Dark Reading: Attacks/Breaches
US Banks Will Be Required to Report Cyberattacks Within 36 Hours

There is currently no specific time frame during which banks must report to federal regulators that a security incident had occurred. A new notification rules changes that to 36 hours.

2FA Bypass Methodologies

Hello folks!! Hope you are doing good… I’m back with another blog after a long time… pretty long time tbh. For all the beginners who are…Continue reading on Medium »
Read more...

Hacking on Medium
RCE with Server-Side Template Injection

https://cdn-images-1.medium.com/max/2600/1*jTOjIeK0cA7v-osM5Yl6bA.jpeg
Python Flask Application with Jinja2 Template —  Doctor HTB machine

Continue reading on R3d Buck3T »

( $1000 ) Insecure direct Object References (IDOR) Via TakeOver Unsubscribe Feature
https://aidilarf.medium.com/1000-insecure-direct-object-references-idor-via-takeover-unsubscribe-feature-52eb2de1f9f3?source=rss------bug_bounty-5

Assalamualaikum Bug Hunter & Hi everyone.Continue reading on Medium » (https://aidilarf.medium.com/1000-insecure-direct-object-references-idor-via-takeover-unsubscribe-feature-52eb2de1f9f3?source=rss------bug_bounty-5)

hacking: security in practice
How do UAV GPS spoofing attacks work in very simple terms?

Trying to understand about them but I don't get how they are executed and how can someone protect the system from GPS spoofing

submitted by /u/Br3ikros
[link] [comments]

hacking: security in practice
Iranian Hackers Broke Into Newspaper Publisher Lee Enterprises Ahead of 2020 Election

https://external-preview.redd.it/7E4y0rawHjbwGFbR-cnNKbaVIhjtV-xrWN5V72MceKk.jpg?width=640&crop=smart&auto=webp&s=a9624685225a4142e87b95c53d95cb9b66c4fab1 submitted by /u/eis3nheim
[link] [comments]

hacking: security in practice
Would anyone be interested in joining a small community of makers?

Hi All,

I have started a small community to bring all kinds of makers together and I was wondering whether anyone here would be interested to join? I think a combination of developers, designers and marketing people would be awesome so I'm hoping to get that going xD

https://discord.gg/ncRsYT33uG

submitted by /u/MCtoUMD
[link] [comments]

hacking: security in practice
Turning Windows Defender off in cmd = Trojan???

Hello, I have recently grown interested in pen testing and have been using my laptop as a victim for my rubber ducky scripts. However, any time I try and turn off windows defender via command line, whether through a ducky payload or myself, windows defender detects it as a Trojan. I'd like to infect my laptop with my ransomware with my rubber ducky, but cannot seem to get around this. Any ideas?

submitted by /u/Gravy69420
[link] [comments]

A collection of keys I've acquired over the years as a telecom guy and a couple I recently got from ebay. Also, no I don't reprogram the magstripe on the old hotel keycard...I just use it to slip door latches and punch ethernet cable into cat5e/cat6 jacks instead of chewing up my own bank/ID cards
https://www.reddit.com/r/Pentesting/comments/qxyozq/a_collection_of_keys_ive_acquired_over_the_years/

submitted by /u/519meshif (https://www.reddit.com/user/519meshif)
[link] (https://imgur.com/abPKlux) [comments] (https://www.reddit.com/r/Pentesting/comments/qxyozq/a_collection_of_keys_ive_acquired_over_the_years/)

Hacking on Medium
Permit me to introduce you all to a well efficient, gifted and reliable hackers.

Continue reading on Medium »
➖ Sent by @TheFeedReaderBot ➖

Help pls
https://www.reddit.com/r/Pentesting/comments/qy2onx/help_pls/

<!-- SC_OFF -->I am Moroccan and I live in Morocco can i work remotely with US company without visa and do my salary have change because i live in morocco ? <!-- SC_ON --> submitted by /u/fenixnni (https://www.reddit.com/user/fenixnni)
[link] (https://www.reddit.com/r/Pentesting/comments/qy2onx/help_pls/) [comments] (https://www.reddit.com/r/Pentesting/comments/qy2onx/help_pls/)

( $1000 ) Insecure direct Object References (IDOR) Via TakeOver Unsubscribe Feature

Assalamualaikum Bug Hunter & Hi everyone.Continue reading on Medium »
Read more...

pwnSpoof - Generates realistic spoofed log files for common web servers with customisable attack scenarios
http://www.kitploit.com/2021/11/pwnspoof-generates-realistic-spoofed.html

___________________________
@hacking_Attack
@Hacking_Video