hacking: security in practice
log4j npm package, vulnerable?

Anyone know if lg4js npm package is also vulnerable to log4shell?

submitted by /u/BlueEyedGirl25
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Black Hat Ethical Hacking
Hackers start pushing malware in worldwide Log4Shell attacks

___________________________
@hacking_Attack
@Hacking_Video

Free Course
https://www.reddit.com/r/Pentesting/comments/rfbtkz/free_course/

Hi I'm new in pentesting and my question is: Where Can I find free pentesting course and what you think about it? submitted by /u/kunecki0091 (https://www.reddit.com/user/kunecki0091)
[link] (https://www.reddit.com/r/Pentesting/comments/rfbtkz/free_course/) [comments] (https://www.reddit.com/r/Pentesting/comments/rfbtkz/free_course/)

___________________________
@hacking_Attack
@Hacking_Video

Responder-Windows on Windows XP hangs.
https://www.reddit.com/r/Pentesting/comments/rfcxgf/responderwindows_on_windows_xp_hangs/

Hey friends, Im using Responder-Windows compiled .exe from GitHub on Windows XP over meterpreter. Running w/o parameters it outputs the help in cli, but running using -i just hangs. I’ve already tried 2>&1, 1>&2, >logfile redirections. No changes. Maybe somebody had this situation and found a solution? Grateful.responder-windows (https://github.com/lgandx/Responder-Windows) submitted by /u/matomas99 (https://www.reddit.com/user/matomas99)
[link] (https://www.reddit.com/r/Pentesting/comments/rfcxgf/responderwindows_on_windows_xp_hangs/) [comments] (https://www.reddit.com/r/Pentesting/comments/rfcxgf/responderwindows_on_windows_xp_hangs/)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Buff @ HackTheBox

Buff is a 20-point Windows Machine on HackTheBox, created by egotisticalSW. It involves 2 simple public exploits and forwarding a port.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Sauna @ HackTheBox

https://cdn-images-1.medium.com/max/1280/0*aT-UAxJtVzvZ_H4c.jpg
Sauna is a 20-point Windows Machine on HackTheBox. For user, we bruteforce usernames and then use ASREP-Roasting to obtain the hash of one…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Book @ HackTheBox

https://cdn-images-1.medium.com/max/1280/0*PErHhEI6pD18fPMH.jpg
Book is a 30-point Linux machine on HackTheBox. We log into a web application by exploiting SQL truncation and then use a Local File…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
ForwardSlash @ HackTheBox

https://cdn-images-1.medium.com/max/1280/0*N7vqZgewwR_VxrAL.jpg
ForwardSlash is a 40-point Linux Machine on HackTheBox. We use a path traversal vulnerability to get ssh credentials and abuse a custom…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Player2 @ HackTheBox

https://cdn-images-1.medium.com/max/1280/0*0U0rd46I93SPybOJ.jpg
Player2 is a 50-point Linux machine on HackTheBox. For user we do some web fuzzing, call a twirp method to get credentials, find hidden…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Resolute @ HackTheBox

https://cdn-images-1.medium.com/max/1280/0*iVLM5Pa6jNER-HBn.jpg
Resolute is a 30-point Windows machine on HackTheBox that involves enumerating LDAP, Password Spraying, and using the DNSAdmins group to…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Rope @ HackTheBox

https://cdn-images-1.medium.com/max/1280/0*WISP1UedGN7Ib1PL.jpg
Rope is a 50-point machine on HackTheBox that involves 3 binary exploits. There is a format string vulnerability in the boxes’s webserver…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Patents @ HackTheBox

https://cdn-images-1.medium.com/max/1280/0*NvYTiM_1F7Qf1WhI.jpg
Patents is a 40-point Linux machine on HackTheBox. For user we exploit an external entity injection in a word document and a local file…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video