hacking: security in practice
Airtel Xstream Fiber WPA/WPA2 Hack

submitted by /u/U1karsh
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Python Cybersecurity - Network Tracking using Wireshark and Google Maps

https://external-preview.redd.it/ye4UqtaM6Gr1qiyuNmko3MUjkuB5HcHvdoNqbeaBH0E.jpg?width=320&crop=smart&auto=webp&s=8af92600d8101a9b06fbe32c747097a1ecdd2cf0 submitted by /u/Best_Fold_2554
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking Articles
Explore Hackthebox Walkthrough

“Explore” is a Capture the Flag challenge that we’ll be solving today. (HTB) Hack the Box is where you can get your hands on one,

The post Explore Hackthebox Walkthrough appeared first on Hacking Articles.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
5 Ways GRC & Security Can Partner to Reduce Insider Risk

In 2022, data governance, risk, and compliance (GRC) and security need to partner to implement a modern approach to data protection: insider risk management.

Dark Reading: Attacks/Breaches
The Dark Web Has Its Own People's Court

Many underground forums have processes for arbitrating disputes between cybercriminals.

Dark Reading: Attacks/Breaches
DigiCert Advances Passwordless Authentication with Support for Windows Hello for Business

Managing Windows Hello hybrid certificate trust model on DigiCert PKI platform streamlines enterprise passwordless authentication and access, an industry first for public Certification Authorities (CAs).

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Virtual-Network Vulnerability Found in AWS, Other Clouds

The privilege-escalation flaws affect Amazon WorkSpaces and more than a dozen services that use a particular implementation of USB over Ethernet.

Dark Reading: Attacks/Breaches
Rubrik's New Managed Service Protects Data from Ransomware Attacks

Rubrik Cloud Vault provides data recovery assurance against ransomware attacks for Microsoft Azure customers, even if they maintain a hybrid environment.

Dark Reading: Attacks/Breaches
Cerberus Sentinel Announces Acquisition of Arkavia Networks

U.S. cybersecurity services firm expands internationally into Latin America.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Google Disrupts Botnet Targeting Windows Machines

The company has also launched litigation against the Glupteba botnet, marking the first lawsuit against a blockchain-enabled botnet.

___________________________
@hacking_Attack
@Hacking_Video

Pentesting Book Recommendations
https://www.reddit.com/r/Pentesting/comments/rbayjj/pentesting_book_recommendations/

Webdev here looking to learn more about security in general. What books do you recommend I dig into? submitted by /u/sambomambowambo (https://www.reddit.com/user/sambomambowambo)
[link] (https://www.reddit.com/r/Pentesting/comments/rbayjj/pentesting_book_recommendations/) [comments] (https://www.reddit.com/r/Pentesting/comments/rbayjj/pentesting_book_recommendations/)

