Hacking on Medium
NHS advierte sobre piratas informáticos que apuntan a fallas de Log4j en VMware Horizon

https://cdn-images-1.medium.com/max/1339/0*S13D0aCppgNC_Vda
PUBLICADO EN 10 ENERO, 2022 POR EHACKING

Continue reading on Medium »
➖ Sent by @TheFeedReaderBot ➖

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How not to get Hacked. Security 101 for Startups.

https://cdn-images-1.medium.com/max/2600/0*29tbgiLp6gkG9tcE
Formalize Security I: Information Security Governance, Risk Management, and Compliance (GRC)

Continue reading on Medium »
➖ Sent by @TheFeedReaderBot ➖

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How do I scan large files ?

How do i scan large files on internet for viruses and malware ? Thanks 😊

submitted by /u/Iproman
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Understanding a Possible C&C Bot Exploit

I have a workstation calling out a malicious website as our antivirus has been blocking it. I found out where the calling is from but I need some understanding of how it works so I could remove it. Is it a batch file running this command?

​

PID: 2740 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1540,2387710929429392567,6686313769062120105,131072 --lang=en-GB --service-sandbox-type=network --enable-audio-service-sandbox --mojo-platform-channel-handle=1924 /prefetch:8 MD5: C139654B5C1438A95B321BB01AD63EF6)

submitted by /u/slayer91790
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Abusing Terminal Emulator Escape Characters leads to remote DDoS, character injection, and more.

https://external-preview.redd.it/q4zKSsjwVKiCegPWMP_DY5_QGHI2FAttoQm9swawW7s.jpg?width=640&crop=smart&auto=webp&s=6e719ffae14a04d99f614ddf3bf7d1207ea6ca16 submitted by /u/jat0369
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Tools for github recon?
https://www.reddit.com/r/Pentesting/comments/s0pefv/tools_for_github_recon/

What's your favorite tool for finding secrets (passwords, SSH keys, etc.) in github repositories? Or to find repositories with sensitive data and a specific keyword? I was looking at the shhgit, but I couldn't find a way for it to scan a specific repository. The gitleaks now seems to only scan local repositories (while before you could input a repository URL). submitted by /u/grow416 (https://www.reddit.com/user/grow416)
[link] (https://www.reddit.com/r/Pentesting/comments/s0pefv/tools_for_github_recon/) [comments] (https://www.reddit.com/r/Pentesting/comments/s0pefv/tools_for_github_recon/)

___________________________
@hacking_Attack
@Hacking_Video

Cross-Origin Resource Sharing (CORS) Misconfiguration leads to User’s PII leaks.
https://sa1tama0.medium.com/cross-origin-resource-sharing-cors-misconfiguration-leads-to-users-pii-leaks-b31fd3246e64?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hello everyone,Continue reading on Medium » (https://sa1tama0.medium.com/cross-origin-resource-sharing-cors-misconfiguration-leads-to-users-pii-leaks-b31fd3246e64?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

P1 Vulnerability: How I chained Logical-Error to Account-Takeover Vulnerability ‍that No-One…
https://gowtham-naidu.medium.com/p1-vulnerability-how-i-chained-logical-error-to-account-takeover-vulnerability-that-no-one-59aa88a9cae8?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

* Introduction *Continue reading on Medium » (https://gowtham-naidu.medium.com/p1-vulnerability-how-i-chained-logical-error-to-account-takeover-vulnerability-that-no-one-59aa88a9cae8?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

PasteMonitor - Scrape Pastebin API To Collect Daily Pastes, Setup A Wordlist And Be Alerted By Email When You Have A Match
http://www.kitploit.com/2022/01/pastemonitor-scrape-pastebin-api-to.html

___________________________
@hacking_Attack
@Hacking_Video

Scrape Pastebin (https://www.kitploit.com/search/label/Pastebin) API to collect daily pastes, setup a wordlist (https://www.kitploit.com/search/label/Wordlist) and be alerted by email (https://www.kitploit.com/search/label/Email) when you have a match.
DescriptionThe PasteMonitor tool allows you to perform two main actions (for educational purposes only):Download daily new public pastes

___________________________
@hacking_Attack
@Hacking_Video

Average number of pastes per day: 1000-3000 (filetype: .txt)Send automatic email alertYou can setup a wordlist and be alerted by email when you have a match

___________________________
@hacking_Attack
@Hacking_Video

If your paste is no longer online, you can find it on your computer/server via the ID of your paste (here ID is "WJq2YxPg")

___________________________
@hacking_Attack
@Hacking_Video

Before startBefore starting the tool, make sure to:Get a Pastebin PRO (https://pastebin.com/pro) accountEnter the IP address of your machine in the "Your Account & Whitelisted IP (https://pastebin.com/doc_scraping_api)" sectionActivate a mail (https://www.kitploit.com/search/label/Mail) account that can authorize a third party application (here we use a Gmail account (https://www.google.com/intl/fr/gmail/about/))Enable 2-step verification (https://myaccount.google.com/u/2/signinoptions/two-step-verification)Generate app password (https://myaccount.google.com/u/2/apppasswords) (for more help, see this tutorial (https://ljmocic.medium.com/send-an-email-using-python-and-gmail-4ebc980eae9b))Then, add to the code "pastemonitor.py":Email credentials (https://www.kitploit.com/search/label/Credentials) ("email", "password")Email alert recipient ("receiver")WordlistIn the "wordlist.txt" file, add your keywords line by line.Prerequisitepip3 install -r requirements.txtUsagepython3 pastemonitor.pyPastebin.com usageVisit the official Pastebin webpage Scraping API (https://pastebin.com/doc_scraping_api).ContributingFeel free to clone this project. For major changes, please open an issue first to discuss what you would like to change.LicenseMIT (https://choosealicense.com/licenses/mit/)

Download PasteMonitor (https://github.com/pixelbubble/PasteMonitor)

___________________________
@hacking_Attack
@Hacking_Video