hacking: security in practice
Where to start towards OSCP?

Starting to use tryhackme to learn basics.

Also what pc hardware/software do you recommend?

Currently have a PC but also need to get a laptop… I’ve heard macs have problems with Linux so any recommendation on hardware is appreciated.

Also, which other certs or prep should I work through before OSCP?

Also, I wouldn’t mind running Kali as the OS on a new laptop, any recommendations for that?

submitted by /u/SkiSupreme90
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Log4j software bug could cause 'incalculable' damage

https://external-preview.redd.it/t3Vz9-oy8B-Gbk0lbeuFBWEKrdhBYpooIKiAmqkEi1M.jpg?width=640&crop=smart&auto=webp&s=b7d72489363f2a46b408b2e74587dfc6a63a4786 submitted by /u/Stevogangstar
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
IPs exploiting the log4j2 CVE-2021-44228 detected by the crowdsec community

https://external-preview.redd.it/4-DxLM-C2Ve3tHmVL5ITI6GRtMVG8PzzdBuCKiaabfE.jpg?width=640&crop=smart&auto=webp&s=f3545b9335d763c9da9c16bf7bf9a3f907dbd6f6 submitted by /u/klausagnoletti
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Host of darknet diaries guest appearance

For those familiar, it’s a very popular podcast about all things darknet. Thought I’d share it here too but here’s a podcast where the host (Jack Rhysider) guest appeared.

https://www.podcasttheway.com/l/52-darknet-diaries/

The description copy and pasted below:

The show is back and I'm really excited to welcome Jack Rhysider on the show. Jack Rhysider hosts an excellent podcast called The Darknet Diaries I recommend everyone listen to. It's a documentary-type podcast based around true stories from the dark side of the internet. For this episode, I had the pleasure to talk with him about what work goes into his show, and his perspectives after talking to the people he has.

submitted by /u/ItsTheTenthDoctor
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Does anyone know how to hack this game (word blitz) or download an apk?

I'm sure it's quite easy as its only a small playstore game. I'm new to hacking and don't really know how to start. Also I want to be clear I want to get a hack for this game so I can troll my friend and it's not my intention to ruin the game for strangers. Any help would be appreciated.

submitted by /u/Oscar5434xdx
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking Articles
Windows Privilege Escalation: Scheduled Task/Job (T1573.005)

An attacker may exploit the Windows Task Scheduler to schedule malicious programmes for initial or recurrent execution. For persistence purposes, an attacker may utilise Windows

The post Windows Privilege Escalation: Scheduled Task/Job (T1573.005) appeared first on Hacking Articles.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Tool Overload & Attack Surface Expansion Plague SOCs

Security professionals are burning out from handling too many tools and facing a growing number of threats, and more than 40% see lack of leadership as the main problem.

Dark Reading: Attacks/Breaches
Ransomware Hits Virginia Legislative Agencies

The attack forced a shutdown of computer systems and websites for Virginia legislative agencies and commissions, reports state.

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How to start Ethical Hacking with Android

What’s up hackers and penetration testers. Anonymous here back again with another useful tutorial. In this article we are going to be…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
کڕاک چییە و کڕاککەر کێیە؟!

https://cdn-images-1.medium.com/max/2600/1*kyD3T00JMlovqDuGvEAUgw.jpeg
کڕاک ئەو وشە ترسناکەی کە هەموو کۆمپانیا تەکنەلۆژیەکان گیریان خواردووە بەدەستیەوە ، بریتییە لە تەکنیکێک کە پڕۆگرامەرەکان ئەیگرنە بەر بۆ…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Actualiza Google Chrome para parchar el nuevo Exploit de día cero detectado

https://cdn-images-1.medium.com/max/1642/0*v47sOYC24p2VC67c
PUBLICADO EN 14 DICIEMBRE, 2021POR DPAB

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

https://external-preview.redd.it/FcLRtlzqnFl1tHrCDeMa3KMpr_1TusB3Y56yxAxOMQs.jpg?width=640&crop=smart&auto=webp&s=a07ccd315cc59b8d52d064538fcb1f0b9d8ac4db According to https://github.com/blackc03r/OSCP-Cheatsheets/blob/master/offensive-security/credential-access-and-credential-dumping/dumping-and-cracking-mscash-cached-domain-credentials.md, Domain Credentials Cached can be found at HKEY_LOCAL_MACHINE\SECURITY.

It should looks like this

NL$1..10 are the cached hashes for 10 previously logged users

However, when I checked one my client's pc HKEY_LOCAL_MACHINE\SECURITY was empty.

Then, I perform reg query hklm\security but was denied even with Administrator's cmd
c:\> reg query hklm\security ERROR: Access is denied.
https://preview.redd.it/8dih64aq8l581.png?width=820&format=png&auto=webp&s=395e3f482690e5a01149ce49cede1293b546e6cd

What's wrong? Is it possible to view NL$1..10 and it's data/value in this case?

submitted by /u/w0lfcat
[link] [comments]

hacking: security in practice
Would you consider exploiting flaws in systems “hacking”?

Saw a recent article about how some people were abusing instagrams flawed reporting system to ban innocent accounts and was thinking that it’s pretty cool that they were able to do that.. with things like this would they even count as hacking? Would there be legal repercussions for exploiting flaws and not for monetary gain such as this

submitted by /u/juliusseizures9000
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video