hacking: security in practice
CIS major, and i'm wondering if anyone here has taken this route?

It seems as its a rather broad program, and I would like to get into cybersecurity. The program only lightly touches on cybersecurity, but at my age of 41 I need to make the best decisions time wise. I guess my questions is, do i finish the 2 year CIS program, or should I bail after a year, and do the 1 year cybersecurity course?

submitted by /u/stepdad666
[link] [comments]

Dark Reading: Attacks/Breaches
Lack of Patching Leaves 300,000 Routers at Risk for Attack

A significant percentage of the 2 million consumer and small-business routers produced by a Latvian firm are vulnerable and being used by attackers, a security firm says.

Dark Reading: Attacks/Breaches
Researchers Explore Microsoft Outlook Phishing Techniques

Outlook features intended to improve collaboration and productivity may make social engineering attacks more effective, researchers find.

Dark Reading: Attacks/Breaches
One-Third of Phishing Pages Active Less Than A Day

Security experts say the first hours in a phishing page's life are the most dangerous for users.
➖ Sent by @TheFeedReaderBot ➖

Hacking on Medium
A Quick Guide to Hack private variables in Solidity

https://cdn-images-1.medium.com/max/1212/1*MxCMmnrJPFHEvRPtvUJFOw.png
For shorter interesting content, follow on twitter: https://twitter.com/polipic1

Continue reading on Coinmonks »

Hacking on Medium
Find command injection in source code

https://cdn-images-1.medium.com/max/758/0*mOzsAEevcqt86y1Z.png
Using Ocular to search for command injection in an application by tracing dataflow

Continue reading on ShiftLeft Blog »

Hacking on Medium
A data breach at Gravatar exposed 167 million profiles. What Does This Imply for You?

https://cdn-images-1.medium.com/max/1502/1*y-OzRfQyDrgq7hehxcwsEg.png
Back in October 2020 Carlo Di Dato, a security researcher, uncovered a method to obtain data about Gravatar users by exploiting a…

Continue reading on Medium »

Hacking on Medium
Reversing and cracking the Chinese, Android-based, Laptop Arcade games

https://cdn-images-1.medium.com/max/2500/1*x4I7D501PgWRFIHcOe8T3A.jpeg
China is cool, man.

Continue reading on Medium »

hacking: security in practice
Are there any privilege escalation tutorials?

For both windows and Linux ive looked around but can't find anything good.

submitted by /u/BigSausajey
[link] [comments]

Open redirects: Easy to detect, Hard to fix
https://thexssrat.medium.com/open-redirects-easy-to-detect-hard-to-fix-8eb535611cd4?source=rss------bug_bounty-5

IntroductionContinue reading on Medium » (https://thexssrat.medium.com/open-redirects-easy-to-detect-hard-to-fix-8eb535611cd4?source=rss------bug_bounty-5)

Black Hat Ethical Hacking
Kali Linux 2021.4 Released – New Themes and Tools, name-that-hash, truffleHog, S3Scanner, KDE Plasma 5.23

https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Kali Linux 2021.4 Released – New Themes and Tools, name-that-hash, truffleHog, S3Scanner, KDE Plasma 5.23Post Views: 185 https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/BECOME-A-PATRON-AND-UNLOCK-EXCLUSIVE-VIDEOS-1.png Reading Time: 4 Minutes
Offensive Security just released their last Kali Linux version, three months after it’s last release, 2021.3, the 2021.4 is here. Coming with support for the Raspberry Pi Zero 2 W, desktop/theme enhancements, Kaboxer theming and more tools. Kali Linux 2021.4 ReleaseWith the end of 2021 just around the corner, we are pushing out the last release of the year with Kali Linux 2021.4, which is ready for immediate download or updating.

The summary of the changelog since the 2021.3 release from September 2021 is:

* Improved Apple M1 support
* Wide compatibility for Samba
* Switching package manager mirrors
* Kaboxer theming
* Updates to Xfce, GNOME and KDE
* Raspberry Pi Zero 2 W + USBArmory MkII ARM images
* More tools
See Also: Complete Offensive Security and Ethical Hacking Course Kali on the Apple M1They announced in Kali 2021.1,that they supported installing Kali Linux on Parallels on Apple Silicon Macs, well with 2021.4, they now also support it on the VMware Fusion Public Tech Preview thanks to the 5.14 kernel having the modules needed for the virtual GPU used. They also have updated the open-vm-toolspackage, and Kali’s installer will automatically detect if you are installing under VMware and install the open-vm-tools-desktoppackage, which should allow you to change the resolution out of the box. As a reminder, this is still a preview from VMware, so there may be some rough edges. There is no extra documentation for this because the installation process is the same as VMWare on 64-bit and 32-bit Intel systems, just using the arm64 ISO.

As a reminder, virtual machines on Apple Silicon are still limited to arm64 architecture only. Extended Compatibility for the Samba ClientStarting Kali Linux 2021.4, the Samba client is now configured for Wide Compatibility so that it can connect to pretty much every Samba server out there, regardless of the version of the protocol in use. This change should make it easier to discover vulnerable Samba servers “out of the box”, without having to configure Kali.

This setting can be changed easily via the command-line tool kali-tweaks. In the Hardeningsection, one can choose the value Default instead, which reverts back to Samba’s usual default, and only allow using modern versions of the Samba protocol. https://www.kali.org/blog/kali-linux-2021-4-release/images/kali-tweaks-hardening.png As one can see on this screenshot, there’s also a similar setting for OpenSSL. You might want to refer to the 2021.3 release announcement for more details on this setting.
See Also: New Windows zero-day with public exploit lets you become an admin Easy Package Manager Mirror ConfigurationBy default, when a Kali system is updated, the package manager (APT) downloads packages from a community mirror nearby. But did you know that it’s also possible to configure Kali to get its package from the CloudFlare CDN? To be honest, this is old news. But what’s new is that you can now use kali-tweaksto quickly configure whether APT should use community mirrors or the CloudFlare CDN. https://www.kali.org/blog/kali-linux-2021-4-release/images/kali-tweaks-mirrors.png So which one is best, community mirrors or CloudFlare CDN? There’s n[...]