Dark Reading: Attacks/Breaches
Is XDR Overhyped?
Security experts weigh in on the value and pitfalls of extended detection and response (XDR), offering consideration and advice on this growing new category.
Is XDR Overhyped?
Security experts weigh in on the value and pitfalls of extended detection and response (XDR), offering consideration and advice on this growing new category.
Dark Reading
Is XDR Overhyped?
Security experts weigh in on the value and pitfalls of extended detection and response (XDR), offering consideration and advice on this growing new category.
Hacking Articles Tips Tricks Videos Tutorials
Photo
Dark Reading: Attacks/Breaches
5 Things ML Teams Should Know About Privacy and the GDPR
Machine learning delivers plenty of benefits. But as the emerging technology gets applied more broadly, be careful about how you handle all the data used in the process.
5 Things ML Teams Should Know About Privacy and the GDPR
Machine learning delivers plenty of benefits. But as the emerging technology gets applied more broadly, be careful about how you handle all the data used in the process.
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
how to protect your phone from hackers | how to save your phone from hackers | by Allaboutsubha
how to protect your phone from hackers | how to save your phone from hackers | by Allaboutsubha
Continue reading on Medium »
how to protect your phone from hackers | how to save your phone from hackers | by Allaboutsubha
how to protect your phone from hackers | how to save your phone from hackers | by Allaboutsubha
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
My experience with the eCPPT Exam
https://cdn-images-1.medium.com/max/712/1*TqRkgtjrOLck18WlSGIjTw.png
Important: This is my personal experience and review for the eCPPT exam from eLearnSecurity. If you like to check more information about…
Continue reading on Medium »
My experience with the eCPPT Exam
https://cdn-images-1.medium.com/max/712/1*TqRkgtjrOLck18WlSGIjTw.png
Important: This is my personal experience and review for the eCPPT exam from eLearnSecurity. If you like to check more information about…
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
EE.UU., Reino Unido y Australia advierten sobre piratas informáticos iraníes que explotan fallas de…
https://cdn-images-1.medium.com/max/1515/0*060ZSwjunfut_Z97
PUBLICADO EN 17 NOVIEMBRE, 2021 POR EHACKING
Continue reading on Medium »
EE.UU., Reino Unido y Australia advierten sobre piratas informáticos iraníes que explotan fallas de…
https://cdn-images-1.medium.com/max/1515/0*060ZSwjunfut_Z97
PUBLICADO EN 17 NOVIEMBRE, 2021 POR EHACKING
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
SharkBot — A New Android Trojan Stealing Banking and Cryptocurrency Accounts
https://cdn-images-1.medium.com/max/1200/0*6uXbkOgsKPsdKkmD
Since late October 2021, new Android Trojan named SharkBot is affecting multiple android devices in 24 countries including US.
Continue reading on Medium »
SharkBot — A New Android Trojan Stealing Banking and Cryptocurrency Accounts
https://cdn-images-1.medium.com/max/1200/0*6uXbkOgsKPsdKkmD
Since late October 2021, new Android Trojan named SharkBot is affecting multiple android devices in 24 countries including US.
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Millionaire Financial Life Hacks # 2
https://cdn-images-1.medium.com/max/2600/0*QACUGO-Q2nO8-pa3
4 Reasons Why I Buy Used Tires.
Continue reading on Medium »
Millionaire Financial Life Hacks # 2
https://cdn-images-1.medium.com/max/2600/0*QACUGO-Q2nO8-pa3
4 Reasons Why I Buy Used Tires.
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
hacking: security in practice
I request assistance with a problem
I know this might not be the best use but I have a friend across the country and recently she was really hurt by someone she thought she was close to and I want to do something to him for being the selfish asshole he is but I'm only 17 and I can't do anything physical because I'm very far away and I want to just do any type of harm I can do to show him up it's killing me inside not being able to do anything
submitted by /u/Gucci_Napkin
[link] [comments]
I request assistance with a problem
I know this might not be the best use but I have a friend across the country and recently she was really hurt by someone she thought she was close to and I want to do something to him for being the selfish asshole he is but I'm only 17 and I can't do anything physical because I'm very far away and I want to just do any type of harm I can do to show him up it's killing me inside not being able to do anything
submitted by /u/Gucci_Napkin
[link] [comments]
reddit
I request assistance with a problem
I know this might not be the best use but I have a friend across the country and recently she was really hurt by someone she thought she was close...
hacking: security in practice
Are Telegram messages secure (not 'hackable' by the government) ?
So basically, the French NSA said on TV that they have the ability to hack Telegram messages and that all major NSA-like institution do. The spokesman was quite explicit about this, and for the whole story explained that's how they found out someone was planning a terrorist attack.
