg_-1Q4w.jpeg
And it Was All My Fault

Continue reading on Changeling Lore »

___________________________
@hacking_Attack
@Hacking_Video