hacking: security in practice
Print nightmare still relevant in December?

Is it still a thing now? Or did windows finally patch it?

submitted by /u/jflaster
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Am I being realistic?

I posted this in cyber security sub but I figure it may be worth posting here too.

Hi everyone,

32 years old. I used to do a lot of website hacking and WiFi hacking back in highschool. The school still doesn’t know who got into their system via ftp and changed their website.

I had a neighbor who taught me a lot about computers after he heard I was very much interested in them. That’s where it all started really. Parents didn’t like that I was interested in cyber security given that at the time I was a bit of a trouble maker. Nothing serious just a typical angsty teenager. I got pushed into the biotech direction and did really well for myself. I’m a really curious person and very good at math. Engineering degree from an Ivy League school and a PhD in physics from another Ivy League school. Worked at 3 different biotech companies and my last job I was in charge of the R&D dept. I along with a few other people, I have been let go by the company. (My reason was for complaining to HR about a some toxic stuff that was going on. Don’t complain to HR I guess). Over the past 2 years my love for cyber security came back and I spent the last two years on try hack me and hack the box. I can fair pretty well with medium leve difficulties with out needing any hints or struggling for days on end. I can code in python, and build websites. I understand how many of the popular hacking tools work. I like to understand how the tools work before even using it.

My physics degree has given me so much math experience I can appreciate cryptography. Most importantly, thanks to all the online resources, I’ve been able to learn a lot and practice cyber security in a safe and legal way.

I’m at a point now where after a tough personal year (lost my father due to covid, house flooded due to a hurricane, and now getting laid off) I am looking to do the other things in life I’m passionate about because life is short and I may as well do things that make me happy.

Given my career experience my resume obviously does not show I have any field experience in cyber security outside of me mentioning that I do CTF’s. I plan on going for security+ since I am pretty comfortable with networks although I can see doing network+ or something similar help me get a foot in the door.

I guess my question is: How realistic is it for me to do a career change? Should I prove myself with certs first? The wiki on some of the sub Reddits are really helpful and I am just wondering if I’m being realistic or not. Should I just keep this as a hobby and chase the next biotech position?

Signed - a very burnt out 10 year biotech veteran who loves the problem solving cyber security requires.

submitted by /u/BodySmell
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Compromising the email supply chain of 190 Australian organisations through a single IT Managed Service Provider

submitted by /u/DrinkMoreCodeMore
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Brainstorming ideas for creating human like social media bots.

submitted by /u/estrojennnn
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Hacking a scammer ??

Hey there everyone, long story short someone very clever scammed my mom via email posing as her boss, out of a good amount of money. I have their email and I emailed them basically “interested” in partaking in their scam and they’re now eagerly awaiting my response. They are sending their emails via “my mail” app My question is: are there any ways I could find them (probably not) and if not, then fuck with them, like by sending a virus posed as a photo or something? Or anyone out there want to fuck with them on behalf of everyone who’s been scammed? If at the very least I’m going to send them a nice pic that’s not the gift cards they’re expecting lol Reddit help me revenge pls n thanks :)

submitted by /u/thirsty--
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
VMware Carbon Black MDR Helps Analysts Respond to Attacks

Carbon Black’s new managed detection and response solution monitors endpoints and workloads, freeing up security teams to understand the different types of attacks that might be heading their way.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
APT Groups Adopt New Phishing Method. Will Cybercriminals Follow?

APT actors from Russia, China, and India have been observed using the RTF-template injection technique that researchers say is poised for wider adoption.

Dark Reading: Attacks/Breaches
Neustar Security Services Spins Out as Own Company

The company plans to offer newly integrated services into its Ultra Secure portfolio and expand its sales, marketing, and service capabilities.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Military Vets Share Lessons That Helped Them Build Infosec Startups

Startup founders say serving in the military taught them how to defend against cyberattacks and how to build teams. These lessons are serving them well as they run their own companies.

Dark Reading: Attacks/Breaches
Russian Man Sentenced to 60 Months in Prison for Running 'Bulletproof' Hosting for Cybercrime

Service hosted Zeus, SpyEye, Citadel, Blackhole Exploit Kit malware aimed at US companies and financial institutions.

