hacking: security in practice
Deciding on Hardware. Any input is appreciated!

My goal is to have a device that will allow me to run Linux as a main OS and VM into Kali Linux, Windows, and Vulnerable Boxes (for Tryhackme and HacktheBox).

I can’t decide what makes the most sense:

1.
A beefed up laptop with a core i7 and 32GB ram (pros being portability)

2.
a NUC with the same specs (pros being the cheapest option)

3.
A beefed up PC with an i7 and 32+ GB RAM that I can remote into from a cheaper laptop.
I like the idea of #3 but isn’t remoting into my PC super slow? Won’t it be miserable to use my cruddy laptop that’s remoting to my PC to run VMs?

Any input is helpful!

submitted by /u/NorMalware
[link] [comments]

KitPloit - PenTest Tools!
Umay - IoT Malware Similarity Analysis Platform

https://blogger.googleusercontent.com/img/a/AVvXsEhUhRbMK1OT7zlw_eEid5_Qf7WeqgGCIHlr3T5Blj6J_8Z7V-Cr2HaXpNyaDQKr7EFzAzOtpnmYFcMHEf3ygk_1UeG0cjiTBY7q_-IzS4iMuwt875fzluXVF-XJsfam-hEBGfNYV_7hc7_v6T0RNVq5csOTz4rOItQvzx2fddx3T1qR_fWBBjFcAunmow
IoT Malware Similarity Analysis Platform

View Demo
https://blogger.googleusercontent.com/img/a/AVvXsEilw3i_gxPUCuebsK5azkrZrGru7Rfpsu3TnnIDr7pHrykgRX5jJLAN5vFb6OWjUJYtnIqJbWKOlQcah7_1qrHKbIVMk2KYB6O3iQPmPGiDlu6lPa-xXwkt7gvS39meJHDddNnX_WglPxUowSrn93iOVD02fTbPSJxWuqhVSnMrjllCm3CxE1Ov8sGkww=w640-h334
This project provides IoT malware similarity analysis based on shared codes. It helps to identify other malwares that have shared code with the analyzed file. In this way, you can have a chance to get an idea about the family of the malware. There are various devices with different architectures in the IoT ecosystem. Static-based methods are more effective when addressing the multi-architecture issue. 1000 malware binaries provided by IoTPOT were used in the project. The basic blocks and functions of each of binaries were extracted by radare2 and the hash values of these data were stored in the SQL database. The basic blocks and functions of the sample to be analyzed are query from this database and all malwares that have shared code are listed.
Current features

* Shared code based static analysis.
* Supporting ARM, MIPS, x86-64, i386, PowerPC, m68k, Renesas SH.
* ?

Getting Started

Prerequisites

* Python3+
* Radare2
* r2pipe
Installation

git clone https://github.com/mucoze/Umay
cd Umay


virtualenv venv

source venv/bin/activate

pip install -r requirements.txt

python manage.py makemigrations

python manage.py migrate

python manage.py createsuperuser

python manage.py runserver

and now project app is accesible from your browser. Default: 127.0.0.1:8000

Create your own dataset file

python create_dataset.py samples/

Give the directory where all the samples are located as an argument and it will generate the dataset.dbfile for you.


🤝
Contributing

Contributions, issues, and feature requests are welcome!

Feel free to contact me.

License

Umay is licensed under Apache License 2.0
Download Umay

Ultimate Reconnaissance RoadMap for Bug Bounty Hunters & Pentesters
https://ahmdhalabi.medium.com/ultimate-reconnaissance-roadmap-for-bug-bounty-hunters-pentesters-507c9a5374d?source=rss------bug_bounty-5

Advanced Reconnaissance and Web Application Discovery RoadMap to Find Massive Vulnerabilities.Continue reading on Medium » (https://ahmdhalabi.medium.com/ultimate-reconnaissance-roadmap-for-bug-bounty-hunters-pentesters-507c9a5374d?source=rss------bug_bounty-5)

Dark Reading: Attacks/Breaches
Nearly 50% of People Will Abandon Sites Prohibiting Password Reuse

A new study investigating consumer password use found 25% of online shoppers would abandon their carts of $100 if prompted to reset a password at checkout.

Dark Reading: Attacks/Breaches
Microsoft Customer Source Code Exposed via Azure App Service Bug

Researchers found an insecure default behavior in Azure App Service exposing source code of some customer applications deployed using "Local Git."

Dark Reading: Attacks/Breaches
CISA's New Log4j Scanner Aims to Find Vulnerable Apps

The open-sourced scanner was derived from scanners built by members across the open source community, CISA reports.

Hacking on Medium
Tr0ll 2 VM Walkthrough

https://cdn-images-1.medium.com/max/693/0*xniFMaHoXzr1Cpn0.png
Test Metadolojisi:

Continue reading on Medium »

Hacking on Medium
Ultimate Reconnaissance RoadMap for Bug Bounty Hunters & Pentesters

https://cdn-images-1.medium.com/max/2600/1*bLnALsKbmXVH-_pln9bRbw.jpeg
Advanced Reconnaissance and Web Application Discovery RoadMap to Find Massive Vulnerabilities.

Continue reading on Medium »

Hacking on Medium
Exploring the Worst Exploit of 2020: ZeroLogon (CVE-2020–1472)

https://cdn-images-1.medium.com/max/640/1*J7lJxuE8Ruy_Zpgg0VaG3A.jpeg
ZeroLogon is a critical (CVSS: 10.0) vulnerability in the NETLOGON protocol that was first discovered by Secura researchers and pathed by…

Continue reading on Medium »

Hacking on Medium
How To Hack Any Website

https://cdn-images-1.medium.com/max/1920/1*MdcoQXwDgNQ91wS6GZnHag.jpeg
[Part — 2: Content Discovery]

Continue reading on Medium »

Hacking on Medium
Errores de Active Directory podrían permitir que piratas informáticos se apoderen de los…

https://cdn-images-1.medium.com/max/1643/0*PNdXylnydl3NwM4b
PUBLICADO EN 22 DICIEMBRE, 2021POR DPAB

Continue reading on Medium »

hacking: security in practice
What os do you guys use to hack in?

Any parrot or black arch users i really wanna know. Oh and why do you use it instead of kali?

submitted by /u/redditbigbad
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video