hacking: security in practice
Raspberry Pi open ethernet port exploit

So I remember hearing this trick one time, basically if you're infiltrating an office building or something to try to gain access to their network (Red Team type of work) and you find an open ethernet port, most likely a location where an office desk or something was supposed to be located, you can connect a RPi to that ethernet port and hopefully access it later from home giving you access to their network. Basically a small implant, similar concept to a Hak5 LAN Turtle. Do any of you lads know of any good articles or guides on how to setup a RPi for this purpose? Thanks lads!

submitted by /u/_Lukisha_
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Finding with dork a multiple DOM XSS in the same html
https://medium.com/@Th3hound/finding-with-dork-a-multiple-dom-xss-in-the-same-html-1b457cbbd957?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

A month ago I tried to search a programs in bug bounty and I saw a domain web.com and I try ever with a simple dork: site:web.com ext:html.Continue reading on Medium » (https://medium.com/@Th3hound/finding-with-dork-a-multiple-dom-xss-in-the-same-html-1b457cbbd957?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Emerging Security Tools Tackle GraphQL Security

New security tools are proactively protecting APIs built with GraphQL, before attacks against them become more commonplace.

Dark Reading: Attacks/Breaches
Ankura Launches Brooklyn Cyber Center

New initiative addresses shortage of professionals and lack of diversity in cybersecurity by recruiting, training and retaining diverse talent from underrepresented backgrounds.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
BT to Deploy 'Epidemiological AI' Based on the Spread of Viruses in Humans to Combat Cyberattacks

Using the spread of viruses in human populations as a model to inform its AI, Inflame is a key component in BT’s recently-announced Eagle-i platform.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
MSPAlliance Leadership Council Forms Vendor Council to Address Managed Services Supply Chain Risk

MSP supply chain threats will be mitigated through transparency, education, business continuity planning, and managed services channel certification.

___________________________
@hacking_Attack
@Hacking_Video

Finding with dork a multiple DOM XSS in the same html

A month ago I tried to search a programs in bug bounty and I saw a domain web.com and I try ever with a simple dork: site:web.com ext:html.Continue reading on Medium »
Read more...

Deep Web
Deep web consultant

I’ve been looking for a consultant on the deep web. Sort of like, someone you would pay for tech work but for deep web stuff.

submitted by /u/TransGoTa
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Stop Trying to Hack Everything

https://cdn-images-1.medium.com/max/2600/0*tH0B2wfo1aeCEu1A
I’m relatively new to Medium; so far, so good. But, I cannot help noticing that virtually every suggested story on my feed revolves around…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Falsify the function of an app

What is the easiest way to recreate a single function of an app? Are there programmes for this or do I have to do it myself?

submitted by /u/emilmaster11
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Editing Cpap machine data...

Has anyone been successful at this?

submitted by /u/Nietzsche_Strategy
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Wardriving to capture handshakes?

I'm looking for software or scripts (anything open source) which would allow me to capture a large number of handshakes as I have seen an article talking about how common it is for people to set their phone number as a wife I password and I'm want to see how true it is.

My hardware options are: raspberry pi, laptop with kali (laptop and PI use wifi adapters), wifi pineapple mark 7

Any recommendations for tools to accomplish this purpose? The tools I tried so far didn't work quite well.

submitted by /u/pottato-killer
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Exploiting Password Reset Poisoning

for account takeover and max bounty!Continue reading on InfoSec Write-ups »
Read more...

Exploiting Password Reset Poisoning
https://infosecwriteups.com/exploiting-password-reset-poisoning-b748797f0661?source=rss------bug_bounty-5