___________________________
@hacking_Attack
@Hacking_Video

Hacking Articles|Raj Chandel's Blog
Explore Hackthebox Walkthorugh

"Explore" is a Capture the Flag challenge that we'll be solving today. (HTB) Hack the Box is where you can get your hands on one, this box is based on ADB (Android Debug Bridge). So, let’s get started and learn how to break it down successfully. So, let's get started and learn how to split it down effectively. Pentesting Methodology· Port Scanning & Enumeration· Exploitation· Privilege Escalation Nmapnmap -p- -sV 10.129.198.246https://blogger.googleusercontent.com/img/a/AVvXsEhlXOSVcNFAaX64tKsKltt8glvxbQ91HexcxLWu5FC_yicPbJ1LNbuTiELMwYZemwhbATYK3YeNh2a7nsiZQ7H554HBzByQ0zpOIGPgA9azAB5CXEWsngs88dRz0W_m-lixc1lDxMb95e3n4KRA81f4_GeAJJQYSfXZNpBXJ6MMSmaEtL42dBw-qk-YDA=s16000 According to the nmap output, we geton port 2222 SSH server runningon port 59777HTTP service runningon port 5555 a TCP service running While searching for port 59777 on the internet, we come up with the following GitHub as the first resultExploitationCopy the path from the GitHub URL to our Kali System so that we may get the file.git clone https://github.com/fs0c131y/ESFileExplorerOpenPortVuln list https://blogger.googleusercontent.com/img/a/AVvXsEj16IaXaqyvPhbRAbkZcKW4LqE7ZxKm0vyn7EiWnXWmMCiKnejZutiuvP8BqKdzL3YrMwwyPrQUmsZBBmb65HenOHaD-sUewD_OTIt76U3TVTHPbb-Z3lh7oiBcPw5WqgoGNkpXDC3xSFLhYoWcS1mWVEzafJL3HfW99ab9N7DyEqI4TSTLBCRWb5Od3A=s16000 There is a python exploit script that we can use to see if anything can be found. We get the creds.jpg file, the name "creds" gives us an indication that it may include the credentials, which are the login id and password that may be used for SSH later on.python poc.py --cmd listPics --ip 10.129.198.246 -g /storage/emulated/0/DCIM/creds.jpg --ip 10.129.198.246https://blogger.googleusercontent.com/img/a/AVvXsEjXT03AWFh7ZTgdl68fPMIs9M_7EW2rjGxsB6tWvy1dI_cT5mRlI0hLKQ36MOvG0p7z7rAuXikemQdHNpoqAiPLAObJCTFx5yDPLKlIyBX1TGO0LbrAm35hJaHEXR2TN6yXdvJrglcKRUVsstV57Vju1pOwJvbuklsEDPUI-7HUxSAPO2JTm3e181HRpQ=s16000 Ahh, the file seemed to contain a username and password.Username: KristiHaving remembered that an SSH port was open on 2222, I attempted to SSH into the machine using these credentials.ssh kristi@10.129.198.246 -p 2222https://blogger.googleusercontent.com/img/a/AVvXsEhazVbLwOpRyN55X_oOmjLBDPq6tqi3CJwWjmnvHJmP67mH1dgxZoeUjyOFrwdeSMD4Q8NqAw-A4htlf32vv0t77j5Gh5fVtyUf8zMNxP9FMVfPq20HeuinQ14uKTc4UOUt89xqTs3iVwlBMHyl--eFdxp5YYhV7nfZGoTkgDL7wmWw34Tcg8oKWxRJKg=s16000 Privilege EscalationAn ADB service is running on port 5555, and we have SSH access. Allow ADB to run on the device by configuring SSH port forwarding.ssh kristi@10.129.198.246 -p 2222 -L 5555:localhost:5555https://blogger.googleus[...]

___________________________
@hacking_Attack
@Hacking_Video

ercontent.com/img/a/AVvXsEhsYeDNai_E9Y-1Mxs-c3XM6RC9-iI1l-8eRF0pA78pcqHShkHgGQ_yI5zk-8zYItMysNdyhgTZsTaydPkgWJeiOWnmfRniKS4qfJkj9QAD6-bVrSvswEdSRABLlfgejHYmg9MzekhbRbjjw0xpSyFGAvQJr5kawGMkQFSdhcNaiccMd6f2FK8SqmFDtQ=s16000 After configuring port forwarding, I can run ADB commands, obtain a shell, elevate the shell to root, and search for the root.txt file.Note:If you don’t have an ADB installed in your Kali Machine, use the command:apt install adbIn order to connect with adb use the following command:adb connect 127.0.0.1:5555In order to get the shell, execute the command given below, as we have already established a connection.adb -s 127.0.0.1 shell

___________________________
@hacking_Attack
@Hacking_Video

Multiple Vulnerabilities in AWS and Other Major Cloud Services
https://www.reddit.com/r/redteamsec/comments/rbde9d/multiple_vulnerabilities_in_aws_and_other_major/

submitted by /u/GHIDRAdev (https://www.reddit.com/user/GHIDRAdev)
[link] (https://www.sentinelone.com/labs/usb-over-ethernet-multiple-privilege-escalation-vulnerabilities-in-aws-and-other-major-cloud-services/) [comments] (https://www.reddit.com/r/redteamsec/comments/rbde9d/multiple_vulnerabilities_in_aws_and_other_major/)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How hard is it actually to hack WiFi?

I feel very confused on this topic. Because when I hear stories about people hacking using their neighbours WiFi or something like that, they always make it seem like it is the easiest thing in the world.

And I am just curious as to how easy it would be for a thread actor to hack into a normal house holds WiFi?

submitted by /u/Galaxygon
[link] [comments]
➖ Sent by @TheFeedReaderBot ➖

___________________________
@hacking_Attack
@Hacking_Video