Dark Reading: Attacks/Breaches
US Indicts Iranian Nationals for Cyber-Enabled Election Interference

Among other things, the pair pretended to be Proud Boys volunteers and sent in a fake video and emails to Republican lawmakers purporting to show Democratic Party attempts to subvert the 2020 presidential elections.

Dark Reading: Attacks/Breaches
3 Takeaways from the Gartner Risk Management Summit

Security leaders can be treated as partners supporting the business and share accountability by establishing relationships with business stakeholders.

Hacking on Medium
11 bibliotecas maliciosas de PyPI Python atrapadas robando tokens de discordia e instalando shells

https://cdn-images-1.medium.com/max/1646/0*gyeAtgO-SHV9zIST
PUBLICADO EN 19 NOVIEMBRE, 2021POR DPAB

Continue reading on Medium »

2FA Bypass Methodologies
https://bhansalipratish.medium.com/2fa-bypass-methodologies-25504dda13dd?source=rss------bug_bounty-5

Hello folks!! Hope you are doing good… I’m back with another blog after a long time… pretty long time tbh. For all the beginners who are…Continue reading on Medium » (https://bhansalipratish.medium.com/2fa-bypass-methodologies-25504dda13dd?source=rss------bug_bounty-5)

hacking: security in practice
Did I get hacked just by watching a youtube livestream??

I may be overreacting, but I was watching a livestream of a man playing Don't Starve Together when my mother texted me to ask if I wanted any food from Wendy's. Just then in the live chat someone said "oh nice Wendy's, can I get a coke and some nuggets?"

Did they somehow read my text message??? Is this even possible? No one mentioned Wendy's in the livestream so I'm pretty freaked out

submitted by /u/birdlady404
[link] [comments]

hacking: security in practice
What can I do on my schools private wifi?

So I got access to the teacher wifi. I found out that I can control the school speakers via Chromecast. What more do you think I can exploit? Do you think I can change the wifi name to prank my school more?

submitted by /u/alekstherussian
[link] [comments]

hacking: security in practice
How to MITM with Android Hotspot (WiFi Sharing) ?

As I mentioned in the title, there are some beginner apps like zAnti and some other, those are working well but they only work if you are connected to a vulnerable wifi network. I want to know if it is possible to create an access point via setting up a mobile hotspot and then doing the mitm attacks on it ? I'm a beginner but if I create the access point, shouldn't it be easier to modify the packets those others are interacting with ?

submitted by /u/cuccolboi
[link] [comments]

hacking: security in practice
A friend of mine is hacked; what can we do?

Hi,

Let's dive into the story, I sincerely hope that I can get some advice on what to do next. So a friend of mine, he and his family, are getting constantly harassed by someone unknown. It seems that at least one of their devices is hacked, considering the hacker is able to tell whenever they get notifications on their phones and is able to extract personal data (Photo's, phone calls etc.) from their phones. I have told them to reset their phones, wipe everything off and go from there - but I am not entirely sure if that will seal the deal.

What we know is that the hacker utilizes Linux kali, and has access to personal data on several devices, ranging from iPhone to Samsung devices. He is able to tell anything that they do on their phones and is able to see notifications. Additionally, it seems that he infected the network as well considering he could tell whenever a phone was not connected to the network. He has a wide array of information, therefore it seems that he is well equipped.

I am not entirely sure what to do and the authorities are aware of the situation, however, they will not really do anything. I would appreciate your help, considering the harassment gets worse and some actually do worry about their safety.

Thanks,

submitted by /u/ElXanthaes
[link] [comments]

Nosferatu - Lsass NTLM Authentication Backdoor

Lsass NTLM Authentication BackdoorHow it WorksFirst, the DLL is injected into the lsass.exe process, and will begin hooking authentication WinAPI calls. The targeted function is MsvpPasswordValidate(), located in NtlmShared.dll. In the pursuit of not being detected, the hooked function will call the original function and allow for the normal flow of authentication. Only after seeing that authentication has failed will the hook swap out the actual NTLM hash with the backdoor hash for comparison.UsageNosferatu must be compiled as a 64 bit DLL. It must be injected using the a DLL Injector with SeDebugPrivilege.You can see it loaded using Procexp: Login example using Impacket:LimitationsIn an Active Directory environment, authentication via RDP, runas, or the lock screen does not work with the nosferatu password. Authentication using SMB, WinRM, and WMI is still possible.In a non-AD environment, authentication works for all aspects.Download Nosferatu
Read more...

Dark Reading: Attacks/Breaches
US Banks Will Be Required to Report Cyberattacks Within 36 Hours

There is currently no specific time frame during which banks must report to federal regulators that a security incident had occurred. A new notification rules changes that to 36 hours.

2FA Bypass Methodologies

Hello folks!! Hope you are doing good… I’m back with another blog after a long time… pretty long time tbh. For all the beginners who are…Continue reading on Medium »
Read more...

Hacking on Medium
RCE with Server-Side Template Injection

https://cdn-images-1.medium.com/max/2600/1*jTOjIeK0cA7v-osM5Yl6bA.jpeg
Python Flask Application with Jinja2 Template —  Doctor HTB machine

Continue reading on R3d Buck3T »

( $1000 ) Insecure direct Object References (IDOR) Via TakeOver Unsubscribe Feature
https://aidilarf.medium.com/1000-insecure-direct-object-references-idor-via-takeover-unsubscribe-feature-52eb2de1f9f3?source=rss------bug_bounty-5

Assalamualaikum Bug Hunter & Hi everyone.Continue reading on Medium » (https://aidilarf.medium.com/1000-insecure-direct-object-references-idor-via-takeover-unsubscribe-feature-52eb2de1f9f3?source=rss------bug_bounty-5)

hacking: security in practice
How do UAV GPS spoofing attacks work in very simple terms?

Trying to understand about them but I don't get how they are executed and how can someone protect the system from GPS spoofing

submitted by /u/Br3ikros
[link] [comments]