Hacking on Medium
Los errores de escucha en los chips de MediaTek afectan al 37% de todos los teléfonos inteligentes…

https://cdn-images-1.medium.com/max/1449/0*Sltv7sRWxeLe5_lD
PUBLICADO EN 24 NOVIEMBRE, 2021POR EHACKING

Continue reading on Medium »

Hacking on Medium
Introduction To Bash For System Administration and Bug Bounty Hunting

https://cdn-images-1.medium.com/max/800/0*sXJwYCOxOy9doASh
Suggested Entry-Point/Pre-Requisite For My Series: Designing, Developing, and Automating a Distributed System That Will Be Geared For Bug…

Continue reading on Medium »

Hacking on Medium
Retos y soluciones de Ciberseguridad para Pymes

[Video] Seminario web

Continue reading on Medium »

Hacking on Medium
IDOR — O QUE É ? E COMO FUNCIONA.

https://cdn-images-1.medium.com/max/960/1*dMbMsfcu5cYnBFQqBk0Nyw.jpeg
O que é IDOR ?

Continue reading on Medium »

hacking: security in practice
Obfuscating Beacon Traffic (Red Team)

I am starting to notice that Cobalt Strike Beacons are getting burned or DOA more and more -- I am wondering if CS is the new mertepreter, or am I just having opsec problems. I'd be interested to know if anyone else has had this issue over the last couple of months - thanks.

submitted by /u/morg43
[link] [comments]

hacking: security in practice
Can i "reverse engineer" such website ?

So there's this website that has an input form and once submitted it returns recent chat history of some social app l, is there a proper way to know what's being done in the background ? All ik so far is it submits the form to same page and figured out the request parameters

submitted by /u/iiMoe
[link] [comments]

hacking: security in practice
Is ethical hacking legal for countering threats?

I’ve recently had people on Snapchat and TikTok tell me that they have my IP and that they would DDoS me. Although it was not my actual IP I have possession of their IPs. If I were to give them their IPs would that be illegal?

submitted by /u/flamestamed
[link] [comments]

Redherd Framework -A Collaborative And Serverless Framework For Orchestrating A Geographically Distributed Group Of Assets
http://www.kitploit.com/2021/11/redherd-framework-collaborative-and.html

RedHerd is a collaborative and serverless (https://www.kitploit.com/search/label/Serverless) framework for orchestrating a geographically distributed (https://www.kitploit.com/search/label/Distributed) group of assets capable of conducting simulating complex offensive cyberspace operations.
Getting StartedTake a look at the RedHerd documentation (https://redherd.readthedocs.io/) for instructions on how to getting started with the framework.Cite this workIf you use RedHerd Framework for your research (https://www.kitploit.com/search/label/Research) activity, cite the following paper published by MDPI (Multidisciplinary Digital Publishing Institute) https://www.mdpi.com/2624-6120/2/4/38LinksHereafter, some interesting links referred to the project:DockerHub repository (https://hub.docker.com/u/redherd)YouTube channel (https://www.youtube.com/channel/UCYSM51oldVsryhZxGdB3hXA)Twitter profile (https://twitter.com/RedHerdProject)ChangelogGo to CHANGELOG (https://github.com/redherd-project/redherd-framework/blob/main/CHANGELOG.md) to see all the version changes.LicenseThis project is under the MIT license.Contact usFeel free to contact us at this e-mail address:

DisclaimerThe provided contents and tools are for awareness and research purposes only. Our target audience is composed of those interested in learning about Ethical Hacking, Security, Penetration Testing (https://www.kitploit.com/search/label/Penetration%20Testing) and Red Teaming. We are not responsible for any inappropriate or illegal usage of both proposed material and discussed topics.FundingThis is a non-profit project which received neither funding nor sponsorship.

Download Redherd-Framework (https://github.com/redherd-project/redherd-framework)

KitPloit - PenTest Tools!
Redherd Framework -A Collaborative And Serverless Framework For Orchestrating A Geographically Distributed Group Of Assets

https://blogger.googleusercontent.com/img/a/AVvXsEjN9ud6tb9Sk6bU6R_3sNK6x0cHeJ6xKXQped-7euO0xvUp0xMYVL5Qh9LsuU37QgA0CbViR_0HpxFM1kvifzaqj_hW8E8geT5kKIXUYIJtyGi7xWboCL7T12H54WHJA3Wj7oGX_WsbVpB6i4f5Ad98y5BDeyJ3l8sS3YnR_n52UVeRVlN4jaJG7vzfoQ=w640-h178
RedHerd is a collaborative and serverless framework for orchestrating a geographically distributed group of assets capable of conducting simulating complex offensive cyberspace operations.
Getting Started

Take a look at the RedHerd documentation for instructions on how to getting started with the framework.

Cite this work

If you use RedHerd Framework for your research activity, cite the following paper published by MDPI (Multidisciplinary Digital Publishing Institute) https://www.mdpi.com/2624-6120/2/4/38

Links

Hereafter, some interesting links referred to the project:

* DockerHub repository
* YouTube channel
* Twitter profile

Changelog

Go to CHANGELOG to see all the version changes.

License

This project is under the MIT license.

Contact us

Feel free to contact us at this e-mail address:

https://blogger.googleusercontent.com/img/a/AVvXsEhUigJBh1lPrNHjqum3ewniks9Apcwx9lGKZ5b7AJ1HV0J4An9vUoPpPli4HMYFVosML-7dOp-dS3KP3oh7RodKzdKIXpY3o2R8H50BJgZYB7ZVfIPuXdCLZDvxAIgy3FJW8NgZohJRi6Pj-JILBi6y0ow8va7xo2-RJwwy2wJ72k3zcuJpsI8KiJpuFQ=s320
Disclaimer

The provided contents and tools are for awareness and research purposes only. Our target audience is composed of those interested in learning about Ethical Hacking, Security, Penetration Testing and Red Teaming. We are not responsible for any inappropriate or illegal usage of both proposed material and discussed topics.

Funding

This is a non-profit project which received neither funding nor sponsorship.
Download Redherd-Framework

Dark Reading: Attacks/Breaches
OpenText Acquires Bricata

The acquisition adds next-generation network detection and response technology to OpenText Security & Protection Cloud.

Dark Reading: Attacks/Breaches
How Threat Actors Get Into OT Systems

The convergence and integration of OT and IT has resulted in a growing number of cyber-risks for critical infrastructure. Here are some of the ways attackers are targeting operational technology systems.

Dark Reading: Attacks/Breaches
MediaTek Chip Flaw Could Have Let Attackers Spy on Android Phones

MediaTek systems-on-a-chip are embedded in more than one-third of smartphones and IoT devices around the world.