KitPloit - PenTest Tools!
DefenderCheck - Identifies The Bytes That Microsoft Defender Flags On

https://1.bp.blogspot.com/-y2amhJ-qAj0/YGKc4Y4u_aI/AAAAAAAAVvw/fBvwUbMDxtonyChLXonvq6l3ZoohC79SACNcBGAsYHQ/w640-h312/DefenderCheck_1_demo.gif
Quick tool to help make evasion work a little bit easier.
Takes a binary as input and splits it until it pinpoints that exact byte that Microsoft Defender will flag on, and then prints those offending bytes to the screen. This can be helpful when trying to identify the specific bad pieces of code in your tool/payload.

Note: Defender must be enabled on your system, but the realtime protection and automatic sample submission features should be disabled.
Download DefenderCheck

hacking: security in practice
How did they do it?

This happened to a friend of mine, and this is basically all I know. Please excuse the lack of information.

He was talking on the phone with a random foreign number for over an hour, they were pretending to be someone or something similar to that. The thing is, he was doing business abroad and somehow they managed to get his info and capitalized on whatever they had. And like I said, they were very well organized, the basically managed to keep him on the phone for over an hour, without him suspecting anything. It was only later that he got a funny feeling and called the police. He had to give them all of his electronic devices, they fragmented all his data, and he had to get a new SIM.

He talked to them over a mobile phone, with his own personal phone number. And what he told them for CERTAIN, is his name and surname, and his wife’s bank account number.

He got hacked somehow, they managed to break into his mobile phone and basically every electronic device that was connected to the internet in his house

The thing I’m wondering is, what information would a potential hacker need to get from a person over a phone call, in order to steal/look at someone’s data through his internet connection? Things like that can’t be done over phone carriers, right? They would need his IP at least?

Thank you for any information you might have!

submitted by /u/IsEndTheNear
[link] [comments]

hacking: security in practice
Tips on Disclosure / Bug Bounty?

Long story short I've never reported a bug or exploit to a company before. I have found a very simple (non technical) exploit for door dash. Any tips on disclosing that? I'm not trying to extort anyone of course, and its nothing major, a small service for free essentially. I want to disclose it appropriately to their IT (waiting for them to email me after asking customer support how to get in touch to report issues with security). Truthfully I just want the recognition and perhaps the ability to put something about it on any future resumes since I am very interested in IT security.

submitted by /u/darkrom
[link] [comments]

Hacking on Medium
I NEED A HACKER TO CHANGE MY UNIVERSITY GRADES

I NEED A HACKER TO CHANGE MY GRADES

Continue reading on Medium »

Hacking on Medium
How to Change your Grades Online Permanently

Let’s say you’re in college, applying to an elite graduate school, so you change your grades to ensure your GPA is high enough, and you…

Continue reading on Medium »

Journeys in Quoteless and Multi Reflection XSS
https://bendtheory.medium.com/journeys-in-quoteless-and-multi-reflection-xss-b1d67bb0c5dd?source=rss------bug_bounty-5

Cross Site Scripting is a tricky bug to fix, and bypasses for these fixes can be even trickier. While there are several ways to remediate…Continue reading on Medium » (https://bendtheory.medium.com/journeys-in-quoteless-and-multi-reflection-xss-b1d67bb0c5dd?source=rss------bug_bounty-5)

Journeys in Quoteless and Multi Reflection XSS

Cross Site Scripting is a tricky bug to fix, and bypasses for these fixes can be even trickier. While there are several ways to remediate…Continue reading on Medium »
Read more...

Deep Web
Howard Chu, the saviour of NASA that will save x.m.r.

x.m.r cryptocurrency is developed by Howard Chu a high-IQ scholar also known as hyc_symas. Howard Chu is a C language programmer and he worked on making x.m.r crypto coin transactions private. x.m.r coin is the most secure privacy project and it is best for cryptocurrency transactions. It's price is rising because of its needs. Buy x.m.r crypto coin for high gains and private transactions.

submitted by /u/Blindlyincur44
[link] [comments]

hacking: security in practice
I have recurrent DDoS attacks on my e-commerce site: Is there some hosting services that may be better for me to use than others?

submitted by /u/shitpostaficionado
[link] [comments]

hacking: security in practice
BBS the Documentary (2017) - The BBS (bulletin board system) scene of the 80s and 90s was a magical time. Long before the Internet escaped from the lab, it connected the planet and redefined what it meant to use a computer there was a brave and pioneering band of computer users. [04:58:52]

https://external-preview.redd.it/xnrhDkSuSWshfxyFqbL-mnhaaYDlIoGC_IljpLK82Tc.jpg?width=320&crop=smart&auto=webp&s=8ba8c2a8fc75efcc4e8fa517e4589d40ae38b3d4 submitted by /u/DrinkMoreCodeMore
[link] [comments]

Hacking on Medium
Simple But Powerful Denial Of Service (DoS) Attack

https://cdn-images-1.medium.com/max/2600/1*wM7qHRz14k95BGZk769zIw.jpeg
“Disclaimer: This is just for informational purposes only. Any violence because of this, is beyond my responsibility”

Continue reading on Geek Culture »

hacking: security in practice
Does anyone know how to decode a .enc file?

I have a mp4.enc file does anyone know how to convert that into a mp4

submitted by /u/Rikki1256
[link] [comments]

Race condition to financial fraud on Payment App
https://stevebiotech.medium.com/race-condition-to-financial-fraud-on-payment-app-b2f9a2457fb3?source=rss------bug_bounty-5

Summary:Continue reading on Medium » (https://stevebiotech.medium.com/race-condition-to-financial-fraud-on-payment-app-b2f9a2457fb3?source=rss------bug_bounty-5)