My question is simple, is this true ?
I guess it's maybe just to frighten people of using it but what sense would it make ? Or just straight bullshit
And if they do can read telegram messages, how do they decrypt them ?! Or maybe are they just talking about metadata ?
submitted by /u/Floshix
[link] [comments]
Are Telegram messages secure (not 'hackable' by the government) ?
So basically, the French NSA said on TV that they have the ability to hack Telegram messages and that all major NSA-like institution do. The spokesman was quite explicit about this, and for the whole story explained that's how they found out someone was planning a terrorist attack.
My question is simple, is this true ?
I guess it's maybe just to frighten people of using it but what sense would it make ? Or just straight bullshit
And if they do can read telegram messages, how do they decrypt them ?! Or maybe are they just talking about metadata ?
submitted by /u/Floshix
[link] [comments]
Reddit
From the hacking community on Reddit
Explore this post and more from the hacking community
JVMXRay - Make Java Security Events Of Interest Visible For Analysis
http://www.kitploit.com/2021/11/jvmxray-make-java-security-events-of.html
http://www.kitploit.com/2021/11/jvmxray-make-java-security-events-of.html
Contact/Chat Group
New chat information forthcoming.
Benefits
Following is a quick list of some of the more important benefits.
Identify protected resourcesTrack different types of events of interest related to sockets, files, process execution, and more. When an event of interest occurs, process it as you wish. At the moment, adaptors for the system console (https://www.kitploit.com/search/label/Console) (e.g., System.out), logback, and Java Logging, are available with others in process.
No code changes requiredJVMXRay does not require any changes to your application source code to work. The code is pulled into the JVM by a command line (https://www.kitploit.com/search/label/Command%20Line) option. The solution is 100% Java code so it runs anywhere.
Supply chain insightsAn ancilary benefit of not requiring source code is that JVMXRay provides insight into your applications dependencies including 3rd party libraries (e.g. Jar files). Events provide the source of origin where your classes where loaded when the event is generated.
Extensible & OpenDon't see an adapter or filter that works for you and know how to code? Roll up your sleeves and write one. It's extensible. Fix a bug and submit a pull requrest. All the source code is available.INFORMATION:
Consider this early stage code.
Thar be dragons mate. You were warned!
Audience
The anticipated audience for JVMXRay is two-fold,
Systems AdministratorsIndividuals charged with system security and interested in new methods to gather security inteligence (https://www.kitploit.com/search/label/Inteligence) into Java applications.Security Developers & ArchitectsIndiviudals interested in improved security intelligence (https://www.kitploit.com/search/label/Intelligence) about their applications.
Deploying JVMXRay with Examples
The following provides some basic information to download and compile JVMXRay source on your computer. Remainder of the video shows how to get JVMXRay working with Tomcat and work with Tomcat's examples.
Sample Output...
The output from this technology can be presented in different ways. What does the sample log output look like? Output formats are flexible the following is a sample of the type of information JVMXRay captures for you.-1,-1,1623791226603,main-1,EXIT,1bd99e2f195004a5-5cb63e19-179fd6e8882-8000,,100,,
-1,-1,1623791226603,main-1,LINK,1bd99e2f195004a5-5cb63e19-179fd6e8882-8000,,mylib.dll,,
-1,-1,1623791226619,main-1,FILE_READ_WITH_FILEDESCRIPTOR,1bd99e2f195004a5-5cb63e19-179fd6e8882-8000,,java.io.FileDescriptor@6be46e8f,,
-1,-1,1623791226620,main-1,FILE_READ_WITH_CONTEXT,1bd99e2f195004a5-5cb63e19-179fd6e8882-8000,,redsecuritymanagertest3-11060405012461211247.tmp,java.security.AccessControlContext@363a949e,
-1,-1,1623791226621,main-1,PERMISSION,1bd99e2f195004a5-5cb63e19-179fd6e8882-8000,,org.jvmxray.TestPermission,testpermissionname1,testaction1
-1,-1,1623791226628,main-1,PERMISSION_WITH_CONTEXT,1bd99e2f195004a5-5cb63e19-179fd6e8882-8000,,testpermissionname1,testaction1,org.jvmxray.RedSecurityManagerTest@47f6473
-1,-1,1623791226629,main-1,SOCKET_ACCEPT,1bd99e2f195004a5-5cb63e19-179fd6e8882-8000,,localhost,1234,
-1,-1,1623791226631,main-1,FILE_DELETE,1bd99e2f195004a5-5cb63e19-179fd6e8882-8000,,redsecuritymanagertest6-5182052521633743041.tmp,,
-1,-1,1623791226631,main-1,SOCKET_LISTEN,1bd99e2f195004a5-5cb63e19-179fd6e8882-8000,,123,,
How it Works
The Java Virtual Machine (https://www.kitploit.com/search/label/Virtual%20Machine) provides a robust security framework for controlling access to protected resources. JVMXRay provides an implementation of the java.lang.SecurityManager component, called NullSecurityManager. Ironically, the NullSecurityManager provides no policy enforcement but instead monitors activities to protected resources. It's expected other cloud log processing tools, big data tools, or cloud secuirty tools will process these events into meaningful contextual information.