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Deciphering A Caesar Cipher with Python

https://cdn-images-1.medium.com/max/600/1*XyBRlIjzQK1Z7SJJLdWmng.png
Caesar ciphers map out characters to other characters based on a number key chosen by the designer of the Caesar cipher. There are many…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Sorry for the wait..

https://cdn-images-1.medium.com/max/1132/0*0LqE4AOAoYzS3oNX
A huge part of my study schedule is working out before I sit down for hours. I highly suggest this! Not only for health and…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Is it Really that possible? Hacking so many passwords in such little time.

This Article scares me and I gotta know if this is actually a thing that is easy for people to do.

submitted by /u/gajandran619
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
What’s the point of unshadow vs cracking directly?

After using John to crack passwords directly from the hashed password as well as combing the passwd and shadow file and I’m wondering why we use unshadow/or any benefits.

I’ve read a couple reasons but there didn’t seem to be a consensus why or if one method was better than others.

Some said unshadow also takes the GECOS field and uses it for key words.

Others said John was written before there was a separate shadow file and the passwd file stood alone. So John was designed to crack a single combined file.

Anyway…what gives?

submitted by /u/space_wiener
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Black Hat Ethical Hacking
Microsoft Exchange servers hacked to deploy BlackByte ransomware

https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Microsoft Exchange servers hacked to deploy BlackByte ransomwarePost Views: 118 https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/BECOME-A-PATRON-AND-UNLOCK-EXCLUSIVE-VIDEOS-1.png Reading Time: 1 Minute
The BlackByte ransomware gang is now breaching corporate networks by exploiting Microsoft Exchange servers using the ProxyShell vulnerabilities.
ProxyShell is the name for a set of three Microsoft Exchange vulnerabilities that allow unauthenticated, remote code execution on the server when chained together.

These vulnerabilities are listed below and were fixed by security updates released in April and May 2021:

* CVE-2021-34473 – Pre-auth Path Confusion leads to ACL Bypass (Patched in April by KB5001779)
* CVE-2021-34523 – Elevation of Privilege on Exchange PowerShell Backend (Patched in April by KB5001779)
* CVE-2021-31207 – Post-auth Arbitrary-File-Write leads to RCE (Patched in May by KB5003435)

Since researchers disclosed the vulnerabilities, threat actors have begun to exploit them to breach servers and install web shells, coin miners, and ransomware.
See Also: Complete Offensive Security and Ethical Hacking Course BlackByte begins exploiting ProxyShellIn a detailed report by Red Canary, researchers analyzed a BlackByte ransomware attack where they saw them exploiting the ProxyShell vulnerabilities to install web shells on a compromised Microsoft Exchange server.

Web Shells are small scripts uploaded to web servers that allow a threat actor to gain persistence to a device and remotely execute commands or upload additional files to the server.
https://www.bleepstatic.com/images/news/security/webshell-example.jpg
BlackByte is still a severe threatWhen conducting ransomware attacks, threat actors commonly use third-party tools to gain elevated privileges or deploy the ransomware on a network.

However, the actual BlackByte ransomware executable plays a central role as it handles both privilege escalation and the ability to worm, or perform lateral movement, within the compromised environment.

The malware sets three registry values, one for local privilege elevation, one for enabling network connection sharing between all privilege levels, and one to allow long path values for file paths, names, and namespaces.

Before encryption, the malware deletes the “Raccine Rules Updater” scheduled task to prevent last-minute interceptions and also wipes shadow copies directly through WMI objects using an obfuscated PowerShell command.

Finally, stolen files are exfiltrated using WinRAR to archive files and anonymous file-sharing platforms such as “file.io” or “anonymfiles.com.”

Although Trustwave released a decryptor for BlackByte ransomware in October 2021, it is unlikely that the operators are still using the same encryption tactics that allowed victims to restore their files for free.

As such, you may or may not be able to restore your files using that decryptor, depending on what key wa[...]

___________________________
@hacking_Attack
@Hacking_Video