hacking: security in practice
So I have a really old iMac mini that still works. What’s the most creative way you can think of to break it?

So this thing is like 10 or 12 years old. I’ve nothing important on it, so it doesn’t need to be recoverable. To clarify, literally anything is on the table to mess with, and break this poor old computer. My Dad is on the team that writes IOS. I need a good Christmas project for me and my Dad. Go internet go!

submitted by /u/Kalistropha
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Why is Log4Shell so bad?

https://cdn-images-1.medium.com/max/1600/0*OwDh2bpKcwh4ZrY0
Apache Log4j is an open-source logging library used in millions of JAVA projects, including a substantial percentage of enterprise…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How to access websites when only a single website if whitelisted by a firewall (Sophos XG)?

Sophos XG firewall pretty much got all categorized blocked including the IP addresses (except a domain and a IP address I guess). I read somewhere that one could wrap the data and maybe encrypt it so the firewall doesn't understand what to do with those packets, which I couldn't figure out how to do. If this is the right method, is there any guide? If yes, please share! or are there any other ways to bypass this firewall. I have tired Cloudflare DNS, but it seems like the DNS has nothing to do with blocked websites.

submitted by /u/elekktronic
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Alternative Process Injection
https://www.reddit.com/r/redteamsec/comments/rj6z46/alternative_process_injection/

submitted by /u/dmchell (https://www.reddit.com/user/dmchell)
[link] (https://www.netero1010-securitylab.com/eavsion/alternative-process-injection) [comments] (https://www.reddit.com/r/redteamsec/comments/rj6z46/alternative_process_injection/)

___________________________
@hacking_Attack
@Hacking_Video

Hacked Google-Meet…??!
https://infosecwriteups.com/hacked-google-meet-40f364bb8368?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

15th June 2021Continue reading on InfoSec Write-ups » (https://infosecwriteups.com/hacked-google-meet-40f364bb8368?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Well Here we go…….
https://medium.com/@ddg00529/well-here-we-go-292f4c30e264?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Cyber-sec is really a fun as well as an scary world , you got one thing wrong and the line of legal & illegal will VANISHED ….Continue reading on Medium » (https://medium.com/@ddg00529/well-here-we-go-292f4c30e264?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Hacked Google-Meet…??!

https://cdn-images-1.medium.com/max/1366/1*SlB7YDBVDXsSjCl6xPsdRQ.png
15th June 2021

Continue reading on InfoSec Write-ups »
➖ Sent by @TheFeedReaderBot ➖

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Information Gathering in Penetration Testing

https://cdn-images-1.medium.com/max/732/1*RMyd54MzqLxPJ5WtKXPXCw.png
Hello guys, Ayush this side today in this article we are gonna learn about some information gathering techniques about any target.

Continue reading on InfoSec Write-ups »
➖ Sent by @TheFeedReaderBot ➖

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Cookie Security: From a Developer’s Perspective

https://cdn-images-1.medium.com/max/1400/0*s9lCJD9o4_DfDlu2
We will be learning more about the source code reviews in this blog. The primary focus of ours will be the security of the cookies as they…

Continue reading on Medium »
➖ Sent by @TheFeedReaderBot ➖

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
The Apache Software Foundation has released fixes to contain an actively exploited zero-day…

https://cdn-images-1.medium.com/max/728/0*xEFY4mlYYv6IJj-z
Tracked as CVE-2021–44228 and by the monikers Log4Shell or LogJam, the issue concerns a case of unauthenticated, remote code execution…

Continue reading on Medium »
➖ Sent by @TheFeedReaderBot ➖

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Choosing a Password

From time to time I like to play around with Hashcat. Just fun things like seeing how far into one of the example files, or showing a cousin how horrible their password is.

I was curious how the requirements for a password length have changed since the release of the Nvidia 3000 cards. My 3080 for example can do MD5 at 60 B/s, Sha1 at 20 B/s.

Running brute force on MD5 with the “?a” switch, if you do not know that runs through all 96ish possible characters, I tested up to 9. So these are password that are truly randomized. 7 character password or less you can do all of them in less than the runtime of a show on Netflix. 8 characters you can do in about 2 days. 9 characters Hashcat estimated would take about 7 months.

So you should still be fine with a 9 character randomized password for some time. Even in MD5.

submitted by /u/Titanium125
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacked Google-Meet…??!

15th June 2021Continue reading on InfoSec Write-ups »
Read more...