Hacking on Medium
Upgrading dependencies doesn’t have to suck

https://cdn-images-1.medium.com/max/600/0*rcTaMHHJapBQ1mrZ
A painless, automated process for upgrading dependencies

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Tell Don’t Ask

https://cdn-images-1.medium.com/max/1024/1*VVtOEAagdZk4m3_p1uA7sQ.png
Avoid buggy code with this rule of thumb

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
PoC del CVE-2021–44228 / Log4shell.

https://cdn-images-1.medium.com/max/626/1*ljh1RbcjCFg6usOrsIF0eA.png
Esta vulnerabilidad conocida como “Log4shell” afecta a la librería Log4j de Java y da como resultado ejecución remota de comandos en las…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How did the hacker get away from the police?

He ransomware.

submitted by /u/DrinkMoreCodeMore
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

https://b.thumbs.redditmedia.com/oR2k8C2PfKXPN2FQ-3Pr2Ng4QdsJyUA8j79lMm9lZow.jpg submitted by /u/JeremyMcFake
[link] [comments]

hacking: security in practice
How do I get started with hacking?

I’ve always wanted to learn how to hack, to let you guys know I’m an absolute beginner and I’ve a little knowledge about computers. So I’d really appreciate if you can provide any roadmaps from a beginners perspective. Any resources related would be highly appreciated. And to add what machine do I need to get started, Thanks in advance!

submitted by /u/notpasta_bowl
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
What would you do with an old laptop?

I got an old ThinkPad T410s in my hands. 4Gb RAM IntelCore i5, SSD 140Gb. Currently running a minimalist artix linux build on it.

What would you do with such laptop? How would you tinker with it? Other then just sell it etc etc.

Would love to hear some tinkering ideas. I would like to have some fun learning something "under the hood" and stuff.

If no ideas come to mind I am just going to run a Tor relay on it.

So yea if you got any ideas please share ;)

submitted by /u/theonlymoby
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
TryHackMe — Source Walkthrough

https://cdn-images-1.medium.com/max/2560/0*cBzaaPqNQX4yuWg2.jpg
Step by step guidance

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Is it possible to obtain data from a dead Android mobile phone?

Hello.

For context, my mobile phone fell from my hand a few days ago and the screen display broke. Total black screen. I don't want to get it fixed because, honestly, it's not worth it; I would have to pay more than its worth.

I still have my data on it (128 GB filled to the brim). Is there a way to access this data while the phone is turned off (or just no access to settings)?

Keep in mind that, when on, it asks for permission for the computer to access the data. Also, I think USB Debugging is on, but honestly I can't be sure.

Any help would be very much appreciated.

submitted by /u/LebaneseBatman
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
What is your home lab like?

I am just curious what your home security labs are like and what tools and setups you have for gaining knowledge. Yes Kali is probably a staple but let me know how you are doing it and is you can please share how it is working for you. Thanks.

submitted by /u/FTHomes
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

https://b.thumbs.redditmedia.com/bjzsMK1Wrkynzl3vaQgfHCvpesxkFzHOYCpVd4T6whg.jpg Background:

My organization uses an appliance that supports SSL certificates but doesn't seem to be accepting any PEM or PFX certs my CA generates (or OpenSSL certs or even online certs). I am pretty sure their code is broken (web app their device uses returns 500 error with the image below).

​

https://preview.redd.it/llr6i9veg7581.png?width=1207&format=png&auto=webp&s=80d3df8cc91adf708ea1962334b9ff8781e24a95

What I'm Trying:

I'd like to know what importcert.sh is actually doing.

The vendor, ZKTeco (Atlas Access Control), has downloads of its firmware freely available that I'd like to try and reverse engineer to see if I can understand what this script is trying to do.

The Ask:

Since I don't know what this hardware is even running (I may crack open a unit tomorrow to see), I'm curious if there's tooling that might help me inspect the patch file (beyond simply hex editor) and determine if its something I can tease apart and get a better idea of what they're doing.

Their support has basically said "we don't help customers with this" and their e-mail responses have indicated they literally have no idea of certificates and PKI works.

Any other resources would be highly appreciated. Thanks

submitted by /u/thevfguy
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
What software can spoof/unspoof a SSD?USB drive?

I have what I think is a spoofed SSD, and I'd like to fix it. What software can I use to fix it? I suspect I know how large it actually is, but I have no idea what to change to make it identify properly.

DDG results are manipulated so bad (how to install an SSD, how to upgrade an SSD, etc.), so the closest I can some is this article by Raymond (with no source URLs of the software :( ): https://www.raymond.cc/blog/test-and-detect-fake-or-counterfeit-usb-flash-drives-bought-from-ebay-with-h2testw/

I'm guessing the results are manipulated since a bad guy would want to find the software to use for bad guy stuff? idk I can't fathom what these digital nannys think nowadays.

I read the rules and don't think this is a beginner level question. I left out the beginner-level explanation of what the problem is as well, since I'd hope some hackers might already be familiar with what I'm talking about.

submitted by /u/l1nuxx_uzr_num737205
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
A serious Log4J flaw puts much of the internet at risk

https://cdn-images-1.medium.com/max/1200/1*tMa115d4IW_TfmEgd0i4hw.jpeg
The Apache Software Foundation has issued patches to address a frequently leveraged zero-day flaw in the Apache Log4j Java-based logging…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video