hacking: security in practice
For those interested in ATMs...

...there's an electrical company liquidating a few via auction in PA. Various states of disrepair; the best ones ~$42 as of this post. Check Rasmus auctions.

submitted by /u/realgoneman
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Free Online Hash Cracking Websites
https://skynettools.medium.com/free-online-hash-cracking-websites-1fad721d236c?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Cracking password hashes on your own without the proper hardware can become time-consuming and tedious. Luckily for those capped by their…Continue reading on Medium » (https://skynettools.medium.com/free-online-hash-cracking-websites-1fad721d236c?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Breach Response Shift: More Lawyers, Less Cyber-Insurance Coverage

Companies are more likely to rely on outside attorneys to handle cyber response in order to contain potential lawsuits. Meanwhile, cyber-insurance premiums are rising but covering less.

Dark Reading: Attacks/Breaches
Microsoft: macOS 'Powerdir' Flaw Could Let Attackers Gain Access to User Data

The vulnerability could allow an attacker to bypass the macOS Transparency, Consent, and Control measures to access a user's protected data.

Dark Reading: Attacks/Breaches
FBI Warns FIN7 Campaign Delivers Ransomware via BadUSB

An FBI warning says the FIN7 cybercrime group has sent packages containing malicious USB drives to US companies in an effort to spread ransomware.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
No Significant Intrusions Related to Log4j Flaw Yet, CISA Says

But that could change anytime, officials warn, urging organizations to prioritize patching against the critical remote code execution flaw.

Dark Reading: Attacks/Breaches
What Editing Crosswords Can Teach Us About Security Leadership

When security leaders look for mistakes, they often find them before customers do.

PasteMonitor - Scrape Pastebin API To Collect Daily Pastes, Setup A Wordlist And Be Alerted By Email When You Have A Match

Scrape Pastebin API to collect daily pastes, setup a wordlist and be alerted by email when you have a match.DescriptionThe PasteMonitor tool allows you to perform two main actions (for educational purposes only):Download daily new public pastesAverage number of pastes per day: 1000-3000 (filetype: .txt)Send automatic email alertYou can setup a wordlist and be alerted by email when you have a matchIf your paste is no longer online, you can find it on your computer/server via the ID of your paste (here ID is "WJq2YxPg") Before startBefore starting the tool, make sure to:Get a Pastebin PRO accountEnter the IP address of your machine in the "Your Account & Whitelisted IP" sectionActivate a mail account that can authorize a third party application (here we use a Gmail account)Enable 2-step verificationGenerate app password (for more help, see this tutorial)Then, add to the code "pastemonitor.py":Email credentials ("email", "password")Email alert recipient ("receiver")WordlistIn the "wordlist.txt" file, add your keywords line by line.Prerequisitepip3 install -r requirements.txtUsagepython3 pastemonitor.pyPastebin.com usageVisit the official Pastebin webpage Scraping API.ContributingFeel free to clone this project. For major changes, please open an issue first to discuss what you would like to change.LicenseMITDownload PasteMonitor
Read more...

___________________________
@hacking_Attack
@Hacking_Video

P1 Vulnerability: How I chained Logical-Error to Account-Takeover Vulnerability ‍that No-One…

* Introduction *Continue reading on Medium »
Read more...

Free Online Hash Cracking Websites

Cracking password hashes on your own without the proper hardware can become time-consuming and tedious. Luckily for those capped by their…Continue reading on Medium »
Read more...

Hacking Articles
Active Directory Privilege Escalation (CVE-2021–42278)

This post discusses how CVE-2021-42287 allows potential attackers to gain high privileged user access (domain controllers Administrator level access) via a low privileged user (any

The post Active Directory Privilege Escalation (CVE-2021–42278) appeared first on Hacking Articles.

___________________________
@hacking_Attack
@Hacking_Video

Help with Password Hacking Software
https://www.reddit.com/r/Pentesting/comments/s0yk13/help_with_password_hacking_software/

Hello, I am new to the world of cyber security. What is the best network/wifi password cracking/hacking software in 2022? I am familiar with Cain and Abel but am also familiar with the fact that it has been discontinued, the original site has been taken down and it is no longer being updated. Cain and Abel used to be the best go-to software for network hacking among many others. Is Cain and Abel still available and useful in 2022? If so, where is the best (and safest) place to download the software from where I do not have to worry about malicious malware? Is there a newer, more updated and better performing/more useful software that I can use while learning network security and testing? I liked Cain and Abel because of its versatility and the many uses that it had. I am looking to either find a way to download this software or a just-as-useful-and-versitile software that I can use. Thank you submitted by /u/businessguy369 (https://www.reddit.com/user/businessguy369)
[link] (https://www.reddit.com/r/Pentesting/comments/s0yk13/help_with_password_hacking_software/) [comments] (https://www.reddit.com/r/Pentesting/comments/s0yk13/help_with_password_hacking_software/)

___________________________
@hacking_Attack
@Hacking_Video

Generating & Analyzing Shellcode with Radare2
https://www.reddit.com/r/redteamsec/comments/s129op/generating_analyzing_shellcode_with_radare2/

submitted by /u/DLLCoolJ (https://www.reddit.com/user/DLLCoolJ)
[link] (https://youtu.be/ttdmR8uiF9w) [comments] (https://www.reddit.com/r/redteamsec/comments/s129op/generating_analyzing_shellcode_with_radare2/)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
What are some good hacking/cybersecurity podcasts?

I've started really enjoying podcasts and I'm really getting into hacking (even though I'm horrible at it) and cybersecurity. I'm currently listening to the Darknet Diaries and I'm loving it! Are there any other podcasts like this? What hacking podcasts do you personally enjoy?

submitted by /u/Metalsaurus_Rex
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Are there any frequent hacking related events that happen in Toronto at all?

Hi everyone; recently moved to Toronto for college and I was wondering if there are any frequent meetups or talks about hacking and stuff in here. I’m 19, if anybody is in that age range and is cool and down to hangout, share hacking ideas together, talk hacking and whatnot lemme know

submitted by /u/ismaeljabbar
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Books to Read to assist in learning how to tackle bug bounties?

Hey All,

Could any of you recommend books to read that might assist with the topic of bug bounties if you have the time.

I have a decent understanding of networks and how computers interact with said network but I don't understand the 'bug hunt' so to speak. I can de bug my code (There's lots of bugs in my code) but searching on a web app or website is foreign to me.

Any input is much appreciated.

Thanks in Advance :)

submitted by /u/bailsatan
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
MAC spoof not working?

im gonna preface this by saying that i have no idea what im doing and i dont think this is the right subreddit either but i need help

i followed a tutorial to change my mac address and it definitely changed, but i still cant access the wifi? i lose internet past 12 and im confident its mac filtering thats kicking me off the wifi, yet mac spoofing didnt work. what else could it be? or what did i do wrong?

submitted by /u/Naive_Organization85
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video