Very old php found on a very insecure server, which is the best vulnerability to get in ?
https://www.reddit.com/r/Pentesting/comments/s9p9ty/very_old_php_found_on_a_very_insecure_server/

___________________________
@hacking_Attack
@Hacking_Video

Hey guys! Im a beginner/professional pentesting (yeah, im not that good but currently working) and i found a client vps with a forgotten web server using php 5.6.21. Acordding to the results of a nessus pro scan, this version is very insecure. So my question is in the title. The nessus pro scan results: https://preview.redd.it/qctur6pgu4d81.png?width=1072&format=png&auto=webp&s=5ca1e222969f9251a56bed5b2c840e96f0c01d4d submitted by /u/psicohistoriador (https://www.reddit.com/user/psicohistoriador)
[link] (https://www.reddit.com/r/Pentesting/comments/s9p9ty/very_old_php_found_on_a_very_insecure_server/) [comments] (https://www.reddit.com/r/Pentesting/comments/s9p9ty/very_old_php_found_on_a_very_insecure_server/)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Destructive malware is back in Ukraine. Will it usher in cyberconflict?

https://cdn-images-1.medium.com/max/2500/1*FhpIATS_PnHQ0GdrMhdKWw.png
The WhisperGate malware masquerades as ransomware but really breaks computer files beyond repair.

Continue reading on README_ »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
86th Monthly Technical Session

https://cdn-images-1.medium.com/max/2048/0*u5-vAVJ47KPNpQVi
Topics covered: Remote Development with VS code, Get your SNS compromised, Hobbyist OS, Rescuing old code with Android Jetpack & others.

Continue reading on henngeblog »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
I dont think its possible...

I've been wondering if it's possible to DDOS or the likes, on a chromebook.

submitted by /u/No-Connection7569
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How to make a file undetectable by antivirus.

I just recently got a backdoor software just to prank my friends. However I cant prank them when the file I'm about to send them is detectable by the antivirus. I need to make it seem like a pdf or something. Please someone help me.

submitted by /u/Confident-Ad-1844
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
IT Leaders Consider Security Tech a Part of Business Transformation

Security makes the top 10 list of technologies changing how organizations operate, an indicator of how information security is increasingly viewed as a strategic business initiative.

Using Yersinia to perform DHCP Starvation
https://www.reddit.com/r/Pentesting/comments/s9vmx3/using_yersinia_to_perform_dhcp_starvation/

___________________________
@hacking_Attack
@Hacking_Video

submitted by /u/Bellagio_Sampler (https://www.reddit.com/user/Bellagio_Sampler)
[link] (https://youtu.be/BkPHgUW2QY8) [comments] (https://www.reddit.com/r/Pentesting/comments/s9vmx3/using_yersinia_to_perform_dhcp_starvation/)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
HackTheBox [FORGE]

https://cdn-images-1.medium.com/max/1321/1*1LRCxwrldTK-zhkhOz7szA.png
Forge a box ranked medium on HacktheBox platform. Reconnaissance reveals there’s an upload form susceptible to Server Side Request Forgery…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Growth Hacking 101

https://cdn-images-1.medium.com/max/600/1*rmnmkAh7C-spSa0BzG125Q.jpeg
The best book for people who want to learn how to create and grow their own business.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
I've seen a few posts here of interesting ways to do some odd things just for fun so I figured I'd share one that I did a little while back.

https://github.com/go-hacks/shogun

For those that don't care to run it or look through the code, it basically sends data across a network (local machine in the example) without putting the data into the packets or using any TCP connections.

It uses 256 UDP ports to send empty packets to each corresponding byte value and the file is recreated on the other side :)

Obviously there's a ton of overhead to do this and isn't efficient at all lol

submitted by /u/SM177Y23
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
What Should I Do?

My microsoft account got hacked and whoever did it changed my email and password so I’m unable to access it. I have years of stuff on my Xbox.. Is there anyway I can get back in? Anyone willing to help?

submitted by /u/pazthawe
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Should I install Kali on a virtualbox or should I directly install it as a dualboot?

Basically which one is faster and safer?

submitted by /u/Kou_Mabucchi
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Advice on CRTP
https://www.reddit.com/r/Pentesting/comments/s9xfl0/advice_on_crtp/

I have completed my ejpt certification. Now i am planning for certified red team professional certification. You think its possible to do the cert after ejpt or i need more foundation knowledge to start crtp cert. submitted by /u/Due-Being9217 (https://www.reddit.com/user/Due-Being9217)
[link] (https://www.reddit.com/r/Pentesting/comments/s9xfl0/advice_on_crtp/) [comments] (https://www.reddit.com/r/Pentesting/comments/s9xfl0/advice_on_crtp/)

___________________________
@hacking_Attack
@Hacking_Video