Project Leader(s)
Milton Smith
New chat information forthcoming.
Benefits
Following is a quick list of some of the more important benefits.
Identify protected resourcesTrack different types of events of interest related to sockets, files, process execution, and more. When an event of interest occurs, process it as you wish. At the moment, adaptors for the system console (https://www.kitploit.com/search/label/Console) (e.g., System.out), logback, and Java Logging, are available with others in process.
No code changes requiredJVMXRay does not require any changes to your application source code to work. The code is pulled into the JVM by a command line (https://www.kitploit.com/search/label/Command%20Line) option. The solution is 100% Java code so it runs anywhere.
Supply chain insightsAn ancilary benefit of not requiring source code is that JVMXRay provides insight into your applications dependencies including 3rd party libraries (e.g. Jar files). Events provide the source of origin where your classes where loaded when the event is generated.
Extensible & OpenDon't see an adapter or filter that works for you and know how to code? Roll up your sleeves and write one. It's extensible. Fix a bug and submit a pull requrest. All the source code is available.INFORMATION:
Consider this early stage code.
Thar be dragons mate. You were warned!
Audience
The anticipated audience for JVMXRay is two-fold,
Systems AdministratorsIndividuals charged with system security and interested in new methods to gather security inteligence (https://www.kitploit.com/search/label/Inteligence) into Java applications.Security Developers & ArchitectsIndiviudals interested in improved security intelligence (https://www.kitploit.com/search/label/Intelligence) about their applications.
Deploying JVMXRay with Examples
The following provides some basic information to download and compile JVMXRay source on your computer. Remainder of the video shows how to get JVMXRay working with Tomcat and work with Tomcat's examples.
Sample Output...
The output from this technology can be presented in different ways. What does the sample log output look like? Output formats are flexible the following is a sample of the type of information JVMXRay captures for you.-1,-1,1623791226603,main-1,EXIT,1bd99e2f195004a5-5cb63e19-179fd6e8882-8000,,100,,
-1,-1,1623791226603,main-1,LINK,1bd99e2f195004a5-5cb63e19-179fd6e8882-8000,,mylib.dll,,
-1,-1,1623791226619,main-1,FILE_READ_WITH_FILEDESCRIPTOR,1bd99e2f195004a5-5cb63e19-179fd6e8882-8000,,java.io.FileDescriptor@6be46e8f,,
-1,-1,1623791226620,main-1,FILE_READ_WITH_CONTEXT,1bd99e2f195004a5-5cb63e19-179fd6e8882-8000,,redsecuritymanagertest3-11060405012461211247.tmp,java.security.AccessControlContext@363a949e,
-1,-1,1623791226621,main-1,PERMISSION,1bd99e2f195004a5-5cb63e19-179fd6e8882-8000,,org.jvmxray.TestPermission,testpermissionname1,testaction1
-1,-1,1623791226628,main-1,PERMISSION_WITH_CONTEXT,1bd99e2f195004a5-5cb63e19-179fd6e8882-8000,,testpermissionname1,testaction1,org.jvmxray.RedSecurityManagerTest@47f6473
-1,-1,1623791226629,main-1,SOCKET_ACCEPT,1bd99e2f195004a5-5cb63e19-179fd6e8882-8000,,localhost,1234,
-1,-1,1623791226631,main-1,FILE_DELETE,1bd99e2f195004a5-5cb63e19-179fd6e8882-8000,,redsecuritymanagertest6-5182052521633743041.tmp,,
-1,-1,1623791226631,main-1,SOCKET_LISTEN,1bd99e2f195004a5-5cb63e19-179fd6e8882-8000,,123,,
How it Works
The Java Virtual Machine (https://www.kitploit.com/search/label/Virtual%20Machine) provides a robust security framework for controlling access to protected resources. JVMXRay provides an implementation of the java.lang.SecurityManager component, called NullSecurityManager. Ironically, the NullSecurityManager provides no policy enforcement but instead monitors activities to protected resources. It's expected other cloud log processing tools, big data tools, or cloud secuirty tools will process these events into meaningful contextual information.
Project Leader(s)
Milton Smith